Chaos Computer Club - archive feed

Containers would like to be able to make use of Linux Security Modules (LSMs), from providing more complete system virtualization to improving container confinement. To date containers access to the LSM has been limited but there has been work to change the situation. This presentation will discuss the current state of LSM stacking and namespacing. The work being done on various security modules t...

rustls is an open-source Transport Level Security (TLS) stack written in safe Rust. This talk reviews the current state of TLS support in the Rust ecosystem, and the design choices taken in rustls. about this event: https://c3voc.de

In this talk, we introduce Rust SGX SDK (future code name MesaLock SGX), which can protect secrets from most attacks by combining the power of Intel SGX and Rust. Intel SGX is the next generation trusted computing technique supported in almost all recent Intel CPUs. It provides strong security guarantees and uses a completely different os/threading model, but lacks memory safety guarantees. We sho...

Last year was a quite busy year on the security front, various big issues happened, so its good to tell what security has done there and is doing for openSUSE and SUSE in general here. The talk will give a brief overview of how the SUSE Security Team works and operates. We will look at the reactive work including statistics, and also look at proactive secure development lifecycle activities. I wil...

Once HTTP/2 was standardized in 2015, the IETF started work on an even faster iteration of HTTP, based on QUIC: the Quick UDP Internet Connections protocol. The QUIC community is getting ever closer to standardizing it. While we have great HTTP and HTTP/2 implementations in Rust already, this talk discusses an effort to implement QUIC in pure Rust, based on the futures ecosystem. about this event:...

As probably you might know, GNOME hasn't been the most updated in technologies & processes used for the design, development, testing, QA, delivery loop. To be honest, we have been quite behind! Build fails, not passing tests, contributors stuck with trivial details, each product with different released days, designers and QA in need to build the whole stack to try out a minimal UI change... well,...

Ever wondered what makes Rust successful? This talk is about growing Rust communities worldwide and emulating values and ideals that have made the Rust project a success. Come and learn how these values and ideals have influenced Rust Nairobi’s journey and how you can use them as guidelines for your community. about this event: https://c3voc.de

Learn an easy way of keeping your systems configured and up-to-date via opensource tooling, even for huge infrastructures. Learn an easy way of keeping your systems configured and up-to-date via opensource tooling, even for huge infrastructures. about this event: https://c3voc.de

A good education can take many different shapes, sizes, forms. Oftentimes, the most profound educations don’t even happen in a classroom. And yet, they all seem to have one thing in common: they teach you how to learn. Being able to learn new things is an empowering skills, especially for those of us working in the ever-changing, fast-paced tech industry. But how can we teach ourselves this skill?...

With the release of Leap 15 the new system role called "Transactional Server" will be available during the installation, so this is the perfect opportunity to have a look at the concept behind it and how to work with such a system in practice. In this talk we will have a look at transactional-updates from different angles: * The basic concepts behind transactional-update * How to use the Transacti...

I missed the simplicity of of computers like the C64 and the Apple 2 and I wondered if I could recreate something like that, but using the Cortex M4 devboard on my desk and a handful of resistors. Can you generate VGA without a video chip? Can you render text without enough RAM for a framebuffer? Can you read from a PS/2 keyboard? Can you do it all in Rust, and run tests on an actual PC? Will it r...

While the need for encrypted web sites has been sufficiently motivated by countless revelations on state sponsored surveillance or malevolent ISPs, acquiring a LetsEncrypt certificate used to be a tiresome business, and usually certificates broke anyway. openSUSE Leap 15 will be the first long term distribution to provide automated certificate requests and renewals thanks to dehydrated, which is a...

Tumbleweed, being a rolling distribution, is constantly changing and packages are constantly being rebuilt against one another and updating requirements. As such it becomes necessary to update even when undesirable. For example, one is running snapshot 17 and the next day snapshot 18 contains a QT update that rebuilt a large number of packages. When attempting to install an application that depend...

Real-time networking applications becoming more popular, but building backend systems is challenging in terms of memory and cpu efficiency. This is a story about how at TreeScale (github.com/treescale) we got 10X+ memory and cpu efficiency using Rust MIO as a main network TCP/UNIX handling system with thread pools. about this event: https://c3voc.de

TLS 1.3 is the brand new version of the SSL/TLS protocol. The draft of the standard was recently approved by IETF and it will be published as RFC in a couple of months. TLS 1.3 is a big redesign of the protocol which brings substantial changes such as better security or handshake speed-up. The talk will present its new features as well as compare the new protocol to the previous versions. It will...

GNU Health is a community driven project. There is a wide spread variety of users that run GNU Health in different scenarios. And there is a community of 'makers', that build the software and brings it to its users. This presentation will put some light into both communities. For the first time we have collected the end users, and will present some statistics around that. And for you, the maker co...

With openSUSE Leap, we've tried a new management model based on SLE. The same is true for the kernel, one of the most "core" packages in the whole distribution. However, in the case of kernels, a story is a bit different from others. In this talk, we'll take a look back at the history of openSUSE Leap kernel developments and maintenance from Leap 42.1 to 42.3, covering briefly about the concept of...

Mycroft is an open source virtual assistant similar to the ones provided on phones by some companies. It provides some interesting functionality, it's open source, it's easily expanded with new functionality and it's fun. During the last hackweek, I packaged it so it's easy to install on Tumbleweed and in this talk I'll try to show how it works, the changes I did to it in order to package it and m...

I love btrfs, I think btrfs is the best filesystem ever. But like all software, it's not absolutely 100% perfect all of the time. This lightning talk will help tell you what to do when it all goes wrong :) I love btrfs, I think btrfs is the best filesystem ever. But like all software, it's not absolutely 100% perfect all of the time. This lightning talk will help tell you what to do when it all go...

Fibre to the home opens numerous interesting possibilities for both bona-fide and not so bona-fide use cases. Having your espresso machine or refrigerator being part of a multi-million device botnet which is attacking critical infrastructure might not necessarily be your first association when zipping your early morning caffeine fix. Not only might this notion be somewhat disruptive for your early...

SUSE Package Hub [1] provides open source packages to Enterprise Users by the Community. This talk shows the current status of this project, explains how to contribute and what might be next. [1] https://packagehub.suse.com SUSE Package Hub [1] provides open source packages to Enterprise Users by the Community. This talk shows the current status of this project, explains how to contribute and what...

There’s a discrepancy between the careful attention to mutability and immutability in Rust itself and the data structures available in the standard library. The only way to update a Vec with an immutable ref is to clone it first, which could get expensive. But what else can you do? Turns out there’s a number of data structures out there that make it cheap and easy to do immutable copies and update...

There are several changes coming with the release of AppArmor 3. This talk will cover the changes that AppArmor 3 will bring and how the changes will affect policy and confinement. It will cover policy versioning, local vs pre-shipped read-only policy text, improvements in AppArmor policy namespaces, fine grained network and d-bus mediation as well as IMA integration. There are several changes com...

Lyon is a collection of low level tools to render 2D vector graphics on the GPU, useful for games as well as other applications benefiting from vector graphics (map renderers, web browsers, graphical user interfaces, creative coding, etc.). This presentation will start with a very short overview of the type of functionalities lyon provides, followed by a deep dive into how lyon approaches renderin...

Ever wanted to learn how to add this little piece of functionality that you're missing in MySQL but the codebase seems large and thus intimidating ? Then this talk is for you: we'll enumerate the ways to extend and alter MySQL functionality and will get you started on hacking on the codebase: what the layout is like and where to fund stuff and documentation to support you. We will also review the...