Chaos Computer Club - archive feed

Wir schauen nicht zurück im Zorn, aber jetzt auch nicht grade mit Euphorie. Im CCC-Jahresrückblick präsentieren wir Euch einige der hacktivistischen Themen des vergangenen Jahres, an denen der CCC gearbeitet oder sich abgearbeitet hat. Diesmal mit schönen neuen Gesetzen, Hacker-Humor, versäumten Gerichtsterminen, bunten Blinkenlichtern und Iggy Pop. Wir haben uns wirklich das ganze Jahr bemüht, nu...

Privacy International, Agentura. Ru, the Russian secret services watchdog, and Citizen Lab have joined forces to launch a new project entitled 'Russia’s Surveillance State'. The aims of the project are to undertake research and investigation into surveillance practices in Russia, including the trade in and use of surveillance technologies, and to publicise research and investigative findings to im...

Neues Jahr, neue Fnords :-) about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5198.en.html

There are hundreds, if not thousands, of news articles and blog posts about the BlackHole Exploit Kit. Usually, each story covers only a very narrow part of the subject matter. This talk will summarize the history of the BlackHole Exploit Kit into one easy to follow story. There will be diagrams and flow-charts for explaining code, rather than a giant blob of illegible Javascript, PHP, or x86 Asse...

With Visa and Mastercard pushing for EMV (http://www.emvco.com, aka “chip and pin”) rollout in the United States, the uptake of contactless payment and the use of mobile NFC wallets, the chipcard security community will soon be getting more eyes to analyze the protocols in use with chip and contactless credit card transactions. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5...

Was bedeutet das Zeitalter offener Designs für die Sicherheit von Schlössern? Zum Beispiel solchen, die auf eine geringe Verbreitung eines Schlüssels setzen? Ein Beispiel sind die sogenannten Hochsicherheitsversionen von Polizeihandschellen. Der Talk zeigt was (und wie) sich in diesem Bereich mit Lasercuttern und 3D Druckern erreichen lässt - sowie welche komplexeren Angriffsziele noch warten. Als...

This talk will go into some of challenges, solutions, and stories from securing a campaign for the 2012 US presidential election. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5177.en.html

There's about 100 top-level domains signed with DNSSEC and .nl recently hit 1M second-level domains. At this occasion, we take a look at the goods and the bads of DNSSEC deployment, including amplification attacks, Zensursula-like DNS redirects, China DNS injection and NASA key rollover mistakes. We will find out what DNSCurve and Namecoin promise to make better and what Zooko's triangle has all t...

Wir sehen in der digitalen Technik großes Potential zur Demokratisierung und Befreiung der Menschen. Doch machen wir uns nichts vor. Technik kann genausogut der Entmündigung von Menschen dienen. Je komplexer sie wird, desto mehr sind wir von Vereinfachung abhängig und desto weniger Einfluss können wir selber auf die Technik nehmen. about this event: http://events.ccc.de/congress/2012/Fahrplan/even...

The lecture would address topics related to reverse engineering for mobile platforms, especially from the Android point of view. The main aspects of the presentation is a new approach to reverse engineering side effects problem: some low footprint inspection techniques that grant analysts with the ability to access the program memory without altering its behavior. One technique is presented in par...

Have you ever been staring for nights at binary or hexadecimal data flows extracted from an USB channel? Don't you remember yourself searching for some patterns and similarities in this fuc***g mess of zeros and ones grabbed from a binary configuration file? How long did it take you to find an 16 bits decimal size field last time you reversed an IPC communication protocol? Did you know you were no...

Unsichere Studierenden- und Mensakarten. Eine wissenschaftliche Auswertung. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5285.en.html

We're winning! The future looks like network politics! Wait, what the hell are network politics and how do they work? Is that like the Pirate Party, or the IETF, or Anonymous? about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5305.en.html

CVE-2011-3402 is well known as the Windows Kernel TrueType [Font] 0-day used in the "Duqu" attack(s). Recently this exploit has begun to appear in several crimeware exploit kits... Actually, not merely just the exploit, but the *entire* font file used by Duqu, now being harnessed to infect a large population with malware. This talk will mostly be an extremely low-level walk-through of the font pro...

In this talk we will survey some 30 recent attacks on the Russian GOST block cipher. Background: GOST cipher is the official encryption standard of the Russian federation, and also has special versions for the most important Russian banks. Until 2012 there was no attack on GOST when it is used in encryption with random keys. I have developed more than 30 different academic attacks on GOST the fast...

Stabilitätsanker & Wachstumslokomotive geben als politische Metaphern ungewollt Auskunft über das Ausmaß der europäischen Wirtschafts- und Finanzkrise. Wie kommt so ein Begriff in Verkehr? Wer gebraucht ihn? Zu welchem Zweck? Was fördert die Analyse der Metaphern zutage? about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5378.en.html

Recently, several research papers in the area of computer security were published that may or may not be considered unethical. Looking at these borderline cases is relevant as today’s research papers will influence how young researchers conduct their research. In our talk we address various cases and papers and highlight emerging issues for ethic committees, internal review boards (IRBs) and senio...

The Security Assertion Markup Language (SAML) is a widely adopted language for making security statements about subjects. It is a critical component for the development of federated identity deployments and Single Sign-On scenarios. In order to protect integrity and authenticity of the exchanged SAML assertions, the XML Signature standard is applied. However, the signature verification algorithm i...

Weltbilder der Informatik sind in mancher Hinsicht denen in der Hacker- und Hackerinnen-Community nicht unähnlich. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5396.en.html

In the last years, mobile security and specifically GSM has been attacked in many different ways. It was demonstrated how to sniff and crack traffic, how to impersonate a subscriber by placing a fake call and the general security characteristics of this mobile protocol stack have been evaluated. In this presentation, we will check out a part of the protocol procedures that hasn't been looked at ye...

This presentation will cover a demonstration of the new version of the Canape protocol analysis tool being released for Ruxcon. During the course of the presentation various attack scenarios against the VMWare ESXi binary protocol will be demonstrated using Canape. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5104.en.html

Meldegesetz und der erfolgreiche Protest dagegen. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5289.en.html

RSA is the dominant public-key cryptosystem on the Internet. This talk will explain the state of the art in techniques for the attacker to figure out your secret RSA keys. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5275.en.html

Hackers are a high-risk population. This talk will provide hackers with tools to reduce the risk to themselves and their communities using harm reduction methodology. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5024.en.html

about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5309.en.html