Chaos Computer Club - archive feed

Chaos Computer Club - archive feed

By CCC media teamTechnology
Download on the App Store

Chaos Computer Club - archive feed episodes

  • (opensource == secure)? Yes, if you audit it! (osc22)
    Tales in a life of a product security engineer making Open Source software more secure one bit at time.
    In this session, I will talk about what does it mean to be a product security engineer and how SUSE security team audits can help Open Source community in having a better security posture.
    Tales in a life of a product security engineer making Open Source software more secure one bit at time.
    In this session, I will talk about what does it mean to be a product security engineer and how SUSE security team audits can help Open Source community in having a better security posture.
    about this event: https://c3voc.de
    19 min
  • Ship vs Oil Rig (emf2022)
    When a 3,500 ton ship tries to be in the same place as an oil rig then it is safe to say that someone is going to have a bad day. Nobody was injured and no oil was spilled, so it didn't make the news and was just an insurance job - a very BIG insurance job. This talk explains the many mistakes that led to the accident occurring, and how much worse the outcome could have been. It is presented by an insider, but only uses information in the accident report and other public sources for legal reasons :)
    about this event: https://c3voc.de
    25 min
  • Captain Proton's Ukulele for Dummies (emf2022)
    A short talk on how to build, play and perform with a ukulele illustrated with geeky songs based on my love of physics and electronics. Advice for joining bands and getting free beer at a pub open mic night for the musically inept. I'll bring along my homemade electro uke made out of oak, enamel paint, and bruised thumbs.
    Although the talk will be brief, I can stay around afterwards to discuss cutting frets, changing strings, stage fright and how to stop your fingers from freezing when playing outdoors in December.
    about this event: https://c3voc.de
    30 min
  • Still not Superheroes (osc22)
    During the last years, the openSUSE infrastructure was improved a lot. But is it perfect now? Of course not - otherwise the Heroes would be bored, and I could not give this talk. And of course, where people work, funny[tm] things happen - please bring your own popcorn ;-)
    During the last years, the openSUSE infrastructure was improved a lot. But is it perfect now? Of course not - otherwise the Heroes would be bored, and I could not give this talk. And of course, where people work, funny[tm] things happen - please bring your own popcorn ;-)
    about this event: https://c3voc.de
    22 min
  • Web asset security (osc22)
    Before downloading a software release, we all know to verify the GPG signature before even trying to unpack that tarball. And when such a signature is not available, we all know to chastise the developer for not taking security seriously. But what happens with deployed web resources? How can these be verified before we trust them with our secure data?
    I would like to show a proof-of-concept of using out-of-band verification (aka, DNS) of web content (.js, .html, .jpeg, etc) prior to allowing it to execute and trusting it with our data.
    Before downloading a software release, we all know to verify the GPG signature before even trying to unpack that tarball. And when such a signature is not available, we all know to chastise the developer for not taking security seriously. But what happens with deployed web resources? How can these be verified before we trust them with our secure data?
    I would like to show a proof-of-concept of using out-of-band verification (aka, DNS) of web content (.js, .html, .jpeg, etc) prior to allowing it to execute and trusting it with our data.
    about this event: https://c3voc.de
    27 min
  • Soft Electronics (emf2022)
    This talk explores the softer side of electronics, from electronic embroidery and e-textiles to soft robotics and flexible PCB design. We will take a look at some of the exciting technologies in this field, including industrial machines that embroider traces to microcontrollers, open source soft robotics, 'pick and place' sewable LEDs, e-textiles in space, fabric speakers and the world of flexible and stretchable PCB design. I will also share examples of how engineers, scientists and artists are using these soft electronics technologies in their work.
    As well as this higher level overview, we will take a look at a number of accessible DIY projects, along with practical tips on materials and techniques, and suggestions for further learning. I will also talk about softness in electronics in a non-literal sense, looking at some cool projects from the community that link emotions, vulnerability and physical computing.
    about this event: https://c3voc.de
    27 min
  • Uyuni Saltboot - automated image deployment and lifecycle with Uyuni (osc22)
    Deploying images is ever evolving topic. Although much of the deployments today are concerned with containers, base systems for container host are somehow needed to be deployed as well.
    Let me present Saltboot, part of Uyuni stack. Saltboot is building on SaltStack to make image deployment secure and together with Uyuni provides complete image lifecycle and management - from image building, staging to deployment on target machines.
    Deploying images is ever evolving topic. Although much of the deployments today are concerned with containers, base systems for container host are somehow needed to be deployed as well.
    Let me present Saltboot, part of Uyuni stack. Saltboot is building on SaltStack to make image deployment secure and together with Uyuni provides complete image lifecycle and management - from image building, staging to deployment on target machines.
    about this event: https://c3voc.de
    46 min
  • Sudo 1.9+ (osc22)
    Sudo is used by millions to control and log administrator access to systems, but using only the default configuration, there are plenty of blind spots. Using the latest features in sudo lets you watch some functions that previously were blind spots and you can also control access to them. There were several minor and major changes since the 1.9.0 release that I discussed in my previous FOSDEM talks.
    Sudo is used by millions to control and log administrator access to systems, but using only the default configuration, there are plenty of blind spots. Using the latest features in sudo lets you watch some functions that previously were blind spots and you can also control access to them. There were several minor and major changes since the 1.9.0 release that I discussed in my previous FOSDEM talks.
    about this event: https://c3voc.de
    31 min
  • Emotions, what's up with those? (emf2022)
    About four years ago I realised I was miserable and that I should probably do something about that, so I did what any self-respecting nerd would do and read a tonne of books to figure out how emotions worked (I did also go to therapy, but the books were more useful). Life isn't perfect now, but it's a lot better despite the ongoing war and pandemic.
    I'm going to give you an overview of some of the things I've learned. It will be a mix of theory (what even are emotions?) and practical advice for understanding and engaging with your emotions better, with a pointer towards further reading that will help you act on this advice better.
    about this event: https://c3voc.de
    31 min

About Chaos Computer Club - archive feed

From the publisher's feed

Der Chaos Computer Club ist die größte europäische Hackervereinigung, und seit über 25 Jahren Vermittler im Spannungsfeld technischer und sozialer Entwicklungen.