Chaos Computer Club - archive feed

From thieves to prison breaks to secret tools, the murky world of the criminal locksmith is explored. It will not be a practical lesson in theft (sorry). #PhysicalSecurity about this event: https://c3voc.de

Car security is, not surprisingly, a hot topic; after all they are fast and heavy computer controlled machinery that nowadays come with all kinds of internet connectivity. So we decided to have a look at it. In our presentation, we’ll first cover some theory behind the IT-part of car architecture. We’ll discuss attack vectors and their likelihood of success, and then discuss the various vulnerabil...

This talk focuses on the thesis assignment of Willem Westerhof. During this thesis it was discovered that a weak spot exists withing the Powergrid, allowing an attacker to perform a distributed attack using PV-installations to cause massive (nation-wide/continental) power outages. #NetworkSecurity #PhysicalSecurity about this event: https://c3voc.de

Converting ambient energy into electrical energy to power wireless autonomous devices instead of batteries opens up a variety of opportunities to design electronic systems that last a life time, and don't ever need maintenance. This talk discusses the state of the art in energy harvesting, focusing on light, heat, and vibrations, and elaborating new storage media such as solid state cells and supe...

Many of the things we use on a daily basis are becoming smart and connected. The Internet of Things (IoT) will improve our lives by helping us reach our fitness goals, reduce resource consumption, increasing productivity, and track and secure our assets. Many embedded developers realize the potential benefits of the IoT and are actively developing various applications, from connected home devices...

The talk aims to be an introduction to LED lighting, how to create lighting hardware, what regulations and protocols are involved and how lighting can generally improve human wellbeing. #Society #Making #PhysicalSecurity about this event: https://c3voc.de

In which we experiment with generative music, based on chaotic systems and cellular automata. Continuous sounds will be made using discrete systems, and discrete sounds will be made using continuous systems. #Making about this event: https://c3voc.de

FLOSS seems to be a natural choice for NGOs and not formalized entities (groups of activists, etc) -- evading vendor lock-in, harder to place a back-door, community support, and no licensing costs. And yet many NGOs continue to use closed-source software, even in areas where FLOSS tools are available and considered stable. Reasons are many; one of them can be tracked to papercuts -- small, annoyin...

From 2005 to 2010 I spent my time hopping freight trains all over the United States and Canada. With over 250,000km of railways in the U.S and Canada security is a huge task. With so much space to cover there are many opportunities to enter and ride the trains that move along the North American railways. This talk will cover some of the basics of doing so as well as the legal implications of these...

Centralized services enable mass surveillance, control and censorship. Decentralization on the other hand can be laborious. The Sovereign project makes it easy to run your own dirt-cheap dedicated server for mail and many other services. #Making about this event: https://c3voc.de

We present “olmogo”, a novel cryptographic, distributed data storage system and end user application that could – within a single platform – replace today’s cloud storage, messaging / chat and social networks with a cryptographically secure alternative in which users can trustfully share their data while the infrastructure itself has no access to the content. #Privacy #NetworkSecurity about this e...

I have made several diesel powered motorcycles and this is a simple talk or walk through of all the things I had to consider and things I had to do to complete the project. #Making about this event: https://c3voc.de

For SHA2017, Off zz will present a two part music concert of piano and live coding. In the first part, we will present “Code Our Glance”: a 30min musical journey where the audience influences the performance through an interactive web-application. The second part will feature the beta version of the CodeKlavier: a new project in which a pianist is able to code through playing the piano. #Making ab...

In this talk I will show positive and negative examples of how laws can influence the security of infrastructures and society for the good and the bad. Without proper attention for lawmakers, security teams, service providers and security researchers could be positively or negatively influenced in their work. #Legal #Politics about this event: https://c3voc.de

What do you get when you cross cybersecurity themes with the mindset and the discipline of martial arts? You get the Zanshin Tech. Zanshin Tech is a digital martial art focusing on the digital aggression and teaching how to use mind and technology to avoid, solve or stop the conflict. Through continuous practice, both youth and adults learn how to identify and manage Cyberbullying, Child enticemen...

In 2016, the VUSec system security group from Vrije Universiteit Amsterdam published three top-notch research papers on the topic of Rowhammer exploitation, leading to international media attention and even a prestigious PWNIE award. In this talk, we present key concepts of our research and provide an introduction to Rowhammer exploitation to the public. We describe how attackers can use the Flip...

In the world of the "internet of shit" - where it's not just our computers and phones that gather data about you but also your cars, your pacemaker, the toys you children play with and your fridge among many others - the dramatic growth in data collection has led to a loss of control over data. Who owns the data? How is it processed and collected? And more importantly how is it used to make decisi...

Dutch police officially started using bodycams eight years ago – although the oldest sightings of Dutch police officers outfitted with a ‘bobbycam’ date back twenty years. Such camera’s are another tool of surveillance, unless there is a solid policy governing their use. Of course, at the time of writing this summary, this policy is lacking. In this talk I’ll give an overview of the use of bodycam...

Over the past year multiple people have been engaging language maintainers and designers to change their use of CSPRNGs (mainly relying on user-land RNGs like the one from OpenSSL, and sometimes suggesting "adding entropy" by various means from user-land daemons like haveged). In this short presentation we'll survey the struggle of cryptographers, developers and security engineers to change the pa...

This presentation will explain in detail how the tor network can grow with a minimum of effort. It will also zoom in on the problem of centralisation and how we can evade it and still make the network grow even larger. I'll try to explain to you how you can do this with configuration management. Even the smallest of organisations can use this way to expand the network and to allow us to browse the...

Qt meets Python and allow you to create a GUI in few minutes. So we will show how this works while live coding. #Software about this event: https://c3voc.de

In this talk we look at The World in 24 Hours, an early computer network art performance from 1982, which took place between 13 different cities around the world in the messaging system of the computer time-sharing, consulting and services firm IP Sharp. Canadian artist and initiator Robert Adrian wanted to explore the way culture can live in computer networks. The recent interest in saving and re...

Firefox has amazing dev tools that support the last technologies but they can used also with other browser and nodejs. #Software about this event: https://c3voc.de

about this event: https://c3voc.de

More and more (secure) embedded systems implement a feature to assure the integrity and confidentiality of all software executed after power-on reset, commonly referred to as secure boot. When not logically flawed, other attack techniques must be used to bypass the provided security. Such an attack technique is fault injection. #DeviceSecurity about this event: https://c3voc.de