Chaos Computer Club - archive feed

Just how effective are solar panels and domestic batteries? Here's several years of *real* data from UK-based solar panels. Can you generate *all* the electricity which your home will consume? What happens to the electricity you sell to your neighbours? Do they work during a powercut? Will I have to change my lifestyle significantly? Is winter a problem? How long do they take to install? Where can excess electricity go? Would my roof be suitable? CAN I CONNECT THEM TO THE INTERNET?!?!?! This is not a sales pitch. I'm just an enthusiast (obsessive?) who wants to spread the joy of solar power. I can promise graphs, drone videos, graphs, photos, and more graphs! about this event: https://c3voc.de

Advances in NLP and machine learning are allowing automatic processing of knowledge. An untapped potential of this revolution is the ability to change how people come up with ideas and solve problems. People tend to solve problems in linear ways. If my horse is too slow, I want a way to make it faster. It wasn't clear to many people of the 1800s that changes in industrialisation would lead to an entirely new way of going fast! So what happens when you do have all of the information, and when you can find subtle patterns occurring in vast swathes of data? What happens when an engineer's Alexa can tell you not just the answer to your question, but the answer to the question that you didn’t know you were asking? I would like to explore how AI may fundamentally change the human’s ability to think and invent, and the changes that this may lead to in society, drawing on my experience as the head of the world’s first AI augmented invention team with example patents and progress that has been made so far. about this event: https://c3voc.de

Pretty much everything that has ever been designed is some form of balance between form and function, from modified car's to architecture to clothes and even user interfaces. In the modern age of material design, Visual Design Group's and Human Interface Guidelines this balance has very much shifted to be in favor of function over form, an interface that looks good is still important but looks always seem to play a distant second to usability. The purpose of this talk is to explore what happens when you flip that idea and rather then focusing on creating user interfaces that are primarily usable instead focus on creating user interfaces that are works of art with a lesser regard as to how easy they are to use. Fortunately this idea is nothing new, in the late 90's Raster founded the enlightenment desktop inspired by the artistic user interfaces of the games he played growing up, he brought these concepts to the desktop. The advancement of graphics hardware in the mid two thousands lead us to the world of fish tanks inside cubes, wobbly windows and painting fire on the screen. Not because there was any real need or use but because someone could. Sadly since then the world of the Linux desktop has tried to go all professional and many of the fun interesting things have been lost. Pretty much everything that has ever been designed is some form of balance between form and function, from modified car's to architecture to clothes and even user interfaces. In the modern age of material design, Visual Design Group's and Human Interface Guidelines this balance has very much shifted to be in favor of function over form, an interface that looks good is still important but looks always seem to play a distant second to usability. The purpose of this talk is to explore what happens when you flip that idea and rather then focusing on creating user interfaces that are primarily usable instead focus on creating user interfaces that are works of art with a lesser regard as to how easy they are to use. Fortunately this idea is nothing new, in the late 90's Raster founded the enlightenment desktop inspired by the artistic user interfaces of the games he played growing up, he brought these concepts to the desktop. The advancement of graphics hardware in the mid two thousands lead us to the world of fish tanks inside cubes, wobbly windows and painting fire on the screen. Not because there was any real need or use but because someone could. Sadly since then the world of the Linux desktop has tried to go all professional and many of the fun interesting things have been lost. about this event: https://c3voc.de

I am the captain of a BattleBots team, currently showing on Discovery Channel in the US and streaming worldwide. Among the many engineering challenges we face building combat robots, material selection is critical. I don't only mean choosing steel over aluminum, I mean choosing which kind of steel to use for each application on the bot. In my talk I will cover the basic material science of steel alloys, hardening processes, and how they are used to build combat robots and other industrial applications (and what happens when you make the wrong choice). about this event: https://c3voc.de

As a psychologist, I often get asked one of two questions: Can you read my mind? Are you analysing me?* But Psychology is not entirely useless; by studying the mind and brain, we can learn a lot about how we work. In this talk, I will go through some psychological party tricks and tell us about how we understand the world around us. Some of these mind tricks have been around for ages, but hopefully, they will make for an interesting (even fun) way to pass the time and present an opportunity to learn about yourself. *(The answers are No and No - Unless you pay me a lot of money to retrain as a therapist.) about this event: https://c3voc.de

Back at Electromagnetic Field 2016, I talked about something that was starting to get wider media attention: an up-close-and-personal glimpse of the future involving sex, tech, AI and robots. I then returned in 2018 to debunk the headline myths and update on what was actually happening on the tech side. Now it's 2022 and it's been one heck of a ride. That original talk launched two sex tech hackathons, saw the UK host a conference, produced a book, and – nicest of all – contributed to the growth of a global community researching these things. There’s a few new things happening in the arena — but also very little progress on the hardware front. Why is that? What’s the actual likelihood of domestic bliss with a hot machine (other than your toaster) by 2050? This is third talk in the trilogy! about this event: https://c3voc.de

Tales in a life of a product security engineer making Open Source software more secure one bit at time. In this session, I will talk about what does it mean to be a product security engineer and how SUSE security team audits can help Open Source community in having a better security posture. Tales in a life of a product security engineer making Open Source software more secure one bit at time. In this session, I will talk about what does it mean to be a product security engineer and how SUSE security team audits can help Open Source community in having a better security posture. about this event: https://c3voc.de

When a 3,500 ton ship tries to be in the same place as an oil rig then it is safe to say that someone is going to have a bad day. Nobody was injured and no oil was spilled, so it didn't make the news and was just an insurance job - a very BIG insurance job. This talk explains the many mistakes that led to the accident occurring, and how much worse the outcome could have been. It is presented by an insider, but only uses information in the accident report and other public sources for legal reasons :) about this event: https://c3voc.de

Before downloading a software release, we all know to verify the GPG signature before even trying to unpack that tarball. And when such a signature is not available, we all know to chastise the developer for not taking security seriously. But what happens with deployed web resources? How can these be verified before we trust them with our secure data? I would like to show a proof-of-concept of using out-of-band verification (aka, DNS) of web content (.js, .html, .jpeg, etc) prior to allowing it to execute and trusting it with our data. Before downloading a software release, we all know to verify the GPG signature before even trying to unpack that tarball. And when such a signature is not available, we all know to chastise the developer for not taking security seriously. But what happens with deployed web resources? How can these be verified before we trust them with our secure data? I would like to show a proof-of-concept of using out-of-band verification (aka, DNS) of web content (.js, .html, .jpeg, etc) prior to allowing it to execute and trusting it with our data. about this event: https://c3voc.de

During the last years, the openSUSE infrastructure was improved a lot. But is it perfect now? Of course not - otherwise the Heroes would be bored, and I could not give this talk. And of course, where people work, funny[tm] things happen - please bring your own popcorn ;-) During the last years, the openSUSE infrastructure was improved a lot. But is it perfect now? Of course not - otherwise the Heroes would be bored, and I could not give this talk. And of course, where people work, funny[tm] things happen - please bring your own popcorn ;-) about this event: https://c3voc.de

A short talk on how to build, play and perform with a ukulele illustrated with geeky songs based on my love of physics and electronics. Advice for joining bands and getting free beer at a pub open mic night for the musically inept. I'll bring along my homemade electro uke made out of oak, enamel paint, and bruised thumbs. Although the talk will be brief, I can stay around afterwards to discuss cutting frets, changing strings, stage fright and how to stop your fingers from freezing when playing outdoors in December. about this event: https://c3voc.de

This talk explores the softer side of electronics, from electronic embroidery and e-textiles to soft robotics and flexible PCB design. We will take a look at some of the exciting technologies in this field, including industrial machines that embroider traces to microcontrollers, open source soft robotics, 'pick and place' sewable LEDs, e-textiles in space, fabric speakers and the world of flexible and stretchable PCB design. I will also share examples of how engineers, scientists and artists are using these soft electronics technologies in their work. As well as this higher level overview, we will take a look at a number of accessible DIY projects, along with practical tips on materials and techniques, and suggestions for further learning. I will also talk about softness in electronics in a non-literal sense, looking at some cool projects from the community that link emotions, vulnerability and physical computing. about this event: https://c3voc.de

Deploying images is ever evolving topic. Although much of the deployments today are concerned with containers, base systems for container host are somehow needed to be deployed as well. Let me present Saltboot, part of Uyuni stack. Saltboot is building on SaltStack to make image deployment secure and together with Uyuni provides complete image lifecycle and management - from image building, staging to deployment on target machines. Deploying images is ever evolving topic. Although much of the deployments today are concerned with containers, base systems for container host are somehow needed to be deployed as well. Let me present Saltboot, part of Uyuni stack. Saltboot is building on SaltStack to make image deployment secure and together with Uyuni provides complete image lifecycle and management - from image building, staging to deployment on target machines. about this event: https://c3voc.de

Sudo is used by millions to control and log administrator access to systems, but using only the default configuration, there are plenty of blind spots. Using the latest features in sudo lets you watch some functions that previously were blind spots and you can also control access to them. There were several minor and major changes since the 1.9.0 release that I discussed in my previous FOSDEM talks. Sudo is used by millions to control and log administrator access to systems, but using only the default configuration, there are plenty of blind spots. Using the latest features in sudo lets you watch some functions that previously were blind spots and you can also control access to them. There were several minor and major changes since the 1.9.0 release that I discussed in my previous FOSDEM talks. about this event: https://c3voc.de

A deep dive into the Windows boot process, its security mechanisms, and the security issues that have been found within the last 10 years, culminating in a single bug (found in August 2021, fixed in January 2022) that can bypass all such security mechanisms. about this event: https://c3voc.de

About four years ago I realised I was miserable and that I should probably do something about that, so I did what any self-respecting nerd would do and read a tonne of books to figure out how emotions worked (I did also go to therapy, but the books were more useful). Life isn't perfect now, but it's a lot better despite the ongoing war and pandemic. I'm going to give you an overview of some of the things I've learned. It will be a mix of theory (what even are emotions?) and practical advice for understanding and engaging with your emotions better, with a pointer towards further reading that will help you act on this advice better. about this event: https://c3voc.de

In this talk Emil will go over some of Jitsi's History, what use cases and larger forces drive its development and where it is headed. Looking forward to seeing you there! In this talk Emil will go over some of Jitsi's History, what use cases and larger forces drive its development and where it is headed. Looking forward to seeing you there! about this event: https://c3voc.de

I run Parkrun (some weeks), and am trying to run the alphabet. While running one week I realised that every parkrun course is the same. They are all basically one of a few mathematical objects, the integers or some pair, tuple or quadruple of integers. We will ask and see why? In this talk I will explore the broad and interesting idea of Topology and present them to a general audience through comedy and one of my other main passions, parkrun. I will use homotopy and related ideas to show how everyday objects and familiar activities are the same to mathematicians and explain why, think coffee cup and donut. about this event: https://c3voc.de

Games controllers are boring. They have the same few buttons in the same place. It doesn't have to be this way. In this talk, I'll go through how I've made controllers that are different and unique. These controllers are quick and easy to make with a microcontroller and Circuit Python, and theycan use almost any input device, such as slider potentiometers, rotary encoders, IMUs and touch pads. We’ll look at what’s worked, what hasn’t and how to make your own games controller. about this event: https://c3voc.de

The Open Build Service has new support to allow developing packages directly in git repositories. This means that entire source management would be handed over to some pagure, gitlab or gerrit instance as origin of trust. The talk will describe possible setups, workflows and development scenarios. Including an open discussion what should we aim for our main distributions. The Open Build Service has new support to allow developing packages directly in git repositories. This means that entire source management would be handed over to some pagure, gitlab or gerrit instance as origin of trust. The talk will describe possible setups, workflows and development scenarios. Including an open discussion what should we aim for our main distributions. about this event: https://c3voc.de

An introduction to getting started designing and building your own audio DSP processors for guitar pedals, eurorack modules and other similar style projects using modern microcontrollers. Covering the very basics of digital audio, microcontrollers, audio codecs and PCB design, this talk will give a whistle stop tour of the process involved in making digital effects processors from conception to building a prototype. This talk will be aimed at those with little experience, but an interest in combining electronics and programming to process live audio in hardware. I came from a programming background, and have no training in electronics. I want to show an audience what can be achieved with a little bit of knowledge and lots of enthusiasm. Encouraging borrowing from open source projects to identify common circuits and practises that can be stitched together to form a complete project. about this event: https://c3voc.de

Imagine this: you're a Venezuelan student activist, and you're protesting to get your university the budget it so desperately needs and the powers that be mercilessly cut away. But then, your government disrupts phone coverage in the area to discourage protestors and potentially cover human rights violations. Scary, right? Hopefully you're not in this situation. But chances are your hacker brain would love to know how I used tech to react to this! In this talk, I'll cover how we stayed connected using Mesh Networking, phones' Wi-Fi chips, a couple of apps, a bit of fear, and a whole lot of determination! https://twitter.com/gustakasn0v about this event: https://c3voc.de

openSUSE Leap Micro is a new distribution based on SUSE Linux Enterprise Micro with the main purpose to be a host-os with minimal footprint which fits well the app-centric world. A small foot print, focus on the EDGE as well as data center, containerization and virtual machines, whatever flies your app. Leap Micro has a 6 months release cycle with support lasting until the next release or up to 4 years of support with a migration to SLE Micro. openSUSE Leap Micro is a new distribution based on SUSE Linux Enterprise Micro with the main purpose to be a host-os with minimal footprint which fits well the app-centric world. A small foot print, focus on the EDGE as well as data center, containerization and virtual machines, whatever flies your app. Leap Micro has a 6 months release cycle with support lasting until the next release or up to 4 years of support with a migration to SLE Micro. about this event: https://c3voc.de

The demoscene is a strange geek subculture, dedicated to making great digital art and making computers doing things they were never designed to do. At EMF, we have the Field-FX village, which will spend the weekend showcasing the best of the demoscene. Come learn who we are and how you can get involved and easily start creating some awesome demos about this event: https://c3voc.de

Delighted to announce that the Ore-Some Xylophone will be making its UK debut at EMF 2022! Come and see the electromechanical xylophone that generates truly random compositions by measuring the radioactivity of a lump of uranium ore. You can turn the handwheel to move the lead shield and adjust the speed of the music. I like making things, often mechanical or electronic. My sculptures frequently have audio elements, and involve owls whenever possible. My website has a lot of descriptions of how projects were built, but I'm planning a talk that gives a little more detail about the business side of making things full time for a living. The talk is aimed at myself, 20 years ago. I hope you're listening, younger me... about this event: https://c3voc.de

On an example of PMM (Percona Monitoring and Management) opensource project I would like to show how to use podman instead of docker in software development process. We would go throw the basic (how to configure it) and discuss the changes required in build scripts, environment and etc. This will cover docker (run, build), docker-compose and briefly minikube to be replaced or use podman. [presentation slides](https://denisok.github.io/oSC/switch_docker_podman_dev_env.html) On an example of PMM (Percona Monitoring and Management) opensource project I would like to show how to use podman instead of docker in software development process. We would go throw the basic (how to configure it) and discuss the changes required in build scripts, environment and etc. This will cover docker (run, build), docker-compose and briefly minikube to be replaced or use podman. [presentation slides](https://denisok.github.io/oSC/switch_docker_podman_dev_env.html) about this event: https://c3voc.de

PAMAL_Group is a European artistic group, composed of artists, media theorists, curators-restorers and engineers. Their artwork "3615 Love" will be installed at EMF 2022. PAMAL_Group creates its own works from digital artworks that have disappeared or been severely damaged due to the obsolescence of computer software and hardware. Its work seeks to reveal the vulnerability of an art that is highly dependent on industrial logic. All the artworks that the collective reconstructs, as close as possible to the original materialities, sometimes in a deficient way, are treated as archives. The artwork "3615 Love" is based on the reconstruction of telematic materialities (videotex, Minitel network, etc.) and the archive of works by Jacques-Elie Chabert and Camille Philibert (L'Objet perdu, 1985) and Eduardo Kac (Videotext Poems, 1985-1986). The installation "3615 Love" shows how fragile and vulnerable our digital environment - and a fortiori its artistic productions - is. about this event: https://c3voc.de

The speaker works for a small company in the UK who have developed a VTVL (Vertical Take-off, Vertical Landing) rocket, also known as a hopper or lander. This started as a student / hobby project and is now receiving funding from the European Space Agency (ESA.) There are lots of interesting technical problems involved in making a VTVL rocket work. You need to steer the rocket engine and control its thrust based on data from a variety of sensors. This involves mechanical, electronics and coding challenges. When fully developed, the test vehicle we've developed will be used to test software and hardware that enable robots to land safely on other planets such as Mars. The talk will start with an introduction to rocket engines and a simple explanation of the vehicle's dynamics then cover the development of our VTVL rocket from hobby project to successful flying test-bed. It will include video footage of recent test flights where the rocket takes off and hovers on a tethered test rig. about this event: https://c3voc.de

It's no news or secret that containers are good at providing multiple and different testing environments, or at offering a way of deploying apps and services that are completely decoupled from the host OS. E.g., spin up a distro X container, check if code compiles there (and dispose of it). How about the opposite? I.e., having one (or more!) stateful and persistent environment(s), tightly coupled with the host and sharing as much information and configuration as possible with it. Why? Well for running that one app, which is only available for another distro, with just a click on a desktop launcher icon. Or for doing all kind of experiments, inside our development environment, without risking the stability and the consistency of the system. Well, yes, containers can do these things too. And in openSUSE, we have both toolbox and distrobox, that can make these examples, just reality! In this talk, we'll explain what they are and how to use them for spawning development and application environments, based either on the same distro you have on the host or on different ones, and inside of which you still have all your file. A working space that, despite being containerized, you can access seamlessly from within GNOME Builder or open new terminals directly inside of it and create launcher icons for apps installed in there. We'll offer (more) examples and show how this can be very useful, both on immutable (like MicroOS) and on "traditional" (like Tumbleweed) systems. It's no news or secret that containers are good at providing multiple and different testing environments, or at offering a way of deploying apps and services that are completely decoupled from the host OS. E.g., spin up a distro X container, check if code compiles there (and dispose of it). How about the opposite? I.e., having one (or more!) stateful and persistent environment(s), tightly coupled with the host and sharing as much information and configuration as possible with it. Why? Well for running that one app, which is only available for another distro, with just a click on a desktop launcher icon. Or for doing all kind of experiments, inside our development environment, without risking the stability and the consistency of the system. Well, yes, containers can do these things too. And in openSUSE, we have both toolbox and distrobox, that can make these examples, just reality! In this talk, we'll explain what they are and how to use them for spawning development and application environments, based either on the same distro you have on the host or on different ones, and inside of which you still have all your file. A working space that, despite being containerized, you can access seamlessly from within GNOME Builder or open new terminals directly inside of it and create launcher icons for apps installed in there. We'll offer (more) examples and show how this can be very useful, both on immutable (like MicroOS) and on "traditional" (like Tumbleweed) systems. about this event: https://c3voc.de

We've all found ourself doomscrolling, and fighting against social network's barrage of extra things in our newsfeed and notifications to keep us there for longer. It's not good use of time, energy and mental bandwith, and hell in my case the habitual refreshing has started giving me RSI. I'll go through my three steps to stop Doomscrolling and get out of the social media refresh loop (or at least try to). about this event: https://c3voc.de

YaST, the flagship installer and configuration tool of openSUSE is in constant development. Just as its unattended companion AutoYaST. Although the YaST Team at SUSE tries to communicate progress as often as possible in the YaST Blog, it has been almost two years since we presented the "Top 25 New Features in (Auto)YaST" at openSUSE Conference 2020. So it's time for another live update! We will recap the main changes and new features that are already integrated into openSUSE Tumbleweed and that will be included at openSUSE Leap 15.4, to be released just a couple of days after the talk. We will also take a look to some ideas for future development... and we really need the feedback of the whole openSUSE community for that. So please join us and speak up! YaST, the flagship installer and configuration tool of openSUSE is in constant development. Just as its unattended companion AutoYaST. Although the YaST Team at SUSE tries to communicate progress as often as possible in the YaST Blog, it has been almost two years since we presented the "Top 25 New Features in (Auto)YaST" at openSUSE Conference 2020. So it's time for another live update! We will recap the main changes and new features that are already integrated into openSUSE Tumbleweed and that will be included at openSUSE Leap 15.4, to be released just a couple of days after the talk. We will also take a look to some ideas for future development... and we really need the feedback of the whole openSUSE community for that. So please join us and speak up! about this event: https://c3voc.de

The largest and the highest energy scientific device - the Large Hadron Collider (LHC) is currently in operation at CERN. This machine is unique in many respects: - It is the most powerful microscope, which can probe the distance one million times smaller than the size of the proton - It can reproduce conditions of the hot Early Universe with the temperature billion times higher than in the core of the sun, corresponding to a picosecond after the Big Bang This uniqueness gives the LHC opportunity to resolve the biggest puzzles of the Universe: - to find the origin of Matter-Antimatter asymmetry – the origin of planets and starts - to Shed a light on the origin of Dark Matter and Dark Energy, 95% of which the Universe is made of (stars and planets contribute only 5% to it !) - to give us the answer on what is the ultimate theory which drives this Universe – at micro and macro scales. In the presentation I will explain the exciting details of the Large Hadron Collider and how it helps to solve the most challenging problems of particle physics and cosmology – from micro to macro scales. https://docs.google.com/presentation/d/1YiUERbdFC7pUVuayv8Swxslz5TvL8X-yFvkLq_1cvNs/edit?usp=sharing about this event: https://c3voc.de

AutoYaST is the main method for installing openSUSE Linux in enterprise environments. Although it is usual for AutoYaST to get new features and fixes with every minor release, openSUSE Leap 15.3 was special in that regard. Thanks to the "Modernizing AutoYaST" initiative, we introduced relevant features like ERB templates, better validation tools, etc. However, we have found that many of these features remain unknown to our users, and the openSUSE Conference offers an excellent chance to present them. AutoYaST is the main method for installing openSUSE Linux in enterprise environments. Although it is usual for AutoYaST to get new features and fixes with every minor release, openSUSE Leap 15.3 was special in that regard. Thanks to the "Modernizing AutoYaST" initiative, we introduced relevant features like ERB templates, better validation tools, etc. However, we have found that many of these features remain unknown to our users, and the openSUSE Conference offers an excellent chance to present them. about this event: https://c3voc.de

We take a scenic tour through the origins of the UK train ticket, from the original BR specification in the 1980s through to modern replacements like mTickets, eTickets and ITSO. This is just a detour though, and we'll focus on the 'orange ticket' (RSP 9399/9599) - which continues to be a stalwart of the UK rail network. Surely they can't be that secure? After all, anyone can encode a magstripe - right? We'll take a look through the data encoded on these tickets, what interesting things you can do with them and maybe (assuming I've got it working by then) we'll be able to read and write our own! about this event: https://c3voc.de

My experiences over the last 2-4 months learning to update packages in openSUSE. Starting around the middle of March 2022, I began learning to update packages with OBS. This lightening talk with highlight my experiences since then learning to package. My experiences over the last 2-4 months learning to update packages in openSUSE. Starting around the middle of March 2022, I began learning to update packages with OBS. This lightening talk with highlight my experiences since then learning to package. about this event: https://c3voc.de

Ask your questions about the new Adaptable Linux Platform. This will be a discussion format with the ALP steering committee. Get all the answers about the next generation product line in this open format discussion. Ask your questions about the new Adaptable Linux Platform. This will be a discussion format with the ALP steering committee. Get all the answers about the next generation product line in this open format discussion. about this event: https://c3voc.de

The development model for the classic release distribution of openSUSE - Leap - has changed several times. Currently it shares the binaries with SUSE SLE. This has advantages, but as well limitations. The talk explains how the development model has evolved and its current pitfalls. In the second part we will introduce the Adaptable Linux Platform (ALP) and discuss the current state of development The development model for the classic release distribution of openSUSE - Leap - has changed several times. Currently it shares the binaries with SUSE SLE. This has advantages, but as well limitations. The talk explains how the development model has evolved and its current pitfalls. In the second part we will introduce the Adaptable Linux Platform (ALP) and discuss the current state of development about this event: https://c3voc.de

Last year, I ported [oreboot](https://github.com/oreboot) to the Allwinner D1 SoC that is found on the Nezha SBC and many other boards now. For a boot loader environment, I chose to embed [LinuxBoot](https://linuxboot.org), and then partitioned an SD card with two root filesystems for testing: OpenWrt, which is small and just ran right away, and openSUSE, which required some extra effort. I was happy to see a new D1 board advertised with openSUSE support, though the process of getting there was tedious enough that I wanted to find an improvement to the workflow. In this talk, I will recap how I modified the openSUSE RISC-V root filesystem, moving an SD card back and forth, and showcase a faster approach instead by leveraging the [`cpu`](https://github.com/u-root/cpu) command that lets us do that iteration over the network. Eventually, we will see how that can be leveraged to continuously test Tumbleweed on real hardware through OpenQA and a corresponding setup, which can also be applied to other hardware, such as ARM. Last year, I ported [oreboot](https://github.com/oreboot) to the Allwinner D1 SoC that is found on the Nezha SBC and many other boards now. For a boot loader environment, I chose to embed [LinuxBoot](https://linuxboot.org), and then partitioned an SD card with two root filesystems for testing: OpenWrt, which is small and just ran right away, and openSUSE, which required some extra effort. I was happy to see a new D1 board advertised with openSUSE support, though the process of getting there was tedious enough that I wanted to find an improvement to the workflow. In this talk, I will recap how I modified the openSUSE RISC-V root filesystem, moving an SD card back and forth, and showcase a faster approach instead by leveraging the [`cpu`](https://github.com/u-root/cpu) command that lets us do that iteration over the network. Eventually, we will see how that can be leveraged to continuously test Tumbleweed on real hardware through OpenQA and a corresponding setup, which can also be applied to other hardware, such as ARM. about this event: https://c3voc.de

centre is a simple Go program (github.com/https://github.com/Harvey-OS/go/tree/main/cmd/centre), which runs as a daemon or interactive program and lets you manage all your IoT devices with one file -- formatted like /etc/hosts. centre was originally written for Plan 9 networks, but is becoming widely used for many other Oses. Like many of us, I have a house full of IoT and server systems, some running Plan 9, some Linux, and all of which need DHCP, TFTP, HTTP, and 9P boot services. Over the years, I've had my fun with various DHCP daemons, TFTP and HTTP boot servers, and 9p servers for Plan 9. All of these needed configuration files in all kinds of formats, and all had lots of ways to fail with each new upgrade. centre removes these headaches. With just one program, one directory, and one configuration file, all the services you need are managed by the centre. In this talk, I'll go over what it is, how to set it up, and how it works. centre is a simple Go program (github.com/https://github.com/Harvey-OS/go/tree/main/cmd/centre), which runs as a daemon or interactive program and lets you manage all your IoT devices with one file -- formatted like /etc/hosts. centre was originally written for Plan 9 networks, but is becoming widely used for many other Oses. Like many of us, I have a house full of IoT and server systems, some running Plan 9, some Linux, and all of which need DHCP, TFTP, HTTP, and 9P boot services. Over the years, I've had my fun with various DHCP daemons, TFTP and HTTP boot servers, and 9p servers for Plan 9. All of these needed configuration files in all kinds of formats, and all had lots of ways to fail with each new upgrade. centre removes these headaches. With just one program, one directory, and one configuration file, all the services you need are managed by the centre. In this talk, I'll go over what it is, how to set it up, and how it works. about this event: https://c3voc.de

Spring Forward, Fall Back... but why? Take a trip from Railway Time to the Olson database, as we explore the strange history of Time Zones and Daylight Saving Time. about this event: https://c3voc.de

DNS is at the heart of the network. Without it, we are hopelessly lost. We can't even google for it. It allows us humans to map the network into the human domain and vice-versa. Yet we ignore it as unimportant part of network security fabric and allow individual unnamed corporation to control over 20% the internet lookups, because they are not evil. This presentation should serve as a quick survey of DNS technologies from basic overview of how DNS works, to DoT, DoH, and DNScrypt. Finally we cover DNSSEC and reasons we should stop ignoring it if we want a trustworthy and resilient infrastructure. Finally we will cover why running your own DNS server should be the first thing you do to secure your own networks. Fun Fact: pdns-recursor in openSUSE is DNSSEC validating by default for half a decade already DNS is at the heart of the network. Without it, we are hopelessly lost. We can't even google for it. It allows us humans to map the network into the human domain and vice-versa. Yet we ignore it as unimportant part of network security fabric and allow individual unnamed corporation to control over 20% the internet lookups, because they are not evil. This presentation should serve as a quick survey of DNS technologies from basic overview of how DNS works, to DoT, DoH, and DNScrypt. Finally we cover DNSSEC and reasons we should stop ignoring it if we want a trustworthy and resilient infrastructure. Finally we will cover why running your own DNS server should be the first thing you do to secure your own networks. Fun Fact: pdns-recursor in openSUSE is DNSSEC validating by default for half a decade already about this event: https://c3voc.de

You're shopping for new hardware, but you're not sure if it will be supported by openSUSE? This talk explains some basics on how hardware support works and what ways you have to find out if your hardware is supported or not. After 17 years of Linux hardware compatibility testing and hardware certification I can tell some good advice. You're shopping for new hardware, but you're not sure if it will be supported by openSUSE? This talk explains some basics on how hardware support works and what ways you have to find out if your hardware is supported or not. After 17 years of Linux hardware compatibility testing and hardware certification I can tell some good advice. about this event: https://c3voc.de

The ceremony in which we open the event about this event: https://c3voc.de

<p>Seit Jahren fliehen Menschen aus Krisen- und Kriegsregionen über die sogenannte Balkanroute, auf der Suche nach einem sicheren Ort zum Leben. People on the Move stecken, im bosnischen Grenzkanton Una-Sana, in einer „Sackgasse“, weil die kroatische Polizei systematisch gewaltvolle Pushbacks, also illegale Rückführungen aus Kroatien nach Bosnien, durchführt.</p><p>Diese rechtswidrige, unmenschliche Praxis wird von der EU mitfinanziert. In Bosnien und Herzegowina ist die Situation für die Fliehenden katastrophal: unter menschenunwürdigen Bedingungen leben sie in Zelten und Ruinen.</p><p>Seit dem Februar 2022 fliehen circa 5 Millionen Menschen aufgrund des Angriffskriegs in der Ukraine und viele konnten innerhalb kürzester Zeit sichere Orte in der EU finden. Dieses Verantwortungsbewusstsein und die gelebte Solidarität für ukrainische Menschen auf der Flucht, zeigt was möglich ist, wenn der politische Wille zum Handeln vorhanden ist: sichere Fluchtwege und offene Grenzen sind umsetzbar!</p><p>Wie kann dieser politische Willen genutzt und ausweitet werden? Wie kann Aufmerksamkeit verteilt werden? Und welche Rolle spielen Vereine die People on the Move unterstützen dabei?</p><p>Im Rahmen der monatlich stattfindenden Veranstaltung "Debate! Humanitarian Aid" von Cadus e.V., berichtet <a href="https://blindspots.support/" rel="noopener" target="_blank">Blindspots</a> von der aktuellen Lage im bosnisch-kroatischen und slowakisch-ukrainischen Grenzgebiet und zeigt dabei Lebensrealitäten von Menschen vor Ort auf. Zudem wird die Arbeit von Blindspots vorgestellt – einem Verein, der People on the Move unter dem Motto „SolidarityWithoutBorders“ unterstützt.</p> about this event: https://cadus.org/debate

At SUSE, and openSUSE we have short feedback loops to ensure compliance with a range of certifications, but our tools can have real world impact beyond the physical barriers, I will talk about how openQA can support operations in Healthcare, Manufacturing, Automotive, Edge, Transportation, and Elections. At SUSE, and openSUSE we have short feedback loops to ensure compliance with a range of certifications, but our tools can have real world impact beyond the physical barriers, I will talk about how openQA can support operations in Healthcare, Manufacturing, Automotive, Edge, Transportation, and Elections. about this event: https://c3voc.de

In this talk I'm gonna talk about how we use self hosted and open source solutions at school. In this talk I'm gonna talk about how we use self hosted and open source solutions at school. about this event: https://c3voc.de

As the world moves to using machine learning more and more, a question arises of how to prevent cyber criminals from attacking systems using ML frameworks. In this talk, we will cover why machine learning needs security practices and how we develop TensorFlow to be secure. We will discuss topics such as fuzzing and code transformations for secure software development with a focus on how these are applied within TensorFlow ecosystem. As the world moves to using machine learning more and more, a question arises of how to prevent cyber criminals from attacking systems using ML frameworks. In this talk, we will cover why machine learning needs security practices and how we develop TensorFlow to be secure. We will discuss topics such as fuzzing and code transformations for secure software development with a focus on how these are applied within TensorFlow ecosystem. about this event: https://c3voc.de

This talk will introduce the SUSE Product Security team, who handles the software security processes for openSUSE and also SUSE Linux Enterprise. The SUSE Product Security work is split into "reactive" and "proactive" areas and engineering groups these days. Reactive work refering to what is traditionally known as "security incident response", while proactive refers to security audits, design reviews and related areas of secure software development. The talk will focus on the reactive side, giving statistics, and talk about some highlights from the last year. Also bringing a small overview over how closing the leap gap changes affects the openSUSE Maintenance process. This talk will introduce the SUSE Product Security team, who handles the software security processes for openSUSE and also SUSE Linux Enterprise. The SUSE Product Security work is split into "reactive" and "proactive" areas and engineering groups these days. Reactive work refering to what is traditionally known as "security incident response", while proactive refers to security audits, design reviews and related areas of secure software development. The talk will focus on the reactive side, giving statistics, and talk about some highlights from the last year. Also bringing a small overview over how closing the leap gap changes affects the openSUSE Maintenance process. about this event: https://c3voc.de

warewulf4 is a rewrite of the well known warewulf cluster management tool in golang. With this new iteration its possible to leverage the possibilities which emerged with broad use of containers. The origins of warewulf4 is the hpcng community which is/was also behind projects like Apptainer (former known as Singularity), Centos and Rocky linux. A basic setup of a HPC cluster and the key concept of the configuration mechanism of warewulf4 are covered in this talk. warewulf4 is a rewrite of the well known warewulf cluster management tool in golang. With this new iteration its possible to leverage the possibilities which emerged with broad use of containers. The origins of warewulf4 is the hpcng community which is/was also behind projects like Apptainer (former known as Singularity), Centos and Rocky linux. A basic setup of a HPC cluster and the key concept of the configuration mechanism of warewulf4 are covered in this talk. about this event: https://c3voc.de

Recently MicroOS can be installed with remote attestation, using the TPM as a root of trust and Keylime as a service to report and verify the status of our systems. In this talk we will see what is a TPM, how Keylime can be installed in MicroOS and used to monitor the health of our system in production and what to do when we detect a compromised system. Recently MicroOS can be installed with remote attestation, using the TPM as a root of trust and Keylime as a service to report and verify the status of our systems. In this talk we will see what is a TPM, how Keylime can be installed in MicroOS and used to monitor the health of our system in production and what to do when we detect a compromised system. about this event: https://c3voc.de