Chaos Computer Club - archive feed

Freifunk Open-MPPT is an expanding Open-Hardware and Open-Software development project for efficient and resilient energy autonomous infrastructure like communication nodes, environment monitoring, irrigation – and more. The talk presents the currently available models, evolution, scope of current use and presents an outlook of what might follow in the future. The OpenMPPT development project was initiated by Freifunk in 2017 with the first design handling up to 50 Watt PV (solar) power. The intended application was to build cheap and effective solar WiFi mesh nodes with telemetry. At the time of the project's initiation, there were no small and low-cost solar charge controllers available that included maximum power point tracking. Maximum Power Point Tracking is a technique used in solar power systems to optimize the power output from the solar panels by tracking the point where the panels can deliver the maximum amount of power. The OpenMPPT project aimed to fill this gap and provide an open, cost-effective, and repairable DIY alternative for individuals and development NGOs who look for open hardware and software solutions. Initially, the idea was not to replace or compete with more powerful closed hardware and closed software Maximum Power Point Trackers on the market. However, people and development NGOs kept asking for more power and features like the possibility of adding sensors or building irrigation systems, because they want open hardware and software solutions. The development of the Freifunk-OpenMPPTs is following sue. The newer and expanded FF-ESP32 generations of OpenMPPT controllers are based on the ESP32 MCU by Espressif and can handle up to 400 Watt solar power. They can not only power communication nodes, but also solar powered servers in communities that live off-grid or have unstable power. However, people keep on asking for more power... about this event: https://pretalx.c3voc.de/camp2023/talk/EMBRHS/

Seit 2018 gilt in Europa die DSGVO. Doch kaum einer hält sich daran. Datengetriebenes Online-Marketing verstößt jeden Tag millionenfach gegen Datenschutzrecht. Nicht nur die bekannten Big Player wie Google und Meta handeln mit Profilen von Millionen von Menschen und analysieren jede Interaktion beim Surfen. Spätestens seit der Corona-Pandemie setzen auch öffentliche Stellen wie Universitäten im Zuge einer fehlgeleiteten Digitalisierung Werkzeuge ein, mit denen Menschen überwacht werden. Viele Unternehmen nutzen IT-Tools, deren Funktionsweise sie kaum durchsteigen und deren Sicherheit sie nicht gewährleisten können. So sorgen sie dafür, dass sensible Daten über Betroffene offengelegt werden. Behörden und die Zivilgesellschaft gehen seit mehreren Jahren gegen Verstöße gegen die DSGVO vor. Doch die behördliche Rechtsdurchsetzung verläuft schleppend. Es gibt einen weiteren Weg: Betroffene und Verbände können vor Zivilgerichten ihre Rechte einklagen. Zum Beispiel die Unterlassung einer Datenverarbeitung, die Löschung personenbezogener Daten und sogar Schadenersatz. Wie datenschutzrechtliche Gerichtsverfahren ablaufen, wie Tracking und Datenhandel im Zivilverfahren nachgewiesen werden können und wie man Richter:innen das Internet erklärt, berichten die Rechtsanwält:innen Elisabeth Niekrenz und Tilman Herbrich. about this event: https://pretalx.c3voc.de/camp2023/talk/S7DPYT/

Three years ago, I started what I thought would be a six month project to implement some CAM software for 3D printing purposes, without using any of the existing geometry kernels. How hard can it be, right? I made some choices that seem weird but were done for very good reasons, and ended up implementing some things that are actually new and exciting. Here’s the story of the adventure so far. As the adoptive maintainer of one piece of 3D printing toolchain (ImplicitCAD, a programmable 3D modelling tool), I made the possibly unwise decision to implement another part of the toolchain - HSlice, a slicer. For a number of reasons I’ll get into in detail later, I decided to not use any of the existing multi-million-LoC geometry kernels, to implement the whole thing from first principles in Haskell, and to use some exciting new mathematics. All of those decisions were made for good reasons, and all of them came back to bite me. I’m here to tell you about what I’ve built so far, how I ended up as the singular intersection of these technologies, and how much I hate floating point. Then, I’ll tell you what it’s like implementing things whose only documentation is research papers, with math developed this century and algorithms that are still in development now. I’ll tell you about some incredibly cool algorithms involving crashing Austrian motorcycles and attempt to recruit you to work on this stuff too, for free. about this event: https://pretalx.c3voc.de/camp2023/talk/7KRCLF/

Stopping global heating does not just mean building solar panels and wind turbines, and switching to electric vehicles. Many industrial processes have carbon emissions that cannot be avoided with today's technology. Producing cement, steel, glass, plastics, aluminium, and many other products will require new production processes. In the talk, I will discuss some of these examples and the huge challenges that come with these changes. Some background: * https://industrydecarbonization.com/ * https://www.golem.de/news/die-fossilfreie-chemiefabrik-von-elektrischen-crackern-und-gruenen-olefinen-2204-163344.html * https://www.golem.de/news/industrie-wie-die-glasindustrie-vom-erdgas-abhaengt-2206-165969.html about this event: https://pretalx.c3voc.de/camp2023/talk/MRSFXH/

Die Sondersendung ist ein Podcast-Format des Sendezentrums. Bei dieser Sondersendung wollen wie mit Jugendlichen über ihre Erlebnisse vom Camp sprechen. Wir (Simon, Ebu und Gero) vom [Sondersendung Podcast](https://das-sendezentrum.de/sondersendung) erklären erstmal, was **Live-Podcasting** von einem normalen Vortragsprogramm unterscheidet und wie wir Gero und Ebu von remote zuschalten und trotzdem unsere einzelnen Spuren aufnehmen können. Wir sprechen darüber, wie man Podcasts verwenden kann, um Wissen und Ideen zu verbreiten. Außerdem haben wir **auf der Bühne zwei Plätze frei**, auf die ihr Euch setzen und mit uns sprechen könnt (Achtung: ihr seid dann live und im Nachgang als Aufzeichnung offen im Internet zu sehen). Wir werden mit Euch über zwei Frage sprechen: 1. Hört Ihr Podcast? Wenn ja, welche und was sind Eure Lieblings-Podcasts? Habt ihr selber schon mal Podcasts gemacht? 1. Was habt ihr hier auf dem Camp schon gemacht? Habt ihr Tipps, was die anderen auf jeden Fall bis Samstag noch erleben sollten? Wer dann Fragen zu Podcasting hat, kann direkt auf uns zukommen, auf dem Camp ins [Sendezentrum Village](https://events.ccc.de/camp/2023/hub/camp23/de/assembly/sendezentrum/) kommen oder sich jederzeit in der [Sendegate-Community](https://sendegate.de) anmelden. about this event: https://fahrplan.alpaka.space/camp-2023/talk/EJVJ3P/

Space missions need data networks, and it's not exactly a TCP/IP world up there. This talk will give an introduction to space data networks. Challenges at the physical layer are not in scope. Instead I will illustrate protocols, routing algorithms, and other schemes that were designed for networking in space. Space Communication is, as many others, a fractured discipline, with many idiosyncratic solutions built for the needs of specific missions. Someone with decades of specialized industry experience could surely give a good picture of recurring problems and industry practices. Unfortunately I don't have those, but thankfully the people who do have been writing standards. (The presupposition becomes less and less true with time anyway, as agencies look towards inter-mission and inter-agency interoperability.) The primary basis for this talk are various documents, published by relevant working groups of the CCSDS and IETF. This talk will be about the protocol ecosystem used in space networking, highlighting some clever technical solutions, and ending on some visions and challenges for the future. I presuppose some knowledge of classic internet protocols and the ISO-OSI layer model, but you should be able to follow the talk without it. (also check out: https://pretalx.c3voc.de/camp2023/talk/YZQYW9/ (german)) about this event: https://pretalx.c3voc.de/camp2023/talk/7FHFZA/

Über die Konstruktion und den Bau eines Scanners, um die Überwachung durch die sogenannte Chatkontrolle zu verdeutlichen Regelmäßig gibt es politische Vorhaben, die Kommunikation von Bürger:innen massenhaft zu durchleuchten und auszuwerten. Wie verdeutlicht man Menschen die Gefahren, die derartige Systeme darstellen, wo die Technik dahinter sich doch so abstrakt anfühlt, nicht greifbar ist und "man ja sowieso nichts zu verbergen hat"? Anlässlich des neuesten Vorstoßes der EU-Kommission, der sogenannten Chatkontrolle, versucht Digitalcourage diese Überwachung greif- und sichtbar zu machen. Entstanden ist eine kleine Maschine, die die auf einem Smartphone gespeicherten Inhalte scannt und auswertet. In diesem Talk werden wir über die Idee, Planung und den eigentlichen Bau der Elektronik, Hard- und Software sprechen. Selbstverständlich ist auch jede:r eingeladen, sein mobiles Endgerät zum Schluss selbst auf illegales Material zu prüfen. about this event: https://pretalx.c3voc.de/camp2023/talk/KGKGBB/

A discussion with Jeremy Hammond and Gabriella Coleman on the evolution of digital resistance, from direct action hacking to whistleblowing. How can hacktivists synergize with street activism to enact revolution? Can the lulz beat back the techno-fascist dystopia and their infosec enablers? We'll present strategies to strengthen decentralized networks, challenge government repression, and practice international solidarity. A discussion on the evolution of digital resistance, from direct action hacking to whistleblowing. How can hacktivists synergize with street activism to enact revolution? Can the lulz beat back the techno-fascist dystopia and their infosec enablers? We'll present strategies to strengthen decentralized networks, challenge government repression, and practice international solidarity. about this event: https://pretalx.c3voc.de/camp2023/talk/CLKXXG/

about this event: https://pretalx.c3voc.de/camp2023/talk/8830/

Kurze Erklärung wie DNA bzw Phosphoramiditsynthese funktioniert. DNA ist der code des Lebens. Theoretisch kann jeder im Labor DNA synthetisieren. Die Technik dahinter heißt Phosphoramidit-Synthese und ist auch für Informatiker spannend. about this event: https://pretalx.c3voc.de/camp2023/talk/3YQS3E/

Politik und Verwaltung sind auf kompakte Informationen angewiesen. Ist die Wirklichkeit zu komplex, so wird sie auf Indikatoren reduziert. Dieser Talk beleuchtet den Digitalisierungsprozess am Beispiel des "Monitoring häufiger Brutvögel", dessen Zahlen in Indikatoren auf Bundes- und EU-Ebene eingehen. Die Erfassung von Rohdaten im Gelände war lange Handarbeit, seit letztem Jahr läuft sie fast automatisch. about this event: https://pretalx.c3voc.de/camp2023/talk/JECUTC/

Feministische und dekoloniale Kritik liberaler Sichten auf digitale TechnologienBeschreibung: In den jüngeren Debatten um die Regulierung digitaler Technologien kommen überwiegend liberale gesellschaftspolitische Weltbilder zum Tragen. Der Vortrag widmet sich im Gegensatz dazu mit fundierten systemkritischen Perspektiven auf digitale Technologien. Ausgehend von feministischen und dekolonialen Perspektiven werden ökonomische und sozio-politische Strukturen digitalisierter Gesellschaften beleuchtet. Es werden verschiedene Beispiele feministischer und dekolonialer Argumentationen, Forderungen und Projekte umrissen und im Anschluss ausgiebig mit dem Publikum diskutiert. about this event: https://pretalx.c3voc.de/camp2023/talk/G3D8RQ/

We've all been there, we knocked a company offline while doing some well intended security testing. How many requests per second is considered ethical? How deep into a system can you go, dump the database or not? Reverse shell or touch /tmp/pwned? What are YOUR ethical boundaries? What is ethical? and why? Is buying credentials of the dark web ethical? Is fuzzing a server in a broom closet with millions of requests ethical? Did you know it was a raspberry pie in a broom closet? This talk discusses ethical boundaries, the existence and lack of them, but also the grey areas in between. The spark for this talk has been initiated from the need to ensure that all forms of security testing would be beneficial to all parties concerned and within some ethical boundaries. From secret hacking techniques to open blog posts and CVE's. Hopefully this talk will spark some discussions within the community so we can all go home with a clear conscience and preserve moral high ground. about this event: https://pretalx.c3voc.de/camp2023/talk/ANGUCW/

Hear about our adventure setting up the [Labitat Internet Exchange (LabIX)](https://ix.labitat.dk/) in Copenhagen. Many nice FOSS tools for network routing exist, but we found that technical details on IXPs are not as easily searchable and available as one would like. We will show how PeeringDB and a route server ([AS60247](https://as60247.peeringdb.com/)) help connecting our peers and which BGP filtering strategies we use. Hardware and server housing are of course, also needed in order to physically connect your peering clients. There is also the administrative part: you would need an Autonomous System Number (ASN) in order to do real networking routing, but how do you find a friendly sponsoring Local Internet Registry (LIR) to get a hold of IP resources? And what about the RIPE database entries? Which do we need? about this event: https://pretalx.c3voc.de/camp2023/talk/87V9Z8/

Meshenger is a P2P Android phone app that started out as a demo for community mesh networks. Meshenger started out as an idea to promote off the grid mesh networks and has now reached its initial goal. In this talk I will talk about the idea behind it, the story how it came to be and of course how it works. about this event: https://pretalx.c3voc.de/camp2023/talk/9XPJNG/

In this talk we will discuss the radio jailbreaking journey that enabled us to perform the first public disclosure and security analysis of the proprietary cryptography used in TETRA (Terrestrial Trunked Radio): a European standard for trunked radio globally used by government agencies, police, prisons, emergency services and military operators. Besides governemental applications, TETRA is also widely deployed in industrial environments such as factory campuses, harbor container terminals and airports, as well as critical infrastructure such as SCADA telecontrol of oil rigs, pipelines, transportation and electric and water utilities. For over two decades, the underlying algorithms have remained secret and bound with restrictive NDAs prohibiting public scrutiny of this highly critical technology. As such, TETRA was one of the last bastions of widely deployed secret proprietary cryptography. We will discuss in detail how we managed to obtain the primitives and remain legally at liberty to publish our findings. This journey has involved reverse-engineering and exploiting multiple zero-day vulnerabilities in the highly popular Motorola MTM5x00 TETRA radio and its TI OMAP-L138 trusted execution environment (TEE) and covers everything from side-channel attacks on DSPs, through writing decompilers headache-inducing DSP architectures, all the way to exploiting ROM vulnerabilities in the Texas Instruments TEE. about this event: https://pretalx.c3voc.de/camp2023/talk/ATJMB9/

Leyer talks to the Internet-Manufakur aka "Network Operation Center" about their work. This time he is actually told 3 minutes before that its broadcasted LIVE – but it does not really matter to him anymore. about this event: https://pretalx.c3voc.de/camp2023/talk/camp20231989/

This talk offers an overview about difficulties when learning programming for Non-English-Speakers or at least not native English speakers. After the introduction there will be a live demo of some multilingual programming languages and an explanation how to define functions in different programming languages. about this event: https://pretalx.c3voc.de/camp2023/talk/Z8T9HD/

Leena Simon liest aus ihrem Buch "Digitale Mündigkeit" und erklärt, weshalb wir damit die Welt retten könnten. Digitalisierung öffnet uns ein Meer an Zukunftsmöglichkeiten. Gleichzeitig verschließen wir oft die Augen vor den Untiefen und Risiken der technischen Entwicklungen: Social Media verhilft Populisten zum Wahlsieg, Algorithmen befeuern die Spaltung der Gesellschaft, Technik bevormundet uns und raubt uns den Sinn für Verantwortung. Das gefährdet die Grundprinzipien von Freiheit und Demokratie. Leena Simon liebt Technik und pflegt gleichzeitig einen kritischen Blick darauf. Sie macht Mut, sich weder zu verweigern noch auszuliefern, sondern als Einzelne und als Gesellschaft Verantwortung zu übernehmen. Denn mit Mut, Entschlossenheit und Übung können wir wieder mündig sein. Dann finden wir auch die Lösungen für die Herausforderungen unserer Zeit. about this event: https://pretalx.c3voc.de/camp2023/talk/RHWHRW/

Today, Information & Communications Technology accounts for 2-3% of global CO2 emissions, on a par with the aviation industry. If nothing changes, by 2050 it's estimated this number will rise to over 30%. Often overlooked is the crucial role of software. It is software which determines hardware's energy consumption, and for how long devices remain in use. That software design can drive environmental harm is still largely unknown to much of the population, let alone that users can already do something about it with Free Software. In early 2023 KDE published the handbook "Applying The Blue Angel Criteria To Free Software", the culmination of a 21-month project funded by the German government. The handbook presents the whys, whats, and hows for certifying software as sustainable with the Blue Angel ecolabel. In this talk I will provide an overview of the environmental harm driven by software and how Free Software is well-positioned to address the issues. I will link the inherent values that come with a Free & Open Source Software license to sustainable software design, and I will present the various ways that Free Software aligns with the Blue Angel ecolabel. Finally, I will provide an overview of the current sustainability goal of KDE and the work of the KDE Eco initiative. This includes publishing the KDE Eco handbook, setting up a measurement lab for FOSS developers, squashing hundreds of efficiency bugs, supporting the sustainability objectives of the FOSS Nigeria project "Renew V", among others. about this event: https://pretalx.c3voc.de/camp2023/talk/YVWNW3/

A short session for even shorter talks. Language: English or German -- german -- Du willst was sagen? Das Podium gehört dir. 10 Minuten hast du, dann wird gewechselt. Ein kurzer Vortrag über die Aerodynamik von Enten, Werbung für dein neues Open-Source-Projekt, ein kleiner Hack den du neulich entdeckt hast, gesellschaftliche Kommentare ... alles geht. Zur Verfügung stehen Mikrophon, Beamer und ein Laptop mit USB-Stick, um Präsentationen im PDF-Format zu zeigen. Falls du eine Präsentation von deinem eigenen Gerät zeigen möchtest, würden wir dich bitten, 15 Minuten vor Beginn zu kommen, damit wir die Technik testen können. Am besten meldest du deinen Vortrag bei [email protected] . Spontane Beiträge sind aber auch gern gesehen, wenn am Ende noch Zeit ist. -- english -- Wanna say something? The stage is yours. You have 10 minutes to talk about anything. A short talk about the aerodynamics of ducks; promoting your new open-source project; a small hack that you found; social commentary ... anything goes. Available infrastructure: A microphone, beamer and laptop with a USB-Stick to show slides (PDF format). If you want to use your own device to show your presentation, please come to the stage 15 minutes before the event so we can test the setup. If you want to have a talk, we'd like you to write a short e-mail to [email protected] . However, spontaneous contributions are also welcome if there's still some time left at the end. about this event: https://pretalx.c3voc.de/camp2023/talk/8ZC3K7/

An Oblivious Pseudo-Random Function (OPRF) is versatile cryptographic primitive which is the basis for a wide range of protocols and tools. They enable one to outsource randomness computations to another party without having to trust them or make any compromises in confidentiality of the inputs. The most common benefit of using an OPRF, is that it adds strong privacy guarantees to protocols. A well-placed OPRF can also provide confidentiality without needing a PKI infrastructure. In some cases an OPRF can provide strong security guarantees that traditional systems cannot provide. OPRFs are truly one of the most exciting and underappreciated cryptographic building blocks of the last decade. In this talk I am will explain how OPRFs work, properties can achieve, and how OPRFs are used in various protocols. I am going to show some examples of existing free software tools which use or provide OPRFs and how these tools compare to alternative solutions. The talk is structured in two parts, a theoretic part which explains various types of OPRFs, their properties and where and how these are beneficial. And in the second part I will show concrete free software implementations: liboprf, libopaque, sphinx (a password storage that could be run by the NSA) and klutshnik, a threshold key management system, all authored by Yours Truly. I will also touch briefly on standardisation efforts of OPAQUE and OPRF by the IRTF CFRG, to which I contribute. Other examples I will bring will include private set intersection (used for contact discovery or haveibeenpwned-style privacy- respecting compromised account checks), private information retrieval, single-sign-on with privacy, deduplication and secure pattern matching. about this event: https://pretalx.c3voc.de/camp2023/talk/KG9EEV/

Come to play the Game of All Games! You will want to tell everybody about it once you’ve played it! Come to play the Game of All Games! You will want to tell everybody about it once you’ve played it! Nomic is a game where every move is to change the game itself. Nomic gives you a first-hand experience of the glory and frustration of democracy, the tricks of lobbyism, the paradox of self-amendment or it could simply be a good fun time, totally depending on the people you are playing with! There’ll be a simple set of initial rules to begin the game with, then for each move, players take turns to suggest a change to the existing rules of the game. Win or lose? You decide!!! Pre-requisite: Be able to articulate yourself in English. about this event: https://fahrplan.alpaka.space/camp-2023/talk/9R7RYA/

In this presentation, I will talk about how DDoS attacks were carried out generally in the last 11 years and how they innovated since then; I will also present more specific details about attacks against government websites from bundestag.de in 2012 to ukraine-wiederaufbauen.de and others in February - August 2023. This talk aims to also entertain but mostly educate on how to mitigate current attacks. You can expect technical, not political slides. about this event: https://pretalx.c3voc.de/camp2023/talk/CJLKAK/

Frag die Teams about this event: https://pretalx.c3voc.de/camp2023/talk/7937/

Post, Himmel, Züge und Wetter about this event: https://pretalx.c3voc.de/camp2023/talk/JKAVHL/