Chaos Computer Club - archive feed

Biohacking for girls, gays, theys, and undisclosed entitites. Why biohacking is good, cool, and a human right A brief history of biohacking and why endocrine biohacking is so cool how to manage your own endocrine care how to access managed endocrine care safe sourcing of international pharmaceuticals alternative routes of care (and modelling risk) Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/17-endocrine-biohacking-friends-of-bl%C3%A5haj-and-beyond

It sounds easy enough: build a clock that always shows the correct local time, no matter where you take it. Mobile phones can sort-of do this, but they manage by listening to the cell towers, so this won't work everywhere. "Radio controlled" clocks just listen to a low frequency broadcast, there's a few different transmissions across the world but they're incompatible and know nothing of time zones. Desktop computers can use the internet for time, but you still have to tell it what zone you're in. Really, it should be possible to build a clock with nothing more than a GPS receiver, which figures out the time on its own, with no need for internet or cellular connection. It turns out that doing this requires an on-board world atlas, a spherical coordinate point-in-polygon algorithm, and a complete database of offsets and daylight savings rules. I finally created a clock that automatically corrects itself as you carry it across country and timezone borders. The journey to this point was so ridiculously tedious that it borders on the absurd. In this talk I'll run through some of the highlights, and of course no talk about GPS time would be complete without mentioning leap seconds, which cause problems even when they don't happen. about this event: https://www.emfcamp.org/schedule/2024/337-gps-time-leap-seconds-and-a-clock-thats-always-right

Graphite kombiniert Vektor (svg) und pixelbasierte Arbeitsweisen in einer FOSS Grafik-Design Software. Das Node-basierte Bearbeiten erlaubt nicht destruktive Workflows und die prozedurale Generierung von Kunst. In diesem Talk werfen wir ein Blick unter die Haube und ich gebe ein Einblick, warum wir dafür eine eigene Programmiersprache entwickeln und was man damit Cooles anstellen kann. https://graphite.rs/ Zuerst werde ich einen Überblick über das Graphite Projekt geben und den aktuellen Stand vorstellen. Dann erkläre ich wie die node-basierte funktionale Programmiersprache funktioniert und gebe einen Ausblick darauf, was das alles für aufregende Anwendungen ermöglicht. about this event: https://cfp.gulas.ch/gpn22/talk/QURWCW/

Are you secretly a spy and/or passionate about open-source? Maybe you don't trust a cloud-hosted service with your highly classified information, or perhaps you like to build things for yourself. In this light-hearted talk, you will learn how to make a real-time on-device GenAI-powered application that can live transcribe and summarize conversations without internet access, using open-source components. Our journey begins with an introduction to open-source LLMs and the latest trends in running GenAI tools on your own hardware. We will build up our application step-by-step, first creating a live streaming voice-to-text transcription pipeline, then an LLM-based conversation summarization layer, presented within a Streamlit frontend, with conversation summaries sent to a lightweight Django API backend for storage. Here's why this matters: 1️⃣ Cloud-hosted SaaS tools cannot store highly sensitive information. 2️⃣ Good open-source alternatives exist for most GenAI tasks; the more people who use them, the more they will thrive. 3️⃣ Commercial tools will solve for common use cases, but developers can build personalised tools that are highly specialised for their own bespoke needs. This talk is tailored for Python enthusiasts and requires no ML expertise. By seeing a practical demo come together piece by piece, attendees will gain a deeper understanding of how to build their own complex Generative AI applications and be pushed to imagine what they could make for themselves using on-device computation in real-world scenarios. Expect plenty of Python code and some fun live demos, with GitHub code provided for attendees to try it at home. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/183-whispered-secrets

Caves present a challenging environment to survey and map. Conditions are often wet, muddy and involve confined spaces. This talk will look at how the technology we have developed has changed how we measure and create maps of cave systems. From traditional sighting compasses, tape measures and paper and pencil, to laser measures, bluetooth data transfer and PDAs or mobile phones as recording and drawing devices. Then once the data is collected underground, how open source software has been developed by cavers to process the data and draw maps which adjust to later changes in positions of parts of the cave when more data is collected or corrected. We'll look at loop closures, explorations of places no person has gone before, and different ways to present a 3 dimensional map of a 70km cave system. There will be plenty of photographs and video clips of cave exploration, along with live software demos and viewing of digital maps. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/256-how-to-map-caves

It turns out that building a Hackspace in a rural area is really hard. From the name of the group causing security concerns to finding a venue and members, a lot of the challenges that are presented in rural environments don't really seem to be present in the cities where hackspaces are most frequently found. In this talk, I'll go over the challenges I've faced in building a Hackspace in a rural town and hopefully show how others can avoid the same pitfalls! about this event: https://www.emfcamp.org/schedule/2024/210-small-town-big-ideas

How does your home router get to the "internet" in the UK? With the rise of alternative fibre networks, and major operators finally deploying fibre to the home, the copper cables that have connected us since the 1900s are being rapidly replaced with fibre networks. This talk will dive into the detail of how these new optical fibre access networks being deployed today actually work, and how cat videos get from the internet to your home. about this event: https://www.emfcamp.org/schedule/2024/305-the-last-miles-of-the-internet

Aufbauend auf meinem [talk von letztem Jahr][1] werden wir in diesem Talk ein bisschen tiefer in die Kubernetes Materie einsteigen und darüber reden wie man denn jetzt überhaupt mal irgendetwas in sein Kubernetes Cluster rein deployed. Wir werden auch versuchen das ganze halbwegs sinnvoll zu tun ohne alle seine Secrets oder Passwörter im Klartext in Git zu haben, oder die YAML config unnötig zu duplizieren. [1]: https://media.ccc.de/v/gpn21-49-from-0-to-kubernetes-eine-einfhrung-zur-container-orchestrierung-mit-praktischen-antworten-auf-die-hufigsten-fragen-wie-warum-oder-wann- Der Talk ist klar für Kubernetes Neulinge die bisher noch keine Erfahrungen damit gemacht haben, wie man denn jetzt mit Kubernetes überhaupt irgendetwas deployed. [Letztes Jahr][1] haben wir in [meinem Talk][1] ja darüber geredet was es denn überhaupt so grundsätzlich für verschiedene Optionen gibt. Dieses Jahr werde ich etwas konkreter darauf eingehen wie man denn nun mit `kubectl`, `helm` und `kustomize` Dinge in Kubernetes deployen kann und wie wir mit [SOPS][2] unsere secrets auch wirklich secret halten. [1]: https://media.ccc.de/v/gpn21-49-from-0-to-kubernetes-eine-einfhrung-zur-container-orchestrierung-mit-praktischen-antworten-auf-die-hufigsten-fragen-wie-warum-oder-wann- [2]: https://github.com/getsops/sops about this event: https://cfp.gulas.ch/gpn22/talk/3RV3BL/

Kann ich als Typ 1 Diabetikerin in die Apotheke gehen und dort alles bekommen, was ich so an Verbrauchsmaterial brauche? Kann ich einfach ins Krankenhaus gehen und die haben alle Dinge vorrätig, die ich brauche? Die Antwort auf diese beiden Fragen ist nein und was das bedeutet und wieso das so ist werden wir uns ein bisschen in diesem Talk anschauen. Zudem möchte ich aufzeigen wie es in anderen Ländern ist und welchen großen Einfluss auf die Diabetiker*innen eine mögliche "Verbesserung" unseres Systems hätte. about this event: https://cfp.gulas.ch/gpn22/talk/EF77XF/

What is the best tiny toolkit for hacking in a field, fixing robots in the wild and repairing products for friends? We've spent years creating our own bespoke tiny toolkits, with tiny tools, that work for our own specific needs as makers and hackers. In this talk, we will share the knowledge we’ve gained along the way, a philosophy of tools and tiny toolkits, the best of the tool kits we’ve assembled, and the most trusted tools we've collected, made and modified. We hope that you too, will be inspired to make your own tiny tool kit. Small is Beautiful. about this event: https://www.emfcamp.org/schedule/2024/265-the-tiny-tool-kit-manifesto

In a 2012 talk about running your own infrastructure I made some predictions on the future and made some claims. A long time has passed and let's see what came true and what was not so correct. After that talk we also started building our own infrastructure. I will show what we are running, what you can run and share experiences running infrastructure for larger groups of people. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/24-run-your-own-fucking-infrastructure-2024-edition

At EMF 2022 I ran a drop in sewing workshop. Whilst it was popular, one question that I didn't have time to answer properly was the broad: "I want to make my own clothes: where do I start?" I'd like to answer just that question in this talk. I'll cover things like: tools/equipment you need (and what you don't!), how to read a sewing pattern, key things to remember and suggestions for easy projects to get started with. I've previously worked costuming for theatre and designing/making wedding dresses. Whilst my main focus has been on garment sewing, I'm happy to help people with their wild projects: how to make your projects waterproof, how to make wacky shapes and how to work with weird fabrics are all things I can help with. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/258-seams-like-magic-a-primer-on-sewing-basics

Meine Erfahrungen mit verschiedenen politischen Instanzen (Petitionsausschuss, verschiedenen Bundesministerien etc) auf dem Weg zu rechtlicher Klarheit und Sicherheit für dein Balkonkraftwerk. Der Kampf gegen Bürokratie und Idiotie. Brühwarm und doch schon wieder kalter Kaffee auf die Mühlen der Demokratie. Politik beeinflussen und mitmachen ist einfacher als man denkt. Gewählte VolksvertreterInnen kochen auch nur mit Wasser und sind auf Expertise von außen dringend angewiesen. Wir alle teilen den Common Code des demokratischen Grundrechts zu wählen, gewählt zu werden oder auf die Politik, z.B. mithilfe einer Petition, direkt Einfluss zu nehmen. Einigen reicht es, alle paar Jahre ihr Kreuzchen zu setzen und den Rest den gewählten PolitikerInnen zu überlassen. Um aber an die Wurzel verschiedener Probleme zu gelangen, braucht es manchmal nervige Penetranz, Commitment und genaues Hinschauen auf die Finger der gewählten VolksvertreterInnen. Nicht alle haben Lust dazu. Aus gutem Grund. Ich habe es trotzdem getan und berichte euch, was ich dabei erlebt habe. PolitikerInnen machen ihren Job am besten, wenn MitbürgerInnen/ExpertInnen und verschiedene Sichtweisen (Wurzeln) gebündelt werden, um an konstruktiven und nutzbaren Lösungen zu arbeiten. Dabei möchte ich es vor allem als Dialog gestalten und auf eure Fragen eingehen. about this event: https://cfp.gulas.ch/gpn22/talk/NMUWVQ/

In diesem Talk möchte ich aus der Sicht eines Informatikers darüber reden wie Stellwerke funktionieren (kurz) und wie sie geplant werden. Insbesondere werde ich den aktuellen Stand der Digitalisierung der Stellwerksplanung humoristisch analysieren und kritisieren. Zielgruppe sind alle ITler die sich für die Bahnwelt interessieren, verständnisrelevante Grundlagen der Bahnwelt werden kurz eingeführt. Der Talk setzt sich kritisch mit den Schnittstellen zwischen Leit- und Sicherungstechnik (Stellwerkstechnik) und Informatik auseinander. Ich zeige Perspektiven auf, wie man diese Stellwerkswelt mit bekannten Techniken der IT-Welt (besser) digitalisieren kann, und was dem entgegensteht. Die Inhalte reichen von NP-Vollständigkeit über Datenmodelle für Stellwerke, das Open-Source-Verständnis der DB und formaler Logik zu deutsche Verwaltungsvorschriften. Ich plane beruflich Leit- und Sicherungstechnik bei der Deutschen Bahn, halte diesen Vortrag aber privat. about this event: https://cfp.gulas.ch/gpn22/talk/HYAMKF/

During WW2, British plane crews sometimes found themselves imprisoned behind enemy lines. With only light punishments for escape attempts, some of these prisoners worked on incredible schemes to get back home. This illustrated talk will talk about these escapes, from famous ones to those that are undeservedly forgotten. It's a story of impressive creativity, of people trying to hack their way to freedom, including tunnels, dummies and an attempt to build a plane. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/359-how-to-escape-from-a-ww2-pow-camp

How to specify and deploy an off-grid system in the UK. Covers power requirement calculations and performance tradeoffs in the real world. How to handle low production near winter solstice. Touches on battery selection, care and feeding and dimensioning for a given power demand. How Inverters were selected. Reliability issues. Aimed at people wanting to deploy their own systems. I've been running off grid for the last 5 years in the West Midlands, and will share the what I have learnt during that time. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/188-how-to-go-solar-off-grid-in-the-uk

When we’re out and about, text messages (and also voice calls, mobile data etc.) sent and received through our everyday smartphones are all routed through fixed land-based ‘cell tower’ antennas no more than a few km distant, which form what we might term a ‘Terrestrial Network’ (TN). In rural areas, we often lose cellular wireless signal entirely, even within highly technologically advanced economies such as the UK, EU, US etc. We then find that we are unable to send or receive text messages, even emergency messages. In the 1990s, visionary scientists and engineers developed alternative voice and messaging systems, using satellites as their ‘flying’ cell towers. We will discuss an example of such a pioneering network, called Iridium, which has operated successfully from the late 1990s right up to the present day. Today’s scientist and engineer visionaries are now proposing that the same ‘space-based’ capabilities could be added to our everyday smartphones, without needing to purchase a separate satellite-messaging device. This would allow our phone, when necessary, to switch from the land-based TN to the space-based ‘Non-Terrestrial Network’ (NTN). In this presentation we will discuss some of the technical challenges in achieving this ‘Direct-to-Device’ (D2D) satellite messaging feature, and some of the solutions which are being proposed, and even already being tested for real. One of the leading players in this space is Starlink, so buckle up for a wild ride! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/40-sending-text-messages-through-space

The ceremony in which we open the festival. Hello! about this event: https://www.emfcamp.org/schedule/2024/550-opening-ceremony

A Bad Apple demo with the longest explanation ever – how I accidentally wrote my own image compression algorithms to cram more FPS into an ESP8266 than ever before. An exploration of data compression in the context of simple video compression. There won't be many real-world codecs in here, but don't worry – you'll accidentally learn all the fundamentals of data compression anyways. This talk is very beginner-friendly. about this event: https://cfp.gulas.ch/gpn22/talk/SAXCFX/

GPS / GNSS Jamming und Spoofing ist zu einer ernstzunehmenden Gefahr für Verkehr, Navigation und kritische Infrastrukturen geworden. Wir betrachten die damit verbundenen Risiken sowie Hintergründe, Geschichte, Technologien und Abwehrmaßnahmen. In den letzten Monaten sind die GNSS Jamming und Spoofing Vorfälle weltweit signifikant angestiegen - vor allem, aber nicht nur, rund um die Krisenherde unseres Planeten. Zum Verstehen der Hintergründe werfen wir einen Blick auf die Geschichte des Spoofings und die Technik hinter GNSS und PNT. Ebenso schauen wir uns anhand echter Beispiele aktuelle Jamming und Spoofing Technologien an. Welche realen Risiken ergeben sich daraus für den Flugverkehr und kritische Infrastrukturen? Wie lässt sich durch technologische und organisatorische Maßnahmen die Resilienz bestehender Systeme erhöhen? about this event: https://cfp.gulas.ch/gpn22/talk/BK9CWC/

Hörgeräte bringen Lebensqualität zurück. Ich habe relativ jung festgestellt, dass ich nicht gut höre, es aber lange hinausgezögert mich drum zu kümmern. Jetzt habe ich seit 3 Jahren ein Paar Hörgeräte und bereue es, dass ich mich nicht schon früher darum gekümmert habe. Ich möchte von meinen Erfahrungen berichten und jeden ermutigen, zumindest mal einen Hörtest zu machen, und keine Angst davor zu haben Hörgeräteträger zu werden: Hörgeräte sind ein cooles Stück Technik! Ich möchte kurz meinen Leidensweg beschreiben und meine Erfahrungen teilen und zeigen, dass Hörgeräte ganz schön viel Technik auf kleinstem Raum unterbringen: Fast wie Airpods nur in Super-Premium. Ich möchte auch Anderen die Hemmung nehmen und ermuntern, sich mit dem Thema zu beschäftige wenn man den Eindruck hat schlecht zu hören oder auch nur schlecht zu verstehen. Hören ist echte Lebensqualität. about this event: https://cfp.gulas.ch/gpn22/talk/S3CJD3/

Nowadays, many websites rely on user-generated content, e.g., by allowing users to upload images, videos, documents, or other files. If not handled carefully, Unrestricted File Uploads (UFUs) may appear and become a serious security issue. Our academic results show that some UFU types still fly under the state-of-the-art vulnerability scanners' radars, leaving websites at risk of severe vulnerabilities, such as Remote Code Execution or Cross-Site Scripting. Thus, we propose a File Upload Exploitation Lab (FUEL) to (em)power vulnerability scanners to become better at identifying UFUs and invite the community to reFUEL. If web applications fail to validate or handle user uploaded files properly, security issues such as Cross-Site Scripting or Remote Code Execution may arise. While PHP-based web applications are known to be prone to Unrestricted File Upload (UFU) vulnerabilities, other programming languages and web frameworks might be affected, too. Academic and non-academic work has covered many types of UFUs vulnerabilities and created vulnerability scanners to identify them. We have compared four different vulnerability scanners (BurpSuite, ZAP, FUSE and Fuxploider) with our novel File Upload Exploitation Lab (FUEL) to identify potential shortcomings in the detection capabilities. The results show that none of these state-of-the-art scanners manages to identify the UFU vulnerability in all of the 15 FUEL scenarios. Attendees of this talk will learn about UFUs and some less-known file upload bypasses. Further, we hope to raise the awareness that, similar to humans, no tool is perfect. Last but not least, we will invite the community to extend FUEL with more UFU scenarios to create a more thorough vulnerability scanner evaluation framework. The academic paper is to be published at DIMVA 2024, but we wanted to give the community a sneak preview :) about this event: https://cfp.gulas.ch/gpn22/talk/FSMH9M/

Spätestens seit dem Brand eines Straßburger Rechenzentrums im März 2021 wissen wir, dass manche Anbieter die Cloud-Migration zu wörtlich nehmen. Der Straßburger Brand war jedoch nicht der einzige Unfall eines Rechenzentrums. In diesem Vortrag zeige ich Bilder und Videos von Rechenzentrums-Bränden, Wasserschäden und Naturkatastrophen. Ich spreche über die Ursachen und Auswirkungen dieser Unfälle, sowie über die Maßnahmen, um eigene Systeme gegen solche zu schützen. Neben schweren Katastrophen zeige ich weitere Dinge aus der Kategorie "dumm gelaufen". about this event: https://cfp.gulas.ch/gpn22/talk/DGMEBH/

I will give some insight to the world of (post-quantum) cryptography and what questions in this world look like, from the perspective of a newcomer. In particular, I will give a user-friendly introduction to the Random Oracle Model, a tool frequently used in cryptography proofs. We will look at where the model fails and what problems come up when giving you enemies a quantum computer. No prior knowledge in quantum or cryptography is required to follow this talk, anyone who has programmed before will be able to follow. Last October, I started my PhD with the topic 'Quantum Security of Memory-Hard Functions' at the University of Amsterdam. Since then, I have been working on building an understanding of the tools typically used to prove security of cryptographic constructions. In this talk, I want to give you an introduction to the Random Oracle Model, a typical building block and its application to my topic. We will start from basic assumptions and work our way up to the full model and the construction of memory-hard functions. On the way, we will explore where the model breaks and what challenges arise once we assume our attacker has access to a quantum computer. about this event: https://cfp.gulas.ch/gpn22/talk/JJM9PN/