Chaos Computer Club - archive feed

Dies ist die Eröffnung am Freitag. Dies ist die Eröffnung am Freitag. about this event: https://winterkongress.ch/2024/talks/eroffnung_freitag/

Um die Energiewende voranzutreiben, wird die Kernfusion oft als das ultimative Kraftwerk und als die Lösung all unserer energetischen Probleme angesehen, dennoch blieb diese Technologie seit 1960 stets “dreißig Jahre entfernt”. Um die Frage zu beantworten, ob ein echtes Fusionskraftwerk bald wirtschaftlich Energie produzieren könnte, betrachten wir den Fusionsreaktor von den Grundlagen physikalischer Prozesse der Fusion bis zum Aufbau und den technischen und politischen Problemen beim Bau eines Fusionsreaktors, der ja am Ende diesen Prozess auf der Erde durchführen soll, um – so hofft man – nachhaltig an große Mengen elektrischer Energie zu gelangen. Um stabile Fusion zu erreichen, sind ein besonders heißes Plasma und starker magnetischer Einschluss wichtig. Dabei gibt es zwischen den Modellen Stellarator und Tokamak Unterschiede, jeweils mit ihren eigenen Vorzügen und Nachteilen. Die betrachteten Modelle verwenden verschiedene Heizmethoden, um das Plasma über Strom, Strahlung und Teilcheneinschuss heizen. Um einen ausreichend starken magnetischen Einschluss zu erreichen, sind nicht nur sehr starke und supraleitende Spulen vonnöten, sondern auch spezielle Vorrichtungen, welche das Plasma in Schichten aufteilen. Hier spielt auch die Turbulenz (der Übergang von geordneten, in chaotische Ströme) eine große Rolle. Wir wollen die theoretischen Aspekte anhand von den Fusionsexperimenten JET, ITER und Wendelstein 7x betrachten und im praktischen Kontext mit neueren Ansätze seitens Firmen außerhalb der Grundlagenforschung vergleichen, bei denen aus Forschersicht nebensächliche Details wie ingenieurtechnische Sicherheitsmaßnahmen und Beschaffung und Entsorgung der nötigen Grund- und Abfallstoffe große Bedeutung zufallen. Daher gehört zu einer realistischen Abwägung der Praktikabiliät – kurzum, ob uns die Fusion vor der Klimakatastrophe retten kann – auch eine Betrachtung des politischen Einflusses und allgemeiner finanzieller Schwierigkeiten der Grundlagenforschung zur Fusion und deren Umsetzung und die Übergabe an die Privatwirtschaft. – Der Referent bringt Erfahrungen aus mehreren Praktika am IEK 4 des Forschungszentrums Jülich und das IPP Greifswald mit, wo das Fusionsexperiment Wendelstein 7x steht. about this event: https://c3voc.de

In diesem Petit Foo geht es um ein ernstes Thema: Was soll passieren, wenn man selbst nicht mehr entscheiden kann? Diesen Fall kann man in Vollmachten regeln. sirgoofy erklärt welche Arten von Vollmachten es gibt, wie man diese einfach erstellen kann und wobei man darauf achten sollte. about this event: https://www.chaospott.de

Closing talk of Hackerhotel 2024 with NFIR CTF award ceremony. Closing talk of Hackerhotel 2024 with NFIR CTF award ceremony. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/KQUPNG/

Our workflow, challenges and other fun things From the lands where badges and brooches grow on trees, a mythical folk of badge herders live peacefully and in harmony with nature and technology. They love providing humans with their seasonal harvest at Hacker events such as Hacker Hotel. We expect them to show up to tell you all about this seasons yield badges and what it took to deliver these in the hands of the Hacker Hotel people. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/YHMDZ8/

Als je je eigen opsporingsteam krijgt, dan doe je het pas goed. Piraterij van muziek en films was midden jaren 90 zo groot dat 1 op de 4 verkochte cd's illegaal was. De piratenmerken waren bekend in ieder huishouden. De tientallen merken werden aangevoerd door MTV en Twilight. Hoe groot was het nou echt: dat zie je pas als je alles gaat verzamelen. "And so we did": duizenden cd's, tapes en DVD's later is het tijd om eens te duiken in verhalen achter het archief. De collectie is nu te zien in het Homecomputer Museum in Helmond. Als je je eigen opsporingsteam krijgt, dan doe je het pas goed. Piraterij van muziek en films was midden jaren 90 zo groot dat 1 op de 4 verkochte cd's illegaal was. De piratenmerken waren bekend in ieder huishouden. De tientallen merken werden aangevoerd door MTV en Twilight. Hoe groot was het nou echt: dat zie je pas als je alles gaat verzamelen. "And so we did": duizenden cd's, tapes en DVD's later is het tijd om eens te duiken in verhalen achter het archief. De collectie is nu te zien in het Homecomputer Museum in Helmond. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/TFWDPD/

I call myself "The Lamest Hacker You Know". I don 't use Kali, 0days, Burp Suite or any tools besides Curl, A browser, and clients for existing software, combined with (semi) open data sources. Probably 90% of my findings are for companies that don't have a CISO an never even heard the term "Bug Bounty Program", In this talk I will give some tips on how to reach out to a company out-of-the-blue and not have them hate you. I call myself "The Lamest Hacker You Know". I don 't use Kali, 0days, burp suite or any tools besides Curl and some (semi) open data sources. Probably 90% of my findings are for companies that don't even have a CISO and never even heard of a Bug Bounty Program and yet, I have been rewarded for finds that will make you go "yikes". I never once got into trouble because of how I operate: Being radically open. In this talk I will look back on some cases I never made public, show you how I work, the upsides and the downsides, and give some tips on how to reach out to a company out-of-the-blue and not have them hate you. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/FPMLCB/

Meet Acme, a wonderful company where nice people make beautiful things... and then management and sales want nice statistics. Acme is a company like many others. They have been making beautiful things in their factory and workshops for years, but the recent modernization drive also appears to have another side... What is OT and why is it so special? Join us for a short journey through the wonderful world of industrial automation and the challenges we encountered in our daily engineering lives. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/BNJRFV/

Van een defecte UPS tot een autonome huisomgeving die zelf energie inkoopt en verkoopt op de meest gunstige en voordelige momenten. Hoe je een huis uit 1928 toch energiezuinig kunt maken door middel van het slimme gebruik van domotica, IOT, zonnepanelen, accu's, infraroodpanelen, warmtewerend folie, airco's en slim gasverbruik met een HR-ketel. Als kers op de taart laten we je zien hoe je gebruik kunt maken van dynamische stroomtarieven. Betaal per uur je stroomverbruik met dynamische prijzen. Dynamisch is het nieuwe crypto: Navigeer door de energiemarkt met de behendigheid van een Bitcoin-trader! about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/SJLFPA/

An engineer buys a camera in a second hand store, and finds herself bringing back a defunct film format. When home movies on 8mm film were king, there was a format war between Kodak's Super 8 and Fuji's Single 8. Just like Sony's Betamax in the home video wars, Fuji's technically superior contender lost the battle, and the final Single 8 cartridges were manufactured in about 2010. The physical dimensions of the film are the same though, so here in 2023 it should be possible to load a Single 8 camera with film from a Super 8 cartridge. This is the story of the revival and reinvention of a lost film format through OpenSCAD and 3D printing, done mostly without an original cartridge to copy. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/VZC8LK/

Hackerspace Pixelbar was once the hottest hackerspace in the Netherlands, things happened and awesome people gathered once again to fix things. After a terrible fire at hackerspace Pixelbar (Rotterdam) on 28th of June 2023 (https://pixelbar.nl/2023/06/28/Pixelbar-has-experienced-an-unexpected-issue/) There was a need to rebuild the awesome and safe space we got to love. In this talk we will take you on a tour on the process, and how we got to where we are today. Maybe we’ll slide in some exclusive pictures and other cool stuff. Join us for an hour of drama, friendship, memes, hackers and most of all, the warmth(pun intended) of the community about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/PJZEAZ/

We all love bedtime stories, and these stories are even better when they turn into reality. This cinderella story is about how a big vendor rolled its own algorithm to "encrypt" its firmware images to deter poor hackers like us from fiddling around and potentially uncover flaws. But what if your motive is not to uncover potential flaws, but simply to agnostically fingerprint devices left vulnerable on the internet? Join us into a semi-deepdive of reverse engineering the Fortigate firmware "encryption" to satisfy our own curiosity, but also to make the web that little bit more secure by fingerprinting vulnerable devices in a non-obtrusive manner with the endgoal of notifying the related parties. This talk will go into the process of reverse engineering the Fortigate firmware images with the purpose of developing a non-obtrusive version identification that can be used to fingerprint device firmware versions on the internet, this in turn can be used to notify the related party. Next to a technical deep dive the audience will be presented with a set of questions and thoughts on the topic of encrypting such firmware devices and if this really is the way to go for big vendors, or if these things are only making matters worse by limiting the scope to not just the "bad" people, but also the "good" people. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/QB3Z87/

Critical infrastructure like data centers needs to be well protected. While there is lots of cyber security knowledge around at Hacker Hotel, in this talk we want to share knowledge on the physical security side of protection. Physical security measures are mostly controlled by PLC's. Thus physical security bears cyber risks as well. The talk will cover: How are physical security measures designed? How do you create stand-off distance? (airgap) How are physical security measures pen-tested? What controllers / PLCs and converters are used? (IP, RS-485:IP) The presentation will contain practical examples and crash test movies. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/9FQXNF/

Ransomware is still a serious threat to a lot of people and organisations and nowadays using more and more advanced techniques. And now also with new open AI technology, criminals are able to organise a sophisticated attack in minutes to target you and steal your data. This talk will tell us what Ransomware actually is, who’s writing the code and making money out of it, it shows us a bit of the Ransomware history and what types are out there, to better understand what we’re dealing with. And explain all of the ransomware attack stages and what you can do in terms of detection and defence inside your security operations. For the security analysts out there this talk will be beneficial when looking for traces Ransomware attacks are leaving behind. Including a demonstration of a Ransomware scenario making use of open AI technology in a sandboxed environment and show all of the attack stages to learn and recognise the IOCs in a Red and blue teaming scenario. This ain’t everything. I’ll show what kind of information ransomware groups are sharing and what happened when a random organization was hit by a ransomware attack and their sensitive information was published on the dark web.. Life has been good until that day a phishing mail arrived. Out of curiosity you clicked the link in the email and after that the desktop background on your screen changes with the message to immediately transfer an amount of bitcoins to retrieve your files. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/CXLP8X/

How organisations adopt buzzwords from the market and incorporate them into tenders, RFPs etc. During this session we will look at all the marketing buzzwords like SIEM/SOC, we go in-depth on topics such as pentesting, Unicorns, SIEM, signatures and, of course, compliancy vs. security. There will be a short panel discussion on how we as a community can change the mindset and make sure organisations will get the right tooling and knowledge (people) to become more cyber resilient. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/XDAAAH/

Nancy and Chantal want to talk about being an ally in the community. more info is coming! Nancy and Chantal will take you through a way to be a better ally. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/Y3WFEZ/

The Dutch Electoral Council has asked a bunch of nerds to help them with new software for the elections. What is needed and how can you help? The Dutch Electoral Council has asked a bunch of nerds to help them with new software for the elections. The main source of truth in the Dutch elections are the paper documents, the software is there to support the process and assist with simple tasks. Given the age and complexity of the current setup, the Council is looking for something new and more simple. By law, it will be open source! This lecture will take you into the inner workings of the Dutch election system and give an insight into the questions the still growing devteam of the Electoral Council asks itself. What exactly does the current software do, how do we plan to make it better and how can you help? Come in, it is open! about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/WTE3FQ/

In this talk i will share the plans of the Dutch government on building a quantum computer resistive infrastructure. The government actually started last year with its program. Whats the plan of the central government now and in the next years, nation wide and internationally. In this talk i will share the plans of the Dutch government on building a quantum computer resistive infrastructure. The government actually started last year with its program. Whats the plan of the central government now and in the next years, nation wide and internationally. The national intelligence agency (AIVD) also published a migration handbook. What is in this book and how might it help you too. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/RFAGVM/

In security one of the biggest changes will be the fact that on Oct 17th a lot of organisations need to have implemented. A big challenge for many organisations who haven't got a clue. But what do you need to do? And what does that mean? One of the solutions maybe to take a feline approach to NIS2 and fulfill parts of the compliance needs with OpenKAT. Not just for organisations, but also for software solutions that are used with in the chain. In this talk the main points of NIS2 will be explained as well as the parts where automation with OpenKAT can make a change. In security one of the biggest changes will be the fact that on Oct 17th a lot of organisations need to have implemented. A big challenge for many organisations who haven't got a clue. But what do you need to do? And what does that mean? One of the solutions maybe to take a feline approach to NIS2 and fulfill parts of the compliance needs with OpenKAT. Not just for organisations, but also for software solutions that are used with in the chain. In this talk the main points of NIS2 will be explained as well as the parts where automation with OpenKAT can make a change. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/NYAXKU/

When we talk about tech stacks we usually think about big organizations running systems, but in the current day and age we too have a large digital footprint. In this talk we will go over mapping out our personal tech stack and start identifying any threats that could be useful to help prevent stalking and harassment, or at least be aware of the risks you encounter so you can make informed choices about data that you share. In the presentation I’ll give an example of a basic threat modeling that can be applied to our personal digital footprint to help improve privacy and protect yourself against nosey governments and digital stalking. We start with creating an overview of all apps, services and accounts that we use and contain personal information, focusing on those that can be exploited for stalking or bullying purposes. From there we will apply threat modeling methods, mainly persona non grata, to identify how they can be exploited by malicious actors. Either working from publicly shared information or who might have gained access to private details in legitimate or illegitimate ways. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/JTUNBY/

Dive into the World of Cybersecurity Excellence with DIVD Academy: A Journey of Skill Enhancement and Threat Mitigation. This talk explores the pivotal role of DIVD Academy in shaping cybersecurity professionals, fostering skill development, and equipping individuals to combat evolving digital threats. Discover the cutting-edge training methodologies, industry insights, and real-world scenarios that make DIVD Academy a cornerstone in the pursuit of cybersecurity mastery. Join us as we unravel the transformative experience awaiting those who embark on the DIVD Academy adventure. In this engaging talk, we delve into the dynamic landscape of cybersecurity through the lens of DIVD Academy. Unpacking the essential components of the academy's curriculum, we explore how it cultivates expertise and resilience in the face of digital adversaries. From hands-on training modules to strategic insights, attendees will gain a comprehensive understanding of the DIVD Academy's role in fostering cybersecurity excellence. Whether you're a seasoned professional or just starting in the field, this talk offers valuable insights into the world of DIVD Academy and its impact on shaping the next generation of cyber defenders. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/897EXD/

Nico Dekens a.k.a Dutch_OSINTguy, a renowned open source intelligence professional, has noticed recurring patterns in content created using artificial intelligence. He demonstrates how he has used OSINT tools and even basic search engines to locate and identify online accounts that appear to be using autogenerated website content, social media posts, reviews, and hate speech. The proliferation of content generated by artificial intelligence (AI) is just beginning. Recent years have seen online accounts, run by bots, create fake news articles, divisive social media posts, fraudulent product reviews, and more. As mainstream access to AI tools spreads, the opportunities to use the technology for malicious purposes are on the rise. Nico Dekens, a renowned open source intelligence professional, has noticed recurring patterns in content created using artificial intelligence. He demonstrates how he has used OSINT tools and even basic search engines to locate and identify online accounts that appear to be using autogenerated website content, social media posts, reviews, and hate speech. Investigative approaches and techniques are covered, including a list of string text that can be easily searched to locate these types of accounts. There is also a detailed example for generating high-quality deep fake photos using Midjourney. The author takes an ethical stance on the use of artificial intelligence and advocates for validating online content using OSINT investigative methodology. This paper provides an investigative study for identifying AI-generated content. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/ED8Z7P/

What is this DES and why is it bad? Should I always use AES-256, bigger is better right? Who are these RSA-dudes in the first place and why do I need 25519 elliptic curves in my life? Is quantum really that bad for encryption and what can I do about it? If these are questions keeping you up at 05:00, then this talk might be for you! Cryptography is not only essential in our modern-day lives, but it has been for thousands of years. After some historical context, we will dive into some modern ciphers like DES, AES, RSA and ECC. I will show you how they work (using simple to understand high-school math and pretty pictures) and how to use them. We will then see how quantum computers are bad for cryptography and show techniques that can counter that. The slides are in English, the spoken language can be English or Dutch (depending on the audience). Pre-talk disclaimer: the provided explanations are very high-level and leave out details that make the ciphers actually secure. **DO NOT USE THEM IN YOUR PROJECTS!** about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/B7BL3K/

Ham radio is a nice hobby, with a bit of overlap with the hacker community. It's a very technical hobby, with a lot of variation. Much more than an Old Man talking on the radio all day. Ham radio is a nice hobby, with a bit of overlap with the hacker community. It's a very technical hobby, with a lot of variation. Much more than an Old Man talking on the radio all day. As a licensed HAM you have access to many frequency bands - HF, these are low frequencies that can travel 1000ths of kilometers without repeater - But also frequencies close to 'commercial' products, a ham could use LoRa 433MHz with over 100W to see what that does. - Also on 2.4GHz and 5GHz there is a HAM radio frequency band next to the WiFi band that can be used with much power. - There are a bunch of satellites that can be used for (data) communication as well. I'll show you some possibilities with a HAM radio license, and tell you a bit about how you can get into it. about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/WAFHXM/

Social Engineering 102: Hacking influence. How to get people to trust your judgement. Your level of influence, in buisines or daily life, has little to do with your level of compentence. It can be very frustrating to see all your great ideas getting shot down by the people in charge. More so when silly ideas dó get accepted. But how does influence work? Hoe can you get the higher-ups to listen and value your contribution for what it really is? about this event: https://pretalx.hackerhotel.nl/hackerhotel-2024/talk/U3BFMC/