Chaos Computer Club - archive feed

To stop the climate crisis the world needs to become climate neutral. But while renewables have made great progress, the hard challenges still lie ahead. In some sectors decarbonized technologies aren't even available - and a future zero-emission economy will require staggering amounts of electricity. Solar panels and wind turbines can replace coal power plants, and electric cars allow driving without oil. But if we want to evade the climate crisis we need to get rid of emissions everywhere. Sectors like steel, cement, petrochemicals, and aviation are much more challenging to decarbonize. The solution usually proposed is to either directly or indirectly move everything to electricity. However, the amount of electricity required to do this is many times the amount of electricity produced worldwide today. Some sectors cannot be electrified and will probably require carbon capture technology. And in the future we may need to remove greenhouse gases from the atmosphere, which will require even more electricity. The talk will give an overview of the challenges ahead on the way to climate neutrality - and why we will need much more electricity than most people realize. about this event: https://talks.rc3.oio.social/r3c-oio/talk/KVJUQM/

Das Kultusministerium in BaWü setzt auf Microsoft 365 als Teil der neuen Bildungsplattform. Ungehindert eines breiten Protests von Seiten der LehrerInnen, Eltern, SchülerInnen und Zivilgesellschaft. Inga Klas (https://meinedaten-meinerechte.de) und Stefan Leibfarth (CCC Stuttgart) fassen den aktuellen Stand zusammen. Im Anschluss ist eine Diskussion zum Thema, u.a. über mögliche zukünftige Aktionen und den Stand in anderen Bundesländern geplant. about this event: https://rc3.world/rc3/event/ms365-an-schulen-in-bw/

None A brief lecture on continued global erosion of civil rights, dismantling of international law, and escalation of human rights abuses under the Covid-19 pandemic, with particular case examples from the People’s Republic of China, Hong Kong under the New National Security Law and the EU. There will also be an update on the circumstances of the Snowden Refugees, namely Vanessa Rodel and her daughter resettling into life in Montreal, Canada and a dramatic turn in Ajith’s (former Sri Lankan soldier) circumstances in Hong Kong as he is caught before a judiciary lacking independence as well as pending passage of new draconian Hong Kong immigration legislation putting him at risk while he awaits Canada’s decision on his refugee claims. Stream: https://streaming.media.ccc.de/rc3/wikipaka about this event: https://cfp.verschwoerhaus.de/rc3-2020/talk/8CYL7T/

Eine Darstellung der Entstehung, Arbeitsweise und Ziele (Ausblick) der Poliklinik. "Gesunheit ist politisch": Welches Gesundheitsverständnis liegt der Poliklinik zugrunde und welche Versorgungs- und Präventionsarbeit leitet sich daraus ab? Wie arbeiten wir aktuell auf der Veddel? Um mit diesem Versorgungskonzept in das deutsche Gesundheitswesen intervenieren zu können, ist die Poliklinik Veddel seit diesem Jahr mit anderen Gruppen als bundesweites Syndikat organisiert. Was fehlt, um die Potentiale dieser Struktur weiter ausschöpfen zu können? Die Poliklinik Veddel ist ein interdisziplinär versorgendes Stadtteilgesundheitszentrum auf der Veddel in Hamburg (poliklinik1.org). Derzeit leisten dort fünf Fachbereiche ambulante Primärversorgung. Es gibt einen Allgemeinarzt, die Sozial- und die psychologische Beratung, eine Community Health Nurse und eine Hebamme. Zudem leistet die Poliklinik Gemeinwesenarbeit, die eindeutig der Gesundheitsarbeit zugerechnet wird. Die Arbeit(sweise) der Poliklinik fußt auf dem Verständnis, dass Gesundheit ein soziale Frage ist. Wie bereits in den 70er Jahren erstmalig von der Weltgesundheitsorganisation formuliert, haben Lebensverhältnisse einen starken Einfluss auf die relative Gesundheit der Menschen. Arbeits- und Wohnverhältnisse, der Zugang zu Bildung oder das Erleben von Diskriminierung sind einige Beispiele der sogenannten Sozialen Determinanten von Gesundheit, die lebensverlängernden oder -verkürzenden Einfluss haben. Individuelles Verhalten, welches (nicht nur) in Gesundheitsfragen heutzutage hauptsächlich adressiert wird, passiert vor dem Hintergrund dieser Verhältnisse. Gerade in Stadtteilen und Regionen, die von prekären Lebensverhältnissen gekennzeichnet sind, weisen die Menschen eine überdurchschnittliche Krankheits- und Morbiditätsrate auf. Interdisziplinäre und partizipative Versorgung mit deutlichem Sozialraumbezug (hier der Stadtteil Veddel) aus einer Hand ist aus unserer Sicht die notwendige Antwort auf dieses Phänomen und die Versorgungsform der Zukunft. Wir verstehen die Poliklinik und unsere Arbeit als Modellprojekt und streben eine bundesweite Asuweitung dieser Versorgung an. about this event: https://c3voc.de

Every human evolves today in multi-dimensional physical and digital environment. If each individual is to keep its individuality and autonomy in its daily choices, it must be protected and given effective tools to defend its own autonomy. Recognizing that human life has been digitally extended must question ourselves on what makes us human today. Should personal data be considered as component of the person, rather than objects that can be owned by whoever collects that data? Should our digital integrity be protected? If each human person already has a right to physical and mental integrity (Swiss Constitution article 10 al.2), shouldn’t it have a right to digital integrity? This talk will introduce this new legal concept, its possible implications for data protection and how this concept could be introduced in the current legal framework. The talk will also be an update of the implementation work. about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/LR37NG/

Die Folge bildet den Startschuß zu einer Sendereihe, die euch das Threat Modeling etwas näher bringen soll. Wir wollen anhand eines Beispiels euch die Hintergründe und das Vorgehen genauer erklären. In der Sendung haben wir über E-Mails gesprochen. Wenn ihr uns helfen wollt, könnt ihr im Pad Hinweise hinterlassen. https://insecurity.radio.fm/ris34-urheberrecht-darknet-und-die-bundespolizei/ Die Folge bildet den Startschuß zu einer Sendereihe, die euch das Threat Modeling etwas näher bringen soll. Wir wollen anhand eines Beispiels euch die Hintergründe und das Vorgehen genauer erklären. In der Sendung haben wir über E-Mails gesprochen. Wenn ihr uns helfen wollt, könnt ihr im Pad Hinweise hinterlassen. https://n.jo-so.de/ris34-tm?both Bevor es in der Sendung jedoch dazu kam, sprechen wir über einige aktuelle Entwicklungen. Tobias hörte von den Aufnahmen der Bundespolizei und der Tatsache, dass diese in der Cloud gespeichert werden. Wir sprechen ein wenig über die bekannten Aspekte und versuchen das zu bewerten. Einen weiteren Block nimmt das geplante EU-Urheberrecht ein. Jens erklärt, was sich hinter den kritisierten Artikeln 11, 12 und 13 verbirgt. Gleichzeitig organisiert er zusammen mit Lutz Donnerhacke für den 23. März 2019 eine Demonstration gegen die Reform. Am Tag der Sendung schnappte Jens noch die Meldung auf, dass im Bundesrat eine Gesetzesänderung geplant ist, die das Darknet verbieten will. Wir sprechen das ebenfalls kurz an. about this event: https://cfp.chaoszone.cz/csr20/talk/JP8FHW/

"We all want alternatives to the attention sucking algorithms and data hungry business models that optimise for maximising share holder return, not societal value. Tech alone won't save us. Good intentions alone won't save us either. How can we change the economic incentives of investors and founders so that profit maximisation is removed, while still rewarding those who take risk and invest effort?" Talk will be a 20min intro into Steward Ownership & rest is Q&A. about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/RT9WPX/

Während Schulen noch mit den Grundlagen der Digitalisierung kämpfen, drängen Learning Analytics und KI in die Klassenzimmer. Der Vortrag erklärt Chancen und Risiken dieser Anwendungen und betrachtet dabei insbesondere den nötigen Umgang mit Daten in der Einrichtung Schule. about this event: https://cfp.verschwoerhaus.de/rc3-2020/talk/3FHJ9C/

Peter F. Müller, investigative journalist; Paul Reuvers and Marcus Simons, Cryptomuseum Eindhoven; Markus Kompa, writer. Peter F. Müller revealed in February a delicate collaboration between BND and CIA for harvesting SIGINT via backdoors. It turned out that this was just the tip of an iceberg. While researching a documentary about the German foreign intelligence agency Bundesnachrichtendienst (BND), Peter F. Müller came across a top secret document (MINERVA) about a delicate collaboration between BND and CIA. Since 1970 the spy agencies secretly owned and controlled the Swiss based Crypto AG, the world market leader for encrypting devices. They were selling rigged crypto-machines to more then 100 countries in the world and CIA and BND were thus able to intercept and decrypt the diplomatic and military communications from those countries. Peter F. Müller put together an international team of investigative journalists to find out more about this intelligence operation, including Paul Reuvers from the Cryptomuseum in Eindhoven as technical adviser. While the BND is often portrayed as a looser, operation RUBIKON as it was called by the BND was a success story for over half a century. Security expert Prof. Richard J. Aldrich rates the project “as probably the most important intelligence operation in history.” To protect the method the gouvernments of USA and Germany had to pretend blindness even when they learned about war crimes. The revelation in February which was nicknamed #CRYPTOLEAKS raised a political scandal in Switzerland. The story continued when Peter F. Müller revealed a parallel running secret sharing alliance for intercepted information between five European states called operation MAXIMATOR. There is more to come. https://www.cryptomuseum.com/intel/cia/rubicon.htm https://www.zdf.de/nachrichten/politik/cryptoleaks-bnd-cia-operation-rubikon-100.html https://www.washingtonpost.com/graphics/2020/world/national-security/cia-crypto-encryption-machines-espionage/ https://www.fr.de/politik/geheimoperation-bnd-maximator-13818604.html about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/3QFQL7/

We introduce the concept of a VAA by example of the well-known "Wahl-O-Mat", talk about the benefits and move on to explain, how to run an election compass for your hometown using the free and open source OpenElectionCompass. A voting advice application is a great way to support elections and democracy as a whole by making the parties or candidates more transparent and comparable. The differences between political parties are often difficult to understand for the voters, especially for first-time voters. To make elections more accessible some countries have started to offer election compasses, or VAAs. Services like these help citizens getting to know the parties or candidates by presenting a carefully chosen collection of political statements. The users and the parties both take position to these statements. Based on this, voters can quickly get a comparison between their own opinions and the positions of the parties. In Germany, this service is implemented by the bpb, the Federal Agency for Civic Education and is called "Wahl-O-Mat". In the Netherlands this concept is called "Kieskompas". Software like this has developed in the early 2000s and evolved ever since. Running such a project offers great value to citizens, the political system and our democracy. It is also very expensive. Implementing an election compass is not only time consuming, but also requires great technical knowledge. Usually, there is no election compass for smaller elections, because hiring software developers is simply out of budget. OpenElectionCompass offers a free alternative – free as in free speech as well as in free beer. The requirements for a voting advice application are very similar, be it for a small or a national election, for an election in Berlin or an election in Brussels. OpenElectionCompass aims to provide a free solution, simple to configure, customize and deploy. By continuously improving our project, we have an advantage over agencies doing this only every few years. And by not developing behind closed doors, we are transparent and open for everyone. This talk will give an introduction to the concept of VAAs by different examples. It will deliver background knowledge about matching algorithms and provide hands-on guidelines on how to run your own election compass using the OpenElectionCompass. How to get started, build a team, develop statements, address parties, configure and deploy the OpenElectionCompass, attract attention and so on. about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/JULXFF/

The EU has been pushing for apps that support end-to-end encrypted messaging to contain an upload filter, which will scrutinise material for prohibited content before it's encrypted. This is the latest in a long line of attempts to maintain government access to data despite cryptography. In this talk, I will try to put them in context of the last two crypto wars and assess the costs their efforts have imposed on our economies. I'll finally ask what strategic direction democratic governments might take in the coming tussles with China. about this event: https://fahrplan.events.ccc.de/rc3/2020/Fahrplan/events/11577.html

Names of people cannot be invalid. People have names. Most people do. People have first names and last names. Many people do. People have any sorts of names that often don’t fit fixed fields in the forms. These names may contain letters, accented letters, and other characters, that may cause problems to your code depending on the encoding you use. They may look differently in uppercase and lowercase, or may not be case foldable at all. Searching and sorting these names may be tricky too. And if you design an application, web form, and/or database dealing with personal names, you’ll have to take that into account. about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/XRLPKJ/

Der netzpolitische Wetterbericht schaut zurück und nach vorne: Was sind die aktuell relevantesten netzpolitischen Debatten und was erwartet uns im nächsten Jahr? Welche Themen erhalten zu wenig Aufmerksamkeit und wo gab es Erfolge für die digitale Zivilgesellschaft? Eine kleine Pandemie hielt in diesem Jahr die Politik, Medien und Gesellschaft in Atem. Auch wenn das alles überlagerte, gab es leider noch viel mehr netzpolitische Debatten mehr, die etwas untergingen. Die Große Koalition befindet sich auf der Zielgeraden und traditionell ist das ein Fest für mehr Überwachungsbefugnisse, auch auf europäischer Ebene durch die aktuelle deutsche Ratspräsidentschaft. Verschlüsselung ist wichtig, soll aber trotzdem Hintertüren bekommen. IT-Sicherheit geht nur mit Staatstrojanern. Uploadfilter kommen, auch wenn das in der PR-Broschüre anders versprochen wurde. Die EU-Kommission hat sich warm gelaufen, verschiedene Gesetzgebungsverfahren wie der Digital Servce Act oder die Dauerbrenner Verordnung gegen Terrorpropaganda und e-Evidence. about this event: https://fahrplan.events.ccc.de/rc3/2020/Fahrplan/events/11453.html

Virtual Pwn Networks (VPNs) add a network layer that should provide privacy and security. The privacy of VPNs clearly depends on their endpoint, thus, many companies run their own instances. We demonstrate that VPNs can be insecure nonetheless, as the users connecting to a company's VPN typically requires proprietary client software on their systems. These proprietary clients lack security, as we show based on the Cisco AnyConnect client for Linux and iOS. This research starts with a weird series of crashes on Jiska's iPhone. Due to her ongoing paranoia, she decided to use a VPN, and because she had to trust her university's network anyway, she decided to use her university's Cisco VPN service. Obviously, this did not go well, and soon she had crash logs with memory accesses to invalid addresses, because these addresses were representing Strings?! These errors only occurred when she had bad network connectivity and no debugging enabled, so nobody was able to reproduce them. Either way, to start analyzing Cisco AnyConnect security, the more accessible Linux client was the first option. Gerbert did a detailed analysis and documented how this client works, since there was no documentation at all and users basically install a black box on their system. The application is by no means just a VPN client anymore. In addition to VPN connections, the application offers a number of special features like auto updating, file deployment and host assessment. The AnyConnect Linux client is even able to execute arbitrary scripts provided by the server, thus, the user needs to ultimately trust the AnyConnect provider. Even if this trust assumption holds true, the client is so complex that various attack vectors become possible. Gerbert found two vulnerabilities resulting in three attack scenarios. One of the issues was fixed without being assigned a CVE, the other one got CVE-2020-3556. Matthias continued with the iOS client, which is even harder to analyze than the closed-source Linux client. Since many Linux features are not available on iOS and the client has a completely different design, the previously found attacks do not apply. However, he will show the general architecture of this iOS Cisco AnyConnect Network Extension. about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/TS9AQV/

This presentation provides some empirical insights (dynamic statistical figures and 3d models) into the question of how kinship and family shape health trajectories. This interdisciplinary study uses descriptive elements of sequence analysis and regression analysis based on the high-dimensional balanced panel data from the 7 waves of the Survey of Health, Ageing and Retirement in Europe (SHARE-project.org, waves 1-7) released between 2004 and 2017. The transformation of the traditional family has overlapped with population aging. Social and demographic challenges have increased the diversity of the life course and aging trajectories. Relatively little research has examined the interplay between changing families and health dynamics. However, family relations shape the determinants of health, such as care settings. How kin and family structures impact gender differences in functional health over the second half of life? about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/ANBNNG/

All over the Globe Care-receivers, healthcare professionals and makers join forces to co-create careables: tailor-made open solutions that tackle permanent or temporary disability. Careables is an open and inclusive approach to healthcare based on digital fabrication and collaborative making. We are looking at 3 years of co-creation and building a community that makes and shares open source hardware for health. The activities and designs are diverse. By showing a selection of Video Footage from the different sites of action in the Netherlands, Brazil, Ghana, Italy, Nepal, Germany and the online world we invite you to experience some of our key moments moments, be inspired and become part of the movement. about this event: https://talks.rc3.oio.social/r3c-oio/talk/WSU7ZL/

Seit April gibt es alle paar Wochen einen Livestream von Jugend hackt: Den Community Talk. In der einstündigen Sendung mit Moderation und Gästen geht es um wechselnde Themen aus der Jugend hackt Community. Hinter jedem Community Talk steht ein wechselndes Team aus Menschen der Community: Jugendlichen, Mentor*innen und Menschen aus dem JH-Team; in der Regel gibt es eine Moderation und ein bis vier Gäste. In dieser Folge geht es um die Entscheidung für das Informatikstudium und den Einstieg: Vier junge Menschen aus der Community, die im ersten, zweiten und fünften Semester Informatik studieren, sprechen über ihre Erwartungen und Erlebnisse und wie es ist, mitten in der Pandemie ein Studium zu beginnen. about this event: https://cfp.verschwoerhaus.de/rc3-2020/talk/S7WSN3/

<p>Nach dem Verkauf von Github an Microsoft werden sich viele die Frage gestellt haben, ob es nicht Alternativen gibt, über die man selbst die volle Kontrolle hat. Ich verwende seit zwei Jahren Go Anwendung Gitea sowohl für berufliche Projekte und Open Source. Gitea hat den Vorteil dass die Hürden für Installation, Wartung und Bedienung übersichtlich und schnell zu meistern sind.</p> <p>Um auch für coding Anfänger*Innen interessant zu sein gehe ich kurz auf die Grundlagen der Projektverwaltung mit git ein.</p> <p>Der Lightning Talk findet im Rahmen des c-base Programms der rc3 statt. Im Anschluss können Fragen über Jitsi diskutiert werden.</p> <p>Nach dem Verkauf von Github an Microsoft werden sich viele die Frage gestellt haben, ob es nicht Alternativen gibt, über die man selbst die volle Kontrolle hat. Ich verwende seit zwei Jahren Go Anwendung <strong>Gitea</strong> sowohl für berufliche Projekte und Open Source. Gitea hat den Vorteil dass die Hürden für Installation, Wartung und Bedienung übersichtlich und schnell zu meistern sind.</p> <p>Um auch für coding Anfänger*Innen interessant zu sein gehe ich kurz auf die Grundlagen der Projektverwaltung mit <strong>Git</strong> ein.</p> <h3>Inhalte</h3> <ul> <li>Einführung in die Versionsverwaltung mit Git und Verwendung von Git im Praxisalltag</li> <li>Gegenüberstellung verschiedener Git-Services (Vor- und Nachteile)</li> <li>Gitea : was macht es, was kann es</li> <li>Installation von Gitea (Linux, Windows, Gitea Webhooks und Api)</li> <li>Best Practice (Deploy keys, arbeiten mit Branches)</li> </ul> <h3>Links</h3> <ul> <li><a href="https://gitea.com/">Gitea Home</a></li> <li><a href="https://docs.gitea.io/en-us/">Gitea Dokumentation</a> (Engl)</li> <li><a href="https://github.com/go-gitea/gitea/">Gitea Source</a></li> <li><a href="https://www.atlassian.com/de/git/tutorials/what-is-version-control">Git Tutorial für Anfänger von Atlassian</a></li> </ul> <p><strong>Der Lightning Talk findet im Rahmen des c-base Programms der rc3 statt.</strong> Im Anschluss können Fragen über Jitsi diskutiert werden.</p> <p><i><strong>Hinweis:</strong> Die Beschreibung ist noch nicht vollständig. Ich werde sie im Laufe der nächsten Wochen ergänzen.</i></p> about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/KDWRT3/

In a time and space where even basic human interaction has to be facilitated by computer systems, we find ourselves in a web of systems that aggregate data in places we are unaware of. The vast scope of surveillance capitalism makes us yearn for protest and disruption. Yet, while fighting the power is a worthwhile cause, we suggest a complementary approach in wining and dining the power, and making bureaucracy do the dirty work for you. Strap in for a ride where asserting your God-given data rights isn’t only your duty as citizen, but easy, accessible and fun. The right to access, right to rectification, right to erasure, right to restriction of processing, right of notification of processing, right to data portability and right to objects are just some of the rights EU citizens enjoy since May 25th 2018, whether the website is hosted and operated in the EU or not. These rights should make it easy for citizens to get a grip on their personal information. We’ve taken the law into our own hands, and found out what it’s like excercising these rights. Spoiler alert: not good. We’ll walk you through the 58 requests we sent out, and the hilarious and dumbfounding ways they are set up currently. In addition to ventilating our frustration into the void, we make the case for automated data rights: retrieving, editing and removing your data should be as easy a changing your Facebook status. This vision is made real in the form of Aeon: a desktop app that gathers, visualises and allows for modification of your data. about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/987G3E/

Was ist eigentlich der Reiz sich mit alten Computern oder Technik im allgemeinen zu befassen? Es gibt viele Gründe sich mit alter Technologie zu befassen. Sehr begrenzte Resourcen führten dazu, dass Probleme mit cleveren Lösungen angegangen wurden. Viele Ideen sind vergessen, Technologien waren am Ende Sackgassen, andere haben sich durchgesetzt, nicht immer das Beste. Es gibt aber auch nostalgische Gründe, zum Beispiel um die Spiele seiner Jugend zu spielen, aber auch im auf alte Daten zuzugreifen. Das führt dazu, dass es auch jede Menge neue Entwicklungen gibt um diese alten Geräte weiterbetreiben zu können oder im Zusammenspiel mit moderner Technik funktionieren. about this event: https://cfp.chaoszone.cz/csr20/talk/RDCMJG/

Du bist auf der Suche nach einem neuen Projekt? Nachhaltigkeit ist dir dabei wichtig? Es gibt faire Schokolade, faire Kleidung, faire Grabsteine und faire Eheringe, aber faire IT bleibt weiter ein Nischenprodukt. Das wollen wir jetzt ändern! Gemeinsam wollen wir in diesem interaktiven Workshop kreative Lösungen für faire Elektronik finden. about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/BKVBSU/

Since 2013 the Free Software Foundation Europe has been fighting for the right users have to choose and use their own routers and modems. After the successful for net neutrality in Europe in 2015, users in Europe have the right to freely choose routers and modems to access the Internet. Router Freedom is the standard, empowering users to control their devices with clear advantages for security, privacy and ecological footprint. Now, challenges on national implementation of the European rules will put this right under risk. In parallel new demands are being posed against commercial practices involving software that is sold with hardware by default, for instance operating system in laptops, browsers and app stores. The talk will provide an overview on the recent successes for router freedom and the legal challenges against net neutrality in Europe. about this event: https://talks.rc3.oio.social/r3c-oio/talk/TRSU9G/

This talk will be about FPMON, a browser extension that shows you where, when and which browser fingerprinting method is applied against you. You can use it to test your favorite websites and check your own services for 3rd-party fingerprinting scripts. It can also be used to test various browser privacy tools. Tracking users is a ubiquitous practice in the web today. User activity is recorded on a large scale and analyzed by various actors to create personalized products, forecast future behavior, and prevent online fraud. While so far HTTP cookies have been the weapon of choice, new and more pervasive techniques such as browser fingerprinting are gaining traction. Hence, in this talk, we describe how users can be empowered against fingerprinting by showing them when, how, and who is tracking them using JavaScript fingerprinting. To this end, we conduct a systematic analysis of various fingerprinting tools. Based on this analysis, we design and develop FPMON: a light-weight and comprehensive fingerprinting monitor that measures and rates JavaScript fingerprinting activity on any given website in real-time. Using FPMON, we evaluate the 10k most popular websites to i) study the pervasiveness of JavaScript fingerprinting; ii) review the latest fingerprinting countermeasures; and iii) identify the major networks that foster the use of fingerprinting. Our evaluations reveal that i) fingerprinters are present on many popular websites with sensitive contents (finance, news, NGOs, health, etc.); ii) they run without user consent and subvert current privacy regulations; and iii) most countermeasures can not sufficiently protect users. about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/DQR7PE/

New research opportunities, a flood of scientific data and the future of data storage More than 60 years ago Rosalind Franklin’s X-ray image of DNA helped solve the structure of this important molecule. Today scientists at the world's largest laser, European XFEL, generate thousands of images every second. This data is used to unravel the structures and movements of viruses, nanoparticles, plasmas and magnetic materials. How do researchers store and analyse petabytes of data arriving at a rate of thousands of frames a second? And how could basic research into magnetism and materials pave the way to new data storage media for the future? about this event: https://fahrplan.events.ccc.de/rc3/2020/Fahrplan/events/11588.html

I will go through the steps it takes to make Linux run on an Arm System-on-Chip where it previously didn't run, or only in a terribly outdated vendor fork. Sometimes you find yourself with a piece of hardware that runs Linux, but only a very outdated version of it. In such cases it can be interesting to port a modern version of Linux. I will go through the configuration and drivers you need to write in order to get Linux booting on an Arm SoC: - Early serial port debugging - Devicetree - Interrupt controller drivers - Timer interrupts - etc. about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/LC88GB/

Jugend hackt 2020 war ganz anders als gedacht, wie überraschend. Doch so sehr die netzaffinen Bubbles die weniger digital-Affinen zur Digitialisierung gedrängt haben, wurde dieses Jahr deutlich, dass auch bei uns noch vieles möglich war, das wir bislang nicht ausgeschöpft haben. So gab es dieses Jahr die ersten remote-Hackathons, durch die vielen Videokonferenzen viel stärkere Einbindung von Jugendlichen in unsere Orga, regelmässige Twitch-Livestreaming-Angebote uvm. Nina und Daniel plaudern aus dem Nähkästchen und stehen danach für ein Q&A bereit. about this event: https://cfp.verschwoerhaus.de/rc3-2020/talk/J9ELT3/

From the AFL++ team comes a talk about the core concepts of fuzzing, novel fuzzing research, a library, and parts of fuzzing that can be edited and swapped out. In this talk, we present the theory, building blocks and ideas behind our evolution to AFL++, a powerful and flexible new fuzzer design. Instead of a command line tool one-trick-pony, security researchers will be able to build the perfect fuzzer for their target, and extend parts of their fuzzer with their own code. After dealing with the monolithic C codebase inherited from AFL for over a year, we learned how to build a better toolsuite from scratch, as a library, with reusable components and easily maintainable code. The design of the framework follows a clear division of fuzz testing concepts into interconnected entities. Like LEGO bricks, each part of the fuzzer can be swapped out with other implementations, and behavior. The first prototype, libAFL, was developed as one of the AFL++ Google Summer of Code projects in C. After seeing that the concepts work in practice, we are now creating a powerful fuzzing framework in Rust. This talk discusses these concepts and how they relate to existing fuzzers at the state of the art. Thanks to its flexibility, the library can be used to reimplement a wide variety of fuzzers. We discuss how we tackle common problems like scaling between cores, and embedding the fuzzer directly into the target for maximum speed. The building blocks discussed in this talk will be the engine under the hood of a future AFL++ release, and, hopefully, your next custom-build fuzzer. about this event: https://pretalx.rc3.studio/rc3-channels-2020/talk/DT7VHD/