Chaos Computer Club - archive feed

The largest and the highest energy scientific device - the Large Hadron Collider (LHC) is currently in operation at CERN. This machine is unique in many respects: - It is the most powerful microscope, which can probe the distance one million times smaller than the size of the proton - It can reproduce conditions of the hot Early Universe with the temperature billion times higher than in the core o...

AutoYaST is the main method for installing openSUSE Linux in enterprise environments. Although it is usual for AutoYaST to get new features and fixes with every minor release, openSUSE Leap 15.3 was special in that regard. Thanks to the "Modernizing AutoYaST" initiative, we introduced relevant features like ERB templates, better validation tools, etc. However, we have found that many of these feat...

We take a scenic tour through the origins of the UK train ticket, from the original BR specification in the 1980s through to modern replacements like mTickets, eTickets and ITSO. This is just a detour though, and we'll focus on the 'orange ticket' (RSP 9399/9599) - which continues to be a stalwart of the UK rail network. Surely they can't be that secure? After all, anyone can encode a magstripe -...

My experiences over the last 2-4 months learning to update packages in openSUSE. Starting around the middle of March 2022, I began learning to update packages with OBS. This lightening talk with highlight my experiences since then learning to package. My experiences over the last 2-4 months learning to update packages in openSUSE. Starting around the middle of March 2022, I began learning to updat...

Ask your questions about the new Adaptable Linux Platform. This will be a discussion format with the ALP steering committee. Get all the answers about the next generation product line in this open format discussion. Ask your questions about the new Adaptable Linux Platform. This will be a discussion format with the ALP steering committee. Get all the answers about the next generation product line...

The development model for the classic release distribution of openSUSE - Leap - has changed several times. Currently it shares the binaries with SUSE SLE. This has advantages, but as well limitations. The talk explains how the development model has evolved and its current pitfalls. In the second part we will introduce the Adaptable Linux Platform (ALP) and discuss the current state of development...

Last year, I ported [oreboot](https://github.com/oreboot) to the Allwinner D1 SoC that is found on the Nezha SBC and many other boards now. For a boot loader environment, I chose to embed [LinuxBoot](https://linuxboot.org), and then partitioned an SD card with two root filesystems for testing: OpenWrt, which is small and just ran right away, and openSUSE, which required some extra effort. I was ha...

DNS is at the heart of the network. Without it, we are hopelessly lost. We can't even google for it. It allows us humans to map the network into the human domain and vice-versa. Yet we ignore it as unimportant part of network security fabric and allow individual unnamed corporation to control over 20% the internet lookups, because they are not evil. This presentation should serve as a quick survey...

centre is a simple Go program (github.com/https://github.com/Harvey-OS/go/tree/main/cmd/centre), which runs as a daemon or interactive program and lets you manage all your IoT devices with one file -- formatted like /etc/hosts. centre was originally written for Plan 9 networks, but is becoming widely used for many other Oses. Like many of us, I have a house full of IoT and server systems, some run...

Spring Forward, Fall Back... but why? Take a trip from Railway Time to the Olson database, as we explore the strange history of Time Zones and Daylight Saving Time. about this event: https://c3voc.de

You're shopping for new hardware, but you're not sure if it will be supported by openSUSE? This talk explains some basics on how hardware support works and what ways you have to find out if your hardware is supported or not. After 17 years of Linux hardware compatibility testing and hardware certification I can tell some good advice. You're shopping for new hardware, but you're not sure if it will...

The ceremony in which we open the event about this event: https://c3voc.de

Seit Jahren fliehen Menschen aus Krisen- und Kriegsregionen über die sogenannte Balkanroute, auf der Suche nach einem sicheren Ort zum Leben. People on the Move stecken, im bosnischen Grenzkanton Una-Sana, in einer „Sackgasse“, weil die kroatische Polizei systematisch gewaltvolle Pushbacks, also illegale Rückführungen aus Kroatien nach Bosnien, durchführt. Diese rechtswidrige, unmenschliche Praxis...

At SUSE, and openSUSE we have short feedback loops to ensure compliance with a range of certifications, but our tools can have real world impact beyond the physical barriers, I will talk about how openQA can support operations in Healthcare, Manufacturing, Automotive, Edge, Transportation, and Elections. At SUSE, and openSUSE we have short feedback loops to ensure compliance with a range of certif...

In this talk I'm gonna talk about how we use self hosted and open source solutions at school. In this talk I'm gonna talk about how we use self hosted and open source solutions at school. about this event: https://c3voc.de

As the world moves to using machine learning more and more, a question arises of how to prevent cyber criminals from attacking systems using ML frameworks. In this talk, we will cover why machine learning needs security practices and how we develop TensorFlow to be secure. We will discuss topics such as fuzzing and code transformations for secure software development with a focus on how these are...

This talk will introduce the SUSE Product Security team, who handles the software security processes for openSUSE and also SUSE Linux Enterprise. The SUSE Product Security work is split into "reactive" and "proactive" areas and engineering groups these days. Reactive work refering to what is traditionally known as "security incident response", while proactive refers to security audits, design revi...

warewulf4 is a rewrite of the well known warewulf cluster management tool in golang. With this new iteration its possible to leverage the possibilities which emerged with broad use of containers. The origins of warewulf4 is the hpcng community which is/was also behind projects like Apptainer (former known as Singularity), Centos and Rocky linux. A basic setup of a HPC cluster and the key concept o...

Recently MicroOS can be installed with remote attestation, using the TPM as a root of trust and Keylime as a service to report and verify the status of our systems. In this talk we will see what is a TPM, how Keylime can be installed in MicroOS and used to monitor the health of our system in production and what to do when we detect a compromised system. Recently MicroOS can be installed with remot...

The SUSE QE Tools Team - Who we are and what we are doing. This talk will give an overview of who is the SUSE QE Tools team, what is in our responsibility, what we did in the past time and what we do. The products that we care about will be presented and the workflows of the team will be shown. Opportunities for contributions will be discussed. https://v.gd/okurz_osc22 The SUSE QE Tools Team - Who...

The SLE Base Container Images (BCI) want to create a flexible developer experience that provides, integrates with, and supports language native tools and workflows by offering a self-contained environment targeting a specific version of any given programming language ecosystem to facilitate software development, testing and deployment.​ These images are meant to run on any Linux and K8s distributi...

General security recommendations for openSUSE developers. This includes specific recommendations on how to package software in a more secure ways and how to create a developer setup that is secure. For this we will shed some light on the specific challenges and quirks of the tool chains we use and how they relate to security. General security recommendations for openSUSE developers. This includes...

The way how we build openSUSE Leap has changed, so did the way how we report issues against it. This lightning talk will show you how to correctly report bugs for openSUSE Leap. https://en.opensuse.org/openSUSE:Submitting_bug_reports The way how we build openSUSE Leap has changed, so did the way how we report issues against it. This lightning talk will show you how to correctly report bugs for ope...

Whats up with openSUSEway? Current status. Sharing the results of running openSUSEway/sway on openSUSE MicroOS Desktop and Fedora. https://denisok.github.io/oSC/oSC22-openSUSEway.html Whats up with openSUSEway? Current status. Sharing the results of running openSUSEway/sway on openSUSE MicroOS Desktop and Fedora. https://denisok.github.io/oSC/oSC22-openSUSEway.html about this event: https://c3voc....

This talk is the annual review of openSUSE on Arm, mainly focused on AArch64, but it will also cover armv7 and armv6. At the end, we will have a quick look at the future and where the community could help. This talk is the annual review of openSUSE on Arm, mainly focused on AArch64, but it will also cover armv7 and armv6. At the end, we will have a quick look at the future and where the community...