Chaos Computer Club - archive feed

Overstory uses satellite imagery plus machine learning to understand individual trees - at scale. I'll talk about how we do this, some of the practical challenges of remote sensing and earth observation, and how we translate this into real world prevention of wildfire and power outage by working with utilities, who manage many thousands of miles of power cables. about this event: https://www.emfcamp.org/schedule/2024/417-when-a-tree-falls-in-the-forest-does-it-cause-a-fire

Bingo meets tech in an interactive, smartphone powered comedy act like no other. Experience a whole new side of bingo created by Foxdog Studios (Lloyd & Pete) and their robotic bingo mascot, Mr Bing. Expect chaos, games and laughs. Join the fun without leaving your seat as bingo cards are beamed to your phone using their own locally hosted web-based software. Claim your prize by tapping the button and blast “Bingo!” out the main speakers (but be ready to go to bingo jail if you cry wolf). Full of lo-fi robotics and novelty instruments, this hit show is coming from the Edinburgh fringe to Electromagnetic Field. “The lo-fi tech wizardry is ingenious, and it’s irresistible fun to play along” Guardian As seen on CLICK BBC and THE PADDOCK Channel 4 Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/286-foxdog-studios-robo-bingo

Fotografieren auf Chaos Events ist eine Herausforderung. Im Vortrag möchte ich Möglichkeiten zeigen wie es trotz unterschiedlicher Regelung möglich ist cool Bilder zu machen und die Stimmung bestmöglich einzufangen. Fotografieren auf Chaos Events ist eine Herausforderung. Veranstaltungen wie das Camp oder der Congress haben eine eher restriktive Foto-Policy, die GPN dagegen hat eine eher liberale Version, die ein anderes Herangehen und damit andere Bilder ermöglicht. Mit meinem Vortrag möchte ich die Diskussion darüber weiterführen, wie ein für alle akzeptabler Umgang mit den verschiedenen Policies möglich ist und wie trotzdem kreative Bilder entstehen können, die die Stimmung bestmöglich einfangen, ohne den sozialen Frieden zu gefährden. Dazu möchte ich auch die Ergebnisse meiner Umfrage nach dem letzten Congress vorstellen, in der mehr als 1000 Menschen ihre Meinung zur Photopolicy geteilt haben. about this event: https://cfp.gulas.ch/gpn22/talk/J7XBBK/

Passwörter sind nicht mehr zeitgemäß! Seit 2023 wird viel Hype um das Thema Passkeys betrieben, viele IT-Dienstleister, Cloud-Anbieter und Mailprovider bieten das System schon an. Aber wie funktioniert das eigentlich? Wie gut ist die Nutzbarkeit, im Vergleich zu Passwörtern und Multi-Faktor Authentifizierung? Warum sind passkeys immun gegen phishing und was unterscheidet sie von "herkömmlichen" Authentifizierungs-Faktoren wie App-notification und Microsoft Authenticator? Vor allem: was muss ich als Service-Anbieter tun, um meinen Nutzern und Kunden auch Passkeys-Authentifizierung anbieten zu können. Der Vortrag wird diese Fragen beantworten und eignet sich nicht nur für Entwickler und Betreiber von Software, sondern für alle Menschen, die sich selbst sicher und einfach bei Internetdiensten anmelden wollen. about this event: https://cfp.gulas.ch/gpn22/talk/ULQSLD/

As a semi-professional plane spotter when I hear or see an aircraft fly over I will sometimes point at it. But I can't always tell if there's an aircraft flying over, and I can't be awake 24/7 so I miss some, which I find unacceptable. Enter the auto spotter, a robot that is capable of pointing at the nearest aircraft continuously. The auto spotter uses 1090Mhz ADS-B Out transmissions to work out where the nearest aircraft is relative to its location and works out the bearing and elevation for a pointer. This is the same public data that is used to feed flight information services and can be received by anyone with the right (relatively cheap) equipment; all commercial and many general aviation aircraft around the world use it to transmit their positions, speeds, altitudes and more. You may have seen the pointer at EMF2022 (in between rain showers) and this talk goes into some of the details of how it was developed, and how it works. about this event: https://www.emfcamp.org/schedule/2024/45-the-auto-plane-spotter-a-robot-to-point-at-aeroplanes

Few things are as polarizing today as the production of oil, and unconventional production (including 'fracking') is even more controversial. Whether you're for it or (more likely) against it, it's well worth knowing what is actually involved in making it happen and where the real risks are. The presenter recently left a long career in the US oil industry and will give you a view into this world without any spin or agenda and instead give you the opportunity to deepen your understanding of what it's really all about. What is 'unconventional oil'? What does the process to produce it look like on the ground? What equipment is used? What are the real environmental impacts (beyond climate change)? Whether you want to geek out about heavy equipment or to become a more-educated protester, you'll learn something new. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/59-what-the-frack

It isn't just you. There are so many pressures on us, not only from our jobs and industry, but from the state of society, politics and the economy as a whole. Join me on a joyful journey through the alphabet of overwhelm, we’ll cover Anxiety, Burnout, Capitalism, Depression, Emotional Labour and many other fun factors. We’ll talk through how to recognise symptoms in yourself and your friends. Lets learn how to survive, and hopefully thrive, in this ABSea of sh*t. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/321-is-everything-difficult-or-is-it-just-me

Tidal energy is one potential source of green energy but the impact of placing large turbines on the seabed is not fully understood. In particular, how are sea mammals coping with such changes in their environment? Do we need to put automatic mitigations in place – is it even possible? For over a year, we have been annotating more than 60 terabytes of data, finding these rare events of interest. We’ve looked at whether Artificial Intelligence, combined with sonar, can automatically spot and classify interesting underwater objects. We’ve tried several approaches, some more successful than others, but there are promising results with movement detection and segmentation. This talk covers our initial findings - where we went wrong and one promising approach that we are still actively researching. I'll be talking about U-Nets, convolutional neural networks, sonars and the unknown entities that may lurk in the depths! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/223-spotting-seals-with-sonar-and-a-i

What do semaphore, octopuses, Scrabble, rotary telephones and Microsoft Paint have in common? If you've been to previous EMFs, you might recognise these as some of the themes for our puzzles! We are Dreamcat and we are a group of friends who made our first puzzlehunt for EMF 2018 and haven't stopped since. We love the combination of escape room, treasure hunt, video game, and just a dash of immersive theatre. We want to share that enthusiasm with you, talk about our top mistakes from the last 6 years and what we learned, and hopefully inspire you to go make your own puzzlehunts. Come along to learn: - How to co-opt serious IoT tools for frivolous escape room purposes - Why Portal is still the best video game ever made - How hard, actually, is “too hard” - Exactly how many paperclips were harmed in the making of this year's experience No spoilers for this year's puzzlehunt. Unless you come talk to us at the bar after. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/101-how-to-make-a-puzzlehunt

Join BAFTA winning digital artist Seb Lee-Delisle in this engaging talk about his life and work over the past few years. Although Seb is known for his large and spectacular outdoor light and laser shows, he is fundamentally a coder. In this fun keynote, he’ll talk about the unique challenges of working with computers at this scale, and demonstrate how to code mesmerising particle effects with an actual laser. about this event: https://www.emfcamp.org/schedule/2024/119-coding-beyond-the-screen

Um mit Retro-Spielen Spaß zu haben, braucht man entweder die alte Originalhardware oder man greift zu PC und Emulatorsoftware. Was wäre aber, wenn man die alte Hardware nachbilden könnte? Ich zeige, wie man mit sogenannten FPGAs fast vergessene Technik auch ohne Lötkolben daheim nachbaut und so alten Spielen neues Leben einhaucht. FPGAs (Field Programmable Gate Arrays) sind eine eigene Chip-Familie. Anders als z.B. klassische Prozessoren oder Speicherchips erfüllen FPGAs ab Werk keine spezielle Funktion. Erst durch passende Konfiguration erfährt das FPGA, was es eigentlich darstellen soll. Normalerweise setzt man sie ein, wenn es um selten benötigte und spezielle Funktionen geht, die Halbleiter von der Stange nicht bieten und für die die Entwicklung eines eigenen Halbleiters zu teuer und/oder zu aufwändig wäre. Wir nutzen FPGAs, um Chips nachzubilden, die nicht mehr hergestellt werden. Dabei machen wir uns zu Nutze, dass moderne FPGAs komplette Geräte der Homecomputer-Ära in einem einzige Chip unterbringen können. Mit dem MiST habe ich vor über 10 Jahren eines der ersten Geräte dieser Art entwickelt und auf den Markt gebracht. Seitdem ist die Zeit nicht stehen geblieben und mit dem Nachfolger MiSTer ist FPGA-Retrogaming endgültig in der Breite angekommen. Das hat wiederum weitere Entwickler auf den Plan gerufen, sodass inzwischen alle wichtigen Computer und Konsolen der 80er und viele der 90er auf FPGAs umgesetzt wurden. Ich werde erklären, wie sich FPGA-Nachbildungen von Emulatoren unterscheiden und was ein FPGA besser als eine Emulation auf Software-Basis z.B. auf einem PC macht und wo die Nutzung von FPGAs an ihre Grenzen stößt. Neben immer größeren FPGAs, die die Umsetzung immer jüngerer Maschinen ermöglichen, sind auch die Entwicklungen in Fernost im Billigbereich interessant und die Geräte auf denen man FPGA-Projekte aufbauen kann, werden immer erschwinglicher und kleiner. Wie FPGA-Retrogaming funktioniert, wie man damit auch daheim mit kleinem Budget in die Entwicklung integrierter (Retro-)Schaltungen einsteigen kann und wo FPGA-Retrogaming heute steht, werde ich im Detail beleuchten. about this event: https://cfp.gulas.ch/gpn22/talk/HVH9HE/

Internet voting allows you to submit your vote over the internet using your own device. This talk will give an introduction into the topic: Why might governments, associations or political parties turn to internet voting? What are the security requirements of such a system, and how does this differ to e-banking or postal voting? How do such systems work, and what separates a bad from a good (or at least a "better") voting system? Everything is better digitalized: e-banking, crypto currencies, smart homes, vtubers, ... - so when can we finally vote online? /s When a government, and an association or a political party starts to provide internet voting to its voters, it usually aims to increase turnout or reduce cost, while retaining a similar level of security than their current voting methods. But the security of internet voting is hard to compare to the security of other voting channels or other secure systems, such as e-banking. Further, reduced cost or increased turnout depends heavily on the context the election is held in. But what if the decision is taken, that internet voting needs to be provided? Simple systems usually do not cut it, as they need to relay on strong trust assumptions in the system provider, the administrators and even the voters. Against rogue employees or even nation-state adversaries, a black-box system stands no chance. Even in strong adversarial scenarios needs the system to keep votes secret, but at the same time remain transparent to verify the votes have been tallied correctly. Internet voting systems are in active use for political elections, for example in Switzerland. Looking at the history of such systems shows how full transparency and independent evaluations are necessary to detect flaws. For non-political elections (e.g. universities, associations), few available systems are sufficiently transparent to even begin evaluating them, and certifications such as BSI's corresponding Common Criteria are insufficient on their own. To summarize, the talk answers the following questions: - Why institutions would want or not want to use internet voting. - What properties an (internet) voting systems need to achieve. - What separates a bad from a better internet voting system. No scientific / computer science background is need to follow this session. about this event: https://cfp.gulas.ch/gpn22/talk/TKRTLZ/

Woher kommen sie? Was sind sie? Und wo gehen sie hin? - Ein Einstiegs-Talk mit vielen Live-Demos über das Erstellen, Modifizieren und Zurückziehen von PGP (Pretty Good Privacy) Keys in GnuPG (GNU Privacy Guard). E-Mail ist selten Ende-zu-Ende verschlüsselt. Eine Möglichkeit, Vertraulichkeit und Integrität in E-Mail sicherzustellen ist PGP. Wenn mensch nicht weiß was mensch tut und z.B. nur Keys mit default Einstellungen generiert, kann mensch schnell in Probleme laufen wie: "Ich habe eine E-Mail Adresse mit vier Aliassen und habe jetzt fünf Key-Paare und gehe in ihnen unter." oder "Ich habe mein Passwort/Key verloren, was mache ich jetzt?". In diesem Talk geht es um eine Möglichkeit, mit PGP Keys in GPG umzugehen, von ihrer Generierung bis sie auslaufen oder zurückgezogen werden. about this event: https://cfp.gulas.ch/gpn22/talk/TDLJP9/

A bit more than two years ago, someone contacted our Hackspace asking if we would be interested in an electronically defective, but probably repairable industrial coffee vending machine. An industrial coffee machine with a touchscreen and cocoa toppings? No idea where we would find enough room for it or if it would actually be used, but of course we'd be interested! After a few months of collecting (additional) dust and annoying a few members, we started the quest to get this machine back to work and to explore the (questionable) world of industrial coffee vending legacy, from hardware, over electronics to software architecture. This is a talk about how we repaired the machine, how these machines usually work, a dive into legacy software and electronics setups, and why those coffee vending machines taste like they do. Last but not least, we will discuss how we started to reverse engineer the internal system communication and if we would award a hackvalue of over 9000 for this type of machines. There is also the final question: does it run Doom? about this event: https://www.emfcamp.org/schedule/2024/254-unexpected-coffee-a-dive-into-industrial-coffee-machines

Computing is riddled with security vulnerabilities, many of which arise from memory safety issues. Conventional hardware architectures and the C/C++ codebase are chronically prone to exploitable errors - a 75-year-old problem at the heart of computing. This talk will introduce CHERI, showing how (finally?!) we can do better. The CHERI research project has developed a new architecture+software approach, using unforgeable hardware capabilities to implement pointers. Morello is an Arm experimental platform for evaluation of CHERI to explore its potential for mass-market adoption, part-funded by the UKRI Digital Security by Design programme, and other groups are developing CHERI-enabled RISC-V processors, including Microsoft, Google, lowRISC, SCI Semiconductor, Codasip, and RISC-V International. This talk will introduce the problem, and CHERI and Morello, for a broad audience: the hardware extensions, their potential for fine-grained memory safety and software compartmentalisation, the CHERI software stack, and machine-checked mathematical proof that the architecture design provides the intended security. CHERI complements alternative high-level-language approaches, that would need code to be rewritten from scratch, and we'll talk about the often-low cost of porting code to CHERI. I'll demo how CHERI prevents exploitable memory safety errors on a Morello box, running Arm CHERI hardware and a complete CHERI software stack. This is joint work by the CHERI and Morello teams at the University of Cambridge, Arm, SRI International, and the University of Edinburgh. about this event: https://www.emfcamp.org/schedule/2024/87-cheri-and-arm-morello

The Roman archaeological record is far from complete; There are hundreds of high status Roman buildings yet to be located in Britain. I was volunteering in the ambulance service during COVID when I was given a piece of Roman pottery by a patient. With no training (I later embarked on an Archaeology degree ), I started to carefully investigate and record what is now established as an enigmatic high-status Roman building - complete with mosaic, painted wall plaster and hypocaust. My talk will demonstrate some free Web-based tools that you can use to investigate your local landscape (LiDAR, etc.). It will also show you non-invasive ways to survey and record archaeological sites. Finally, I'll have some Roman artefacts to handle. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/146-how-i-found-a-roman-villa-or-temple

I recently released Downpour, an app that anyone can use to make little games on their phone. And before that I made Cheap Bots, Done Quick, a website that anyone could use to make a Twitterbot on their computer. And so unsurprisingly I am a big advocate of making creative tools - I love the feeling of seeing other people make cool stuff, and knowing that I enabled that to happen. In this talk, I'm going to talk about some design principles I've gathered from making these kinds of things, share some stories of people using them in ways I didn't expect, and generally try to persuade you that it's an interesting space that you might want to play in. about this event: https://www.emfcamp.org/schedule/2024/320-downpour-more-how-and-why-to-make-creative-tools

There are three things about this poem that will surprise you. First: though written 300 years ago, it contains superb guidance on being an engineer or maker of any kind. Second: you’ll immediately recognise some of its best lines. Third: its author was an indomitable twenty-three year old hunchbacked dwarf, who had educated himself due to religious persecution. I hope you’ll take away some maxims that’ll stick with you and inform your work. And if you’re someone who’s never ‘got’ poetry, this may be the poem that unlocks it for you. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/218-engineering-lessons-from-a-300-year-old-poem

Earlier this year, a developer was trying to benchmark a database. But something was wrong - SSH was taking up too much CPU time in the background. This accidental observation led to the discovery of an audacious attempt to introduce a backdoor that would allow an attacker access to almost any system in the world running SSH, an attack made up of both technical and social components. This talk will describe the backdoor itself, the process that went into it being possible to inject in the first place, and how this was exacerbated by a series of entirely reasonable decisions on the part of Linux distributions. It's a story of social engineering, novel obfuscation mechanisms, and a long con over several years. We'll delve into why distributions patch upstream code, why dependency chains are complicated, and how it's even possible for a compression library to break all the SSH security mechanisms that are intended to prevent this sort of thing from happening in the first place. about this event: https://www.emfcamp.org/schedule/2024/409-the-xz-backdoor-what-why-and-how

Get ready to take a trip into space. We'll be travelling 400km up to the International Space Station, to take a look at Earth through the lens of the Astro Pi computers that were sent there in 2020. This talk will focus on what has been learnt from years of giving young people the chance to take photos from the ISS using affordable commercial hardware. There will be plenty of the amazing images that have been captured so far, along with some examples of unexpected interruptions and the challenges when you can’t actually see or touch the equipment yourself. There will also be a chance for the audience to join in with an interactive game based on some of the photos. You'll need an Internet connected device to join in. Ground replicas of the actual hardware will also be on show and available for inspection. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/165-photobombed-by-a-robot-arm-in-space

Short 10 minute talks on any topic about this event: https://www.emfcamp.org/schedule/2024/547-lightning-talks-friday

You become aware of a security vulnerability affecting your Go program(s)! What now? This talk tries to answer that question for various common scenarios, explaining the roles of the various technologies and services (like the Go Module Proxy or Go Checksum Database). The recent xz vulnerability brought the topic of Supply Chain Security to everyone’s attention. I don’t have a solution for preventing the social engineering aspect of the vulnerability. So let’s focus on the part we can control: assuming it has happened, what does our incident response look like? Aside from the more general details about Go, we’ll look at the gokrazy system as a concrete case study in Supply Chain Minimalism (Linux kernel + Go) and how it can be used for sensitive use-cases. about this event: https://cfp.gulas.ch/gpn22/talk/WY37UN/

With the speed of 400G coherent technology was introduced to pluggable optical transceivers (OIF 400ZR and OpenZR+). This technology is complex and powerful for your network, it even has influence on your network device operating system. This talk will provide first insight in Nokia's implementation as well as known or potential interoperability issues addressed by the OIForum. If your transport system, router or even switch already provides coherent pluggable transceivers check the available interface parameters. You can send me these CLI outputs / management software screenshots to [email protected]. I will try to include it into the presentation. And finally new formfactors for 800G and 1,6T will be part of the game as well. Stay tuned.... about this event: https://cfp.gulas.ch/gpn22/talk/8TKX7Q/

Federated Learning (FL) offers a privacy-preserving machine learning method by enabling collaborative model training across multiple clients without data sharing, securing sensitive information at its source. This talk explores Machine Learning applications and how to keep them secure, for example in critical sectors like healthcare. Collaborative learning, and in particular Federated Learning (FL) is a Machine Learning approach in which multiple clients collaboratively train a Neural Network model on their private data without the need to share the data. This strategy guarantees that data stays in its initial location, never being disclosed to external entities. This talk, will cover an introduction on how FL is used and its advantages when supporting secured data collaboration projects for example in environments like health care, where it is not possible to publish patient data for Machine Learning purposes. We will focus on the security perspective of Machine Learning and privacy attacks and defenses in those systems. This introduction draws upon the teachings of a course conducted by Phillip Rieger from System Security Lab at TU Darmstadt. about this event: https://cfp.gulas.ch/gpn22/talk/8MNJ9B/

This talk is about our delight, awe and fear of electricity and its effects on the human body. It charts our changing relationship with it from the 18th century to today. I particularly love the 18th century gentlemen scientists with their electrical entertainments - particularly because they appreciated the magic of electriocity and were so excited by it. Its sad that people today just take electricity for granted. Over the years I've accumulated a collection of contemporary images which I'll use to illustrate the talk. It may include a few demonstations as well. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/318-a-short-history-of-electric-shocks