Chaos Computer Club - archive feed

This talk is about setting up mobile fermentation education centers for experimental fermentation as well as means of legal production and vending points of fermented and other products at a variety of events and places. After a decade of fermenting around the world I have come to the conclusion that having mobile bases, where kvasirs (brewers, fermentors) can do what they love and legally make th...

A lecture about the brain as electrical Input Output system (the What the Hack logo would fit nice). But also other body parts as eyes and muscles will pass the revue. Debunking some myths on the way. This would be for all hackers that dream about connecting computer processing power to themselves. For most of them this dream will be joyfully shattered, but some might become enthusiastic. #Making...

You’ve designed and implemented the perfect protocol to keep your target users private and secure. Come make sure that it will be used effectively by real users. In this workshop, you’ll learn the basics of evaluating and improving usability. You’ll gain practical skills in applying usability guidelines, and in designing and carrying out user studies. Your project will become more intuitive and pr...

Most of our data is held in a fuzzy uncontrollable manner. We propose a totally different solution, a new paradigm in thinking about your data. In this paradigm you know where your data is, you are in control and data losses are a thing of the past. This presentation will introduce the personal locker. A technical reference (and device) that allows you to actually own and control your data. Big da...

All those shiny cloud services sound tempting, but unfortunately they might mean giving up your private information to someone else. But with modern hardware and crypto, you can have your cake and eat it, too. How does searchable encryption work? What can oblivious RAM protect you from? Where do secure enclaves like Intel SGX shine, and where do they fail? We'll give an overview of how the latest...

Privacy-minded charities have a hard time going up against silicon valley's army of corporate lawyers. Digital rights are becoming increasingly important in society, but politicians fail to come up with answers. Across the world law after law is being passed, eroding our civil liberties. Ancilla has been fighting to keep our digital rights for the past 5 years. At SHA she will share her lessons an...

In this talk I describe my journey into reverse engineering parts of MikroTik system to gain access to hardware features and the shell behind the RouterOS that has no “ls”. #NetworkSecurity #DeviceSecurity about this event: https://c3voc.de

Talk by Henk (waag Society) and Evelyn Austin (Bits of Freedom). Cryptokids does just that. In a collaboration with Waag Society, Bits of Freedom and Network Democracy, we develop a series of lessons for kids aged ten to fourteen, in which they gain insight into the technical structure of the Internet, how data works, who is actually in charge online and why privacy matters. But more importantly,...

I'd like to discuss with your my experience with hormones and perceived hysteric behaviour and moments one feels extra vulnerable. I have researched this topic for several years and would like to share my experience with you, including the most recent scientific research. One time asked the internet "Why am I such a Bitch?" .. so my quest started.. Because depression, mega reactions, feeling-the-w...

Standards bodies, infrastructure providers, internet governance organizations and operators are getting more attention nowadays, but how are these institutions impacting human rights? In this talk we'll introduce you to the slippery acronym world of the IETF, ICANN, IEEE, ITU, 3GPP, RFCs, IXPs, RIRs and we promise you won't be bored! We'll try tot uncover parts that are crucial for what is (im)pos...

There has been much development in recent years on vulnerability disclosure. The Netherlands has taken the lead in 2013 by publishing an official guideline for "Responsible Disclosure". Since then much has happened, other countries have shown an interest and there is even a (free!) ISO standard on Coordinated Vulnerability Disclosure. In this talk I'll summarise the global developments and explain...

In this talk I'll present my findings when researching the security of the Dutch voting system. I quickly found various important security mistakes which would made it very easy to tamper with the results. Based on my research the Dutch government dumped the voting software. #NetworkSecurity #DeviceSecurity about this event: https://c3voc.de

For the protection of (critical) infrastructures against complex virus attacks, deep packet inspection is unavoidable. In our project SpySpot we are developing new tools and techniques to assist analysts in gaining insight and reverse engineering WireShark PCAP files. In this talk we present and demo a new data visualization system Eventpad to study PCAP traffic by visualizing patterns according t...

How to modify the speed of audio without altering its pitch ? #Making about this event: https://c3voc.de

Of course we will need security - but maybe not in the way we've 'always' done it. In this session we will explore whether a lot of what we consider to be part of security’s tasks, actually requires a separate organisation. #NetworkSecurity #PhysicalSecurity #DeviceSecurity about this event: https://c3voc.de

In late 2016 a TR-064 (LAN-side CPE management) misconfiguration in a wide range of CPE devices was disclosed that allowed for remote device takeover. Within days, botnets began exploiting a related command injection issue, leading to widespread internet outages for customers of certain ISP's in the UK and abroad. This talk will explore the impacts of these issues, along with taking a look at some...

The pretty Easy privacy (p≡p) project has the primary goal to make encryption accessible to the masses. By experience, the initiators know from CryptoPartys that regular users -- even after getting everything explained (e.g., basics of public key cryptography) -- continue to be unable to communicate in private on a regular basis in practice. That's where p≡p jumps in: instead of just providing goo...

You’re trying to turn on https for your site for the first time. You have a certificate, but are sick of renewing it. You’ve set it up before, but now you’ve grown and want a more advanced setup. Or, you don’t need help but want to understand some of the finer points of certificate theory, use, and management. Come to Certbot & Let's Encrypt office hours to talk with Certbot developers and fellow...

Today’s tech companies have enormous power over what we can access and share, and the input we—as users and citizens—have the ability to provide is minimal. Increasingly, algorithms are being deployed to control how information is delivered to us, as well as for the purpose of moderating user-generated content. These algorithms are proprietary, created by human beings at companies that fail on nea...

Ever wonder where your malware ends up after you deploy it? Are you curious how the United States Government researches Cyber Security on the backs of students? First, this is not a technical talk. This is an informative talk on the insides of how the inner workings of an Information Security Lab in one of the Top Technical Universities in the United States works with its Government to provide ins...

Making physical games requires a unique knack for creating robust systems. In this talk, Phoenix Perry will share some common strategies for developing DIY artists driven systems which can last through thousands of users and interactions in a museum and installation context. #gaming #hardwarehacking about this event: https://c3voc.de

All the pieces to make encryption easy, secure and anonymous are in widespread use. Only we're not using them properly, making it difficult for the users. In this talk, Guido will show what benefits can be gained by using existing cryptographic protocols in a slightly different configuration. Doing so makes authentication easy, community building possible and truly private messaging between strang...

Developments in the last few years have shown that computing can no longer be considered neutral or without morals. Most kinds of programs or services have some hidden or implicit morals in them. Especially when things are published at the Internet scale, you see clashes in what is considered morally acceptable. There have been several examples of this in the past few years: Facebook and its emoti...

In the age of corporate surveillance, invasive ad-driven business models and lucrative zero-days, it is no surprise that the words “profitable business” can sound destructive to internet freedom and human rights. However, if we want to change this trend and have a lasting impact, we need to make sure we can build profitable businesses on privacy-friendly and open source technologies, that respect...

We have entered the era of President Trump. Activists, NGOs, and charities thus need to reexamine the stability of (and motives behind) their funding sources. Surprisingly, business is an excellent tool that one can leverage to change the system. While business is not perceived as sexy by most activist-types, this talk will explain why social enterprises are tactical, lightweight, independent, eff...