Chaos Computer Club - archive feed

The Elektronisches Orchester Charlottenburg (EOC) explores the improvisation and interpretation of Electroacoustic Music. This includes the interaction of diverse electronic instruments and their spatialization in real time. The EOC was founded at the Electronic Music Studio at Technical University of Berlin within a seminar of the Audio Communication Group. It offers a platform for developing and applying new instruments and concepts in the realm of electroacoustic music. The Elektronisches Orchester Charlottenburg (EOC) explores the improvisation and interpretation of Electroacoustic Music. This includes the interaction of diverse electronic instruments and their spatialization in real time. The EOC was founded at the Electronic Music Studio at Technical University of Berlin within a seminar of the Audio Communication Group. It offers a platform for developing and applying new instruments and concepts in the realm of electroacoustic music. https://eo-charlottenburg.de/about/ about this event: https://pretalx.c3voc.de/camp2023/talk/N8ZSFH/

What does it take to build a fully functional (and actually usable) voice assistant that runs on a Raspberry with FOSS? This talk describes the journey from the idea to Version 1.0 (and beyond). It has to be a HAL9000 - the enclosure for my cloud-free digital voice assistant. The personal project is based on FOSS and runs on a Raspberry Pi Zero2 W in combination with a RP2040 (with a small display showing an animated HAL eye and a small GUI). I will talk about: * design decisions (and changes), * the system architecture, * why which software components were chosen, * highlight some interesting hardware and software aspects and * quickly show how the 3D model for the enclosure was created with OpenSCAD. HAL will talk about: * the 9000 series, * the AE-35 unit, * ...and whatever else the demo gods will allow. This talk should also serve as a crash-course into the (basic) technology of digital voice assistants - stuffed with information (and anecdotes) about the hardware, software and the 3D-printed enclosure. about this event: https://pretalx.c3voc.de/camp2023/talk/AUN3FY/

Schon wieder muss Karlsruhe ran Vor mehr als zehn Jahren lang ein Staatstrojaner auf dem Seziertisch des CCC. Was die Analyse zeigte, waren neben eklatanten handwerklichen Fehlern auch die mangelnde Prüfbarkeit der Schadsoftware und weitere grundsätzliche Probleme solcher Ausspähmethoden. Leider hat sich nicht viel verbessert – im Gegenteil. Und so haben wir im Juli dieses Jahres eine weitere Stellungnahme zum Staatstrojaner an das Bundesverfassungsgericht gesendet. Wir wollen berichten, was darin steht und was politisch bei diesen heimlichen Ermittlungsmaßnahmen gerade ansteht. about this event: https://pretalx.c3voc.de/camp2023/talk/NWMSTD/

At Camp 2011 the “Space Program of the Hacker Scene” had been released as one of the main aspects as the outcome of this Camp. It is time for a review after 12 years and reshape it into Solarpunk. **~ For Our Future ~** The [Space Program of the Hacker Scene](https://events.ccc.de/camp/2011/wiki/Call_for_Space_Program) had been released. There were three targets for the upcoming 23 years until 2034: 1. Creation of a free Satellite Network 2. A Hacker in Orbit 3. Landing a Hacker safely on the Moon For reaching this goal, several challenges for self-sustaining habitats, community communication, and transportation needed to be resolved. That's where the hacking and making scene came into effect. But the events on the world changed quickly and we see more challenges to keep our space ship Earth intact. Time to review the Hacker Space Program from 2011 and use its spheres of activities for a better future on Earth in combination with the Solarpunk movement. about this event: https://pretalx.c3voc.de/camp2023/talk/SSL7AC/

. Chaos Family about this event: https://pretalx.c3voc.de/camp2023/talk/5659/

You like coding and tinkering with software or hardware? And you are up for a challenge? Then the “Youth Hacking 4 Freedom” is the perfect competition to test your skills. The Free Software Foundation With the “Youth Hacking 4 Freedom” contest the FSFE has created a fun hacking competition for young people from Europe. The participants have the chance to work on their own project idea with the guidance of experts from the Free Software universe. There are no limitations for the projects as long as they are published under a Free Software license. In this competition young people can test their skills, learn how to work on a project under a deadline, and most importantly have fun while meeting different people from Europe. Hear all about the competition and how to participate in this talk. about this event: https://fahrplan.alpaka.space/camp-2023/talk/MBHHVC/

The role of the Internet in the Ukrainian war is not been fully considered yet. Currently, primary Internet based attacks are analyzed, but it is greatly neglected that with the help of the Internet measurement verifiable statements can be made about the real world. Through global Internet scans and a passive blackhole sensor network, we can identify digital and conventional attacks and their effects in this case study on the territory of Ukraine. We will show that it is possible to detect where in Ukraine, Russian attack-related power outages occur and how long they last. For this purpose, we will also scan and analyze 2 major attack waves that occurred about 5 months apart in detail the service availability of more than 400,000 static IP addresses every 4 hours for several months. This long-term period will also allow us to determine whether and if so, how resilient the Ukrainian power supply has become against Russian missile attacks. In addition, we will also analyze other data such as ESA radar images and correlate the degree of destruction of certain regions in Ukraine with our scan data. This method could be used, for example, to support NGOs to determine the need for mobile power generators in certain regions. Furthermore, using BGP data and media information, we will show that Russian forces in Kherson are attempting to route network traffic from local ISPs through Russian territory to gain a tactical advantage. Finally, we will show that through a blackhole network of about 1000 IP addresses it is possible to detect certain DDOS attacks against Ukrainian infrastructures or government websites. The analysis of the temporal course of the attacks shows interesting temporal patterns that suggest some kind of campaign. about this event: https://pretalx.c3voc.de/camp2023/talk/YRKCQT/

Was hat sich beim Thema Digitale Gewalt seit dem letzten Camp verändert? Warum plant das BMJ eine Digitale-Gewalt-Gesetz, das diejenigen identifizieren und bestrafen soll, die in Messengern über schlechte Restaurants lästern, und warum ändert sich noch immer nichts an der Pflicht zur Adresse im Impressum? Das und mehr im Update zum Stand der Dinge bei der Digitalen Gewalt. Vier Jahre nach ["Was tun gegen Digitale Gewalt gegen Frauen"](https://media.ccc.de/v/Camp2019-10346-was_tun_gegen_digitale_gewalt_gegen_frauen), meinem Talk im letzten Camp, ist es Zeit für ein Update. Die Ampel hat sich ein Digitale-Gewalt-Gesetz in den Koalitionsvertrag geschrieben und dazu gerade erste 'Eckpunkte' vorgelegt. Warum das völlig am Problem vorbeigeht und dazu möglicherweise für uns alle eine Gefahr darstellt, werde ich in diesem Talk erläutern. Das Justizministerium möchte nämlich nicht nur diejenigen identifizieren, die andere auf Social-Media-Plattformen bedrohen und beleidigen, sondern auch noch viele andere. Die Sicherheitsbehörden freuen sich schon. Aber vor allem: Das löst nicht die vielfältigen Probleme der digitalen Gewalt. Die findet nicht nur auf Plattformen statt, sondern in Partnerschaften und Ex-Partnerschaften, durch Bekannte und Unbekannte, unter Kolleg*innen, in Familien oder Nachbarschaften. Digitale Technologien werden für alle denkbaren Formen der Manipulation und Kontrolle benutzt: Mitlesen von E-Mails, sichtbare und unsichtbare Kameras in öffentlichen und privaten Räumen, AirTags in Spielzeug, Handtaschen, Fahrzeugen. Spyware wird nicht nur von autokratischen Regimes eingesetzt, sondern auch zur Überwachung der eigenen Familie. Was hat sich in den letzten vier Jahren verändert? Wer hilft den Betroffenen und wie können sie sich selbst helfen? Darum geht es in diesem Talk. about this event: https://pretalx.c3voc.de/camp2023/talk/Z9BF9L/

A short session for even shorter talks. Language: English or German -- german -- Du willst was sagen? Das Podium gehört dir. 10 Minuten hast du, dann wird gewechselt. Ein kurzer Vortrag über die Aerodynamik von Enten, Werbung für dein neues Open-Source-Projekt, ein kleiner Hack den du neulich entdeckt hast, gesellschaftliche Kommentare ... alles geht. Zur Verfügung stehen Mikrophon, Beamer und ein Laptop mit USB-Stick, um Präsentationen im PDF-Format zu zeigen. Falls du eine Präsentation von deinem eigenen Gerät zeigen möchtest, würden wir dich bitten, 15 Minuten vor Beginn zu kommen, damit wir die Technik testen können. Am besten meldest du deinen Vortrag bei [email protected] . Spontane Beiträge sind aber auch gern gesehen, wenn am Ende noch Zeit ist. -- english -- Wanna say something? The stage is yours. You have 10 minutes to talk about anything. A short talk about the aerodynamics of ducks; promoting your new open-source project; a small hack that you found; social commentary ... anything goes. Available infrastructure: A microphone, beamer and laptop with a USB-Stick to show slides (PDF format). If you want to use your own device to show your presentation, please come to the stage 15 minutes before the event so we can test the setup. If you want to have a talk, we'd like you to write a short e-mail to [email protected] . However, spontaneous contributions are also welcome if there's still some time left at the end. about this event: https://pretalx.c3voc.de/camp2023/talk/7ZXGUM/

In diesem Vortrag wollen wir euch einen Überblick geben über die digitale Sicherheitssituation von Journalismus weltweit. Spoiler: nicht so gut, und eher schlechte Aussichten. Außerdem erzählen wir ein bisschen was das Digital Security Lab bei Reporter ohne Grenzen anbietet, was wir tun und wie man Betroffene am besten an uns verweisen kann. about this event: https://pretalx.c3voc.de/camp2023/talk/EQKSYM/

We'll take a look at how DJI - dominating player for commercial and recreational drones - builds their software, specifically from a security angle. This talk will discuss DJI drones, most specifically the DJI Mini-series; looking at the hardware, discussing attack angles, up to a full compromise of a current drone for custom firmware purposes. Along the way, we'll look at a lot of security WTFs that allow to pwn these devices. The amount and quality of bugs sometimes feel like you're trapped in a very cool hardware CTF. We'll go from sniffing hardware busses, making fun of incorrect usage of SoC security features over to how DJI consistently and knowingly violates the GPL, into executing custom code on the flight controller and Linux system. about this event: https://pretalx.c3voc.de/camp2023/talk/PREGSS/

We‘re c3stoc - the CCC sticker operation center. After helping with the sticker distribution at 36c3 we had to find a solution to ensure new laptops wouldn‘t remain naked during the pandemic. During the last three years we organized remote sticker exchanges. Now it‘s time to share our learnings about exchanges and stickers! The idea was just to make sure CCC Congress doesn’t have one single sticker box with a one hour queue. And we actually still like that idea: A system of sticker boxes strategically placed in various assemblies, and a partnership with ChaosPost to ensure an even distribution of the stickers in the boxes. Year 1 - 36c3 - was a success and we were looking forward to doing it again. We didn‘t foresee that a year later we would be packing stickers in envelopes and sending them accross Germany and the world instead. December 2022 marked the third year of existence of the c3stoc remote exchange. In the last years we have designed, printed, received and sent a lot of stickers. We learned (almost) everything about paper quality, sticker sizes and shapes, about postage rules and how to pack stuff correctly, about which mistakes people make when creating stickers and about which designs communities around us love. We’re here to tell you how we organized the exchange, what we learned about sticker logistics and how to make really, really awesome stickers. about this event: https://pretalx.c3voc.de/camp2023/talk/VPL8WX/

Sharing experiences of two technical and educational projects that aimed to provide support for the decentralized grass movement in Sudan. showcase of two technical-sociopolitical projects ## Bid3a: The project aims to make socio-political interventions and creatively express themselves through the courage and symbolism of manipulating and artistically hacking tech devices around. At the core of their approach lies the intersection between art, technology, and political thought. Its strives to create something new and innovative by extensively exploring ready-made devices, operating systems, microcontrollers, and circuits. The objective is to expand their imagination, seeking to discover novel ways of socio-political existence and actively participate in the global discourse on cutting-edge technology, driven by the spirit of the ongoing Sudanese revolution. ## Sudan Civic Map: Sudan civic map is Counter-Militarisation Mapping project is a political statement that challenges the dominant narrative of the Sudan conflict. By foregrounding the experiences of civilian-led movements, the project aims to shift the focus from military-centric news towards the humanitarian efforts of these actors and alternative revolutionary practices. Through mapping and visual representation, the project asserts the importance of non-combatant actors in the Sudan conflict, subverting the conventional portrayal of the conflict as a two-party war. about this event: https://pretalx.c3voc.de/camp2023/talk/WHVPD3/

We will talk about the lately published Denail of Service attack abusing the Service Location Protocol. The research has shown that there are still protocols lurking in the dark to be explored and ab/used. The focus will be on basics of DoS attacks, then focus on SLP, the impact, defense mechanisms as well as the global attack surface. Furthermore, there will be some goodies in regard of other use-cases. Overview 1. Introduction to DoS attacks 2. Introduction to SLP 3. How is the attack working 4. Observations in the wild 5. Fun with SLP 6. Questions? 7. Finish about this event: https://pretalx.c3voc.de/camp2023/talk/NWDFBT/

[Delta Chat](https://delta.chat) is an e-mail based messenger that works on all platforms. Apart from an Whatsapp/Telegram-style user interface it features a security-audited [Rust-core library](https://github.com/deltachat/deltachat-core-rust), server [templates for setting up a state-of-the-art e-mail server](https://delta.chat/en/serverguide), many different bots, Matterbridge support and, last but not least, a way write standard web apps that can be shared in a chat (https://webxdc.org) which is now also experimentally supported by the XMPP Android messenger Cheogram. The talk will both discuss and demonstrate other unique features, among them QR-code based onboarding and support for protection against machine-in-the-middle attacks against end-to-end encryption, and we'll also provide glimpses in what's brewing for 2023/2024. about this event: https://pretalx.c3voc.de/camp2023/talk/UL7CQU/

Do you struggle at Attack/Defense style capture the flag (CTF)? Have you ever wondered how top teams can automatically steal tons and tons of flags and defend against attacks? Have you ever wondered what goes into succeeding at Attack/Defense? If so, this talk is for you. In this talk, we will take you behind the curtain of the top CTF team of 2022, the [‘organizers’](https://ctftime.org/team/42934). We will show you how we play Attack/Defense, what tools we use, our cursed strategies, and we will share some cool stories from our experience in major events like DEF CON CTF. about this event: https://pretalx.c3voc.de/camp2023/talk/YVGMLE/

Hidden inside basically every physical machine that needs precise control, PID loops are running the show. Quadcopters, self-balancing robots, and even the hot end of your 3D printer all use the same simple routines. Knowing how they work, deep down, and how to set their mystical three parameters is part art and part science, but it's nothing you can't pick up in a quick talk. Nothing explains complex math better than a few hands-on demos, and we'll definitely be tempting the fates here. By the end, you should be confident enough to code up your own PID routines from scratch and get started tuning. about this event: https://pretalx.c3voc.de/camp2023/talk/3HXEEC/

Die langjährigen CCC Badge Team Mitglieder schneider und Sec lassen sich von Andi auf der grauen Couch im C3VOC.tv Studio 1 ausfragen. about this event: https://pretalx.c3voc.de/camp2023/talk/1484/

Wetter, Verkehr, etc. about this event: https://pretalx.c3voc.de/camp2023/talk/3HFNWT/

Love it or hate it, blockchain has become a playground for technologists. Blockchain also fuels criminal ecosystems through major hacking incidents. In this talk, we aim to shed light on the most common bug types found in one of the main blockchain frameworks (Substrate) and provide insights and tools to find them. Blockchain bugs present unique challenges for developers and security testers. Drawing from several hundred blockchain security issues we reported, we identified five common issue types. We discuss the potential impact of each issue type and provide practical tips for testing blockchain systems. To promote accessibility to blockchain hacking, we release a fuzzer for Substrate-based chains. During the talk, we demo the fuzzer and showcase typical bugs, including arithmetic errors, reachable panics, and others. about this event: https://pretalx.c3voc.de/camp2023/talk/LMWGLZ/

## How can artificial intelligence support penetration testing? Most processes in for the penetration-testing cycle require detailed knowledge, time and human resources. While the are sophisticated scripts for the reconnaissance and various exploits, creating a detailed plan of the attack path can be complicated and laborious. The use of an enforcement learning algorithm can help penetration-testing identify the various attack vectors and provide a detailed overview of the system landscape. This can automate important aspects of the process and make it more efficient. We like show an overview, on how reinforcement learning can be integrated into the penetration testing process to gain automated access to a system landscape. To achieve this, we show approaches how an AI can be used for lateral movement within the system landscape to subject an entire landscape to the penetration-testing process. We like show an overview, on how reinforcement learning can be integrated into the penetration testing process to gain automated access to a system landscape. about this event: https://pretalx.c3voc.de/camp2023/talk/XBQFGK/

Cisco Meraki Ethernet switches are cloud-managed and require a license to function, or do they? In this talk I will discuss developing a FOSS firmware for various Meraki switch models and the challenges faced. This talk will include a hardware overview of various Cisco Meraki Ethernet switch models (past and present). We will look into the Cisco Meraki stock firmware, boot process, and switch management software. Finally, we will discuss the current state of support and what the future holds for open-source firmware on Cisco Meraki network devices. about this event: https://pretalx.c3voc.de/camp2023/talk/Z87KAX/

As the threat of ransomware continues to grow, many organizations look towards magnetic tape storage solutions to provide a last line of defense for their data. Tape has a number of interesting properties which set it apart from flash and spinning disk technology, such as an air-gap between the storage media and the reading/writing device, immutability of written data, and a long shelf life. These make it an attractive option for keeping data safe over longer periods of time. Doomsayers have long foretold the death of tape, yet there has never been more data stored on it than today. Tape system users include major financial institutions, government archives, and hyperscaler cloud providers, just to name a few. This presentation will give an introduction to data storage on tape media, potential attack vectors, and mitigations for these. This presentation will have two parts: A brief introduction to how magnetic tape works and is used in a data center, followed by security aspects from an operator's point of view. This presentation is of course just my thoughts on tape and in no way shape or form organized by, approved by, or representing the views of CERN the organization. about this event: https://pretalx.c3voc.de/camp2023/talk/CSYA7B/

Exploring the methodology and exploitation of physical security systems. Locks, access control and alarm systems with real life examples and the practical exploitation thereof. With digital security crossover. about this event: https://pretalx.c3voc.de/camp2023/talk/ADJX98/

How to hack the European Parliament by giving voters a voice in the decisions on the floor. Contacting your representative in Parliament is not as easy as it should be. What are their email addresses, phone numbers, social network profiles? Are they in Brussels or in Strasbourg right now? How much will it cost to call someone in France anyway? What should you even say to them? And does it even make sense to talk to that particular person, or are they so fundamentally opposed to your request that it would be a waste of time? The tool we are developing aims to bring citizens closer to their elected representatives. It empowers users to contact Members of the European Parliament (MEPs) efficiently and with a low entry barrier. The software takes the burden away from users to understand the EU and which MEPs are best to contact on a particular issue. It also knows how to contact them, and even allows the user to call them free of charge. DearMEP is being developed as a white label solution that can be applied to any EU level decision that has to be voted upon in the plenary of the European Parliament. NGOs that campaign around an EU decision can use the software to mobilize the public efficiently with the goal to influence particular plenary votes. Currently, the DearMEP software is tailored to address the whole European Parliament and to be used by citizens from all EU countries to contact MEPs from their countries. In this presentation, we would like to show you the current development state of this tool. We are planning to use DearMEP in the ongoing campaign against the chat control proposal. After that legislative file has concluded, we will release the software under the AGPL free software licence. During the CCCamp we will provide access to the current beta. We would love to hear your feedback. Drop us an email at [email protected]. about this event: https://pretalx.c3voc.de/camp2023/talk/7VSZTC/