Chaos Computer Club - archive feed

It is well known that humans are the weakest link in information security. Social engineering has emerged as a means to influence and manipulate individuals to achieve desired outcomes. In this presentation, we delve into the realm of social engineering, exploring the art of behavior alteration, manipulation and persuasive communication. We will provide a general introduction to social engineering and guide the audience in the very first steps to actually start training this skill in a safe and responsible manner that will allow you to get a taste of social engineering by slightly altering your behaviour and still staying (mostly) legal We will cover the following topics: - Introduction to social engineering - Using OSINT to collect initial information - Creating pretext - Fundamental principles of human behavior and decision-making - Leveraging social normativity in persuasive interactions - Building rapport and trust - Exploiting trust - Practical exercises in everyday life about this event: https://pretalx.c3voc.de/camp2023/talk/ZX3GM8/

Der Talk beschäftigt sich mit der Frage, ob und wie man im Fediverse ein Rätesystem einführen sollte. Das Fediverse weckt bei vielen die Hoffnung, das Prinzip von Social Media auf den Boden demokratischer Grundwerte zu stellen. Endlich gibt es eine soziale Plattform bei der alle an der Frage beteiligt werden, wie Kommunikation gelingen kann. Doch wie führen wir im Fediverse Entscheidungen herbei? Welche "Staatsform" wählen wir für einen digitalen Raum? Wie gehen wir mit jenen um, die sich anders organisieren oder zu anderen Ergebnissen gekommen sind? Vielleicht könnten wir uns zur Findung von Lösungen am Rätesystem orientieren. Leena Simon ist Netzphilosophin und wendet gerne Erkenntnisse und Prinzipien aus dem „analogen Zeitalter“ auf digitale Themen neu an. In diesem Talk prüft sie, welche Teile des Rätesystems für das Fediverse passen könnten. Viele fertige Antworten wird es aber nicht geben, sondern Überlegungen, Gedankenanstöße und Hypothesen, die es noch zu prüfen gilt. about this event: https://pretalx.c3voc.de/camp2023/talk/DKYSB9/

Auch nach fünf Jahren DS-GVO halten sich hartnäckig einige Datenschutz-Mythen, die Datenschutz als Digitalisierungsverhinderer brandmarken oder gefährliches Halbwissen in Bezug auf IT-Sicherheit transportieren. Die Vortragenden zeigen in ihrer Rolle als *„Myth-Busters“* anhand von kurzweiligen Beispielen einige Mythen auf und stellen dar, wie man es besser macht. Neben einigen „Mythen-Classics“ soll auch auf aktuelle Fragestellungen eingegangen werden. So zum Beispiel: * Ist der Reifendruck im Connected Car ein personenbezogenes Datum? * Ich habe ein großes Datenleak entdeckt – und nun, was darf ich und was nicht? * Falschparkeranzeige mit Fotobeweis – darf man das? * Smarte Videoüberwachung am Beckenrand – Mit künstlicher Intelligenz gegen das Ertrinken im Freibad? * Sind Hashes von Telefonnummern personenbezogene Daten? Fragen und Vorschläge für neue Mythen aus dem Publikum sind willkommen. about this event: https://pretalx.c3voc.de/camp2023/talk/NSTKCC/

Last year, an industrial coffee vending machine with broken power electronics arrived at Metalab. This is a talk about how we repaired the machine, how these machines usually work, a dive into legacy software and electronics setups, and why those coffee vending machines taste like they do. A bit more than a year ago, in early summer of 2022, someone contacted us at the Metalab Hackspace if we would be interested in an electronically defective, but probably repairable industrial coffee vending machine. An industrial coffee machine with a touchscreen and cocoa toppings? No idea where we would find enough room for it or if it would actually be used, but of course we'd be interested! Even if we couldn't repair the original electronics it would still serve as a good base to build a cocktail bot for Roboexotica, the festival for Cocktailrobotics. So roughly a month later the machine arrived at Metalab. After a few months of collecting (additional) dust and annoying a few members, we started the quest to get this machine back to work and to explore the (questionable) world of industrial coffee vending legacy, from hardware, over electronics to software architecture. There is also the final question: does it run Doom? We will talk about: - how these machines typically work mechanically - why industrial/office coffee vending machines taste like they do - what specifically failed in the electronics for this machine and how to debug this - and a few insights in the electronics and software setup of this vendor. - why RFC2324 might need an extension for soup If everything goes well we'll bring the machine to camp and probably to the talk. about this event: https://pretalx.c3voc.de/camp2023/talk/YK8FEL/

**THIS TALK WILL BE HELD IN "RESCUE" MODE DUE TO PRESENTER'S HARDWARE FAILING** Building your own hardware to work with 10 Gigabit Ethernet… without access to measurement or simulation equipment. Can the high frequency electronics deities be appeased with some sacrifices? Born from building and tearing down a bunch of fibre for CCC event networks: a pocket tool to help quickly troubleshoot our 10GE connections, and get us out of random "square peg, round hole" problems. Passive single-port adapters that can read diagnostic information from optical transceivers are common and easy, but how about something with 4 ports and active circuitry? Well, electrons don't really like being pushed around at GHz frequencies, start clinging to edges and corners, and turn around and go back the way they came when that's the easier path… HF circuit design has a well-earned aura of respect. One of the well-known reference books is in fact titled "High Speed Digital Design: A Handbook of Black Magic" and assumes you have a fancy (= expensive) electronics lab with nice gear. Let's, uh, just ignore all that and see the result of building high-speed (10GE - 10.3125Gbaud, 5.16GHz) electronics with just basic microcontroller experience! NB: this talk will be incredibly boring (or even annoying?) to anyone with actual HF design experience. And I cannot teach you how to do it *correctly* either 😅 about this event: https://pretalx.c3voc.de/camp2023/talk/GBQQUN/

Interaktive Karten sind aus dem Internet nicht mehr wegzudenken. Mit ihrer Hilfe lassen sich komplexe Informationen visualisieren - seien es die Standorte von Biohöfen, Stadtbäumen, die Abstände von Windkraftanlagen, die Auswirkungen der Klimakrise oder die Situation in Kriegsgebieten. Der Nachteil: Die Nutzung solcher Karten von kommerziellen Anbietern kann bei hohen Zugriffszahlen schnell teuer werden. Das wollen wir ändern und die Nutzung interaktiver Karten einfacher machen. Dazu entwickeln wir "VersaTiles", einen komplett freien und offenen Kartenstack auf Basis von OpenStreetMap. In unserem Vortrag möchten wir den aktuellen Entwicklungsstand und unsere Pläne für die Zukunft von VersaTiles vorstellen und zeigen, wie man VersaTiles nutzen und zur Weiterentwicklung beitragen kann. about this event: https://pretalx.c3voc.de/camp2023/talk/WJ3AAU/

Tired of not having access to incognito tabs? Tired of your company controlling your web surfing? Firefox might be the browser for you! Come learn how easy it is to patch open-source software to behave how you want it to behave. This talk will cover macOS policy service, Firefox architecture, Firefox debugging, and how to modify Firefox. about this event: https://pretalx.c3voc.de/camp2023/talk/3CVBDJ/

Eine dezentrale Inseratplattform, föderiert mit ActivityPub. Für mehr re-use, Nachbarschaftshilfe und und und. Endlich ist es vollbracht, die Idee einer verteilten, föderierten Inseratplattform in die Tat umzusetzen. In diesem Talk lernt Ihr den Prototyp meiner ActivityPub-basierten Inseratplattform "Flohmarkt" kennen und erfahrt was im letzten halben Jahr der Entwicklung so alles passiert ist. Es warten Geschichten aus der ActivityPub-Welt, Mastodon-reverse-engineering von hinten durch die Brust ins Auge, eine Live-Demo und mehr auf Euch. Wirst vielleicht auch Du Admin einer Inseratplattform für deine Nachbarschaft werden? about this event: https://pretalx.c3voc.de/camp2023/talk/R77KXE/

We use the term Social Engineering often, but our understanding differs. RFC4949 even recommends to use different terms and deprecates it. Five Social Engineering Indicators will help security researchers to identify Social Engineering in the wild, in literature or in experimental design. The insights are part of https://doi.org/10.15480/882.4933 about this event: https://pretalx.c3voc.de/camp2023/talk/GXWPLE/

A short session for even shorter talks. Language: English or German -- german -- Du willst was sagen? Das Podium gehört dir. 10 Minuten hast du, dann wird gewechselt. Ein kurzer Vortrag über die Aerodynamik von Enten, Werbung für dein neues Open-Source-Projekt, ein kleiner Hack den du neulich entdeckt hast, gesellschaftliche Kommentare ... alles geht. Zur Verfügung stehen Mikrophon, Beamer und ein Laptop mit USB-Stick, um Präsentationen im PDF-Format zu zeigen. Falls du eine Präsentation von deinem eigenen Gerät zeigen möchtest, würden wir dich bitten, 15 Minuten vor Beginn zu kommen, damit wir die Technik testen können. Am besten meldest du deinen Vortrag bei [email protected] . Spontane Beiträge sind aber auch gern gesehen, wenn am Ende noch Zeit ist. -- english -- Wanna say something? The stage is yours. You have 10 minutes to talk about anything. A short talk about the aerodynamics of ducks; promoting your new open-source project; a small hack that you found; social commentary ... anything goes. Available infrastructure: A microphone, beamer and laptop with a USB-Stick to show slides (PDF format). If you want to use your own device to show your presentation, please come to the stage 15 minutes before the event so we can test the setup. If you want to have a talk, we'd like you to write a short e-mail to [email protected] . However, spontaneous contributions are also welcome if there's still some time left at the end. about this event: https://pretalx.c3voc.de/camp2023/talk/LEW7HG/

Jurastudium? Jugend hackt? Hier sind so viele Jugendliche beisammen, dass wahrscheinlich einige Jura anfangen werden. Und andere das nicht auf dem Schirm haben, aber es interessant sein könnte... Jura ist einer der großen Fächer. Leider gehen manche mit schrägen Erwartungen an das Studium heran und brechen ab. Und andere haben sich damit nie beschäftigt, für die es eigentlich voll ihr Ding wäre. In einem Express-Talk wird kurz dargestellt, was man damit machen kann, worum es im Studium geht, aber auch, was nicht Bestandteil des Jurastudiums ist. about this event: https://fahrplan.alpaka.space/camp-2023/talk/RJ8BBW/

Der Vortrag gibt einen kurzen Einblick darüber wie ein Informatikstudium aussieht, was ein Informatikstudium ist und was es nicht ist. Wenn du dich fragst ob ein Informatikstudium das richtige für dich sein könnte, kann dir dieser Vortrag eventuell helfen. Ich gehe kurz darauf ein welche Arten von Modulen es im Informatikstudium gibt und gebe ein paar Tipps. about this event: https://fahrplan.alpaka.space/camp-2023/talk/XHNCUU/

Gast: Erstbesucher Chris, der Telefone im Wald aussetzt Wetter, etc. about this event: https://pretalx.c3voc.de/camp2023/talk/W8B7SC/

What does GPT-4 know about people like me? This interactive workshop peeks under the hood of large language models to understand what goes into the datasets that shape them. We will discuss how these giant text corpora represent us in ways that feel hollow, harmful, and incomplete. I will share my analysis of existing datasets in an artistic research context, plus collaborative research that proposes building alternative models, methods, and datasets featuring texts that orient toward life and liberation. These texts will include, but not be limited to, works that center decolonial perspectives, queer love, ethics of care, and practices of commoning and mutual aid--created with transparency, community input, and contributor consent. Our collective Unsupervised Pleasures is developing more intersectional machine learning methodologies, and in our discussion we will unpack the issues with existing tools and imagine different tools that can support the communities they represent instead. Are these the automated systems we want? Whose voices, visions, and stories are captured in them and whose are excluded, harmed, or undermined? Let’s start building the language tools we want to see in the world. Open to any level of technical knowledge, from zero to expert. All backgrounds welcome! about this event: https://pretalx.c3voc.de/camp2023/talk/BWECXM/

Want to learn why we started making a to-scale version of CCCamp in a video game and what is possible going forward? At Camp2019 some ingenuitive hackers from Milliways and a handful of other villages took the modding tools of OFF GRID and set about building a replica 2019 CCCamp complete with Milliways rocket and big dome! 4 years later CCCamp is back and we thinks it's about time to dust off the mod and get even more villages into the project! This talk will go over the history of the game's development, what is possible with the mod tools we've built, and what our plans are for the future. On Friday we will be running two workshop sessions where we can run you through the process and give you everything you need to get modding with us, either live at camp, or at home later. about this event: https://pretalx.c3voc.de/camp2023/talk/3XRRMT/

Security is hard. Modern programming languages help us with memory and type safety, but, even with bleeding edge frameworks and libraries, *getting your crypto right remains hard*. We will take a look at recent cryptographic breaks in **Matrix**, **Threema**, **Bridgefy** and **Mega**, explore the modern cryptographic best practices and why they matter, see what makes **TLS 1.3** special, and discuss how to get to a more secure world together! This talk is a primer in modern cryptographic best practices, supporting them by examples of recent breaks and vulnerability disclosures. With cryptographic failures showing up every other day in security news, and placing #2 in the "OWASP top 10" web application security list, we want to show why apparently innocuous mistakes can make things go disastrously wrong. We plan to dedicate a part of the talk to open discussion, gathering feedback from developers and maintainer of open source cryptography, with the long term plan of building an high-level cryptographic library that should make developing new cryptographic protocols easier and more secure. about this event: https://pretalx.c3voc.de/camp2023/talk/TNUDTX/

Wie man in Deutschland einen Verein gründet, und trotzdem Spaß dabei hat. ;) In diesem Talk gibt padeluun einen Überblick darüber, wie man in Deutschland trotz eines komplexen Vereinsgesetzes erfolgreich einen eben solchen gründet, und verrät aus der Praxis wie man die tägliche Vereinsarbeit organisiert und Strukturen sowie Mitglieder und Funktionsträger bei Laune hält. Die Erfahrung dazu hat er durch seine Vorstandsarbeit im gemeinnützigen Vereine Digitalcourage e.V. gewonnen, den er 1987 noch unter dem seltsamen Namen FoeBuD e.V. mitgegründet hat. about this event: https://pretalx.c3voc.de/camp2023/talk/8SSVU9/

Ein humoristischer Vortrag darüber, wie wir eine Pick and Place Maschine gebaut haben und was dabei alles schief gegangen ist. Wer kennt das nicht? Ihr habt ein paar Teile von einer Idee von vor ein paar Jahren rumliegen und beschließt eine Pick and Place Maschine zu bauen. Warum? Weil ihr es könnt! Um euch einen kleinen Eindruck zu geben wie so etwas abläuft, welche Hürden dabei entstehen und vor allem: Wie man mit möglichst vielen, möglichst spektakulären Fehlern scheitern kann, wollen wir euch in 45 kurzweiligen und unterhaltsamen Minuten präsentieren. Der Vortrag ist an alle gerichtet die mit uns lachen und leiden möchten, Vorwissen ist nicht nötig. Für diejenigen die sich dennoch ein bisschen auskennen: Wir haben eine Opulo Pick and Place mit den selbst entwickelten Boards von Stargirl gebaut. about this event: https://pretalx.c3voc.de/camp2023/talk/STLLKW/

Do you want your flow3r to blossom? This talk will give you all information you need to know: How to assemble it, what to do with it, where to get help and how to write software for it. Music brings us together. Vibrant colors captivate us. The flow3r is an electronic instrument - it turns touch and gesture into sound and light. Its illuminated edge is a mesmerizing accompaniment to its music and serves as a canvas for all manners of light effects. The badge invites you to create art and beauty together. We will talk about what the flow3r is in more detail, how to put it together, how to operate it, what to do with it at camp, how to write software, how to reach the community, how to extend it, etc. Everyone who wants a mention of their project related to flow3r: Get in touch with us (@flow3rbadge:chaos.social or #flow3rbadge:events.ccc.de) and we will try to get you into the talk. about this event: https://pretalx.c3voc.de/camp2023/talk/C3BVMM/

Die Allianz #clubsAREculture setzt sich dafür ein, dem Thema Clubkultur mehr Sichtbarkeit zu verschaffen. Doch was wurde bislang erreicht? Was macht die Clubkultur aus und warum sollte man diese (besonders) schützen? Müssen althergebrachte Kulturdefinitionen überdacht werden? Und welche Kräfte gilt es zu bündeln, damit Clubkultur auch künftig bestehen und gedeihen kann? Musikclubs und Festivals leisten einen unverzichtbaren Beitrag für unsere lebendige Kulturlandschaft. Dennoch fallen Clubs und Subkultur in der politischen Wahrnehmung oft unter den Tisch. Auf Bundes-, Landes- und kommunaler Ebene existieren z.B. nur rudimentäre Förderprogramme, die sich modernen Kulturformen zuwenden. Zudem bestehen zahlreiche Handlungsbedarfe für einen aktiven Kulturraumschutz. In den kommenden Monaten liegen wichtige Weichenstellungen auf Bundes- und Länderebene an. Die Allianz #clubsAREculture setzt sich dafür ein, dem Thema Clubkultur mehr Sichtbarkeit zu verschaffen. Doch was wurde bislang erreicht? Was macht die Clubkultur aus und warum sollte man diese (besonders) schützen? Müssen althergebrachte Kulturdefinitionen überdacht werden? Und welche Kräfte gilt es zu bündeln, damit Clubkultur auch künftig bestehen und gedeihen kann? Viele dieser Fragen - wie auch weitere aus dem Publikum - werden zur Sprache kommen. Thore Debor (LiveKomm Sprecher AG Kulturraumschutz) wird dazu mit Mareen (Kulturkosmos / Fusion Festival), Aena (Pyonen / Nation of Gondwana), Sophia (KLUBKOMM Köln) und weitern Veranstalter:innen vor Ort ins Gespräch kommen. Moderation: dj-spock https://www.clubsareculture.de/ about this event: https://pretalx.c3voc.de/camp2023/talk/ZGUQTW/

Die Themen von Tag 1 about this event: https://pretalx.c3voc.de/camp2023/talk/TSDCFB/

The SCION Internet architecture empowers users to chose which paths their packets take through the Internet. How does this work? How does this help? Will it be enough? The SCION Internet architecture is not intended as yet another overlay network but actually aims to supersede BGP as the Internet's inter-domain routing protocol, addressing some of BGP's biggest problems. The goal is to empower Internet users, giving them more information and control about the paths their packets take through the network. Of course this means that, with the right kind of configuration, the SCION-enabled networking stack of your device could automatically steer your outgoing traffic to, for example, - boycott networks that are known to have unnecessarily high carbon footprints (e.g., that buy power from coal plants), - prefer networks that operate in areas where there is a (temporary) surplus of electricity from renewables, - avoid traversing networks that fall under certain dubious jurisdictions, etc. This talk will briefly look at how the Internet currently works and what issues SCION aims to address. We'll discuss SCION itself in a bit more detail, reviewing its architecture and design decisions before turning to the exciting prospects that "path awareness" can bring to Internet users, especially in terms of a greener Internet. More soberly, we'll also be open about remaining problems and tough questions yet unanswered, before concluding the talk with a review of already existing SCION deployments and ways to get involved. about this event: https://pretalx.c3voc.de/camp2023/talk/PFBQ3P/

As the boundaries of connectivity expand beyond the earth's atmosphere, with pioneering ventures like SpaceX's Starlink leading the way, we enter an era of extraordinary potential and novel challenges. This talk will delve deep into the technological advances, system designs, and emerging cybersecurity concerns of satellite internet constellations. It promises to be an eye-opening exploration of our shared cybernetic future that beckons us to the stars. In this session, we will journey into the fascinating world of satellite constellations, focusing on SpaceX's Starlink, Amazon's Project Kuiper, and other key players aiming to democratize internet access on a global scale. The audience can expect to gain a solid understanding of the underlying technical aspects, as well as insight into the broader implications and challenges these ambitious projects present. The talk will be segmented into four primary sections: **I. Technology Overview** We will have a comprehensive look at the mechanics of satellite constellations. This includes their construction, launch, on-orbit adjustments, ground-station architecture, and the way they employ laser interlinks to provide low latency broadband coverage across the globe. **II. Advances and Innovations** Moving from the basics, we'll dive into the recent technological breakthroughs and evolutions that make these projects possible and viable. This includes lighter, smaller satellites, sophisticated launch and deployment strategies, and innovative user terminal designs. **III. Security Implications** The expansion of the internet's physical infrastructure into space comes with significant security implications. We'll discuss potential attack vectors, satellite hacking scenarios, and the steps these companies are taking to ensure data security and system integrity in the hostile environment of space. **IV. The Hacker's Perspective** Finally, we will explore the hacker's role in this new era. With the final frontier now becoming a playground for connectivity, there will be ethical considerations, potential vulnerabilities to uncover, and perhaps even opportunities to contribute to a secure and fair utilization of space-born internet. Together, we'll paint a detailed picture of the fast-paced developments in this sector, offering both a technical deep dive and a wider societal perspective. By exploring uncharted territories and understanding the challenges we face as society, as users, as engineers, and as hackers , we can inspire innovative solutions and navigate the path to the future of connectivity with greater clarity and purpose. about this event: https://pretalx.c3voc.de/camp2023/talk/CSMC98/

In the realm of Free Software, expressing gratitude towards Free Software contributors often goes unnoticed. The "I Love Free Software Day" (https://ilovefs.org) provides a platform for individuals and organisations to do exactly this, showing appreciation. But it is crucial to recognize that our appreciation for Free Software should extend far beyond this single day. This talk highlights the significance of the "I Love Free Software Day" as a platform for expressing support, love, and gratitude towards the developers and contributors who make Free Software possible. Throughout the presentation, we will showcase memorable moments and successful initiatives from past celebrations, demonstrating the collective efforts to acknowledge and honor the impact of Free Software. We will discuss ideas and strategies for making the upcoming "I Love Free Software Day" even more remarkable. However, it is essential to emphasize that our expressions of love and support for Free Software should not be limited to just one day. While the "I Love Free Software Day" serves as a catalyst for celebration, it should inspire us to continue demonstrating our gratitude throughout the year. We will explore ways to incorporate ongoing appreciation into our daily lives, such as contributing to Free Software projects, advocating for their importance, and recognizing the efforts of developers and contributors regularly also in a financial way. By extending our appreciation beyond a single day, we can cultivate a culture of continuous support for Free Software. We invite everyone interested in Free Software to join us in this endeavor, as we strive to create an environment where gratitude and acknowledgment become integral parts of our interactions within the Free Software community. Let us embrace the "I Love Free Software Day" (https://ilovefs.org) as a starting point, a reminder of the significance of Free Software, and a call to action to express our love and support throughout the year. Together, we can build a community that values and appreciates the tireless efforts of Free Software developers and contributors, making a lasting impact on the future of software freedom. about this event: https://pretalx.c3voc.de/camp2023/talk/BTX3NF/