Chaos Computer Club - archive feed

You might remember Tamagotchi virtual pets from the 1990's. These toys are still around and just as demanding as ever! This talk covers my attempts to hack the latest Tamagotchis. Starting with the IR interface, and moving down into the hardware, this presentation will discuss techniques for reverse engineering a device with limited inputs, computing power and debugging capabilities. about this ev...

This talk will give an overview on the technology, the laws and the technical guidelines of the smartMeter roll-out in Germany. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5239.en.html

Hypertext Transfer Protocol Secure (HTTPS) has evolved into the de facto standard for secure web browsing. But in the security community, it has long been known that HTTPS is fundamentally broken, and this has been confirmed by alarming hacks and security breaches at several Certificate Authorities (CAs). To tackle the global collapse of trust in these central mediators of HTTPS communications and...

Wir wissen seit ein paar Jahren, dass der Staat technisch in der Lage ist, die Computer einiger seiner Bürger zu infiltrieren. Aber soll er das auch dürfen? Was hat sich in den letzten Monaten beim Staatstrojaner getan? about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5380.en.html

In the last years, mobile security and specifically GSM has been attacked in many different ways. It was demonstrated how to sniff and crack traffic, how to impersonate a subscriber by placing a fake call and the general security characteristics of this mobile protocol stack have been evaluated. In this presentation, we will check out a part of the protocol procedures that hasn't been looked at ye...

We know, that cooking is an art. Selecting the ingredients, carefully washing, pealing and cutting them before you put them into the right dish at the right time with the right heat. Watching the food change his color, form and consistency, seasoning it to develop it's flavors and serving it on beautiful plates is a pleasure. For some, but not for all. Those who love cooking can spend hours at the...

This is fun stuff for the late night program, not a serious talk: Is it possible to read sb. others mind? In the late 1920ies/early 1930ies Berlin was excited by the famous mindreader and fortune-teller Erik Jan Hanussen who performed his strange abilities on stage. His act was so convincing that leading nazis believed in his powers and wanted him for advice – until they decided to murder him. abo...

Aside from further development of traditional forensic techniques which involve post-mortem hard disk analysis, in the last couple of years the field of computer forensics has been marked by significant development of live forensic techniques and tools. Memory forensics is composed of two main activities: memory aquisition/capture and analysis. This presentation will give an overview of the memory...

Die Debatte um die Tarifreform der GEMA war eines der großen Themen des Jahres 2012: Die Verwertungsgesellschaft geriet quer durch alle politischen Lager und gesellschaftlichen Schichten in die Kritik, die Warnungen vor einem großen Clubsterben wurden von Tausenden auf die Straße getragen. Dies steigerte auch das Interesse an der »Cultural Commons Collecting Society« (C3S), einem Graswurzelprojekt...

In the Free City of Hamburg, which is one of 16 German states, a coalition of hackers, activists and other players of civil society have drafted the most revolutionary Freedom of information law in the world. The law obliges the state to proactively publish all important public information (such as contracts, studies, construction permits) in an OpenData format on the Internet. After the start of...

The triple meltdown of the Fukushima Dai-Ichi nuclear power plant in March last year and the release of radioactive material that has ensued have left a good part of Northern Japan contaminated with unknown amount of radioactivity. An outstanding lack of transparency from both the government and the power utility then resulted in a near total lack of information concerning the levels of radiation...

about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5316.en.html

Hardware-basierte Festplattenvollverschlüsselungen in Form sogenannter SEDs (Self-Encrypting Drives) werden gemeinhin als sichere und performante Alternative zu Software-basierter Verschlüsselung wie BitLocker und TrueCrypt gesehen. Während der Performance-Gewinn und die Benutzerfreundlichkeit von SEDs, bspw. Intel's SSD 320 bzw. SSD 520, außer Frage stehen, ist der Sicherheits-Gewinn deutlich ger...

Don't call us if your campaign does not work! And worse, everyone's been harassed or arrested. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5390.en.html

Sechs Jahre nach seinem Inkrafttreten wurde das Informationsfreiheitsgesetz (IFG) des Bundes für den Deutschen Bundestag evaluiert. Auch aus einzelnen Bundesländern liegen zwischenzeitlich wissenschaftlich untermauerte Erkenntnisse zum Stand oder Nichtstand der Informationsfreiheit in Deutschland vor. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5368.en.html

In 1791, the political reformer Jeremy Bentham theorized the Panopticon, whose design promised to allow a single Inspector to surveil (exercise "inspective force" over) large numbers of criminals or workers. In recent years, the advent of a suitable technical apparatus – CCTV, ISP taps (network traffic interception), data banks, and so on – has extended the proposed 30m circumference of Bentham’s...

Mit RFID-Lesegeräten Menschen tracken - keine Zukunftsvision. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5282.en.html

Der Betrieb von WLAN-Funk-Netzen und auch von offenen oder freien Netzen ist heute weit verbreitet und Teil der Diskussion um die "Cultures of Sharing". Der Vortrag soll die Grundlagen der Haftung für offene Netze und die Entwicklung der Rechtsprechung vom Landgericht Hamburg ("gestern") zum BGH-Urteil "Sommer unseres Lebens" und den Einfluss aktueller Rechtsprechung des Europäischen Gerichtshofs,...

At the very beginning, Tor was just a socks proxy that protected the origin and/or destination of your TCP flows. Now the broader Tor ecosystem includes a diverse set of projects -- browser extensions to patch Firefox and Thunderbird's privacy issues, Tor controller libraries to let you interface with the Tor client in your favorite language, network scanners to measure relay performance and look...

Polish government decided in favour of open-licensed e-textbooks. This is not to liking of big textbook publishers, reaping in profits hand over fist. While their black PR campaign focuses on technicalities, it seems obvious that their real beef is with the liberal licensing. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5203.en.html

An approach to the problem of fuzzing proprietary protocols will be shown, focusing on network protocols and native software. In the course of this talk I will combine several methods in order to force the client software to work as a “double agent” against the server. about this event: http://events.ccc.de/congress/2012/Fahrplan/events/5219.en.html

The current European data protection directive is from 1995, which was when the internet had not hit Brussels' decision-makers yet. Now, 17 years later, it is being completely re-writen. Will it meet the challenges of the age of big data? Will it have any effect on non-EU data hoarders? How will it deal with user-generated consent? What is this strange new "right to be forgotten"? And what about p...

We discuss a set of 0-day kernel vulnerabilities in CNU (Cisco Native Unix), the operating system that powers all Cisco TNP IP phones. We demonstrate the reliable exploitation of all Cisco TNP phones via multiple vulnerabilities found in the CNU kernel. We demonstrate practical covert surveillance using constant, stealthy exfiltration of microphone data via a number of covert channels. We also dem...

This talk will give an overview of the ongoing work by the W3C on a controversial general purpose Javascript cryptography API in context of the larger desire to create trusted and encrypted cloud services with rich web applications. Today, cryptography is difficult to use and the Web is an insecure environment at best, but can this situation be improved and cryptography be put in the hands of ordi...

To date, remote vehicle communications have provided little in the way of privacy. Much information and misinformation has been spread on what the system is and can do, especially within the information security community. The recent field trial in the US of a connected vehicle infrastructure raises the level of concern amongst all who are aware of existing privacy issues. about this event: http:/...