Chaos Computer Club - archive feed

In this presentation, we describe novel high-impact user interface attacks on Android-based mobile devices, additionally focusing on showcasing the possible mitigation techniques for such attacks. about this event: https://sigint.ccc.de/schedule/events/5059.html

Ruby is an interpreted, dynamic and fully object-oriented programming language. In the past few years the language became more and more popular. Due to the dynamic nature of the language there are a lot of possibilities to leverage the language itself. Some of those possibilities are very useful and some are to be avoided. Nevertheless both are a lot of fun. We want to present some of those useful...

Cryptocat's (https://crypto.cat) mission to make open source encrypted chat accessible to the masses has been successful — but what are the technical dangers and limitations? What are the social repercussions? I'd like to discuss how leading an open encrypted chat platform to 50,000+ users in a single year has resulted in crazy and new problems that we need to consider if we want to make crypto mo...

Wie bauen Freifunker offene Netze? Seit 10 Jahren treibt freifunk.net den Aufbau offener und freier Wireless-LAN Netze voran. Viele Communities überzeugen Freunde, Vereine und Unternehmen am Netz teilzunehmen. Mit verschiedenen Strategien begegnen sie Vorbehalten, rechtlichen Unsicherheiten und Fragen. about this event: https://sigint.ccc.de/schedule/events/5100.html

Warum Algorithmen rassistisch sein können, OperateurInnen Teil des Automatismus werden und Face-Blurring nicht hilft. about this event: https://sigint.ccc.de/schedule/events/5053.html

Internet-Meme sind Populär-Kultur unter Bedingungen des Netzes. Wir stellen ihre Entwicklung vor und erläutern den aktuellen Forschungsstand anhand konkreter Arbeiten. about this event: https://sigint.ccc.de/schedule/events/5084.html

Datenschutz und Persönlichkeitsrechte stehen der Informations- und Pressefreiheit und der Aufgabe der Medien als „Wachhunde der Öffentlichkeit" gegenüber. Die Rechtsprechung stellt die „praktische Konkordanz" der widerstreitenden Grundrechte her. Das Pendel schlägt in der jüngsten Rechtsprechung zugunsten der Information aus. about this event: https://sigint.ccc.de/schedule/events/5121.html

The vulnerable nature of Web applications was found out to apply even to security conferences. about this event: https://sigint.ccc.de/schedule/events/5107.html

The majority of VMware Cloud deployments rely on Cisco virtual and physical switching and routing gear for the network layer. We will provide an introduction into the differences virtual networking makes, how to go about researching its components, as well as cover a number of issues, their exploitation path and some creative workarounds. about this event: https://sigint.ccc.de/schedule/events/511...

TBD about this event: https://sigint.ccc.de/schedule/events/5060.html

about this event: https://sigint.ccc.de/schedule/events/5089.html

In order to investigate the effects of weightlessness on cells, organisms, material, computer systems etc., it is desirable to achieve this condition by Earth-bound devices, since space missions are extremely costly and rarely to obtain. A simple but very effective method is to perform a parabolic flight. Here, the acceleration of the aircraft – flying a parabola - in outward direction compensates...

Der Vortrag zeigt praxisnah die komplette "Eigenherstellung" der deutschen Briefwahlunterlagen, inklusive der Stimmzettel, Wahlscheine, Stimmzettel- und Wahlbriefumschläge. Durch die Abschaffung fast aller Sicherungsmerkmale der Briefwahl wäre so ein Wahlbetrug nicht mehr zu erkennen. about this event: https://sigint.ccc.de/schedule/events/5104.html

about this event: https://sigint.ccc.de/schedule/events/5093.html

Die deutsche Netz- und Hackerszene zerstreitet sich bei jeder Gelegenheit und zu allen möglichen Themen. Ich glaube, den strukturellen Ursachen dieser Streits auf den Grund gehen zu können. about this event: https://sigint.ccc.de/schedule/events/5049.html

Car manufacturers nicely illustrate what _not_ to do in cryptography. about this event: https://sigint.ccc.de/schedule/events/5034.html

Learning to program an FPGA is time consuming. Not just do you need to download and install 20gb of vendor tools, but you also need to wrap your brain around the strange ideas of hardware description languages like VHDL. PSHDL aims to ease the learning curve significantly and provide more people with the ability to program FPGAs. about this event: https://sigint.ccc.de/schedule/events/5033.html

A harddisk with millions of documents with the potential to change and influence a whole industry. This about the how and the why. How we analyzed and used the OSL-Data and why so little from so many information was released. And it is not a conspiracy. Or is it? about this event: https://sigint.ccc.de/schedule/events/5044.html

For years, the Electronic Frontier Foundation has been fighting against secret dragnet surveillance by the United States’ National Security Agency. This talk reviews what we know about the NSA’s spying programs and discusses the path forward to stopping reining in the spying – from the courtroom to Washington DC. We’ll talk specifically about the grassroots tactics that activists are using and the...

Funkzellenabfragen sind "offensichtlich zum alltäglichen Ermittlungsinstrument geworden, das routinemäßig und ohne hinreichende Beachtung der gesetzlichen Vorgaben eingesetzt wird." (Berliner Datenschutzbeauftragter Dix) about this event: https://sigint.ccc.de/schedule/events/5062.html

Are you still ignoring the WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! messages? Do you use “ssh -o StrictHostkeyChecking=no -o UserKnownHostsFile=/dev/null” to make SSH connections? How can you trust SSH keys in an environment where you install 10 new servers every day? Many How-Tos and articles talk about SSH security but fail to put SSH security into the context of managing large data cent...

Das Vorstellungsgespräch einmal anders! Das kennen wir alle - die Nacht schlecht geschlafen, bei der Anreise im Stau gestanden, dann der merkwürdige Personalchef beim Interview - das marternder Gefühl, beim Bewerbergespräch nicht gut angekommen zu sein. Das Interview aus der Sicht eines Personalen. Alles rund um die Bewerbung. Ein Dialog. Über den Autor Christof Müller: - study economics - more th...

Seit der Veröffentlichung des ersten Android SDKs vor 5 Jahren hat sich die Entwicklung von Android-Anwendungen erheblich vereinfacht. Nicht nur die Android-API ist erwachsen geworden, auch Tools haben sich etabliert. Insbesondere sind viele Open-Source-Bibliotheken entstanden, die Quasi-Standardfunktionalität zur Verfügung stellen. Dieser Vortrag stellt sie vor und diskutiert, wie sie das Leben d...

n this talk we will talk about the design decisions behind YADT and how it helps reduce the complexity of your datacenter infrastructrure while at the same time enabling you to fully automate almost all of it. YADT - an Augmented Deployment Tool is a next generation data center deployment and system management tool. It consists of two central components: Firstly, a central management of dependenci...

Yum repositories are the foundation of every RHEL-/CentOS-based data center, but do they scale? The new open source Yum Repo Server uses a GridFS/MongoDB cluster to achieve scalability, reliability and frequent updates for Yum repositories. Do you still use rsync jobs and createrepo? In frequently updated Yum repositories createrepo limits the update rate because it stores metadata on disk without...