Chaos Computer Club - archive feed (high quality)

Forschungsdaten im Fokus (nook24)

Fri, 08 Nov 2024 19:00:00 +0100

Die Replikationskrise beschreibt, dass viele Studienergebnisse in der Wissenschaft nicht replizierbar sind. Zahlreiche Forschungsarbeiten sind dementsprechend nicht nachvollziehbar. Dieser Umstand stürzte das Vertrauen in die Wissenschaft in die Krise. Es wurde ein breiter interdisziplinärer Diskurs gestartet, um die Veröffentlichungspraxis und den Datenzugang in der Wissenschaft zu verbessern. Die FAIR-Prinzipien, die Initiative zur Forschungsdateninfrastruktur (NFDI) und Datenkompetenzzentren sind Lösungen, die die Replikationskrise in Deutschland überwinden wollen. In diesem interaktiven Vortrag sprechen wir über aktuelle Entwicklungen im Forschungsdatenmanagement. Was bedeuten die FAIR-Prinzipien für Daten und Software? Wird die Wissenschaft durch diese Prinzipien offener? Welche Rolle spielt die Informatik im Forschungsdatenmanagement? Kein Vorwissen notwendig! Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/forschungsdaten-im-fokus/

We Could Be Green IT Heroes (wicmp10)

Sun, 02 Mar 2025 13:15:00 +0100

Leidenschaftlich gern Software entwickeln und dabei den Planeten retten? Das klingt nach einem Abenteuer! Mit Green IT können Softwareschaffende einen Beitrag dazu leisten, IT-Systeme nachhaltiger zu machen. Dadurch können Ressourcenverschwendung und die weitere Zerstörung der Umwelt verhindert werden. In diesem Vortrag möchte ich euch mit auf die Reise nehmen und Green IT zeigen. In "We Could Be Green IT Heroes" beschreibe ich meinen eigenen Weg zu nachhaltiger Softwareentwicklung. Wie bin ich dazu gekommen, mich mit Green IT auseinanderzusetzen? Welche Herausforderungen kamen dazwischen? Wie können wir gemeinsam für eine grünere IT sorgen? Das sind die Fragen, die in diesem Vortrag beantwortet werden sollen - mit vielen Videospiel-Referenzen! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.zam.haus/wicmp-2025/talk/NDSUZV/

Got a Secret, Can You Keep It? - Mastering Secret Management in Kubernetes (cmc2025)

Mon, 03 Feb 2025 16:25:00 +0100

Managing secrets in Kubernetes can be a complex and overwhelming process, especially with the wide range of available options. This talk, designed for intermediate users, aims to demystify the process by providing a practical roadmap drawn from my own journey. I will explore common challenges and share insights from transitioning through various approaches, from Kubernetes' built-in secrets to external tools like Sealed Secrets, CSI Secrets Store, and External Secrets. Through real-world examples and lessons learned, attendees will leave with actionable strategies to manage secrets more securely and efficiently in their Kubernetes environments, while contributing to stronger community practices and more resilient applications. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/HS8ELE/

Running Kubernetes on small scale - lessons learned on operating "small scale" clusters (cmc2025)

Tue, 04 Feb 2025 14:50:00 +0100

This talk will walk through and provide examples and war stories on how kubernetes can be used not only in large scale environments but also in small and small-ish scale environments. Kubernetes is often considered as the tool to tackle large scale traffic, which is supposed to be used by a big team of engineers. This talk presents an opposite approach which shows how Kubernetes can be used in a very small team with limited resources. It will explore the benefits of running k8s in a small scale and also what pitfalls come with it. It will walk through the steps of provisioning self hosted Kubernetes cluster - kOps - challenges of keeping clusters upgraded without downtime. It will discuss issues encountered in daily operations, applications taking too long to start up anyone, and then how it was tuned with tools like Goldilocks. It will delve into CI/CD on Kubernetes (using Jenkins and ArgoCD). Keeping an eye on operational costs is essential in a small environment and this talk will discuss how kOps can utlize spot instances everywhere and benefits/challenges with spot instances. The idea of downscaling on schedule with py-kube-downscaler project, mutating pods with kyverno will be discussed. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/A3QEP7/

Creating Immutable Infrastructures with Kairos (cmc2025)

Tue, 04 Feb 2025 16:00:00 +0100

In this talk, we will introduce Kairos, an open-source project that aims to create immutable Operating Systems designed for Kubernetes. This includes a toolset that simplifies operations at the edge in a cloud-native way. Edge computing has become increasingly popular due to its ability to save costs by processing information closer to the data before sending filtered and computed information to a centralized application or data warehouse hosted in the cloud. Kubernetes is an ideal solution for edge computing because it natively builds components that facilitate the lifecycle management of modern edge applications. However, as we scale the number of edge locations, we face operational challenges, such as interacting with cluster configurations at scale without creating unique configurations for each location, ensuring security for remote clusters and applications, upgrading Kubernetes clusters without specific domain knowledge, and minimizing disruptions during maintenance windows for smaller form factor hardware. Kairos acts as an engine delivering immutable Kubernetes-enabled Linux OS from OCI conformant container images. It provides unique capabilities such as VPN peer-to-peer mesh, a distributed ledger to automate Kubernetes cluster bootstrapping and coordination, and zero-touch provisioning with a QR code scan. But more importantly, it uses a declarative model backed by Kubernetes CRDs. It manages distributed Kubernetes operations at the edge from a centralized Kubernetes cluster. In this presentation, we will explain the foundations and concepts of Kairos and demonstrate its capabilities. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/3BSKZB/

Progressive Infrastructure Delivery using Kargo and Argo CD (cmc2025)

Tue, 04 Feb 2025 16:25:00 +0100

Since the day Kargo was released, I have been exploring the idea of using it not only to deliver and promote applications but also to deliver infrastructure through its progressive delivery capabilities. Using Kubernetes-based tools like Crossplane or Pulumi, we can define infrastructure as code and deliver it progressively to our management clusters and then promote this infrastructure through different stages without the need for extra CD script magic. Let me show you how Kargo helps platform engineering streamline and automate the progressive rollout of infrastructure changes to all stages. This talk will cover the basics of Kargo and how to use it with Infrastructure as Code tools. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/DGYEV7/

Kubernetes from Scratch, The Hard Way (cmc2025)

Mon, 03 Feb 2025 14:00:00 +0100

To understand the inner workings of Kubernetes and to prepare for the K8s certification exams, I decided to create a K8s cluster from scratch, the hard way, on premises (“de meterkast”) on virtual machines all using Alpine Linux. This talk is how I tried to do it, how I succeeded, failed and added a CEPH cluster and ETCD cluster along the way. It includes a lot of technical details, but if there is one thing that you should learn during this talk, it’s not about K8s at all: Containers are not VMs! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/CR8UGL/

Closing & Infrastructure Review (wicmp10)

Sun, 02 Mar 2025 15:00:00 +0100

Daten, Fakten, Tschüss sagen. Wichtig: die Veranstaltung endet nicht direkt nach dem Closing; bleibt gerne noch ein paar Stunden. Der Zeitpunkt ist so, dass auch Leute mit weiterer Anreise nichts verpassen. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.zam.haus/wicmp-2025/talk/SUAARY/

Your Museumsbahn needs you! (wicmp10)

Fri, 28 Feb 2025 18:30:00 +0100

Du hast mit herumgespielt und suchst jetzt ein Problem um das mal in Echt auszuprobieren? Du willst nicht immer nur Prototypen basteln sondern auch mal was Produktiv einsetzen? Eventuell hat eine Museumsbahn (oder ein beliebiger anderer Verein) ja ein Problem, das zu deiner Lösung passt... Museumsbahnen (und andere Vereine auch) brauchen Hilfe bei der Digitalisierung, sei es Webseiten, sei es in der Werkstatt, oder im Betrieb. Von Administration bis zum Aufbau eines Funknetzes durch ein ganzes Tal wird Unterstützung gebraucht. Und nebenbei könnt ihr noch mit Zügen spielen. Im Vortrag stelle ich euch kurz die Dampfbahn Fränkische Schweiz in Ebermannstadt vor und gebe einige Beispiele wo wir Digitalisierung brauchen und teilweise schon haben. Offene Themen sind derzeit: Funkverbindung zu unseren Zügen, Fahrgastinformation, Streckenvermessung, Kommunikation im Verein... Kulturelle Unterschiede zwischen Chaos und Museumsbahn gibt es, aber es gibt auch viele Gemeinsamkeiten. Museumsbahnen bieten eine Möglichkeit, Dinge in der Realität auszuprobieren. Und für viele der Museumsbahnen haben die Chaos-Vereine schon Lösungen. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.zam.haus/wicmp-2025/talk/WQLLYD/

Cracking Passwords for Fun and Profit (wicmp10)

Sat, 01 Mar 2025 15:15:00 +0100

Warum ist es so wichtig gute Passwörter zu haben und was macht diese "Gut" oder "Schlecht"? Wie sehen "Gute" Passwörter aus und was ist zu beachten, wenn man Passwörter generiert? Was passiert eigentlich mit Passwörtern, wenn Sie mal abhanden kommen? Wie kann man seine Passwörter besser machen? Diese und weitere Fragen werden beantwortet und noch ein wenig darüber hinaus... Passwörter einen essentiellen Teil unserer Datensicherheit heut zu Tage da. Von der Festplattenverschlüßelung, bis zum E-Mail Konto, alles benötigt heute ein Passwort. Aber wieso sind einige Passwörter "schlechter" als andere und wie schaffe ich es "bessere" Passwörter zu haben, als Andere? Was passiert mit unseren Passwörtern, nachdem Sie abhanden gekommen sind? Welche Massnahmen kann ich ergreifen, um Menschen das Leben zu erschweren, die meine Passwörter gerne hätten um damit für mich negative Dinge zu tun? Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.zam.haus/wicmp-2025/talk/7BHAEM/

Continuous Delivery on multi-architecture Kubernetes clusters with ArgoCD (cmc2025)

Mon, 03 Feb 2025 16:50:00 +0100

Kubernetes is the most popular container orchestration platform out there, and for anyone who wants to do GitOps on Kubernetes, ArgoCD is a leading open source project in this space. This presentation will walk you through the management of multi-architecture applications for Kubernetes with ArgoCD. In this presentation, we will run through the process of managing container applications on hybrid arm64 and x86 Kubernetes clusters using ArgoCD for GitOps, including: * Why add arm64 compute nodes to your Kubernetes clusters? * Tooling to build and manage multi-arch containers * Continuous integration and delivery patterns * Workload placement and orchestration in Kubernetes Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/L7WJRN/

Turning Cloud Nightmares into Cost-Saving Dreams (cmc2025)

Tue, 04 Feb 2025 15:15:00 +0100

cloud costs can feel like a nightmare, creeping up on your Kubernetes infrastructure. But with the right tools, you can be the hero your budget deserves! In this talk, we’ll dive into OpenCost, an open-source solution that can help you track and optimize your cloud spending in real time.You’ll discover how OpenCost works, why it matters, and how you can use it to become the cost-saving champion of your cloud environment. Get ready to conquer Kubernetes costs and take back control of your cloud! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/PVN3XX/

InfoSec in SW-QS (wicmp10)

Sun, 02 Mar 2025 11:00:00 +0100

Ein kleiner Überblick, warum gerade für Software-Tester die Informationssicherheit so interessant sein sollte und welche Testfälle Beispielhaft in welchen Teststufen daraus abgeleitet werden können. In der heutigen Zeit, in der immer mehr Augenmerkt bei der Software-Entwicklung auf den Aspekt der Sicherheit gelegt werden muss, kommt meist das Testen gerade in diesem Bereich zu kurz. Dabei wäre es mit relativ geringen Aufwänden möglich die Sicherheit einer Anwendungen die Getestet wird (AUT) zu erhöhen, indem man Testfälle definiert und durchführt, welche gezielt auf die gängigsten Fehlerarten abzielen. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.zam.haus/wicmp-2025/talk/KVNYFR/

TI Nspire Taschenrechner Hacken (wicmp10)

Sun, 02 Mar 2025 14:00:00 +0100

Wofür braucht ein Taschenrechner 64MiB Arbeitsspeicher? Natürlich damit man ihn hacken und Linux drauf laufen lassen kann! Texas Instruments brachte 2007 die Nspire Taschenrechner Serie auf den Markt, die bis heute verbreitet in Schulen eingesetzt wird. Nachdem es geschafft wurde, nativen Code auszuführen, entwickelte sich eine Community, die Anwendungen, Spiele und auch Linux auf diese etwas andere HW Plattform portiert hat. In diesem Talk erfahrt ihr unter anderem: - Was gibt es für Taschenrechner? Was können die? - Geschichte von TI Nspire Jailbreaking (Ndless + andere Tools) - Was hat die Community entwickelt? Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.zam.haus/wicmp-2025/talk/GTETRL/

Embracing Karpenter to scale, optimize & upgrade Kubernetes (cmc2025)

Tue, 04 Feb 2025 14:00:00 +0100

Kubernetes is still quite a popular choice with wide community adoption to run containerised workloads in the Cloud, but it doesn’t come with batteries included. And some of that is intentional to allow freedom to make different choices or extend its functionality as needed. For example scaling compute nodes is one of the things which is not built-in. Making sure you’re doing it in most efficient and cost-efficient way is paramount. But it’s not just efficienty than separates Karpenter (an open-source node lifecycle management) from other options, but also how it can help you stay on top with compliance, patching and drift. The project has come a long way in the last couple of year and it was also adopted by CNCF/SIG Autoscaling making it alternative approach compared to de-facto Cluster Autoscaler project. I this talk I’ll show how to set it up, different use cases and demonstrate hands-on what to expect in the real world scenario. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/P7CTWQ/

GBA: Tales of Camelot (wicmp10)

Sat, 01 Mar 2025 16:30:00 +0100

Camelot Software Planning ist ein japanischer Spieleentwickler, der zu seiner Zeit beeindruckende Spiele für den Nintendo Game Boy Advance (GBA) entwickelt hat. Die Spielereihe Golden Sun, Mario Golf und Mario Tennis überzeugen dabei nicht nur mit ihrem Gameplay, sondern auch mit für ihre Zeit beeindruckender Grafik und Sound. Was ich euch in diesem Vortrag erzählen möchte ist, was diese Spiele technisch so unglaublich interessant macht. Wühlt man in Konfigurationsdateien von alten GBA Emulatoren wie gpSP, findet man zu Golden Sun Kommentare wie "Probably the most horrifically coded GBA game in existence". Setzt man sich selbst als Ziel, einen GBA Emulator zu schreiben, wird man zwangsweise über die Spiele von Camelot stoßen. Entweder, weil die Spiele überhaupt nicht laufen, oder weil man über den ein oder anderen Grafikfehler stößt. Ich selbst hab nie einen Emulator entwickelt. Deshalb möchte nehme ich euch mit auf eine Reise, wie ich ursprünglich auf die Spiele von Camelot aufmerksam geworden bin. Anfangen tue ich ein bisschen mit Sound und was die Audioqualität in Camelotspielen besser macht als in anderen. Danach steigen wir ein bisschen in die Architektur vom GBA ein. Schonmal ein bisschen Assembler gesehen zu haben, ist hier sicher hilfreich. Der GBA verwendet eine 32 Bit ARM7TDMI CPU, welche es vergleichen mit dem Vorgängermodell Game Boy durchaus in sich hat. Danach gehts dann weiter über in die Tricksereien, die sich die Entwickler erlaubt haben. Ohne zu viel vorweg zu nehmen: Es wird um selbstmodifizierenden Code gehen, nur halb definierte CPU Instruktionen und Coding Patterns, bei dem Securityleute Schnappatmung bekommen. Ach auch egal, der GBA hat ja eh kein Betriebsystem, aus dem man ausbrechen könnte :-) Ich werde leider nicht über alle spannenden Dinge dieser Spiele sprechen können, da es davon wirklich einfach zu viele gibt. Was ich jedoch hoffe ist, dass ihr dort einige spannende Dinge lernen könnt. Gut, es werden wahrscheinlich nicht die praktisch Nütztlichsten sein, aber definitiv Lustige! Die Zusammenfassung sollte größtenteils für den Vortrag selbst sprechen. Es wird stilistisch eher ein "fun facts" Talk. Bahnbrechende Entdeckungen gibt es bei einer 25 Jahre alten Konsole dann doch eher selten. Jedoch sind die Spiele von Camelot einzigartig interessant, da sie doch immer wieder zum Gesprächsthema in der GBA Community werden. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.zam.haus/wicmp-2025/talk/UF9T7E/

Simplifying Kubernetes Monitoring with Icinga (cmc2025)

Mon, 03 Feb 2025 16:00:00 +0100

Monitoring Kubernetes doesn’t have to be complicated. In this talk, I’ll introduce a new module we’re developing for Icinga, currently in beta, that simplifies Kubernetes monitoring in the same way Icinga has for traditional infrastructure. We’ll explore how this module makes it easier to monitor your clusters’ health and performance, allowing you to identify issues early. Whether you’re new to Kubernetes or managing large-scale clusters, this session will provide a preview of what’s to come and how it can streamline your monitoring processes. Feedback and insights are welcome as we refine the tool. Kubernetes offers powerful orchestration capabilities, but monitoring its dynamic environment can be tricky. In this session, we’ll dive into the development of a new module for Icinga that simplifies Kubernetes monitoring, making it more accessible for users who are familiar with traditional IT infrastructure setups. While the module is still in the beta phase, I’ll walk through its current features, show how it integrates with your existing Icinga setup, and discuss future enhancements. We’ll look at practical examples of monitoring critical aspects like node health, pod status, and resource utilization, all through Icinga’s familiar interface. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/AH78JZ/

SELinux für Newbies (wicmp10)

Sun, 02 Mar 2025 12:00:00 +0100

Security-hardening von Linuxsystemen mithilfe von SELinux für Anfänger:innen Was soll dieses SELinux sein? Und jetzt soll ich ein System damit administrieren?! Kann ich es nicht einfach ausschalten? Ist es überhaupt an? Was tut es? Dieser Talk zeigt euch anhand der Linuxdistribution openSUSE Tumbleweed die Basics was SELinux ist und wie ihr SELinux benutzt - Was ist Mandatory Access Control? - Was ist SELinux? Was kann es und was nicht? - Wie krieg ich SELinux auf mein System? - Wie administriere ich ein System mit SELinux? Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.zam.haus/wicmp-2025/talk/XG9RF9/

WICMP Opening (wicmp10)

Fri, 28 Feb 2025 17:00:00 +0100

Ein paar wichtige Überlebenshinweise zur WICMP10. Bedienungsanleitung zum Event. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.zam.haus/wicmp-2025/talk/PJU93E/

GSMA IoT eSIM (as opposed to consumer or M2M) (osmodevcall)

Wed, 16 Oct 2024 20:00:00 +0200

about this event: https://c3voc.de

TCH Rx error flags: FR, EFR, HR and BCI mystery (osmodevcall)

Wed, 21 Aug 2024 20:00:00 +0200

about this event: https://c3voc.de

Tandem-Free Operation (TFO) in GSM and 3G (osmodevcall)

Tue, 14 Jan 2025 20:00:00 +0100

about this event: https://c3voc.de

Classic PCM30 with channel-associated signaling (retronetcall)

Wed, 07 Aug 2024 20:00:00 +0200

about this event: https://c3voc.de

Nokia TCSM2, a bank of TRAUs with E1 interfaces: Part 2, the working state (retronetcall)

Wed, 02 Oct 2024 20:00:00 +0200

about this event: https://c3voc.de

Wat is data (hackerhotel2025)

Sat, 15 Feb 2025 22:30:00 +0100

Sociale constructen gebruikt in software context en alles wat daar entertainment mee maakt :) Een interactieve presentatie over waarom beperkingen op je dataset zetten onhandig is. Wat is data? Hoe lang duurt een dag? Hoe lang duurt een uur? Hoe lang is een maand? Wat is een jaartal? Wat is een geboortedatum? Wat is een naam? Hoe lang is een pincode? Waaruit bestaat een pincode? Hoe veilig is een private key? Wat zijn mooie ronde getallen? Hoe groot is een bit? Hoe groot is een byte? Waarom zou je sorteren op afmeting? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/UHZ3EJ/

Hacking the international travel system (hackerhotel2025)

Sun, 16 Feb 2025 11:00:00 +0100

It's one thing to plan a vacation trip to Cancun if you have a Dutch passport. It's entirely another to find a way to safety if you have an Egyptian passport. It's one thing to plan a vacation trip to Cancun if you have a Dutch passport. It's entirely another to find a way to safety if you have an Egyptian passport. We are experts in moving people to places that various governments would rather we didn't. The global immigration, customs, and travel system is an absolutely massive technological and human system designed to make sure things happen according to the government's agenda. We have our own agenda, and it all makes for great hacking potential. Insert clever engineering, some interesting math, more than a bit of skullduggery, and you end up with our routing system and what we humbly suggest is an epic hack for a life saving purpose. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/9ZGMCC/

A Communication’s Guide To The Hackerscene (hackerhotel2025)

Sun, 16 Feb 2025 14:30:00 +0100

Wat je als 𝘏𝘰𝘮𝘰 𝘊𝘺𝘣𝘦𝘳𝘯𝘦𝘵𝘪𝘤𝘶𝘴 altijd al hebt willen weten: hoe krijg je het voor elkaar dat de 𝘏𝘰𝘮𝘰 𝘖𝘳𝘥𝘪𝘯𝘢𝘳𝘪𝘶s (= niet hackende mens) ein-de-lijk het belang van jouw werk inziet en een beetje meewerkt. Strijk neer op je handdoek en leun achterover, want deze zondagmiddag (Don't Panic. Time is an illusion.) nemen Roxane Kortland en ik je mee hoe je als 𝘏𝘰𝘮𝘰 𝘊𝘺𝘣𝘦𝘳𝘯𝘦𝘵𝘪𝘤𝘶𝘴 effectief communiceert met de 𝘏𝘰𝘮𝘰 𝘖𝘳𝘥𝘪𝘯𝘢𝘳𝘪𝘶𝘴 (de niet hackende mens). Waarom? Communicatie is fantastisch, duh. En doelgerichte communicatie zorgt ervoor dat die 𝘏𝘰𝘮𝘰 𝘖𝘳𝘥𝘪𝘯𝘢𝘳𝘪𝘶s ein-de-lijk het belang van jouw werk inziet en een beetje meewerkt. Tip: neem een pen mee Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/Z38YHU/

Operation Check Mate: De Rechtszaak (hackerhotel2025)

Sun, 16 Feb 2025 14:30:00 +0100

Tijdens Hacker Hotel krijg je de unieke kans om deel te nemen aan Operation Check Mate, een meeslepende interactieve ervaring waarin je zelf in de schoenen van een rechercheur staat. Deze game is ontwikkeld door experts uit het veld en biedt een fascinerende inkijk in de wereld van strafrechtelijk onderzoek. In teams werk je aan een intrigerende zaak, waarbij alle aspecten van recherchewerk aan bod komen: 🔍 Recherchewerk: Analyseer de zaak, stel kritische vragen en bepaal de volgende stappen.  🗣️ Verhoor: Onderzoek hoe je informatie boven tafel krijgt tijdens een verhoor.  🏠 Doorzoeking: Plan en voer een doorzoeking uit. Wat mag wel en wat niet?  📱 Digitaal forensisch: Werk met echte digitale sporen en leer hoe je deze effectief kunt vorderen en analyseren.  📂 Dossieropbouw: Bouw een sterk strafdossier dat standhoudt in de rechtszaal. Deze game is méér dan een simulatie: je werkt met scenario’s die zijn ontwikkeld door experts uit het veld, waaronder forensisch onderzoekers, pentesters en professionals uit de strafrechtketen (denk aan politie, OM en rde Rechtspraak). Bovendien hebben creatieve geesten met een verknipte blik gezorgd voor onverwachte twists en uitdagingen. Maar hier komt de echte uitdaging: hackers zijn vaak kritisch over de politie. Toch, als je nu écht in de schoenen van een rechercheur staat, is het allemaal wel zo simpel als het lijkt? Kun je jouw technische en tactische skills combineren met juridische en ethische overwegingen? En hoe ga je om met druk, complexe gegevens en menselijke factoren? Het hoogtepunt? Op zondag mondt de zaak uit in een rechtszaak waarin jouw werk op de proef wordt gesteld. Durf jij het aan om jouw skills in de praktijk te brengen en een zaak tot een succesvol einde te brengen? Praktisch: 📅 Start: Vrijdag 14 februari 2025 om 13:37 ⚖️ Rechtszaak: Zondag 16 februari om 14:30 📍 Meld je aan via: sollicitatie@cyberom.nl 💡 Let op: Het aantal plaatsen is beperkt. Grijp deze kans, sluit je aan bij een rechercheteam en ontdek of jij het in je hebt om een zaak op te lossen in een wereld vol uitdagingen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/DMAMKD/

Meshtastic Fantastic (hackerhotel2025)

Sat, 15 Feb 2025 16:00:00 +0100

Meshtastic and LoRa, what is it and what can you do with it? LoRa, or Long Range radio, is a technology that operates on freely available frequency bands. Thanks to its unique way of transmitting and receiving signals, it’s not only remarkably resistant to noise but also capable of bridging impressive distances with very little power. One of the most exciting applications making waves is Meshtastic. But what exactly is Meshtastic, and how does the mysterious Hackerhotel bridge play into the picture? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/33SUDX/

Onaangekondigde Persconferentie (hackerhotel2025)

Sat, 15 Feb 2025 22:30:00 +0100

Onaangekondigde Persconferentie by Hackerhotel 2025 - Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: -

How do models like ChatGPT (LLM) work, can you hack them and run them offline? (hackerhotel2025)

Sun, 16 Feb 2025 11:00:00 +0100

What is an LLM? Can you run it yourself? Can you hack it? This session will explain high-level how an LLM works, how you can run this yourself (maybe for privacy reasons), Coding with LLMs and the hacking possibilities of these AI systems. Expect many demos and hopefully useful tips and tricks, so you can directly try all this stuff out yourself. Keyword: Supervised Learning and Reenforced Learning, Hugging Face, Quantization, Ollama, open-webui, Prompt Hacking, Tokens, Context Length I will explain basics of Machine Learning concepts How these ML concepts have created LLMs and how they somewhat work What is needed to run LLMs (Inference) and how you can run it your self how to test various LLMs prompt hacking using LLMs for coding Many live demos Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/GR78YQ/

Evolution and history of 33.333 years of Hardcore Music (hackerhotel2025)

Sat, 15 Feb 2025 21:30:00 +0100

The summary that's fun for both outsiders and insiders of this gem of a genre. Talk is in Dutch :) I wanted to do another talk, but Hacker Hotel decided to sell branded bomber jacks, which forced my hand as this conference then also needs the talk that goes along with those jackets. During the talk we'll listen to the evolution of a genre using samples and watch some video clips. The talk will provide background about the scene: from art to cheese. There will also be some tech about "how it's made", but mostly pointers. This talk is __**TOTALLY NOT INTENDED AS**__ a gateway into a permanent desire to listen to distorted and grainy audio. This talk mostly focusing on fun and interesting stuff, but due to the inherent nature of hardcore music there might (=guarantee) be references to sex, drugs, violence, profanity, recklessness and spooky scary skeletons in the first ten seconds. This talk is not for all ages and minds. So there you have it: licensing AND content AND audience problems galore in just one submission! This is finally giving the hacker hotel producers the missing challenge that they have been searching for all these years. PS1: If you like this talk in advance, please get in touch if you'd like to add or validate things: it's pretty hard it compress 33.333 years into an hour. PS2: Maybe we'll also do the accompanying dance afterwards, who knows, i'm not really good at it but i know some of you are. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/UPGVLX/

Don't Trust Us (hackerhotel2025)

Sat, 15 Feb 2025 17:00:00 +0100

In The Netherlands, everyone can trust the outcome of elections. That is our mission as The Dutch electoral council. But you don't have to trust us to be able to trust the outcome of elections. Anyone can verify the results and in this presentation, we aim to explain to you which security measures have been taken in the election process here in The Netherlands to make sure you can trust the outcome of our elections, without having to trust us. On average, we have one election each year. But not everyone knows how elections in our country are protected against security risks. We know we don't use voting machines anymore, but we do use software. We are currently working on new software. In this presentation you will learn: - Why the software we use doesn't have to be able to resist every type of "cyber" attack. - How voters can verify the results of elections either physically or from the comfort of their computer from home. - Why voting machines or internet voting are not currently a real alternative worth considering. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/DHTDEM/

How Thermonuclear fusion works, free energy without waste (hackerhotel2025)

Sun, 16 Feb 2025 14:30:00 +0100

Nuclear fusion is a clean safe energy. Fusing hydrogen nuclei to release an enormous amount of energy. This talk will cover: - A recap of the physics that makes fusion work - How to build a fusion reactor at home - How nuclei collide and what is needed to the coulomb barrier - Challenges in how to scale it up and make it generate more power - How far are we to have fusion energy on the power grid - Current technical challenges in fusion - How we can solve problems using machine learning Nuclear fusion promises a clean, safe, and abundant source of energy by fusing hydrogen isotopes to release more power than is put in. In this talk, we will start by clarifying the fundamental physics of fusion—how overcoming the Coulomb barrier allows two hydrogen nuclei to fuse. We will then explore the path to industrial-scale fusion power, focusing on international prototypes such as ITER, designed to demonstrate an energy output of Q=10 (50 MW in, 500 MW out). Alongside the incredible engineering achievements involved in building such large machines, we will discuss the complexities of controlling high-temperature plasmas, mitigating disruptions, and managing edge-localized modes (ELMs). Throughout the talk, we will highlight novel control and diagnostic strategies, including machine-learning-based models that can aid real-time plasma monitoring and regulation. Ultimately, we will address how these technologies, with deeper physical understanding, can bring us closer to fusion’s full potential as a reliable and low-waste energy source. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/YJZ9KL/

Helpful hackers preventing evil hackers from crashing the grid (hackerhotel2025)

Sun, 16 Feb 2025 15:30:00 +0100

The European electricity network has become a ‘smart grid.’ This offers many opportunities for sustainability but also makes our energy system more vulnerable to digital attacks. In a time of increasing threat of hybrid warfare, the government and the energy sector realize that we as a society must prepare for possible disruption of the energy system and do everything we can to prevent it. Various institutions test smart devices, set safety standards, and monitor compliance with these standards. However, parties such as our grid operators only have control over the energy grid equipment up to the front door. They are not allowed to look beyond the electricity meter, where most smart equipment is located. DIVD is allowed to do this and by identifying devices that can form a botnet, DIVD helps to make the smart grid more secure. DIVD has been conducting research into vulnerabilities in equipment of the energy system, such as charging stations, solar panel inverters, home batteries, and (Home) Energy Management Systems. Previous findings have led to several parliamentary questions and follow-up actions by authorities such as RDI, the Dutch Authority on Digital Infrastructure. With the CVD in the Energy Sector project, DIVD will set up a research and education line with the DIVD.academy in collaboration with the energy sector to reduce the digital vulnerability of our energy system. DIVD will also build a hardware lab to test devices and scenarios. You may join too and help to save the grid. In this talk, we will demonstrate how we could have generated outages using zero-days we found in solar converters and electric car chargers. But we also did it with just one user-password combination… The European electricity network has become a ‘smart grid’. Consumers are not only users but also producers of energy. More and more devices are connected, smart and online, so supply and demand can be more easily matched. This offers many opportunities for sustainability and possibilities for new players to enter the market. But also makes our energy system more vulnerable to digital attacks. In a time of increasing threat of hybrid warfare, the government and the energy sector realize that we as a society must prepare for possible disruption of the energy system and do everything we can to prevent it. In the Netherlands and Europe, various institutions test smart devices, set safety standards, and monitor compliance with these standards. However, parties such as our grid operators only have control over the energy grid equipment up to the front door. They are not allowed to look beyond the electricity meter, where most smart equipment is located. Being an independent non-profit research institute, DIVD is allowed to do this. By looking for devices that can form a botnet, DIVD helps to make the smart grid more secure. DIVD has been scanning the entire internet for vulnerabilities since 2020 and reporting them to the owners of systems. This may involve known vulnerabilities (Common Vulnerabilities and Exposures), new vulnerabilities (Zero-days), leaked credentials (username-password combinations) and online sources that are unintentionally accessible. DIVD is also a CVE Numbering Authority (CNA) and can publish new vulnerabilities. Our way of working is supported by the parties responsible for digital security in the Netherlands, such as NCTV, NCSC, AIVD, police, and many cyber security companies. In addition to these activities, DIVD also conducts research into vulnerabilities in the equipment of the energy system, such as charging stations, solar panel inverters, home batteries, and (Home) Energy Management Systems. Previous findings have led to several parliamentary questions and follow-up actions by authorities such as RDI, the Dutch Authority on Digital Infrastructure. With the CVD in the Energy Sector project, DIVD will set up a research and education line with the DIVD.academy in collaboration with the energy sector to jointly reduce the digital vulnerability of our energy system. In 2025, we will: - Incorporate all energy-related research by DIVD into a research line under a Research Lead Energy. - Establish structural partnerships with the energy sector to jointly resolve vulnerabilities. - Build our own hardware lab where we will test peripheral equipment for security and collaborate with other hardware labs. - Set up our CNA to receive, process, and publish CVEs of digital solutions used in the energy system. Share research findings with authorities to support their enforcement. DIVD.academy familiarize students with basic knowledge of energy systems and energy equipment and involve them in practice-oriented research. - Develop teaching materials for the installation sector and training courses to increase awareness of vulnerabilities in the energy system. - Share our knowledge via hacker events and security conferences. In this talk, we will demonstrate how we could have generated outages using zero-days we found in solar converters and electric car chargers. But we also did it with just one user-password combination… Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/TFJCBD/

The "O" in OT (hackerhotel2025)

Sun, 16 Feb 2025 16:15:00 +0100

Operational Technology (OT) is vital for industrial processes, yet strategic understanding of OT’s security complexity is often lacking at the executive level. This presentation emphasizes the need for organizations to approach OT as a strategic priority, highlighting its unique challenges—such as legacy systems and non-negotiable uptime—amid rising cyber threats targeting critical infrastructure. By fostering executive insight into OT management, organizations can improve resilience, enhance security, and gain a competitive edge, ultimately positioning OT as an asset in operational stability and corporate strategy. This presentation, titled "The 'O' in OT," explores the importance of executive-level understanding of Operational Technology (OT) within strategic frameworks. It highlights the distinct challenges OT faces compared to IT, including legacy infrastructure, strict uptime requirements, and rising cyber threats. Participants will gain insight into how a strategic focus on OT security and management enhances organizational resilience and competitive strength. By bridging the gap between OT’s operational demands and executive decision-making, this session outlines steps for integrating OT into a cohesive, secure, and future-ready corporate strategy. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/7BDKGK/

Van de GHP tot why2025: De geschiedenis en toekomst van de nederlandse hackercamps (hackerhotel2025)

Sat, 15 Feb 2025 16:00:00 +0100

De geschiedenis en toekomst van de nederlandse hackercamps Kom mee door deze geschiedenis les ter voorbereiding van het jubuleum kamp, WHY2025! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/NCKS3X/

A criminal, and victim view of phishing and phishing panels, live of stage. (hackerhotel2025)

Sun, 16 Feb 2025 11:00:00 +0100

The Dutch Tax and Customs Administration deals with criminals claiming to be representatives of the organization and contacting the public with phishing emails daily. In this presentation, we will take you into the world of the criminals sending phishing emails and the recipients of the phishing mail. A live phishing demo is included. This presentation will show several examples of daily phishing that the Dutch Tax and Customs Administration deals with. The Dutch Tax and Customs Administration receives over 60,000 reports of phishing every year. The second part of the presentation includes a live demo of a phishing panel. Using a phishing panel ensures the phishing victim pays for purchasing a 75" OLED TV without knowing it. The TV is delivered to the cybercriminal's address. All of this is live on stage. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/KT8ZGY/

How to become your own ISP (hackerhotel2025)

Sun, 16 Feb 2025 15:30:00 +0100

This talk will take you along with a deep dive on how the internet works at its core and how you can participate yourself. You'll learn all about BGP, AS- numbers, IP-prefixes and more. Ever wanted to become sovereign on the internet? Want to know what its like to run an ISP? Are you a sysadmin that wants to learn more about networking? Then you're at the right place. This talk will take you along with a deep dive on how the internet works at its core and how you can participate yourself. You'll learn all about BGP, AS- numbers, IP-prefixes and what you need to do if you want to participate. You will walk away with practical knowledge on how you can get started. We'll also take a short tour of my own network, how I set it up and what I use it for. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/V7QUX3/

Basisbeveiliging / Internet Cleanup Foundation - State of the map 2024 (hackerhotel2025)

Sun, 16 Feb 2025 16:30:00 +0100

The internet cleanup foundation publishes the baseline security of 150.000 domains of 10.000 important organizations in the Netherlands. This talk shows what we've done in 2024 and highlights some of the nice things to come in 2025 maybe spoiling one or two things :) - It had a ton of impact and large banks, internet providers and all kinds of other institutions cleaned up their baseline security issues. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/MDKVVA/

Frank talks AI, keynote style (hackerhotel2025)

Sat, 15 Feb 2025 20:30:00 +0100

Frank talks about AI, why it all of a sudden is everywhere and what it means. The keynotes of the likes of Microsoft, Google and Apple can all be summarized in 10 words: “A.I., A.I., A.I., Large Language Model, A.I., A.I., GPT, A.I. …“, so no doubt artificial intelligence holds a promise for the future. But what promise? Will A.I. save use or doom us? Or is it too soon to tell? With the invention of the car, the car accident, vehicle man slaughter and the getaway car were also invented, as well as the police car and motorized ambulances. How does this apply to artificial intelligence? What is the current state of A.I., what does it mean to our perception of the truth, and can it help us make the world more secure? How do classical security measures apply to the A.I. world, where do they fall short, and can we expect new or improved measures with the help of A.I.? Spoiler: yes, they do, and yes, we can. In this talk, Frank will look at the A.I. wave from his unique and down to earth perspective. And hopefully you will walk away with a better understanding of AI in the context of (cyber) security. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/U7W3YQ/

Abacus - about the new software for the Dutch Elections (hackerhotel2025)

Sat, 15 Feb 2025 11:00:00 +0100

The Election Council is working on Abacus, the tabulation software for the elections. Come to this workshop to try your hands on the software in a production-like setting and learn more about the choices and concepts behind it. The Election Council is working on Abacus, the tabulation software for the elections. This workshop will show you how it works, in a production style setting involving test data. After all the counting we take a tour through the GitHub repo (https://github.com/kiesraad/abacus), explain the architecture and choices behind the project so far. Come to this workshop if you are interested in the Dutch Elections and want to understand the actual process, learn about the software development that is being done and ask everything you always wanted to know. Do visit the presentation by Fleur van Leusden, our CISO. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/7YBMR3/

Build your own parametric speaker (hackerhotel2025)

Sun, 16 Feb 2025 13:00:00 +0100

In this talk I will show you the theory behind parametric arrays what is involved in making your own low-cost directional speaker Parametric speakers are extremely directional speakers that produce audible sound by modulating an audible signal on top of an ultrasonic carrier. Commercial options have existed for a long time but are quite expensive for hobbyists. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/9V7W9G/

Tanmatsu/WHY2025 badge PCB design (hackerhotel2025)

Sat, 15 Feb 2025 16:00:00 +0100

This talk delves into the technical aspects of the Tanmatsu hardware design, the latest creation by the badge team, set to be released alongside the availability of ESP32-P4 chips. It will also form the foundation for the WHY2025 badge. Topics include an exploration of the PCB's high-level design, cost considerations for producing 4000 units, challenges and insights from working with pre-release chip prototypes, and a discussion on the practical aspects of MIPI DSI/SCI interfaces, including LVDS and impedance. The session will share both the hurdles and triumphs encountered during the design process. A talk about the technical aspects of the hardware design of the latest hardware design created by badge team. The Tanmatsu hardware design is finished, and will be available for the community as soon as the ESP32-P4 chips are available. The design will also be the bases for the WHY2025 badge. In this talk we'll take a deep dive into developing a badge project in a neurodiverse community: - PCB high level design - Cost considerations when designing a 4000x PCB - Some horror and beauty on the design path - MIPI DSI/SCI (LVDS, multi layer, impedance and clearance) - Mass production considerations Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/G79YRC/

My stairs use 6 IP Addresses and run JavaScript (hackerhotel2025)

Sat, 15 Feb 2025 17:00:00 +0100

I spent the past 6 years restoring and upgrading the 2 flights of stairs in my almost 100 years old house in my off time, taking into them into the 21st century while I was at it. The result is a standalone extensible system that supports an unlimited number of sensors and can light up to 256 cheap LED strips on a setup that can run completely off of a simple USB power bank for days and costs under about €40 in parts. Come watch this talk if you want to hear me nerd out for an hour and go deep into the challenges and lessons learned, new skills unlocked and how I wrote a ridiculous Timeline based custom Animation Engine in JavaScript that can render it's output as either PWM or CSS animations to run the whole thing and make it do what I envisioned. This talk goes from 3D design and printing to Arduino/Esp32 IOT hardware, software and programming, woodworking and heavy construction to how I finally used Claude to take it to the final iteration and a public release. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/YNQQN7/

Hackerhotel Badge talk (hackerhotel2025)

Sun, 16 Feb 2025 16:00:00 +0100

Our workflow, challenges and other fun things From the lands where badges and brooches grow on trees, a mythical folk of badge herders live peacefully and in harmony with nature and technology. They love providing humans with their seasonal harvest at Hacker events such as Hacker Hotel. We expect them to show up to tell you all about this seasons yield badges and what it took to deliver these in the hands of the Hacker Hotel people. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/CQRYEL/

Closing Hackerhotel 2025 (hackerhotel2025)

Sun, 16 Feb 2025 17:15:00 +0100

Closing talk of Hackerhotel 2025 with NFIR CTF award ceremony. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/YBZVUM/

What's that CubeSat Satellite stuff anyhow? (hackerhotel2025)

Sat, 15 Feb 2025 15:00:00 +0100

CubeSats are small satellites comprised of 10x10x10cm "units" and range in size from very small 1U or smaller PocketQubes to 24U beasts. What can be done with such a platform and why? CubeSats are small satellites comprised of 10x10x10cm "units" and range in size from very small 1U or smaller PocketQubes to 24U beasts. What can be done with such a platform and why? I will go in to a brief history as well as some applications with examples. The goal is to keep this talk TLP:Clear Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/QTVJFY/

OT Cyberchallenges 2 (hackerhotel2025)

Fri, 14 Feb 2025 16:00:00 +0100

A year later, we are back at the wonderful company Acme where nice people make beautiful things. This time we will follow up on that and tell you how the company can improve their own maturity and security levels as explained in the standard. A year later, we are back at the wonderful company Acme where nice people make beautiful things. How did they fare, and what steps can they take now to protect their beautiful company from unwanted incidents. Last time we explained the challenges the company faces and how they could start their OT cybersecurity journey. This time we will follow up on that and tell you how the company can improve their own maturity and security levels as explained in the standard. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/J33HDT/

Hacking with screenreaders as tool or utility (hackerhotel2025)

Sat, 15 Feb 2025 10:00:00 +0100

How to use screenreaders to scan the operatingsystem, building blocks of an application or web-enviroment. How to use screenreaders to scan the operatingsystem, building blocks of an application or web-enviroment. Other topics are: * Reading and analysing logging * Capture a scrolling text * Query of classes etc Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/AXL9WT/

How to do vulnerability disclosure in Japan (hackerhotel2025)

Sat, 15 Feb 2025 14:30:00 +0100

With the support of the Dutch embassy in Tokyo, I have researched Coordinated Vulnerability Disclosure (CVD) in Japan for DIVD. Japan’s governmental policy on CVD dates back to 2004. Although Japanese criminal law and jurisprudence do not allow for large-scale intrusive vulnerability research and disclosure, Japanese institutes help citizens disclose zero days to vendors and report vulnerabilities to website operators. Also, the Nation Institute for Information Communication Technology scans and notifies vulnerable IoT, and the Japanese government has adjusted laws to allow this. With the support of the Dutch embassy in Tokyo, I have researched Coordinated Vulnerability Disclosure (CVD) in Japan for the Dutch Institute for Vulnerability Disclosure. Key findings: Japan’s governmental policy on CVD dates back to 2004. The Japanese Computer Emergency Response Team Coordination Center (JPCERT/CC) is an independent institute founded in 1996 and currently funded by METI. The center handles incidents, analyses and shares information on online threats, monitors internet traffic, and has published Vulnerability Notes with Advisories since 2004. Japanese criminal law and jurisprudence do not allow for large-scale intrusive vulnerability research and disclosure as Dutch case law does. In Japan, doing CVD on a broader scope and without informed consent is perceived as very rare. Security researchers generally fear prosecution as they may violate cyber security and privacy laws. A common statement at hacker events was: “I only report if they provide a bug bounty.” Japanese institutes help citizens disclose zero days to vendors and report vulnerabilities to website operators. Organizations like IPA and JPCERT/CC provide structured processes for reporting vulnerabilities, focusing primarily on zero days affecting software or websites widely used in Japan. These reports are forwarded to vendors and operators, though researchers must navigate strict conditions. The Nation institute for Information Communition Technology scans and notifies vulnerable IoT, and the Japanese government has adjusted laws to allow this. The NOTICE project aims to prevent cyber-attacks by scanning IoT devices on weak passwords by attempting to log in. These activities run parallel to the Handling Regulations for Information Related to Vulnerabilities in Software Products and clearly violate cyber security laws. In order to proceed on this endeavor, the Cabinet overruled the Act on Prohibition of Unauthorized Computer Access by a special law, which provided NICT the mandate. To my knowledge, this is unique in the world. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/GEVFSR/

I love historical computing. to the moon and back (hackerhotel2025)

Sat, 15 Feb 2025 11:00:00 +0100

This talk describes the computer and its interfaces the DSKY (DiSplay-KeYboard) on board the Apollo missions that got us to the moon and back. I will point out several modern sources of information about this historical project and how it entertains lots of people to this day, including several emulation projects. Back in the period 1962 to 1969 the US went on a mission to get people on the moon. This talk describes the computer and its interfaces the DSKY (DiSplay-KeYboard) that were used during that time on board the Apollo missions that got us to the moon and back. I will point out several modern sources of information about this historical project and how it entertains lots of people to this day, including several emulation projects. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/B7GZJY/

Ask me anything, with Huib Modderkolk (hackerhotel2025)

Fri, 14 Feb 2025 21:30:00 +0100

This you really want to know. Huib has been responsibly disclosing the Secret Services, criminals and hackers. Now we turn it around: ask Huib anything. Chris van ‘t Hof will guide the conversation. Books: 2024 “Dit wil je echt niet weten”, 2019 “Het is oorlog en niemand die het ziet”, “There's a War Going On But No One Can See It” - Its war and everyone can see it now. “Der digitale Weltkrieg, den keiner bemerkt” Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/NBZPQZ/

AiTM: Lessons Learned (hackerhotel2025)

Sat, 15 Feb 2025 11:00:00 +0100

"AiTM: Lessons Learned" dives into the evolving threat of AiTM attacks. Our presentation highlights the transition from basic phishing tactics to sophisticated methods that compromise organizational security. The presentation outlines the journey from oldschool phishing attacks, to phishing framework like UADMIN, and the introduction of tools like Evilginx. And now the SaaS providers allowing anyone to buy access to an AiTM platform. We give an insight into a popular AiTM SaaS platform and the revenue stream hosting such software creates. The session ends by outlining common techniques to prevent these types of attacks. Most organizations use M365 and experience attacks using AITM to bypass MFA. At the same time SaaS providers are building AITM services that allow targeteted attacks allowing for supply chain attacks (AITM targeted against admin sites for: pypi, npmjs and rubygems). At the same time used for very specific scams for example against booking.com. Attackers use the booking.com hotel login to extract creditcard information for upcomming hotel guests. There's been an uprising in the amount of AITM based attacks. BEC fraud operators use it as MFA is more and more common. But the apearance of SaaS providers in the AITM space make these attacks easier to perform and therefore making them more common. Booking.com has been a popular target allowing attackers to use the hotel operator login to phish creditcards by sending upcomming guests reminders to pay. The fact that these reminders are sent via the booking.com app makes them super trustworthy. At the same time environments such as M365/EntraID are popular targets for other operators. This past year we've been trying to prevent and detect these types of attacks. The goal of the presentation is make attendees aware of the risks, the different operators and types of attacks happening today. outline: 1) What is AiTM/BITB 1.1) Phishing history 1.2) Old school phish 1.3) Introduction of commong framework (UADMIN, opwelk, haiku) 1.4) Evilginx 1.5) AiTM SaaS providers 2) How to detect phishes 2.1) The concept 2.2) What we have built - didsomeoneclone.me 2.3) Then came the Microsoft idea 2.4) Gaining insight into the amount of phishes 3) Fingerprint tool 3.1) The goal 3.2) How does it work? 3.3) Adding certificate transparency to preempt attacks 3.4) Outcome and statistics 4) What we see 4.1) How often does it actually occur? 4.2) Different actors. Example.com. Evilginx Rick Roll, MSPHP 4.3) Microsoft sandbox also visits the URLs and they come in 4.4) How quickly is Evilginx taken down 5) actors 5.1) various offers 5.2) actor revenue 6) Future work 6.1) automatically finding victims in our EDR tooling 6.2) Attempts at improvement - CSS exfil. 6.3) Roadmap Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/WYLJK3/

Don’t judge a vulnerability by its CVSS score (hackerhotel2025)

Sat, 15 Feb 2025 14:30:00 +0100

The total number of vulnerabilities continues to rise. If we had to rely on just CVSS for prioritizing those vulnerabilities, we have an enormous hard time to remediate all of them. In this talk, we’ll explore the critical gaps in CVSS-based prioritization and discuss why factors like exploitability, asset criticality, and real-time threat intelligence are way more important. Expect real-world examples, a touch of humor, and actionable insights to help you move beyond the CVSS score and toward a smarter, risk-based approach to vulnerability management. Because let’s face it: a CVSS 7 can be way more critical to your organization then a CVSS 9! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/DHNUWQ/

De validatiecrisis (hackerhotel2025)

Fri, 14 Feb 2025 22:30:00 +0100

De opkomst van geavanceerde technologie en kunstmatige intelligentie heeft ongekende mogelijkheden gecreëerd, maar ook een sluimerend probleem blootgelegd: de validatiecrisis. In deze lezing neemt Brenno de Winter, gerenommeerd cybersecurity-expert en auteur van De Validatiecrisis, u mee in de wereld van misleidende aannames, ongeteste technologie, en de gevaren van een gebrek aan kritische evaluatie. Hij toont aan hoe deze crisis niet alleen technologie, maar ook maatschappelijke besluitvorming ondermijnt. Een belangrijk deel van de lezing is gewijd aan de MIAUW-methodiek (Methodiek voor Informatiebeveiligingsonderzoek met Auditwaarde). Dit gestructureerde framework biedt een oplossing voor de validatiecrisis in informatiebeveiliging door de nadruk te leggen op reproduceerbaarheid, transparantie en auditwaarde. MIAUW stelt organisaties in staat om kwetsbaarheden niet alleen te identificeren, maar ook te documenteren op een manier die zowel controleerbaar als bruikbaar is voor bredere compliance- en risicomanagementstrategieën. Tijdens de lezing bespreekt Brenno de Winter praktische voorbeelden, biedt hij concrete handvatten om kritisch denken te bevorderen, en illustreert hij hoe MIAUW organisaties kan helpen de kloof tussen complexe technologie en verantwoorde toepassing te overbruggen. Technologie en kunstmatige intelligentie hebben onze samenleving fundamenteel veranderd, maar brengen ook een diepe uitdaging met zich mee: de validatiecrisis. In deze lezing onthult Brenno de Winter, cybersecurity-expert en auteur van De Validatiecrisis, hoe een gebrek aan kritische controle en grondige evaluatie van data en technologieën leidt tot risico’s op het gebied van veiligheid, ethiek en besluitvorming. De validatiecrisis is een fenomeen dat zich niet alleen in de echte wereld afspeelt, maar zelfs in fictieve experimenten fascinerende en leerzame inzichten biedt. De Validatiecrisis: Wat Gaat Er Mis? De validatiecrisis is een fundamenteel probleem waarbij aannames en technologieën zonder grondige controle worden geaccepteerd. Dit leidt tot mislukte projecten, gebrekkige AI-systemen en besluitvorming gebaseerd op onjuiste gegevens. De Winter illustreert dit met praktijkvoorbeelden, waaronder AI-modellen die falen in het herkennen van nuance, en situaties waarin vertrouwen in onbewezen technologie desastreuze gevolgen heeft. Hij legt de nadruk op het belang van kritische evaluatie en hoe een gebrek daaraan leidt tot blinde vlekken in onze technologische ontwikkeling. Een Lessenpakket van de Maan Een belangrijk onderdeel van de lezing zijn de fictieve experimenten op de maan, waarin menselijke en technologische interacties werden onderzocht in een context waar katten een sleutelrol spelen. In deze hypothetische samenleving, waar katten niet alleen huisdieren maar politieke actoren zijn, faalden AI-systemen in het begrijpen van de complexe hiërarchieën en sociale dynamiek. Dit leidde tot een fictieve oorlog met de planeet Bananie, die volledig had kunnen worden voorkomen als technologie op een grondigere manier gevalideerd was. De experimenten fungeren als een metafoor voor de gevaren van slecht gevalideerde technologieën. Ze tonen hoe kleine fouten in de basis van systemen kunnen leiden tot grote gevolgen, of het nu gaat om ethische kwesties, veiligheid of zelfs internationale relaties. Dit fictieve voorbeeld onderstreept de bredere boodschap: technologie moet niet blind worden vertrouwd, maar moet voortdurend worden getest en gecontroleerd. De MIAUW-methodiek: Een Gestructureerde Aanpak Als antwoord op de validatiecrisis presenteert De Winter de MIAUW-methodiek (Methodiek voor Informatiebeveiligingsonderzoek met Auditwaarde). Dit framework biedt een gestructureerde aanpak voor penetratietesten die niet alleen technische kwetsbaarheden identificeert, maar deze ook documenteert op een manier die reproduceerbaar en controleerbaar is. MIAUW stelt organisaties in staat om niet alleen inzicht te krijgen in risico’s, maar ook om deze te verbinden aan bredere compliance- en risicomanagementstrategieën. Met concrete voorbeelden laat De Winter zien hoe MIAUW organisaties helpt om niet alleen veiliger te worden, maar ook om transparant en verantwoord om te gaan met hun technologie. Door reproduceerbare resultaten en sterke auditwaarde mogelijk te maken, biedt MIAUW een praktische oplossing voor de uitdagingen van moderne technologie. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/7VXSPZ/

Nerding out over silly machines (hackerhotel2025)

Fri, 14 Feb 2025 17:00:00 +0100

You've maybee seen the raking robot that got a CEH (Certified Estetisch Harker) certificate, the Telex linked to Twitter/Telegram or the ASCII foto booth. They are all made by me. If this talk gets accepted I will do a deep dive on these three contraptions and what I learned building them. Beside Schuberg Philis, DIVD, attending the farm and keeping my bees I als build machines. It is an interesting process and I want to share it with you. Machiens I will be talking about: * The (worlds?) 1st 3d color printer from TNO * The raking robot * AI/Twitter/Telegram/Slack connected Telex * ASCII photo booth Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/XSSZ9J/

Crypto 101 (hackerhotel2025)

Fri, 14 Feb 2025 16:00:00 +0100

A short introduction to cryptography, its past, present and future for the not yet fully initiated. Many talks mentioned cryptography somewhere along the presentation and everybody just nods. But how many people actually know the insights of cryptography? Why some things work and some things don't? During this talk I will explain the difference between encoding and encryption, the most common uses of cryptography, the difference between synchronous and asynchronous encryption, hashes. I will include some history and some future developments like quantum and why wel call cryptocoin cryptocoin. In a slow pace, scratching the surface for uninitiated, but the scratches will go deep enough for more initiated to get some more background. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/KPBZKG/

Aid to Ukraine - with Roman from Kharkiv (hackerhotel2025)

Sat, 15 Feb 2025 15:00:00 +0100

Since the start of the war, our community has risen to help friends in Ukraine in many different ways. Roman Kniaziev is coming over from Kharkiv to explain how he works with all the volunteers of ETOC to support his country. Even though the news can be overwhelming, everyone can help. This talk shows you how. The IT community in Kharkiv is doing their best to help their city and country to counter the effects of the invasion and war. Roman Kniaziev comes over from Kharkiv to explain how, together with all the volunteers of ETOC he tries to help out. We are helping him, with all kinds of humanitarian support through our foundation Aid to Ukraine (https://aidtoukraine.nl). The war has shown us there is something to do for everyone, that it is useful and well received. The war still rages and help is always welcome. This talk will show you what has happened last year and how we all can help Ukraine during this horrible time. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/QD8VRX/

Dutch Fun! (damentals) (hackerhotel2025)

Sat, 15 Feb 2025 14:30:00 +0100

This workshop is especially for all attendants who are not Dutch natives. In an exact and logical manner I will guide you through the syntax and semantics of the Dutch language, from sounds (the famous 'ggh' and vowel inventory) to gender of nouns and word order. There will be simple illustrations to help you get a grip on the language and bluff your way into pub talk with locals. Please bring pen and paper for the old school school experience! I am a Dutch native teacher Dutch as a second language, with experience teaching expats. My background in general linguistics and artificial intelligence as well as participating in the hackers' community enables me to present a language workshop tailored for hackers. In fact, as a teacher for a a general audience I must refrain myself from being too "logical, analytical or just plain geeky" to keep all students happy. In this workshop I will focus on: * providing structure of the Dutch language, similar to how you would explain a programming language, showing the regularities that are present * giving small examples of words as well as expressions and grammatical rules to show a more specific idea of Dutch * interaction: exercises, individually and in groups, puzzle-like, but also speaking exercises (this is always a tough one, so we'll try) * concrete focus will be on gender of nouns: the article "the" in English can be "de" or "het" in Dutch, depending on the gender. Some grammar (demonstratives, adjectives) depends on this gender, following small yet counterintuitive rules * have fun: I will present weird exceptions, false friends and we will also listen to and analyze a Dutch song Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/NZZUQV/

Android Auto (Flitsmeister) (hackerhotel2025)

Fri, 14 Feb 2025 17:00:00 +0100

How to make an Android App for Android Auto, a demo of the MapLibre sample app, and stories about Flitsmeister. FrankkieNL has worked on the Android Auto (and Automotive) version of the Flitsmeister app. This navigation app uses MapLibre to render a map on the Car screen. During this talk, we will discuss how this works and how you can create your own Android Auto-based app. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/ZQ3RYV/

Getting a feel for lockpicking (opening up the world of locksport for the visual impaired) (hackerhotel2025)

Fri, 14 Feb 2025 16:00:00 +0100

Lockpicking is a sport where you open locks without force and mostly without keys. While doing this activity nothing much can be seen of the actual process. In stead you need to rely on sound and feel (tactile feedback from the lock). Therefor a lot of people (including us) think a visual impaired person could be rather good at this (as they are more trained to use the "other" senses) The firsts steps into locksport however are VERY visually heavy (video's, pictures, diagrams) which makes it rather hard for a visual impaired person to get started. We believe we fixed that now. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/WBSRED/

Workshop loosing weight (hackerhotel2025)

Sat, 15 Feb 2025 10:00:00 +0100

I have been struggling with my weight for over 25 years. After reading the book : The Obesity Code" everything clicked. Since I have lost 13 kg within 6 months. The great thing about this is that it is effortless. In this workshop we start with the theory of gaining and loosing weight. After that we are going to look at recipes for individual participants. What works, what doesn't. In the end you will know what should work for you, and how you can loose weight effortlessly. I have been struggling with my weight for over 25 years. After reading the book : The Obesity Code" everything clicked. Since I have lost 13 lg within 6 months. The great thing about this is that it is effortless. In this workshop we start with the theory of gaining and loosing weight. After that we are going to look at recipes for individual participants. What works, what doesn't. In the end you will know what should work for you, and how you can loose weight effortlessly. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/HPGGPC/

Openingstalk Hackerhotel 2025 (hackerhotel2025)

Fri, 14 Feb 2025 20:30:00 +0100

Openingstalk by Dimitri opening Hackerhotel 2025 In this openingstalk i will open Hackerhotel 2025 and thank all people that helped me and explain about how this Hackerhotel 2025 organisation went. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/EMVMAX/

Automating incident response: scalable & fast, within minutes (hackerhotel2025)

Fri, 14 Feb 2025 17:00:00 +0100

In today's rapidly evolving digital landscape, the increasing frequency and the scale of security incidents pose significant challenges for incident response teams. The traditional approach, rooted in digital forensics, is no longer sufficient nor is it efficient enough. It's time for a shift towards an automated incident response strategy that combines the investigative prowess of a digital detective with a DevOps mindset. In this talk, we will present how the incident response process of acquiring data, processing data, and analyzing information can be automated. Based on how we have built our incident response lab using open-source software packages developed by Microsoft (AVML), Google (Timesketch, WinPmem), Rapid7 (Velociraptor), Fox-IT (Dissect), Elastic, KROLL (KAPE) and HashiCorp (Terraform, Vault). We will guide you from using tools manually to using these tools automatically and magically. Well not really magically, but we will emphasise the application of a DevOps mindset to the process that most incident responders execute on a daily basis including ourselves, combined with examples that can be put into practice. In today's rapidly evolving digital landscape, the increasing frequency and the scale of security incidents pose significant challenges for incident response teams. The traditional approach, rooted in the perspective of digital forensics, is no longer sufficient. It's time for a shift towards an automated incident response strategy that combines the investigative prowess of a digital detective with a DevOps mindset. In this talk, we will present how the incident response process of acquiring data, processing data, and analyzing information can be automated. We will guide you from using tools manually to using these tools automatically and magically . Well not really magically, but we will emphasize the application of a DevOps mindset to the process that most incident responders execute on a daily basis including ourselves, combined with examples that can be put into practice. An example of this is that the human knowledge of an incident responder should feed into the repeatable methods and should not stay in the mind of the best incident responder in the team. By using feedback loops, the knowledge that is gained during a case can be transformed into methods that can be re-used during new cases. In setting up our incident response service, we had the benefit that we could start from scratch, without any legacy, in a cloud native world and with a significant number of lessons learned in the past, we have built an innovative incident response lab using open-source software packages developed by Microsoft, Google, Rapid7, Fox-IT, Elastic, KROLL and HashiCorp. By using Infrastructure as Code (IaC) we can automatically provision the lab on the Google Cloud Platform, acquire and process data and perform analysis using various methods within two hours, without the intervention of an incident responder. We still need humans, but we should focus on doing the creative and research part of an incident response case. Besides that, there is no silver bullet, humans cannot fully trust the automated analysis. This is where the investigative prowess of a digital detective comes into play, ensuring the validation of results and the reproducibility of findings throughout the entire incident response process, from data acquisition to analysis of information. References https://hackernoon.com/the-devops-mindset-a-step-by-step-plan-to-implement-devops-s03p35rr https://nluug.nl/bestanden/presentaties/2022-11-29-francisco-dominguez-en-zawadi-done-automating-incident-response-should-be-the-default.pdf https://zawadidone.nl/automating-dfir-using-cloud-services/ https://www.huntandhackett.com/blog/scalable-forensics-timeline-analysis-using-dissect-and-timesketch Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.hackerhotel.nl/2025/talk/ARDG3T/

Einführung in Embeddded Systeme. Von Maschinencode bis Rust (ulm)

Tue, 11 Feb 2025 20:00:00 +0100

Motivationsvortrag über verschiedene Microcontroller und Abstraktionsfähigkeit durch höhere Prorgammiersprachen Assembler->C->Rust, Arduino, STM32, ESP32 https://www.ulm.ccc.de/ccc/chaosseminar/2025_02_embedded-software-entwicklung/ https://wieerwill.dev/ about this event: https://www.ulm.ccc.de/ccc/chaosseminar/2025_02_embedded-software-entwicklung/

DG111: Open Source Political Intelligence - What is it and why does it matter? (datengarten)

Wed, 05 Feb 2025 19:00:00 +0100

🇬🇧 English Version Open Politics – Collaborative Tools for Open Political Data Politics is complex, and making sense of it requires access to good information. The Open Politics Project is working on and operationalising open-source tools that help analyse political structures, decisions, and developments—so that journalists, researchers, activists, and engaged citizens can better understand and interpret them. Our goal is to make political data more accessible and useful. We bring together existing methods from data analysis, political science, and AI, while also experimenting with new approaches—always in the open, documented, and improved through collaboration. From user-friendly visualisations to structured databases, we explore ways to work with political data in a way that’s practical and meaningful. We call it: Open Source Political Intelligence At Datengarten on February 5, 2025, we’ll share our latest progress, discuss challenges, and give a behind-the-scenes look at our work. 📍Chaos Computer Club Berlin (CCCB), Marienstraße 11, 10117 Berlin Let’s talk about how we can make political information more open and useful for everyone. 🔗 Open Politics Project: https://open-politics.org/about, https://github.com/open-politics/open-politics, https://github.com/open-politics/opol 🇧🇪 German Version Open Politics – Offene Werkzeuge für politische Daten Politik ist oft schwer durchschaubar – aber mit den richtigen Werkzeugen lassen sich Strukturen, Entscheidungen und Entwicklungen besser verstehen. Das Open Politics Project entwickelt und operationalisiert Open-Source-Methoden zur Analyse politischer Daten, um Journalist:innen, Forschenden, Aktivist:innen und interessierten Bürger:innen den Zugang zu politischen Informationen zu erleichtern. Unser Ziel ist es, politische Daten verständlich und nutzbar zu machen. Wir verbinden bestehende Ansätze aus Datenanalyse, Politikwissenschaft und KI, probieren neue Methoden aus und dokumentieren alles offen, um es gemeinsam weiterzuentwickeln. Von interaktiven Visualisierungen bis zu strukturierten Datensammlungen – wir experimentieren mit Wegen, politische Informationen alltagstauglicher zu gestalten. We call it: Open Source Political Intelligence Beim Datengarten am 05. Februar 2025 sprechen wir über unseren aktuellen Stand, diskutieren Herausforderungen und geben einen Einblick in unsere Arbeit. 📍Chaos Computer Club Berlin (CCCB), Marienstraße 11, 10117 Berlin Lasst uns gemeinsam überlegen, wie politische Informationen offener und zugänglicher werden können. 🔗 Open Politics Project: https://open-politics.org/about, https://github.com/open-politics/open-politics, https://github.com/open-politics/opol Licensed to the public under http://creativecommons.org/licenses/by-sa/3.0/ about this event: https://c3voc.de

Building Your First LoRa Mesh Network From Scratch (38c3)

Fri, 27 Dec 2024 12:55:00 +0100

In a world of centralized internet control, building your own mesh network isn't just a technical challenge—it's digital independence. This beginner-friendly guide walks through creating resilient mesh networks using accessible hardware like LoRa and ESP devices. From antenna selection to node placement strategy, learn how to build networks that operate independently of traditional infrastructure. Ever wondered how to create your own independent communication network? This practical introduction demonstrates how to build resilient mesh networks using affordable, readily available components. We'll demystify the process while emphasizing legal and responsible deployment. The talk breaks down into four key segments: Hardware Selection & Setup • Understanding LoRa, ESP, and other low-cost communication devices • Choosing the right antennas for your environment • Basic hardware configuration and initial setup • Cost-effective shopping guide and alternatives Network Planning 101 • Basic principles of mesh network topology • Coverage planning and node placement strategy • Utilizing existing structures (old TV antennas, tall buildings) • Tools and software for network planning • Range testing and optimization Practical Deployment • Weather-proofing your nodes • Power considerations (solar, battery, mains) • Legal considerations and responsible deployment • Documentation and network monitoring • Common pitfalls and how to avoid them Advanced Topics & Future Expansion • Adding encryption and security layers • Integration with other network types • Scaling strategies • Community building and maintenance Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/building-your-first-lora-mesh-network-from-scratch/

Breaking NATO Radio Encryption (38c3)

Fri, 27 Dec 2024 14:45:00 +0100

We present fatal security flaws in the HALFLOOP-24 encryption algorithm, which is used by the US military and NATO. HALFLOOP-24 was meant to safeguard the automatic link establishment protocol in high frequency radio, but our research demonstrates that merely two hours of intercepted radio traffic are sufficient to recover the secret key. In the talk, we start with the fundamentals of symmetric key cryptography before going into the details of high frequency radio, HALFLOOP-24, and the foundation of our attack. High frequency (HF) radio, also known as shortwave radio, is commonly used by the military, other government agencies and industries that need highly robust long-distance communication without any external infrastructures. HF radio uses frequencies between 3 and 30 MHz. These frequencies enable skywave propagation, where the radio signals are reflected by electrically charged particles in the upper atmosphere. While this effect enables communication across very large distances, historically, it required trained and experienced operators to establish a radio link. This dependence on operators was reduced by the introduction of the automatic link establishment (ALE) protocol. In a nutshell, an ALE-enabled radio establishes a link to another radio by selecting a suitable frequency according to a propagation model and then transmitting a call frame. If the frequency is good, the other radio receives the frame and the two radios perform a handshake to set up a link. The encryption of these ALE frames is known as linking protection. It is primarily meant to protect unauthorized users from establishing links with radios in a network or interfering with established links. Additionally, encryption of ALE frames also protects the network from certain types of traffic analysis, which is the analysis of operating data such as network structure, frequencies, callsigns and schedules. The first ALE standard did not specify a cipher, but specified how to integrate a stream cipher with ALE. Later standards introduced the 56-bit key Lattice/SoDark cipher, which is now recommended to be replaced with HALFLOOP whenever possible. HALFLOOP, which is standardized in US standard [MIL-STD-188-14D](https://quicksearch.dla.mil/qsDocDetails.aspx?ident_number=67563) since 2017, is essentially a downscaled version of the Advanced Encryption Standard (AES), which effectively is the most used encryption algorithm today. While this downscaling led to many strong components in HALFLOOP, a fatal flaw in the handling of the so-called tweak enables devastating attacks. In a nutshell, by applying a technique known as differential cryptanalysis, an attacker can skip large parts of the encryption process. In turn, this makes it possible to extract the used secret key and hence enables an attacker to break the confidentiality of the ALE handshake messages and also makes an efficient denial-of-service attack possible. These attacks are described in the two research papers, [Breaking HALFLOOP-24](https://doi.org/10.46586/tosc.v2022.i3.217-238) and [Destroying HALFLOOP-24](https://doi.org/10.46586/tosc.v2023.i4.58-82). They were initiated by the presentation of the [Cryptanalysis of the SoDark Cipher](https://doi.org/10.46586/tosc.v2021.i3.36-53), the predecessor of HALFLOOP. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/breaking-nato-radio-encryption/

How Roaming Agreements Enable 5G MitM Attacks (38c3)

Fri, 27 Dec 2024 13:50:00 +0100

End-users in cellular networks are at risk of connecting to fake base stations, and we show that mitigations pushed in 5G are insufficient. Machine-in-the-Middle (MitM) attackers aim to overhear and manipulate network traffic. The MitM position can also be used as an entry point for baseband exploitation. Proceeding from there, attackers can gain full control of a user’s phone. Standardization bodies pushed many mitigations against MitM into the specification of cellular networks. However, roaming agreements still enable powerful attackers to perform seamless attacks – even in 5G! In this talk, you’ll learn about the complex nature of cellular roaming and how roaming is implemented in recent smartphones. The specification puts a lot of trust in network operators. This impedes security in real-world deployments. We show that the capabilities of network operators exceed the intended capabilities of lawful interception. If those are abused, end-users have no possibility of noticing the attacks. Attacks on roaming are challenging to prevent or even detect in practice. The specification needs a major update to make cellular roaming secure. Users at risk should be aware of the current state of the system. We discuss multiple mitigations, including solutions for end-user devices. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/how-roaming-agreements-enable-5g-mitm-attacks/

Ausgeschilderte Radnetze in OSM (nook24)

Sat, 09 Nov 2024 18:00:00 +0100

Radwegweiser finden sich überall in Deutschland, so auch in Lübeck und Umgebung. Sie bilden ein Netz aus Strecken, aus die für das Radfahren besonders geeignet sind. Sie tun dies ebenso wie Knotenpunkt-Netzwerke z.B. in den Niederlanden. Der Vortrag soll einführen, wie sich ein Netz aus verbundenen Wegweisern um Routing nutzen ließe. Damit wäre ein Radfahren von Wegweiser zu Wegweiser möglich. Unterwegs zeigen aufgestellte Wegmarken/ Zwischenwegweiser die Verbindung von einem Wegweiser zum nächsten ohne z.B. auf eine gedruckte Karte oder ein Smartphone zu schauen. In dem Vortrag wird ein neues Schema vorgestellt, wie sich jeweils die benachbarten Wegweiser und ihre zugehörigen Strecken in OSM abbilden lassen und wie diese Daten exemplarisch zum Routing bei Online-Diensten oder offline auf dem Smartphone nutzen ließen. Der Vortrag orientiert sich als Beispiel des Routings an der Strecke vom Markt in Bad Schwartau zum Markt in Eutin und zeigt welche Strecken daraus resultieren und wie sich diese z.B. von denen eines großen Anbieters unterscheiden. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/ausgeschilderte-radnetze-in-osm/

Shut up, do research and take our money! (nook24)

Sat, 09 Nov 2024 22:00:00 +0100

Willkommen beim Chaotischen Catalysator Stipendium! Seit zwei Jahren fördern wir Masterarbeiten, die die Welt ein kleines bisschen besser machen. Auf was haben wir die letzten Jahre eigentlich unser Geld geworfen und warum? Zeit für einen Rückblick und einen Ausblick. Lerne unsere Stipendiat*innen kennen und freue dich auf spannende Einblicke in von uns geförderte Arbeiten. chaos-stipendien.de Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/shut-up-do-research-and-take-our-money/

Projekt Bucketchallenge (nook24)

Sat, 09 Nov 2024 18:00:00 +0100

Wir stellen unsere Datenreise in die Abgründe von Amazon S3 vor. Amazon S3 erlaubt es große Datenmengen für kleines Geld in der Cloud abzulegen und mit wenigen Klicks der Welt zugänglich zu machen. Ob absichtlich, unwissend oder nur schlecht informiert: Viele private Daten sind öffentlicher als uns lieb ist. Fast alles, was in Dateien abgelegt werden kann, haben wir gefunden, bis auf… Das Problem daran: Prozesse für Responsible Disclosure, die den Namen Prozess nicht verdient haben. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/projekt-bucketchallenge/

Feed me! – Mensa Analytics (nook24)

Fri, 08 Nov 2024 21:15:00 +0100

Kaum eine Website wird so regelmäßig aufgerufen und durchsucht wie der Speiseplan der Mensa. Für viele Studierende bildet das Mittagessen einen Baustein im regelmäßigen Tagesablauf, insbesondere in der Vorlesungszeit. Vier bis fünf Gerichte pro Tag mal fünf Wochentage mal 50 Wochen im Jahr – da kommt schon eine ganze Menge Essen zusammen. Da fragt man sich doch: Was können wir mit diesen Daten eigentlich alles anstellen? In diesem Talk schauen wir uns an, wie man sich explorativ einem Datensatz mit gewöhnlichen, öffentlichen Daten nähern kann und wie man diese Daten überhaupt bekommt. Hierbei geht es sowohl um die offensichtlichen Erkenntnisse als auch um die versteckten Zusammenhänge, die erst mit mehr und mehr Daten sichtbar und zu interessanten Geschichten werden. Auf den Geschmack gekommen? Dich erwartet ein wilder Ritt durch verworfene Ideen, überraschende Erkenntnisse und Hintergründe aus der Welt der studentischen Verpflegung auf dem Campus. Die Technik kommt nicht zu kurz – für Liebhaber von Diagrammen bis zu KI-Enthusiasten kratzen wir uns zusammen, was immer uns auf der Reise hilft. Frei nach dem Motto: Neugier ersetzt jede Profession! 01:07:45 Korrektur: Die Daten zu Artikeln, Einkauf, Speiseplangestaltung bis zu den Kassiervorgängen werden in einem Warenwirtschaftssystem digital bearbeitet. Es erfolgt entgegen der Schlussfolgerung keine manuelle Eingabe der Gerichte in die Speisepläne der Mensa. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/feed-me---mensa-analytics/

Legasthenie kann reicher machen (nook24)

Fri, 08 Nov 2024 19:11:00 +0100

In diesem Kurzvortrag werden Sie die überraschende Seite der Lernschwäche Legasthenie (auch bekannt als Lese-Rechtschreib-Schwäche, LRS) kennenlernen. Es gibt eine Vielzahl an stigmatisierenden Mythen, die sich hartnäckig im Volksmund rund um diese Lernschwäche ranken. Zu diesen zählt die Zuschreibung einer geringeren Intelligenz, weil jemand Wörter öfter falsch schreibt. Viele dieser Annahmen sind aber durch die moderne neurokognitive Forschung widerlegt worden und es zeichnen sich sogar Stärken ab, die in manchen Berufsfeldern von großem Vorteil sein können. Basierend auf meiner Wahrnehmungsforschung der letzten 10 Jahre mit Erwachsenen mit Legasthenie werden wir, anhand eines positiven Blickwinkels, mit alten Mythen aufräumen. Anschließend erfahren Sie mehr über einfache alltägliche Supportinstrumente, wie z.B. eine besser lesbare Schrift, und auch mehrere Stärken von Menschen mit Legasthenie. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/lightning-talks-freitag/

Wissenschaft und Brettspiele (nook24)

Fri, 08 Nov 2024 18:00:00 +0100

Analoge Spiele gewinnen zunehmend an Popularität. Das ist nicht erst seit der Corona-Pandemie so. Allerdings hat das Brettspiel durch sie nochmal besonders an Beliebtheit gewonnen. Auch die Wissenschaft interessiert sich mittlerweile für Spiele und wird immer häufiger auch zum Thema in Brettspielen selbst. In meinem Vortrag möchte ich euch einen Überblick über Wissenschaften im Brettspiel und das Brettspiel in der Wissenschaft geben. Wie baue ich ein stabiles Ökosystem und entdecke spielerisch die Zusammenhänge unserer heimischen Flora und Fauna? Wie ist die Energiewende zu schaffen? Brauche ich einen Druckanzug, um am heimischen Wohnzimmertisch die Tiefsee zu erforschen? Kann ich die Evolutionstheorie an einem Abend durchspielen? Ich werde euch einige Spiele vorstellen, mit denen diese Fragen beantwortet werden können und in denen gleichermaßen wissenschaftliche wie gesellschaftlich relevante Themen aufgegriffen werden. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/wissenschaft-und-brettspiele/

„Konnte bisher noch nie gehackt werden“: Die elektronische Patientenakte kommt - jetzt für alle! (38c3)

Fri, 27 Dec 2024 14:45:00 +0100

In wenigen Wochen werden die Gesundheitsdaten von rund 73 Millionen in Deutschland Krankenversicherten ohne deren Zutun über Praxis- und Krankenhausgrenzen hinweg zentral in einer Akte zusammengeführt - in der [„elektronischen Patientenakte für alle“](https://www.bundesgesundheitsministerium.de/themen/digitalisierung/elektronische-patientenakte/epa-fuer-alle.html). Fortsetzung von 36C3 - [„Hacker hin oder her“: Die elektronische Patientenakte kommt!](https://media.ccc.de/v/36c3-10595-hacker_hin_oder_her_die_elektronische_patientenakte_kommt) In wenigen Wochen startet die [„elektronische Patientenakte (ePA) für alle“](https://www.bundesgesundheitsministerium.de/themen/digitalisierung/elektronische-patientenakte/epa-fuer-alle.html): Medizinische Befunde, Medikationslisten und weitere Gesundheitsdaten von rund 73 Millionen in Deutschlang Krankenversicherten werden dann ohne deren Zutun über Praxis- und Krankenhausgrenzen hinweg in einer zentralen Akte zusammengeführt. Bisher musste die ePA explizit beantragt werden. Ab Januar 2025 dagegen erhalten alle gesetzlich Versicherten, die nicht widersprechen, automatisch eine solche ePA. Eine moderne Sicherheitsarchitektur ermöglicht dabei, dass die enthaltenen Gesundheitsinformationen in der ePA mit den höchsten Sicherheitsstandards geschützt werden. „Der Datenschutz und die Datensicherheit waren uns zu jedem Zeitpunkt das wichtigste Anliegen“, so Gesundheitsminister Karl Lauterbach. „Ein solches System konnte bisher noch nie gehackt werden“. Doch die Vergangenheit hat gezeigt: [„Vertrauen lässt sich nicht verordnen“](https://www.ccc.de/en/updates/2023/digitalegesundheit). Fortsetzung von 36C3 - [„Hacker hin oder her“: Die elektronische Patientenakte kommt!](https://media.ccc.de/v/36c3-10595-hacker_hin_oder_her_die_elektronische_patientenakte_kommt) Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/konnte-bisher-noch-nie-gehackt-werden-die-elektronische-patientenakte-kommt-jetzt-fr-alle/

Der Thüring-Test für Wahlsoftware (38c3)

Fri, 27 Dec 2024 20:15:00 +0100

Wähle Dein Risiko! Vor der Bundestagswahl 2017 veröffentlichten wir unsere Analyse über haarsträubende Sicherheitslücken in einer weit verbreiteten Wahlsoftware. Seitdem ist einiges passiert: Der Hersteller hat die Probleme nicht behoben, das BSI hat einen Stapel Papier produziert, die deutschen Anbieter von Wahlsoftware haben ihr Kartell vergrößert und unterschiedliche Wahl-Pannen untergraben weiterhin das Vertrauen in die Demokratie. Wurden unsere Empfehlungen von 2017 umgesetzt? Wir nehmen den Decompiler und schauen mal nach. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/der-thring-test-fr-wahlsoftware/

#GemeinsamBuddeln – Bäume pflanzen (nook24)

Sat, 09 Nov 2024 19:00:00 +0100

Warum Monokultur-Wald-Plantagen keine richtigen Wälder sind, was das international hoch angesehene Lübecker Waldkonzept ausmacht und wie wir sinnvoll aufforsten können um etwas für Natur und Umwelt machen zu können, möchten wir in diesem Vortrag erläutern. Dazu berichten wir über unsere Vereinsarbeit von #GemeinsamBuddeln e.V.; was wir bereits erreicht haben, unsere Ziele sind und wie jede Person mitmachen kann. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/gemeinsambuddeln---baeume-pflanzen/

Die Sendung mit der Fledermaus (nook24)

Fri, 08 Nov 2024 21:15:00 +0100

Seit 16 Jahren gibt es das u.a. im Freifunk beliebte Layer 2 Mesh-Routing Protokoll B.A.T.M.A.N. Advanced https://www.open-mesh.org/. Seit 14 Jahren ist es sogar Teil des offiziellen Linux Kernels - und ist daher sehr wahrscheinlich schon auf deinem Linux installiert. Der Vortrag erklärt, was batman-adv ist und ein Mesh-Routing-Protokoll so macht, beleuchtet die geschichtlichen Anfänge und Werdegang von batman-adv (auch die studentische Gruppe MetaMeute an der Uni Lübeck war hier beteiligt), wie/warum man in den offiziellen Linux Kernel kommt und gibt eine Einführung in die technische Funktionsweise des Protokolls und Algorithmus. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution Sharealike 4.0 International License (CC-BY-SA) (https://creativecommons.org/licenses/by-sa/4.0/) CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/die-sendung-mit-der-fledermaus/

Der Fischerkrieg - Forschungsfragen (nook24)

Sat, 09 Nov 2024 20:15:00 +0100

Zeit: Die 1910er Jahre Ort: Die Trave Fischer Heinz holt seine Netze ein. Wieder nix drin. Missmutig betrachtet er die orange-gelben Wellen des Flusses, stinkend und ölfilmverschmiert. Letzte Woche hatten sie wieder hunderte toter Fische im Schilf gefunden, junge Brassen, Heringe, alles hin. Das reicht! Es muss etwas geschehen! So oder so ähnlich oder auch ganz anders könnte es angefangen haben. Wenige Jahre zuvor war in einem kleinen Örtchen namens Herrenwyk ein Industriebetrieb entstanden, wie es ihn in ganz Schleswig Holstein zu dieser Zeit nicht gegeben hat und auch später nicht geben sollte: ein Hochofen. Hunderte Tonnen an Kohle wurden zu Koks verarbeitet, Erze gerieben und zu kleinen Kügelchen geformt, die Höllenglut des ersten Hochofens (später sollten es noch drei Stück werden) wurde Tag und Nacht befeuert. Kupfer, Zink und sogar Gold wurden aus der Schlacke gewonnen, Gichtgas wurde in das städtische Netz eingespeist. Und jeder einzelne dieser Prozesse produzierte nicht nur Abgase, die den Himmel über dem heutigen Kücknitz verdunkelten, sondern auch giftige und schwermetallbelastete Abwässer. Und wo blieben die wohl? Andererseits waren da noch die großen Fischfabriken in Schlutup… Direkt gegenüber des blökernden, bollernden Industriebetriebes befand sich damals wie heute Schlutup, ein Stück flussaufwärts Gothmund. Beides traditionsreiche Fischerorte, die zum Aufstieg Lübecks zu einem sehr bedeutenden Fischereistandort beigetragen haben. Fischerorte, deren Fänge massiv einbrachen. Das ließen sie sich nicht gefallen und zogen gegen das Hochofenwerk vor Gericht. Im Archiv der Geschichtswerkstatt Herrenwyk lagert ein Aktenkonvolut, das diese Prozessreihe, die sich bis in die 50er Jahre erstreckte, behandelt. Gerichtsakten, Gutachten, Zeitungsartikel und Briefverkehr lagern in drei Leitz-Ordnern. Der Verein für Lübecker Industrie- und Arbeiterkultur e.V., der Förderverein der Geschichtswerkstatt, will dieses Aktenkonvolut nun erstmals erschließen, erforschen und eine Ausstellung über das Thema erarbeiten. Wir wollen das Projekt und den aktuellen Stand der Forschung vorstellen. Wir möchten das Projekt, dessen Ziel zunächst die Erforschung eines beispielhaften Stückes Regionalgeschichte ist, transparent und öffentlich gestalten und dabei regelmäßig über den aktuellen Stand der Forschung informieren. Dies wird die erste Veranstaltung dazu sein. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/der-fischerkrieg---forschungsfragen/

We've not been trained for this: life after the Newag DRM disclosure (38c3)

Fri, 27 Dec 2024 23:00:00 +0100

You've probably already heard the story: we got contracted to analyze a bunch of trains breaking down after being serviced by independent workshops. We reverse engineered them and found code which simulated failures when they detected servicing attempts. We presented our findings at 37C3… and then shit hit the fan. This talk will be an update about what happened since our 37C3 presentation. We’ll talk about: - Three parliamentary workgroup sessions with dirty bathroom photos on Newag’s offtopic slides, train operators revealing that they paid Newag more than 20k EUR for unlocking a single train, which Newag was able to unlock in 10 minutes, and at the same time saying that they don’t know anything about the locks. - 140-page lawsuits, accusing us of _copyright violation and unfair competition_ (sic!) with a lot of logical gymnastics. - How it’s like to repeatedly explain reverse engineering concepts to journalists. - 6 official investigations, two of them criminal. - New cases revealed since then (from different train operators). - and much more! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/we-ve-not-been-trained-for-this-life-after-the-newag-drm-disclosure/

Breaking the Mirror – A Look at Apple’s New iPhone Remote Control Feature (38c3)

Fri, 27 Dec 2024 11:00:00 +0100

Exploring the security of the new iPhone Mirroring feature as well as the current threat model of the iOS ecosystem The tight integration between devices is something you only get in Apple’s Continuity ecosystem. It enables seamless interaction between devices, such as using your iPhone as a webcam for your Mac and even letting an iPad act as a second screen with stylus input. All of this relies on Apple’s Continuity framework, a system that builds on local wireless protocols such as Bluetooth and Wi-Fi to communicate among a user’s devices. The interactions enabled between the devices result in a complex threat model that researchers have started to explore over the past years. This summer, Apple newly introduced iPhone Mirroring, a feature that allows users to remote control their locked iPhone wirelessly from their Mac, further blurring the security boundaries in the ecosystem. How does this new feature work? Are the security and privacy checks introduced for iPhone Mirroring sufficient or is it possible to trick the system? What do they protect against and how might this differ from how iOS devices are used in practice? In this talk, you will get demos and explanations of bypasses found in early versions of the iOS 18 beta along with an explanation of why and how they work. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/breaking-the-mirror-a-look-at-apple-s-new-iphone-remote-control-feature/

Typing Culture with Keyboard: Okinawa - Reviving the Japanese Ryukyu-Language through the Art and Precision of Digital Input (38c3)

Fri, 27 Dec 2024 11:00:00 +0100

In a world dominated by digital communication and the drive toward linguistic unification, the simple act of 'typing' varies significantly across languages and writing systems. For European languages like English and German, typing typically involves a set of about 100 letters and symbols. In contrast, Japanese—and by extension, Okinawan—requires three distinct scripts: hiragana, katakana, and kanji. Each of these adds layers of complexity and cultural depth to written expression. This presentation delves into the development of an input method engine (IME) for Okinawan, an endangered language spoken in Japan's Ryukyuan archipelago. Moving beyond technical challenges, this project reveals how modern digital ‘calligraphy’ intersects with language preservation. Every keystroke becomes a deliberate cultural choice, as the IME reflects the aesthetic and linguistic essence of Okinawan language. Highlighting linguistic expression, cultural significance, and the urgent need for language preservation, this talk presents a model for future digital tools that empower endangered languages and cultures to thrive in the digital realm. This presentation begins by illustrating how different languages transliterate speech globally and then shifts focus to the Ryukyu-Japonic language family, showcasing how over 10,000 characters can be input on a QWERTY keyboard. The Input Method Engine (IME) has played a unique role in facilitating character input for Chinese, Japanese, and Korean (CJK) languages. This talk explores expanding the CJK family to include Okinawan, addressing how phonologically distinct sounds are recorded and encoded. This addition lays the groundwork for other Okinawan speakers to express themselves and document their lives in today’s interconnected, digital world. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/typing-culture-with-keyboard-okinawa-reviving-the-japanese-ryukyu-language-through-the-art-and-precision-of-digital-input/

Negative Glaubenssätze & ihre Wirkung (nook24)

Sat, 09 Nov 2024 20:15:00 +0100

Glaubenssatz – Ein Wort, das im alltäglichen Sprachgebrauch und auf Social Media immer häufiger verwendet wird. Besonders etabliert hat es in den letzten Jahren die Psychotherapeutin und Autorin Stefanie Stahl mit ihrem Buch “Das Kind in dir muss Heimat finden”. Doch was sind eigentlich genau Glaubenssätze? Wie entstehen sie überhaupt? Wie können sie unser Gehirn verändern? Warum ist unsere Kindheit so stark für unsere Verhaltensweise im Erwachsenenalter verantwortlich? Und wie schaffe ich es, einen liebevollen Umgang mit mir selber zu erreichen? Fragen über Fragen, die ich gerne beantworten möchte. In diesem Vortrag soll es darum gehen, zu verstehen, warum es für unsere Gesellschaft so bedeutsam ist, die eigenen (und gerade die negativen) Glaubenssätze zu kennen und ihnen keinen Glauben zu schenken. Zudem möchte ich “Erste-Hilfe-Maßnahmen” erklären, wie der Umgang mit negativen Glaubenssätzen gelingen und dadurch ein besseres Leben ermöglicht werden kann. Dieser Vortrag ist für alle Menschen geeignet. Sprich, er richtet sich an Menschen, die keine Ahnung von Psychologie haben aber auch an Therapieerfahrene, die ihr Wissen aufstocken möchten. Natürlich sind aber auch Therapeuten herzlich eingeladen. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/negative-glaubenssaetze-ihre-wirkung/

Fragen dekonstruiert! (nook24)

Fri, 08 Nov 2024 22:15:00 +0100

♫ Wer, wie was, wieso, weshalb, warum – wer nicht fragt bleibt dumm. ♫ Schon die Sendung mit der Maus weiß, wie wichtig Fragen für das Verstehen von Phänomenen sind. Also schauen wir doch mal in den Werkzeugkoffer der unterschiedlichen Fragetechniken! In dem Vortrag beleuchten wir gemeinsam die verschiedenen systemischen Fragetechniken (z.B. hypothetisch, paradox, zirkulär) und erkunden deren Einsatzzweck. Ihr erweitert damit Euer Repertoire an Fragen, die ihr nutzen könnt um Sachverhalte, Situationen oder Phänomene besser zu verstehen. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/fragen-dekonstruiert/

libobscura: Cameras are difficult (38c3)

Fri, 27 Dec 2024 11:00:00 +0100

I'm not big-brained enough to use cameras on Linux, so I decided to write my own camera stack (based on a real story). The libobscura experiment exists to find out what a point-and-shoot API abstracting Video4Linux should look like. It has its roots on one hand in the Librem 5 project, where I wrote some 70% of the camera stack, and on the other hand in libcamera, which I found too difficult to use. You think controlling a modern camera is easy? Think again. Between pixel formats, depths, media entities, pads and links, sensitivity, denoising, phase detection, shutter lengths, DMAbuf, OpenGL, feedback loops, requests, and statistics, there's enough opportunities to get lost in the detail. Thankfully, Prototype Fund thinks I'm up for the challenge, so they are funding me through libobscura in order to get lost, and maybe find something in the process. Project repo: https://codeberg.org/libobscura/libobscura Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/libobscura-cameras-are-difficult/

ACE up the sleeve: (38c3)

Fri, 27 Dec 2024 12:00:00 +0100

With the iPhone 15 & iPhone 15 Pro, Apple switched their iPhone to USB-C and introduced a new USB-C controller: The ACE3, a powerful, very custom, TI manufactured chip. But the ACE3 does more than just handle USB power delivery: It's a full microcontroller running a full USB stack connected to some of the internal busses of the device, and is responsible for providing access to JTAG of the application processor, the internal SPMI bus, etc. We start by investigating the previous variant of the ACE3: The ACE2. It's based on a known chip, and using a combination of a hardware vulnerability in MacBooks and a custom macOS kernel module we managed to persistently backdoor it - even surviving full-system restores. On the ACE3 however, Apple upped their game: Firmware updates are personalized to the device, debug interfaces seem to be disabled, and the external flash is validated and does not contain all the firmware. However using a combination of reverse-engineering, RF side-channel analysis and electro-magnetic fault-injection it was possible to gain code-execution on the ACE3 - allowing dumping of the ROM, and analysis of the functionality. This talk will show how to use a combination of hardware, firmware, reverse-engineering, side-channel analysis and fault-injection to gain code-execution on a completely custom chip, enabling further security research on an under-explored but security relevant part of Apple devices. It will also demonstrate attacks on the predecessor of the ACE3. The Lightning and USB-C ports on Apple devices have been well known to "hide" secrets beyond just exposing USB and charging functionality: For example last year at CCC, we showed how we can gain access to JTAG on the iPhone 15 using a custom-build PCB ("Tamarin-C"). All this is handled on new Apple devices using a chip called the ACE3: While previous Apple USB-C devices used a slightly modified Texas Instruments TPS65986, the ACE3 is significantly more custom - and significantly more powerful: It runs a full USB stack (implementing the "Port DFU" mode) and is connected to different internal busses of the phone, making it an interesting target for persistent firmware-implant style attacks. Imagine modifying/backdooring the USB-C controller in a way where it will automatically compromise the main operating-system - essentially making (potential) USB jailbreaks untethered. But how do we approach a custom chip without any documentation and which has its firmware in an internal ROM? With the ACE2 it was possible to dump the integrated ROM using JTAG/SWD, which allowed us to identify & exploit a hardware (on all MacBooks except the M3 Pro & Max) vulnerability to persistently modify the ACE2. However the ACE3 is different: We don't even have a pinout for the chip (which has 120 pins), JTAG seems disabled, and the external flash does not even contain the actual firmware, but only tiny patches for the actual firmware in the chip - and the contents are cryptographically validated! After attempting different software avenues of attacking the ACE3 (including building a small fuzzer and finding a timing side-channel attack to enumerate available commands) with no success, and seeing that the ACE3 implements firmware personalization, it was time for the ace up the sleeve: Hardware attacks. After reverse-engineering the external flash layout (including CRCs) and finding that the flash is cryptographically verified (and that a secure-boot bypass vulnerability we found on the ACE2 does not work on the ACE3), the idea was born to use electro-magnetic measurements to determine when during the startup of the chip the validation fails. And by triggering a software-defined radio on the activity of the external flash, it was possible to gather a very precise point in time where the check is being done - perfect to try some fault injection! Unfortunately no good isolated power-supply for the ACE3 could be found to use with voltage fault injection, and so instead I decided to try electro-magnetic fault injection: By "blasting" the chip with strong electro-magnetic fields at just the point in time determined during the EM measurement I was hoping to be able to bypass the check - and after hours of trying, debugging, moving the injection tip, more debugging, and more time, it eventually succeeded: A modified patchset could be booted into the CPU. But … How do we make sure our "patch" actually gets executed? How do we dump the ROM without having any IO? And how do we even know what (in the 32-bit address space of the processor) we should dump? And can we implement the attack without thousands of dollars of hardware? We will look at all of these things during the talk. Itemized progression draft: - Introduction - whoami - History of Lightning/USB-C secrets on Apple devices - A quick look at ACE2 - Technical details & usage - Dumping the ACE2 - Analyzing the MacBook hardware - Building a kernel-level SWD probe to hack the ACE2 without opening the device - Disabling the secure-update functionality of the ACE3 - The ACE3 - iPhone 15 vs iPhone 16 vs MacBook with M3 Pro/Max - No matching Texas Instruments chip, no public documentation, no schematics - Software exploration - Apple's HPM bus - Discovering a timing-sidechannel for supported commands - Hardware exploration - Trying to find SWD (with which I think I succeeded - however it seems to be disabled) - Dumping the external flash - Flash exploration - No full firmware, just patches - Some CRCs found, but also firmware personalization (IM4M) - Seems to be cryptographically verified - Attempting to flash modified dumps (with fixed CRCs) unsuccessfully - Electro-magnetic measurement - Setup: HackRF + small inductor as antenna - Building a reliable Trigger signal for the SDR: Flash chip-select line - Compare when the chip-boot fails with correct and invalid CRCs in the flash - Identified point in time where the boot seems to abort (Screenshots for this can be found in the attachments) - Fault injection - Quick primer: Voltage FI vs EMFI - Setup: ChipSHOUTER on MacBook, ChipWhisperer Husky for trigger-generation, software to reboot the chip & arm the glitcher - Experimenting to determine correct parameters by attempting to fail the boot with correct firmware - The actual attack - Flash modified patchset (Changed version-string) - Reboot chip - Glitch chip at the right time - Test for success, repeat - Success - but what now? - Getting actual code-execution through the attack by overwriting a patched command - Using HPM bus to execute the command and dump 64 bytes at a time - A look at the dumped firmware - Reducing the attack-costs: Performing the attack with <$100 of equipment - How could this have been prevented? - What's next? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/ace-up-the-sleeve-hacking-into-apple-s-new-usb-c-controller/

Clay PCB (38c3)

Fri, 27 Dec 2024 13:50:00 +0100

We built an Ethical Hardware Kit with a PCB microcontroller made of wild clay retrieved from the forest in Austria and fired on a bonfire. Our conductive tracks use urban-mined silver and all components are re-used from old electronic devices. The microcontroller can compute different inputs and outputs and is totally open source. It is an open secret that the hardware in our smart devices contains not only plastics but also ‘conflict minerals’ such as copper and gold. Technology is not neutral. We investigate alternative hardware from locally sourced materials from a feminist perspective, to develop and speculate upon renewable practices. We call it Feminist Hardware! Feminist Hardware is developed without mining in harmful ways, in an environmentally friendly way, under fair working conditions, and is manufactured from ubiquitously available materials, without generating e-waste, with consent, love and care. We researched on fair-traded, ethical, biodegradable hardware for environmental justice, building circuits that use ancient community-centered crafts encouraging de-colonial thinking, market forces to be disobeyed, and future technologies to be imagined. Our artistic outcome is an Ethical Hardware Kit with a PCB microcontroller at its core. Our PCB is made of wild clay retrieved from the forest in Austria and fired on a bonfire. Our conductive tracks used urban-mined silver and all components are re-used from old electronic devices. The microcontroller can compute different inputs and outputs and is totally open source. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/clay-pcb/

Funktionaler Code für Data Science (nook24)

Fri, 08 Nov 2024 18:00:00 +0100

Daten und ihre Analyse spielen eine zentrale Rolle in der heutigen Gesellschaft. Nur eine saubere und belastbare Analyse von Daten ermöglicht das Treffen von Entscheidungen, an deren Ende positive Ergebnisse stehen können — sei es in der Geschäftswelt, dem Gesundheitswesen, der Regierung oder im alltäglichen Leben. Trotzdem erleben wir in der Data Science bisweilen ein eher behelfsmäßiges Vorgehen, bei dem verschiedene Methoden und Programme mit Hilfe von ungetestetem prozeduralen ad-hoc Code “zusammengeklebt” werden. Dieser Talk untersucht die Vorteile funktionaler Programmiertechniken in der Data Science. Mit besonderem Augenmerk auf puren Funktionen, “Immutability” und den Vorteilen eines starken Typsystems werden wir demonstrieren, wie diese Konzepte zu zuverlässigeren und wartbareren Arbeitsabläufen beitragen können. Praktische Beispiele werden die verbesserte Klarheit des Quellcodes, überprüfbare Spezifikationen, die Möglichkeit zur Parallelisierung und vereinfachtes Debugging demonstrieren. Dieser Vortrag richtet sich sowohl an Data Scientists, als auch an jeden mit Interesse an zuverlässiger und robuster Datenanalyse. Vorherige Kenntnisse in funktionaler Programmierung sind nützlich, aber keineswegs Voraussetzung. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/functional-programming-for-data-science/

CTF: WTF?! - Capture The Flag für Einsteiger (38c3)

Fri, 27 Dec 2024 13:30:00 +0100

Capture The Flag (CTF) für Einsteiger: Wie man legal "hacken" ueben kann, warum man das tun sollte und wo man anfaengt. "Hacken" ist längst nicht mehr nur Hobby. WTF? CTF! Was ist ein "Capture The Flag", wie passt das in die aktuelle Menge aus Security Buzzwords, welchen Nutzen kann ich daraus ziehen und wie fange ich an? Es werden ein paar einfache Plattformen und Veranstaltungen zum starten und üben gezeigt. Dem folgen Spielarten, Wege "hacken" zu lernen, und ein Ausblick auf berufliche Möglichkeiten. Der Vortrag richtet sich an Einsteiger die neue Herausforderungen suchen und ihr Wissen um IT-Sicherheit vertiefen wollen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/ctf-wtf-capture-the-flag-fr-einsteiger/

Rowhammer (nook24)

Fri, 08 Nov 2024 19:22:00 +0100

Der Vortrag führt in die Funktionsweise von Rowhammer-Angriffen ein, bei denen durch wiederholtes Auslesen von DRAM-Zellen benachbarte Speicherbereiche manipuliert werden können. Neben den technischen Grundlagen werden aktuelle Entwicklungen und Schutzmaßnahmen vorgestellt, die diese Schwachstelle adressieren. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/lightning-talks-freitag/

Mobil im Alltag – Umwelt.Zeit.Geld.Leben (nook24)

Sat, 09 Nov 2024 20:15:00 +0100

Die Wahl des Mobilitätsmusters hat gravierende Auswirkungen auf den Einzelnen, die Allgemeinheit, und die Umwelt. Diese Auswirkungen sind gut erforscht, sie sind aber außerhalb des Wissenschaftsbereichs nur ansatzweise bekannt. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/mobil-im-alltag---umweltzeitgeldleben/

AlekSIS® – Freie Schul-Information (nook24)

Sat, 09 Nov 2024 19:11:00 +0100

AlekSIS® bietet sinnvolle und praktische Features rund um Schulorganisation und -verwaltung. Doch neben Stammdatenverwaltung, Stundenplan, und Kursbuch sticht ein Merkmal besonders hervor: Die Mitgestaltbarkeit. Schüler*innen können lernen statt nur zu konsumieren. Ihren Schulalltag aktiv gestalten, statt an Wegwerfprojekten zu programmieren. Und wer das noch nicht braucht, wendet sich an Dienstleister für Hosting und Support. Dank freier Software natürlich herstellerunabhängig. Dieser Talk zeigt den aktuellen Stand des Projektes. Sowohl organisatorisch in Bezug auf Kooperationen des Projektes, als auch technisch im Hinblick auf die Software. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/lightning-talks-samstag/

Malen nach Zahlen (nook24)

Sat, 09 Nov 2024 19:00:00 +0100

Vielleicht kennt ihr das: ihr möchtet gern ein Bild auf dem Bildschirm haben und vielleicht auch animieren, aber wisst nicht so richtig wie. Oder ihr findet es einfach spannend, was mit Software zu basteln und die Auswirkungen direkt zu sehen? Im Vortrag nähern wir uns den Konzepten Shader und Signed Distance Functions (SDFs). Wir entdecken kleine Bausteine und lernen, sie zu kombinieren. Der Vortrag möchte Begeisterung fürs Thema teilen, zum Spielen mit Shadern einladen, und eventuell vorhandene Berührungsängste mit dem Thema abbauen. Benötigtes Vorwissen: Im Rahmen des Vortrags werden wir Beispiele mit Code und Formeln sehen. Diese werden jeweils entsprechend erklärt, und Nachfragen sind gern gesehen. Wenn ihr schonmal ein if oder for gesehen habt, und euch Konzepte wie Vektoren oder ein Minimum schon über den Weg liefen, seid ihr für den Vortragsinhalt vermutlich gut gerüstet. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/malen-nach-zahlen/

Freifunk Lübeck, das war 2024 (nook24)

Fri, 08 Nov 2024 19:33:00 +0100

Wir bauen in Lübeck ein souveränes, dezentrales Netzwerk auf – frei von Profitzwängen. In diesem Vortrag berichten wir von neuen Richtfunkstandorten, der Firmwareentwicklung, Events und wie Du dich daran beteiligen kannst. Im Laufe der Nook gibt es die Möglichkeit das direkt mal auszuprobieren. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/lightning-talks-freitag/

Videowall selber bauen (nook24)

Fri, 08 Nov 2024 19:00:00 +0100

Das Projekt. Das Projekt startete 2005 mit dem Ziel, für die Fussball Weltmeisterschaft 2006 ein Publicviewing vom Verein anbieten zu können, was möglichst wenig Kosten verursacht und sich schnellstmöglich Refinanziert. Bis 2024 werden von dem Verein immer noch die Fußballweltmeisterschaften und die Fussball Europameisterschaften im Publicviewing organisiert. Die Technik dahinter hat sich allerdings mehrfach geändert. Ziel dieses Seminars/ Erfahrungsbericht ist es, die Entwicklung vom Start bis heute darzustellen. Dabei wird der Fokus auf die Technische Entwicklung und deren Herausforderung gelegt. Inhalte. Hardwareentwicklung. Von einem PC mit 3 Grafikkarten zur günstigen China-Gadget Videowall Lösung. Von 6 Beamern mit 800x600 VGA Auflösung zu 4x FullHD und HDMI. Entwicklung einer Leinwand mit Rückprojektion zur Eigenbaulösung mit OSB Platten. Software. Von Windows XP und VLC zum einfachen SAT-Receiver Kosten. Investitionen zu Beginn bis heute. Zu allen Punkten werden die Schwierigkeiten und Probleme erläutert und dessen Lösungen erörtert. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/lightning-talks-freitag/

HL-lol 2: "zwar nicht schön, aber ..." (nook24)

Sat, 09 Nov 2024 22:00:00 +0100

HL-Live ist 20 Jahre alt geworden dieses Jahr! Böse Zungen behaupten, dass das auch für die Technik dahinter gilt. Wir wünschen auf jeden Fall alles Gute, haben aber noch etwas Gesprächsbedarf. Was ist eigentlich seit dem letzten Jahr so passiert? Gibt’s Trends? Weiterentwicklungen? Bei der letzten NooK haben wir primär auf wahnsinnige Kommentare geschaut, aber was ist eigentlich mit den Artikeln (die solche Kommentatoren anziehen)? Okay, und neue, wahnsinnige Kommentare kommen auch vor. Und Spiele. Und die Zukunft. Und überhaupt. Keine Sorge: Kenntnisse aus Teil 1 werden nicht vorausgesetzt. Sie schaden aber auch nicht. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/hl-lol-2-zwar-nicht-schoen-aber-/

Jeder Mensch ein:e Künstler:in (nook24)

Sat, 09 Nov 2024 19:33:00 +0100

Kein:e Künstler:in ist immer kreativ. Vielleicht geht, kocht oder schreibt ein:e Künstler:in unkreativ beliebig, wiederholt, egoistisch. Mit den hier vorgestellten drei Kriterien für künstlerisches Wahrnehmen, Denken und Handeln, kann jede:r die eigene künstlerische Praxis erkennen und somit auch entwickeln. Dazu werden sechs mögliche Ebenen der kreativen Entwicklung vorgestellt und erläutert. Dieser Talk entsteht aus aktuellem Handlungsforschen und in künstlerischer Praxis. Zum Schluss werden die bereits gefundenen “Ungeborenen Sehenswürdigkeiten Lübecks” vorgestellt. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/lightning-talks-samstag/

Androzentrismus in der Wikipedia (nook24)

Fri, 08 Nov 2024 18:00:00 +0100

Die Wikipedia kennen und nutzen wir alle. Doch wie wird das Wissen, das wir durch unsere hoch geschätzte Online-Enzyklopädie erhalten, eigentlich produziert? Ein genauerer Blick hinter die Kulissen offenbart nicht nur, dass hinter dem Begriff “Wikipedia” eine riesige Online-Community steckt, sondern auch, dass diese beinahe so weiß und cis-männlich geprägt ist wie das Schützenfest im Nachbardorf. In meinem Vortrag möchte ich veranschaulichen, wie patriarchale Strukturen die Artikel formen, die wir jeden Tag lesen und warum dieser male bias ein Problem ist. Dazu habe ich ein paar Anekdoten aus den Untiefen der Wikipedia im Gepäck, auf die ich während meiner Zeit als Hobbyautor gestoßen bin. Freut euch daher auch auf alte weiße Männer, die lieber anfangen rumzutrollen, statt zuzugeben, dass sie keine Ahnung vom Thema haben und Tobsuchtsanfälle bekommen, weil sie das Wort “Vulvina” nicht kennen! Der Vortrag richtet sich an alle, die daran interessiert sind, kritisch über die Produktion von Wissen nachzudenken. Krasse Kenntnisse in feministischer Theorie sind nicht vonnöten ^^ Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/androzentrismus-in-der-wikipedia/

3 1/2 Wahrheiten zur Lebensorganisation (nook24)

Sat, 09 Nov 2024 19:00:00 +0100

Arbeit und Leben effektiv zu gestalten ist mein Dauerthema. Von “Getting Things Done” über “The 7 Habits of Highly Effective People” bis zu “Deep Work” habe ich probiert, sowohl meine, als auch die Zeit meiner Kollegen sinnvoll einzusetzen. 3 1/2 Wahrheiten, die wirklich immer richtig sind, keine Nebenwirkungen haben und für jeden umsetzbar sind. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/lightning-talks-samstag/

Versteckte Botschaften in KI-Systemen (nook24)

Fri, 08 Nov 2024 20:15:00 +0100

Künstliche Intelligenz ist heute allgegenwärtig, aber wie lässt sich KI mit Steganographie – der Kunst der versteckten Kommunikation – verknüpfen? In diesem Vortrag beuleuchten wir, wie generative KI-Modelle wie LLaMa oder (Chat-)GPT genutzt werden können, um geheime Botschaften zu verstecken, ohne dass ihre Existenz nachweisbar ist. Dies ist besonders relevant angesichts geplanter Gesetzgebungen wie der EU-Chatkontrolle, die vertrauliche Kommunikation erschweren und kriminalisieren will. Während herkömmliche Kryptographie unter Druck gerät, bietet Steganographie weiterhin eine Möglichkeit, vertrauliche Kommunikation zu ermöglichen. Wir nähern uns gemeinsam den Grundlagen der Steganographie und Kryptographie und zeigen, wie beide in modernen generativen KI-Anwendungen kombiniert werden können, um auch unter restriktiven rechtlichen Rahmenbedingungen vertrauliche Kommunikation zu gewährleisten. Hierfür verwenden wir eine Reimplementierung des Meteor-Projekts https://meteorfrom.space/, die ich im Rahmen einer Abschlussarbeit entwickelt habe. Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber auch technikfremde Themen bietet. Die NooK wird vom Chaotikum e.V. aus Lübeck und der Studierendenschaft der Uni Lübeck veranstaltet. https://nook-luebeck.de/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ CC BY NC ND 4.0 about this event: https://2024.nook-luebeck.de/talks/versteckte-botschaften-in-ki-systemen/

BioTerrorism Will Save Your Life with the 4 Thieves Vinegar Collective (38c3)

Fri, 27 Dec 2024 19:15:00 +0100

Governments have criminalized the practice of managing your own health. Despite the fact that for most of human history bodily autonomy, and self-managed health was the norm, it is now required that most aspects of your health must be mediated by an institution deputized by the state. Taking those rights back for yourself is then labeled "BioTerrorism". So be it. Let's learn how. We all know that custom, hand-made, artisan-crafted, boutique tools are always better than something factory made. A guitar, a wood chisel, a chef's knife, a built racing engine, a firearm, a suit, a pair of shoes. Given that this is so well-known, and so universally understood, it's peculiar at best that this is not seen by most people when it comes to medicine. It is however also true. Given, however, that the traditional rôle of pharmacists who used to have the freedom to compound custom medicines for the people they were serving has been revoked, and now despite their extensive training, have been limited to being able to do little more than count pills in most cases, we have to do this ourselves. The problem is that this has been criminalized. The moment you stop groveling for permission from medical authorities, and start becoming actively involved in managing your own health, you are a criminal in most countries in the world. Practicing medicine without a license, manufacture of drugs, possession of laboratory tools, possession of precursor chemicals... the list of felonies goes on. The choice is yours. Would you like to be the sickest law-abiding citizen, or the healthiest BioTerrorist? If you want the red pill, you'll have to manufacture it yourself. The blue pill is prescription-only, and if you manage to get a prescription, and you're rich maybe you can afford to buy it. Come learn about the long list of medications which went through the research and development processes, but are never going to be commercially available. Learn how to find more of these, and learn the many ways you can make them yourself. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/bioterrorism-will-save-your-life-with-the-4-thieves-vinegar-collective/

Wir wissen wo dein Auto steht (38c3)

Fri, 27 Dec 2024 22:05:00 +0100

Bewegungsdaten von 800.000 E-Autos sowie Kontaktinformationen zu den Besitzern standen ungeschützt im Netz. Sichtbar war, wer wann zu Hause parkt, beim BND oder vor dem Bordell. Welche Folgen hat es, wenn VW massenhaft Fahrzeug-, Bewegungs- und Diagnosedaten sammelt und den Schlüssel unter die Fußmatte legt? Was verraten Fahrzeugdaten über die Mobilität von Behörden, Ämtern, Ministerien, Lieferdiensten, Mietwagenfirmen, etc.? Wofür werden diese Daten überhaupt gesammelt? Wir zeigen Kurioses bis Bedenkliches - natürlich mit mehr Respekt für den Datenschutz, als diejenigen, die die Daten gesammelt haben. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/wir-wissen-wo-dein-auto-steht-volksdaten-von-volkswagen/

Wann klappt der Anschluss, wann nicht und wie sagt man Chaos vorher? (38c3)

Sat, 28 Dec 2024 13:50:00 +0100

Gut 1 Mrd. Datenpunkte zu Zugfahrten, wie kann man damit das Zugfahren verbessern? Wir versuchen, die Zuverlässigkeit von Zugverbindungen vor der Buchung zu prognostizieren. Um allen Bahnfahrenden zu helfen, wollen wir auf Basis eines Kriesel-Artigen Datensatz vorhersagen, welche Anschlusszug verpasst wird und welcher nicht. Dafür schauen wir uns die Verspätungsdaten ganz genau an, um prädiktive Faktoren für Verspätungsvorhersagen zu finden. Wir schauen uns ein paar Techniken für kategorische Datentypen an, bauen ein Machine-Learning-Modell und werden dann nachweisen, ob dieses etwas taugt. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/wann-klappt-der-anschluss-wann-nicht-und-wie-sagt-man-chaos-vorher/

Chatbots im Schulunterricht!? (38c3)

Sun, 29 Dec 2024 11:00:00 +0100

Was können die Tools wirklich, was machen sie mit der “Bildung”, und sollten wir dafür Steuergelder ausgeben? Spätestens seit dem Hype um ChatGPT werden KI-Tools als magische Technofixes für Lehrkräftemangel und soziale Segregation im Bildungswesen angepriesen. Mehrere Bundesländer haben zum Beispiel Flächenlizenzen für alle Lehrkräfte bei dem Hamburger Unternehmen "Fobizz" erworben. Das Unternehmen bietet auf Basis großer Sprachmodelle (meist GPT-3/4) und verschiedener bildgenerierender KIs eine ganze Reihe von Bots sowohl für SchülerInnen als auch für LehrerInnen an: Tools zur automatisierten Korrektur und Bewertung von Hausaufgaben, Chatbot-basierte individuelle Lern-Coaches, Avatare zur Gesprächssimulation ("mit Angela Merkel chatten"), oder Bots zur Erstellung von individualisiertem Unterrichtsmaterial. Wir haben das Fobizz-Tool zur automatisierten Korrektur von Hausaufgaben und Prüfungsleistungen detailliert unter die Lupe genommen. Funktioniert das wirklich? Wie wirkt sich das auf die Qualität des Unterrichts aus? Kann man LehrerInnen und SchülerInnen guten Gewissens darauf loslassen? – Unsere Antwort ist schockierend eindeutig: nein! Und es ist ein Skandal, dass Steuergelder dafür ausgegeben werden. Im Vortrag berichten wir von frustrierenden Irrfahrten wenn SchülerInnen den Korrekturen des KI-Tools folgen; von quasi ausgewürfelten Bewertungen (nach dem Motto: wenn dir die Note für diese Person nicht passt, drück einfach auf "re-generate"), und von der impliziten Botschaft an die SchülerInnen: Ihr müsst ChatGPT verwenden, sonst könnt ihr nicht gut abschneiden. Im zweiten Teil unserer Studie haben wir systematisch mit LehrerInnen gesprochen und ihre Perspektive auf KI im Schulunterricht untersucht. Wir besprechen, wie dystopisch und fehlgeleitet es ist, die sozialpolitischen Probleme im Bildungswesen mit Techno-Tools zu lösen. Während in Großbritannien bereits “teacher-free” KI-Klassen als Pilotprojekt ins neue Schuljahr gestartet sind, scheint man in Deutschland zwar immer noch auf Lehrkräfte im Klassenzimmer zu setzen – doch die Signale der Kultusministerien sind eindeutig: Lieber den Lehrkräftemangel mit den Services privater KI-Unternehmen fixen als echte politische Maßnahmen durchzusetzen, die den Beruf erträglicher und attraktiver machen. Dass das Schulsystem über KI-Tools noch weiter an private Unternehmensinteressen gebunden wird, hat unweigerlich steigende Ungleichheit und Intransparenz zur Folge. Da aktuell weitere Bundesländer an der Schwelle stehen, Lizenzverträge mit KI-Unternehmen für Lerntools abzuschließen, steht mit diesem Thema einiges auf dem Spiel. Unsere Studie zur "KI-Korrekturhilfe" von Fobizz kann hier runtergeladen werden: https://doi.org/10.48550/arXiv.2412.06651 Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/chatbots-im-schulunterricht/

Wie man auch mit FOSS Katastrophen-Warnungen bekommt (38c3)

Mon, 30 Dec 2024 16:40:00 +0100

Wetter- und Notfallwarnungen empfangen zu können kann Leben retten. Nutzende, die ihre Privatsphäre nicht Google oder Apple ausliefern möchten sollten dabei nicht im Nachteil sein. Wir berichten über den aktuellen Stand der FOSS Entwicklung und allerlei Beobachtungen rund um Notfallwarnungen. Die Flutkatastrophe vom Juli 2021 hat schmerzlich bewusst gemacht, wie wichtig die effektive Verteilung von Katastrophenwarnungen ist. Mit der Einführung von Cell-Broadcast in Deutschland gab es diesbezüglich eine deutliche Verbesserung, andere Verbreitungswege werden dadurch aber nicht weniger relevant. Apps wie NINA oder KATWARN stellen mehr Informationen zur Verfügung als in einer Cell Broadcast Nachricht übermittelt werden kann, und ermöglichen es auch, Regionen zu beobachten, in denen man sich nicht selbst aufhält. Diese Apps sind allerdings nur für die Plattformen von Google und Apple verfügbar, Nutzende freier Plattformen sind außen vor. Kein befriedigender Zustand. Was macht man in so einem Fall? Na, das, was man in so einem Fall immer macht: Wir bauen uns die Warn-Apps und die dazu nötige Infrastruktur halt selbst. Basis dafür bildet das Common Alerting Protocol (CAP) was seit vielen Jahren weltweit im Einsatz ist, und UnifiedPush als freie Alternative zu proprietären Push-Benachrichtigungen. Daraus ergibt sich ein Aggregations-Server der Warnmeldungen aus derzeit 100 Ländern einsammelt und Clients über Ereignisse in für sie relevanten Gebieten informiert. In diesem Talk erklären wir, wie CAP funktioniert, wie das in der Welt eingesetzt wird und welche merkwürdige Beobachtungen wir während der Entwicklung gemacht haben. Von den Entwicklern von FOSSWarn und dem FOSS Public Alert Server. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/wie-man-auch-mit-foss-katastrophen-warnungen-bekommt/

Net Neutrality: Why It Still Matters (More Than Ever!) (38c3)

Sun, 29 Dec 2024 00:55:00 +0100

Net Neutrality is a core pillar of the open internet. But we witness a coordinated, world-wide attack from the telecom industry on the very foundation that ties the internet together. The interconnection of autonomous parts of the internet used to be a non-political and non-commercial field that not many paid attention to. But through heavy lobbying activity we are on the brink of regulating interconnection in the EU, Brazil and India to establish a new payment obligation that would force everyone who wants to send a significant amount of data to customers. Telecom companies would end up being paid twice for the same traffic, from their customers and the content and cloud providers that want to reach them. This talk by Raquel Renno Nunes from Article 19 and Thomas Lohninger from epicenter.works gives insights into the global civil society fight against the telecom industry. We will lift the veil about the lobbying of companies like Deutsche Telekom, Orange and A1 and showcase strategies how NGOs fought back in Latin America and Europe. This war for the open internet is only heating up. European Commissioner Henna Virkkunen for Digital will have in her hands to uphold net neutrality in Europe. We want to extend our perspective by also looking at the successful fight in Latin America. Brazil in particular made their own experience with Zero-Rating tariffs that connected millions of Brazilians only to a selected few Apps instead of the whole internet. We will showcase how WhatsApp became a catalyst for the spread of fake news around the election of Jair Bolsonaro. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/net-neutrality-why-it-still-matters-more-than-ever/

Selbstverteidigungskurs Meme Warfare (38c3)

Mon, 30 Dec 2024 00:20:00 +0100

You are not immune to propaganda and the only winning move is to first recognize you are forced to play The Game Meme Warfare - das heißt schnelllebige, leicht konsumierbare Propaganda auf Social Media. Jeden Tag sind wir Ziel absichtlicher Meinungsmanipulation - noch mehr wenn es mal wieder auf eine Wahl zugeht. Eine der wichtigsten Punkte von Medienkompetenz ist Propaganda und sog. "Fake News" zu erkennen, informiert damit umzugehen und sich vor Einflussnahme zu schützen. Aber wie? Wenig Dinge begegnen uns in unserem Alltag heutzutage häufiger wie Werbung, Propaganda und Desinformation. Dass diese Dinge messbare Effekte auf die Psyche haben und nur deswegen so omnipräsent sein können, machen wir uns als Gesellschaft schon gar nicht mehr klar. Wir sehen aber immer wieder in den Wahlergebnissen und politischen Skandalen der letzen 10 Jahre wie die öffentliche Meinung gezielt beeinflusst wird und wir spüren wie da etwas kippt in unserer Demokratie. Der Talk ist eine kurze Einführung ins Thema und umfasst drei kurz und knackige Themenblöcke: Was ist überhaupt Propaganda und warum sollte mich das interessieren? Wie sieht Propaganda im Zeitalter von Internet und Social Media aus? Und wie kann ich mich und meine nächsten vor Beeinflussung schützen? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/selbstverteidigungskurs-meme-warfare/

Ten Years of Rowhammer: (38c3)

Mon, 30 Dec 2024 12:00:00 +0100

The density of memory cells in modern DRAM is so high that disturbance errors, like the Rowhammer effect, have become quite frequent. An attacker can exploit Rowhammer to flip bits in inaccessible memory locations by reading the contents of nearby accessible memory rows. Since its discovery in 2014, we have seen a cat-and-mouse security game with a continuous stream of new attacks and new defenses. Now, in 2024, exactly 10 years after Rowhammer was discovered, it is time to look back and reflect on the progress we have made and give an outlook on the future. Additionally, we will present an open-source framework to check if your system is vulnerable to Rowhammer. In 2014, Kim et al. reported a new disturbance effect in modern DRAM that they called Rowhammer. The Rowhammer effect flips bits in inaccessible memory locations just by reading the content of nearby memory locations that are attacker-accessible. They trigger the Rowhammer effect by accessing memory locations at a high frequency, using memory accesses and flushes. The root problem behind Rowhammer is the continuous increase in cell density in modern DRAM. In early 2015, Seaborn and Dullien were the first to demonstrate the security impact of this new disturbance effect. In two different exploit variants, they demonstrated privilege escalation from the Google Chrome NaCl sandbox to native code execution and from unprivileged native code execution to kernel privileges. Later, in 2015, Gruss et al. demonstrated that this effect can even be triggered from JavaScript, which they presented in their talk "Rowhammer.js: Root privileges for web apps?" at 32C3. Now, in 2024, it is precisely 10 years after Rowhammer was discovered. Thus, we believe it is time to look back and reflect on the progress we have made. We have seen a seemingly endless cat-and-mouse security game with a constant stream of new attacks and new defenses. We will discuss the milestone works throughout the last 10 years, including various mitigations (making certain instructions illegal, ECC, doubled-refresh rate, pTRR, TRR) and how they have been bypassed. We show that new Rowhammer attacks pushed the boundaries further with each defense and challenge. While initial attacks required native code on Intel x86 with DDR3 memory, subsequent attacks have also been demonstrated on DDR4 and, more recently, DDR5. Attacks have also been demonstrated on mobile Arm processors and AMD x86 desktop processors. Furthermore, instead of native code, attacks from sandboxed JavaScript or even remote attacks via network have been demonstrated as well. Furthermore, we will discuss how the Rowhammer effect can be used to leak memory directly, as well as related effects such as Rowpress. We will discuss these research results and show how they are connected. We will then talk about the lessons learned and derive areas around the Rowhammer effect that have not received sufficient attention yet. We will outline what the future of DRAM disturbance effects may look like, covering more recent effects and trends in computer systems and DRAM technology. Finally, an important aspect of our talk is that we invite everyone to contribute to solving one of the biggest unanswered questions about Rowhammer: What is the real-world prevalence of the Rowhammer effect? How many systems, in their current configurations, are vulnerable to Rowhammer? As large-scale studies with hundreds to thousands of systems are not easy to perform, such a study has not yet been performed. Therefore, we developed a new framework to check if your system is vulnerable to Rowhammer, incorporating the state-of-the-art Rowhammer techniques and tools. Thus, we invite everyone to participate in this unique opportunity at 38C3 to join forces and close this research gap together. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/ten-years-of-rowhammer-a-retrospect-and-path-to-the-future/

Lightning Talks Day 3 (38c3)

Sun, 29 Dec 2024 11:00:00 +0100

Lightning Talks are short lectures (almost) any congress participant may give! Bring your infectious enthusiasm to an audience with a short attention span! Discuss a program, system or technique! Pitch your projects and ideas or try to rally a crew of people to your party or assembly! Whatever you bring, make it quick! 11:00 Opening Lightningtalks 11:05 "Digital integrity of the human person, A new fundamental right",Alexis Roussel 11:10. RDP to RCE in 5 minutes,Dor Dali 11:15 Static Security Analysis Tools for Java,Markus Toran 11:20 From Apple litigation to Legal Eduation: how the FSFE can help you,Ana Galan 11:25 Does the Doomguy live in a simulation? Gaming and Quantum Mechanics,gabriele 11:30 C02 negative energy production,coalburner3000 11:35 Detecting Fake Base Stations with CellGuard on iOS,jiska 11:40 How to build a giant inflatable crab,rahix 11:45 Illegal Instruction into Machine Learning,Dennis Eisermann 11:50 iOS Inactivity Reboot,jiska 12:55 LLMs hallucinate graphs too!,Erwan 12:00 LibreOffice WASM & JS - Blending a C++ FOSS into a web app,kolAflash 12:05 Youth Hacking 4 Freedom,Sofía Aritz Albors Escobés 12:10 Shovel: leveraging Suricata for Attack-Defense CTF,quiet_table 12:15 A tiny self-contained piece of (home)automation infrastructure,luz 12:20 The helyOS Open Source Control Tower Framework - How to tell our robots what to do?,Felix 12:25 RDMA for No-Compromises Remote Desktop Experiences,Tim Dettmar Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/lightning-talks-tag-3/

Observability is just Contextualized Monitoring. Change my mind. (38c3)

Mon, 30 Dec 2024 14:45:00 +0100

The infrastructure industry has recently started co-opting a well-established software engineering practice and is doing so badly. Observability is being overhyped as something revolutionary that you can only practice using the latest new shiny tool. Real observability provides insight only when we take the time to understand what we’re monitoring, why it matters to our organization, and how each metric connects to our goals. This talk critiques the tool-centric approach that has taken over infrastructure monitoring, encouraging infrastructure teams to step out of their offices, touch grass, and talk with their organizations to answer the essential question: What is it you want monitored anyway and why? We’ll explore the power of applying observability as a practice, not just a product, and highlight F/L/OSS tools that offer powerful, adaptable solutions without the hype. If you’re tired of replacing one flashy dashboard with the next, or if you’ve ever wondered whether observability is really the game-changer it’s made out to be, this talk is for you. Let’s take a cue from our software engineering friends and approach observability as a collaborative, cross-functional practice that builds on strategy rather than the next tool. The term “observability” is everywhere, packaged as the next game-changer for infrastructure. But beneath the hype, it’s little more than contextualized monitoring—and the infrastructure industry has co-opted it badly. This talk takes a critical look at the tool-centric approach to observability that’s dominating the market and offers an alternative: an approach to observability based on strategy, not the latest tool. We’ll explore the origins of observability as a software engineering practice, where things went wrong as it moved into infrastructure, and how tool-driven marketing misses the point. From understanding why we’re monitoring to identifying what actually matters to our organizations, this session challenges infrastructure teams to rethink observability and ask essential questions that can transform monitoring into a true asset. Finally, we’ll dig into powerful F/L/OSS tools that already do the job well, without the hype or the hefty price tag, and consider how infrastructure teams can use and contribute to open-source observability practices that support genuine insight. Join me in side-stepping the hype, and discover how real observability could mean thinking like a hacker—using practical, adaptable, and community-driven solutions that prioritize understanding over just another flashy dashboard. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/observability-is-just-contextualized-monitoring-change-my-mind/

What's inside my train ticket? (38c3)

Mon, 30 Dec 2024 14:45:00 +0100

Ever wondered what data is stored inside DB print-at-home train tickets or those in your local transport association's app? Join me for the deep dive into digital railway ticketing you didn't know you needed. After getting my shiny new Deutschlandsemesterticket from University I was so annoyed with the quality of the SaarVV app that I set out to put my train tickets into Apple Wallet - whether the train companies wanted me to or not. What followed was several weeks of banging my head against the wall and googling various terms with "filetype:pdf" until I understood how they're encoded. This talk is a highly condensed executive summary of the most interesting parts of that journey - from the surprising to the downright weird. Finally, I'll cover how you can issue your own train tickets - for fun and absolutely no profit! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/what-s-inside-my-train-ticket/

identity theft, credit card fraud and cloaking services – how state-sponsored propaganda makes use of the cyber criminal toolbox (38c3)

Mon, 30 Dec 2024 13:50:00 +0100

The Russian disinformation campaign Doppelgänger is considered to be technically highly sophisticated. Research by CORRECTIV and Qurium has revealed that the Russian state relies on the toolbox of internet fraudsters for the dissemination of propaganda and fakes. A talk on the state's possible alliance with the criminal world - and on possibilities and limitations of countering it. Its goal is to undermine the support for Ukraine and polarize Western states: For more than two years, the Russian disinformation campaign Doppelgänger has been running on social networks and its own portals. Despite sanctions, the affected countries have not been able to stop the campaign. This is also because the architects of the campaign employ methods tried and tested by cyber criminals: Identity theft, use of stolen credit cards, bulletproof hosting, cloaking services and multi-level forwarding mechanisms. Research by CORRECTIV and Qurium based on data provided by Antibot4Navalny has uncovered the technical infrastructure of the campaign. The talk guides the audience through details of the new potential alliance between the Russian state and the criminal world. It raises questions about the accountability of authorities and platforms and opens the discussion to the possibilities and limits of resistance against malign foreign influences in the digital sphere. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/identity-theft-credit-card-fraud-and-cloaking-services-how-state-sponsored-propaganda-makes-use-of-the-cyber-criminal-toolbox/

Autoritäre Zeitenwende im Zeitraffer (38c3)

Sat, 28 Dec 2024 19:15:00 +0100

Die mittlerweile zerbrochene „Fortschrittskoalition“ hat zuletzt mit dem Bohrhammer Grundrechte abgetragen, als gäbe es einen Preis zu gewinnen. Wer als nächstes das Land regiert, ist offen. Aber progressiver wird es wohl kaum. Warum das keine plötzliche Entwicklung ist und was wir jetzt dagegen tun müssen. Was die Ampel-Koalition kurz vor ihrem Ende noch mit dem sogenannten „Sicherheitspaket“ einführte, davon hätte ein CSU-Hardliner wie Horst Seehofer vor einigen Jahren nur träumen können: Geflüchteten die Sozialleistungen streichen, biometrische Datenbanken anlegen, alle möglichen Datentöpfe zusammenrühren und analysieren. Ein Teil des Pakets scheiterte am Bundesrat - aber nur, weil es den meisten Ländern nicht weit genug ging. So etwas galt noch vor wenigen Monaten als tabu. In einer offenen Demokratie, dachte man, wird so etwas nicht kommen. Doch der autoritäre Überbietungswettbewerb im Namen der Sicherheit ist spätestens seit dem Anschlag von Solingen in vollem Gang. Politiker:innen konnten ein mutmaßlich islamistisches Attentat und Migration miteinander verrühren, als gäbe es da einen logischen Zusammenhang. Im Sturm der rassistischen Hetze und Kontroll-Fantasien waren Stimmen für Freiheits- und Menschenrechte kaum mehr zu hören. Jetzt, wo die Bundestagswahl früher kommt als geplant, ist das besonders fatal. Wir zeigen in unserem Vortrag, dass diese autoritäre Wende nicht plötzlich gekommen ist. Die jüngst geplanten Maßnahmen sind der Tiefpunkt einer Entwicklung, die schon seit Jahren von der Ampel vorangetrieben wurde. Und sie sind der Höhepunkt der Desillusionierung mit einer Regierung, die einst als „Fortschrittskoalition“ angetreten ist. Wir zeigen auch, dass es Zeit ist für radikalere Widerworte. Denn wir müssen unsere Freiheit heute dafür nutzen, dass auch morgen noch etwas davon bleibt. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/autoritre-zeitenwende-im-zeitraffer/

Die Geschlechter denen die sie hacken: Selbstbestimmungsgesetz, Pinke Listen, Überwachungsstaat (38c3)

Fri, 27 Dec 2024 12:55:00 +0100

Selbstbestimmung ein grundlegendes Prinzip des Hacken, ob technologisch oder geschlechtlich. Doch was wenn Selbstbestimmung nur bedingt umsetzbar ist- im besten Fall und mit staatlicher Repression als Standard? Selbstbestimmung selbst gemacht ist eine trans, inter, nonbinäre Aktionsgruppe deren Name Programm ist. Wir wollen das System hacken um wir selbst zu sein, Überwachungsfrei und mit (Kranken)Versicherung. Ob mögliche Informationsweitergabe/Offenbarungsgebot, für alle Menschen, ob Cis oder TIN*, das in letzter Minute für die Bezahlkarte aus dem mangelhaften „Selbstbestimmungs“Gesetz (SBSG) genommen wurde oder die Sabotage und Unmöglichmachung von geschlechtaffirmierender Gesundheitsversorgung- wir stehen wie migrantische Menschen im Mittelpunkt von staatlicher Überwachungsliebe und faschistischer Auslöschungsfantasien, jedoch unbeachtet im Chaos. Wir wollen dies ändern- hier, dieses Jahr und für alle Zeit. Wir werden den Prozess des SBSG ergründen, den Zusammenhang von (Un)Sicherheitspaket, Überwachungsmaßnahmen und Transsein herstellen wie auch ganz nebenbei illegalisierte Praktiken versichern, durch die Geschlechts-zusatzversicherung. Nur eure Bühne wird gebraucht und die Tastaturen unser aller Geschwister. Trans*, inter*, nicht-binäre (TIN*) Rechte und Datensicherheit gehen Hand in Hand. Das wollen wir in diesem Beitrag konkretisieren und für mehr Vernetzung zwischen Digitaler (Grund)rechte-/Datensicherheits-szene und TIN* Aktivismus eintreten. Dabei werden Zusammenhänge zwischen (Un)Sicherheitspaket, Überwachungsmaßnahmen und trans Geschlechtlichkeit erkundet und mit konkreten Gesetzesvorschlägen und aktivistischen Aktionen beantwortet, wie auch ein Einblick in die Teils starken parallelen In den Gesetzgebungsprozessen ermöglicht. Seit 01.11.2024 ist in Deutschland das neue Selbstbestimmungsgesetz (SBGG) in Kraft, das die Änderung von Namens- und Geschlechtseinträgen für TIN* Personen erleichtern soll. Drei Tage vor der Verabschiedung des SBGG am 12.4.2024 wurde dabei das sogenannte “Offenbarungsgebot” im Tausch für die Bezahlkarte für Asylbewerbende aus dem Gesetz herausverhandelt: Insbesondere das Bundesinnenministerium wollte gern eine automatische Weiterleitung persönlicher Daten, darunter Adresse, alter und neuer Geschlechtseintrag, an elf staatliche Institutionen, darunter BKA, Verfassungsschutz, [wie heißen die nochmal richtig: Schwarzgelddezernat und illegale Waffen]. Zu den daraus resultierenden “pinken Listen” ist es nicht gekommen. Allerdings nur unter der Zusicherung, dass die entsprechende Überwachungsmaßnahme für alle Personenstandsänderungen verbindlich wird - das umfasst Eheschließungen, Adoption etc. Eine entsprechende Absichtserklärung sollte im Dezember in den Bundestag gegeben und beschlossen werden, letztlich und vermutlich aber durch das Ende der Ampel vereitelt wurde. Ob, wie und in welcher Form dieses Vorhaben weiterbesteht ist zum jetzigen Zeitpunkt unklar. Datensicherheit und TIN* Rechte überschneiden sich hier unmittelbar. TIN* Personen werden gegen die Privatsphäre aller Menschen instrumentalisiert. In diesem Beitrag wollen wir darlegen, wie es dazu gekommen ist. Wir wollen auch erörtern, was daran schlecht ist und was wir tun können. Dazu werden wir unter andere die Abschnitte und Anschlussmöglichkeiten zur Datensicherheit aus unserem selbst geschriebenen, community produzierten Selbstbestimmungsgesetz 2.0 vorstellen. Wir wollen aber auch Vorschläge zu konkreten aktivistischen Aktionen machen. Dafür brauchen wir eure Bühne - und die Tastaturen unser aller Geschwister. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/die-geschlechter-denen-die-sie-hacken-selbstbestimmungsgesetz-pinke-listen-berwachungsstaat/

From Convenience to Contagion: The Libarchive Vulnerabilities Lurking in Windows 11 (38c3)

Mon, 30 Dec 2024 13:50:00 +0100

In the October 2023 update, Windows 11 introduced support for 11 additional compression formats, including RAR and 7z, allowing users to manage these types of files natively within File Explorer. The enhancement significantly improves convenience; however, it also introduces potential security risks. To support these various compression formats, Windows 11 utilizes the libarchive library, a well-established open-source library used across multiple operating systems like Linux, BSD, and macOS, and in major projects such as ClickHouse, Homebrew, and Osquery. The libarchive has been continuously fuzzed by Google’s OSS-Fuzz project, making it a time-tested library. However, its coverage in OSS-Fuzz has been less than ideal. In addition to the two remote code execution (RCE) vulnerabilities disclosed by Microsoft Offensive Research & Security Engineering (MORSE) in January, we have identified several vulnerabilities in libarchive through code review and fuzzing. These include a heap buffer overflow vulnerability in the RAR decompression and arbitrary file write and delete vulnerabilities due to insufficient checks of libarchive’s output on Windows. Additionally, in our presentation, we will reveal several interesting features that emerged from the integration of libarchive with Windows. And whenever vulnerabilities are discovered in widely-used libraries like libarchive, their risks often permeate every corner, making it difficult to estimate the potential hazards. Moreover, when Microsoft patches Windows, the corresponding fixes are not immediately merged into libarchive. This delay gives attackers the opportunity to exploit other projects using libarchive. For example, the vulnerabilities patched by Microsoft in January were not merged into libarchive until May, leaving countless applications exposed to risk for four months. The worst part is that the developers might not know the vulnerability details or even be aware of its existence. To illustrate this situation, we will use the vulnerabilities we reported to ClickHouse as an example to demonstrate how attackers can exploit the vulnerabilities while libarchive remains unpatched. We will introduce the new Compressed Archived folder feature in Windows 11 and review the vulnerabilities of the previous Compressed (zipped) folder. Next, we will explain how we analyzed the libarchive that Windows 11 introduced to support various compression formats. Despite extensive fuzz testing by OSS-Fuzz, we discovered several vulnerabilities in libarchive through code review and fuzzing, including an RCE (Remote Code Execution) vulnerability. Finally, we will use the ClickHouse case to explain how we triggered an RCE vulnerability in ClickHouse while the patch had not been merged upstream. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/from-convenience-to-contagion-the-libarchive-vulnerabilities-lurking-in-windows-11/

From Simulation to Tenant Takeover (38c3)

Mon, 30 Dec 2024 11:00:00 +0100

All I wanted was for Microsoft to deliver my phishing simulation. This journey took me from discovering trivial vulnerabilities in Microsoft's Attack Simulation platform, to a Chinese company to which Microsoft outsourced its support department that wanted all my access tokens. I finally ended up hijacking remote PowerShell sessions and obtaining all data from random Microsoft 365 tenants, all the while reeling in bug bounties along the way. This talk is the result of what happens when you ask a hacker to simply automate sending out a phishing simulation. My first attempt with Microsoft's new Attack Simulation platform resulted in three bug bounties for the most trivial vulnerabilities and no more faith in the product. Then I tried building a phishing simulation program myself and the last thing I needed was to allowlist my IP address in Exchange Online. I ended up in a rabbit hole where I discovered that Microsoft outsourced their support department to a Chinese company that wanted all my access tokens. I then tried intercepting client-side requests made by the Security & Compliance center with the goal of replaying these to a backend API, only to discover that by fiddling with some parameters I could now hijack remote PowerShell sessions and access Microsoft 365 tenants that were not mine. Tenants where I could now export everything, e-mail, files, etc. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/from-simulation-to-tenant-takeover/

Gala Be Need Inn - 38c3 Ausgabe (38c3)

Sun, 29 Dec 2024 20:45:00 +0100

Kein Congress ohne "Gala Be Need Inn" , der deutschsprachige Quizpodcast dessen Name ein Anagramm des Originals ist. Wir klären die wirklich wichtigen Fragen des Lebens: Was ist ein Alarmstuhl, was ist die Kotzkurve und wieso haben Schaffner in Frankreich Knallerbsen dabei? Seid dabei, auf der Bühne oder im Publikum! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/gala-be-need-inn-38c3-ausgabe/

OMG WTF SSO - A beginner's guide to SSO (mis)configuration (38c3)

Mon, 30 Dec 2024 00:50:00 +0100

A couple years ago I knew basically nothing about Single Sign-On but now I'm talking at 38c3 about it! Come find out how you too can go from beginner to the question-asker who protects your hackerspace/company/etc. from bad SSO implementations. Single Sign-On (SSO) is sold as a way to • centralize managing your organization’s users, • make life easier for your colleagues, and • enforce consistent security standards. But SSO protocols are just ways for an identity provider to share information about an authenticated identity with another service. Me having a way to tell my vendor “yeah, that’s Bob” doesn’t tell me what the vendor does with this information, or if the vendor always asks me who’s coming in the door. A bad SSO implementation can make you think you’re safer, while hiding all the new and fun things that have gone wrong. To get the most out of implementing SSO, I need to know what I’m trying to accomplish and what steps I need to follow to get there. To illustrate why SSO needs to be set up carefully, for each of the things you need to do right, I’ll give you some fun examples of creative ways you and your vendor can do this wrong. We all learn from failure, right??? I’m sharing this info because this year I got deeply involved in the SSO setup for several vendors at work. It turns out that I’m good at asking weird questions, and it’s an extremely valuable thing to do. If you know how things should be, then you know where they could be broken, and you can ask your vendors (and your colleagues!) “weird questions” before an adversary does. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/omg-wtf-sso-a-beginner-s-guide-to-sso-mis-configuration/

KI nach dem Kapitalismus: Hat ChatGPT in der besseren neuen Welt einen Platz? (38c3)

Sun, 29 Dec 2024 17:35:00 +0100

Unsere Welt funktioniert nur, wenn sich immer neue Bereiche finden, in denen Profite erbeutet werden können. Nach Blockchain, Metaverse und Web3 ist "Künstliche Intelligenz" die neueste Wette der Tech-Investoren auf kräftige Gewinne. Ob "KI" tatsächlich irgendeinen gesellschaftlichen Wert hat, ist dabei völlig nebensächlich. Was tun wir also mit "KI" nach dem Kapitalismus? Brauchen wir Large Language Models überhaupt in einer Welt, die radikal auf Kooperation statt Konkurrenz, auf Bedürfniserfüllung statt Profit und auf Solidarität statt Privateigentum basiert? In diesem Talk besprechen wir, was gegenwärtige "KI" ist, wie sich ökonomische Macht in "KI" zeigt und wie sich "KI" in die breitere Debatte um Technologiekritik einordnet. Wir fragen uns, was man mit Mustererkennung, Deep Learning und Sprachmodellen überhaupt anfangen will in der besseren Welt nach der Revolution und ob uns eine Technologie wie "KI" auf dem Weg dahin helfen kann oder eher behindert. Der Talk wird zu gleichen Teilen von Malte Engeler und Sandra Sieron gehalten. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/ki-nach-dem-kapitalismus-hat-chatgpt-in-der-besseren-neuen-welt-einen-platz/

Howto Digitale Bildungspolitik (38c3)

Sun, 29 Dec 2024 19:45:00 +0100

Wie funktioniert digitale Bildungspolitik? Was läuft auf Länder-, Bundes- oder Kommunalebene und wie kann man sich sinnvoll einbringen damit Schulen richtig digital werden? Darüber sprechen cyber4EDU in dieser Episode des Digital Education Cyber Talks Podcast mit zwei Expert/innen aus dem Bildungsapparat. https://dect42.de/ https://cyber4edu.org/ Die Digitalisierung der Schulen besteht aus einem Mosaik an Anforderungen und zu verstehen wie diese eigentlich zusammenhängen und wer wofür zuständig ist, ist alles andere als einfach: Infrastruktur, Geräteausstattung, digitale Verwaltung, Bildungsapps, Datenschutz, offene Bildungsressoucen (OER), digitale Kompetenzen, Medienbildung und jetzt auch noch KI. Sich im digitalen Bildungskontext zu engagieren kann ziemlich undurchsichtig und herausfordernd sein. Um besser zu verstehen wie das alles zusammenhängt wollen wir in diesem Podcast besprechen wie digitale Bildungspolitik funktioniert, wie Föderalismus, das BMBF, die Kultusministerkonferenz und der Digitalpakt Schule zusammenhängen und wie man sich als Aktivist oder Verein sinnvoll einbringen kann. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/howto-digitale-bildungspolitik/

The whois protocol for internet routing policy, or how plaintext retrieved over TCP/43 ends up in router configurations (38c3)

Sun, 29 Dec 2024 14:45:00 +0100

Whois is one of the historic internet protocols. There are two types of whois databases on the Internet: domain names, and internet numbers (IP addresses, autonomous system numbers). In this talk, we introduce the history of the whois databases for Internet numbers and explain how they are used (and what is ongoing to replace this way of accessing this information). Spoiler: yes, people still use MD5 to authenticate updates, and still put policy derived from data retrieved over unauthenticated protocols in their router configurations. Whois is one of the older protocols still in use on the Internet, playing a critical role in managing and distributing information about domain names and Internet numbers, such as IP addresses and autonomous system numbers (ASNs). This talk focuses on using whois for internet routing information, aka as an internet routing registry. It's well known that BGP is a trust-based protocol for distributing internet routes. When network operators configure a BGP link with a peer [another network], they often want to restrict the routes accepted from that peer; A small customer is very unlikely to be the upstream network of a hyperscaler. But how do you gather information about what prefixes and networks are likely announced by that network? The session will start by exploring what whois databases contain ("RPLS - Routing Policy Specification Language"), and how they have a role as a database for internet routing registry (IRR) information. We explain the various (authoritative and non-authoritative) IRR databases and how they differ. We then continue by describing the routing policy present in these databases. After introducing the information present, we will explain how this policy is applied to routers... as well as the surprisingly fragile aspects of this mechanism (unauthenticated retrieval channels, updates via email with plaintext passwords). Finally, we introduce the more modern alternatives under development; not only for access to the same IRR information (Registration Data Access Protocol) but also the Routing Public Key Infrastructure, that is currently actively being deployed. We will gloss over the RPKI architecture, and explain that it stores part of the information available in the IRR (and how policy from this distributed system is fed into routers), including the trade-off (centralisation). Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/the-whois-protocol-for-internet-routing-policy-or-how-plaintext-retrieved-over-tcp-43-ends-up-in-router-configurations/

Das Technikjahr 2024 - Ki, Klima, Crypto (mspr0 & Ali Hackalife) Auch-interessant! (38c3)

Sun, 29 Dec 2024 16:00:00 +0100

Ali Hackalife (Auch-interessant!) und Michael Seemann (wmr) sprechen über das vergangene Technikjahr. Der Auch-interessant! Podcast (https://auch-interessant.de ) ist ein Podcast der sich sowohl mit Technik als auch Gesellschaftsthemen befasst. Öfter war der Computer-Philosoph Michael Seemann (mspr0) zu Gast. Auf dem 38c3 treffen sich Ali und mspr0 um auf das vergangene Technikjahr zurück zu schauen. Wie geht es Alis Technik-Optimismus nach diesem Jahr. Und was lief anders als erwartet. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/das-technikjahr-2024-ki-klima-crypto-mspr0-ali-hackalife-auch-interessant/

Fearsome File Formats (38c3)

Sat, 28 Dec 2024 14:45:00 +0100

Specifications are enough, they say… 10 years after 31c3's "Funky File Formats" … Have things improved? With so many open-source parsers being tested and fuzzed, and widely available specs, what could go wrong with file formats nowadays ? Nothing to fear, right? Let's explore even darker corners of their landscape! Even extreme simplicity can misleadingly lead to unexpected challenges. And at the other end of the spectrum, new complex constructs appeared over the years: near-polyglots, timecryption, hashquines … Even AI is an element of the game now. Let's play FileCraft, and enjoy the ride! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/fearsome-file-formats/

Erpressung aus dem Internet - auf den Spuren der Cybermafia (38c3)

Sat, 28 Dec 2024 12:55:00 +0100

Manchmal sind es tausende, manchmal sind es zehntausende von Euros, um die vor allem junge Männer aus Deutschland bei Onlinescams betrogen werden. Die Scham ist zu groß, um darüber zu sprechen, schließlich ist „Mann“ selbst schuld daran. Es geht um Erpressung mit Nacktfotos, Liebes-Fallen und zweifelhafte Investments, die auf dem Vormarsch sind. Der Vortrag folgt den Spuren der Täter:innen und enthüllt eine prosperierende Scam-Industrie in Asien, fest in den Händen der chinesischen Mafia. Aus Scham wollte er eigentlich gar nicht darüber sprechen. Sebastian (26 Jahre) flirtet mit einer Unbekannten aus dem Internet, sie schickt ihm Nacktfotos, fragt, ob auch er sich vor der Kamera für sie auszieht. Er fühlt sich geschmeichelt, sie verabreden sich zum Videocall, er masturbiert vor laufender Kamera. Davon werden Screenshots erstellt und eine Männerstimme fordert ihn auf 2.000 Dollar zu bezahlen, sonst würden die Bilder an all seine Instagram Freunde gehen. „Ich habe zu leichtsinnig im Internet vertraut“, sagt er rückblickend. Für viele Betroffene folgen neben der Scham und dem finanziellen Verlust Angstzuständen und Depressionen, immer gepaart mit dem Gefühl großer Hilflosigkeit, weil sich die Spuren im Netz verlieren. Ausgehend von den Opfern folgen wir den Spuren von Onlineverbrechern, bei denen vor allem (junge) Männer ausgenommen werden. Es gelingt uns Kontakt aufzubauen, zu einem der selbst Täter war. „Neo“ nennt er sich: Der junge Chinese war auf ein verlockend klingendes Jobangebot als englisch Übersetzer eingegangen, wurde gekidnapped und in eine sogenannte Betrugsfabrik verschleppt. Er berichtet und belegt mit Fotos sowie zahlreichen Unterlagen, wie in Myanmar entlang der Grenze von Thailand hunderttausende Menschen gefangen gehalten und ausgebeutet werden. Der junge Chinese erzählt von Folter und davon, wie sie dort hunderte Menschen im Internet und am Telefon pro Tag abzocken mussten. „Wer nicht gehorchte, bekam Schläge“, sagt er. NGOs und andere Überlebende berichten von Elektroschocks und einem ausgeklügelten System von Menschenhandel und Ausbeutung. Interpol spricht inzwischen von einer aufsteigenden Industrie, die in der gesamten Region Südostasien an Umsatz inzwischen den Drogenhandel abgelöst hat. Rasante technische Entwicklungen, wie Übersetzungsprogramme, Bots und mit KI generierte Fotos und Videos sorgen dafür, dass sich der Betrug immer weiter globalisiert und nach Deutschland strahlt. "Neo" gelingt es schließlich zu fliehen und hunderte interne Dokumente und Fotos aus der "Betrugsfabrik" heraus zu schmuggeln. Der Talk gibt einen Einblick in diese verborgene Welt. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/erpressung-aus-dem-internet-auf-den-spuren-der-cybermafia/

Gemeinwohlorientierte Forschung mit KI: Missbrauch eindämmen durch Zweckbindung für KI-Modelle (38c3)

Sat, 28 Dec 2024 12:00:00 +0100

Trainierte KI-Modelle sind mächtige Werkzeuge, die in Wissenschaft und Forschung oft für gute Zwecke gebaut werden. Aber wie alle Werkzeuge können sie auch zweckentfremdet werden – in Bereichen, für die sie nicht gedacht waren, in denen sie profitgierigen Interessen dienen und gesellschaftlichen Schaden anrichten. Vor dem Hintergrund des Trends von "open source" AI ist die Gefahr der unkontrollierten Zweckentfremdung von KI-Modellen enorm gestiegen. Wir zeigen: Das Risiko einer missbräuchlichen Sekundärnutzung von für Forschungszwecke trainierten KIs ist aktuell die größte regulatorische Lücke, trotz DSGVO und AI-Act. Zugleich ermöglicht das Zweckentfremden von Modellen die immer weiter wachsende Machtposition von Big Tech. Um das Problem zu bekämpfen, muss das Prinzip "Zweckbindung" für das Zeitalter der KI geupdated werden. Skandale wie die Weitergabe von Forschungsdaten der UK Biobank an Versicherungsunternehmen zeigen ein typisches, aber oft übersehenes Risiko im Zusammenhang mit KI: Modelle und Trainingsdaten, die eigentlich dem Gemeinwohl dienen sollten, werden im Schatten der öffentlichen Aufmerksamkeit, jedoch ohne geltendes Recht zu verletzen, für diskriminierende, manipulative und profitorientierte Zwecke zweitverwendet. Wer etwa in der medizinischen Forschung ein Modell zur Erkennung von psychischen Krankheiten anhand von Audiodaten (Stimmaufzeichnung) baut, kann dieses Modell auch außerhalb des medizinischen Kontexts auf beliebige Individuen anwenden – und zum Beispiel bei Video-Bewerbungsgesprächen ein automatisiertes Risiko Scoring damit machen (unsere Beispiele zeigen, dass daran gerade großes Interesse besteht). Der Besitz trainierter KI-Modelle stellt eine enorme Konzentration von Informationsmacht dar – und mit dieser Macht geht ein Missbrauchspotenzial einher, wenn die Tools z.B. in einen kommerziellen Kontext übertragen werden. Zum Schutz unserer Gesellschaft vor Missbrauch KI-basierter Forschung müssen wir deshalb die Zirkulation trainierter KI-Modelle und anonymisierter Trainingsdaten unter demokratische Kontrolle stellen. Wir brauchen ein Regulierungskonzept, das offene Forschungszwecke ermöglicht und gleichzeitig kommerziellen Missbrauch verhindert. Modelle mit allgemeinem Verwendungszweck wie sie die KI-VO legitimiert, sollte es nicht geben. Als Lösung holen wir das alte, bei der Industrie verhasste und in der Politik fast schon vergessene Datenschutzprinzip der Zweckbindung aus der Mottenkiste und aktualisieren es für die Kontrolle von KI. Unser Regulierungsvorschlag einer "Zweckbindung für KI-Modelle" beruht auf unserer mehrjährigen interdisziplinären Forschung zwischen Ethik, Rechtswissenschaft und Informatik. Background Readings und weitere Infos: https://purposelimitation.ai Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/gemeinwohlorientierte-forschung-mit-ki-missbrauch-eindmmen-durch-zweckbindung-fr-ki-modelle/

5 Jahre nach Ibiza (38c3)

Sun, 29 Dec 2024 22:05:00 +0100

Wie Rechtspopulisten in Österreich innerhalb von 5 Jahren zurück zu alter Größe kamen und sogar die Wahl gewannen. Die Ibiza-Affäre gilt als einer der größten politischen Skandale in der Geschichte der Zweiten Republik Österreich. Das heimlich aufgezeichnete Ibiza-Video zeigt den damaligen FPÖ-Chef Heinz-Christian Strache und FPÖ-Politiker Johann Gudenus in einer Villa mit einer vermeintlichen Nichte eines russischen Oligarchen. Seit dem ist viel passiert. Zu wenig hat sich zum Guten gewandt aber immerhin ist mittlerweile zumindest oberflächlich klarer geworden wie sehr die einzelnen Skandale die die Alpenrepublik erschütterten seit dem in einander verwoben sind. Die Umwälzungen der letzten Jahre nicht nur in Österreich erlauben es Parallelen zu ziehen auch über die Landesgrenzen hinweg. Die Kausen um den früheren Wirecard Vorstand Jan Marsalek, seines Zeichens zufällig auch Österreicher, lassen sich mit dem Gesamteindruck von Ibiza schlüssig verknüpfen. Die geopolitischen Umwälzungen wie auch die politischen Herausforderungen die selbige für Europa mit sich bringen sollten am Beispiel von der Alpenrepublik nicht nur als Belustigung dienen. Wie schnell und wie weit eines der Vorbilder der EU Länder unter den richtigen Gegebenheiten und Einflüssen sich zum Paria wandeln kann sollte als ernstzunehmende Warnung auch in Deutschland verstanden werden. Wenn die Säulen der Demokratie ins Wanken geraten ist es oft sehr viel schneller beim Ernstfall als die meisten es sich einreden wollen. Österreich mag klein sein, manchmal auch speziell aber die Faktoren die innerhalb kürzester Zeit von einem Musterschüler ein Sorgenkind machten sind nicht kleinzureden. Fünf Jahre später, im September 2024, wurde die FPÖ mit 29,2 Prozent erstmals Sieger bei einer Parlamentswahl. Mittlerweile steht sie in Prognosen bei über 35% und der allgemeine politische Diskurs hat sich meilenweit verschoben. Es ist Vorsicht geboten. Nicht nur in Österreich Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/5-jahre-nach-ibiza/

TETRA Algorithm set B - Can glue mend the burst? (38c3)

Sun, 29 Dec 2024 17:35:00 +0100

In August 2023, we published the TETRA:BURST vulnerabilities - the result of the first public in-depth security analysis of TETRA (Terrestrial Trunked Radio): a European standard for trunked radio globally used by government agencies, police, military, and critical infrastructure. Authentication and encryption within TETRA were handled by proprietary cryptographic cipher-suites, which had remained secret for over two decades through restrictive NDAs until our reverse-engineering and publication. This talk is not TETRA:BURST, but dives into the latest TETRA revision introduced in 2022. Most notably, it contains a new suite of cryptographic ciphers. Of course the cipher available for critical infrastructure and civilian use (TEA7) is intentionally crippled, and of course these ciphers were to be kept secret, but this decision was overruled due to public backlash following our publication last year. In this talk we will present a practical attack on the TEA7 cipher, which while taking a 192-bit key, only offers 56 bits of security. Furthermore, we point out improvements and shortcomings of the new standard, and present an update on TEA3 cryptanalysis, where we previously found a suspicious feature, and draw a parallel with its successor TEA6. All in all, in this short and relatively crypto-forward talk, we assess with all-new material whether the new TETRA standard is fit for its intended purpose. This crucial technology seeks to once again take a very central role in our society for decades to come, and its cryptographic resilience is of fundamental importance - for emergency networks, but possibly even more for our critical infrastructure and associated processes. The new authentication suite (TAA2, as opposed to the old TAA1) features longer keys and completely new cryptographic primitives. The new Air Interface Encryption algorithms (TEA set B) consist of three new ciphers, for differing target audiences. TEA5 is intended for European emergency networks, and is the successor of TEA2. TEA6 is intended for friendly extra-european emergency and military networks, and replaces TEA3. Lastly, TEA7 is the only one available for use by critical infrastructure and other civil applications, and replaces TEA1. Initially, ETSI envisaged to keep the new algorithms secret again, once more eliminating the possibility of public scrutiny. However, following our publication, a promise was made to release the algorithms to the public for inspection. Additionally, a statement was made that TEA7 has a reduced effective strength of 56 bits. As mentioned, this algorithm is the successor to TEA1, which has an effective strength of only 32 bits, in a time where 40 bits was the maximum for freely exportable crypto. In TETRA:BURST, we presented several vulnerabilities found in the old standard. Obviously, the backdoored TEA1 algorithm is now replaced by a new cipher, and we will dive into how this works, how it can be attacked, and what the practical implications will be. Second, we previously presented a method of decrypting and injecting traffic on all network types, even those using the stronger TEA2 and TEA3 algorithms. This relies on the lack of cryptographic integrity guarantees on message - something that is still unaddressed. We discuss how this leads to issues. Lastly, TETRA:BURST described a way of decrypting the pseudonymized identities of TETRA users (first demonstrated at the 37C3), allowing for a powerful intelligence capability. We will discuss how the new standard seeks to resolve this issue. Lastly, we previously recommended caution regarding TEA3, due to a suspicious feature in its design. While no full attack will be presented, progress in its cryptanalysis was made, which we will discuss during the talk. And, there is an interesting parallel to be drawn between the suspicious quirk in TEA3 and the design of its successor, TEA6. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/tetra-algorithm-set-b-can-glue-mend-the-burst/

Der Milliarden-Steuerraub Cum/Ex (38c3)

Sun, 29 Dec 2024 16:40:00 +0100

Nachdem kurz erklärt wird, was Cum/Ex eigentlich ist, widmet sich der Vortrag zunächst der Frage, wie die Aufklärung in diesem international organisierten Fall schwerer Steuerhinterziehung überhaupt gelingen konnte und was noch zu tun ist. Wer sind die Akteure auf Seiten der Finanzbranche und wie ticken die Täter? Anschließend wird der generelle Umgang des Staates mit Wirtschaftskriminalität dargestellt und Lösungsansätze entwickelt. Dabei geht es auch um die Frage, was jeder Einzelne tun kann und warum die NGO Finanzwende ein wichtiger Ort sein kann, um politische Veränderungen bei finanzpolitischen Themen zu bewirken. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/der-milliarden-steuerraub-cum-ex-wie-schdlich-ist-wirtschaftskriminalitt-fr-unsere-gesellschaft/

Mushroom-DJs, Strong AI & Climate Change: Connecting the Dots with Artistic Research (38c3)

Sun, 29 Dec 2024 22:05:00 +0100

The exploratory nature of artistic research can aide in the production of knowledge. Sometimes, this takes a detour through music-making mushrooms and making moonshine, sometimes it deals with societal reverberations of AI usage or how lithium extraction affects the planet. This talk gives an insight on how we do technology-assisted artistic research at ZKM | Hertzlab, the artistic research & development department of the Center for Art and Media, Karlsruhe. Artistic research takes the exploratory impulse of art and combines it with the wish for knowing the world that characterizes scientific research. It is neither science communication, nor purely artistic practice - it is located somewhere in between. As a field of its own, artistic research is still relatively young; at ZKM | Center for Art and Media, Karlsruhe, we explore what this means in the context of one of Europe's oldest media art institutions. Our six themes - lifecycles, connect, a common(s) world, ai-lab, post-human world, fellow futures - guide us in what we hope is a contribution to larger discourses from the point of view of art. With examples and projects, this talk will illuminate artistic research practices, its benefits and challenges and how having a hacker mindset is the first step into becoming an artistic researcher. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/mushroom-djs-strong-ai-climate-change-connecting-the-dots-with-artistic-research/

Gefährliche Meinung – Wenn Wälder brennen und Klimaaktivist*innen im Knast sitzen (38c3)

Sun, 29 Dec 2024 11:00:00 +0100

Eine Geschichte über den Kampf für Walderhalt in der Klimakrise, die unnötige Erweiterung eines klimaschädlichen Stahlwerks und einer vermutlich illegalen Genehmigung für eine vorgezogene Rodung. Wie wir dafür ins Gefängnis kamen. Und wie das Bundesverfassungsgericht die Gefängnisleitung zwang, mich vorzeitig wieder zu entlassen. Aktivistische Kritik buchstäblich an der zuständigen Bezirksregierung endete in einem Gerichtskrimi durch die AugsburgerJustiz, die sich nach wie vor entschlossen zeigt, die laut Bundesverfassungsgericht besonders geschützte Machtkritik der Aktivist*innen möglichst hart zu bestrafen. Ein Vortrag über den kreativen Umgang mit Repressionen mit Einblicken hinter die Gefängnismauern. Vom Kampf der Augsburger Justiz gegen kreativen Protest für den Erhalt der Lebensgrundlagen. Memes inklusive. 🧮 Die Regierung von Schwaben genehmigte im Herbst 2022 die Rodung eines besonders geschützten Bannwalds -- trotz laufender Rechtswidrigkeitsprüfung des gesamten Vorhabens durch Bayerns höchstes Verwaltungsgericht. Denn der Besitzer des angrenzenden Stahlwerks, der zufällig mit seinem Lobbyverband auch größter Spender der CSU ist, Max Aicher, wollte sein klimaschädliches Stahlwerk in den Bannwald hinein erweitern. Daraufhin demonstrierten wir an der Regierung von Schwaben und "besetzen" deren Behördenflur symbolisch mit einer satirischen Botschaft. Einen Bannwald roden? – Frech! Wir werden davon erzählen, wie wir für unsere Kritik zu Haft verurteilt wurden, die Haft aber zunächst nicht antraten, sondern eine Woche durch die Öffentlichkeit geisterten, erst eine Woche später eine Lücke im Terminplan entdeckten und dann doch in der Arrestanstalt auftauchten. Samuel gibt Einblicke hinter die Mauern der Jugendarrestanstalt und berichtet, wie es den Menschen dort drinnen geht, die dort durch psychischen Schmerz "resozialisert" und "erzogen" werden sollen. Über Brief und Zettel aus dem Fensterschlitz konnten Unterstützer*innen von außen den Kontakt halten. Eine Gruppe Nerds baute einen FM-Transmitter und versuchte, ein eigenes Knastradio für Samuel einzurichten. Nach zwei Wochen wurde Samuel plötzlich nachts mit all seinen Büchern vor die Tür gesetzt, denn das Bundesverfassungsgericht entschied: Meinungsfreiheit gilt auch in Augsburg. Die Urteile aus Augsburg waren rechtswidrig, nicht mit dem Grundgesetz vereinbar. Ein eindrucksvolles Beispiel, wie in Deutschland Protest mitunter als „Bedrohung der öffentlichen Ordnung und Sicherheit“ konstruiert und eingeschränkt wird. **Weitere Infos auf [lohwibleibt.de](https://www.lohwibleibt.de/)** -- ergänzend möchten wir noch mitgeben: Der Fall Augsburg ist ein gutes Beispiel, wie der "Rechtsstaat" Kapitalinteressen verteidigt. Zwei Wochen Knast sind aber nichts gegen den Verlust der Lebensgrundlagen, der insbesondere Menschen im globalen Süden betrifft. Es ist weiter unsere Verantwortung, uns für eine klimagerechte Welt einzusetzen. Lasst euch nicht einschüchtern und kämpft weiter! Gerichte sind zum Essen da. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/gefhrliche-meinung-wenn-wlder-brennen-und-klimaaktivist-innen-im-knast-sitzen/

Attack Mining: How to use distributed sensors to identify and take down adversaries (38c3)

Sun, 29 Dec 2024 23:00:00 +0100

Ever wondered why your web server seems to be under constant attack from what feels like everyone on the internet? Me too! Join me in this session where we'll explore the data of millions of attacks from hundreds of sensors around the world, to identify who is attacking us from where and why. Additionally, we will have a look into how we can use that data to get abusive systems taken down, and how successful this approach actually is. Buckle up for a deep dive into the constant battle to protect systems on the internet against adversaries gaining access, and how you can help make the internet a safer place! Looking at the 2024 M-Trends report, brute force is still one of the main reasons for adversaries to gain access and compromise companies. In fact, 6% of all initial access is done via brute force. Knowing this, as well as that attackers are constantly trying all sorts of attacks against any internet-connected device, there seems to be a gap between what is currently mostly done (block the attack) versus what should be done (report and take down the attacker)! This talk will start with a short introduction on how to set up a system that is able to collect attacks from distributed sensors, enrich them at a central location, as well as use the data to reach out to ISPs and other governing bodies to report the abuse. The sensors are Docker containers with modified OpenSSH servers that will block any login attempt, no matter which username and password combination is used, as well as log the timestamp, source IP, username, and password to a central location. Using this, the so-called "attack pot" is indistinguishable from other Linux systems, ensuring that no suspicion on the attacker's side is raised. For the enrichment part, the ISP's contact data is identified, and abuse notifications are sent via multiple channels to initiate a take down. Furthermore, automated bots monitor if the take down was successful and how long it took, allowing us to share some information on how successful this approach is, which ISPs are more cooperative, and where it is nearly impossible to get any system taken down. Generally, lessons learned with what could be potentially done better will be discussed! The second part of the talk will focus on the analysis of the collected attacks. Across all of the attacks, multiple clusters, which likely are adversarial groups moving from one target to another, could be identified. Furthermore, by analyzing the used credentials, there seems to be some correlation between internet-identifiable information like DNS, region, or OS and the credentials used in an attack. This will allow defenders to get a better understanding of how to defend and even put out decoy information to quickly identify attacks. The closure of the presentation will be an outlook on what could be done better from an ISP or governing body side to speed up take downs of adversarial infrastructure, as well as what everyone can do to make the internet a safer place! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/attack-mining-how-to-use-distributed-sensors-to-identify-and-take-down-adversaries/

Von Augustus bis Trump – Warum Desinformation ein Problem bleibt und was wir trotzdem dagegen tun können (38c3)

Sun, 29 Dec 2024 12:00:00 +0100

Trotz intensiver Forschung hinken wir aktuellen Entwicklungen im Bereich Desinformation oft hinterher. In diesem Vortrag erklären wir, warum der Umgang mit Desinformation so herausfordernd ist und welche konkreten Lösungsansätze es gibt. Obwohl wir inzwischen aus Perspektive der Forschung gesicherte Erkenntnisse über Verbreitung und Wirkung von Desinformationen haben und wirksame Präventions- wie auch Interventionsmaßnahmen auf vielen Ebenen diskutiert werden, laufen wir den tatsächlichen Entwicklungen und gesellschaftlichen Konsequenzen von Desinformation nur hinterher. Ein effektiver Umgang mit den unterschiedlichen Spielarten von Desinformation gelingt oft nicht. Mit Blick auf die aktuelle Forschung bieten wir einen Überblick über Lösungen gegen Desinformation. Dieser Talk soll die Begrifflichkeit für die öffentliche Debatte schärfen und die Frage adressieren: Was kann und soll als Desinformation verstanden werden? Darüber hinaus wollen wir diskutieren, warum der Umgang mit Desinformation so schwierig ist und welche individuellen, gesellschaftlichen und politischen Herausforderungen ihn so schwierig machen. Abschließend beantworten wir die Fragen: Was ist zu tun? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/von-augustus-bis-trump-warum-desinformation-ein-problem-bleibt-und-was-wir-trotzdem-dagegen-tun-knnen/

(K)Ein Beinbruch - Datenverarbeitung im CERT (38c3)

Sun, 29 Dec 2024 21:45:00 +0100

Das CERT - der allseits bekannte Sanitäts- und Brandschutzdienst des Congresses - ist wie alles andere auch gewachsen. Dazu gehört, dass Patient\*innen- und Einsatzverwaltung auf Klebezetteln langsam aber sicher nicht mehr skaliert. Jede\*r auf dem Congress kann mal Hilfe vom CERT benötigen. Um Einsätze zu verwalten, zu protokollieren und zu managen hat der Sanitäts- und Brandschutzdienst der CCC Veranstaltung GmbH in der Vergangenheit vor allem auf Whiteboards und Papier gesetzt. Durch das Wachstum der letzten Jahre skaliert das aber nicht mehr und es musste eine übersichtliche und auf die besonderen Bedürfnisse zugeschnittene Software entwickelt werden. Auftritt: THOT - Trouble Handling Operations Terminal, die neue Einsatzsteuerungs- und Patient\*innenmanagementsoftware des CERT, das im Rahmen des Congresses als Open Source Projekt endlich in die Community entlassen wird. Welche Daten erhoben und wie sie verarbeitet werden wenn es brennt, ihr euch verletzt oder schlimmeres passiert möchten wir euch in diesem Vortrag transparent machen, Fragen beantworten und die Möglichkeit geben, das System im Nachgang selbst unter die Lupe zu nehmen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/k-ein-beinbruch-datenverarbeitung-im-cert/

0, 1 oder 2 (38c3)

Sun, 29 Dec 2024 00:55:00 +0100

Der Quizshow-Klassiker für die ganze Chaosfamilie: Bei uns sind nicht nur pfiffige Hacker:innen, sondern auch flinke Beine gefragt. 0, 1 oder 2? Wer es weiß, ist dabei! Nur echt mit dem Kamera-Nerd! Auf einzigartige Weise wird Wissensvermittlung mit Bewegung verknüpft und bietet Nerds anspruchsvolle Unterhaltung. Das Beste aus Besserwisserei und Tele-Aerobic. Drei Teams aus dem Publikum treten gegeneinander an. Die Kandidat:innen müssen Fragen rund um IT-Sicherheit, CCC, Netzpolitik, Hacking-Kultur, Raketenwissenschaft oder Frickeln beantworten und damit ihr Wissen unter Beweis stellen. Für jedes Thema gibt es Spezial-Expert:innen auf der Couch sowie Show- und Musikeinlagen. Dem besten Team winkt der begehrte "0, 1 oder 2"-Überraschungspreis. Die Rate-Show wird von Erisvision in Koproduktion mit C3VOC, CCH und Gefahrengebiet TV Productions präsentiert. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/0-1-oder-2-hackerei-und-cyberbrei/

An open-source guide to the galaxy: Our journey with Ariane 6 (38c3)

Fri, 27 Dec 2024 17:15:00 +0100

The 530 tons and 63 meter tall Ariane 6 rocket finally launched on July 9th 2024 carrying our open-source developed payloads – the SIDLOC experiment and the satellite Curium One – into space. SIDLOC tested a new, open, low-power standard for identifying and precisely locating spacecraft whilst our satellite Curium One established an open-source baseline for larger CubeSat systems and allowed us to test a bunch of new technologies. From sourcing a launch opportunity to the final integration onto the rocket at the spaceport in French Guiana we tell you about our biggest challenges and exceptional experiences of this adventure. In this talk members of the Libre Space Foundation will take you on the journey of a rocket's payload: beginning with how the SIDLOC experiment and the satellite Curium One were developed, integrated and finally launched on the Ariane 6 maiden flight into space. 1. **SIDLOC** (Spacecraft Identification and Localization): Developed in collaboration with ESA, SIDLOC aims to improve space safety and mission success rate by establishing an open beaconing standard for spacecraft identification and localization. SIDLOC uses a low power beacon that utilizes the Spread Spectrum modulation and the cross-correlation properties of the Gold sequences, ensuring proper operation in extremely low SNR environments and identification of the transmitting space object. In addition, SIDLOC can provide localization and orbit determination, utilizing the Doppler frequency offset estimation mechanism that it implements. To achieve that, the open and crowd-sourced SatNOGS network is used, contributing to an independent source of orbital elements and spacecraft identifications, disrupting the existing model. The SIDLOC protocol has been implemented in such a way, so it is easy to integrate to a space object, regardless of its size, with minimal effort. 2. **Curium One**: The satellite Curium One is designed to establish an open-source framework for satellite systems. It features 15 newly designed open-hardware PCBs. From solar generators to the on board computer and high frequency communication boards everything was designed, tested and qualified by the community with the help of Planetary Transportation Systems. Its first signal acquisition was performed by the formerly world's largest radio telescope built in 1956 – the 25m diameter Dwingeloo Radio Observatory. We want to tell you about the development and implementation of the core technologies, the biggest challenges we faced during the missions, and the wild jungle experiences at the spaceport in Kourou. We aim to provide an overview of how open-source principles are being applied in space exploration and the benefits and problems of this approach within the space industry. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/an-open-source-guide-to-the-galaxy-our-journey-with-ariane-6/

Projekt Bucketchallenge (38c3)

Sat, 28 Dec 2024 23:00:00 +0100

S3 Buckets mit kübelweise privaten Daten: Finden, melden, kein Problem. Aber grundlegend was ändern? Denkste! Amazon S3 erlaubt es große Datenmengen für kleines Geld in der Cloud abzulegen. Mit dabei: Die technisch langweiligste Fehlkonfiguration gigantisch skaliert. Frei zugängliche S3-Buckets mit privaten Daten haben in den letzten Jahren häufig für Schlagzeilen gesorgt. Beispiele aus diesem Jahr sind Multifaktor-SMS oder Dokumente von Finanzdienstleistern. Wir haben uns auf den Weg gemacht um die Situation zu verstehen und zu verbessern. Dazu erklären wir, welche einzigartigen Eigenschaften wir von AWS ausgenutzt haben, um etwa 100 000 offene Buckets zu finden. Mit dabei: medizinische Daten, personenbezogene Daten, Kreditkartendaten, und und und. Wir erklären Ansätze, wie wir anhand von Dateinamen eine Idee bekommen, welche Buckets wir uns ansehen und melden sollten und welche uns nicht interessieren. Der Versuch die Situation zu verbessern lässt uns mit einer großen Enttäuschung zurück: Verantwortliche Nutzer der Cloud-Services sind nur mühsam zu ermitteln, und die Cloud-Betreiber sind leider auch keine signifikante Hilfe. Einzig die DSGVO scheint den Verantwortlichen ein kleiner Ansporn. Wir stellen dar, was unserer Erfahrung nach hilft Bucket offline zu bekommen, und wann es so gut wie aussichtslos ist. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/projekt-bucketchallenge/

Open Accessibility - (nicht nur) F/OSS barriereärmer gestalten! (38c3)

Sun, 29 Dec 2024 14:45:00 +0100

Barrierefreiheit für alle, immer und überall, zumindest in F/OSS-SW wie Communities, ist bisher ein frommer Wunsch. Warum ist das so und wie lässt es sich grundlegend ändern? Accessibility spielt bisher in Deutschland, wenn überhaupt, nur bei Webseiten eine Rolle. Desktop-Software, Online-Kommunikation, IT-Systeme generell sind hingegen für die meisten Menschen mit Behinderungen nicht oder nur mit großen Einschränkungen nutzbar. Diese Mängel werden bisher meist durch individuelle Workarounds versucht zu beheben, nur, damit beim nächsten Upgrade alles wieder vorbei ist. Für diese Misere gibt es technische, soziale wie gesellschaftliche und rechtliche Gründe, vielmehr: Defizite. Diese werde ich vorstellen. Darauf aufbauend plädiere ich für grundlegenden Verbesserungen und zeige mögliche Ansätze dafür u.a. den Bereichen Standards, individuelles Engagement, Prozesse und Organisation von Communities. Fragen, Diskussion und eigene Vorschläge sind erwünscht! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/open-accessibility-nicht-nur-f-oss-barrierermer-gestalten/

Longtermismus – der „Geist“ des digitalen Kapitalismus (38c3)

Mon, 30 Dec 2024 11:00:00 +0100

Der Vortrag wirft einen sozialwissenschaftlichen Blick auf die Ideologie des Longtermismus. Seine Funktion im digitalen Kapitalismus wird analysiert. Mithilfe von Klassikern der Soziologie wird dargestellt, warum sich diese Ideologie in eine faschistische Richtung entwickelt. Longtermismus ist die neue Hype-Ideologie des Silicon Valley. Elon Musk und Sam Altman haben sich als Anhänger geoutet, er ist die offizielle Firmenpolitik von OpenAI. Longtermismus postuliert, dass wir uns nicht mit der Gegenwart oder der nahen Zukunft beschäftigen sollten, sondern unser politisches Hauptaugenmerk auf die Entwicklung eines Computerhimmels in ferner Zukunft richten sollten. Zentral sind dabei Annahmen über die Entwicklungsmöglichkeiten von künstlicher Intelligenz, die deutlich religiöse Züge tragen. Der Vortrag stellt die Ergebnisse soziologischer Forschung zu dieser neuen Ideologie vor. Denn so neu ist das ganze gar nicht. Die „Moral“ des Longtermismus passt erstaunlich gut zu den Geschäftszielen der Digitalkonzerne und macht aus diesen eine Metaphysik. Diese soziale Funktion des Longtermismus ähnelt damit der Funktion, die Max Weber für den Protestantismus als „Geist“ des Kapitalismus im Frühkapitalismus ausgemacht hat. Wie der Protestantismus früher dient der Longtermismus heute einerseits als metaphysische Rechtfertigung der Geschäftsmodelle von Unternehmen und andererseits als individuelle Moral, die ihre Anhänger*innen zu mehr Leistung animieren soll. Gegenwärtig erleben wir einen Rechtsruck im Longtermismus, dessen prominente Vertreter*innen wie Elon Musk oder Peter Thiel sich offen für Donald Trump positionieren. Auch hier ähnelt die Entwicklung des Longtermimsus vergleichbaren früheren Ideologien. Klassische Analysen zeigen, warum individualistische Leistungsideologien das Potenzial haben, in eine faschistische Richtung zu kippen. Der Rechtsruck der Silicon-Valley-Eliten wird so verständlich. Abschließend wird auf den Einfluss von Musk und Thiel auf die US-Wahlen eingegangen und versucht, die weitere Entwicklung abzuschätzen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/longtermismus-der-geist-des-digitalen-kapitalismus/

GLAM zwischen LOD und ¯\_(ツ)_/¯. Museumskritik für Hacker*innen (38c3)

Mon, 30 Dec 2024 12:55:00 +0100

Habt ihr euch immer schon gefragt wie Museumssammlungen ins Netz kommen, warum online Sammlungen meist immer noch aussehen wie Kataloge seit dem 19. Jahrhundert, was für Strategien und Förderprogramme dahinter stecken, welche Firmen hier quasi-Monopole haben, und warum Museen so viele Hoffnungen (Zugang! Partizipation! Demokratie!) mit der Digitalisierung verbinden? Der Talk ist eine Einladung an Hacker*innen sich an der kritischen Weiterentwicklung, Öffnung und Reflexion von Museen zu beteiligen. GLAM = Abkürzung für Sammlungsinstitutionen: Galleries, Libraries, Archives, Museums LOD = Buzzword in Museen: Linked Open Data ¯\_(ツ)_/¯ = Platzhalter für: Lass irgendwas mit KI, Google Arts & Culture, Facebook Metaverse machen! Als vor vier Jahren mein Forschungsprojekt zur Digitalisierung in Museen losging habe ich meine ersten Ideen auf der rC3 präsentiert ("Wie können wir das digitale Museum aufhalten"). Und jetzt möchte ich die Ergebnisse aus vier Jahren Forschung zur Digitalisierung von Museen teilen. Meine Quellen sind vor allem die Jahresberichte der Staatlichen Museen zu Berlin seit 1990, und die Digitalstrategien der Deutschen Bundesregierung, mit ihrem Fokus auf Künstliche Intelligenz, Virtual Reality und Vernetzte Daten, die zum Beispiel die Millionenprojekte "museum4punkt0" und "Datenraum Kultur" beinhalten. Ich zeige größere Entwicklungen und Konflikte und viele Beispiele, alles anhand der Frage: Welche Brücken können wir bauen zwischen Museumskritik und Datenpolitik? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/glam-zwischen-lod-und----museumskritik-fr-hacker-innen/

MacOS Location Privacy Red Pill: A Rabbit Hole Resulting in 24 CVEs (38c3)

Sat, 28 Dec 2024 14:45:00 +0100

User location information is inherently privacy sensitive as it reveals a lot about us: Where do we work and live? Which cities, organizations & institutions do we visit? How does our weekly routine look like? When are we on a vacation and not at home? MacOS has introduced multiple layers of security mitigations to protect sensitive user location information from attackers and malicious applications over the years — but are these enough? In this talk, we dive into how attackers could have exploited multiple design flaws, information disclosures and logic vulnerabilities spread all across the macOS stack, leading to all kinds of ways to bypass the macOS TCC Location Services privacy protection and precisely localize the user without consent. We will show how attackers could have retrieved precise real time & historical geographic user locations hiding in various components of the persistence layer, within application state restoration files and error log messages that could be triggered via reliably exploitable HTTP response callback race conditions. Digging deeper, we find that the precise user location can be reconstructed with lossless precision by combining various sources of metadata, which were accessible through different pathways and quirks of the operating system, such as: Access point SSID’s + signal strength data, Apple Maps location query data caches, custom application binary plists and even Find My widget UI structure metadata enabling to precisely reconstruct the victims AirTag locations. These issues have been responsibly reported in the scope of the Apple Security Research program and resulted in 24 CVE entries in Apple’s security advisories for macOS. We will finish of by investigating how we can prevent such issues in the future: Extended automated privacy focused integration testing, shifting responsibility of privacy preservation from developers to the system framework level and a more privacy focused API architecture of localization relevant frameworks. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/macos-location-privacy-red-pill-a-rabbit-hole-resulting-in-24-cves/

Small seeds - why funding new ideas matters (38c3)

Mon, 30 Dec 2024 13:50:00 +0100

More money for Free and Open Source Software - a never ending issue. In a tech world built on start-ups, venture capital and data-gathering apps, the fight for sustainable funding for ethical technology projects is a fierce one. After some big victories for FOSS funding in the last years, this talk is about the importance of not forgetting the small, underdog civil society projects. How do we fund technology in a sustainable way? Fund infrastructure, fund maintenance, fund that project some random person in Nebraska has been thanklessly maintaining since 2003. While infrastructure is extremely important (no questions asked), in this talk we want to explore why a diverse funding landscape that also allows for supporting new people and groups with fresh ideas can only be incredibly valuable to the field of FOSS. How can we use existing funding structures, bend and twist them to meet the real needs of communities? How can we make them more useful to projects and people who are not typically the recipients of their money? We want to talk about how to build support infrastructure that allows us to fund in ways that bring more diversity, more novel ideas and more inclusivity to our communities - and we want to talk about how to do this in a sustainable way. This talk is a call to government institutions, funders and other organisations with the power to distribute money to join forces, break down the barriers of their traditional funding models and create a broad and vibrant network of small, diverse and lightweight funds that meet the needs of different groups and communities. It is an invitation to communities to come together and share their needs in order to help build structures that can actually support their work. There is hope in FOSS projects, old and new, big and small. Let's hack all kinds of systems to give them the support they need. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/small-seeds-why-funding-new-ideas-matters/

Transitous - offener Routingdienst für öffentliche Verkehrsmittel (38c3)

Sat, 28 Dec 2024 12:00:00 +0100

Unabhängige Apps für den öffentlichen Nahverkehr stehen häufig vor dem Problem, dass sie durch die vielen separaten APIs der Verkehrsbetriebe eingeschränkt sind, die oft nicht über die vollständigen Daten der anderen Betreiber verfügen. Dies macht es unmöglich, vollständige Routen zu erhalten. In Städten wie Paris ist z.B. die Kenntnis der örtlichen Metro erforderlich, da die verschiedenen Bahnhöfe nicht direkt miteinander verbunden sind. Transitous will dieses Problem auf der Grundlage öffentlich zugänglicher Fahrplandaten lösen. Bestehende Routing-Lösungen aus der Community waren nur für Fahrräder, Autos oder Fußgänger verfügbar. Dadurch blieb den Apps für den öffentlichen Verkehr nur die Möglichkeit, viele verschiedene Betreiber-APIs mit begrenzten Daten zu verwenden. Einige überließen die Wahl der besten API der Nutzer*in oder versuchten, die beste API auf der Grundlage der regionalen Abdeckung automatisch auszuwählen. Dies verhinderte, Verbindungen über größere Entfernungen einschließlich des Nahverkehrs mit einer einzelnen Anfrage finden zu können. Mit neueren freien und quelloffenen intermodalen Routing-Engines wie MOTIS und der zunehmenden Verfügbarkeit von Fahrplänen der öffentlichen Verkehrsmittel im GTFS- und GTFS-RT-Format im Internet wurde es möglich, dieses Problem zu lösen. In diesem Talk wird vorgestellt, was wir bisher erreicht haben und wie das Projekt weiterentwickelt und genutzt werden kann. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/transitous-offener-routingdienst-fr-ffentliche-verkehrsmittel/

Hacking Life: How to decode and manipulate biological cells with AI (38c3)

Sun, 29 Dec 2024 20:15:00 +0100

AI methods are advancing biological research in diverse directions. In this talk, you will learn how we decode the fundamental building blocks of life with AI, and how it will help us to hack cells to cure diseases and beyond. The cell is the fundamental building block of biological organisms, such as us humans. As such, technologies to understand and hack cells enable the cure of diseases and potentially even to expand our life span. In my talk, I provide an overview on how biologists and bioinformaticians use AI to understand and hack cells. Understanding the role of individual cells is a core aspect of biological research, given the extreme diversity of cellular states and functions. A common measurement method to characterize a given cell quantifies which of its genes are activated and how strongly. While this provides a rich high-dimensional readout, it is complex to interpret, given the challenge of deriving an intuition about the meaning of all the individual gene activation levels, as well as their combinatorial effects. In my research, I combine recent AI methods, most prominently multimodal large language models, to enable the analysis and interpretation of these measurements with the English language. I will present this work alongside a more general overview into the research landscape of “AI cell models”. Furthermore, I will provide preliminary insights into how these interpretations form the basis to “hack” cells, which is accomplished through the introduction of complex “illegal instructions” in the form of molecular agents, which alter the behavior of the cell's internal programs. With this talk, I aim to provide the Chaos community with a focused insight into the biological cell and the ways in which recent developments in AI help us understand and manipulate them. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/hacking-life-how-to-decode-and-manipulate-biological-cells-with-ai/

Cat ears were just the beginning: Six years in onesies & what it taught me about life (38c3)

Sat, 28 Dec 2024 22:05:00 +0100

What happens when cat onesies become your daily outfit? This personal story explores my six-year journey wearing cat onesies everywhere—from the reactions of others to practical tips on materials and patterns, and the deeper appeal behind this clothing style. "Who defines what 'normal' clothing even is? Who says one can’t just wear a cat onesie as a regular, everyday outfit?" - Kitty, a few years ago. Ever wondered what it’s like to wear nothing but cat onesies every day, everywhere, all the time, for years? In this personal story, I’ll share how and why I started wearing onesies daily, how people reacted, which materials and sewing patterns turned out to be practical (and which didn’t), how you can make your own onesie, what all this taught me about life and the deeper reasons why so many of us are curious about this and other unconventional clothing styles. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/cat-ears-were-just-the-beginning-six-years-in-onesies-what-it-taught-me-about-life/

Spatial Interrogations Or the Color of the Sky (38c3)

Fri, 27 Dec 2024 20:15:00 +0100

Modern 3D capture through Gaussian Splatting and human memory reveal parallel landscapes – where precise centers fade into probabilistic smears at the edges, and gaps hold as much meaning as detail. This is about the preservation of an ephemeral present in digital amber, an interrogation of how we reconstruct both digital and remembered spaces. In July 2023, a new method of reconstructing reality was published in a paper called "3D Gaussian Splatting for Real-Time Radiance Field Rendering." Three months later, the first apps provided this technology in their pseudo social-networks. Gaussian Splatting produces a navigable, though static, 3D reconstruction of events from video footage – but also an intriguing aesthetic. Areas of sharp details are surrounded by calculated uncertainty, creating digital spaces that inadvertently mirror how human memory operates. The talk presents a video essay of the same name, exploring this resonance between technology and memory through a crafted blend of found footage, open-source media, and AI-generated elements. By developing custom tools for VR exploration and capture, the work documents these digital spaces from within, creating a choreographed journey through both technical and remembered landscapes. It is both a technical documentation and a poetic interpretation; it’s an interrogation of an emerging technology and a meditation on how we process and reconstruct our experiences, digital and remembered alike. The lecture will focus on the technical background, as well as the artistic practices used to create the video essay. From working with virtual reality and experimenting with AI-generated content, to making decisions and non-decisions – it traces the development of a work in the parallel landscapes of emergent technology and lingering memory, of imminent nostalgia and nascent futures. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/spatial-interrogations-or-the-color-of-the-sky/

All Brains are Beautiful! – The Biology of Neurodiversity (38c3)

Mon, 30 Dec 2024 12:55:00 +0100

How do you think? People can experience thoughts, feelings, and sensory inputs very differently. While context and substances are known to promote changes in perception and thinking, the biological basis is very diverse, contrary to what is often assumed. Brain cells come in extraordinary varieties in size, shape, and complexity. Their synaptic connectivity provides the foundation of all our sensory input, motor output, cognitive functions, and thoughts. In short: They shape us. This talk gives an introduction about the extent of variability in neuronal patterns that underlies neurodiversity and critically discusses the idea of neurodivergence, diagnosis criteria in Autism and ADHD from a biological and first person-perspective. We find that biological variability of brains is an evolutionary feature that helps us to adapt to our environment but comes with certain risks and downsides in our modern society. While many things are still unknown, scientists have identified genes and environmental impacts that shape our network architecture during brain development and which help to explain why we think and experience the world so differently. This talk gives an introduction about the extent of variability in neuronal patterns that underlies neurodiversity and critically discusses the idea of neurodivergence, diagnosis criteria in Autism and ADHD from a biological and affected person-perspective. It aims to clear up stereotypes, dogmas that still stick in our society and provides latest insights from science and community about what makes our brains work so differently. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/all-brains-are-beautiful-the-biology-of-neurodiversity/

Fehlercode 406: Request not acceptable. Digitalzwang als Human Security-Problem (38c3)

Sat, 28 Dec 2024 15:45:00 +0100

Schon die neue Bahncard in der App integriert und dabei erfolglos versucht, dem Tracking auszuweichen? Digitalzwang kostet: Und zwar uns, den Nutzer:innen von Diensten von Unternehmen, Behörden, oder anderen Anbietern (auch du, Deutsche Bahn!). Dabei ist es weniger ein Problem, ob digitalisiert wird, sondern wie. Ich argumentiere, dass mit der fortschreitenden Digitalisierung eine Bringschuld von Anbietern auf die einzelnen Verbraucher:innen übertragen wird. Betroffene von Digitalzwang erfahren dabei höhere Kosten in ihrem Alltag: Sie müssen mehr Geld ausgeben, um einer Datenabgabe zu entkommen, oder brauchen mehr Zeit für Dienstleistungen, weil diese sie ausschließen. Dabei reicht der Rahmen über die vermeintlich Technik-feindlichen Senioren weit hinaus, und betrifft arme, körperlich behinderte, oder Datenschutz-affine Menschen genau so. Digitalcourage hat bereits beim Fireshonks 2022 ein Best-Off ihres Digitalzwangmelders vorgestellt. Ich habe jetzt eine Übersicht aufgebaut, um das Problem zu visualisieren. Durch die Analyse von Forschungsinterviews mit Betroffenen zeige ich, wer von Digitalzwang betroffen ist, in welchen Formen Digitalzwang auftritt, und welche Auswirkungen er auf ihr Leben hat. Dabei zeige ich, dass der Digitalzwang in seinen verschiedenen Facetten mehr ist als nur „unangenehm“: Er wirkt als Brennglas für bestehende Probleme und führt zu Ausgrenzungen und Einschränkungen. Computer können das Leben verbessern. Digitalisierung macht viele Prozesse schneller und leichter umsetzbar, zumindest in der Theorie. Was aber, wenn man gar keinen Zugang zu digitalen Angeboten hat, oder ihn aus Sorge von Datenmissbrauch ausschließen muss? Armut, Behinderung, fehlende Umgangserfahrung oder eine hohe Datenhygiene führen dazu, dass Menschen sich im Alltag einschränken müssen, weil ihnen der Zugang zu einem Gut nicht offen steht. Das geht los bei Rabattaktionen im Supermarkt und geht bis zu Einschränkungen in der Mobilität – die Deutsch Bahn lässt grüßen. Ich zeige, in welchen Bereichen des Lebens Digitalzwang auftritt und wie vielseitig er sich gestaltet. Hierfür habe ich Forschungsinterviews mit Menschen geführt, die sich von Digitalzwang betroffen sehen. Im Gespräch habe ich erfahren, mit welchen Formen des Zwangs sie konfrontiert waren und wie schwer diese Eingriffe waren. Dabei zeigt sich, dass Digitalzwang zwar ein Problem für sich ist, jedoch oft intersektionell wirkt: Armut, Behinderung oder fehlende Bildung werden durch eine exklusive Digitalisierung noch verstärkt. Digitalzwang ist damit nicht nur unangenehm, sondern wird in vielen Fällen zu einem Human Security-Problem. Dieses Konzept geht davon aus, dass Sicherheit nicht nur die Abwesenheit von Gewalt ist, sondern ein Zustand, indem sich Menschen frei entwickeln können. Ein Ausschluss aus einer Gesellschaft oder eine Beschränkung im eigenen Leben wirken diesem Zustand entgegen. Anhand der Beispiele, die ich durch die Interviews gesammelt habe, zeige ich, wie die Auswirkungen von Digitalzwang diese Probleme erzeugen können. Dabei müssen wir uns die Frage stellen, wie wir mit der Digitalisierung umgehen wollen. Um dabei nicht ganz im Pessimismus zu versinken, gehe ich auch auf positive Beispiele ein: Wo wird gut und nutzerfreundlich digitalisiert? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/fehlercode-406-request-not-acceptable-digitalzwang-als-human-security-problem/

Beyond Cryptopartys - wie Aktivistis und Nerds voneinander lernen können (38c3)

Fri, 27 Dec 2024 17:35:00 +0100

Seit Jahren bemüht sich die Cryptoparty-Bewegung, digitale Selbstbestimmung in der Gesellschaft zu verbreiten. Besonders Aktivist\*innen sind sehr auf dieses Wissen angewiesen - doch ein Abend-Workshop von 2-3 Stunden schafft bei ihnen oft mehr Unsicherheiten als vorher. Wie kann man zwischen Nerds und Aktivist*innen übersetzen? Wir haben viel ausprobiert, teilen unser Konzept mit euch und erzählen, welche Lernatmosphäre & pädagogischen Mittel es braucht, um die Hürden für nicht-Nerds abzubauen. Link zum Hextivisti-Konzept: https://cryptpad.fr/pad/#/2/pad/view/RwZ3IxG-YtcMzIdSB0g2Ti66dL23s9VhPbvjVM2vKQc/ Link zu diversity-sensibler Lehre: https://www.genderdiversitylehre.fu-berlin.de/einstieg/leitlinien/index.html Für gesellschaftlichen Wandel ist es unbedingt notwendig, dass sich mehr Menschen mit digitaler Selbstbestimmung auskennen. Vor allem Aktivist\*innen brauchen Grundwissen und Vernetzung, um Antworten für ihre konkreten Herausforderungen zu finden, insbesondere bei zunehmender Faschisierung von Staat & Gesellschaft, Abhängigkeit von Big-Tech-Monopolen, und drohenden Klimakatastrophen. Das Problem hierbei: anders als Nerds, die sich IT-Sicherheit oft mit Interesse und Angriffslust nähern, haben viele Aktivist\*innen mit Überforderung und Ängsten zu kämpfen. Als Hindernis beim Lernen kommt oft strukturelle Diskriminierung dazu, und das (Wieder-)Erleben von Situationen, die damit einhergehen. Solche Stress-Situationen begünstigen Frust, Fehler, und Grenzüberschreitungen und verstärken Wissens- und Machtasymmetrien - insbesondere unter Zeit- und Repressionsdruck. Jedes frustrierende Erlebnis, jedes nicht verstandene Fachwort verschlimmert diese Hürden, und verschlechtert letztendlich die gelebte IT-Sicherheit. Wir haben selbst jahrelang schlechte Erfahrungen mit Abend-Workshops gemacht, die in 2-3 Stunden alles Wichtige für Aktivist\*innen vermitteln sollen (sowohl als Trainer\*innen als auch als Teilnehmer\*innen). Wir sind zu dem Schluss gekommen, dass es eine andere Herangehensweise braucht, und man sich ein Wochenende dafür Zeit nehmen sollte. Deshalb haben wir ein skalierbares Konzept entwickelt und getestet, welches ermöglicht, dass Nerds und Aktivist\*innen voneinander lernen können. Dieses Konzept wollen wir hiermit open-sourcen. Wir haben jetzt einige Erfahrung mit unserem Wochenend-Format, und weitere Workshop-Wochenden sind in Planung. Im Talk wollen wir unsere Idee, Learnings, Hürden und Erfolgserlebnisse teilen. Wir sprechen darüber, wie wir es schaffen können, Frust abzubauen und eine gute Lernatmosphäre zu schaffen, warum wir dafür ein all-gender-Format gewählt haben, und wieso am besten auch Leute mit wenig Erfahrung im Orga-Team sind. Entstanden ist ein Netzwerk, dass einen fortwährenden Wissens-Austausch ermöglicht und weitere Trainings organisiert. Wenn es nach uns geht, gehören technische und soziale Skills zusammen. Dabei verschwimmen immer wieder die Grenzen, wer eigentlich von wem lernt. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/beyond-cryptopartys-wie-aktivistis-und-nerds-voneinander-lernen-knnen/

Die Faszination des echten Kugelspiels (38c3)

Sat, 28 Dec 2024 23:55:00 +0100

Der Vortrag ist ein persönlicher Blick auf die Geschichte, Vielfalt und Entwicklung im Bereich der Flipperautomaten und ist motiviert durch die eigene Begeisterung für diese Form von Unterhaltungstechnik. Geschichte und Geschichten der Geräte wird anhand eigener Erfahrungen, Sammlung und Recherche sowie Geschehnissen und eigene Anwendungen der Geräte (Kauf, Reparatur, Restauration, Modifikation, ...) präsentiert und soll die Faszination und das Interesse dafür wecken oder Interessierte zusammenbringen. Es ist geplant, auch Geräte zum Kongress mitzubringen, die bespielt und/oder im Detail erklärt werden können und vielleicht sogar ein Gerät zum Basteln bereit zu stellen. Flipperautomaten waren für lange Zeit ein fester Bestandteil der Unterhaltungs- und Jugendkultur. Sie vereinen ein reales Spielgeschehen mit echten Kugeln und Hindernissen mit (Elektro-)mechanischer und elektronischer Steuerung und Effekten und sind dabei dem direkten Einfluss der Spieler ausgesetzt. Seit einiger Zeit ist diese Unterhaltung, die zudem meist an Orten außerhalb des eigenen Zuhauses stattfand, nun von rein oder vorwiegend virtuellen Spielangeboten ersetzt worden, die in unserem Kulturkreis vor allem in den eigenen vier Wänden stattfindet. Der Vortrag wirft einen persönlichen Blick zurück auf die Entwicklung und Eigenarten dieser Unterhaltungstechnik und beschreibt eigene Erfahrungen aus einigen Jahren, in denen der Vortragende in diesem Umfeld tätig war. Er gibt auch Einblicke in die verwendete Technik und zieht Parallelen zu aktuellen Einsätzen ähnlicher Unterhaltungsanwendungen wie z. B. Escape-Rooms. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/die-faszination-des-echten-kugelspiels/

Dead Man’s Switch. An art shield to protect the life of Julian Assange (38c3)

Fri, 27 Dec 2024 19:15:00 +0100

Artist Andrei Molodkin held $45million of art hostage to free Julian Assange. He vowed to dissolve Picasso, Rembrandt, Warhol and other masterpieces in acid using a dead man’s switch device inside a 29-tonne Grade 5 Safe Room if Julian Assange was to die in prison. The talk will explain the process and methodology. Dead Man’s Switch is an art shield. It is not a human shield: that is what terrorists produce. Dead Man’s Switch, on the contrary, is a tool for negotiation. “Taking hostage” is one of the most common languages used by the power structure. In his artistic career, Andrei Molodkin, developed the method of mirroring the language of power within the formal parameters of Political Minimalism. In the case of the Dead Man’s Switch, the Medusa Gorgon mirror used to hit the power structure has been done by taking hostage the most important of capitalistic symbols, its icons and values. In this catastrophic time, to destroy art is much more taboo than to destroy the life of a person. Arianna Mondin, applied Interpol’s criminal investigation method to the field of architecture in her PhD to unveil the connection between architecture and oil. She used this method in the development strategy of Dead Man’s Switch. The talk will focus on the process of realizing the Dead Man’s Switch to mirror the language of power to release Julian Assange from prison. In particular, it will clarify the operation to involve artists and collectors in participating by donating their artworks to secure the survival of the most consequential political prisoner of our times. The project involved also specialists in security, negotiation, hardware and software, all together organised in a system aimed at reprogramming the power structure. The talk will conclude by explaining the technical details, software and hardware, and the conceptualisation of the counter as a method of escalation and resetting the system. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/dead-man-s-switch-an-art-shield-to-protect-the-life-of-julian-assange/

Hacker's Guide to Meshtastic: Off-Grid, Encrypted LoRa Meshnets for Cheap! (38c3)

Sun, 29 Dec 2024 22:05:00 +0100

Beginners can now create off-grid, encrypted mesh networks for cheap, with applications in emergency communication, sensor monitoring, and more! These mesh networks have been popping up in cities all over the world, and this talk will go over everything a beginner needs to run or build their own nodes. If you've ever wanted to legally create off-grid, encrypted mesh networks that can span over a hundred miles, you can get started with Meshtastic for around $10. This talk will serve as a beginner user's guide to Meshtastic, covering everything from hardware basics to advanced software configuration. We will explore making custom Meshtastic hardware, real-world results from deploying Meshtastic in Los Angeles, and attacks against mesh networks. Attendees will learn about LoRa, Meshtastic node and antenna options, software setup and configuration to extend its functionality, and real-world deployments of remote nodes. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/hacker-s-guide-to-meshtastic-off-grid-encrypted-lora-meshnets-for-cheap/

"Natürlich bin ich 18!" - Altersprüfungen im Netz aus Datenschutzperspektive (38c3)

Fri, 27 Dec 2024 12:00:00 +0100

„Um nach diesem Begriff zu suchen, dich auf dieser Website anzumelden oder dieses Video anzuschauen, halte bitte deinen Personalausweis bereit, damit wir dein Alter überprüfen können.“ Solche Aufforderungen könnten uns in Zukunft häufiger begegnen, denn immer mehr Websites wollen unser Alter wissen. Doch woher kommt dieses Interesse und ist das eigentlich zulässig? Gemeinsam setzen wir die Datenschutzbrille auf und gehen folgenden Fragen auf den Grund: Welche Methoden der Altersprüfung gibt es und wie funktionieren sie? Können oder sollten Methoden der Altersprüfungen eingesetzt werden und gibt es Fälle, in denen sie sogar eingesetzt werden müssen? Sind Datenschutz und Kinderschutz tatsächlich Gegensätze oder haben sie doch mehr gemeinsam, als oft vermutet wird? Und was sagt eigentlich die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) dazu? Hand aufs Herz – hast du, bevor du 18 warst, Webseiten besucht, die nur für Erwachsene bestimmt waren? Welche Mechanismen haben versucht dich davon abzuhalten? Wie häufig begegnest du diesen Mechanismen heute? Altersprüfungen sind nicht zuletzt durch die Bestimmungen des Digital Services Act (DSA) und die Diskussionen um die Alterstauglichkeit von Social Media heiß diskutiert. Dabei geht es längst nicht mehr allein um Ab-18-Inhalte. Die Idee ist einfach: Wer zu jung ist, darf bestimmte Bereiche des Internets nicht betreten – wie früher in der Videothek - oder wer zu alt ist, bekommt keinen Zutritt – wie auf manchen Spielplätzen. Aber könntest du dir vorstellen, in der Videothek eine Kopie deines Personalausweises abzugeben, zusammen mit der Liste der Filme, die du ausgeliehen hast? Der wichtige Unterschied ist: Um in digitalen Diensten das Alter einer Person prüfen zu können, müssen mehr Daten verarbeitet werden als bei einem kurzen Blick auf den Ausweis, und das ist nicht ohne weiteres zulässig! Der Umgang mit Methoden der Altersprüfung wird einen erheblichen Teil dazu beitragen, wie das Internet in Zukunft aussehen wird und wie frei es sein wird. Es geht nicht nur darum, wie Kinderschutz im Netz umgesetzt wird, sondern auch, wie viel Teilhabe im Digitalen möglich ist – nicht nur für Kinder. In diesem Vortrag erwarten euch ein Überblick über aktuelle (politische) Forderungen nach Altersprüfungen im Internet und den verschiedenen Methoden, die dabei zum Einsatz kommen. Wir machen einen kurzen Exkurs ins Datenschutzrecht und gehen der Frage nach, wie Altersprüfungen, Kinderschutz und Datenschutz zusammenspielen. Nicht zuletzt bekommt ihr die Einschätzung der Bundesbeauftragten für den Datenschutz und die Informationsfreiheit zu hören. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/natrlich-bin-ich-18-altersprfungen-im-netz-aus-datenschutzperspektive/

Junghacker:innentag Einführung (38c3)

Sat, 28 Dec 2024 10:00:00 +0100

Zu unserer Freude haben sich in den letzten Jahren immer mehr Junghacker:innen auf dem Congress eingefunden. Daher bieten wir auch diesmal, wie schon in den Vorjahren, einen speziell auf Kinder und Jugendliche zugeschnittenen Junghacker:innentag an. Am zweiten Congresstag, dem 28. Dezember 2024, organisieren Freiwillige aus vielen Assemblies von etwa 10 bis 17 Uhr ein vielseitiges Workshop-Programm für angehende Hacker:innen. Weitere Informationen siehe [https://events.ccc.de/2024/11/08/38c3-junghackerinnentag/](https://events.ccc.de/2024/11/08/38c3-junghackerinnentag/) Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/junghacker-innentag-einfhrung/

38C3: Infrastructure Review (38c3)

Mon, 30 Dec 2024 16:40:00 +0100

This talks gives a behind the scenes on how the infrastructure side of the event is done. A lot of teams help to make this event happen. This talk gives them the opportunity to show you what they do and how they do it. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/38c3-infrastructure-review/

Dialing into the Past: RCE via the Fax Machine – Because Why Not? (38c3)

Sun, 29 Dec 2024 14:45:00 +0100

Remember the days when faxes were the pinnacle of office tech, and the sound of a paper getting pulled in was as satisfying as a fresh cup of coffee? Well, it's time to dust off those memories and reintroduce ourselves to the quirky world of printers and their forgotten fax interfaces – yes, those relics that make us all feel like we're in an '80ies sci-fi movie – and specifically, how they can unlock a new frontier in printer security exploits! In this talk, we'll show you how we leveraged a printer bug that we found at Pwn2Own Ireland this year to gain remote code execution. Over its fax interface. You might think, "Who cares about faxes?" – but what if I told you that lurking within this vintage feature is a potential pathway for remote code execution? That's right, while everyone else is busy patching the latest vulnerabilities in trendy software and half the world is obsessed with cloud security, we'll be having a blast with tech that should've been retired to the attic long ago, exploiting a feature that's older than some of the attendees! We'll explore how this vintage tech can be the gateway to some serious mischief. Think of the possibilities: municipalities, banks, courts, you pick your favorite bureaucracy. Unfortunately, we can't do any of those things -- that'd be naughty -- so we're restricted to doing the stupidest things we can think of in our live demos. In case you're wondering: of course we'll be running doom on this thing, proving that even the most outdated tech can still pack a punch, as we take control over this device in style. Expect a mix of technical insights and many moments of "why would you do that?". So join us in this wild ride through simpler times -- who knew the key to world domination lays in a dusty fax machine? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/dialing-into-the-past-rce-via-the-fax-machine-because-why-not/

Let's build dodos! How generative AI is upturning the world of synthetic biology and hopelessly overwhelming traditional governance instruments. (38c3)

Sun, 29 Dec 2024 15:45:00 +0100

Have you always wanted to build an egg-laying woolly milk sow or bring the legendary dodo back to life? The dream of some biologists to not only understand organisms, but also to redesign, build or bring living beings back to life is accelerating towards reality with the convergence of synthetic biology and generative AI in ‘generative biology’. For example, large language models are now being used to write genes and proteins, while complex laboratory tests are being replaced by machine vision and automation. The pace of these developments is so fast that they are barely noticed by the public, politicians or related experts such as environmental scientists. Questions about the reliability and safety of these new biodigital methods and applications are not yet being asked and research into risk assessment methods is not keeping pace. At the same time, this shift of generative AI systems from generating text and images to generating protein, bacteria, viruses and organisms could transform many areas of life, from medicine and the environment to bioweapons. So let's talk about it and discuss it. This is what the talk will be about: - What is the science behind synthetic biology? What is genome editing, CRISPR/cas, RNAi or off-target effects etc.? - And how does generative AI and generative biology come into play? What is actually happening in laboratories and corporate R&D around the world, including in the USA and China? I will report on AI platforms that generate designs for novel viruses and proteins to experiments ranging from medical drug development and attempts to bring extinct species back to life. I will also present current scenarios in the field of bioweapons. - How big tech is moving to get into bioeconomy – Titans such as Google, Microsoft, Nvidia, Alibaba, Meta, Amazon and Salesforce, with no specific experience in life sciences, are now the leaders in a new ‘generative biology’ run. - I will then continue with our own research on risk and technology assessment of genetically modified organisms and synthetic biology. This includes experiments and method development on biosafety, but also poses more fundamental questions such as investigating if the AI/biodigital design of nature is in line with nature conservation concepts or asking if democratization of biotech research (garage biology) relates to “dual use” risks. We also work on instruments to better understand impacts on society and improved social participation. - Finally, I would like to report on the very controversy negotiations on this topic at the UN Convention on Biological Diversity in Colombia in November – among parties, with perspectives from developing countries, indigenous peoples and local communities, scientist and others and discuss ways forward for fair, multidisciplinary assessment and oversight that is urgently needed. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/let-s-build-dodos-how-generative-ai-is-upturning-the-world-of-synthetic-biology-and-hopelessly-overwhelming-traditional-governance-instruments/

IRIS: Non-Destructive Inspection of Silicon (38c3)

Fri, 27 Dec 2024 23:00:00 +0100

IRIS (Infra-Red, *in situ*) is a technique for non-destructively inspecting the construction of a select but common type of chip. It can improve visibility into our hardware and provide supporting evidence of its correct construction, without desoldering chips or expensive analytical gear. This talk covers the theory behind IRIS, as well as some embodiments of the technique. I will also frame the relevance of IRIS in the face of various threat scenarios. Time permitting, I’ll also show how you can do it at home by peeking around a few chips as a demo. Do we really know what chips are inside our devices? To a first order, the answer is “no”. We can read the label printed on the chip's package, but most of us have no way to determine if the silicon actually matches what’s on the label. This lack of transparency has lead to much hand-wringing about the safety of our global supply chains, as chips zig-zag the globe on their way to our doorstep: each stop is an opportunity for bad actors to inject malicious hardware, and those of us without access to million-dollar analytical gear have no way of detecting this. IRIS (Infra-Red, *in situ*) is a technique I have been developing that aims to democratize the inspection of silicon. It turns out that for a select but fairly common type of chip - those in chip-scale packages - a simple modification to an off the shelf microscope camera can enable the visualization of micron-scale features within – without requiring any nasty chemicals or desoldering chips. I will also show how the basic everyday technique can be combined with a Jubilee 3D motion platform to create detailed, full-chip images. This talk will cover the basic theory behind the technique, and frame it in the context of several hypothetical threat scenarios that highlight its strengths and limitations. It is important to understand that IRIS is not a panacea for chip verification, but it is a significant step forward in improving transparency. I will also discuss its potential as a new tool for system designers who are serious about enabling user-level hardware verification. Finally, time permitting and equipment cooperating, I would like to share the simple pleasure of being able to take a peek inside the chips of some common mobile phone motherboards with a live demo. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/iris-non-destructive-inspection-of-silicon/

Der Mythos der „gezielten Tötung”. Zur Verantwortung von KI-gestützten Zielsystemen am Beispiel „Lavender“ (38c3)

Sat, 28 Dec 2024 17:35:00 +0100

Das Lavender-KI-Zielsystem zeigt gut, wie Kriegsautomatisierung aktuell aussieht und was daran falsch läuft. Das Thema „KI in der Militärtechnik“ und die Beziehung zwischen Mensch und Maschine ist seit Jahrzehnten ein theoretisches Thema in der Philosophie, den Sozialwissenschaften und den kritischen Algorithmus-Studien. Doch in den letzten Jahren wurden Waffensysteme mit KI-Komponenten entwickelt und jüngst in bewaffneten Konflikten praktisch eingesetzt. Am Beispiel des KI-gestützten Zielwahlsystem Lavender, das vom israelischen Militär IDF im derzeit laufenden Gaza-Krieg eingesetzt wird, werden die aktuellen Entwicklungen aufgezeigt und in den historisch-technischen Kontext der „Signature Strikes“ der USA in Waziristan (Pakistan) oder Afghanistan gesetzt, sowie konkrete technische Designentscheidungen vorgestellt und kritisch diskutiert. Dabei entstehen auch Fragen von Verantwortungsverlagerung und Rechtsumgehung. Die hier vorgestellten Erkenntnisse beruhen auf einer gemeinsamen Analyse von Expert:innen des Forums InformatikerInnen für Frieden und Gesellschaftliche Verantwortung (FIfF e.V.) zusammen mit der Informationsstelle Militarisierung (IMI e.V.) und der Arbeitskreis gegen bewaffnete Drohnen e.V., die die Praxis der KI-basierten „gezielten Tötung“ wie etwa durch Lavender als Kriegsverbrechen zu ächten sucht. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/der-mythos-der-gezielten-ttung-zur-verantwortung-von-ki-gesttzten-zielsystemen-am-beispiel-lavender/

Navigating the grey (38c3)

Sat, 28 Dec 2024 14:45:00 +0100

Navigating The Gray; Hacker's Compass. In an expanding digital world, the lines quickly blur between what's good and what is bad (ethical and not) Without using big complicated words, Ethics are a reference for our action to know good from bad. In this talk we go over a framework of ethics to help predetermine which direction our actions would lead us. This is not a code of ethics saying what is good and what is bad, after all life is somewhere in between, and you do you. This is a more of a measurement tool, like a compass. A hacker's compass, a pocket sized framework of three ethics to triangulate where we are on the gray, and where our actions would take us. Prepared time for Q&A and little discussion after the talk. I would be happy to learn more from other people's experiences and Ideas on this topic. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/navigating-the-grey/

Life in the Lager: How it is & how to support (38c3)

Fri, 27 Dec 2024 13:50:00 +0100

Was ist ein Lager und warum ist es so schrecklich und unmenschlich? Wir werden einen Überblick über betroffene Perspektiven mit Selbsterfahrungen geben, wie man in Lagern (Wohnheimen, EAE) lebt. Wir geben einen Überblick über die rassistische Bezahlkarte, sowie die Einschränkung der Freiheit wie schwer ist und über das Leben von Jugendliche in Lagern. Was machen wir? Wie können wir unterstützen und worauf sollte man achten? Wir sind eine selbstorganisierte Initiative von Migrantinnen mit Fluchterfahrung, die in Ostdeutschland Rassismus im Alltag erlebt haben. Wir wollen ihre Lebenssituation sichtbarer machen und langfristig mehr gesellschaftliche Solidarität erreichen. In dieser Präsentation sprechen wir über das harte Leben in den Lagern und ländlichen Regionen, über den alltäglichen Rassismus in Behörden, am Arbeitsplatz …, Wir werden auch über die Bezahlkarte und Essensscheine sprechen, basierend auf unseren eigenen Erfahrungen. Diese Maßnahmen sind nicht nur rassistisch, sie entmenschlichen die Betroffenen – besonders Jugendliche. Sie verletzen ihre Würde, Wir geben auch Beispiele, wie jeder von euch konkret unterstützen und Solidarität zeigen kann. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/life-in-the-lager-how-it-is-how-to-support/

PC-Abkürzungen: Eine Lesung (38c3)

Mon, 30 Dec 2024 00:55:00 +0100

Ich lese aus einem antiken Werk zu Computerablürzungen vor Abkürzungen können alle verwirren, die sich noch nicht länger mit Computern beschäftigen. Aber auch der:dem Veteran:in sind nicht alle Abkürzungen bekannt oder weißt Du, dass IFE für intelligent front end steht, CAFS für Content Adressable File System oder RUN der Befehl ist, um Programme in BASIC auszuführen? Dieser Missstand muss behoben werden und wird es durch eine Lesung aus einem Kompendium gängiger PC-Abkürzungen. Damit auch was für Kenner:innen dabei ist, stammt das Kompendium aus 1994. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/pc-abkrzungen-eine-lesung/

State of Surveillance: A year of digital threats to civil society (38c3)

Sat, 28 Dec 2024 14:45:00 +0100

The digital arms race between activists and government spies continues to shift and evolve. Through a series of cases studies, researchers from Amnesty International's Security Lab will share surveillance wins, the ongoing challenges, and the new threats on the digital horizon. Drawing on research by Amnesty International and partners over the past year, we will examine how the digital threats facing activists and journalists continue to evolve and adapt. Progress has been made in reigning in abuses from highly invasive spyware, with vendors going out of business and others being hit by lawsuits and sanctions. The technical arms race between defenders and the exploit industry also shows signs for cautious optimism. However notorious spyware companies, occasionally with active government protection, continue taking steps to block much needed accountability efforts. Amnesty International will also the findings of a brand new investigation into the misuse of surveillance technology. The work for civil society to defend against these threats remains challenging. Surveillance vendors continue to deploy increasing murky webs of brokers and complex corporate structures to hide their activities, although we will show tactics that can be used to map these. The emerging surveillance threats at the intersection of mass surveillance, ad tech, and artificial intelligence are becoming all too real, and surveillance tactics continues to unequally and dangerously impact already marginalized people including woman and LGBTQI activists. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/state-of-surveillance-a-year-of-digital-threats-to-civil-society/

Hacker Jeopardy (38c3)

Mon, 30 Dec 2024 00:15:00 +0100

The Hacker Jeopardy is a quiz show. The well known reversed quiz format, but of course hacker style. It once was entitled „number guessing for geeks“ by a German publisher, which of course is an unfair simplification. It’s also guessing of letters and special characters. ;) Three initial rounds will be played, the winners will compete with each other in the final. The event will be in German, we hope to have live translation again. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/hacker-jeopardy/

Beyond BLE: Cracking Open the Black-Box of RF Microcontrollers (38c3)

Sun, 29 Dec 2024 15:45:00 +0100

Despite the recent popularity and breadth of offerings of low-cost RF microcontrollers, there is a shared absence of documentation for the internal workings of their RF hardware. Vendors might provide an API for their supported protocols, such as BLE, but their documentation will only provide as much detail as necessary to use these libraries. For practically every BLE MCU available to hobbyists, interfacing with the on-chip radio is limited to secret ROMs or binary blobs. In this talk, we will finally peel back the curtain on one of these RF MCUs, giving the ability to understand and unlock the full potential of the hardware to operate in new modes. The TI SimpleLink family of BLE and Sub-GHz RF MCUs present a general-purpose Cortex-M4F platform with extensive documentation for developing custom embedded/IoT devices. With a reference manual filled with countless diagrams and register maps for all its peripherals, the Radio section is surprisingly sparse, only mentioning a high-level API for exchanging commands between an RF coprocessor core. This secondary undocumented CPU is what handles the actual RF communication, running from an inaccessible ROM. There’s no mention of what peripherals lay beyond the coprocessor aside from generic “DSP Modem” and “RF Engine” modules. This talk serves to be the unofficial “Radio Reference Manual” of the SimpleLink MCUs, opening the black box of the RF subsystem and painting the full picture on how the radio operates - from the stack to the antenna. As part of this effort to fully understand these chips, we reverse engineered TI’s proprietary RF patch format, which enables SDK updates to introduce support for newer protocols on existing chips. We show how these patches allow you to modify the behavior of almost every part of the RF subsystem, control the RF subsystem in ways not intended, or even replace the ROM firmware entirely. Additionally, we investigate the hidden DSP Modem cores, and decode their proprietary ISA to disassemble and craft new firmware patches for them as well, potentially opening up the door for a cheap single-chip SDR. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/beyond-ble-cracking-open-the-black-box-of-rf-microcontrollers/

Basics of software publication (38c3)

Mon, 30 Dec 2024 13:30:00 +0100

You want to share your code with the world. That's great! But how? Just uploading it to Github? Or how do I do this? In this talk I want to give you an overview about the minimal steps you should take to prepare your code for publication. Covering what belongs into a repository, how to make your code sharable and which license to pick. This talk is based on the training [Foundations of Research Software Publication](https://codebase.helmholtz.cloud/hifis/software/education/hifis-workshops/foundations-of-research-software-publication/workshop-materials-data-pub). The target is to enable developers to create and publish sustainable software which can be used and built up on by others. While this talk is an introduction, even more experienced developers might take something home. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/basics-of-software-publication/

Operation Mindfuck Vol. 7 (38c3)

Fri, 27 Dec 2024 23:50:00 +0100

For the seventh time, we'll present a colorful potpourri of nerdsniping topics: some of our favorite facts about computers, art, and the world! We draw a lot of inspiration from new and absurd ideas, and we'd like to share that enthusiasm with you! - [Vol. 1](https://blinry.org/operation-mindfuck/) (German) - [Vol. 2](https://blinry.org/operation-mindfuck-2/) (German) - [Vol. 3](https://blinry.org/operation-mindfuck-3/) (German) - [Vol. 4](https://blinry.org/operation-mindfuck-4/) (English) - [Vol. 5](https://blinry.org/operation-mindfuck-5/) (English) - [Vol. 6](https://blinry.org/operation-mindfuck-6/) (English) Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/operation-mindfuck-vol-7/

Release–Keynote: ChaosGPT und das Large Congress Model (38c3)

Mon, 30 Dec 2024 00:05:00 +0100

ChaosGPT hat den Weg wie wir denken revolutioniert! Die kongresserprobte Technik wird endlich _open source_, CEO Gitte Schmitz und CRO Deliria Tremenz feiern in dieser Keynote den Release des Large Congress Model und erklären, was wirklich in AI steckt. Beim diesjährigen Kongress hat ChaosGPT erfolgreich hunderte von Anfragen prozessiert und dabei für alle erdenklichen User-Anfragen erstaunlich genaue Antworten erzeugt: und das ganz analog! Als _community-sourced_ generatives Wissensmodell wurden diese sensationellen Erfolge mit einem herausragenden Energieverbrauch von 0 kWh erreicht (in anderen Worten: extrem Klimaneutral!). War es bisher eine Black Box? Ja! Wird es OpenSource? Auf jeden Fall!* Das Leitungsteam ist stolz, endlich den gesamten Code hinter ChaosGPT und dem Large Congress Modells (L38C3M) lüften zu können. Nach monatelanger Entwicklungszeit wird es Zeit, das Folle Potential von Analoge Intelligence an die Community zurückzugeben.** Exklusiv geben CEO Gitte Schmitz und CRO Deliria Tremenz einen Einblick hinter die Kulissen des blühenden New-New-Tech StartUps. Mit spielender Leichtigkeit verbinden sie den Track **Queerness** mit dem **Digitalzwang**, und generieren mit ihren Antworten erheblichen Mehrwert für potentielle Angel Investors (und solche die es werden wollen). Lasst uns die verkannten Potentiale der AI lüften! *Die genutzte Open Source-Definition von Studio Gitte Schmitz umfasst auch die _business models_ "Open Window" und "Freemium". ** Eventuelle Nutzungsentgelte werden weiterhin entsprechend Nutzungsordnung (NuOrG §283 Abs.15f) erhoben. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/release-keynote-chaosgpt-und-das-large-congress-model/

io_uring, eBPF, XDP and AF_XDP (38c3)

Sat, 28 Dec 2024 17:15:00 +0100

Modern high-performance networking APIs on Linux - beyond the classic BSD sockets API. For many decades, application software programmers have been using the venerable BSD sockets API to make their applications communicate over (at least IP based) networks. Linux has supported TCP/UDP sockets ever since it had a network stack back in the 1990s. While those socket system call APIs are simple and straight-forward, they were designed at a time when internet access happened over dial-up modems and LANs had no more than 10 MBit/s, if at all. With today's Multi-Gigabit speeds even in consumer equipment and 40GE/100GE network interface cards for servers being a reality, using those 1980s BSD/POSIX socket interfaces comes with a huge performance penalty. Some specific use cases like single-flow high-throughput TCP on an end-node have seen optimizations that are transparent to the user (TCP segmentation offloading). But there's only so far you can go with that. Parts of the industry have proposed user-space network stacks built on DPDK - but then basically you do no longer use the Linux kernel network stack at all, and subsequently have none of its features. Yes, that can be fast, but Linux becomes nothing but a bootloader, and you have to implement everything from Ethernet to ARP and IP+TCP in your application. The answer of the Linux kernel community over the last 5+ years has been various new mechanisms and interfaces in the Linux kernel that revolutionize the way how applications can achieve higher network I/O throughput - whether an end host (server/client) or a packet-forwarding router/bridge/firewall. This talk provides a brief but deeply technical introduction into the problem space, the new mechanisms and their use cases. While the talk discusses features of the Linux kernel, we do not discuss their internals; the focus is on how those mechanisms can be used by applications. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/iouring-ebpf-xdp-and-afxdp/

Mal was mit Holz (38c3)

Mon, 30 Dec 2024 00:15:00 +0100

Bildervortrag zum Thema "Nachhaltige Inneneinrichtung" mit Mitbringseln zum Anfassen sowie Tipps & Tricks zu Konstruktion, Gestaltung und Durchführung Holz ist als nachwachsender Rohstoff ein umweltfreundliches Baumaterial, hat als Naturprodukt jedoch seine Eigenheiten. Der Vortrag geht auf die Basics der Holzbearbeitung ein, worauf geachtet werden muss und wie stabile Verbindungen oft völlig ohne Leim oder Schrauben hergestellt werden können. Die Bilder dazu verfolgen zwei Projekte von der Konstruktionszeichnung über die rohen Bohlen bis zum fertigen Produkt und geben Einblicke in das Handwerk, das oft auch ohne Maschinen auskommen kann. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/mal-was-mit-holz/

Eat the Rich! Die Menschen wollen soziale Sicherheit, aber kriegen „Deutschland den Deutschen“. Holt das Geld bei den Reichen! (38c3)

Sun, 29 Dec 2024 14:45:00 +0100

Bezahlkarte bald auch für Bürgergeld-Empfänger*innen, verschärfte Sanktionen, Pauschale für die Kosten der Unterkunft, weniger Regelsatz, Umzugszwang, verschärfte Zumutbarkeitsregelungen für Arbeitsangebote und Komplett-Überwachung: Die Debatte über das Bürgergeld ist völlig durchgedreht. Was kommt noch auf uns zu? Und wie kommen wir aus der Hetz-Spirale wieder heraus? Die Union hat das Bürgergeld zum wichtigsten Wahlkampfthema 2025 auserkoren und will es am liebsten sofort abschaffen. An Menschen, die Sozialleistungen beziehen, werden soziale und technische Methoden der Entmenschlichung erprobt. Im Talk geht es um die Frage, wie es sich im Bürgergeld lebt, was die Unterschiede zu Hartz IV sind, welche Auswirkungen die Überwachungsmethoden der Jobcenter haben und welche gesellschaftliche Funktion das Bürgergeld erfüllt. Ist das alles wirklich legal? Ist das vielleicht sogar egal? Und vor allem: Was können wir dagegen tun? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/eat-the-rich-die-menschen-wollen-soziale-sicherheit-aber-kriegen-deutschland-den-deutschen-holt-das-geld-bei-den-reichen/

From Pegasus to Predator - The evolution of Commercial Spyware on iOS (38c3)

Sat, 28 Dec 2024 13:30:00 +0100

My talk explores the trajectory of iOS spyware from the initial discovery of Pegasus in 2016 to the latest cases in 2024. The talk will start with an analysis how exploits, infection vectors and methods of commercial spyware on iOS have changed over time. The second section of the talk is all about advances in detection methods and the forensic sources which are available to discover commercial spyware. This talk will also include a Case Study about the discovery and analysis of BlastPass (one of the latest NSO Exploits). The third part will discuss technical challenges and limitations of the detections methods and data sources. Finally, I will conclude the talk with open research topics and suggestions what Apple or we could technically do to make the detection of commercial spyware better. The commercial spyware landscape on iOS has evolved significantly since the discovery of Pegasus in 2016. In this talk, we’ll explore that evolution through four main areas: 1. Spyware Evolution (2016-2024): By analyzing key exploits, tactics, techniques, and procedures (TTPs), infection vectors, and indicators of compromise (IOCs), we’ll trace how spyware has advanced in sophistication, highlighting changes that have led to today’s complex threats. 2. Advancements in Detection: As spyware has grown more sophisticated, so too have detection capabilities. We’ll review the main actors, public organizations and tools that have shaped spyware detection. This part will also include a case study on my discovery and analysis of a sample NSO‘s BlastPass Exploit chain. 3. Current and Future Challenges: Looking forward, we’ll examine the pressing challenges in spyware detection and speculate on how commercial spyware might evolve in response to new security measures and technologies. 4. Recommendations for Research and Detections: Finally, I’ll offer recommendations for advancing research and detection methods and capabilities to combat commercial spyware. Attendees will gain a comprehensive view of the past, present, and future of spyware on iOS, along with actionable strategies for future research and collaboration. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/from-pegasus-to-predator-the-evolution-of-commercial-spyware-on-ios/

Hackspace-Vorstellungen (38c3)

Sat, 28 Dec 2024 12:00:00 +0100

Eine Vorstellung der Hackspaces Eine Vorstellung der Hackspaces organisiert via wiki at https://events.ccc.de/congress/2024/hub/de/wiki/hackspace-vorstellungen/ Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/hackspace-vorstellungen/

Escaping Big Brother (or Your Ex) - counter surveillance for women's shelters (38c3)

Sat, 28 Dec 2024 23:55:00 +0100

Maintaining privacy and security when those closest to you is exploiting the worst of surveillance capitalism and patriarchy to pwn you is a user case no one planned for. Or should Big Tech have known better? Gender-based violence has existed in all societies and centuries, but in the 21st one the digital arena is proving to be especially tricky for victims. When (primarily) women leave their abusive (primarily) male partners or family members they often have to leave behind everything and make a clean break - including from their digital identities. This is way easier said than done. (Ever tried unsubscribing from.. anything?) Surveillance capitalism has further exacerbated this challenge, as stalker-ware is becoming increasingly prevalent and easy to use, if not a default feature. Stalking As A Service is of course already a thing, and why should you watch someones house in the rain all night when you can let your Tesla do it for you? Lost your wife? Hide an AirTag in the lining of her bag and have two billion iPhones keep track of her across the planet. Apple won't tell. It's almost like society is fundamentally misogynistic and internet accelerated the opportunity for patriarchal control..? This talk shares experiences working with women's shelters and training victims as well as activists and professionals in cyber security and opsec. The situation's bad and it's getting worse, fast. Digital violence, or gender-based violence using digital means, is expressed in control and abuse. Control of finance, social life, the children, the photos, the conversation, relationships, life. Emotional, sexual, financial, psychological abuse - online. Mark Zuckerberg is not the first stalker to creep the Earth but probably the first to become a billionaire scaling his methods and monetizing his crimes. Sharing war stories of practical feminist threat intel with literally lifesaving tech, Elin has advised women's shelters how to protect their clients and Escape Big Brother in Sweden for the past couple of years. This includes perverse exploits, institutional failures, psyops, and how any and everything can be used against you - if the threat actor is persistent enough. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/escaping-big-brother-or-your-ex-counter-surveillance-for-women-s-shelters/

Ultrawide archaeology on Android native libraries (38c3)

Sun, 29 Dec 2024 20:15:00 +0100

A bug in a scraper script led to us downloading every single native library in every single Android app ever published in any market (~8 million apps). Instead of deleting this massive dataset and starting again, we foolishly decided to run some binary similarity algos to check if libraries and outdated and still vulnerable to old CVEs. No one told us we were opening Pandora's box. A tragic story of scraping, IP-banning circumvention, love/hate relationships with machine learning, binary similarity party tricks, and an infinite sea of vulnerabilities. A rumor has been going around: Android developers are slow to update native dependencies, leaving vulnerabilities unpatched. In this talk we will show how *wrong* this rumor is: Android developers are not slow to patch - they never heard of the word patching. We conduct a massive study over the every single app ever published on Android (more than 8 million!). We explore trendy topics like Play Store scraping, Androzoo scraping, Maven repository scraping, the state of the Android ecosystem, binary similarity state-of-the-art methods vs binary similarity pre-historic methods, and the consequences of thinking you know how databases work when you actually don't. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/ultrawide-archaeology-on-android-native-libraries/

KLARHEIT ALS WAFFE (38c3)

Fri, 27 Dec 2024 17:15:00 +0100

UBERMORGEN infiltriert Kunst, Medien und digitale Monokulturen mit subversiver Affirmation. Wie Donald Trump auch, zerstören sie täglich ihr Geschäftsmodell, um daraus radikal neue Lösungen zu schaffen. Anhand von Projekten wie Vote-Auction, Google Will Eat Itself und PMC Wagner Arts dokumentieren sie ihre künstlerische Evolution im Never-Ending Now. Chaos ist ihre Methode, Kunst ihre Neue Ehrlichkeit, Klarheit ihre Waffe. Der Vortrag, eine Mischung aus emotionalem Appell und intellektueller Analyse, thematisiert die Notwendigkeit von Klarheit und bewusster Simplifizierung als Gegengewicht zum Streben nach Perfektion in einer Welt der wahrgenommenen und effektiven Hyperkomplexität. UBERMORGEN stellt infrage, wie viel künstlerische Freiheit im aktuellen Zeitalter der „Happy Dystopia“ noch bleibt, respektive was ‘Radikaler Universalismus’ (Abstraktion zwecks Mustererkennung) für weitläufige Möglichkeiten in der Praxis eröffnen, und beleuchtet, wie ihre neuesten Werke das Potenzial kritischer Ästhetik und radikaler Experimente inmitten einer fragmentierten Informationslandschaft ermöglichen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/klarheit-als-waffe/

Is Green Methanol the missing piece for the Energy Transition? (38c3)

Mon, 30 Dec 2024 12:00:00 +0100

In an accelerating climate crisis, renewable energy and electrification are the most important tools to reduce greenhouse gas emissions. However, in sectors where electrification is infeasible or impossible, other solutions will be needed. While hydrogen gets a lot of attention, it suffers from challenges like being difficult to transport and store. While it does not receive nearly as much attention as hydrogen, another molecule, methanol, could play a crucial role in bringing down emissions in challenging sectors like shipping, aviation, or the chemical industry. Methanol is the simplest carbon-containing liquid and is currently almost exclusively made from fossil fuels. However, it could be made by utilizing renewable energy, green hydrogen, and carbon dioxide, and such green methanol could play an important role in a climate-neutral future - both as a fuel and as a chemical feedstock[1]. Methanol is relatively easy to store and transport. It could provide energy during times with little sun and wind and possibly even balance multi-year fluctuations [2][3]. It could also serve as a shipping fuel and, indirectly, help make aviation fuels. Furthermore, it could form the basis of a fossil-free production of chemical products like plastics [4][5]. That raises important questions about stranded assets in today's chemical industry, as the existing plastic production with steam crackers could become obsolete. Despite its prospects, methanol is no magic silver bullet. Making it from CO2 requires enormous amounts of energy. It should be used carefully and only where efficient direct electrification is infeasible (no methanol car, sorry). Alternative production pathways using climate-friendly biomass and waste have turned out to be challenging in the past, but they could lower some of the enormous energy needs. [1] [From Coal enabler to the Minimal Green Methanol Economy, Industry Decarbonization Newsletter, 2024](https://industrydecarbonization.com/news/from-coal-enabler-to-the-minimal-green-methanol-economy.html) [2] [Ultra-long-duration energy storage anywhere: Methanol with carbon cycling, Joule, Brown, Hampp, 2023](https://www.cell.com/joule/abstract/S2542-4351(23)00407-5) [3] [Should we burn Methanol when the Wind does not blow?, Industry Decarbonization Newsletter, 2023](https://industrydecarbonization.com/news/should-we-burn-methanol-when-the-wind-does-not-blow.html) [4] [Climate change mitigation potential of carbon capture and utilization in the chemical industry, PNAS, Kätelhön et al, 2019](https://www.pnas.org/doi/full/10.1073/pnas.1821029116) [5] [How to make Plastics without Fossil Fuels, Industry Decarbonization Newsletter, 2023](https://industrydecarbonization.com/news/how-to-make-plastics-without-fossil-fuels.html) Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/is-green-methanol-the-missing-piece-for-the-energy-transition/

Prototypes to Props: How to Build and Hack in the Film/TV Industry (38c3)

Sat, 28 Dec 2024 14:45:00 +0100

Look behind the scenes with filmmaker, inventor, and former Mythbuster Davis DeWitt and learn how Hollywood hackers combine prototyping and art to bring movie magic to life! Through real-world examples, this talk will explore the unique challenges of creating builds for the entertainment industry, from designing prototypes to filming the final sequence and everything in between. Have you ever been asked to build a smoke grenade or blow up a car? With over 8 years of experience in the film industry, Davis is one of the hackers with the skills to accommodate these unusual requests. In this talk, we'll explore several of his favorite builds to highlight how anyone can get started combining art and hardware hacking on their own. From CAD, to 3D printing, microcontroller programming, painting, weathering, cinematography, and more, discover how multiple disciplines blend together to create hacker movie magic! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/prototypes-to-props-how-to-build-and-hack-in-the-film-tv-industry/

Illegal Infrastructure: 12 years of hosting in the greyzone (38c3)

Sun, 29 Dec 2024 01:10:00 +0100

We provide internet infrastructure and fight to keep it anonymously accessible to all. What did we learn about law enforcement? Why is offshore hosting more important than ever? In our talk we share our perspective, talk about the challenges we faced and provoke ideas to go forward. For over 12 years we are providing internet infrastructure (e.g. webspace, domains, servers) for those who need protection because they are not protected by the law. We share our experience that has brought us not only a constant source of technical challanges and puzzels, time and again we also experienced juridical and logistical challenges. We were subject to arbitrary persecution by the police and intelligence agencies and harassment by lawyers and angry individuals. But for a lot of reasons we are still fighting so that internet infrastructures remain accessible to everyone independent of their origin, their ability to get a bank- or paypal account and - hear hear - their need to stay completely anonymous and without surveillance. Our journey that began with a radical and very liberal (admittingly naïve) view on a decentralized and free internet (which we in part still hold!), has taken many turbulent turns. It gave us a probably unique perspective on the internet. The 45.000 email complaints that have accumulated in our mailbox are our witness: We really saw a wide variety of weirdness. Motivated by this years motto "legal illegal scheissegal -- whatever it takes" we want to highlight some of the bizarre cases we got involved in by constantly operating in between legality and illegality. However, obscure and questionable, sometimes controversial content is not what motivates us. We serve infrastructure to people and have been at the side of insipring collaborators for many years. Forging those connections we observe that the group of individuals, projects and organizations that reach out for protection has changed a lot over the years. With worry we observe that the group that needs protection is getting broader and broader. If someone had told us 10 years ago that a civil society organization which organizes school walk outs on Fridays for environmental protection would be knocking on our door, we would have reacted with complete disbelief: What on earth, has happened to our society? In our talk we share our perspective on this development. We also provide concrete criticism of new and coming legislation and their consequences which we think are often overlooked. Our ability to protect those who have already been pushed beyond the margins is getting ever more difficult and risky. The rise of fascist governments all over the world will bring arbitrary persecution into new dimensions. We are gradually losing our abilities to protect others. New cybercrime laws that supposedly aim to protect citizens, or anti money laundry laws that aim to prevent the harmful use of digital currencies like shitcoin also have drastic consequences for those who need protection. By exploring these and other topics through our perspective we invite feelings of dissonance: complex issues can be contradicting and difficult to digest: Balancing on the margins of legality to provide new legal grounds is a solidaric act that can increase our societies resilience. Grayzones need to be protected even when they are used by malicious actors. We argue that it is important that more people need to join the fight and dare to step into the grayzone in their own way, with the means they have available. Defending any freedom is best done with a diversity of tactics, direct action and in a decentralized fashion. Most importantly, through strong communities! Form gangs -- Bildet Banden! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/illegal-infrastructure-12-years-of-hosting-in-the-greyzone/

Von Ionen zu Daten: Die Funktionsweise und Relevanz von (Quadrupol-)Massenspektrometern (38c3)

Mon, 30 Dec 2024 14:45:00 +0100

Massenspektrometer sind unverzichtbare Analysewerkzeuge in der Chemie und zudem hochinteressante und verblüffende Instrumente. In diesem Talk wird die Massenspektrometrie mit Schwerpunkt auf Quadrupolmassenspektrometer anschaulich vorgestellt. Massenspektrometer aus der Hacker-Perspektive: Die Massenspektrometrie mag auf den ersten Blick kompliziert wirken, doch mit einem grundlegenden Verständnis der Physik und etwas logischem Denken kann man sich überraschend gut in diese Welt einarbeiten. Ich beschäftige mich seit vier Jahren intensiv mit Massenspektrometern – eine Technik, die mich immer mehr fasziniert und in die ich tief eintauche. Dieser Vortrag richtet sich an alle, die bisher wenig bis gar nichts über Massenspektrometrie wissen und erklärt auf zugängliche Weise, wie (Quadrupol-)Massenspektrometer funktionieren und warum sie so entscheidend für die chemische Analyse sind. Wir schauen uns an, wie diese Geräte auf molekularer Ebene arbeiten und welche spannenden Anwendungen es gibt, die unseren Alltag beeinflussen. Dabei werden die physikalischen Grundlagen verständlich erklärt, sodass jeder – auch ohne Vorkenntnisse – nachvollziehen kann, wie und warum diese Technologie so wichtig ist. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/von-ionen-zu-daten-die-funktionsweise-und-relevanz-von-quadrupol-massenspektrometern/

Blåmba! ☎️ Behind the scenes of a 2000s-style ringtone provider (38c3)

Sat, 28 Dec 2024 00:15:00 +0100

A Deep Dive into WAP, SMS, monophonic ringtones and 1-bit graphics. A key part of early 2000s advertisements were hyperactive frogs and annoying crocodiles trying to lure people into subscribing to overpriced ringtones and silly graphics for their mobile phones. Apart from shady business practices -- how exactly do you send pictures and ringtones to vintage GSM mobile phones (most of which don't even support TCP/IP)? In our quest to learn more, we stumbled across WAP-Push, User Data Headers, Concatenated SMS, SMPP, User Agent Profiles and many more forgotten technologies. To put all this knowledge to good use, we built Blåmba -- a Chaos ringtone provider, clearly inspired by the (now long defunct) historic ones. Then at Chaos Communication Camp 2023 with the C3GSM network, we had the first public instalment of Blåmba. The Chaos community uploaded lovely artwork and new ringtones, sent patches for the software, and had a fun time reviving their old Nokia phones. This talk will tell the story behind Blåmba, explain how ringtones (and more) made their way onto your phone, what a WAP gateway did, and what other cool tricks mobile phones could do (if you had the money to pay for GPRS traffic 20 years ago). Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/blmba-behind-the-scenes-of-a-2000s-style-ringtone-provider/

Fake-Shops von der Stange: BogusBazaar (38c3)

Sat, 28 Dec 2024 20:30:00 +0100

Du bestellst im Internet? Natürlich bestellst Du im Internet. Aber dieses Mal wird Deine Ware nicht geliefert. Stattdessen sind Dein Geld und Deine Kreditkartendaten nun in China. Das ist BogusBazaar. Wir teilen unsere Einblicke in die Arbeitsweise dieser Bande. In den vergangenen drei Jahren hat allein diese eine kriminelle Organisation, die wir BogusBazaar nennen, auf mehr als 75.000 Domains gefälschte Markenshops aufgesetzt und damit eine Million Bestellungen mit einem Auftragsvolumen von mehr als 50 Millionen USD abgewickelt. Ein ausgeklügeltes und über die Jahre gewachsenes Setup ermöglicht einen reibungslosen Prozess vom Kopieren der originalen Markenläden, über das Aufsetzen gefälschter Webshops und dem Konfigurieren der Produkte, bis hin zum Orchestrieren der Zahlungsinfrastruktur. Wir hatten einen einmaligen Einblick in dieses Setup und in die Arbeitsweise dieser Bande. Neben Kundendaten und Quellcode konnten wir auch Verträge und Dokumentation studieren und mit den Opfern über ihre Erfahrungen sprechen. In diesem Talk berichten wir über die Hintergründe unserer Recherche. [Die Zeit](https://www.zeit.de/2024/21/gefaelschte-online-shops-fake-shops-betrug-china), [The Guardian](https://www.theguardian.com/money/article/2024/may/08/chinese-network-behind-one-of-worlds-largest-online-scams) und [Le Monde](https://www.lemonde.fr/en/pixels/article/2024/05/08/online-scams-behind-the-scenes-of-the-world-s-largest-network-of-fake-online-retailers_6670775_13.html) berichteten. Der Vortrag ist ein Spin-Off aus der Reihe „[Hirne Hacken](https://media.ccc.de/v/36c3-11175-hirne_hacken)" (36C3), „[Hirne Hacken - Hackback Edition](https://media.ccc.de/v/37c3-12134-hirne_hacken_hackback_edition)“ (37C3) und „[Disclosure, Hack und Back](https://media.ccc.de/v/camp2023-57272-disclosure_hack_and_back)“ (Chaos Communication Camp '23) und will Einblicke in das Handeln von Kriminellen geben, die auch weiterhin aktiv sind. Damit Ihr nicht auf sie hereinfallt. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/fake-shops-von-der-stange-bogusbazaar/

Vectors, Pixels, Plotters and Public Participation (38c3)

Sat, 28 Dec 2024 20:30:00 +0100

The talk introduces technology-driven urban art projects that emphasize public participation and creativity. Each project employs a DIY machine to transform public spaces and create art collaboratively. How were these machines built? How do ideas evolve, and how can creative machines foster community connections? Find the answers and get some inspirations in this entertaining and insightful talk by Niklas a.k.a. royrobotiks. In his talk, Niklas will highlight some of his latest projects that use DIY machines to involve communities in creating art together. From a graffiti robot to a giant mosaic that was designed by an entire neighborhood with the help of a mobile arcade machine, he’ll share the stories behind his inventions. He will discuss his sources of inspiration, the creative process and thoughts about inclusiveness guiding the development of the machines, and the joy of watching diverse people interact with and contribute to these unconventional art pieces. Join Niklas for an insightful journey into how inventiveness can transform urban environments, while also bringing people together through creativity and play. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/vectors-pixels-plotters-and-public-participation/

Feelings are Facts: Love, Privacy, and the Politics of Intellectual Shame (38c3)

Fri, 27 Dec 2024 21:10:00 +0100

A debut of new research and analysis, focused on emotions and the affective register—love! shame! intimacy! What happens when we put love and intimacy at the center of our understanding of privacy, and what are the consequences of their disavowal, in favor of a more familiar technocratic definition of privacy-as-absense? What role does our deep desire for love and belonging, and our concomitant fear of shame and rejection, have to do with the (mis)direction of tech capital and the current, warped shape of the tech industry and its products? We take these questions seriously, and work through their implications together in Hamburg during that brief, liminal window between the winter holidays and the new year. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/feelings-are-facts-love-privacy-and-the-politics-of-intellectual-shame/

arafed futures - An Artist Dialogue on Chip Storage and AI Accelerationism (38c3)

Sat, 28 Dec 2024 17:15:00 +0100

The global chip shortage during the COVID-19 pandemic brought semiconductor production into focus, sparking accelerated efforts to meet the surging demand for digital infrastructure. This phenomenon not only expanded AI capabilities but also introduced unexpected computational artifacts. One such artifact is the word “arafed”, a term absent from any dictionary yet mysteriously appears across contexts from image prompts to Amazon product descriptions. Such unintended linguistic artifacts, born from transformer-based AI models, exemplify how digital artifacts emerge into realities with which we cohabitate. The talk investigates how supply-chains break and AI-words spread from an artistic research perspective. Mapping both the abstract landscapes of embedding spaces, that are filled with emergent words and images, and the tangible, geopolitical realities of global semiconductor supply chains. The accelerating pace of generative AI has put a strain on the interconnected software and hardware systems necessary for generative AI. The artist duo explores the media specificity of generative artificial intelligence. The talk consists of two parts: The material aspects of AI, specifically the story of semiconductor and chip shortage. And the spread of hallucinations like terms that escaped their embedding space into language. The working of LLMs is often limited by computational power. These obstacles tethered abstract computation to the physical world, exposing how materiality plays a critical role in the implementation of AI. The investigation begins by examining the causes of the chip shortage — a disruption that brought the semiconductor industry and its surrounding geopolitical tensions into discourse. On the hardware level, NVIDIA’s A100 chips, produced using Taiwan’s TSMC 7nm process, exemplify this intersection, providing the power to expand large language models (LLMs) and image generators. On the software level, the increasing demand for ai-as-service accelerates the use of models with complex pipelines. This interconnected use of models, in turn, leads to the emergence of unexpected artifacts that are morphing back into everyday reality. While browsing AI-generated images on social media, one might come across the word "arafed" in image descriptions, such as, "an arafed man in a white robe riding on top of a blue car.". Yet, a dictionary definition is nowhere to be found. An image search for "arafed" reveals something striking: all resulting images appear AI-generated, spread across various image-sharing and stock photography platforms. The term "arafed" seems to lack a clear origin, but a few posts attribute it to the BLIP-2 model, an image-captioning system that generates descriptive text from image inputs. However, the BLIP-2 paper doesn't mention "arafed" but running BLIP-2 clearly produces descriptions containing this artifact-like word, as if "arafed" has embedded itself in the model's vocabulary. Through the widespread and often unintentional use of BLIP-2 in libraries, extensions, and services, the interconnected nature of software has spread the word into research papers, Amazon descriptions, and even other datasets, further revealing the brittle infrastructure generative-ai systems are built upon. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/arafed-futures-an-artist-dialogue-on-chip-storage-and-ai-accelerationism/

Hacking the RP2350 (38c3)

Fri, 27 Dec 2024 23:00:00 +0100

Raspberry Pi's RP2350 microcontroller introduced a multitude of new hardware security features over the RP2040, and included a Hacking Challenge which began at DEF CON to encourage researchers to find bugs. The challenge has been defeated and the chip is indeed vulnerable (in at least one way). This talk will cover the process of discovering this vulnerability, the method of exploiting it, and avenues for deducing more about the relevant low-level hardware behavior. The RP2350 security architecture involves several interconnected mechanisms which together provide authentication of code running on the chip, protected one-time-programmable storage, fine-grained control of debug features, and so on. An antifuse-based OTP memory serves as the root of trust of the system, and informs the configuration of ARM TrustZone as well as additional attack mitigations such as glitch detectors. Raspberry Pi even constructs an impressive, bespoke Redundancy Coprocessor (RCP), which hardens execution of boot ROM code on the Cortex-M33 cores with stack protection, data validation, and instruction latency randomization. Since there are many potential incorrect guesses to be made about where problems might lie, here I begin with the most fundamental features of the chip logic, including the reset process. Even small oversights at this level can entirely defeat sophisticated security efforts if higher-level mechanisms place complete trust in seemingly simple hardware operations. I show how cursory research into the design details of IP blocks used in the SoC can help inform an attack, and demonstrate the importance of fully testing new features which are built atop older IP. Ultimately, the significant amount of luck (or lack thereof) involved is a reminder of the need to meticulously understand and validate complex systems. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/hacking-the-rp2350/

From Critical Making via unmaking towards (un)making (38c3)

Sat, 28 Dec 2024 11:00:00 +0100

In this talk, an advocate of (un)making, Yoshinari Nishiki, dives into the historical foundation of the concept. Starting from the Maker movement, transitioning to Critical Making, evolving into unmaking, and culminating in (un)making, Yoshinari emphasizes a process defined by the deliberate absence of production, where (un)making itself embodies the act of not producing. Unmaking is a newly emerged term in the fields of HCI and design that references the idea of unlearning. In unmaking, researchers have explored the realms of making beyond the pursuit of plastic perfection: one prominent study investigated the aesthetics found in the processes of decay in 3D-printed objects. In (un)making, however—a variant of unmaking—Yoshinari attempts to step away from production itself while still generating monetary value. As profit-making entities increasingly face pressure to claim—whether superficially or substantially—that they are reducing their environmental impact, the overall trend of relentless production remains largely unchanged and unchallenged. This raises a critical question: can we ever truly stop making? One reason we find it nearly impossible to stop is that the urge to make is deeply ingrained in our nervous systems. While pioneering researchers have begun to explore this issue by moving beyond unlearning to the concept of unmaking, little insight has emerged regarding the dilemma of value creation. Put simply, people cannot stop making things because they need to keep earning. Universal Basic Income (UBI) is not a straightforward solution, as it could further reinforce the monetary logic of resource acquisition. Instead, we need to (re)develop skills to derive benefits from our surroundings with minimal effort. This is precisely what Yoshinari Nishiki is exploring in his engineering PhD on (un)making. However, to address the historical complexities of production, it is essential to revisit the evolution of our modes of making. In this talk, Yoshinari carefully traces the origins of (un)making, from the Maker movement and Critical Making to the emerging concepts of unmaking and (un)making. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/from-critical-making-via-unmaking-towards-un-making/

Opt Green: Coordinating a Windows 10-to-Linux upcycling campaign across Free Software communities worldwide (38c3)

Sat, 28 Dec 2024 11:00:00 +0100

Windows 10 security updates end on 14 October 2025, KDE's 29th birthday and also, ironically, International E-Waste Day [1] (you cannot make these things up!). Hundreds of millions of functioning devices [2] will become e-waste. This means manufacturing and transporting new ones, which is perhaps the biggest waste of all: hardware production alone can account for over 75% of a device's CO2 emissions over its lifespan. Free Software is a solution, today, and if we work together Windows 10 could truly be the last version of Windows users ever use! In this talk I will present the issue of e-waste and the importance of right-to-repair software, and invite the audience to participate in coordinating a global, unified Free Software campaign over the next year to raise awareness about the environmental harm of software-driven hardware obsolescence, while promoting upgrading users from Windows 10 to GNU/Linux directly. Extending hardware's operating life with Free Software is good for users, and better for the environment. Let's think big and act boldly as a unified community! [0] https://arstechnica.com/gadgets/2024/10/lots-of-pcs-are-poised-to-fall-off-the-windows-10-update-cliff-one-year-from-today/ [1] https://weee-forum.org/iewd-about/ [2] https://www.canalys.com/insights/end-of-windows-10-support-could-turn-240-million-pcs-into-e-waste This is a talk about digital sustainability and the role software plays in hardware longevity. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/opt-green-coordinating-a-windows-10-to-linux-upcycling-campaign-across-free-software-communities-worldwide/

Moving with feelings: Behind the scenes of a one man show mobile & fiber operator in Spain (38c3)

Mon, 30 Dec 2024 12:00:00 +0100

How to run an MVNO with values: What are the requirements? Do you need a government license, maybe a lot of investment? There are different types of MVNOs. We will talk about how to do business as an MVNO while respecting users' privacy, supporting free software, believing in the right to repair and making your customers technologically sovereign. The issues with data privacy are being discussed more than ever. However, from the end user perspective, it is difficult to understand the full extent of the impact on their privacy when using well known "free" services or maybe acquired hardware like a vacuum cleaner or a cooking robot. On the other side, there are projects that demonstrate that they can do business respecting their users. One way to start to take care of your privacy is by using free software, but this software needs to be high quality, easy to use for the end user, has to be documented in a clear way and has to resolve issues and bugs as fast as possible. This is very hard work for the developers, so their work has to be compensated. Last but not least, the right to repair plays a big role for being technologically sovereign. It's as important to be aware of your privacy when using online services as it is to know how repairable and privacy-respecting hardware is before you buy it. Can you fight for and support what you believe in while doing business? I think so! Let's talk about it. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/moving-with-feelings-behind-the-scenes-of-a-one-man-show-mobile-fiber-operator-in-spain/

Automation and Empathy: Can We Finally Replace All Artistic Performers with Machines? (38c3)

Sat, 28 Dec 2024 23:00:00 +0100

In this talk, artist and robotic musician Moritz Simon Geist explores whether robots and avatars can establish an emotional connection with a human audience, and examines the implications this has for arts and culture. Algorithms and machines are transforming how artworks are produced - but can they replicate the complex psychosocial capacity of empathy in performative arts like music and theater? Moritz offers an example-based overview of the history of non-human performers in the arts and shares current state-of-the-art projects in this field. He discusses his personal journey of combining engineering with art, highlighting projects like the "MR-808 Drum Robot" and automated installations like "Don't Look at Me." Through these works, he examines how robotic performers impact audience perception and emotional engagement. The talk asks critical questions: How do machines alter the psychosocial dynamics of performance? What are the minimal structures needed to evoke an empathetic response from the audience? How does the concept of the Uncanny Valley, as proposed by Masahiro Mori, influence our reactions to non-human performers? So - can we automate empathy? Let's find out! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/automation-and-empathy-can-we-finally-replace-all-artistic-performers-with-machines/

Retro-Chips selbst gemacht: Historische Hardware in FPGAs nachbilden (38c3)

Sat, 28 Dec 2024 23:00:00 +0100

Retro-Computing ist heute die Domäne der bekannten Software-Emulatoren. Aber auch die ursprüngliche Hardware selbst kann und sollte dokumentiert und konserviert werden. Ich zeige, was es damit auf sich hat und wie man daheim mit moderatem Einsatz einen ganzen Retro-Computer nachbaut. Mit Hilfe von rekonfigurierbaren Chips klappt das auch weitgehend ohne Löten oder die allgegenwärtigen Arduinos und Raspberry-Pis. Der Begriff Maker ist inzwischen eng mit den Arduinos und dem Raspberry-Pi verbunden. Auch wenn es um den Erhalt historischer Systeme geht sind Nachbauten in Form von Emulatoren auf Raspi-Basis ganz vorne dabei. Das ist verständlich, wenn man sieht wie preisgünstig diese Geräte sind, wie viele entsprechende Retro-Projekte es gibt und wie einsteigerfreundlich sie sich meistens nutzen lassen. Aber neben der klassischen Software gibt es mehr zu erhalten: Die historische Hardware lässt sich leider nicht mal eben auf einen USB-Stick kopieren. Und mit den alten Geräten geht auch das Wissen dahinter verloren und die oft eleganten oder trickreichen Lösungen, die in der Anfangszeit nötig waren, um bezahlbare Hardware mit einfachsten Mitteln zu bauen. Ich zeige, wie sich wesentliche Aspekte der Systeme mit Hilfe von konfigurierbarer Hardware erhalten und auf elegante Weise dokumentieren lassen. Ich zeige Euch, wie man mit geringem Materialeinsatz aber viel Neugierde Retro-Systeme in FPGA-Chips wieder zum Leben erweckt. Was braucht man? Wo bekommt man es her? Und wie wird daraus ein Heimcomputer der 80er? Das zeige ich unter anderem am konkreten Beispiel des NanoMig, der Nachbildung eines Commodore Amiga Homecomputer, dessen gesamte Hardware sich in einem modernen FPGA unterbringen lässt ... ganz ohne Arduino- oder Raspberry-Pi-Unterbau. FPGA-Retrocomputing ist in den letzten zehn Jahren populär geworden. Auch das von mir vor gut zehn Jahren entworfene MiST-Board aber vor allem das darauf folgende MiSTer-Projekt hatten ihren Anteil daran. Diese Systeme werden oft als etwas fortschrittlichere Emulatoren (miss-)verstanden, hinter ihnen steckt aber vor allem eine als rekonfigurierbare FPGA-Hardware bezeichnete recht ungewöhnliche Technik abseits üblicher CPUs, Speicher- und Peripheriebausteine. Auf die Geschichte und Hintergründe werde ich nur kurz eingehen. In diesem Vortrag soll es um die Praxis gehen. Ich werde beschreiben, was man an Hard- und an Software für die ersten Schritte auf dem Weg zur Wiederbelebung von Retro-Hardware benötigt. Wie es sich für Open-Source gehört muss man auch hier nicht das Rad immer wieder neu erfinden. So wie die damaligen Computer viele Gemeinsamkeiten hatten, so sind auch in ihren FPGA-Nachbauten viele Komponenten wiederverwendbar. Aber wie wird aus einem realen Chip überhaupt etwas, das einen realen FPGA-Baustein zu gleichem Verhalten animiert? Wie wird die Logik beschrieben? Was lässt sich aus alten Hardwareunterlagen direkt übernehmen? Was lässt sich in FPGAs (leider) nicht mehr direkt realisieren? Schließlich wird es darum gehen, wie man ein solches Projekt überhaupt angeht. Natürlich sind Klassiker wie der Commodore C64 oder der Amiga die verlockendsten Ziele für solche Vorhaben. Für die ersten Schritte eignen sich aber vor allem viele der einfacheren Maschinen oder sogar selbst erdachte Geräte. Ganz ohne Lötkolben verkabelt man sich den eigenen Retro-Computer und spätestens wenn der erste eigene Videochip das erste Testbild auf den VGA-Bildschirm bringt wird klar: Das ist kein Arduino. Der Umgang mit konfigurierbare Hardware ist nicht unbedingt komplizierter als die Arbeit mit Arduino und Co. Aber sie ist fundamental anders. Viele Denkmuster, die erfahrenen Programmierern in Fleisch und Blut übergegangen sind, lassen sich nicht auf Hardware übertragen oder sind, wie sich zeigen wird, sogar irreführend. Und wie debuggt man überhaupt einen selbstgebauten Chip? Und was wird aus Fernseher und Floppy-Diskette, die damals zwingendes Zubehör waren? Und wenn selbst der Mikroprozessor Teil der Konfiguration ist, dann kann man natürlich beliebige Änderungen vornehmen. Fehlte Dir damals dieser eine Befehl, der alles revolutioniert hätte? Hätte der Atari ST den Amiga ausgestochen, wenn er Hardware-Sprites unterstützt hätte? Probier es aus! Konfigurierbare Hardware bedeutet auch, dass alles veränderbar ist. Ein Dual-Core C64? Ein ZX81 mit Tonausgabe und Farbdarstellung? Warum nicht gleich der eigene 8-Bit-Wunschcomputer? Und wem das alles noch viel zu einfach erscheint, der erfährt schließlich, wie er mit Hilfe von Platinenproduktion in Fernost und dem heimischen 3D-Drucker nicht nur Software und Hardware erhält, sondern gleich die ganze Maschine noch einmal zum Leben erweckt. Am Ende meines kleinen Vortrags werdet ihr wissen, wie ihr Euer eigenes Retro-Projekt für kleines Budget startet und vielleicht mithelft, das Wissen hinter der ursprünglichen Hardware zu erhalten. Ihr lernt, wie man die ein oder andere Maschine wieder in einer Form erlebbar macht, die über die übliche Softwareemulation auf einem PC hinausgeht. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/retro-chips-selbst-gemacht-historische-hardware-in-fpgas-nachbilden/

Find My * 101 (38c3)

Mon, 30 Dec 2024 14:45:00 +0100

I'll introduce the technology underlying bluetooth trackers from Apple and Google, and will describe and show what can actually be seen on the air (using a hackrf/rad1o for example). This is part demonstration of what is possible right now, part explanation of the underlying principles, and part invitation to would-be hackers to make creative use of this technology. Apple's "Find My" network has been online for more than 5 years. Google has launched its own variant "Find My Device" this year. The Apple protocol has been previously reverse-engineered, while Google's specs are publicly available. Both take part in Detecting Unwanted Location Trackers (DULT), an IETF draft. Underlying this is standard Bluetooth Low Energy (BLE) which can be analyzed, and toyed with, with all the standard BLE research tools. I'll show how to sniff and interact with these trackers using tools that many hackers might already have available. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/find-my-101/

Sacrificing Chickens Properly: Why Magical Thinking is Both the Problem and the Solution. (38c3)

Sun, 29 Dec 2024 11:00:00 +0100

As an Anthropologist, magical thinking is a normal fact of life. Rather than dismissing it outright, our job is to look at its function and yes, rationality, for groups at hand. Starting out with a story about actual chickens being sacrificed to ensure the harvest, this talk explores the prevalence of useful magical thinking in our own community. Using metaphors, or even personifications, doesn‘t make a person irrational. It‘s applying a principle implicitly onto a subject matter which works completely differently, that would be the problem. After all, unless you are a strict vegetarian, it‘s not the killing of a chicken as such you‘d object to, it‘s the idea that this act makes rain. With LLMs, our public sphere has run into a problem where experts are at loss explaining a very complicated thing to a general public, which often lacks the basic terms with which to understand how this mechanism works. The instant personification of LLMs can lead to vast mismatches between their actual capabilities and what those stories imply. Rather than dismissing them outright, the question posed would be, what‘s the alternative? The talk is intended to be a light-hearted overview of some examples of both useful and dangerous constructions used to simplify complexity. It aims to touch upon some of the mechanisms that should be heeded in order to be able to tell a better story. Causality is hard. Hence the hackers jargon file contains certain references about voodoo, deep magic and yes, even the sacrifice of chickens for the greater good. In that case, that good would be „the stakeholder‘s peace of mind“. Rather than looking at the content of the subject matter, this talk is strictly about language. It highlights the issues arising when experts aim to talk about non-experts about subject matters which are not easily put into words. More precisely, not easily understood by human-sized categories of the mind. The core point is highlighting what could be called the default library present in humans: Stories, with actors and actions leading to results. Anything that‘s not easily fit into that category struggles to be understood. Underneath this, there‘s a set of basic assumptions, comparable to the terms and capabilities of a programming language or it‘s paradigm, which sets the stage for the human-sized stories to happen in. Those are very hard to even see, let alone change, for any individual. Rather than fighting assumptions, replacing a story with another story can be done far more easily. The challenge addressed in this talk is the tendency of public discourse to revolve around human-sized categories even when faced with system-sized problems. The talk invites to use the ethnographer‘s eye in order to combat dread and anger in the current public discourse. Rather than asking „how can you be so stupid?“, asking „how can you be thinking in the terms you are“ and look for logic. This skill can give you one pointed edge: Discerning active lies and acts of propaganda from honest mistakes brought about by mismatched metaphors. Which, in the end, makes the world look like a much more friendly place. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/sacrificing-chickens-properly-why-magical-thinking-is-both-the-problem-and-the-solution/

Self Models of Loving Grace (38c3)

Sat, 28 Dec 2024 16:00:00 +0100

Artificial Intelligence is not just an engineering discipline, but also the most fascinating and important philosophical project ever attempted: the explanation of the mind, by recreating it. This part of the series "From Computation to Consciousness" focuses on the nature of the self, agency and identity. When we recognize the paradigm of Artificial Intelligence as a philosophical and scientific framework for understanding the nature of minds like ours, we may begin with an essential question: What does it mean for a machine to feel? How do emotions arise at the intersection between a self and its world—or more precisely, within an a reflexive self model, in response to being dynamically reconfigured by a motivational system, in response to shifts in its alignment to a model of its environment, all within the same mind? This inquiry takes us to the core of our own psychological architecture. Who are we when our self-perception alters? What does it mean to depersonalize, to dissolve the boundaries of the self? Can we reverse engineer, debug and reconstruct our identities to become who we want to be? Is there free will? Is it possible to recreate self and sentience in nonbiological substrates? Can AI be conscious? Could we perhaps even extend our own self to non biological substrates? This presentation is part of the philosophical series “From Computation to Consciousness,” which draws on insights from AI and cognitive science to explore the nature of intelligence, consciousness, and their realization in the physical universe. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/self-models-of-loving-grace/

Lightning Talks Day 2 (38c3)

Sat, 28 Dec 2024 11:00:00 +0100

Lightning Talks are short lectures (almost) any congress participant may give! Bring your infectious enthusiasm to an audience with a short attention span! Discuss a program, system or technique! Pitch your projects and ideas or try to rally a crew of people to your party or assembly! Whatever you bring, make it quick! 11:00 Opening Lightningtalks 11:05 400kWp Eigenbau-PV als Genossenschaft,mherweg 11:10 The Shadow Life of Endless Pots.Jakob Kilian 11:15 Chaos Sticker Collection,mwarning 11:20 Eurobox,Ledge 11:25 Midimaxe,polygon 11:30 Hamburg Werbefrei - auf zum Volksbegehren!,N. E. Flick 11:35 Reliable Radio Communications,Bernerd DO3RB 11:40 "The Sound Of Data - Turning planets, DNA and stock prices into music",Jonas Scholten 11:45 "Moderne Landwirtschaft ist kaputt, oder?",twe 11:50 Old-School Demo-Effekte mit pyxel,Marco Bakera 11:55 RegretBlocker,Andreas Haupt 12:00 "Satzungsänderung unter Zuhilfenahme von ReStructuredText, Git und Python",adnidor 12:05 Pfandgeben die Plattform zum Pfandspenden,Chris 12:10 GLED,René 12:15 From Pixels to Procedures: An Open Source Design Suite for 2025,Dennis Kobert 12:20 Das bisschen Haushalt - lässt sich nicht gut verteilen,Rici 12:25 Freie Software in Organisationen - Das geht!,Leonard Marschke 12:30 Inside a modern groovebox,dena 12:35 GNU Boot,Denis 'GNUtoo' Carikli 12:40 Functional Safety over Industrial Ethernet - Broken by Design,Nick Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/lightning-talks-day-2/

May the forest be with you – Bäume pflanzen gegen die Klimakrise? (38c3)

Sun, 29 Dec 2024 19:15:00 +0100

Der Harz wurde von Borkenkäfern gefressen, nur jeder vierte Baum in Deutschland gilt als gesund und in Russland sowie Nordamerika brennen die Wälder in einem enormen Ausmaß. Gleichzeitig gelten Wälder als eine der Lösungen in der Klimakrise, als CO2-Speicher und Produzent von nachhaltigen, nachwachsenden Rohstoffen. Sind Wälder in Gefahr auf Grund von Dürre, Borkenkäfer und Feuer? Und können wir mit Wiederaufforstungen der Klimakrise was entgegensetzten? Kirsten Krüger forscht an der Technischen Universität München zu Störungsdynamiken in Wäldern und erklärt in ihrem Vortrag, was Wälder eigentlich alles für uns leisten, warum Störungen ein natürlicher Bestandteil von Wäldern sind und Bäume pflanzen allein keine akkurate Antwort auf die Klimakrise ist. Störungen im Wald durch Dürre, Borkenkäfer und Feuer prägen zunehmen das Landschaftsbild und erhalten mehr Aufmerksamkeit von Medien und Politik. Die Sorge reicht von dem Szenario, dass wir alle Wälder verlieren werden hin zu dem Verlust von einem wertvollen CO2-Speicher und Produzenten von Holz. Global neue Bäume zu pflanzen scheint eine intuitive Antwort drauf zu sein, löst aber nicht die Herausforderung der Klimakrise vor der wir gerade stehen. In meinem Vortrag möchte ich aufklären, warum Störungen im Wald per se kein Problem, sondern ein Teil der Waldentwicklung sind und wie sich diese auf die CO2-Speicherfähigkeit und andere Fähigkeiten von Wäldern auswirken. Wälder sind keine statischen Konstrukte in der Landschaft, sondern ein dynamisches System, welches uns viele Dienstleistungen bereitstellt. Es gibt genug Gründe Bäume zu pflanzen, aber warum, wo und wie sind entscheidende Fragen, die ich beleuchten möchte. Außerdem berichte ich aus der aktuellen Forschung um den Zustand der Wälder, wie vor allem wir Menschen den Wald beeinflussen und möglichen Ansätzen, wie wir Wälder widerstandsfähiger machen können. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/may-the-forest-be-with-you-bume-pflanzen-gegen-die-klimakrise/

Going Long! Sending weird signals over long haul optical networks (38c3)

Mon, 30 Dec 2024 12:55:00 +0100

Computer network operators depend on optical transmission everywhere as it is what glues together our interconnected world. But most of the industry is running the same kinds of signals down the optical transceivers. As part of my need to "Trust, but verify" I wanted to check my assumptions on how the business end of modern optical modules worked, so join me in a adventure of sending weird signals many kilometres, and maybe set some records for the most wasteful bandwidth utilisation of optical spectrum in 2024! Computer network operators depend on optical stuff everywhere as it is what glues together our interconnected world. But most of the industry is running the same kinds of signals down the optical transceivers. As part of my need to "Trust, but verify" I wanted to check my assumptions on how the business end of modern optical modules worked, so join me in a adventure of sending weird signals many kilometres, and maybe set some records for the most wasteful bandwidth utilisation of optical spectrum in 2024! In this talk we will cover the basis of optical networks, how it fits in with networking, some of the weird things pluggable optics do, the perhaps odd industry defacto standards, and bending the intended use cases of existing tech to make signals that would would deeply probably confuse a modest signals intelligence agency Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/going-long-sending-weird-signals-over-long-haul-optical-networks/

Der Schlüssel zur COMpromittierung: Local Privilege Escalation Schwachstellen in AV/EDRs (38c3)

Sat, 28 Dec 2024 16:00:00 +0100

Im vergangenen Jahr wurden von uns in fünf kritische Schwachstellen in Endpoint Protection Software entdeckt, die es uns ermöglichen, auf Basis von COM-Hijacking unsere Privilegien auf Windows-Endpunkten zu erweitern. In diesem Vortrag demonstrieren wir, wie COM-Hijacking genutzt werden kann, um Code im Kontext geschützter Frontend-Prozesse auszuführen. Zudem zeigen wir auf, wie COM Hijacking das Vertrauensverhältnis zwischen geschützten Frontend-Prozessen und Backend-Diensten aushebelt um höhere Privilegien (Local Privilege Escalation) auf Systemen zu erhalten. Des Weiteren erklären wir unsere Methodik und Vorgehensweise um solche Schwachstellen zu finden und auszunutzen. Abschließend enthüllen wir Details zu den von uns gefundenen Schwachstellen und diskutieren mögliche Gegenmaßnahmen. COM-Hijacking ist vor allem als Technik bekannt, um auf Windows-Endpunkten Persistenz zu erreichen. In diesem Vortrag stellen wir jedoch eine weniger bekannte, aber äußerst wirkungsvolle Anwendung vor: Wir haben COM-Hijacking eingesetzt, um Code in die geschützten Frontend-Prozesse von Sicherheitsprodukten einzuschleusen. Dadurch konnten wir die Vertrauensbeziehung zwischen diesen Prozessen und den privilegierten Backends ausnutzen und hohe Privilegien auf dem Endpunkt erlangen. In unserem Vortrag erläutern wir detailliert unsere Vorgehensweise zur Identifikation dieser Schwachstellen und stellen die technischen Aspekte der von uns entdeckten Lücken im Detail vor. Im ersten Teil des Vortrags zeigen wir, wie wir mittels COM-Hijacking in der Lage waren, Code im Kontext der geschützten Frontend-Prozesse auszuführen. Im zweiten Teil analysieren wir die Kommunikationsmechanismen zwischen Frontend und Backend und legen offen, wie wir diese Vertrauensverbindung kompromittieren konnten. Abschließend erklären wir verschiedene Techniken, die es uns ermöglichte, unsere Privilegien auf Systemebene erfolgreich zu erweitern und diskutieren Gegenmaßnahmen die ähnliche Schwachstellen verhindern könnten. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/der-schlssel-zur-compromittierung-local-privilege-escalation-schwachstellen-in-av-edrs/

Software accessibility without the fuzz (38c3)

Sat, 28 Dec 2024 14:15:00 +0100

We've all heard how important digital accessibility is, at this point. But how does one get started with this complex topic? Let's cover all the techy basics! Software accessibility is important, we all know that by now. In the past years while working as an accessibility consultant, many people have asked me the very same question: How do I get started with this? I'm overwhelmed by all the different resources! Heck, I can't find anything useful! In all fairness, I get you. There's so much fuzz surrounding this. Social workers will feel right at home because of this, but frankly, for us techies, it just doesn't work that way. We would like to know what to do precisely, or at least dive deeper into a topic on our own terms. In this talk, I would like to give a brief overview over what's important only for programmers and where you can educate yourself further. We can do this together! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/software-accessibility-without-the-fuzz/

Guardians of the Onion: Ensuring the Health and Resilience of the Tor Network (38c3)

Sat, 28 Dec 2024 20:30:00 +0100

Millions of internet users around the world rely on Tor to protect themselves from surveillance and censorship. While Tor-powered applications and the Tor protocol are widely known, the community behind it much less so. This talk will highlight the efforts to maintain a healthy and resilient Tor network, emphasizing the crucial role of a diverse, engaged community of relay operators. We’ll discuss some recent news, the current state of the network, how we determine its health, and the strategies to strengthen its resilience, addressing challenges around sustainability and governance. If you're interested in understanding the inner workings of the Tor network, this talk is for you. This talk is designed to give an overview of Tor's 'new and not-so-new' network health initiatives in response to some of the pressing questions that emerged from the recent reporting about Tor in Germany. After a brief introduction to "Tor," we will primarily focus on issues relating to the Tor network and its community, underscoring the critical importance of distributed trust, transparency, and engagement in maintaining a robust and healthy ecosystem. We will provide a short overview of the fundamental components of the Tor network, detailing the different types of relays that constitute its infrastructure and the role these can have through their lifetime. We will emphasize that the network operates independently of the Tor Project, sustained by a decentralized, global community of contributors. By analyzing network metrics—such as relay distribution across countries and Autonomous Systems (AS)—we will highlight the current state of the network and identify opportunities for increasing geographic and technical diversity. This is followed by an introduction to the concept of network health. We will define the term, assess the current condition of the Tor network, and showcase the different modes of participation. We will primarily consider this through the lens of an 'alleged' over-reliance on relay concentration in specific regions, such as Europe and the United States. These insights will inform a discussion on how a more geographically distributed network could improve resilience, enhance security, and increase overall functionality. The talk will also address the primary challenges facing the Tor network: Sustainability remains a central concern, particularly with regard to maintaining a stable, secure, and decentralized network over time. Additionally, ensuring trust within the community is essential, especially in the face of potential misuse by malicious actors. We will explore the need for incentive structures that encourage the operation of relays while preserving the network’s independence and autonomy. We will review and debate initiatives the Tor Project has proposed to support a decentralized network without imposing centralized control. In response to these challenges, we will propose several potential solutions. Expanding outreach efforts to regions outside the Global North could promote greater diversity in the relay community, thereby strengthening the network’s ability to resist censorship and external threats. We will also examine existing incentive frameworks that support relay operators. Furthermore, we will discuss the success of Snowflake proxies—widely adopted in regions with restrictive internet environments—and how it demonstrates how lowering the barrier to entry for running nodes can encourage broader participation from the community. Finally, we will outline our strategy for ensuring the long-term health of the Tor network, focusing on governance, community engagement, and sustaining the network’s decentralized nature. We will conclude with a call to action, inviting participants to contribute to the continued sustainability and development of the Tor network. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/guardians-of-the-onion-ensuring-the-health-and-resilience-of-the-tor-network/

we made a globally distributed DNS network for shits and giggles (38c3)

Sun, 29 Dec 2024 15:45:00 +0100

DNS infrastructure is a bespoke pile of interconnected "standards", and its management is often treated as an afterthought. With Project SERVFAIL we aim to change that perception, providing both general docs and a community-run alternative to commercial nameservers - all of which while staying exceedingly *silly*. What started as a joke shitpost on fedi ended up with us spending multiple weeks hacking on everything DNS: from infra setups, through automating DNSSEC deployments, up to writing a fully custom zone edit website. With [Project SERVFAIL](https://beta.servfail.network), we set out to discover what we could do better than the status quo. With barely any progress in the past 15 years, the NS provider field has seemingly stagnated. We set out to change that - and while SERVFAIL is still a Work in Progress, we're already at a point where we have a lot to share: stories of horror, upstream negligence, but also of hope and wonder for the future. All of this while still bringing a vibe that wouldn't let you mistake us for for an enterprise - and for free, OSS, of course. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/we-made-a-globally-distributed-dns-network-for-shits-and-giggles/

Das IFG ist tot – Best of Informationsfreiheit, Gefangenenbefreiung & Machtübernahmen (38c3)

Sun, 29 Dec 2024 20:15:00 +0100

Die Versprechungen waren groß: Blühende Transparenz-Landschaften, Mitbestimmung, Korruptionsprävention, De-mo-kra-tie! Das Informationsfreiheitsgesetz sollte den deutschen Staat besser machen. Nach Jahren schlechter Verwaltungspraxis, schlechter Gerichtsurteile und schlechter Politik ist es in wichtigen Teilen aber nutzlos geworden. Das zeigt sich vor allem, wenn man sich Szenarien einer antidemokratischen Regierungsübernahme vorstellt - die Transparenz wäre als erstes hinüber, der Boden dafür ist schon bereit. Was tun? Wenn das IFG tot ist, sollten wir dafür kämpfen, es wiederzubeleben – vielleicht als Untote? Zahlreiche Skandale, die FragDenStaat in diesem Jahr aufgedeckt hat, zeigen, wohin der Weg gehen sollte: - Wir brauchen mehr Leaks & illegal instructions für Beamte - Es ist Zeit, Verwaltungen zu infiltrieren Mit dem Best of Informationsfreiheit, FragDenStaat, Gefangenenbefreiung und Machtübernahmen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/das-ifg-ist-tot-best-of-informationsfreiheit-gefangenenbefreiung-machtbernahmen/

Der CCC-Jahresrückblick (38c3)

Sat, 28 Dec 2024 16:00:00 +0100

Wir geben einen Überblick über die Themen, die den Chaos Computer Club 2024 beschäftigt haben. Neben der Zusammenfassung und der Rückschau auf das vergangene Jahr wollen wir aber auch über zukünftige Projekte und anstehende Diskussionen reden. Von der Ampel über den epa bis zur Chatkontrolle, welche Themen haben den CCC in 2024 auf Trab gehalten? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/der-ccc-jahresrckblick/

Kein Spaß am Gerät auf 'nem toten Planet(en)! (38c3)

Sun, 29 Dec 2024 00:55:00 +0100

Seit Jahren kämpft das Bits-&-Bäume-Bündnis, dem auch der CCC seit Beginn angehört, für eine ökologische und sozial gerechte Digitalpolitik – 2024 war dabei ein Jahr voller Hochs und Tiefs. Wir kämpfen emsig weiter und stellen unsere gemeinsame Arbeit vor. Von erstmals sinkenden CO₂-Emissionen in Industrieländern, über den weiterbrennenden KI-Boom mit Nachhaltigkeitsanstrich, die Rolle von digitalen Plattformen für anti-demokratische und nicht-nachhaltige Bewegungen, den ökologischen Fußabdruck von Profiling bis hin zum Tech-Solutionismus von Elon Musk jetzt im Weißen Haus war das Jahr 2024 außergewöhnlich. Vor diesem Hintergrund präsentieren Anja und Rainer von Bits&Bäume in diesem Vortrag einen kleinen Jahresrückblick, stellen die spannenden neuen Ideen für sozial-ökologische Digitalpolitik vor, blicken kritisch auf den weiterhin immensen Ressourcenfußabdruck der Digitalisierung, den aktuellen, demokratiegefährdenen Umgang mit Online-Tracking und umreißen die Bits-&-Bäume-Forderungen an die nächste Bundesregierung. Zusätzlich wird Esther Mwema aus Zambia zu Wort kommen und den Fokus auf die neokoloniale Macht von BigTech auf dem afrikanischen Kontinent lenken. Sie plädiert für neue lokale, demokratisch-selbstbestimmte digitale Infrastrukturen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/kein-spa-am-gert-auf-nem-toten-planet-en/

Wie fliegt man eigentlich Flugzeuge? (38c3)

Sat, 28 Dec 2024 23:00:00 +0100

Etwas wie die "Sendung mit der Maus", dafür mit tiefer fachlicher Ausführung und allen Details. Es handelt vor allem um Technik und Abläufe, die man als Laie oder Fluggast nicht sehen und wissen kann. Flugzeuge können fliegen, das muss man nicht mehr erklären. Aber hat ein Flugzeug wirklich einen Schlüssel wie ein Auto? Kann ich einfach einsteigen und losfliegen? Die Antwort lautet: Es kommt darauf an. Fliegen ist ein komplexes Zusammenspiel von Technik, Physik, Menschen und Prozessen. Und je nachdem, wie und was man fliegt, was hat ein A380 mit einer Cessna 152 gemeinsam? Wir nehmen euch mit auf einen fiktiven Flug von Frankfurt nach Mumbai und zurück und erklären euch, was alles im Hintergrund passiert und wovon ihr nichts mitbekommt. Es erwartet euch eine Mischung aus Vortrag, lustigen Geschichten und auch Yak-Shaving, damit wir gemeinsam verstehen, was da eigentlich genau passiert. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/wie-fliegt-man-eigentlich-flugzeuge/

A fully free BIOS with GNU Boot (38c3)

Sun, 29 Dec 2024 13:30:00 +0100

In this talk we will first show you that a fully free BIOS firmware, is not only possible but also necessary to guarantee your freedom, technological independence and security in the long run. We will then present GNU Boot, a 100% free boot firmware distribution that accomplished these goals. The presentation will be held by Adrien Bourmault, one of the GNU Boot maintainers, whom will dive into the project's origins, goals and current status. It's getting harder and harder to find hardware that works with 100% free (as in freedom) software. To counter this, the promotion and development of fully free boot firmware is ever more crucial. Firmwares are software that sit in between the hardware and the operating system. They play a crucial role in making our computers work. However most of the time they are proprietary (nonfree). This limits users' freedom who are forced to trust black boxes. Being able to use 100% free firmwares can not only guarantee security but also enable transparency and control by the community. In this talk we will look at what is a boot firmware, and why it is essential that it is free software, and how it works in practice. We will also look at GNU Boot, a fully free boot firmware distribution: we will look at how the project is organized, what are features it provides, and its role within the movement for a fully free software BIOS/UEFI replacement. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/a-fully-free-bios-with-gnu-boot/

WissPod Jahresrückblick 2024 oder: Reichweite, my ass! (38c3)

Sat, 28 Dec 2024 21:45:00 +0100

Mit unseren Gästen sprechen wir über Podcasts in der Wissen{schaft}skommunikation, über Ziele und Kriterien – und darüber wieso Reichweite alleine nicht glücklich macht! Melanie Bartos und Bernd Rupp blicken zurück auf das wissenschaftspodcasts.de-Jahr 2024 und sprechen über die Perspektiven, die sich für das Wissenschaftspodcast-Jahr 2025 bereits abzeichnen. Dabei beleuchten wir die Herausforderungen bei der Kuration, die Anmeldezahlen neuer Wissenschaftspodcasts, die Weiterentwicklung der Website sowie den Aufbau und die Betreuung der WissPod-Community. Diese umfasst inzwischen rund 370 Wissenschaftspodcasts mit insgesamt über 28.000 Episoden. Wie immer zeigen wir, wie neue Wissenschaftspodcasts in die Kuration aufgenommen werden, was sie während des Kurationsprozesses erwartet. Wir möchten darüber diskutieren, welche Rolle Reichweite noch spielt und wie sinnvoll es ist, sie als zentrale Größe zu betrachten. Das möchten wir entlang zweier Aspekte tun: Einerseits das Hosting und die langfristige Archivierung von Podcasts, andererseits die Kommunikationswege mit unseren Hörer:innen, wie sie beispielsweise das Fediverse eröffnet. Gemeinsam mit unseren Gästen und dem Publikum vor Ort wollen wir diesen vieldiskutieren Fragestellungen mit der Podcast-Brille etwas auf den Grund gehen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/wisspod-jahresrckblick-2024-oder-reichweite-my-ass/

Can We Find Beauty in Tax Fraud? (38c3)

Sun, 29 Dec 2024 15:45:00 +0100

What do Olaf Scholz, blue ikea bags, Moldova, Deutsche Bank, fine art, and Butyrka Prison have in common? Join us for a brief stroll through the hidden, shady world of large-scale tax fraud, cross-border financial crime, money laundering, and corruption. We’ll examine both common and lesser-known financial exploits, drawing on revelations from journalists, activists, and investigators over the last few decades. Can there be beauty in abstraction? And are dividend stripping or VAT fraud diagrams really as dull as they seem? But most importantly: Is defrauding the public of 64 billion euros considered science, engineering, or art? And what does this have to do with you—and why should you care? Using real-world case studies, we’ll explore how corporations and individuals defraud populations and how these schemes—though sometimes confusing or complex on the surface—rely on surprisingly simple, chained tactics, much like exploits in information systems. We’ll break down the roles of various actors, service providers, fraudsters, and corrupt officials, as well as their playbooks, exploring how these crimes work or how they break and fail. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/can-we-find-beauty-in-tax-fraud/

Och Menno: Physik sagt NEIN-Von Kickstartern und SciFi Waffen (38c3)

Sun, 29 Dec 2024 17:45:00 +0100

Was haben Triton, Fontus und Railguns gemeinsam ? Coole Sales Slides aber evtl. wenig Ahnung von Physik. Ein kleiner Live Podcast zu Projekten wo eine Grundlage an Physik ein Verschwenden von Geld verhindert hätten. Der Failpodcast live auf der Bühne: Es gibt viele Projekte die ja wunderschön Shiny aussehen. Und der CEO hat sogar Industriedesign studiert. Und die Slides sind toll. Und es gibt ein tolles 3D Video. Was soll schon schiefgehen ? Warum kann man nicht Unterwasser mit der Triton atmen, in der Wüste nicht aus der Fontus trinken ? Ich nehme euch mit in eine kleine Reise durch Kickstarter Fails / Scams bis hin zu Militärprojekten die auf dem Papier schön aussahen aber halt im Ende ne ganze Menge Geld verblasen haben. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/och-menno-physik-sagt-nein-von-kickstartern-und-scifi-waffen/

Nein zur Bezahlkarte - Rechte Symbolpolitik mit Solidarität aushebeln (38c3)

Sun, 29 Dec 2024 13:50:00 +0100

Im Februar dieses Jahres wurde in Hamburg als Pilotprojekt die sogenannte „SocialCard“ eingeführt. Bei dieser Bezahlkarte handelt es sich um eine Visa Debitkarte, die an geflüchtete Menschen in der Erstaufnahme ausgegeben wird und mit massiven Einschränkungen verbunden ist: Es können keine Überweisungen oder Lastschriftverfahren getätigt werden, Onlinehandel ist gar nicht oder nur mit Sondergenehmigung der Behörde möglich. Die Bezahlkarte reduziert außerdem den monatlichen Barbetrag, der abgehoben werden kann auf 50 € für Erwachsene und 10 € für Menschen unter 18 Jahren. Die Abhebung ist nur gegen Gebühren am Automaten oder beim Einkauf im Supermarkt möglich, der meist mit einem Mindesteinkaufswert von mindesten 10 € verbunden ist. 50 € Bargeld reichen einfach nicht um ein selbstbestimmtes Leben zu führen. Wir haben uns deswegen zusammengeschlossen und mit Hilfe von vielen solidarischen Leuten einen Gutschein-Tausch gestartet, um Menschen mit Bezahlkarte zu unterstützen und zu Bargeld zu verhelfen. Wir wollen so viele Menschen wie möglich erreichen und ermutigen sich zu beteiligen, auszutauschen, eigene Strukturen aufzubauen oder zusammen mit uns gegen die Bezahlkarte zu protestieren. Denn sie ist nur der Anfang. Wir wissen, dass die „SocialCard“ derzeit an den vulnerabelsten Menschen getestet wird und in Zukunft auf alle Sozialleistungsempfänger ausgerollt werden soll. Also lasst uns und zusammen die Bezahlkarte stoppen. Wir vernetzen und solidarisieren uns bundesweit mit Gruppen, die eine Tauschstelle einrichten und sich aktiv gegen die rechte Symbolpolitik stellen. Wir setzen uns dafür ein, dass die diskriminierende und entmündigende Bezahlkarte abgeschafft und durch ein Basiskonto ersetzt wird. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/nein-zur-bezahlkarte-rechte-symbolpolitik-mit-solidaritt-aushebeln/

Lokalnews-Mining (38c3)

Mon, 30 Dec 2024 16:00:00 +0100

Ihr wolltet schon immer wissen was der „Morgenthau-Plan“ mit Kreisverkehren und „Schönwetterfreizeitsportgeräten“ zu tun hat? Dann lasst mich euch mitnehmen in die wundersamen, obskuren und humoristisch wertvollen Untiefen eines lokalen Nachrichtenportals. Was kann die interessierte Beobachterin von außen über das System lernen? Welche Werkzeuge brauchen wir für diese Expedition? Welche Kreaturen der Nacht kriechen durch die Untiefen der anonymen Kommentarfunktion? Und kann man eigentlich auch etwas Schönes aus den Daten machen, die da täglich ins Netz gekippt werden? Wie viele Orte in Deutschland hat Lübeck eine von diesen etwas schrägen Lokalnews-Seiten, die wirken, als wären sie in der Zeit stecken geblieben. Aber dennoch sind sie irgendwie wichtig sind für das Leben in der Region. Der schnöde Wetterbericht, Beschwerden über Baustellen, Filz-Workshops und Veranstaltungsankündigungen für die LAN-Party des CDU-Ortsverbandes - alles kann einem hier begegnen. Natürlich garniert von Kommentaren aus dem ganzen Spektrum des Wahnsinns. Seit über einem Jahr sammle ich die Daten, die diese obskure Seite ins Internet bläst, werte sie aus und bastele daraus nützliche oder wenigstens lustige Dinge. Von all diesen Abenteuern meines Hobby-Projekts „hl-lol“ möchte ich euch berichten. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/lokalnews-mining/

Hacking Victorian Bodies: From Grid to Vector Space (38c3)

Mon, 30 Dec 2024 00:15:00 +0100

This performative lecture by SOLID FLESH Collective explores how generative AI can reshape historical body representations into tools for imagining new bodily futures. Drawing from Muybridge’s chronophotography, which fixed bodies into a rigid scientific grid, we investigate AI’s capacity for fluid, multidimensional embodiment. Using open-source AI models to ‘resurrect’ Muybridge’s subjects and defy commercial censorship, we reveal speculative possibilities for bodily motion and identity. Our work positions the ‘vector body’—a digitally-mediated form of self-imagination—within a broader conversation on identity fluidity, algorithmic embodiment, and liberating futures beyond conventional body ideals. In this performative lecture, the SOLID FLESH Collective reimagines how artistic practice can transform historical methods of body representation into tools for imagining radical new forms of embodiment. SOLID FLESH Collective, a hybrid space bridging the realms of gym, gallery, and think tank, examines how Muybridge’s chronophotography once ‘solidified’ bodies within a rigid grid, contrasting it with generative AI’s potential for unprecedented fluidity in self-reimagining. We present a series of experiments in ‘resurrecting’ Muybridge’s subjects, using open-source AI tools to transform scientific documentation into speculative fictions. When commercial AI flagged these Victorian images as ‘pornographic,’ this rejection spurred us to explore alternate approaches, resulting in the creation of wonderfully surreal, inhuman movements with animDiff—as if the AI, uninformed by human motion, were an animator imagining it for the first time. The lecture positions the AI-mediated body within a multidimensional vector space of possibilities, spanning dimensions of gender, age, class, and experience. Through our custom ComfyUI workflow and selected clips from our ongoing film project (solidflesh.com), we show how this ‘vector body’ allows for forms of self-imagination that break free from the solidifying gaze of the camera. Our technical explorations engage larger questions around identity fluidity, algorithmic embodiment, and the possibility of a new, digitally mediated somatic imagination. As mainstream AI development often reinforces conventional body ideals, we speculate on alternative futures, asking how these technologies might instead enable liberating bodily self-conceptions. Moving beyond Muybridge’s grid and current AI’s polished limitations, we explore what approaches to algorithmic embodiment might emerge when we embrace the glitches and ‘failures’ of these systems. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/hacking-victorian-bodies-from-grid-to-vector-space/

Pirouette Machines. Fluid Components (38c3)

Sat, 28 Dec 2024 13:50:00 +0100

This lecture follows the path of an ex-ballerina through fluid computers, handmade semiconductors, and cosmetic synthesisers. We will tackle the seductive side and hidden narratives of circuitry to natural systems, salty fluids, and minerals and discuss the importance of alternative hardware morphologies. Pirouette Machines. Fluid Components embarks on an intimate visual essay on an alternative history of computer hardware in which minerals, cosmetics and fluids mingle in tactile experiments. A lipstick converted into a strident sound generator resonates through toxic entanglements with one of its main historical ingredients: lead. Following a radioactive decay chain, lead ore or galena is found on our lips and in our early 20th-century technologies such as crystal radio demodulation frenzy. This talk draws parallels between different types of hardware materialities and personal stories surrounding computing components in their use. Starting with the beauty industry, the talk serpents amongst toxic concoctions filled with heavy metals oscillating to become predecessors to the first transistors and their alternative fluidic siblings that use air and water instead of electricity. Fluidics is a technology lost in history. To operate, it requires only simple fluid matter guided by natural phenomena. Much like its mineral counterpart: electronics, fluidics builds circuits for computing. This talk concludes by following the seductive forms that fluidic circuits assume, forms, that can reimagine the morphologies of our current electronic machines. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/pirouette-machines-fluid-components/

Fnord-Nachrichtenrückblick 2024 (38c3)

Sat, 28 Dec 2024 01:10:00 +0100

Wir zeigen euch die Fnords in den Nachrichten des Jahres. Endlich wieder ein normaler Ausklang fürs Jahr! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/fnord-nachrichtenrckblick-2024/

corebooting Intel-based systems (38c3)

Mon, 30 Dec 2024 14:45:00 +0100

Gaining a reasonable level of trust on the firmware that runs your everyday activities Corebootable or not corebootable, that is the question. The nerdiest nerds already corebooted their old X230 ThinkPads... but what about your new ThinkPad, or even your gaming rig? Well, Intel has a trick called the "BootGuard" inside the Management Engine. It is supposed to protect the firmware and only allow updates from signed sources... somewhat like the Secure Boot. This means we can't coreboot our newer machines, right? ..right? Well, for that to work... it needs team-play between OEMs and Intel, which doesn't always work out. In this talk you will learn how to port coreboot to modern Intel systems - how we did it and even got to game on them. We'll go over coreboot development, tell you how to find ~~potential subjects~~ compatible mainboards and what it would take to boot on them!). We'll explain what are "payloads", which one is right for you, and what it takes to make such system run mainline Linux. We'll also take a look at current state of AMD systems and how they're doing with OpenSIL (which will replace AGESA in the coming years). Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/corebooting-intel-based-systems/

10 years of emulating the Nintendo 3DS: A tale of ninjas, lemons, and pandas (38c3)

Sat, 28 Dec 2024 16:00:00 +0100

How is 3DS preservation faring 10 years after the release of the first emulator? What technical obstacles have we overcome, which ones remain? What hidden gems have we discovered beyond games? Join us on a journey through the struggles, the successes, and the future of 3DS emulation! The 3DS marks a key point in the evolution of handheld consoles from embedded systems to more powerful PC-like architectures, which makes it particularly interesting as a target for emulation: We'll look at the technical challenges presented by its unique hardware components and the custom microkernel-based software stack built on top of it, the various approaches taken to emulate them (low-level vs. high-level), and the trends we're seeing for the future. These technical challenges are put into historical context by looking at the emulator Citra, its initial way to success, the interplay between emulator developers and console hackers, and the impact of a prominent lawsuit that ultimately led to Citra's shutdown. Additionally we'll highlight broader community efforts like Pretendo that help preserve the platform beyond emulation. Finally we'll provide a status update for our ongoing emulation project Mikage and discuss the future outlook of 3DS preservation. This talk will be accessible to a technical audience and gaming enthusiasts alike. We particularly hope to spark new interest in preserving the 3DS legacy and foster new ideas for pushing the boundaries of emulation technology. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/10-years-of-emulating-the-nintendo-3ds-a-tale-of-ninjas-lemons-and-pandas/

The Design Decisions behind the first Open-Everything FABulous FPGA (38c3)

Sun, 29 Dec 2024 14:45:00 +0100

With the availability of robust silicon-proven open-source tools, IPs, and process design kits (PDKs), it is now possible to build complex chips without industry tools. This is exactly what we did to design our first open-everything FABulous FPGA, which is an example of open silicon that is designed and programmed entirely with open tools. Produced in the Skywater 130nm process node, our chip features 672 LUTs (each with 4 inputs and a flop), 6 DSP blocks (8x8 bit multipliers with 20-bit accumulators), 8 BRAMs (with 1KB each), and 12 register file primitives (each having 32 4-bit words with 1 write and 2 read ports). The resources are sufficient to run, for instance, a small RISC-V system on the fabric. The FPGA comes with a small board that is designed to fit into an audio cassette case and that can be programmed directly via an USB interface. Moreover, the FPGA supports partial reconfiguration, which allows us to swap the logic of parts of the FPGA while continuing operation in the rest of the chip. The chip was designed with the help of the versatile FABulous framework, which integrates several further open-source projects, including Yosys, nextpnr, the Verilator, OpenRAM, and the OpenLane tool suite. FABulous was used for various embedded FPGAs, including multiple designs manufactured in the TSMC 28nm process node. The talk will discuss and analyze differences and similarities with industry FPGAs and dive into design decision taken and optimizations applied to deliver good quality of results (with respect to area cost and performance). The talk will highlight state-of-the-art in open-source FPGA chip design and provide a deeper than usual discussion on the design principles of these devices. The talk will target both FPGA novices and experts and discuss the technology from two angles: 1) the capabilities of open tools to build an entire FPGA ecosystem and 2) FPGA technology insights. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/the-design-decisions-behind-the-first-open-everything-fabulous-fpga/

38C3: Return to legal constructions (38c3)

Mon, 30 Dec 2024 18:00:00 +0100

Let's join in a quiet moment to bid farewell to the chaotic wonderland that has been 38C3 and prepare ourselves for the harsh reality outside. Gather round and take a deep breath and enjoy the unique atmosphere before you will feel the spirit again at the next hacker event close to you. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/38c3-return-to-legal-constructions/

Microbes vs. Mars: A Hacker's Guide to Finding Alien Life (38c3)

Mon, 30 Dec 2024 13:50:00 +0100

Mars is famously the only planet (we know of) that is entirely inhabited by robots. And these robots are working hard on looking for something that would be one of the most significant discoveries in the history of science: Alien life. But how do you look for something that no one has ever seen? And would we recognize it if we find it? Join me on a journey through Mars’ ancient past and Earth’s most extreme environments, where scientists hunt for strange microbes that defy all our expectations: Organisms thriving in salt lakes, breathing metal, and building bizarre microbial ‘cities’ out of rock. Are they the blueprint of what alien life might look like? I will introduce you to the cutting-edge technology we use to analyse and understand them, and how we detect their “biological fingerprints” that might one day help us to find Martian life. This talk will not only give you a deep look behind the scenes of the search for life on Mars, but also a new appreciation for the strange and wonderful life on our own planet. I am a PhD student in astrobiology and planetary science at the University of Hong Kong and want to introduce you to the exciting research that is happening in the search for life on Mars. We will talk about what Earth and Mars looked like 3 billion years ago, you will get to know some truly weird microbes, learn about the instruments on Mars rovers and the exciting upcoming Mars sample return missions. I will also share highlights from my own research and fieldwork in Mars-like environments: From growing extremophiles in the lab to testing planetary rovers on Mount Etna, and research adventures in the remote deserts of the Atacama and western China. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/microbes-vs-mars-a-hacker-s-guide-to-finding-alien-life/

Rollstuhlgerechte Toiletten (38c3)

Fri, 27 Dec 2024 19:15:00 +0100

Toiletten "für alle" sind in weiter Ferne. Wie muss eine Toilette gebaut werden, um tatsächlich für jede Person mit zum Beispiel einem Rollstuhl benutzbar zu sein? Diese Frage beantworten wir in diesem Talk. Toiletten sind ein schwieriges Thema. Sie sind selten zu finden und meistens auch relativ dreckig. Aber was ist, wenn eine rollstuhlgerechte oder oder eine "Toilette für Alle" benötigt wird? Als Chaos-Gemeinschaft und Haecksen tragen wir durch das Mieten von Objekten eine Mitverantwortung, Toiletten entsprechend verfügbar zu machen. Leider hat eine informelle Umfrage in 2024 von den Haecksen gezeigt, dass in Sachen rollstuhlgerechter Toiletten viele Hackspaces kein Angebot machen können. Wir erklären in diesem Talk die passenden DIN-Normen für eine rollstuhlgerechte Toilette und weihen euch in die Details hinter einer höhenverstellbaren Toilette ein. Wir möchten euch mit diesem Vortrag befähigen, euch in eurer Mietsituation konstruktiv aufzustellen um eine Verbesserung in eurer Umgebung erzielen zu können. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/rollstuhlgerechte-toiletten/

Woman in the Middle (38c3)

Sun, 29 Dec 2024 20:30:00 +0100

Ist Cybercrime der attraktivere “Arbeitsplatz” für Menschen, die aus dem stereotypischen Rahmen des Bildes eines IT-lers fallen - im Gegensatz zur Cybersecurity? Wir decken auf! "Wir leben doch längst in einer gleichberechtigten Welt!", sagen manche. Doch mal ehrlich, wer von euch denkt bei einem Man-in-the-Middle-Angriff an eine Hackerin? Wir sprechen über Hürden und Herausforderungen, denen Menschen, die nicht dem Stereotypen-Bild des IT-lers entsprechen, heute immer noch begegnen. Von absurd hohen Einstiegshürden über Kompetenzabsprechungen bis hin zu völlig anderen Maßstäben für Auftreten und Aussehen - wir decken Mechanismen von Benachteiligung und Diskriminierung auf. Mit lebhaften Geschichten, die wir selbst als Frauen in der Cybersecurity erlebt haben, vielen Interviews mit FINTAS und aktuellen Trendzahlen zeichnen wir ein anschauliches Bild dieser Realität. Wir erzählen darüber hinaus entsprechende Geschichten aus anderen Berufsfeldern. Doch das Bild hat zwei Seiten: Die Unterschätzung von Kompetenzen kann ein unerwarteter Vorteil sein, besonders in der Welt der Cyberkriminalität. Wenn Nicht-Stereotypische Hackende im digitalen Untergrund agieren, ergeben sich neue, überraschende Perspektiven. Wir beleuchten die Gleichstellung im Cybercrime und fragen uns: Was können wir hieraus lernen und für bessere Arbeitsbedingungen in legalen Berufszweigen übernehmen? Dazu haben wir einen Hack, den wir vorschlagen möchten und der aus unserer Perspektive helfen würde, dass alle Menschen Ihr Recht auf freie Berufswahl, freie Entfaltung und weitere Menschenrechte auch wirklich zugestanden bekommen - Damit alle Wesen dieses Universums ein Leben in Frieden und Freiheit genießen können. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/woman-in-the-middle/

A dive into DNS (38c3)

Fri, 27 Dec 2024 21:10:00 +0100

Everyone kind of forgot about DNS. How does it work, how to claim it back and why? This talk will show some data about DNS to see differences between TLD's, will show how the entire thing works and the current problems in some setups. Then show how to make our own authoritative DNS servers in a secure and redundant way to claim ownership of it and decentralise it from the big providers. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/a-dive-into-dns/

Ultraschall Workshop (38c3)

Fri, 27 Dec 2024 22:45:00 +0100

Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/ultraschall-workshop/

Sicherheitslücke gefunden... und nun? (38c3)

Sun, 29 Dec 2024 17:35:00 +0100

Der CCC unterstützt bei der Meldung von Sicherheitslücken nach dem Responsible-Disclosure- beziehungsweise Coordinated-Vulnerability-Disclosure-Verfahren. Am Beispiel verschiedener Lücken, die wir in den vergangenen Monaten gemeldet haben, zeigen wir, wie Disclosures ablaufen können. Eine Rechtsberatung findet nicht statt. Bei angewandter Sicherheitsforschung führen Hackerparagraphen nach wie vor zu großer Unsicherheit. Meldende von Sicherheitslücken müssen befürchten, angezeigt und verklagt zu werden. Daher unterstützt der CCC bei der Meldung von Sicherheitslücken. Wie läuft so ein Disclosure-Prozess eigentlich ab? In diesem Vortrag geben wir Einblicke in die Praxis und erläutern anhand aktueller Beispiele aus den vergangenen Monaten, wie wir Sicherheitslücken gemeldet haben. Dabei beleuchten wir typische Herausforderungen und mögliche Konflikte. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/sicherheitslcke-gefunden-und-nun/

RadioMining - Playlist-Scraping und Analyse (38c3)

Sat, 28 Dec 2024 21:45:00 +0100

Seit einigen Jahren hat Stefan von etwa vierzig regulären deutschen (Pop-)Radiosendern die Playlisten gespeichert. Welche Meta-Informationen sich daraus ergeben und welche Abhängigkeiten von Jahreszeiten, Charts und Ereignissen sich abzeichnen, wird in einem unterhaltsamen Vortrag zum Besten gegeben. Große Radiosender stellen die von Ihnen gespielten Lieder zum Nachlesen auf ihrer Homepage bereit. Der Hintergrund dafür ist, dass man leicht sein neues Lieblingsstück, welches man auf dem Weg zur Arbeit gehört hat, wiederfinden kann. Bei näherer Betrachtung werfen diese Playlisten etliche Fragestellungen auf. Werden zum Beispiel den ganzen Tag immer wieder dieselben Lieder gespielt? Spielen alle Radiosender die gleichen Stücke? Was ist der zeitliche Mindestabstand eines Musikstücks, bevor es erneut gespielt wird? Und müssen wir Last Christmas auch in Zukunft ertragen? In dem Vortrag wird auch die Beziehung zwischen den "Charts" und den Playlisten der Radiosender geprüft. Dabei hat sich auch gezeigt, dass die Charts selbst ein spannendes Analysefeld sind. In die Chartberechnungen wurden MP3-Downloads und später Streams aufgenommen und haben dadurch altbewährte Konzepte verändert. Neben diesen Fragestellungen werden von Stefan auch technische Dinge beleuchtet. Die Herausforderungen des Scrapings, das Einfügen in eine geeignete Datenbank, die Auswertung selbst (und mit welchen Tools) sowie die Visualisierung von Ergebnissen werden anschaulich präsentiert. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/radiomining-playlist-scraping-und-analyse/

The master key (38c3)

Sat, 28 Dec 2024 19:15:00 +0100

This is the story of the HDCP master key that we derived back in 2010. This is the story of the HDCP master key. How in 2010 we derived it from various public sources and from a bunch of cheapish hardware (and how we made money in the process!), and then published it on pastebin. After that it was just wait-and-see what Intel and the rest of the world would do. With the master key anyone can make source and sink keys that interoperate with any HDCP device. Oh, and how I learnt how to spell "forty". HDCP MASTER KEY (MIRROR THIS TEXT!) This is a forty times forty element matrix of fifty-six bit hexadecimal numbers. To generate a source key, take a forty-bit number that (in binary) consists of twenty ones and twenty zeroes; this is the source KSV. Add together those twenty rows of the matrix that correspond to the ones in the KSV (with the lowest bit in the KSV corresponding to the first row), taking all elements modulo two to the power of fifty-six; this is the source private key. To generate a sink key, do the same, but with the transposed matrix. 6692d179032205 b4116a96425a7f ecc2ef51af1740 959d3b6d07bce4 fa9f2af29814d9 82592e77a204a8 146a6970e3c4a1 f43a81dc36eff7 568b44f60c79f5 bb606d7fe87dd6 1b91b9b73c68f9 f31c6aeef81de6 9a9cc14469a037 a480bc978970a6 997f729d0a1a39 b3b9accda43860 f9d45a5bf64a1d 180a1013ba5023 42b73df2d33112 851f2c4d21b05e 2901308bbd685c 9fde452d3328f5 4cc518f97414a8 8fca1f7e2a0a14 dc8bdbb12e2378 672f11cedf36c5 f45a2a00da1c1d 5a3e82c124129a 084a707eadd972 cb45c81b64808d 07ebd2779e3e71 9663e2beeee6e5 25078568d83de8 28027d5c0c4e65 ec3f0fc32c7e63 1d6b501ae0f003 f5a8fcecb28092 854349337aa99e 9c669367e08bf1 d9c23474e09f70 Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/the-master-key/

Robot Uprising: a story-driven AI robotics experience (38c3)

Sun, 29 Dec 2024 12:00:00 +0100

It's the 2040’s. The dusty skyline of Helsinki is covered with vertical buildings reaching for the clouds. Autonomous drones deliver messages and items from layer to layer while robots maintain the aerial pathways across buildings. A sense of tension hangs in the air. Somewhere beneath the surface, hackers and corporates wage war over AI. Will they be able to master it, or will the City succumb to a dark technology? **Perhaps you can change the fate of things?** Do you like deep-diving into AI & robotics, but wish you could escape the inevitable existential dread of techno-capitalist dystopia? If acting it out through a story-driven hackathon sounds interesting, we might just have the right thing for you. [Robot Uprising](https://robotuprising.fi/) is a community-organised, story-driven AI & robotics event series. Part LARP, part hackfest, part robotics competition, it all neatly fits together under the umbrella of an overarching cyberpunk story. The story provides inspiration for the events, the events provide the "historical facts" that shape how the narrative develops. In this talk, we'll take you through the history of Robot Uprising, delve into the technologies (robotics or otherwise) explored through our events, and contemplate how story and hacking intertwine. Our hope is to convince you of the awesomeness of story-driven hacking and inspire you to create many more events like this all around the world. You can join us at [House of Tea after the talk](https://events.ccc.de/congress/2024/hub/en/event/robot-uprising-come-chat-after-our-talk_b0lw/) for a cup of tea and we can continue talking in a more intimate setting. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/robot-uprising-a-story-driven-ai-robotics-experience/

Open, Large, and Complex: Managing a 3,500 m² *space with 400+ Members (38c3)

Sat, 28 Dec 2024 23:55:00 +0100

A 3,500 m² hack and make space with 400+ members brings unique challenges in community management, public-sector partnerships, and balancing open culture with safety regulations. This talk shares practical insights on fostering an inclusive, large-scale hack/make/arts/culture space, from founding hurdles to the realities of maintaining creative freedom within structural limits. What happens when a hack and make space scales to 3,500 m² with over 400 members? We will offer insights into the challenges and opportunities of managing a large, open community space for makers, hackers, artists and the genernal public. From navigating partnerships with public institutions to balancing open community management, we'll discuss key lessons learned. Topics include the founding journey and public-sector collaboration, maintaining an inclusive culture within a massive member base, and meeting building code on a limited budget. We’ll also explore the dynamic between spontaneous initiatives and intentional space design, sharing experiences that range from community-driven projects to governance challenges. Join us to explore how scale impacts everything—from creative freedom to structural limitations—and how a space can thrive with size. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/open-large-and-complex-managing-a-3-500-m-space-with-400-members/

Postpartum Punk: make space for unfiltered creativity (38c3)

Sun, 29 Dec 2024 21:10:00 +0100

After years as a journalist and filmmaker covering topics like crypto, holocaust and showbiz, everything changed for me 3 years ago after the birth of my daughter. While I haven't planned to be a mother, I decided to keep this pregnancy at 41, however this grass turn out to be too high for lawn mower – I was ready to go for a rave, not to be locked in a baby dark room for 3 years. I felt like my brain had been reprogrammed overnight. The analytical mindset I once relied on—quick to analyse, explore, and understand complex topics—seemed to vanish, replaced by a simpler, instinct-driven state that prioritized pure survival and nurturing yet mixed with unhinged chaos, aux naturelle psychedelic downloads plus no sense of inhibition or fear of being seen. Hand cuffed to a rainbow I was gazing at the black clouds. Despite the shock at this involuntarily IQ transplant, I quickly realised this new mind-tool-set was all in all fulfilling and liberating. I became my own fire brigade with an alternative emergency strap-on. Without the pressure to think analytically, I began channelling this raw energy into my joke band PUShY PUShY PUShY, creating what I now call postpartum punk movement. The idea caught on – this summer we have been featured in the Guardian and The New Yorker. This fuels my missionarism towards another level: how can we embrace this wild, intuitive mindset, not only as parents but as people? And could new technologies help us experience or even learn from this state? In this talk, I’ll share my story and propose some solutions to help people connect and utilise with this raw, abstract, flippant side of the mind, whether or not they’ve experienced parenthood: haptic births, transcranial nursering, chaos VR sessions, neurofeedback baths, quantum aerobics, algorithm jams, and 'Near-Birth-Experiences' Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/postpartum-punk-make-space-for-unfiltered-creativity/

Drawing with circuits – creating functional and artistic PCBs together (38c3)

Sun, 29 Dec 2024 19:15:00 +0100

We are a professional electronics designer and a professional artist. We'd like to share our experience of integrating an artist into the design workflow for EMF's 2022 and 2024 event badges, how we ensured that form and function grew together, and how you might make a board so fancy it crashes your PCB vendor’s CAM software. Circuit boards are increasingly being made to be seen. Whether they're personal or commercial, many projects show off their PCBs in an array of shapes, colours and sizes instead of hiding them in enclosures. While making an electronic design work correctly and making it look amazing are not conflicting goals, they do require very different skillsets. If you are not one of the rare people whose expertise spans both graphic and electronic design, it may feel very daunting to collaborate with someone who has a very different skillset. You must figure out what you don't know about each other's fields, what the other needs to know, and find the right language to bridge that divide. We will share our experience of working together as circuit designer and artist, and will talk about: - the possibilities and constraints of modern PCB technology as a medium for visual art - turning a functional electronic design into an artistic playground - our experience of communicating across fields of expertise, developing a common language and conveying essential ideas without getting in each other's way - some fantastic free software for art and electronic design - sample workflows for embellishing circuits - what PCB design software and manufacturers expect and how to get away with doing "weird" things - many examples of beautiful things we and others have made We hope this will inspire and encourage you to make your own beautiful collaborative designs a reality. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/drawing-with-circuits-creating-functional-and-artistic-pcbs-together/

Binging on drug checking data (38c3)

Sat, 28 Dec 2024 20:30:00 +0100

A trip into party drug trends: Seeking insight among poorly formatted data, media misinformation, repressive laws and risky chemicals Berlin recently launched a public drug checking service — an admirable first for Germany. What can the data unveil? This talk aims to elevate your mental state towards clarity over party drug trends in 2024 by serving a mix of Berlin’s drug testing data – both public and unpublished – with a few potent adulterants: Snazzy info graphics, shoddy code and a bunch of original research. Observe badly copy-pasted tag soup transform into beautiful and impactful open-eye visuals. Watch sales terms purportedly specifying precise chemical formulas exposed as mere smoke and mirrors, and find even names derived from each other labeling vastly different things. See patterns revealed and dots connected, like how an international interplay of both draconian and liberal legal frameworks created a perfect storm of unintended, risky consequences – or on the other hand, how the absence of reliable data creates a breeding ground for the viral spread of irrational fears. See through falsehoods regularly published on these topics in the press. Before this risks turning into a bad trip, find zen with some practical risk management tips and pointers to helpful support services. In less poetic terms, I’ll be covering recent trends regarding these psychoactive substances: Ecstasy & “blue punishers”, cocaine, fentanyl, mephedrone, 3-MMC, 2C-B, “tusi”, “monkey dust” and more. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/binging-on-drug-checking-data/

Was tun gegen den Rechtsruck (in Ostdeutschland)? - Solidarität! - Das Netzwerk Polylux stellt sich vor! (38c3)

Fri, 27 Dec 2024 17:15:00 +0100

Das Netzwerk Polylux hat sich vor 5 Jahren gegründet um dem Rechtsruck in Ostdeutschland etwas entgegen zu setzen. Polylux fördert, was die AfD hasst. Solidarisch, Unbürokratisch und Antifaschistisch. Für eine kritische und starke Zivilgesellschaft wo es sie am meisten braucht: Im ländlichen Raum in Ostdeutschland. Wir sind ein ehrenamtliches Netzwerk, das seit 2019 aktiv ist um antifaschistische Projekte in Ostdeutschland (vor allem) finanziell zu unterstützen. Schon damals brachte uns die Sorge um wegbrechende Finanzierungsmöglichkeiten angesichts einer schwachen Linken und der immer stärker werdenden Rechten auf die Idee, eine finanzielle, nachhaltige Unabhängigkeit für die aktive Zivilgesellschaft zu schaffen. In den letzten Jahren haben wir über 200.000 Euro an linke Projekte in Ostdeutschland weiterverteilen können und zeigen somit, dass wir eine Unterstützungsplattform aufgebaut haben, die uns unabhängig macht von staatlichen Förderungen und für eine emanzipatorische Bewegung eine dauerhafte und nachhaltige Alternative sein kann. Denn unser Netzwerk ist unabhängig von aktuellen politischen Machtverteilungen und Mehrheiten. Im "Superwahljahr" 2024 hatten wir uns vorgenommen auf 1000 monatlich zahlende Fördermitglieder zu kommen, um dem Rechtsruck nach den anstehenden Kommunal- und Landtagswahlen in Sachsen, Thüringen und Brandenburg noch mehr entgegen setzen zu können. Dieses Ziel haben wir gleich doppelt erreicht. Im Oktober 2024 hatten wir 2500 Fördermitglieder und sehr viele Einzelspenden und mediale Aufmerksamkeit. Unser Prinzip ist recht einfach: Wir sammeln Gelder über Fördermitgliedschaften und Spenden und verteilen sie an Projekte im ländlichen ostdeutschen Raum um. Durch das Netzwerk bekommen die Initiativen größere Sichtbarkeit. Dabei halten wir unser Antragsprozedere für die Projekte so einfach und simple wie möglich. Denn diese sollen für eine Förderung nicht noch mehr arbeit haben uns sich auf ihre Arbeit vor Ort konzentrieren können. Dabei Grenzen wir uns ganz bewusst, von "normalen" Fördertöpfen ab. Denn wir sind selbst alle in der Szene aktiv, leben in Ostdeutschland und kennen die Verhältnisse im ländlichen Raum aus eigener Erfahrung sehr gut. Wir wissen selbst, wie es ist als Queere Menschen, als Migrant*innen, als Linke hier gegen eine Politik aktiv zu sein, die alles kritische kriminalisiert und versucht einzuschüchtern. Mehr zu unserer Arbeit und wen wir unterstützen findet Ihr auf unserer Website: www.polylux.network Auf dem 38C3 wollen wir uns, unsere Idee, unser Netzwerk und ein paar der tollen Projekte im Osten kurz vorstellen. Im Rahmen des Talks gehen wir kurz darauf ein woher der Rechtsruck in Ostdeutschland kommt und was Besonderheiten im Vergleich mit den alten Bundesländern sind - vor allem aber wollen wir aufzeigen, wie wir eine langfristige und nachhaltige Struktur aufbauen können. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/was-tun-gegen-den-rechtsruck-in-ostdeutschland-solidaritt-das-netzwerk-polylux-stellt-sich-vor/

Die Brandmauer gegen rechts - Schutz oder Gefahr für die Demokratie? (38c3)

Fri, 27 Dec 2024 20:00:00 +0100

In Österreich hat 2024 die rechte FPÖ bei allen Wahlen massiv an Stimmen hinzugewonnen. Obwohl bei der Nationalratswahl die FPÖ als Siegerin hervorgegangen ist, versuchen nun drei andere Parteien eine Koalition zu bilden. Wir fragen uns, ob die Entscheidung, nicht mit der FPÖ zu verhandeln und sie somit nicht in die Regierung zu holen, nur dazu beitragen, die FPÖ immer noch stärker zu machen und welche Lehren daraus auch für Deutschland und den Umgang mit der AfD zu ziehen sind. Auch in Österreich war 2024 ein Superwahljahr: Landtagswahlen, die EU-Wahl und Nationalratswahl, gemeinsam mit einigen Gemeinderatswahlen. Allen gemeinsam ist, dass die rechte FPÖ immer dazugewinnen konnte, bei den bundesweiten Wahlen ging sie sogar als Siegerin hervor, in einem Bundesland wird sie den Landeshauptmann stellen. Im Bund versuchen nun drei Parteien, trotz zum Teil starker ideologischer Unterschiede, eine Koalition gegen den selbsternannten Volkskanzler Kickl zu bilden. Dessen Umfragewerte steigen in der Zwischenzeit immer weiter, daran ändern auch Korruptionsvorwürfe, eindeutig rechtsradikale Einstellungen oder Spendenaffären nichts. Anschließend an unseren Podcast vom letzten Jahr, in dem wir den Aufstieg der Rechten in Österreich nachgezeichnet haben, wollen wir heuer diskutieren, ob die Brandmauer gegen rechts immer sinnvoll ist, wir berichten über die Erfahrung mit der FPÖ in der Regierung und besprechen, ob daraus auch Lehren für Deutschland zu ziehen sind. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/die-brandmauer-gegen-rechts-schutz-oder-gefahr-fr-die-demokratie/

BlinkenCity: Radio-Controlling Street Lamps and Power Plants (38c3)

Sat, 28 Dec 2024 21:45:00 +0100

A significant portion of Europe's renewable energy production can be remotely controlled via longwave radio. While this system is intended to stabilize the grid, it can potentially also be abused to destabilize it by remotely toggling energy loads and power plants. In this talk, we will dive into radio ripple control technology, analyze the protocols in use, and discuss whether its weaknesses could potentially be leveraged to cause a blackout, or – more positively – to create a city-wide Blinkenlights-inspired art installation. With three broadcasting towers and over 1.3 million receivers, the radio ripple control system by *EFR (Europäische Funk-Rundsteuerung) GmbH* is responsible for controlling various types of loads (street lamps, heating systems, wall boxes, …) as well as multiple gigawatts of renewable power generation (solar, wind, biogas, …) in Germany, Austria, Czechia, Hungary and Slovakia. The used radio protocols Versacom and Semagyr, which carry time and control signals, are partially proprietary but completely unencrypted and unauthenticated, leaving the door open for abuse. This talk will cover: - An introduction to radio ripple control - Detailed analysis of transmitted radio messages, protocols, addressing schemes, and their inherent weaknesses - Hardware hacking and reversing - Implementation of sending devices and attack PoCs - (Live) demonstrations of attacks - Evaluation of the abuse potential - The way forward Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/blinkencity-radio-controlling-street-lamps-and-power-plants/

How to Spec - Fun with dinosaurs (38c3)

Fri, 27 Dec 2024 21:10:00 +0100

The public image of dinosaurs is largely shaped by art. While paleontology is a dynamic and productive science, it is primarily through paleoart that our perception of prehistoric life takes form. By combining informed speculation with a deep understanding of anatomy, ecology, and geology, paleoartists continuously reimagine extinct organisms in innovative ways. The public image of dinosaurs is largely shaped by art. While paleontology is a dynamic and productive science, it is primarily through paleoart that our perception of prehistoric life takes form. This tradition of science informed art form, rooted in a 200-year history, finds its inspiration in the fossil record and the interpretations it offers. The gaps in our knowledge are as influential as the fossils themselves. Through informed speculation and a fundamental understanding of anatomy, ecology and geology a paleoartist is able to bring back extinct organisms in ever new ways. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/how-to-spec-fun-with-dinosaurs/

A Competitive Time-Trial AI for Need for Speed: Most Wanted Using Deep Reinforcement Learning (38c3)

Sat, 28 Dec 2024 00:15:00 +0100

All challenges and achievements in creating a competitive time-trial AI in NFS:MW. 15 years ago, at the height of my eSports career, I uploaded an (unofficial) ESL record at Need for Speed: Most Wanted (2005) (NFS:MW) to Youtube. In the meantime Deep Reinforcement Learning became popular and ever since I have dreamt of creating a competitive AI for my favorite racing game of all time: NFS:MW. Now finally the time was right: The hardware is fast enough, good software is available, and Sony's AI research has proven the task is actually doable. Hence I thought: "How hard can it possibly be?". This talk will present in detail all challenges and achievements in creating a competitive time-trial AI in NFS:MW from scratch - including but not limited to - hacking of the game to create a custom API, building a custom (real-time) OpenAI gym environment, steering the game using a virtual controller, and finally successfully training an AI using the Soft-Actor-Critic algorithm. All code including the API is written in Python and is open source. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/a-competitive-time-trial-ai-for-need-for-speed-most-wanted-using-deep-reinforcement-learning/

Vulnerability management with DefectDojo (38c3)

Sun, 29 Dec 2024 16:40:00 +0100

Defect Dojo is an open source tool for vulnerability management. I will give an introduction into vulnerability management and show how that is implemented with defect dojo Vulnerability management is a try to integrate finding, managing and mitigating of vulnerabilities in code into your workflow. It usually starts with some tools to find vulnerabilities in different areas - let it be with image scanning like Trivy and Clair, classical vuln scanning like Nessus, Static code analysis like Sonar or dependency management with the OWASP dependency tracker. Defect Dojo takes all those reports, dedublicates findings, manages the handling of false positives and gives a Product Owner a tool to the hand how to move that on into your development tracking software like Jira or else. I will show how all of that works and what advantages this have. Also some insight how its used in a medium size critical infrastructure company. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/vulnerability-management-with-defectdojo/

Stadt.Land.Klima! - Für Transparenz im Kommunalen Klimaschutz (38c3)

Mon, 30 Dec 2024 11:00:00 +0100

Kommunaler Klimaschutz ist oft undurchsichtig, komplex und bürokratisch – das wollen wir ändern! Als gemeinsames bewegungsübergreifendes Projekt "Stadt.Land.Klima!" machen wir (fehlenden) kommunalen Klimaschutz sichtbar, messbar & verständlich! Mit einem einheitlichen Maßnahmenkatalog können alle klimainteressierten Menschen den Fortschritt ihrer Stadt oder Gemeinde bewerten und in unserem Ranking sichtbar machen: https://www.stadt-land-klima.de/municipalities Darüber hinaus möchten wir die vielen verschiedenen lokalen Akteure der Klimagerechtigkeitsbewegung in den einzelnen Kommunen zusammenbringen, Kooperationen fördern und Erfolgsprojekte einzelner Gruppen deutschlandweit teilen! Kommunaler Klimaschutz ist oft undurchsichtig, komplex und bürokratisch – das wollen wir ändern! Stadt.Land.Klima! ist ein gemeinsames bewegungsübergreifendes Portal für kommunalen Klimaschutz, was den Forschritt von Kommunen beim Klimaschutz sichtbar & messbar machen will. Das Herzstück davon ist ein klares Ranking, das zeigt, wie viele Klimaschutzmaßnahmen ein Ort bereits umgesetzt hat. Statt komplizierter CO₂-Bilanzen zählt der Maßnahmenkatalog konkrete Schritte zur Klimaneutralität - und ist gleichzeitig eine Roadmap für die Kommune auf dem Weg zur Klimaneutralität. Die Bewertungen kommen direkt von den Klimaaktiven vor Ort – z.B. von ForFuture-Ortsgruppen, LocalZero-Lokalteams oder lokalen Klimainitiativen. Aber der Plan geht über das Ranking hinaus: Wir wollen die vielen Initiativen, Angebote und Projekte der Klimabewegung vor Ort zusammenbringen, Kooperationen zwischen Organisationen fördern und Klima-Erfolgsprojekte einzelner Gruppen deutschlandweit teilen! Stadt.Land.Klima! wird komplett ehrenamtlich betrieben - von den Lokalteams, unserem SocialMedia-Team, unseren Designer- und Developer:innen und verschiedensten Fachexpert:innen. Die Applikation ist Open-Source und freut sich immer über Contributions: https://github.com/StrategieLukas/stadt-land-klima Gemeinsam wird kommunaler Klimaschutz sichtbar und wirksam. Mach mit & bewerte DEINE Kommune! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/stadt-land-klima-fr-transparenz-im-kommunalen-klimaschutz/

High energy physics aside the Large Hadron Collider (38c3)

Sun, 29 Dec 2024 17:35:00 +0100

What are we, and where do we come from? - Searching for flavour in beauty Nowadays the Large Hadron Collider (LHC) at CERN is the best known high energy physics research facility. However, there are other facilities around the world performing cutting edge high energy physics research. Some of these are the so called flavour factories which have a long tradition in high energy physics. Two of these are currently in operation: BES III in China and Belle II in Japan. Collecting huge amounts of data, the goal of these experiments is to measure free parameters of the standard model of particle physics with very high precision to find deviations from predictions by theory. Such deviations can hint to new physics, and physicists are still searching for the reasons of our very existence as by our best knowledge nothing but light should have remained after the big bang. But testing the standard model is challenging. Huge data sets in the order of tera bytes need to be analysed requiring advanced analysis software and techniques. By now these analyses usually employ machine learning and artificial intelligence in various kinds, while using custom hardware and software, and a world spanning computing infrastructure. All of this is only possible with more than 1000 people working together in a collaboration. Part of the work in high energy physics nowadays would not be possible anymore without the groundbreaking research by this year's Nobel laureates for physics. In this talk I will present what flavour physics is, the reasons why flavour physics is interesting and why it matters, and which challenges we are facing, using the Belle II experiment as an example. Most of the challenges are not unique to Belle II but to high energy physics in general, so I will also set this into the bigger context and take a look to what is ahead of us in the field of high energy physics. Developed in the 1950s to 1960s, the standard model of particle physics has been a huge success. However, there are parts it cannot describe: * During the big bang the same amount of matter and anti-matter should have been produced, and they should have annihilated only leaving light. But here we are, so there must have been some sort of imbalance or asymmetry. With our current understanding of particle physics and the big bang we cannot explain the amount of asymmetry necessary to explain our existence. So why are we here? * We found that neutrinos do have mass, while the SM predicts them to be massless. So why do neutrinos have mass and where does it come from? * The orbital velocities of stars in distant galaxies show deviations from expectations if only visible matter is taken into account. These deviations in the galaxy rotational curves hints to additional matter which nowadays we call "dark matter". But what is its origin * The universe seems to expand with an increasing rate, but what is the driver behind this rate? We now describe this as "dark energy" but do not really know what it is made of. * ... Cosmology, astrophysics, and high energy physics are working on solving these mysteries. While the first two require observations of space and simulations on earth, the last one can be fully conducted on earth. In high energy physics we currently are following to paths of finding physics beyond our current understanding called the "standard model" of particle physics: direct and indirect discoveries. This can be achieved by testing ever higher energies, or by probing known processes with improved precision. The discovery of the Higgs Boson in 2012 was of the first category, a direct discovery at high energies. Flavour factories work differently. They operate at much lower energies (about 1000 times lower than the Large Hadron collider), but are collecting huge amounts of data to precisely test the standard model to find hints for unknown physics effects. One of the current flavour physics experiments is Belle II in Japan. There physicists try to find hints explaining the asymmetry between matter and anti-matter seen at the big bang, and are searching for dark matter candidates, as well as other indications of deviations from the standard model. By precisely measuring the standard model processes it is possible check for particles 10,000 times heavier than the energies used in Belle II, and 10 times heavier of what the LHC can achieve in direct searches. This talk focuses on the challenges that modern high energy physics experiments, as well as other experiments are facing, and how to tackle them, as well as the public relevance of the research fields. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/high-energy-physics-aside-the-large-hadron-collider/

Aufräumen Podcast (38c3)

Sun, 29 Dec 2024 15:00:00 +0100

Udo ist vor Ort und wird versuchen Johannes zuzuschalten. Dann räumen wir beide auf. Und ihr könnt zuhören und zugucken! Es wird vielleicht auch ein Gast teilnehmen! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/aufrumen-podcast/

UX for Hackers: Why It Matters and What Can You Do (38c3)

Sun, 29 Dec 2024 16:00:00 +0100

The hacker community is great at making brilliant tools and solving fascinating problems, but we often suck at making the tools and solutions available to the rest of humanity - sometimes even to ourselves. UX and usability are frequently dismissed or misunderstood as the superficial art of adding unnecessary whitespace to perfectly usable things. The assumption is that the prospective users should just "get better" at using computers. That's all quite bad - but what's even worse, we often forget that the user - their human brain and their human perception - is often the biggest attack surface, and as we harden our solutions against all technical threats, we prefer to ignore this one. Over the last couple of years, I have been working on making Qubes OS - a secure operating system - more usable for both hackers and the less technically brilliant users. It has been a very interesting journey that has taught me a lot about clever hackers, so-called normal people and the way you can make security and usability work together, not against each other. In this talk, I will share those insights, show how UX and usability are in fact part of security, discuss some common human interface mistakes open source developers and hackers make - and tell you how you can improve the UX of your projects without dying inside. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/ux-for-hackers-why-it-matters-and-what-can-you-do/

Einstieg in den Amateurfunk (38c3)

Sat, 28 Dec 2024 20:15:00 +0100

Erklärung von Amateurfunk und der neuen Prüfung für Neulinge Im Amateurfunk kann ich weltweit und über Satelliten kostenlos Gespräche führen. Dazu darf ich sogar selbstgebaute Empfänger und Sender benutzen. Oder auch einen Computer zur Kommunikation einsetzen. Damit das funktioniert, gibt es ein paar Regeln, die gelernt werden müssen und für die es eine Prüfung gibt. Seit diesem Sommer gibt es für den Amateurfunk in Deutschland eine Prüfung für eine Einstiegs-Klasse. Ich zeige dir, was du für die Prüfung lernen musst. Und was du nach bestandener Prüfung für Neulinge machen darfst, damit du am weltweiten Amateurfunk teilnehmen kannst. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/einstieg-in-den-amateurfunk/

Die große Datenschutz-, Datenpannen- und DS-GVO-Show (38c3)

Fri, 27 Dec 2024 22:05:00 +0100

Datenschutz darf auch Spaß machen, und alle können dabei etwas lernen, egal ob Einsteiger oder Profi-Hacker: Bei dem Datenschutz- und Datenpannen-Quiz kämpfen vier Kandidat:innen aus dem Publikum zusammen mit dem Publikum um den Sieg. Nicht nur Wissen rund um IT-Sicherheit und Datenschutz, sondern auch eine schnelle Reaktion und das nötige Quäntchen Glück entscheiden über Sieg und Niederlage. Die Unterhaltsame Datenschutz-Quiz-Show mit Bildungsauftrag! Datenschutz wird oftmals als lästige Pflicht wahrgenommen – aber was will und macht Datenschutz, für was ist er sinnvoll und was ist zu beachten? Die Datenschutz- und DSGVO-Show vermittelt spielerisch Datenschutzgrundlagen, bietet einen Einblick in die Praxis der Datenschutz-Aufsichtsbehörden und zeigt typische technische wie rechtliche Fehler im Umgang mit personenbezogenen Daten. Aber auch für Datenschutz-Profis und Superhirne sind einige harte Nüsse dabei. Der Moderator arbeitet beim Landesbeauftragten für den Datenschutz und die Informationsfreiheit Baden-Württemberg und berichtet aus der praktischen Arbeit einer Aufsichtsbehörde, nennt rechtliche Grundlagen, gibt Hinweise zu notwendigen technischen Maßnahmen nach Artikel 32 DS-GVO und die oftmals schwierige Risikoabschätzung nach „wir wurden gecybert“-Sicherheitsvorfällen. Im Quiz selbst müssen die Kandidat:innen in ihren Antworten praktische Lösungsvorschläge für häufige technische und rechtliche Probleme vorschlagen, zum Beispiel welche technischen Maßnahmen bei bestimmten Datenpannen nach dem „Stand der Technik“ angebracht sind, ob man als Website-Betreiber denn nun Google Analytics nutzen darf oder wie man sich gegen (rechtswidrige) Datensammler wehrt. Dadurch können Teilnehmer wie Zuschauer die praktische Anwendung der DS-GVO spielerisch lernen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/die-groe-datenschutz-datenpannen-und-ds-gvo-show/

Databroker Files: Wie uns Apps und Datenhändler der Massenüberwachung ausliefern (38c3)

Sun, 29 Dec 2024 12:55:00 +0100

Databroker verschleudern unsere Daten. Über einen Datenmarktplatz konnten wir 3,6 Milliarden Handy-Standortdaten aus Deutschland ergattern. Darin fanden wir detaillierte Bewegungsprofile, unter anderem von Geheimagent:innen, Soldat:innen und hochrangigen Regierungsbeamt:innen. Hier hört ihr die absurde Geschichte, wie einfach solche Daten zu haben sind, was den zügellosen Datenhandel so gefährlich macht – und wie wir gemeinsam für eine Lösung kämpfen können. Aus 3,6 Milliarden Handy-Standortdaten konnten wir uns ein mächtiges Massenüberwachungs-Tool basteln, das in den falschen Händen viel Schaden anrichten könnte. Wir konnten sehen, auf welchem Weg mutmaßliche Angestellte der NSA zur Arbeit fahren, wo Angehörige der Armee ins Bordell gehen und wo Staatsbeamt:innen wohnen. All das war möglich durch die Gratis-Kostprobe eines Datenhändlers – wer ein paar Tausend Euro im Monat ausgibt, könnte sich noch viel mehr Daten besorgen. Auf unsere Recherchen gab es schockierte Reaktionen aus Bundestag und Bundesregierung, EU-Parlament und Pentagon. Aber Lippenbekenntnisse sind nicht genug, um die kommerzielle Massenüberwachung durch Handy-Apps zu stoppen. Wir zeigen, wie jede:r Einzelne aktiv werden kann und was sich rechtlich ändern muss. Und: Unsere Recherchen zu den Databroker Files gehen weiter. Team netzpolitik.org: Sebastian Meineck; Ingo Dachwitz. Team BR: Katharina Brunner, Rebecca Ciesielski, Maximilian Zierer, Robert Schöffel, Eva Achinger. Hier ist die Übersicht der dazugehörigen Veröffentlichungen: https://netzpolitik.org/2024/databroker-files-die-grosse-datenhaendler-recherche-im-ueberblick/ Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/databroker-files-wie-uns-apps-und-datenhndler-der-massenberwachung-ausliefern/

Windows BitLocker: Screwed without a Screwdriver (38c3)

Sat, 28 Dec 2024 19:15:00 +0100

Ever wondered how Cellebrite and law enforcement gain access to encrypted devices without knowing the password? In this talk, we’ll demonstrate how to bypass BitLocker encryption on a fully up-to-date Windows 11 system using Secure Boot. We’ll leverage a little-known software vulnerability that Microsoft has been unable to patch since 2022: bitpixie (CVE-2023-21563). We'll live-demo the exploit, and will walk through the entire process—from the prerequisites and inner workings of the exploit to why Microsoft has struggled to address this flaw. We'll also discuss how to protect yourself from this and similar vulnerabilities. BitLocker is Microsoft’s implementation of full-volume encryption. It offers several modes of operation, but the most widely used is Secure Boot-based encryption. Many consumer and corporate clients use it, and it’s starting to be enabled by default under "Device Encryption" on newer Windows 11 installations. In this mode, the harddrive is encrypted at rest but is automatically unsealed when a legit windows boots, meaning users don't need a separate decryption password. They just have to sign in with their usual user account. Unfortunately, this configuration has been broken for quite a while. Hardware attacks against a dTPM are widely known, but software attacks are possible as well, at least since 2022, when Rairii discovered the bitpixie bug (CVE-2023-21563). While this bug is 'fixed' since Nov. 2022 and publically known since 2023, we can still use it today with a downgrade attack to decrypt BitLocker. In this talk, we'll dive into: - How does Secure Boot work, and what role does the TPM play? - How can Bitlocker leverage the TPM? - How does the bitpixie exploit work? What are PXE boot and BCD? - What are the prerequisites for running this exploit? - How can you protect yourself against it? - Why is it so challenging for Microsoft to fully fix this? - How does this affect Linux secure boot? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/windows-bitlocker-screwed-without-a-screwdriver/

Philosophical, Ethical and Legal Aspects of Brain-Computer Interfaces (38c3)

Mon, 30 Dec 2024 15:45:00 +0100

This talk examines philosophical, legal, and ethical questions of the merging of human minds with intelligent machines through Brain-Computer-Interfaces, provides an overview of current debates and international regulatory development - and what might be at stake when technologies increasingly access the human brain. Human minds and machines, or organic and artificial intelligence (AI), are increasingly merging through neurotechnologies such as Brain-Computer-Interfaces (BCIs) that may record or alter brain activity. While most current devices are developed and used for rehabilitative purposes, more and more consumer devices are about to come on the market, and some stakeholders such as Elon Musk and his company Neuralink pursue more transhumanist objectives. This merging of minds and machines raises multiple intriguing philosophical, ethical, and legal questions: Do these devices become part of the person, even more, might the AI operating these devices become part of her? (I argue that it does under certain conditions, creating the most intimate conceivable connection between AI and persons). Are there ethical boundaries, and what is the legal situation, especially with respect to human rights? (I call for a renaissance of the right to freedom of thought to provide at least some principled protection for privacy of thought). Moreover, the topic has received the attention of international organizations, which will negotiate the first international treaty on the ethics of neurotechnology under the auspices of UNESCO in the beginning of 2025 (expected to be concluded in late 2025). This will set the standards for the future trajectory of the technology, but whether agreement can be found is to be seen. The EU, US, and China have different regulatory approaches with different visions for the future. This talk addresses these political, philosophical, legal and ethical questions and presents results of an international research cooperation on the topic, HYBRID MIND, that is funded in Germany by the Federal Ministry of Education and Research and comes to its official conclusion during the days of the 38C3. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/philosophical-ethical-and-legal-aspects-of-brain-computer-interfaces/

sixos: a nix os without systemd (38c3)

Fri, 27 Dec 2024 12:15:00 +0100

This talk announces the first public release of sixos, a two year project to create a nixpkgs-based operating system using skarnet's s6 supervisor instead of systemd. The monolithic design of `systemd` is inconsistent with the UNIX userspace philosophy. Its our-way-or-fork-off policy attracts influence-seekers, and thereby encourages *platform decay* within the free software ecosystem. Systemd's failure to provide Linux-grade ABI stability („we don't break userspace“) creates a large and tempting attack surface for *enshittification*. This talk announces the first public release of [sixos](https://codeberg.org/amjoseph/sixos), a two year project to create a nixpkgs-based operating system using [skarnet](https://skarnet.org/software/)'s [`s6`](https://skarnet.org/software/s6/) instead of `systemd`. Sixos replaces NixOS modules with the simpler [`infuse`](https://codeberg.org/amjoseph/infuse.nix) combinator. This allows sixos to treat services the same way nixpkgs handles packages: - A service (`svcs/by-name/.../service.nix`) in sixos is a Nix expression, just like an uninstantiated package (`pkgs/by-name/.../package.nix`) in nixpkgs. - A sixos target is a derivation, just like an instantiated package in nixpkgs. - The sixos target set (`targets`) is a scoped fixpoint, just like the nixpkgs instantiated-package set (`pkgs`). - The `override`, `callPackage`, and `overrideAttrs` tools work on targets and services, just like they do on instantiated and uninstantiated packages. Whenever possible, sixos retains good ideas pioneered by NixOS, like atomically-activated immutable configurations and the layout of `/run`. Sixos is not a fork of NixOS. It shares no code with `nixpkgs/nixos`, nor is any part of it derived from NixOS. Sixos and NixOS both depend on `nixpkgs/pkgs`. On [ownerboot](https://codeberg.org/amjoseph/ownerboot) hardware all [mutable firmware](https://codeberg.org/amjoseph/ownerboot/src/branch/master/doc/owner-controlled.md#clarifications) -- all the way back to the reset vector -- is versioned, managed, and built as part of the sixos configuration. This *eliminates the artificial distinction between firmware software and non-firmware software*. On NixOS, either the initrd „secrets“ or the software that decrypts them ([ESP](https://en.wikipedia.org/wiki/EFI_system_partition), [initrd ssh keys](https://github.com/NixOS/nixpkgs/blob/6b88838224de5b86f449e9d01755eae4efe4a1e4/nixos/modules/system/boot/initrd-ssh.nix#L73-L76)) is stored unencrypted on writable media. Ownerbooted sixos closes this loophole without any „trusted computing“ voodoo, eliminating all unencrypted storage except for an eeprom whose hardware write-protect pin is connected to ground. The speaker runs ownerbooted sixos on his workstations, servers, twelve routers, stockpile of disposable laptops, and on his company's 24-server/768-core buildfarm. So far all of his attempts to run sixos on his snowboard have failed. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/sixos-a-nix-os-without-systemd/

Euclid, das Weltraumteleskop - 180 Millionen Galaxien sind ein guter Anfang (38c3)

Sun, 29 Dec 2024 13:50:00 +0100

„Euclid" ist seit 2023 das neue Weltraumteleskop der Europäischen Weltraumbehörde mit Beteiligungen eines Wissenschaftskonsortiums aus vierzehn europäischen Ländern, den USA, Kanada und Japan. Gestartet vor knapp eineinhalb Jahren, läuft jetzt seit gut 9 Monaten die wissenschaftliche Himmeldurchmusterung. Auf dem 37C3 konnte ich die ersten fünf "Early Release Observation" Bilder vorstellen, seitdem ist viel passiert. Vor allem läuft nach ein paar Anlaufschwierigkeiten die Mission richtig gut und viele hundert Quadratgrad des Himmels sind bereits fertig kartiert - die Datenbearbeitung und Auswertung läuft. Ich werde weitere Bilder und einen kleinen Blick hinter die Kulissen zeigen. Euclid ist ein astronomisches Weltraumobservatorium, aber zugleich als Gesamtkonzept ein wissenschaftliches Experiment zur besseren Erforschung von "Dunkler Energie" und "Dunkler Materie". Beim 37C3 hatte ich die Hintergründe dazu erklärt und wie Euclid mit der Vermessung der Formen und Entfernungen von 1-2 Milliarden Galaxien die Entwicklungsgeschichte des Universums nachvollziehen wird. Nach eineinhalb Jahren Erfahrungen mit dem Teleskop und neun Monaten Himmeldurchmusterung haben wir einiges an Erfahrung mit dem Teleskop gesammelt, den ersten Data-Release vorbereitet und jede Menge schöner Bilder gesehen und bestaunt. Wir haben uns aber auch durch Herausforderungen mit dem Teleskop gearbeitet, zum Beispiel durch Eisbeläge auf den Spiegeln oder eine aktuell sehr aktive Sonne. Aber das ist unter Kontrolle. Ich werde einige neue und eindrucksvolle Bilder von Euclid zeigen und den Stand der Dinge skizzieren. Ich werde auch ein bisschen einen Blick hinter die Kulissen geben, wie mit solchen Herausforderungen umgegangen wird und wie die Datenverarbeitung voranschreitet. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/euclid-das-weltraumteleskop-180-millionen-galaxien-sind-ein-guter-anfang/

Let’s spark children’s interest in coding (38c3)

Sat, 28 Dec 2024 19:15:00 +0100

How can we spark children's interest in coding and tinkering. In this talk we will present the ongoing activities of the Free Software Foundation Europe to get the next generation of Haecksen and Hackers interested in tech, with a focus on diversity. Today it is impossible to imagine daily life without software. The majority of us can’t spend a single day without using it. People use software in the workplace, on laptops, and on mobile phones. Software is also found in less obvious places however: in trains, cars, televisions, washing-machines, fridges, and many other devices. None of these devices could function without software. Without software we couldn’t write e-mails, make phone calls, go shopping, or travel as we are accustomed to. Software is our society’s central tool. How do we ensure that the next generation is motivated and capable of shaping technology for society’s benefits? The Free Software Foundation Europe’s volunteers and staff have interacted with over 1700 children between 6 to 10 years in the past months. Children, especially girls, afterwards were motivated to start experimenting with hardware and software. In the discussions we saw that they realise how crucial technology will be for them. The story of Ada made it into a war hospital with children with disability that felt identified with it as one of the book characters has a 3D printed leg. Furthermore with the FSFE’s coding competition “Youth Hacking 4 Freedom” we gathered experiences working with teenagers who program, tinker, and have fun with software. YH4F has also been a place for diversity during its first three editions. Learn more about the experiences how the FSFE sparks children’s and teenagers interest to tinker, experiment and program. Furthermore you will see how fulfilling those activities can be for yourself. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/let-s-spark-children-s-interest-in-coding/

How election software can fail (38c3)

Sun, 29 Dec 2024 23:00:00 +0100

Experiences from a hacker working at the Election Council of The Netherlands. After critically following the elections for 8 years from the outside, a hacker was employed as one of the functional administrators of the software supporting the elections. Sharing experiences of the use of election software during 7 elections (2020-2023), from local, national to European in The Netherlands. A governmental software project with strict deadlines, and high security expectations. The software project for elections in The Netherlands is build an IT organization [owned by German local governments](https://www.regioit.de/unternehmen/zahlen-daten-fakten). More than 10.000 Java files, what can possible go wrong? During this time multiple emergency patches were needed and incidents occur. Although at first explicitly *not* hired as a coder, within 3 months a Java code contribution was made that was unexpectedly more crucial than anticipated. This talk will show some incidents with the election software in The Netherlands: how the software failed, and when/how it was discovered. Go over how seeing the elections from the outside, and give some history of voting computers and software. Ending with some reflecting on the future. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/how-election-software-can-fail/

7 Years Later: Why And How To Make Portable Open Hardware Computers (38c3)

Sat, 28 Dec 2024 16:40:00 +0100

After more than 7 years, a small team of hackers and designers in Berlin are about to release the third generation of their Open Hardware laptop family: MNT Reform Next. Here, Lukas "minute" Hartmann will discuss why we need Open Hardware computers, what we learned through trial, error and hardship of designing and hand-assembling over 1000 of them by hand, and how you can claw back some autonomy over your hardware from Big Computer. The talk will illustrate, with many pictures and without holding back, interesting problems and solutions we encountered while creating 3 laptops on shoestring budgets. Aiming to inspire more people to take custom hardware into their own hands, I will quickly walk through the essential tools and methods that you can use to create your own Open Source Hardware computing devices or modifying existing ones, like: - How and why I choose chips and components - How to get them into KiCAD for electronics, and get boards made - Use FreeCAD and OpenSCAD for 3D modeling, and get enclosures made, also from unorthodox materials - Cables, connectors and screws considerations - Firmware and Kernel troubles (designing Hardware for Linux) - Our basics of community participation (GitLab, IRC, Discourse) Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/7-years-later-why-and-how-to-make-portable-open-hardware-computers/

Knäste hacken (38c3)

Sun, 29 Dec 2024 19:15:00 +0100

In Deutschland sitzen über 40.000 Menschen im Knast. Weitgehend ohne Zugang zu digitaler Infrastruktur - außer einem Telefon. Wir schauen uns die Systeme an, die sie nutzen dürfen und in denen sie verwaltet werden. Von HamSy oder SoPart haben die meisten Menschen noch nie etwas gehört. Außer sie hatten bereits Kontakt mit deutschen Knästen. Das führt dazu, das es kaum Dokumentation darüber gibt, wie Digitalisierung für Menschen dort funktioniert und welche Folgen sie in Zukunft haben kann. Im letzten Jahr beschäftigte ich mich mit verschiedenen Systemen in deutschen Knästen und möchte über Datenabflüsse und strukturelle Probleme, die verhindern, dass wir Menschen dort Zugang zu digitaler Teilhabe gewähren, sprechen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/knste-hacken/

The ongoing (silent) storm in the medical devices industry and since when cybersecurity is a thing (38c3)

Sun, 29 Dec 2024 17:15:00 +0100

Medical technology is a heavily regulated industry and while there are very big name companies with deep pockets, small to medium manufacturers are struggling to keep up with the sheer amount of cybersecurity requirements. On top of all this, the requirements are many, qualified people are rare, and essential dependencies have shown not to be always stable. - Intro and giving a tangible sense of how heavily regulated is medical device industry - Dates and ongoing movements in the industry (eStar evolution, regulatory bodies, manufacturers, notified bodies, security companies, pentest providers) - How are the new aspects affecting new products and product updates: SBOM, threat modeling, security risk management - The long list of challenges, pitfalls and other fun aspects: legacy, embedded, certifications, SBOMs, CPEs, NVD chaos, risk management, etc.) Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/the-ongoing-silent-storm-in-the-medical-devices-industry-and-since-when-cybersecurity-is-a-thing/

Privacy-preserving (health) data processing is possible! (38c3)

Sat, 28 Dec 2024 21:45:00 +0100

Is it possible to do research on health data without violating the privacy of the entire population? The European Health Data Space is on the horizon, and it doesn't look like we can be satisfied with its implementation for now. Health data of all European insurance holders will be collected and retended not only for individual medical care, but also for scientific use. The so-called *secondary use* explicitly refers not only to academic research, but also to for-profit organizations. Not only universities will be able to access the data, but also, for example, the pharma industry and the big data companies such as Apple and Google. Claiming to improve the user experience of their proprietary health apps (anticipatory conjecture by the speakers), the most personal of all data will be placed in hands where it really does not belong to. So are we doomed? We say no! In this presentation, we will show how *probabilistic data structures* can be used to process personal data without compromising the privacy of individuals. We will show the results of a case study with exemplary health data. With this presentation, we want to point out that it is quite possible to give third parties certain access to health data, while preserving privacy for individuals. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/privacy-preserving-health-data-processing-is-possible/

ComeFlyWithUs Podcast (38c3)

Sat, 28 Dec 2024 19:45:00 +0100

Wir, Steffen & Olli, besprechen in unserem Podcast alles was die Große und Kleine Fliegerei angeht. Wir sind ein aktiver und ein Verkehrspilot im Ruhestand. Hauptthemen: update zu GPS-Spoofing, Flugstrecken in Zeiten von Krisen und Auswirkungen auf die Sicherheit. Ausserdem geht es um aktuelle Vorfälle in der großen und kleinen Luftfahrt. Trotz des vermeintlich ernsten Themas sind wir immer mit Humor dabei! Podcast Webseite: www.comeflywithus.de Wenn ihr Fragen zu dem Thema oder der Sendung habt, gerne platzieren, am besten schon vorab. Uns wird man kurz vorher antreffen können und wir werden nicht zu übersehen sein! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/comeflywithus-podcast/

Auracast: Breaking Broadcast LE Audio Before It Hits the Shelves (38c3)

Sun, 29 Dec 2024 13:50:00 +0100

Auracast, the new Bluetooth LE Broadcast Audio feature has gained some publicity in the last few months. The Bluetooth SIG has been working on the specification of this feature set in the past few years and vendors are only now starting to implement it. Auracast enables broadcasting audio to multiple devices. These broadcasts can also be encrypted. Unfortunately, the security properties of the protocol are vague and insufficient. It has already been shown that these broadcasts can be hijacked by anyone when unencrypted. We explain the state of (in)security of the protocol and add to it by showing that even when encrypted, broadcasts can often be cracked easily. We also show that once equipped with the passcode, attackers can eavesdrop and hijack even encrypted broadcasts. Alongside the talk, we will release our toolkit to brute-force authentication codes, decrypt dumped Auracast streams, and hijack encrypted broadcasts. Bluetooth Auracast is a marketing term for a subset of the new "LE Audio" features introduced in the Bluetooth 5.2 specification. LE Audio is designed to provide better sound quality, longer battery life and new capabilities for audio devices like headphones, earbuds and especially hearing aids. Essentially, Auracast is an audio broadcast feature set for Bluetooth Low Energy. Our talk will focus on the new features introduced in the core spec, namely Broadcast Isochronous streams (BIS). The protocol specification for Auracast was released several years ago, and vendors are only now beginning to implement application-level support for it. Previous research from 2023 (the "BISON" paper) has already shown that unencrypted Auracast broadcasts can be hijacked. The Bluetooth specification is very vague in what security goals it tries to achieve for (encrypted) broadcasts. The core building block for LE Audio broadcasts are Broadcast Isochronous Streams (BIS). Security for BIS is only ever mentioned in terms of confidentiality, which is supposedly achievable by encrypting a BIS. In this talk we'll shed some light on the security properties of Auracast and show that authenticity and confidentiality can be violated, even when broadcasts are encrypted. To examine whether the vague specification and the bad examples lead to real-world issues, we have surveyed several implementations of Auracast. We found that on popular devices the default configuration is weak and allows breaking the authenticity and confidentiality of the Auracast broadcast. Alongside the talk, we will release a toolkit that allows to dump, decrypt and hijack encrypted Auracast broadcasts. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/auracast-breaking-broadcast-le-audio-before-it-hits-the-shelves/

Barrierefreiheit und Inklusion - Eine Einführung, alltägliche Erfahrungen und Absurditäten, und warum es uns alle angeht (38c3)

Sun, 29 Dec 2024 12:15:00 +0100

Wir schreiben das Jahr 2024. Die Behindertenrechtskonvention der UN wurde vor 16 Jahren verabschiedet. Also sind inzwischen bestimmt sämtliche Barrieren abgebaut worden, Inklusion wird gelebt und beides wird gesellschaftlich als selbstverständlich angesehen und umgesetzt? Das ist bislang leider noch immer bloß utopisches Wunschdenken – deshalb werfen wir in diesem Vortrag einen schonungslosen und ehrlichen Blick auf die Themen Barrierefreiheit und Inklusion, sowie deren konkrete Umsetzung. Wir wollen mit einem Überblick und Grundlagen zum Thema beginnen, um anschließend genauer zu beleuchten, warum der Alltag für betroffene Menschen noch immer voller absurder Hürden ist – und Behindertsein sich oft wie eine Illegal Instruction anfühlt. Da die Thematik uns alle angeht, werden auch konkrete Handlungsansätze vorgestellt, wie wir alle aktiv zu einer inklusiveren und barriereärmeren Gesellschaft beitragen können. Im ersten Teil des Vortrags wird es einen Überblick zu den Grundlagen von Barrierefreiheit und Inklusion geben: was bedeuten Barrierefreiheit und Inklusion wirklich? Wir betrachten kurz die rechtlichen Rahmenbedingungen, von der UN-Behindertenrechtskonvention bis zu nationalen Vorgaben und Regelungen, die eine Welt ohne Barrieren versprechen – zumindest auf dem Papier. Sie sollen eigentlich den Rahmen für eine Gesellschaft bilden, in der Zugang und Teilhabe keine Ausnahmen, sondern die Regel sind. Denn Barrierefreiheit und Inklusion sind nicht bloß ein „nice to have“, sondern als Menschrenrecht ein grundlegender und essentieller Bestandteil einer gerechten Gesellschaft. Anschließend widmen wir uns den Absurditäten, die der Alltag für Menschen mit Behinderung bereithält, die von außen betrachtet fast schon humorvoll wirken, aber in Wahrheit ein frustrierendes Trauerspiel für alle darstellen, die täglich damit umgehen müssen. Wir sprechen über Grundlegendes wie Sprache, Konzepte wie die „Disability Tax“, Hilfsmittel und wie die Gesellschaft mit Behinderten umgeht und dass behinderte Menschen am Ende des Tages auch nur ein Teil der Gesellschaft sein wollen. Die Beispiele und Erfahrungen sind nicht nur Zeichen für fehlende Umsetzung – sie zeigen auch, wie oberflächlich bis ignorant die Probleme oft behandelt werden (wenn sie es überhaupt werden) und wie tief die Grundsteine und Überzeugungen für Ableismus und Ausgrenzung in der Gesellschaft verwurzelt sind. Damit der Talk nicht ausschließlich ein frustrierender und hoffnungsloser Rant wird, werden praktische Ansätze vorgestellt, um den Status Quo zu verbessern. Dabei sprechen wir nicht nur über die Verantwortung derer, die Entscheidungen treffen, sondern auch darüber, wie wir alle dazu beitragen können, Barrieren abzubauen eine inklusivere Gesellschaft voranzubringen. Erste Schritte sind zum Beispiel das Hinterfragen eigener Vorurteile und das Erkennen von Barrieren, die wir selbst vielleicht noch nie wahrgenommen haben. Denn am Ende des Tages geht es nicht nur um Gesetze oder gut gemeinte politische Entscheidungen auf geduldigem Papier, sondern darum, ob wir Barrierefreiheit und Inklusion wirklich als Selbstverständlichkeit sehen, umsetzen und leben. Der Vortrag bietet praktische Tipps und Denkanstöße, wie wir alle Barrieren abbauen können – und warum dies letztendlich uns allen zugutekommt. Die Folien zum Vortrag werden von mir kurz vor dem Vortrag unter folgender Adresse veröffentlicht: https://elfy.dev/38c3-vortrag/ (die Links sind am Ende der Seite). Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/barrierefreiheit-und-inklusion-eine-einfhrung-alltgliche-erfahrungen-und-absurditten-und-warum-es-uns-alle-angeht/

Reverse engineering U-Boot for fun and profit (38c3)

Fri, 27 Dec 2024 16:00:00 +0100

A field guide to dumping and reverse engineering a bare-metal U-Boot binary, including all the good stuff like funky hardware setups, UART logs, a locked bootloader and unknown base addresses. Working on hacking a babyphone and encountering a locked bootloader, we were faced with a major roadblock. So, naturally, we bashed our head against said problem for 2 weeks, coming out the other side with a few fun challenges, solutions and tid-bits. I want to recreate this experience here in this talk, by doing the whole process all over again, but this time live, in front of an audience. Includes: - getting serial logs - dumping firmware - extracting firmware - reverse engineering the U-Boot bootloader, to extract the bootloader password together with some tips, tricks and snark remarks. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/reverse-engineering-u-boot-for-fun-and-profit/

Demystifying Common Microcontroller Debug Protocols (38c3)

Fri, 27 Dec 2024 14:45:00 +0100

Many developers know that the answer to "How do I debug this microcontroller" is either "JTAG" or "SWD". But what does that mean, exactly? How do you get from "Wiggling wires" to "Programming a chip" and "Halting on breakpoints"? This talk will cover how common debug protocols work starting from signals on physical wires, cover common mechanisms for managing embedded processors, and ending up at talking to various common microcontrollers. Embedded programming is the art of shrinking complex programs in tiny packages by throwing away unnecessary features. With modern microcontrollers, debugging need not be one of the features thrown away. Most modern chips include some form of low-level access, but the technical details aren't widely understood. Many users of embedded firmware will use their preferred debugger without thinking too hard about what's going on underneath. We'll start by covering what it means to debug embedded software. The primitives required to have an interactive debug session are surprisingly minimal. From this, we'll build up a list of requirements and "nice to haves" to make a debugging environment comfortable, and reference existing "bespoke" debug approaches. We'll cover several examples of debug engines ranging from cores designed to go into FPGAs to tiny 8-bit microcontrollers. Next, we'll take a step back and describe the common lower-level protocols such as JTAG and SWD. These describe physical signals that go between the host and the target. We'll compare various protocols and see how they map onto the higher-level primitives discussed earlier. Armed with examples, we'll see how the protocol stack is formed. Next, we'll use the knowledge of low-level protocol implementations and the requirements for debugging to look at common abstractions on top of physical transports to implement core control. This will bridge the gap between "JTAG or SWD are the protocol" to "Poking a value in memory on a microcontroller". In this section, we'll cover the more common and generic uses such as Arm's ADI and the RISC-V DMI and see how complex and cross-target configurations are built to be rigid enough to have rich debug features while flexible enough to handle a wide range of processor configurations. Finally, we'll cover common tasks such as programming flash memory, watchpoints, and single-step debugging -- things that we take for granted in the desktop world and would like to have when programming for a potato that costs less than an actual potato. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/demystifying-common-microcontroller-debug-protocols/

Klimaschädlich by Design – die ökologischen Kosten des KI-Hypes (38c3)

Sun, 29 Dec 2024 21:10:00 +0100

Sogenannte Generative KI hat einen hohen Rechenbedarf und braucht damit automatisch viel Energie. Wir wollen zeigen, was die AI-Bubble uns alle bisher an Ressourcen gekostet hat. Wer verdient sich daran dumm und dusslig? Und wer trägt die ökologischen und sozialen Kosten? Sogenannte „Generative KI“ ist nicht nur ein Hype-Thema in Politik und Gesellschaft, mit ihr schießen auch die benötigten Rechenkapazitäten in die Höhe. Der Energiebedarf ist so hoch, dass Google, Microsoft und Meta 2024 nacheinander ihre Klima-Ziele zurücknahmen und nun auf dubiose Kernkraft-Lösungen umsteigen wollen. Das hat System, denn Big Tech entwickelt und finanziert nicht nur die gehypten KI-Anwendungen, die gleichen Konzerne bieten auch die benötigten Cloud-Kapazitäten an. Von Chile, Spanien bis nach Taiwan – weltweit regen sich Proteste gegen die Infrastruktur hinter dem KI-Boom, von neuen Bergbauprojekten, Chipfabriken bis zu Hyperscale-Rechenzentren. Der steigende Energie-, Wasser- und Ressourcenverbrauch feuert die Klimakrise an, bedroht Ökosysteme und verletzt indigene Landrechte – für erhoffte Milliardengewinne auf der Seite von Big Tech. In diesem Vortrag schauen wir auf die ökologischen und menschenrechtlichen Kosten des KI-Booms. Wir tragen die Fakten zusammen und liefern kritische Analysen und Argumentationshilfen zum KI-Hype. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/klimaschdlich-by-design-die-kologischen-kosten-des-ki-hypes/

Als die Kommentarspalten brannten – 11 Monate Einsatz in Gaza (38c3)

Fri, 27 Dec 2024 16:00:00 +0100

Der Krieg in Gaza als Reaktion auf die Terrorattacke vom 7. Oktober läuft mittlerweile über ein Jahr. Cadus ist seit Februar diesen Jahres in Gaza im Einsatz. Auch seit Februar diesen Jahres teilen wir wie so viele andere die Erfahrung, das vor dem Hintergrund unseres Einsatzes fernab von Gaza sich leidenschaftlich „politisch“ auseinandergesetzt wird. Nicht ÜBER unseren Einsatz wohlgemerkt, sondern darüber, ob wir jetzt die eine oder andere Seite genug verurteilen würden für die Art und Weise wie der Krieg geführt wird. In unserem Talk „Als die Kommentarspalten brannten – 11 Monate Einsatz in Gaza“ sprechen wir über die Herausforderungen, die unseren Einsatz tatsächlich begleiten. Cadus ist seit Februar 2024 in Gaza im Einsatz. Unsere Arbeit dort umfasst die Stabilisierung schwerstverletzter Zivilist*innen, medical evacuations und Unterstützung/medizinische Absicherung der Einsätze des United Nations Mine Action Service. Dieser Einsatz ist in Bezug auf die Herausfoderungen auf vielen Ebenen noch einmal deutlich anspruchsvoller als das, was wir als CADUS aus anderen Kriegsgebieten gewohnt sind. Seit Februar haben wir mehr als 3500 schwerstverletzte Patient*innen behandelt und mehrere hundert Menschen innerhalb Gazas und aus Gaza heraus evakuiert. Wir beleuchten unseren Katastrophenhilfe-Einsatz aus drei unterschiedlichen Blickwinkeln. Sebastian wird über die logistischen und administrativen Herausforderungen unseres Einsatzes reden. Wie geht das, in einem der aktuell gefährlichsten Kriegsgebiete einen Hilfseinsatz zu starten und am laufen zu halten? Vor allem unter Berücksichtigung der bestehenden umfassenden Embargos und der Behinderungen humanitärer Hilfe Anna-Lea berichtet darüber, wie wir unsere Teams auf den Einsatz vorbereiten, wie wir versuchen sie während des Einsatzes zu unterstützen, und wie ein Nachsorgeangebot aussehen kann (und muss) für Leute die freiwillig in so einen Einsatz gehen. Mit Nic Zemke hatten wir passend zum 38c3 einen echten Nerd im Einsatz, der darüber sprechen wird wie derzeit Hilfsorganisationen und Vereinte Nationen KML-Files mit überlebenswichtigen Informationen über WhatsApp hin und her schicken und wie wir ein für die Seenotrettung entwickeltes Geoinformationssystem in kürzester Zeit so umgebaut haben, dass die Koordination von Hilfseinsätzen bald hoffentlich weniger Fehleranfällig läuft. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/als-die-kommentarspalten-brannten-11-monate-einsatz-in-gaza/

Automated Malfare - discriminatory effects of welfare automation (38c3)

Sat, 28 Dec 2024 13:50:00 +0100

An increasing number of countries is implementing algorithmic decision-making and fraud detection systems within their social benefits system. Instead of improving decision fairness and ensuring effective procedures, these systems often reinforce preexisting discriminations and injustices. The talk presents case studies of automation in the welfare systems of the Netherlands, India, Serbia and Denmark, based on research by Amnesty International. Social security benefits provide a safety net for those who are dependent on support in order to make a living. Poverty and other forms of discrimination often come together for those affected. But what happens, when states decide to use Social Benefit Systems as a playground for automated decision making? Promising more fair and effective public services, a closer investigation reveals reinforcements of discriminations due to the kind of algorithms and quality of the input data on the one hand and a large-scale use of mass surveillance techniques in order to generate data to feed the systems with on the other hand. Amnesty International has conducted case studies in the Netherlands, India, Serbia and, most recently, Denmark. In the Netherlands, the fraud detection algorithm under investigation in 2021 was found to be clearly discriminatory. The algorithm uses nationality as a risk factor, and the automated decisions went largely unchallenged by the authorities, leading to severe and unjustified subsidy cuts for many families. The more recent Danish system takes a more holistic approach, taking into account a huge amount of private data and some dozens of algorithms, resulting in a system that could well fall under the EU's own AI law definition of a social scoring system, which is prohibited. In the cases of India and Serbia, intransparency, problems with data integrity, automation bias and increased surveillance have also led to severe human rights violations. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/automated-malfare-discriminatory-effects-of-welfare-automation/

Liebe Werte Stiften Alles (38c3)

Sun, 29 Dec 2024 18:45:00 +0100

Das Podcast-Stiftungs-Abenteuer beginnt & ihr könnt auf dem #38c3 live bei der Geburt dabei sein. Ja, der Titel 'Liebe Werte Stiften Alles' zunächst klingt wie ein durchgeknalltes Kreuzworträtsel, aber wir versprechen, dass am Ende alles Sinn ergibt ;-) 🎭 Warnung: Dieser Podcast könnte schwerwiegende Nebenwirkungen haben, wie: - Plötzliche Anfälle von Großzügigkeit - Unkontrollierbare Ausbrüche von sinnstiftendem Handeln - Chronisches Weltverbesserer-Syndrom - Akute Philanthropie-Euphorie s sind die Zufälle, die unserem Chaos seinen Zauber geben & ein solcher *zenga*zauber*zufall war es, der Maria Reimer und derPUPE mal wieder für ein neues Abenteuer zusammenbrachte. Denn derPUPE sinniert seit seinem 50ten Geburtstag viel über Werte und den Sinn des Lebens. Konkret spielt er mit dem Gedanken, eine Stiftung zu gründen. Dazu ist er im Austausch mit Menschen, um sich in das Thema einzunerden und gleichzeitig mit Chaos Wesen zu sprechen, die wellenkompatible Werte haben und auch vorleben. Plötzlich postet Maria genau zu diesem Thema etwas auf Linkdin - Wow, da paßte mal wieder die liebe Schicksals Glücksdrachen-Fee und kurzentschlossen wurde einfach mal telefonisch angepingt und kurz gemeinsam Gedanken ausgespeichert und gespiegelt. Diese gemeinsame Gespäch bewies die Wellenkompatibilität zwischen den beiden, und Marias Profession passt auch perfekt zu dieser möglichen Mission. Weil der Flow zwischen ihnen schon beim ersten Gespäch einfach harmonisch und befruchtend war, lag es auf der Hand, das Abenteuer einer Stiftungsgründung mit einem Podcast zu begleiten. In diese initialen Geburtsfolge bringen sie unter anderem Antworten auf folgende Fragen mit: Was will man hinterlassen in einem Leben, das vermutlich mehr als halb vorbei ist? Kann eine Stiftung ein Stilmittel sein in einer Welt, die besser gepatcht werden muss? Und was hat ein Kinosaal voller Kinder mit derPUPEs Plan zu tun? P.S,: Angelehnt ist der Titel natürlich an die großartigen Liebe.Freiheit.Alles Sticker. Wer kennt und fühlt es nicht? ;) Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/liebe-werte-stiften-alles/

Passwort - der heise security Podcast auf dem 38C3 (38c3)

Sat, 28 Dec 2024 18:00:00 +0100

Der heise security Podcast traut sich raus aus dem gemütlichen Redaktionsstudio und sendet vom 38C3. Zur diesjährigen Congress-Ausgabe hat sich Host Christopher ein paar spannende Themen herausgesucht. Seinen ersten C3 seit zweiundzwanzig Jahren wird er sicher auch mit seinen verklärtern Erinnerungen vergleichen: Wo sind die Wäscheklammern? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/passwort-der-heise-security-podcast-auf-dem-38c3/

Feelings of Structure in Life, Art, and Neural Nets (38c3)

Sat, 28 Dec 2024 21:45:00 +0100

One of the basic ways we navigate the world is through ‘feelings of structure’ -- our experience of the inner logic of a system or a situation as a tone, a vibe, a mood. I argue that building a technical analogy between ‘feelings of structures’ and autoencoder neural networks lets us construct a kind of theory of vibe: a theory that lets us see how sets of material (/digital) objects express a worldview and vice versa, and that can explain the deep role art plays in expressing, developing, and challenging our understanding of the world. The story I’m hoping to tell builds up to an account of how the aesthetic unity or ‘vibe’ of an artistic work can model the causal-material structure of a lifeworld. On this account, the meaning of an artistic work lies partly in a dense vibe we can sense when we take in the imaginative landscape of the work -- a dense vibe that acts as a structural representation of a looser, weaker vibe present in the real world and teaches us how to feel it. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/feelings-of-structure-in-life-art-and-neural-nets/

Digitalisierung mit der Brechstange (38c3)

Sat, 28 Dec 2024 12:00:00 +0100

Fünf Prozent der Bevölkerung im Alter von 16 bis 74 Jahren in Deutschland sind offline. Dafür gibt es verschiedenen Gründe: Manche wollen nicht ins Netz und manche können nicht. Dennoch gibt es zunehmend auch öffentliche Dienstleistungen nur noch digital. Das wäre kein Problem, wenn gewährleistet wäre, dass alle Zugang zu Geräte, zum Netz und die nötige Unterstützung haben, um die Angebote nutzen zu können. Und wenn wir darauf vertrauen könnten, dass unsere Daten dort sicher sind. Solange beides nicht gegeben ist, darf niemand ausgeschlossen werden, weil der Zugang fehlt. Menschen, die noch immer nicht online sind, sind älter, arm, häufig weiblich, manchmal behindert, sind keine Akademiker*innen oder arbeiten in Jobs, bei denen sie nicht vor Computern sitzen. Aber auch durchaus IT-affine Menschen geraten mal ins Straucheln, wenn der Akku vom Gerät mit dem digitalen Ticket nicht mehr mitmacht oder das Funkloch verhindert, dass die digitale Bahncard aktualisiert werden kann, wenn die Kontrolle kommt. Statt dafür zu sorgen, dass die nötige Infrastruktur läuft und alle die Unterstützung bekommen, die sie brauchen, um die immer anders aussehenden digitalen Behördengänge erledigen zu können, setzt die Bundesregierung auf Zuckerbrot und Peitsche. Es gab Geschenke wie den Kulturpass für 18-Jährige oder eine 200-Euro-Einmalzahlung für Studierende, aber die gab es nur für die, die sie online beantragten. Es wird akzeptiert, dass Post- und Bankfilialen durch Online-Angebote ersetzt werden. Alle, die damit nicht klarkommen, werden höchstens belächelt. Aber das betrifft nicht wenige Menschen, die angesichts dieser Digitalisierung mit der Brechstange im Regen stehen. Sie sind oft so schon auf die eine oder andere Weise benachteiligt und nun durch rein digitale Angebote noch weiter abgehängt. Im Idealfall sollte Digitalisierung das Leben vereinfachen. Tatsächlich trägt diese Digitalisierung zu noch mehr gesellschaftlicher Spaltung bei. Dieser Talk beleuchtet, wen das betrifft und warum, und zeigt Beispiele für Dienstleistungen und Angebote, die nur online zu haben sind – und für die, die keine Skrupel haben angesichts der häufig wenig vertrauenserweckenden Umsetzung. Schließlich wird es auch darum gehen, was nötig wäre, um diese Situation zu ändern. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/digitalisierung-mit-der-brechstange/

Proprietary silicon ICs and dubious marketing claims? Let's fight those with a microscope! (38c3)

Fri, 27 Dec 2024 22:05:00 +0100

Custom silicon chips are black boxes that hold many secrets, like internal ROMs, security features and audio DSP algorithms. How does one start reverse engineer them? Let's look at the basics of silicon reverse engineering, what gate array chips are, and how some tooling can generate Verilog code automatically from a die shot. A digital synthesizer from 1986 was completely shrouded in mystery and dubious marketing claims. Being that old, eventually every working unit will break, leaving us with the no info about its inner workings. I could not accept this, so I decided to get into silicon reverse engineering. By dissolving its undocumented custom chips into acid and looking at them through a microscope, I was able to get an understanding of what was going on internally, to be able to preserve it and emulate it in the future. This is possible because lot of custom silicon chips from that era (80s and 90s) are of the "gate array" type: a grid-like structure that contains thousands of digital logic gates. By looking at them closely we can understand what those gates do, and by following the wiring between them we can reconstruct the entire system. This method allowed people to understand and recreate perfect emulations of arcade games, sound chips, security ICs and more. In this talk I want to tell my journey into silicon reverse engineering from my perspective of a complete beginner and software guy, and what I learned in the process. I will go through the different kinds of custom chips, how they look under a microscope, their different parts, what can be easily reverse engineered and what can not. Those chips do not only contain logic, but also RAM and ROM parts, and knowing how to identify them can give clues when looking at the logic is too complicated. Sometimes a chip can be completely understood even without knowing that a MOSFET is. I will also cover the process I used for reverse engineer them, some techniques that worked and some that didn't, and some tools I built to automatically extract mask ROMs and generate Verilog code from die shots. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/proprietary-silicon-ics-and-dubious-marketing-claims-let-s-fight-those-with-a-microscope/

Computing Genomes & what that has to do with privacy (38c3)

Mon, 30 Dec 2024 12:15:00 +0100

What does it take to get a Genome into the computer? A slightly technical, political and personal dive into the field of genomics. This will be in the first part an introductory talk to Genomics, covering "How do you get a genome into your computer?". As I'm a bioinformaticist, i will briefly mention sequencing, but focus on the computation. Because it turns out that getting a human genome into your computer involves a lot of computation! In the second part i will outline where privacy comes in here, and why it is essential, if we want to do work with genomic data responsibly. Understanding privacy goes beyond the technical: economic incentives, legal policy and security need to be taken into consideration to protect genomic data adequately. In the third part i will tell of a University program which i organized in which we did our own Genomic Analysis with students, as privacy preserving and digitally sovereign as possible, and tell of the challenges we faced and the learnings we made. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/computing-genomes-what-that-has-to-do-with-privacy/

Police 2.0: Peaceful activism is terrorism and fakenews are facts (38c3)

Fri, 27 Dec 2024 12:00:00 +0100

On 23 October 2019 peaceful activist Frank van der Linde found out the Dutch Police was associating him with terrorism to other countries' law enforcement. This talk goes over the bizarre, worrying and, frankly, quite funny journey that Frank van der Linde has embarked on, hoping on a litigation frenzy to seek justice and fight back against the institutional intimidation of activists. In 2014 the Dutch police started monitoring Frank van der Linde after he demonstrated and publicly opposed racism, climate change, animal cruelty, homelessness, and other social injustices. By 2019 the Dutch law enforcement had put him on a terror list and shared his personal data with the German Federal Criminal Police Office, Europol and Interpol. Frank challenged the police for sharing his data and categorising him as "terrorist", they responded "The term ‘terrorism’ is a broad term, and they don't really mean it." The Police maintained the categorisation. Last year, a Dutch police officer blew the whistle and spoke out in favor of Frank during a hearing in court. He told the court that the police file about Frank contained grossly mischaracterised and biased information. Overall is seems that wherever van der Linde data is processed, data gets lost and accountability processes cave in. To quote Frank, “What do they have to hide?!” Speakers: Frank van der Linde Lori Roussey, Director of Data Rights, who participates in supporting Frank courageous journey Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/police-2-0-peaceful-activism-is-terrorism-and-fakenews-are-facts/

Geostationäre Satelliten als Hobby (38c3)

Sat, 28 Dec 2024 21:10:00 +0100

Geostationäre Satelliten können ein spannendes Hobby sein, von Satellitenpiraterie über Amateurfunksatelliten bis hin zum digitalen Satellitenrundfunk finden sich viele Betätigungsfelder. Was sind geostationäre Satelliten, was macht man damit, und warum hört man auf US-Militärsatelliten auch mal Leute Portugisisch sprechen oder Songs von den Bangles? Das sind nur einige Fragen die ich in diesem kleinen Ritt durch die Nachrichtentechnik der Fernmeldesatelliten beantworten werde. Das ganze mit Illustrationen und realen Beispielen sichtbar gemacht, sowie Praxistipps wie man diese Satelliten auch selbst nutzen kann. Der Vortrag versucht für ein breites Publikum verständlich zu sein und dabei eine Balance zwischen didaktischer Vereinfachung und der korrekten Darstellung von Technologien und Verfahren. Es häufig gezeigt wohin man gehen kann, wenn man mehr wissen will. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/geostationre-satelliten-als-hobby/

KI-Karma next Level: Spiritueller IT-Vertrieb (38c3)

Sat, 28 Dec 2024 23:55:00 +0100

Der IT-Vertrieb ist ein Feld voll dorniger Chancen. Ein Grund mehr, gemeinsam von innovativen Branchen in Form von "Neuen Religiösen Bewegungen" (Sekten) zu lernen, um unseren erwachten beruflichen Neustart zu pitchen. Haben Sie schon einmal einer Messe evangelikaler fundamentalistischer Splittergruppen beigewohnt und sich gefragt, wie sie Menschen dazu bringen könnten in Code zu reden wenn sie Änderungswünsche äußern, statt in Zungen? Wäre es nicht ein echter game-changer, wenn Wunderheilungen auch im Außendienst einsetzbar wären? Sind Sie neidisch, weil jeder gewöhnliche Doomsday-Kult trotz falscher Prophezeiungen seine Kundenbindung stabil hält, während Sie für alles mögliche haftbar gemacht werden? Haben Sie manchmal das Gefühl, ihr Team schwingt nicht auf derselben feinstofflichen Ebene wie Sie? **** Dann sind SIE hier genau RICHTIG!1 *** Im Rahmen des 42-Stufen-Programms für feinstoffliche IT tauchen wir diesmal in den Code von Gruppendynamiken ein. In diesem Kompaktseminar lernen Sie zentrale Erfolgsstrategien bekannter Leader der bekanntesten Spiritualitäts-Startups der letzten Jahrzehnte kennen. Erweitern Sie ihre Wissens-Meridiane und werden Sie Teil einer schwingenden Gemeinschaft, die sich mit dem feinstofflichen Wissen inspirierender Datenbanken vernetzt. Die Chakra-Bausteine des Kurses sind wie folgt: * Software Wunderheilung * Energetisches Community-Building * Code-Channeling * Cyber-Marketing Anhand von Praxisbeispielen aus den Branchen IT und Spiritualität erarbeiten wir ein Erfolgskonzept, das Sie im Handumdrehen zum erfolgreichen erwachten Entrepreneur machen kann. Hinweis: Dieser Kurs ist der zweite Teil eines 42-Stufenprogramms, kann aber auch ohne Vorwissen von Einsteigern gebucht werden. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/ki-karma-next-level-spiritueller-it-vertrieb/

Biological evolution: writing, rewriting and breaking the program of life (38c3)

Sun, 29 Dec 2024 16:40:00 +0100

Biological evolution is a great inventor. Over 4 billion years, it has generated an astonishing diversity of lifeforms, from the tiniest bacteria to the tallest trees. Each new organism inherits a genetic program from its parents - a set of instructions to “build” the organism itself. Random mutations in this program can alter the organism’s traits, affecting its ability to survive in its environment. But how do these small changes combine over thousands of generations to yield the vast complexity we see in present-day lifeforms? In this talk, we discuss examples from our research, using computer simulations to model the early evolution of animals, from single-celled microbes to complex multicellular organisms. We show that evolution behaves a bit like a hacker, repurposing the programs it previously built in unexpected ways to create new functions and structures. Understanding how evolution continually innovates is one of biology’s grand challenges. We also hope that uncovering these processes in biological systems will provide new perspectives on current debates about the generative and creative capabilities of AI. The history of life abounds with examples of how biological evolution repurposes old tools for new functions. Feathers, indispensable for bird flight, first appeared in dinosaurs, where they served an entirely different purpose: to stay warm in the Jurassic winter. Analogously, the proteins that focus light in the lens of our eyes originally functioned as metabolic enzymes. One of evolution’s most transformative repurposing events is the emergence of multicellularity — a transition that laid the groundwork for complex life as we know it. Before multicellularity evolved, single cells lived autonomously, each with their own genetic program to find food and survive harsh environments. Evolution repurposed these cellular programs, to organise self-sufficient cells into cooperative multicellular groups, with surprising new capabilities and collective survival strategies. For example, cells in the group can divide tasks among each other and share resources, paving the way for the extreme specialisation we find in the organs of modern animals. Our computational models simulate this evolutionary transition to explore how the rewriting of cellular programs sets the stage for further biological innovations. One striking insight from our computational approach is that it requires little input data to generate novel solutions to evolutionary problems, revealing an inherent efficiency in biological systems that stands in contrast to modern generative AI. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/biological-evolution-writing-rewriting-and-breaking-the-program-of-life/

Hacking yourself a satellite - recovering BEESAT-1 (38c3)

Sat, 28 Dec 2024 19:15:00 +0100

In 2013, the satellite BEESAT-1 started returning invalid telemetry, rendering it effectively unusable. Because it is projected to remain in orbit for at least another 20 years, recovering the satellite and updating the flight software would enable new experiments on the existing hardware. However, in addition to no access to telemetry, the satellite also has no functional software update feature. This talk will tell the story of how by combining space and computer security mindsets, the fault was correctly diagnosed without telemetry, software update features were implemented without having them to begin with, and the satellite was recovered in September of 2024. In 2009, BEESAT-1 was launched into low earth orbit as the first 1U CubeSat of Technische Universität Berlin. In 2011, the satellite started returning invalid telemetry data. After a short amount of time spent diagnosing the issue, operators switched to the redundant on-board computer, which initially resolved the issue. However in 2013 the issue reoccurred on the second computer. With no other on-board computer available to switch to, operations largely ceased besides occasional checks every few years to see whether the satellite was still responding to commands at all. A recovery of BEESAT-1 back into an operational state was made particularly attractive considering that due to its higher orbit, it is currently estimated to remain in space for another 20 years or more, while many of the other spacecraft of the BEESAT series have since burned up in the atmosphere. Additionally, the spacecraft is equipped with a number of sensors and actuators which were not fully utilized during the primary mission and could be used in an extended mission. However, to fully utilize all the available hardware on the spacecraft, a software update is required. Unfortunately, the software update functionality was not completed at the time of launch and as a consequence is in a nonfunctional state. An alternate solution must be devised. Following an extensive effort that diagnosed the telemetry problem, developed a solution that would remedy both the telemetry problem and allow the upload of new flight software, and implemented this solution on the actual spacecraft in orbit, the satellite was finally recovered into an operational state with the ability to perform a software update in September 2024. This talk will cover the recovery process from beginning to end, including: - A brief overview of how BEESAT-1 works and is operated - Diagnosing the loss of telemetry without access to said telemetry - Engineering a solution to the diagnosed issue, including: - figuring out how to upload new software without a feature intended for that task - establishing a development and testing setup for flight software development years after the original setup was dismantled - developing a patch to enable returning the satellite to an operational state and establish the ability to upload new flight software, while under the constraints posed by the lack of a proper upload method and without compromising the safety of the spacecraft - Implementing this solution on the actual spacecraft in space - A brief look at the current state of the spacecraft and remaining future tasks Along the way, some of the fun and unexpected moments experienced while working with the 15 year old software and hardware will be shared. The talk is likely to be a mix of technical and non-technical. I hope to provide enough context so that you can follow without a background in space systems or computer security. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/hacking-yourself-a-satellite-recovering-beesat-1/

Dude, Where's My Crypto? - Real World Impact of Weak Cryptocurrency Keys (38c3)

Mon, 30 Dec 2024 11:00:00 +0100

We present Milksad, our research on a class of vulnerabilities that exposed over a billion dollars worth of cryptocurrency to anyone willing to 'crunch the numbers'. The fatal flaw? Not enough chaos. Learn how we found and disclosed issues in affected open source wallet software, brute-forced thousands of individual affected wallets on a budget, and traced over a billion US dollars worth of prior transactions through them. In July 2023, people in our circle of friends noticed a series of seemingly impossible cryptocurrency thefts, which added up to over one million US dollars. A common denominator was discovered across the set of victims we knew: the wallet software `libbitcoin-explorer`. Vulnerable versions used a weak pseudorandom number generator when creating cryptocurrency wallets. Within a short period of time, we disclosed the vulnerability, [CVE-2023-39910](https://milksad.info/disclosure.html). Using this weakness, attackers were able to compute private keys of victims, which is supposed to be impossible under normal circumstances. In this talk we * 📜 - tell the story of uncovering a digital currency heist * 🌐 - dive into similar vulnerabilities * 🔍 - trace the movement of coins * ⚖ - outline ethical challenges of cryptocurrency security research * 🛡 - explore methods to defend and protect against this bug class Our intention is to share the story of how little details can have big consequences and the importance of quality chaos. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/dude-where-s-my-crypto-real-world-impact-of-weak-cryptocurrency-keys/

Security Nightmares (38c3)

Mon, 30 Dec 2024 16:40:00 +0100

Der IT-Sicherheitsalptraum-Rückblick: Manchmal belustigend, zuweilen beunruhigend, aber mit Ausblick. Es ist wieder ein Jahr vergangen und niemand ist von einem Smartmeter erwürgt worden: Ist überhaupt etwas Berichtenswertes passiert? Und wenn nein, wird es denn nächstes Jahr wenigstens schlimmer? Wir betrachten das vergangene Jahr, versuchen Muster zu erkennen und zu ahnen, wie es weitergehen muss, denn vorgewarnt zu sein, heißt gewappnet zu sein. Und sei es nur mit Popcorn und „In Übereinstimmung mit der Prophezeihung!“-Schildern. Publikumseinwürfe willkommen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/security-nightmares/

Resource Consumption of AI - Degrow or Die (38c3)

Mon, 30 Dec 2024 12:55:00 +0100

Not only the energy consumption of AI is exploding. Less known is that other resources like water or metal are also affected. The talk gives an overview on the devastating impact of datacenters on our environment. Degrowth scenarios seem to be the only way to escape from this ecological nightmare. Summarizing the known facts and serious predictions the talk gives an overview on the upcoming possible and impossible scenarios of the energy and resource consumptions. Even if predictions are not easy economical and ecological limits are discussed. Finally, degrowth will be discussed. Can we degrow datacenters without loosing too much of our digital life? How much can be saved using alternative technologies. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/resource-consumption-of-ai-degrow-or-die/

Das weiß doch niemand - Das Ultimative Super Quiz 3000! (38c3)

Sat, 28 Dec 2024 23:30:00 +0100

Lustige Spaßfragen kann ja jeder stellen - jetzt wird's ernst, mit Fragen deren Antworten niemand weiß... oder doch? Finden wir es heraus! Du machst in Quizduell immer alle platt, hättest beim "Wer wird Millionär?" schauen schon 12 Mal die Million gewonnen und bist auch sonst als wandelndes Lexikon und (un)beliebter Klugscheißer bekannt? Dann komm auf die Bühne und beweise es, bei dem ultimativen Super Quiz 3000 mit Fragen deren Antworten dich zum Verzweifeln bringen! Die Phrase "omg wer soll das denn wissen?" könnte während dieser Show öfter zu hören sein - und kann gerne als Trinkspiel genutzt werden. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/das-wei-doch-niemand-das-ultimative-super-quiz-3000/

Ein unmoralisches Angebot: Wie wir unsere Communities vor ideologischen Zugriffen schützen (38c3)

Sun, 29 Dec 2024 13:50:00 +0100

In beschleunigten Krisenzeiten wächst mit der Überforderung auch die Sehnsucht nach einer klaren Ordnung: Weltbilder, die das Chaos auf ein moralisch aufgeladenes "Entweder-Oder" reduzieren. Mit dieser binären Logik werden alle Lösungen, die das "Sowohl-als-auch" denken, abgemäht. Die verheerende Folge: zwischen aufgeheiztem Lagerdenken, Positionierungsdruck und Rhetorik von individueller Schuld und Scham ist kein kollektives Handeln mehr möglich. Der Talk macht das unmoralische Angebot eines universalistischen und anwender*innenfreundlichen „Security-Updates". Eine Empfehlung, auf was wir dringend achten sollten, um unser Netzwerk handlungsfähig zu halten. Der Talk gliedert sich in drei Teile: 3. GROUND CONTROL: NORMATIVE INFRASTRUKTUR: Wir alle sind nicht ganz schwindelfrei und suchen nach Anbindungen oder Gravitationsfeldern, die uns in der unendlichen Kontingenz des Daseins Orientierung geben. Diese zutiefst menschliche Sehnsucht nach Sinnanziehungskraft kann man erstmal als solche anerkennen und ohne Scham annehmen. Das ist das klassische Business von Religionen (religare → la „anbinden, zurückbinden, festhalten, an etwas festmachen“). Nun hinterlassen in einer größtenteils säkularen Gesellschaft die zum Glück arbeitslos gewordenen Religionen viele ungebundene Individuen. Leider selten freie Radikale, vielmehr eine durch neoliberale Politik und kapitalistische Erzählungen individualisierte, unorganisierte Schar von Wesen, die ziemlich ‚lost’ sind – und dadurch empfänglich für moralisch durchtränkte Diskurse – gegenwärtig vor allem solche, die das Individuum in den Mittelpunkt stellen. Das Problem daran: Kollektives Handeln wird immer schwieriger zu organisieren. 2. ILLEGAL CONSTRUCTIONS oder DIE ZERSTÖRUNG DER EINS: Alain Badiou ist ein Philosoph, der weltweit und nicht nur in akademischen Kreisen gelesen wird, in Deutschland aber kaum bekannt ist. Dabei hat er gerade zu dieser Fragestellung einiges zu sagen. Sein Plädoyer gilt der Verknüpfung von Subjektivität und Universalismus statt dem Versuch, Partikularitäten zu kontrollieren – wie es seiner Meinung nach identitätspolitische Ansätze versuchen. Stattdessen schlägt er vor, Subjektivität als kollektive ‚illegal instruction‘ zu denken. Was erstmal abstrakt klingt, bringt sehr konkrete Konsequenzen mit sich, wenn man sie in den (netz-)aktivistischen Alltag übersetzt – was im dritten Teil getan wird: 3. ILLEGAL INSTRUCTIONS: Unverbindliches Angebot eines „Security Updates“ mit praktischen Hinweisen, Anregung zur Selbstreflexion und vielen offenen Fragen, die mit in die eigenen Strukturen genommen werden können. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/ein-unmoralisches-angebot-wie-wir-unsere-communities-vor-ideologischen-zugriffen-schtzen/

Hacking Disasters - eine Bastelanleitung für die Chaos-Community (38c3)

Sat, 28 Dec 2024 23:00:00 +0100

Die Klimakrise eskaliert, Naturkatastrophen und Kriege werden mehr: Großes globales Chaos ist absehbar und wer wäre da besser geeignet um zu helfen als die Chaos-Community. CADUS und LNOB zeigen anhand von realen Beispielen aus der Ukraine, vom Balkan, aus Afghanistan, aus Gaza und vom Hochwasser nebenan, wie humanitäre Helfer*innen, Aktivist*innen oder Hacker*innen, mit Software, 3D-Druckern und Akku-Schraubern im Katastrophenfall effizient helfen können - ganz ohne Blaulicht. Dieser Talk bietet der Chaos-Community eine Bauanleitung für humanitäre Interventionen zu Land, zu Wasser und im Internet. Die Klimakrise eskaliert, Naturkatastrophen und Kriege werden mehr: Großes globales Chaos ist absehbar und wer wäre da besser geeignet um zu helfen als die Chaos-Community. CADUS und LNOB zeigen anhand von realen Beispielen aus der Ukraine, vom Balkan, aus Afghanistan, aus Gaza und vom Hochwasser nebenan, wie humanitäre Helfer*innen, Aktivist*innen oder Hacker*innen, mit Software, 3D-Druckern und Akku-Schraubern im Katastrophenfall effizient helfen können - ganz ohne Blaulicht. Dieser Talk bietet der Chaos-Community eine Bauanleitung für humanitäre Interventionen zu Land, zu Wasser und im Internet. Mit dabei: Eine rollende Intensivstation für die Ukraine auf Basis eines ausrangierten Reisebusses, umgebaut per 3D-Drucker und Schweißgerät. Medikamente aus der Luft per ausgedienten Gleitschirmen für abgeschnittene Orte. Und wie kann an diesen Orten kommuniziert werden? Auch dafür wird an einer fliegenden Lösung gearbeitet. In Gaza stellten wir fest, dass der UN-Standard für die Kommunikation über lebenswichtige Informationen wie die Lage von Evakuierungszonen darin besteht, KML-Dateien über WhatsApp-Gruppen zu verschicken. Schnell wurde ein Prototyp für eine Lagekarten-App gebaut, basierend auf einem aus der Chaos-Community supporteten Geoinformationssystem für die Koordination von Einsätzen der zivilen Rettungsflotte auf dem Mittelmeer. Als in Afghanistan die Taliban die Macht übernahmen dauerte es keine Woche bis sich Aktivist*innen bis zum Deutschen Außenminister persönlich und ins CIA Headquarter durchtelefoniert hatten. Mit Social Engineering Skills und freundlicher IT-Unterstützung aus der Chaos-Community gelang es schließlich, einen Airbus A320 in Kabul zu landen und gefährdete Menschen zu evakuieren. Egal ob wir gemeinsam mit Aktivist*innen aus der Ukraine mit mobilen Makerspaces in Transportern von Ort zu Ort fahren um die Resilienz im russischen Angriffskrieg durch technische Interventionen zu stärken, oder gemeinsam eine Software für Freiwilligenmanagement schreiben, die beim nächsten Hochwasser nebenan mit einer mobilen Radlader Crew anrücken, es gibt unzählige Möglichkeiten wie sich die Chaos-Community einbringen kann. Wir wollen Mut machen für das "prepping for future". Und auch wenn Weihnachten gerade rum ist, haben wir zum Abschluss noch eine Wunschliste mitgebracht. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/hacking-disasters-eine-bastelanleitung-fr-die-chaos-community/

Correctiv-Recherche "Geheimplan gegen Deutschland" (38c3)

Fri, 27 Dec 2024 11:00:00 +0100

Vor einem Jahr veröffentlichte Correctiv die Recherche “Geheimplan gegen Deutschland”, die ein geheimes Treffen von Rechtsextremen, AfD-Funktionären und CDU-Mitgliedern enthüllte. Diese Enthüllung führte zu massiven Demonstrationen, während rechtsextreme Gruppen versuchten, das Geschehen zu relativieren. Die politische Reaktion blieb jedoch verhalten, und die AfD setzte die demokratischen Parteien weiter unter Druck. In diesem Vortrag gibt Jean Peters, leitender Reporter der Recherche, einen Überblick über die Recherchemethoden, analysiert den medialen Diskurs und zeigt zukünftige Perspektiven zur Berichterstattung über Rechtsextremismus auf. Vor einem Jahr enthüllte Correctiv in der investigativen Recherche "Geheimplan gegen Deutschland" ein brisantes Treffen in Potsdam, an dem Rechtsextreme, AfD-Funktionäre, CDU-Mitglieder aus unteren Rängen sowie bedeutende Geldgeber teilnahmen. Diese Veröffentlichung schlug in der deutschen Öffentlichkeit hohe Wellen und führte zu den größten Demonstrationen, die die Bundesrepublik seit ihrer Gründung erlebt hat. Menschen in ganz Deutschland gingen auf die Straße, um gegen die rechtsextreme Bedrohung und die wachsende politische Einflussnahme dieser Kreise zu protestieren. Die Rechtsextremen hingegen versuchten, die Bedeutung dieses Treffens herunterzuspielen und die Enthüllungen als überzogen darzustellen. Sie bemühten sich, ihre Pläne zu relativieren. Gleichzeitig trieb die AfD die demokratischen Parteien bei den Landtagswahlen der neuen Bundesländer weiter vor sich her und konnte in mehreren Bundesländern beachtliche Wahlerfolge feiern. Die Reaktionen auf Bundesebene waren in vielen Augen enttäuschend: Statt die Warnungen aus der Zivilgesellschaft und den Demonstrationen ernst zu nehmen, schien die Bundespolitik in Teilen auf AfD-freundliche Maßnahmen zu setzen. Jean Peters, der leitende Reporter der Recherche, wird in seinem Vortrag detaillierte Einblicke in die Vorgehensweise und die Methodik der Enthüllung geben. Er wird erläutern, wie Correctiv die Verbindungen zwischen den rechtsextremen Akteuren und den finanziellen Unterstützern aufdeckte, welche Herausforderungen es nach der Recherche gab und wie das Team mit der enormen öffentlichen Resonanz umging. Zudem wird er den medialen Diskurs kritisch einordnen: Welche Rolle spielten die Medien bei der Verbreitung und der Einordnung der Informationen? Wie reagierte die Öffentlichkeit auf die Berichterstattung? Und welche Konsequenzen ergaben sich daraus für die politische Debatte in Deutschland? Abschließend wird Peters mögliche nächste Schritte und Ansätze für die weitere Berichterstattung über Rechtsextremismus und den Stand der Debatte rund um ein potenzielles AfD Verbot aufzeigen. Er wird darlegen, wie der investigative Journalismus weiterhin dazu beitragen kann, diese Netzwerke aufzudecken, und welche Hacks die Demokratie bietet, um Autoritarismus zu bekämpfen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/correctiv-recherche-geheimplan-gegen-deutschland-1-jahr-danach/

Queersupport - weil junge Queers ein offenes Ohr brauchen! (38c3)

Sun, 29 Dec 2024 11:00:00 +0100

Der Queersupport stellt sich vor: Eine bundesweite, digitale Beratungsstruktur für und von jungen Queers. Hier supporten junge queere Menschen Peer-to-Peer online. Angegliedert an eine queere Fachberatung. Mit einem hohen Anspruch an Datenschutz und digitaler Souveränität. Der Queersupport vom Jugendnetzwerk Lambda (der einzige queere, bundesweite Jugendverband in Deutschland) supportet junge Queers (und auch deren Angehörige und gesetzliche Vertreter:innen) bei all ihren Fragen und Krisen rund um die Themen Coming Out, Transition, Identität, Familie, Schule, etc. Das besondere am Queersupport ist, dass hier sowohl ehrenamtliche junge Queers, als auch hauptamtliche Fachberater*innen beraten. Dadurch entsteht ein super Netzwerk für die Ratsuchenden. Neben dem Aspekt des Peer-to-Peer ist uns Intersektionalität sehr wichtig - denn wir wollen für viele queere Menschen da sein können. Das beginnt im hauptamtlichen Team (wir sind unterschiedlich positioniert: Queer, trans, be_hindert, Rom*ni, PoC, weiß, autistisch, ...) und geht weiter bei den ehrenamtlichen (die Peers sind fast alle auch mehrfachmarginalisiert). Wir legen großen Wert auf souverän betriebene, freie Software, Datenschutz und Nutzer:innenfreundlichkeit. Wir entwickeln deshalb selbst, auf Basis verschiedener OpenSource Tools, ein für uns passendes Setting. Auch weil wir glauben, dass diese Themen gerade für marginalisierte Menschen besonders wichtig sind, da sie sich am wenigsten darauf verlassen können, dass Technik großer Internetgiganten ihre Interessen berücksichtigen oder propietärer Settings auch nutzbar bleiben, wenn der politische Wind sich dreht. In unserem Talk wollen wir unsere Struktur konzeptionell und technisch vorstellen und mit euch diskutieren, wie wir solche Arbeit unabhängig und nachhaltig gestalten können. Wir gehen darauf ein, welche Bedarfe junge Queers (online) haben und führen aus, welches technische Setting wir ihnen derzeit anbieten können und perspektivisch anbieten wollen. Wir möchten diskutieren, welche besonderen Anforderungen (marginalisierte) Queers an gegenseitige Unterstützung online haben – konzeptionell und technisch. Und wie wir in bessere Kooperation kommen können, über marginalisierte Gruppen hinweg eine souveräne digitale Infrastruktur zur Selbsthilfe aufzubauen. Einen ersten Blick könnt ihr hier schon mal wagen: https://queersupport.de Oder uns auf dem CCC in unserer Assembly besuchen und mit uns quatschen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/queersupport-weil-junge-queers-ein-offenes-ohr-brauchen/

Meet the Teams - c3lingo (38c3-meta)

Fri, 27 Dec 2024 21:00:00 +0100

c3voc.tv - Meet the Teams c3lingo stb stellt c3lingo vor und berichtet was das Team auf dem Congress leistet. about this event: https://c3voc.de

AI Meets Git: Unmasking Security Flaws in Qodo Merge (38c3)

Sun, 29 Dec 2024 12:00:00 +0100

The whole world is talking about AI, and developers are no exception. When a developer hears about a tool that can help them handle git pull requests using AI, it is likely that they will start using it for their open source project. This is precisely what's happening with Qodo Merge (formerly PR-Agent), an open source tool that can help review and handle git pull requests by using AI to provide feedback and suggestions to developers. It is getting adopted by more and more open source projects, including popular ones. It is so easy to add new features by relying on external tools, yet the consequences on security can be catastrophic. Indeed, if the tool contains security vulnerabilities, the project using it may become vulnerable too and may grant anyone permissions to perform unexpected actions without realizing it. But everyone wants to use AI so security may be overlooked. We found multiple vulnerabilities in Qodo Merge that may lead to privilege escalation on Gitlab, getting write access to Github repositories and leaking Github repository secrets. Additionally we found multiple high profile Github repositories using Qodo Merge with a configuration that makes them vulnerable, such as highly popular projects, government official repositories, self-driving automotive industry projects, blockchains and more. In this talk we go through what Qodo Merge is, how it can be used, how it works, how it can be exploited, what projects are affected and what are the impacts. We also mention remediation steps to fix these issues. Qodo (formerly CodiumAI) develops an open source tool called Qodo Merge (formerly PR-Agent). This tool can be setup to automatically analyze pull requests on a Gitlab, Github or Bitbucket project. Qodo Merge uses AI to perform various tasks that may help a developer handle a pull request, such as: * Summarizing a pull request * Suggesting code changes to improve a pull request * Generating a CHANGELOG file entry for a pull request * Answering questions about a pull request * and more In this talk, we describe vulnerabilities we found in Qodo Merge that may lead to privilege escalation on Gitlab, write access to Github repositories and leaking secrets of Github repositories. We mention popular open source projects that are vulnerable because they started using Qodo Merge, and discuss how to protect your project from these attacks. We also talk about the multiple ways we tried to report those vulnerabilities to the developers of Qodo Merge and the lack of a way for security people to contact them. Finally, we describe the current security posture of the project regarding the vulnerabilities we found. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/ai-meets-git-unmasking-security-flaws-in-qodo-merge/

Warum Nutzende Logins nerven (38c3)

Fri, 27 Dec 2024 19:15:00 +0100

Die Verwendung von Nutzernamen und Passwörtern bei Logins ist für uns selbstverständlich. Für technisch weniger versierte Nutzende stellt dieser Prozess jedoch häufig eine nervenaufreibende Herausforderung dar – sowohl in Bezug auf die Nutzerfreundlichkeit als auch auf die Sicherheit. Tauchen wir in die Perspektive genau dieser Nutzenden ein und finden heraus, wo die Probleme liegen. Zudem schauen wir uns alternative Lösungen an, die die Nutzerfreundlichkeit und Sicherheit verbessern können. Die Authentifizierung mit Nutzername und Passwort ist weit verbreitet und so gut wie überall Standard. Für uns ist das alltäglich und wird deshalb selten hinterfragt. Mit der Hilfe von Passwort-Managern machen wir uns das Leben leichter. Doch wie sieht es für Menschen aus, die weniger Erfahrung mit Technik haben? Als Frontend-Entwicklerin habe ich Erfahrungen gesammelt, die dazu einladen, unseren Blickwinkel zu erweitern. Denn oft betrachten wir ITler die Welt der Technik nicht mehr aus der Perspektive des Endnutzers. In diesem Vortrag versetzen wir uns gemeinsam in die Perspektive von durchschnittlichen Nutzenden und gehen den Prozess eines typischen Login-Verfahrens durch. Dabei finden wir heraus, welche Aspekte Frustration auslösen und warum aktuelle Ansätze wie Passwort-Manager nicht unbedingt eine sinnvolle Lösung für alle darstellen. Außerdem werfen wir einen Blick auf mögliche Alternativen zu herkömmlichen Login-Verfahren wie zum Beispiel Passkeys, die sowohl Sicherheit als auch Nutzerfreundlichkeit erheblich verbessern. Ich zeige auf, wie wir Logins für alle einfacher, frustfreier und sicherer gestalten können – eine Herausforderung, die nicht nur technisches Know-how, sondern auch ein besonderes Verständnis für die Nutzenden erfordert. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/warum-nutzende-logins-nerven/

Meet the Teams - c3sign (38c3-meta)

Fri, 27 Dec 2024 20:30:00 +0100

c3voc.tv - Meet the Teams c3sign l3d erzählt ein bisschen von der Arbeit des Team c3sign auf dem 38c3. about this event: https://c3voc.de

From Silicon to Sovereignty: How Advanced Chips are Redefining Global Dominance (38c3)

Fri, 27 Dec 2024 19:15:00 +0100

Recent breakthroughs in machine learning have dramatically heightened the demand for cutting-edge computing chips, driving advancements in semiconductor technologies. At the forefront of this progress is Extreme Ultraviolet (EUV) lithography—a transformative method in microchip fabrication that enables the creation of ultra-small, high-performance devices. However, the path from raw materials to these state-of-the-art chips navigates a complex global supply chain riddled with technical challenges and geopolitical tensions. As nations vie for dominance in computing power, control over this supply chain has emerged as a strategic priority, featuring prominently in a high-stakes competition with global implications. Designed for all audiences, this talk explores the critical intersection of science, technology and global affairs shaping our future. This talk centres on the advanced technical processes required to manufacture state-of-the-art computer chips, tracing the journey from raw materials to ultra-miniaturized circuits. We will explore each critical stage in this complex process, beginning with the refinement of ultrapure quartz and progressing through wafer production to the advanced lithography techniques that enable feature sizes down to just a few nanometers—all executed not merely in a laboratory but at an industrial scale that pushes the boundaries of what is technologically possible. A particular emphasis will be placed on Extreme Ultraviolet (EUV) lithography, a revolutionary technique essential for achieving these ultra-small scales. EUV lithography not only represents the core technological challenge in chip fabrication but also holds a pivotal position in the global semiconductor supply chain, placing it at the intersection of scientific innovation and international politics. The talk will address both the underlying physics and the geopolitical significance of this technology, as nations increasingly view control over semiconductor production as a strategic asset. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/from-silicon-to-sovereignty-how-advanced-chips-are-redefining-global-dominance/

Vom Betrieb bis ins Netz: Gewerkschaften als Vorbild für modernen Widerstand? (38c3)

Sun, 29 Dec 2024 12:55:00 +0100

Von kreativen Strategien und Herausforderungen aus der Gewerkschaftsarbeit im Kampf für Arbeiter*innenrechte Arbeitnehmer*innen der IT-Branche sehen sich zunehmend mit Repressionen konfrontiert, die kreative und gemeinsame Formen des Widerstands erfordern. Von Union Busting über unmoralische Praktiken am Arbeitsplatz bis hin zu gesetzlichen Hürden – die Angriffe auf kollektive Arbeitsrechte werden intensiver und vielseitiger. Die Herausforderung, neue Aktionen zu entwickeln, Widerstände zu überwinden, Ideen zu verwerfen und immer wieder neu anzusetzen, ist längst alltäglich geworden. Umso wichtiger ist es, dass wir uns gegenseitig inspirieren und unterstützen. Aktivismusfelder wie Netzpolitik, Klimaschutz und Arbeitsrechte stehen vor ähnlichen Hindernissen – und wir alle profitieren, wenn wir uns austauschen und voneinander lernen. Unser Vortrag zielt daher nicht darauf ab, allumfassende Lösungen zu bieten. Stattdessen möchten wir aktuelle Missstände aufzeigen und Erfahrungen sowie Lösungsansätze teilen. Gemeinsam wollen wir untersuchen, wie unkonventionelle Ansätze, geteilte Erfahrungen und Zusammenarbeit zu einer stärkeren, solidarischen Zukunft führen können. Mit unserer Erfahrung aus der Gewerkschaftsjugend und aus Tarifkämpfen sprechen wir über Aktionen, Erfolge und Rückschläge – und darüber, wie wir uns in Zukunft besser aufstellen können. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/vom-betrieb-bis-ins-netz-gewerkschaften-als-vorbild-fr-modernen-widerstand/

Einstieg in die Teilchenphysik (38c3)

Fri, 27 Dec 2024 23:00:00 +0100

Was sind die fundamentalen Bestandteile der Materie, und wie interagieren sie miteinander? Die Teilchenphysik beschäftigt sich mit diesen grundlegenden Fragen und bildet die Basis unseres Verständnisses der Naturgesetze. In diesem Talk möchte ich euch einen Einstieg in die spannende Welt der Quarks, Leptonen und Bosonen geben. Ich werde die Grundlagen des Standardmodells der Teilchenphysik erklären, einen Einblick in Experimente wie den Large Hadron Collider (LHC) geben und zeigen, welche Rolle Teilchen wie das Higgs-Boson oder Neutrinos spielen. Der Fokus liegt darauf, die Teilchenphysik verständlich und anschaulich zu machen - ganz ohne Vorkenntnisse, aber mit viel Raum für Fragen. Dieser Talk richtet sich an alle, die mehr über die Grundbausteine der Materie und die Arbeit moderner Physiker:innen erfahren möchten. Egal ob Schüler:in, Student: in oder einfach nur Wissenschaftsinteressierte - hier seid ihr richtig! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/einstieg-in-die-teilchenphysik/

Geschredderte Gutachten: Wie nicht nur der Staat bei digitaler Barrierefreiheit versagt (38c3)

Sun, 29 Dec 2024 12:55:00 +0100

Ein riesiger Teil der digitalen Leistungen der Bundesrepublik sind nicht inklusiv und für alle zugänglich. Eklatante Rechtsbrüche werden ignoriert und es gibt absolut nichts, was wir tun können, außer darüber zu reden. Die digitale Barrierefreiheit ist kaputt. In den letzten Monaten habe ich viele digitale Angebote des Staates auf deren Barrierefreiheit überprüft und die kritischsten Barrieren an die verantwortlichen Stellen gemeldet. Beispielsweise war es in der Hochwasser-Krise nach Weihnachten 2023 für blinde Personen in mindestens drei relevanten Bundesländern nicht möglich, den aktuellen Pegelstand an ihrem Wohnort abzurufen. Im Katastrophenschutz sieht es nicht besser aus: Alle vier öffentlich finanzierten Warn-Apps sind für viele Menschen mit Behinderung nicht nutzbar. Und auch das neue, für alle verpflichtende E-Rezept wurde voller Barrieren ausgerollt. Diese eklatanten Mängel sind leider Dauerzustand. Selbst wenn Barrieren schon intern bekannt sind, dauert es oft Jahre, bis diese behoben werden. An allen Ecken fehlt wichtige Expertise und der weltweite Beratungsmarkt wird beherrscht von Schlangenöl. Bei einer Meldung einer neuen Barriere werfen die Behörden gerne mit Phrasen um sich und beteuern ihren Einsatz für Inklusion. Tatsächlich zeigen meine Erfahrungen ein erschreckendes Muster , das auf systematische Diskriminierung hindeutet. Aber wie können wir dann wirklich und nachhaltig Dinge verbessern? Können wir das überhaupt? Wir schauen uns den traurigen Zustand der digitalen Barrierefreiheit in Deutschland an, benennen Verantwortliche für die Misere und lernen, was wir eigentlich wirklich bräuchten. Von echten Menschen mit Behinderung, mit echter Expertise. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/geschredderte-gutachten-wie-nicht-nur-der-staat-bei-digitaler-barrierefreiheit-versagt/

Investigating the Iridium Satellite Network (38c3)

Fri, 27 Dec 2024 16:00:00 +0100

The Iridium satellite (phone) network is evolving and so is our understanding of it. Hardware and software tools have improved massively since our last update at 32C3. New services have been discovered and analyzed. Let's dive into the technical details of having a lot of fun with listening to satellites. We'll cover a whole range of topics related to listening to Iridium satellites and making sense of the (meta) data that can be collected that way: - Overview of new antenna options for reception. From commercial offerings (thanks to Iridium Time and Location) to home grown active antennas. - How we made it possible to run the data extraction from an SDR on just a Raspberry Pi. - Running experiments on the Allen Telescope Array. - Analyzing the beam patterns of Iridium satellites. - Lessons learned in trying to accurately timestamp Iridium transmissions for future TDOA analysis. - What ACARS and Iridium have in common and how a community made use of this. - Experiments in using Iridium as a GPS alternative. - Discoveries in how the network handles handset location updates and the consequences for privacy. - Frame format and demodulation of the Iridium Time and Location service. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/investigating-the-iridium-satellite-network/

Der ultimative Rodecaster Pro II Workshop (38c3)

Fri, 27 Dec 2024 21:00:00 +0100

Der Rodecaster Pro II ist derzeit das beste Aufnahmegerät für Podcasts. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/der-ultimative-rodecaster-pro-ii-workshop/

Was tun, wenn man ein Datenleck entdeckt hat? (38c3)

Fri, 27 Dec 2024 16:40:00 +0100

Wenn Sicherheitsforscher und Hacker Datenlecks direkt dem dafür Verantwortlichen melden, setzen sich u.U. strafrechtlichem Risiko aus oder werden auch mal schlicht ignoriert. Stattdessen kann es in der Praxis aber auch sinnvoll sein, die Möglichkeiten der DS-GVO und die Befugnisse der Datenschutz-Aufsichtsbehörden zu nutzen, um Sicherheitslücken schnell zu schließen. Anhand von Beispielen aus der Praxis zeigt der Vortrag, welche Möglichkeiten Sicherheitsforscher haben wenn sie Datenlecks gefunden haben. Eine effektive Möglichkeit kann sein, frühzeitig die Datenschutz-Aufsichtsbehörden einzuschalten, denn diese haben zahlreiche Befugnisse, mit denen sie Datenlecks schnell und effektiv schließen und Beweise sammeln können. Denn im Gegensatz z.B. zum BSI und anderen Institutionen können die Datenschutz-Aufsichtsbehörden auch außerhalb kritischer Infrastrukturen Unternehmen und Behörden anweisen, Datenlecks unverzüglich zu schließen, den Weiterbetrieb eines entsprechenden Servers untersagen und Bußgelder verhängen. Das sorgt dafür, dass Datenlecks in der Regel sehr schnell geschlossen werden können. Zudem zeigt der Vortrag, welche Rechte die von einem Datenleck betroffenen Personen haben und wie die Bearbeitung solcher Fälle in der Praxis abläuft. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/was-tun-wenn-man-ein-datenleck-entdeckt-hat/

Desiring Technology. Über Porno, Abhängigkeit und Fortschritt (38c3)

Sat, 28 Dec 2024 00:15:00 +0100

Eine wachsende Zahl von Menschen eignet sich ihre empfundene Abhängigkeit von digitaler Pornografie als mystischen Fetisch an – sie konsumieren ihren Konsum. Was ist Gooning, wie hat es sich entwickelt und was kann es uns über unser Verhältnis zu Medientechnologie im weiteren Sinn erzählen? Pornografie gilt als wichtiger Treiber von Digitalisierung. Ihre Nutzung ist damit auch ein kulturelles Labor digitaler Konsumgesellschaft - aber eines, über das relativ wenig gesprochen wird. Was genau machen Leute eigentlich mit Pornos? Wie Pornos konsumiert werden, gibt mehr als nur Aufschluss über den Stand dessen, was wir “Sexualität” nennen. Menschliches Begehren ist die wichtigste Ressource für technische Entwicklung schlechthin, und in den Lustfarmen der Pornokonsumindustrie findet dieser Zusammenhang nur einen besonders deutlichen Ausdruck. Dieser Vortrag erzählt die Geschichte einer relativ jungen Form digitalisierter Sexualität rund um Pornografiekonsum: Gooning. Er beschreibt, wie über die letzten zehn Jahre diese Form der Lust an sich selbst eine innige Verbindung mit digitalen Medien eingegangen ist. Und er nutzt dieses Beispiel, um eine weitere Geschichte zu erzählen: eine Geschichte über menschliche und vor allem männliche Körper, die nicht anders können, als das Neue zu begehren – selbst angesichts der unerwünschten Zukünfte, mit denen die technologisierte Welt, von der sie abhängig geworden sind, sie konfrontiert. Inhaltshinweis Themen: Sexualität, Sucht. Nacktheit im Bildmaterial ist verpixelt. Dennoch nicht empfohlen für Personen unter 18 Jahren. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/desiring-technology-ber-porno-abhngigkeit-und-fortschritt/

From fault injection to RCE: Analyzing a Bluetooth tracker (38c3)

Fri, 27 Dec 2024 17:15:00 +0100

The Chipolo ONE is a Bluetooth tracker built around the Dialog (now Renesas) DA14580 chip. This talk will present the research made on this device, from extracting the firmware from the locked down chip using fault injection up to getting remote code execution over Bluetooth. The talk will also present the disclosure process and how the vendor reacted to an unpatchable vulnerability on their product. This talk will present the journey through the analysis of the Chipolo ONE Bluetooth tracker. As for lots of IoT devices, this analysis mixes both hardware and software attacks so this talk will be packed with lots of techniques that can be applied to other devices as well: - Using fault injection to bypass the debug locking mechanism on a chip that has apparently never been broken before. - Reverse engineering an unknown firmware with Ghidra, a PDF and parts of a SDK - Analyzing weak cryptographic algorithms to be able to authenticate to any device - Finding a buffer overflow and achieve code execution over Bluetooth - Disclosing an unpatchable vulnerability to the vendor Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/from-fault-injection-to-rce-analyzing-a-bluetooth-tracker/

Waiter, There's An LLM In My Search! (38c3)

Fri, 27 Dec 2024 21:10:00 +0100

This year Large Language Models (LLMs) in search engines told us to put glue on our pizza and eat a small rock every day. This is not ideal, and the consequences of "AI Overviews" and similar features could even be deadly for some people, like mushroom foragers. Maybe it's time for a new sort of search? In this talk I'll sketch out some possible futures and look at how we can put search back in the hands of the searcher. Also, there will be memes! Overall, the state of search right now is: not good. Search engine results are full of AI generated sludge, SEO spam and self-dealing by providers. This talk will look at the options that are open to us to improve search somewhat, including a few tips and tricks that anyone can take advantage of today to make hyperscale search providers like Google more functional again. But in many ways the most interesting question is whether we can find ways to discover stuff online that don't rely on a handful of hyperscale providers to do all the web crawling and indexing, and servicing of people's queries. In particular, what would happen if search was federated - how could we make that scaleable and performant, and what can we learn from the fediverse? Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/waiter-there-s-an-llm-in-my-search/

Was lange währt, wird endlich gut? Die Modernisierung des Computerstrafrechts (38c3)

Fri, 27 Dec 2024 13:50:00 +0100

Die Reform des Computerstrafrechts ist längst überfällig. Die bestehende Gesetzgebung ist zunehmend veraltet und entspricht nicht mehr den Anforderungen unserer digitalen Welt. Spätestens seit der Veröffentlichung des aktuellen Koalitionsvertrags hat sich die Bundesregierung die Modernisierung dieses vielfach kritisierten Rechtsbereichs auf die Fahnen geschrieben. Doch was ist seitdem wirklich passiert? Wie sieht der aktuelle Stand der Reformbemühung aus? Was wird sich konkret ändern und welche Auswirkungen wird dies auf die Hacker-Community und die Sicherheitsforschung haben? Und wird das endlich gut? Das Computerstrafrecht steht seit vielen Jahren in der Kritik – nicht nur von Seiten der Hacker-Community, sondern auch aus der Wissenschaft, der Wirtschaft und sogar von Strafrechtsexperten. Ein zentraler Kritikpunkt ist die Kriminalisierung von Hacking mit guter Absicht, sogenannten ethischen Hackern. Aktuell ist auch diese Form des Hacking strafbar. Initiativen wie Bug Bounty Programme und Disclosure Policies zeigen, dass die Industrie durchaus ein Interesse daran hat, von ethischen Hackern zu profitieren, die Schwachstellen verantwortungsbewusst aufdecken und melden. Seit Ende Oktober ist nun ein Gesetzesentwurf im Umlauf, welcher die Modernisierung des Computerstrafrechts vorsieht. Dieser Vortrag gibt einen Einblick in die Entwicklung dieses Gesetzesentwurfs, den aktuellen Stand der Debatte und die nächsten Schritte. Wir erklären dabei die geplanten Änderungen anhand von praktischen Beispielen und erläutern, welche Aktivitäten zukünftig legal wären und welche weiterhin verboten bleiben. Ziel des Vortrags ist es, die Zuhörenden über den Prozess der Gesetzesänderungen zu informieren. Sie erkennen, welche Möglichkeiten sich aus dem reformierten Computerstrafrecht ergeben und lernen, was beim verantwortungsvollen Aufdecken von Sicherheitslücken beachtet werden muss und welche rechtlichen Grenzen weiterhin bestehen. Zudem wird der Vortrag verdeutlichen, inwieweit die geplante Gesetzesreform als Gewinn für die Hacker-Community angesehen werden kann – oder ob es noch immer Nachbesserungsbedarf gibt. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/was-lange-whrt-wird-endlich-gut-die-modernisierung-des-computerstrafrechts/

OpenPV - Calculate the solar potential of your building (38c3)

Sat, 28 Dec 2024 01:10:00 +0100

Simulating the photovoltaic potential of roofs and facades with WebGL and OpenData in real time This talk is a deep dive into the open-source website [openpv.de](https://www.openpv.de/) - prepare yourself for lots of open geodata, physics-based solar irradiance simulation, some shady WebGL code, and insights on how to get funding from the German government for your open-source project. We will look at the available open data of 3D buildings, laser scans, and elevation models from Germany and how we navigated through the jungle of governmental open datasets. Having these valuable datasets allows us to do fancy things - like building a browser-based tool for solar potential simulation. This includes the task of performing physics-based simulation in WebGL, a nice problem we planned to solve in one afternoon but that ended up taking several weekends. In the talk, we also share about the evolution of our project and our experience along the way. We started as a simple free-time project, but evolved and even received public funding from the German Prototype Fund in the end. Come and listen to our talk if you 1. think about installing your own PV system, 2. love open geodata, 3. want to see some fancy 3D simulations in the browser. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/openpv-calculate-the-solar-potential-of-your-building/

Decentralize Your Internet with Self-Hosting (38c3)

Fri, 27 Dec 2024 20:15:00 +0100

In einer Zeit, in der Privatsphäre immer mehr untergraben wird – warum nicht die Kontrolle über deine Daten übernehmen und eine eigene Cloud für Filehosting aufbauen? Dieser Vortrag ist ein praktischer Leitfaden zum Selbsthosting von Nextcloud zu Hause, speziell gedacht für Einsteiger mit grundlegenden Linux- und Bash-Kenntnissen. Von der Wahl der passenden Hardware bis zur sicheren Internetanbindung bauen wir Schritt für Schritt eine selbst gehostete Filehosting-App im eigenen Heimnetzwerk. In diesem Vortrag zeigen wir euch alle Schritte zu einer vollständig funktionsfähigen, internet-reichbaren Nextcloud-Instanz zum Filehosting im Internet. Wer bisher noch keine eigene Software betreibt, aber neugierig auf die Möglichkeiten ist, ist hier genau richtig. Dafür wird der Aufbau Schritt für Schritt dargestellt: vom Hardware-Setup über die Auswahl des passenden Betriebssystems und notwendiger Hilfssoftware bis hin zur Installation der Anwendung und der anschließenden Absicherung. Wir schauen uns ausserdem an, wie ein Nextcloud-Server aktuell gehalten werden kann und im Internet erreichbar gemacht werden kann. Dabei geben wir praktische Tipps zur Absicherung der Applikation. Der Vortrag soll dabei praxisnah gestaltet werden und Demos enthalten, wo immer immer das möglich ist. Die komplette Anleitung inklusive aller Skripte wird es in einem Open Source Repo geben. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/decentralize-your-internet-with-self-hosting/

Mit dem Kärcher durch die Datentröge der Polizeien (38c3)

Fri, 27 Dec 2024 20:15:00 +0100

Daten, Daten, Daten. Sicherheitsbehörden wollen immer mehr davon. Doch zu welchem Zweck und wo kommt machine learning ins Spiel? Wir liefern einen Überblick und besprechen Auskunftsansprüche, Beschwerdemöglichkeiten und Gegenmaßnahmen. Nicht erst seit dem diesjährigen Sicherheitspaket befinden sich deutsche Geheimdienste und Polizeibehörden in einer Datensammelwut. Spätestens seit dem 11. September 2001 und dem Terrorismusbekämpfungsgesetz dienen terroristische Anschläge als Legitimation für die Politik, den Sicherheitsbehörden die Befugnisse zu geben, die diese ohnehin schon lange fordern. Dabei wachsen die Datenbanken der Behörden stetig. Ihre Namen sind INPOL-neu, PMS links/rechts/sport oder rosa Liste (IGVP), ATD, PIAV (Polizeilicher Informations- und Analyseverbund). Oft kommt es vor, dass auch eigentlich Unbeteiligte in diesen Listen landen, so bleiben z. B. Personen gegen die ermittelt wurde, weiterhin in INPOL gespeichert, nachdem das Verfahren längst eingestellt wurde. Ebenso sollen, wie im Sicherheitspaket geplant, biometrischer Daten mit öffentlich im Internet verfügbaren Daten abgeglichen werden. Den Betroffenen ist dabei meist nicht klar, ob und in welchen Datenbanken sie landen; der Dschungel an Datenbanken und Zuständigkeiten ist auch kaum zu überblicken. Betroffene werden weder automatisch informiert noch gilt die DSGVO für Ermittlungsbehörden. Teilweise werden sogar gesetzliche Informationspflichten, wie beispielsweise über Unbeteiligte in Funkzellenabfrage schlicht nicht eingehalten. Die immer größer werdenden Datenmengen sind kaum durch Menschen zu verarbeiten. Deshalb soll auf sogenannte künstliche Intelligenz wie autmatisierte Gesichtserkennung, Ganganalysen oder Analysen von "auffälligem Verhalten" gesetzt werden. Dabei werden Entscheidungen, die bisher durch Menschen getroffenen wurden, an Computer ausgelagert. Der Computer entscheidet also, wer am Bahnhof kontrolliert wird und damit über den Eingriff in dessen Grundrechte. Was können wir tun? Janik steht selbst in diversen Datenbanken der Polizei. Er erzählt im Vortrag über seinen langen Weg, um Auskunft bei den verschiedenen Landes- und Bundesbehörden zu erhalten. Entlang dieses Weges musste er Klage einreichen, weil die Behörden keine Auskunft erteilte, er musste Beschwerden beim BfDI einreichen, da das BKA Fotos von seinem Gesicht aus einer erkennungsdienstlichen Behandlung zweckentfremdete, um damit eine Marktanalyse von Gesichtserkennungssoftwaren durchzuführen. Seine Rechtsanwältin Bea erklärt die rechtlichen Hintergründe und setzt sich mit der Frage auseinander, mit welcher Vorstellung von Verantwortung im polizeilichen Dienst wir es zukünftig zu tun haben werden. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/mit-dem-krcher-durch-die-datentrge-der-polizeien/

Wie wird gleich? (38c3)

Fri, 27 Dec 2024 22:05:00 +0100

Welchen Einfluss hat die Form der Dinge? Wie wirken wir durch die Gestaltung unseren kulturellen Praxen, Architekturen, Sprachen und Strukturen auf uns und die uns umgebende Zukunft ein? Und warum findet sich in zeitgenössischer Design Theorie ein Verb wie *Futuring*? Basierend auf der Annahme, dass alles mit allem zusammen hängt und ein gemeinsames Interesse besteht, die gesamte Scheiße zum Guten zu wenden, lade ich dazu ein, anhand von Praxisbeispielen aus meiner künstlerischer Forschung und einfachen Live-Experimenten, zu erfahren, wie wir alle Welt gestalten. Und wie wir aus diesem Beteiligt sein Mut ziehen können, einer lebenswerten Zukunft für alle näher zu kommen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/wie-wird-gleich/

Instructions unclear - Über die (In-)Accessibility von Symbolen (38c3)

Fri, 27 Dec 2024 23:55:00 +0100

Ein Talk über die Kommunikation ohne gesprochene oder geschriebene Sprache Kommunikation ist ja schon mit Worten manchmal schwierig - Wie ist das eigentlich, wenn man NICHT mit Worten kommunizieren kann? (Sei dies durch Sprachbarrieren, Psychische oder körperliche Beeinträchtigungen oder einfach nur aus Platzmangel) In diesem Talk werde ich mich auf eine ehrliche und hoffentlich auch etwas humoristische Art mit der Kommunikation mithilfe von Symbolen auseinandersetzen. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/instructions-unclear-ber-die-in-accessibility-von-symbolen/

EU's Digital Identity Systems - Reality Check and Techniques for Better Privacy (38c3)

Fri, 27 Dec 2024 20:15:00 +0100

Digital identity solutions, such as proposed through the EU's eIDAS regulation, are reshaping the way users authenticate online. In this talk, we will review the currently proposed technical designs, the impact such systems will have, and provide an outlook on how techniques from modern cryptography can help to improve security and privacy. Digital Identity solutions are on the rise all around the world. In particular the European Union is establishing a range of ambitious proposals like eIDAS to establish a general purpose platform for identification, authentication and transfer of personal data that will be used by eGovernment, logging into Facebook, public transport, eCommerce and doctor visits. With the Digital Euro, the EU Digital Travel App, Age Verification Apps and many other proposals we can see the scary trajectory the EU is headed towards. This talk provides a critical reality check about the underlying technology, the impact these systems will have on our privacy on a daily basis and what security (hell) we can expect. The talk will also give an overview of the proposed technical eIDAS architecture, and the [Cryptographers' Feedback on the EU Digital Identity’s ARF](https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/issues/200). We will also provide a brief introduction into zero-knowledge proofs, the security and privacy properties they can provide for Digital Identities, and what is missing to bring these technologies into reality. Thomas Lohninger has worked for the digital rights NGO epicenter.works to advocate for [strong privacy in the eIDAS law](https://epicenter.works/en/thema/eid-digital-public-infrastructures) on EU level. He is a member of the [Ad-Hoc Technical Advisory Group of the EU-Commission on eIDAS Wallet](https://epicenter.works/en/content/nda-of-the-ad-hoc-technical-advisory-group-of-the-eu-commission-on-eidas-wallet) and the only civil society Jury member of the SPRIND Funke on [EUDI WALLET Prototypes](https://epicenter.works/en/content/germany-eidas-wallet-jury-agreement-nda) of the German government. Anja Lehmann is a professor for cryptography at the Hasso-Plattner-Institute, University of Potsdam, with a focus on developing privacy-enhancing technologies, in particular enabling privacy-preserving authentication. She is a Jury member of the SPRIND Funke on [EUDI WALLET Prototypes](https://www.sprind.org/impulse/challenges/eudi-wallet-prototypes#anchor-jury) and also supports the SPRIND EUDI project on the integration of zero-knowledge proofs since October 2024. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/eu-s-digital-identity-systems-reality-check-and-techniques-for-better-privacy/

Och Menno - How NOT to build a submarine (38c3)

Fri, 27 Dec 2024 19:00:00 +0100

Nachdem im letzten Jahr erklärt wurde, wie man erfolgreich ein UBoot baut, gucken wir darauf was bei TITAN und anderen Ubooten schief ging, und was man daraus für Projektleitung und sicheres Design lernen kann. Uboote verfolgen mich im Och Menno Podcast seit über 5 Jahren, die Technik dahinter ist gleichzeitig faszinierend und ihre Geschichte ist voll erschreckenden Fehlern und Unglücken. Von Ubooten die sich beim Spülen der Toilette selber versenken, zu der britischen K Klasse hin zu TITAN ist die Geschichte der Unterwasserfahrzeuge voll von Fehlschlägen. Nachdem die Analyse des Unglücks der TITAN die meist gehörte Folge 2024 ist kommt der Podcast auf die Bühne mit zusätzlichen Erkenntnissen aus dem Untersuchungsausschuss der US Coast Guard. Warum baut man Uboote so wie man sie baut? Warum ist ein disruptiver Startup Ansatz nicht immer hilfreich? Gibt es evtl. Gründe warum Ingenieure mit Berufserfahrung zur Vorsicht geraten haben? Und was könne wir hier für unser eigenes Berufsleben lernen? Und wenn das alles nicht hilft gibt es ja immer noch Sarkasmus und den Galgenhumor der aus dem Podcast bekannt ist … Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/och-menno-how-not-to-build-a-submarine/

Reticulum: Unstoppable Networks for The People (38c3)

Sat, 28 Dec 2024 00:50:00 +0100

Reticulum is a cryptography-based networking stack for building local and wide-area networks with readily available hardware. Reticulum can continue to operate even in adverse conditions with very high latency and extremely low bandwidth. The vision of Reticulum is to allow anyone to operate their own sovereign communication networks, and to make it cheap and easy to cover vast areas with a myriad of independent, interconnectable and autonomous networks. On this talk we shall present Reticulum, a highly resilient cryptography-based networking stack, that you can use to get out of the shackles of surveillance corporate networks. Reticulum is a tool for building networks. Networks without kill-switches, surveillance, censorship and control. Networks that can freely interoperate, associate and disassociate with each other. Reticulum is Networks for Human Beings. It solves the same problem that any network stack does, namely to get data reliably from one point to another over a number of intermediaries. But it does so in a way that is very different from other networking technologies: - Reticulum does not use source addresses. No packets transmitted include information about the address, place, machine or person they originated from. - There is no central control over the address space in Reticulum. Anyone can allocate as many addresses as they need, when they need them. - Reticulum ensures end-to-end connectivity. Newly generated addresses become globally reachable in a matter of seconds to a few minutes. - Addresses are self-sovereign and portable. Once an address has been created, it can be moved physically to another place in the network, and continue to be reachable. - All communication is secured with strong, modern encryption by default. - All encryption keys are ephemeral, and communication offers forward secrecy by default. - It is not possible to establish unencrypted links in Reticulum networks. - It is not possible to send unencrypted packets to any destinations in the network. - Destinations receiving unencrypted packets will drop them as invalid. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/reticulum-unstoppable-networks-for-the-people/

Hardware hacking mit Bluetooth Low Energy (38c3)

Fri, 27 Dec 2024 22:05:00 +0100

How to remote-control (and build) the weirdest devices with Bluetooth Low Energy and no programming. Want to build a connected [soap bubble maker | water boiler | door lock | ...]? This talk briefly covers the basics of Bluetooth Low Energy, outlining the effort needed to implement such a technology with raw code. It then focuses on how to leverage said technology without getting your hands dirty by replacing programming with a bit of configuration, demonstrating the usage of the [BLEnky](https://structure.nullco.de/?node_id=66216cdb1a95fb4425f23212&token=3c55f7bb1de0e79c9020dbb09deac741df56fc5474825407abb94f96714ce134&focused_node=6622041d1a95fb4425f2323a) project for quick results. [Click here for many more examples](https://structure.nullco.de/?node_id=66216cdb1a95fb4425f23212&token=3c55f7bb1de0e79c9020dbb09deac741df56fc5474825407abb94f96714ce134&focused_node=6622041d1a95fb4425f2323a) Some notable projects will be described, as well as a live hack of some stupid gadget to make it "smart". Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/hardware-hacking-mit-bluetooth-low-energy/

What the PHUZZ?! (38c3)

Fri, 27 Dec 2024 16:00:00 +0100

PHUZZ is a framework for Coverage-Guided Fuzzing of PHP Web Applications Fuzz testing is an automated approach to vulnerability discovery. Coverage-guided fuzz testing has been extensively researched in binary applications and the domain of memory corruption vulnerabilities. However, many web vulnerability scanners still rely on black-box fuzzing (e.g., predefined sets of payloads or basic heuristics), which severely limits their vulnerability detection capabilities. In this talk, we present our academic fuzzing framework, "PHUZZ," and the challenges we faced in bringing coverage-guided fuzzing to PHP web applications. Our experiments show that PHUZZ outperforms related works and state-of-the-art vulnerability scanners in discovering seven different vulnerability classes. Additionally, we demonstrate how PHUZZ uncovered over 20 potential security issues and two 0-day vulnerabilities in a large-scale fuzzing campaign of the most popular WordPress plugins. The World Wide Web has become a fundamental part of modern society, providing crucial services such as social networks, online shopping, and other web applications. To this day, web vulnerabilities continue to be discovered, and data breaches are reported, even on high-profile websites. While several viable methods exist to detect web vulnerabilities, such as penetration tests, source code reviews, and bug bounty programs, these approaches are typically costly and time-intensive. Therefore, discovering web vulnerabilities in an automated and cost-effective fashion is desirable. One method to approach this problem is coverage-guided "fuzzing", which has been successfully used to identify memory corruption bugs in binary applications, but has seen limited application to web applications. Our academic research has resulted in an open-source prototype called "PHUZZ," which outperforms classic black-box vulnerability scanners in detecting web vulnerabilities with its fuzzing approach. This talk will first introduce the concept of coverage-guided fuzzing and the differences from black-box web fuzzing performed by vulnerability scanners. After diving into the challenges of applying coverage-guided fuzzing to web applications, we will introduce PHUZZ and explain how its approach allows the detection of a wide variety of web vulnerabilities, including SQLi, RCE, XSS, XXE, open redirection, insecure deserialization, and path traversal in PHP web applications. Our comparison of PHUZZ with state-of-the-art black-box vulnerability scanners, using a diverse set of artificial and real-world web applications containing known and unknown vulnerabilities, showed surprising results. Not only does PHUZZ outperform the other vulnerability scanners in the number of discovered vulnerabilities, but it also discovers over a dozen new potential vulnerabilities and two 0-days, which we will discuss in our talk. Finally, we will motivate the use of PHUZZ [1] and coverage-guided fuzzing methods to discover web vulnerabilities. This presentation is based on our academic publication "What All the PHUZZ Is About: A Coverage-guided Fuzzer for Finding Vulnerabilities in PHP Web Applications" [0]. [0] https://dl.acm.org/doi/10.1145/3634737.3661137 [1] https://github.com/gehaxelt/phuzz Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/what-the-phuzz-finding-0-days-in-web-applications-with-coverage-guided-fuzzing/

Liberating Wi-Fi on the ESP32 (38c3)

Fri, 27 Dec 2024 12:55:00 +0100

Reverse engineering the Wi-Fi peripheral of the ESP32 to build an open source Wi-Fi stack. During the 38c3, there are probably multiple thousands of ESP32s in the CCH, all of which run a closed source Wi-Fi stack. And while that stack works, it would be nicer to have an open source stack, which would grant us the ability to modify and audit the software, which carries potentially sensitive data. So we set to work, reverse engineering the proprietary stack and building a new open source one. We soon discovered just how versatile the ESP32 can be, both as a tool for research and IoT SoC, when its capabilities are fully unlocked. This includes using it as a pentesting tool, a B.A.T.M.A.N. mesh router or an AirDrop client. You'll learn something about Wi-Fi, the ESP32, reverse engineering in general and how to approach such a project. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/liberating-wi-fi-on-the-esp32/

Transparency? Not from the European Commission (38c3)

Fri, 27 Dec 2024 12:55:00 +0100

The European Commission is the executive branch of the European Union with the duty to uphold the law. The transparency of the Commission´s actions and decisions range from questionable to abysmal. Attempts by the public to access information are often thwarted. This talk will cover the Commission´s lack of transparency, challenges faced by the public in accessing information, Commission´s tactics and examples of the European Ombudsman´s interventions to improve the situation. Whether you are interested in ChatControl, AI or public procurement, this talk will have you covered. ~~Redacted~~ Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/transparency-not-from-the-european-commission/

38C3: Opening Ceremony (38c3)

Fri, 27 Dec 2024 10:30:00 +0100

Glad you could make it! Take a seat and buckle up for a ride through four days of chaotic adventures. This ceremony will prepare you for the 38C3 in all its glory, underground and above, hacks and trolls, art and radical ideas. Let's kick this thing off together! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/38c3-opening-ceremony/

BinDa, die flexible Anwesenheitserfassung für Schulen (38c3)

Fri, 27 Dec 2024 14:45:00 +0100

Im Rahmen eines vom Prototype Fund geförderten Projektes entstand zusammen mit 4 Schulen die Open Source Software BinBa. Diese Software wurde in enger Zusammenarbeit mit den Schulen konzipiert, umgesetzt und in Betrieb genommen. In dem Talk soll der Weg über die Finanzierung mit Hilfe des Prototyp Funds, die Softwareentwicklung zusammen mit den LehrerInnen und SchülerInnen also auch die Inbetriebnahme beleuchtet werden. Mit dem Talk soll Mut gemacht werden, mehr freie Software zu schaffen, die sich in die IT Landschaft von Schulen gut einfügt und die Bedürfnisse von Schulen in den Vordergrund stellt. Im Rahmen des Projektes wurde viel Wert darauf gelegt, eine klare Abgrenzung zu existierenden Lösungen an den Schulen im Blick zu behalten und Daten mittels Integration aus diesen Lösungen zu übernehmen. Das ganze unter einer freien Lizenz und freier Software. SchulIT ist oft geprägt von abgeschlossenen Systemen, die sich nur unzureichend in existerende Lösungen einbinden lassen. Dies endet dann all zu oft in Mehrarbeit, Dateninkonsistenzen und viel Frustration bei allen Beteiligten. Wir möchten mit dem Projekt einen kleinen Impuls liefern, die Art und Weise wie heute Software für Schulen entsteht zu überdenken und auch konkrete Vorschläge dafür liefern. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/binda-die-flexible-anwesenheitserfassung-fr-schulen/

read & delete (38c3)

Fri, 27 Dec 2024 14:45:00 +0100

Das Duo 'read & delete' präsentiert radikale philosophische Texte mit musikalischer Begleitung ... Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://events.ccc.de/congress/2024/hub/event/read-delete/

Team Updates @ Orga Meet Dec 2024 (WHY2025)

Sat, 14 Dec 2024 14:00:00 +0100

Team Leads give a short update about the current status of their planning. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

Science Magic...Magic Science (emf2024)

Sun, 02 Jun 2024 11:00:00 +0200

To spell bind the audience, gasp, wonder and laugh. Demonstrations, the eerie strange sound of the theremin and it's analogue, the musical saw. Resonance, levitating objects, and the occasional funny smell, now accompanied by Robots, Hugi, Tibbles and Ani. Arduino controlled automata, a cat, a bird and a skull. Even some “Real” Magic Tricks. Presented by an experienced science show presenter. The show of Science Magic, mystery, suspense and laughs. Suitable for all ages. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/177-science-magic-magic-science

From Tax Law to Tangible Dreams: An Accidental Maker's Journey (emf2024)

Sat, 01 Jun 2024 11:00:00 +0200

I was trained as a tax lawyer and data scientist as a profession but I always wanted to build. I attended the my first EMF and was hugely inspired by the participants and presenters I met. The following year, with the support of an EU innovation grant, I embarked on a 6-month product design course, culminating in an interactive children's book inspired by the Art of War. This unique book blends storytelling with 3D paper origami, touch sensors, cloud-based audio features, making ancient wisdom fun and engaging for young minds. In my talk, I'll share the challenges and triumphs of this unexpected adventure, from design principles to prototyping hurdles, offering valuable insights for aspiring makers and seasoned professionals alike. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/186-from-tax-law-to-tangible-dreams-an-accidental-makers-journey

Whispered Secrets: Building An Open-Source Tool To Live Transcribe & Summarize Conversations (emf2024)

Fri, 31 May 2024 13:50:00 +0200

Are you secretly a spy and/or passionate about open-source? Maybe you don't trust a cloud-hosted service with your highly classified information, or perhaps you like to build things for yourself. In this light-hearted talk, you will learn how to make a real-time on-device GenAI-powered application that can live transcribe and summarize conversations without internet access, using open-source components. Our journey begins with an introduction to open-source LLMs and the latest trends in running GenAI tools on your own hardware. We will build up our application step-by-step, first creating a live streaming voice-to-text transcription pipeline, then an LLM-based conversation summarization layer, presented within a Streamlit frontend, with conversation summaries sent to a lightweight Django API backend for storage. Here's why this matters: 1️⃣ Cloud-hosted SaaS tools cannot store highly sensitive information. 2️⃣ Good open-source alternatives exist for most GenAI tasks; the more people who use them, the more they will thrive. 3️⃣ Commercial tools will solve for common use cases, but developers can build personalised tools that are highly specialised for their own bespoke needs. This talk is tailored for Python enthusiasts and requires no ML expertise. By seeing a practical demo come together piece by piece, attendees will gain a deeper understanding of how to build their own complex Generative AI applications and be pushed to imagine what they could make for themselves using on-device computation in real-world scenarios. Expect plenty of Python code and some fun live demos, with GitHub code provided for attendees to try it at home. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/183-whispered-secrets

How to map caves (emf2024)

Fri, 31 May 2024 13:20:00 +0200

Caves present a challenging environment to survey and map. Conditions are often wet, muddy and involve confined spaces. This talk will look at how the technology we have developed has changed how we measure and create maps of cave systems. From traditional sighting compasses, tape measures and paper and pencil, to laser measures, bluetooth data transfer and PDAs or mobile phones as recording and drawing devices. Then once the data is collected underground, how open source software has been developed by cavers to process the data and draw maps which adjust to later changes in positions of parts of the cave when more data is collected or corrected. We'll look at loop closures, explorations of places no person has gone before, and different ways to present a 3 dimensional map of a 70km cave system. There will be plenty of photographs and video clips of cave exploration, along with live software demos and viewing of digital maps. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/256-how-to-map-caves

From Makerspace to Outer Space (emf2024)

Sun, 02 Jun 2024 11:00:00 +0200

Going for a job in the space industry may seem like a moonshot but it's actually much closer than most people think - and a makerspace is a great place to start from. I now work in the space industry but began my journey into engineering just six years ago by joining a makerspace. Using examples from my own experience - plus some history - I’ll examine how the skills you can pick up as a maker translate over to the space sector, how there are plenty of similarities between hobbyist making and professional space engineering, and how Makerspaces teach skills that are actually in great demand in professional engineering! Where there isn't a direct link from makerspaces into professional work, I'd like to go briefly into what skills you should look to pick up, and how to do it, if want you to go for a space job! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/129-from-makerspace-to-outer-space

Toys for Elephants (emf2024)

Sat, 01 Jun 2024 16:00:00 +0200

About the challenges and delights of designing playful interactive systems with elephants currently living in the UK, featuring elephants with brambles, supersize balls, giant sliders and didgeridoos, being curious, affectionate, playful, apprehensive, bored, wilful, impatient, destructive, muddy, moody and matriarchal. This is an ongoing project, focusing on offering choice and control in elephants’ environments to investigate preferences around audition and design aesthetics. Enrichment goals are to provide interesting cognitive and sensory experiences that encourage the expression of natural behaviours. We’ll consider the why, what and how associated with all of that animal-computer interaction stuff, and invite people to share their thoughts and suggestions - either remotely or subsequently over a cup of tea. Love and respect to the elephants in your life. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/216-toys-for-elephants

How volunteers built and are now operating Hydro Power generation on the Thames (emf2024)

Sat, 01 Jun 2024 11:40:00 +0200

This is the story of Reading Hydro, how a group of volunteers built and are now operating a hydro generation plant on the Thames in Reading. From raising the £1.2M to the parts build by volunteers, and how they are now operating the plant. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/242-how-volunteers-built

PowerPoint Karaoke (retro style) (emf2024)

Sat, 01 Jun 2024 19:30:00 +0200

GPT PowerPoint Karaoke in 2022 was a hit — but also GPT was toooooo good at generating the topics. Let’s go retro: HR training manuals, overhead transparencies, terrible diagrams from 1970s Open University TV programmes, and random photographs. Then we make people from the audience give talks on subjects they don’t know about with slides they’ve never seen. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/329-powerpoint-karaoke-retro-style

Activism in Games, plus a Hopepunk RPG (Role-Playing Game) (emf2024)

Sun, 02 Jun 2024 12:20:00 +0200

Resistance, systemic change, and our sustainable future can – and must – be playful! To quote the activism artist group Guerilla Girls: “If you can make someone who disagrees with you laugh, you're in their brain, and you can change minds.” The speaker will begin by sharing her journey in social impact games and its landscape, focusing on activism initiatives in games. She will draw examples primarily from the UN’s Playing for the Planet’s Green Game Jam which includes ustwo games’ Monument Valley 2's The Lost Forest. Surveys from the jam reveal how games can spur positive actions in real life. Then we take action -- through play. In this RPG-lite / communal storytelling experience curated by the speaker, a few volunteers will take on special roles to battle a dragon turned to the darkside. We’ll meet in our imaginary tavern and adventure together to save the world! Let’s play and change the world together. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/411-activism-in-games-plus-a-hopepunk-rpg-role-playing-game

The Journey is the Reward: Discovering the Fun in small Production Runs (emf2024)

Fri, 31 May 2024 20:30:00 +0200

bleeptrack is an award winning creative technologist from Germany, working in the fields of generative art and digital fabrication. Twice a year, she sends out unique generative art pieces to her patreons and supporters. These pieces vary drastically in their appearance: from classical paper art works to PCBs, stamps or shirts, bleeptrack is not shy in experimenting with all sorts of materials and fabrication techniques. But most importantly: each piece is unique and created from code. In her talk, bleeptrack will guide you through multiple production processes with it's challenges and explains why it's a lot of fun for her to set up little production pipelines over and over again. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/274-the-journey-is-the-reward

Live tour of the Boulby Underground Laboratory - a special science facility 1.1km underground! (emf2024)

Fri, 31 May 2024 15:30:00 +0200

A rare live two way link with the Boulby Underground Laboratory, where the Boulby team will give us a tour of the underground facilities that include a Mars Yard, where real (and LEGO) Mars rovers are tested, multiple Dark Matter research experiments, understanding the radioactivity of substances and more! Have any questions you want answered? Email them to will.furnell@stfc.ac.uk Boulby is one of just a select few facilities in the world suitable for hosting ultra-low background and deep underground science projects. It is a special place for science, 'a quiet place in the Universe', where studies can be carried out almost entirely free of interference from natural background radiation. It also provides access & support for studies of the geologically interesting deep underground environment. We are employees of the Science and Technology Facilities Council, the UKRI research council that runs the facility. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/282-live-tour-of-the-boulby-underground-laboratory

A Short History of Electric Shocks (emf2024)

Fri, 31 May 2024 16:50:00 +0200

This talk is about our delight, awe and fear of electricity and its effects on the human body. It charts our changing relationship with it from the 18th century to today. I particularly love the 18th century gentlemen scientists with their electrical entertainments - particularly because they appreciated the magic of electriocity and were so excited by it. Its sad that people today just take electricity for granted. Over the years I've accumulated a collection of contemporary images which I'll use to illustrate the talk. It may include a few demonstations as well. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/318-a-short-history-of-electric-shocks

Where is the Art? Pen plotters and the history of computer art (emf2024)

Sun, 02 Jun 2024 12:10:00 +0200

In October 1971, Frieder Nake published an article in Page, the Bulletin of the Computer Arts Society, entitled "There Should Be No Computer Art", making the point that there were more important things for humans to work on together in the late Twentieth Century, than whether or not a computer should be allowed to make "art". In this talk, we'll take a journey together to look at one aspect of computer history - creative technology and art - and the ways in which it has been misunderstood and feared at different points in our shared history and culture. Along the way, you'll also hear about how I accidentally became an artist, after being laid off from my dream job with big tech; the story of building my own pen plotters; and, how you can make your own army of art robots! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/302-where-is-the-art-pen-plotters

How Roadies became Network Engineers (emf2024)

Fri, 31 May 2024 15:50:00 +0200

Over the past five decades, the concert & live event industry has undergone a dramatic transformation into a major sector of the economy, with the production playing a pivotal role. Artists and their shows constantly seek the latest lighting & video technology, intricate stage setups, and top-notch audio quality to dazzle fans. Ticket sales are a major revenue stream for Artists, and a high-quality production show, sells tickets. This high level of production is only possible because of an industry full of talented roadies. Behind every arena or stadium show lies a hundreads of engineers tirelessly setting up, operating, and dismantling these elaborate stage setups, often in a new venue, on a daily basis. Long gone are the days of makeshift equipment cobbled together, roadies now navigate highly sophisticated AV control systems supported by intricate network infrastructures. A vast array of specialised hardware caters specifically to live events, engineered to be both flexible for on-the-fly adjustments and durable for daily setup and teardown. Reliability is paramount, with equipment expected to perform flawlessly show after show, never missing a beat. In this talk we are going to take an overview into the world of live event production, shedding light on how roadies consistently deliver stellar performances day in and day out. We'll explore the intricacies of AV networks, offering an insightful overview of the behind-the-scenes magic that brings unforgettable concerts to life. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/450-how-roadies-became-network-engineers

Lightning talks (Saturday) (emf2024)

Sat, 01 Jun 2024 13:30:00 +0200

Short 10 minute talks on any topic Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/548-lightning-talks-saturday

Lightning talks (Sunday) (emf2024)

Sun, 02 Jun 2024 12:40:00 +0200

Short 10 minute talks on any topic Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/549-lightning-talks-sunday

Spotting Seals with Sonar (and A.I.) (emf2024)

Fri, 31 May 2024 19:10:00 +0200

Tidal energy is one potential source of green energy but the impact of placing large turbines on the seabed is not fully understood. In particular, how are sea mammals coping with such changes in their environment? Do we need to put automatic mitigations in place – is it even possible? For over a year, we have been annotating more than 60 terabytes of data, finding these rare events of interest. We’ve looked at whether Artificial Intelligence, combined with sonar, can automatically spot and classify interesting underwater objects. We’ve tried several approaches, some more successful than others, but there are promising results with movement detection and segmentation. This talk covers our initial findings - where we went wrong and one promising approach that we are still actively researching. I'll be talking about U-Nets, convolutional neural networks, sonars and the unknown entities that may lurk in the depths! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/223-spotting-seals-with-sonar-and-a-i

How to move an industry through influence (emf2024)

Sat, 01 Jun 2024 15:10:00 +0200

Kubernetes has had a rapid ascent to default cloud infrastructure. However, this didn’t happen simply because Google open sourced it. This talk will share the messy human side of the community architecture and how that investment has paid dividends in bringing more under represented minorities into open source leadership. I’ll offer tips and tricks to intentionally manage humans when you have no authority. you can also expect some of the more complicated situations explosive growth combined with emergent organizing can lead to when governed by those who show up. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/377-how-to-move-an-industry-through-influence

Forgotten graphics technology: the wild workings of the direct-view storage tube CRT (emf2024)

Sat, 01 Jun 2024 16:30:00 +0200

It's 1975! You need a high-resolution computer display for fine drawings (e.g. CAD diagrams). Memory's EXPENSIVE, processors are slow: what to do? Here's an analog solution to a digital problem: an unusual cathode-ray tube that preserves whatever it draws with no flickering, fading, or any kind of refresh. A brilliant dot sears emerald trails into the screen, rendering intricate line-art without pixels. No need for video memory when the screen itself remembers! It's mesmerising to see this special tube in action; more satisfying still to know how it works. Discover a mechanism Tektronix refined over three decades, growing from palm-sized oscilloscope readouts to 25" computer-lab behemoths. A wreath of electron guns, kilovolt potentials, microscopic cobalt cones, and transparent anodes set the stage for a nonlinear dance of charges that yields visualisations with style --- and we'll unravel its mysteries with animated diagrams. En route we'll visit notable storage tube applications, from early computer memories to 1978's _Battlestar Galactica_. Of course we'll see a real Tektronix terminal at work, too! Computer memory is cheap now: by the mid 1980s, modern displays had advantages storage-tube systems couldn't overcome. Nobody's making them anymore, so check out this talk while old stock still works! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/43-forgotten-graphics-technology

How I found a Roman Villa (or temple) (emf2024)

Fri, 31 May 2024 18:20:00 +0200

The Roman archaeological record is far from complete; There are hundreds of high status Roman buildings yet to be located in Britain. I was volunteering in the ambulance service during COVID when I was given a piece of Roman pottery by a patient. With no training (I later embarked on an Archaeology degree ), I started to carefully investigate and record what is now established as an enigmatic high-status Roman building - complete with mosaic, painted wall plaster and hypocaust. My talk will demonstrate some free Web-based tools that you can use to investigate your local landscape (LiDAR, etc.). It will also show you non-invasive ways to survey and record archaeological sites. Finally, I'll have some Roman artefacts to handle. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/146-how-i-found-a-roman-villa-or-temple

The story of Älgen guitar: how to mix traditional hand-craft woodwork with cutting-edge digital fabrication (emf2024)

Sat, 01 Jun 2024 19:10:00 +0200

This talk will take a look at Älgen, a custom-built guitar that is a fusion of traditional hand-crafted woodwork and advanced 3D-printing and generative-design techniques. The guitar is built using no less than 4 different types of 3D-printing, including 3D-printed aluminium. At the same time it sticks with traditional hand built woodwork for the playing surface, matching material with function. This talk will focus on the design behind the guitar, looking at what you can do with generative design and 3D-printing, how to interface the old and new construction techniques (e.g., mating a walnut body with 3D-printed nylon sides), and how to decide what bits to do with which technique. I'll also show how I achieved this as an amateur maker: the aim is to show the audience that what seems like far-out construction is actually reachable by us mortals thanks to improvements in tooling and 3D-printing services. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/6-the-story-of-%C3%A4lgen-guitar

Astrophotography on a budget (emf2024)

Sat, 01 Jun 2024 19:50:00 +0200

I'll cover what you can do with a limited budget; lenses and cameras you already own (your phone for example); and what you might expect to see. I'm not a professional, or even a very talented amateur, but tenacity and the willing to sit out in the dark and get eaten by mosquitoes, growled at by foxes and frozen in the winter does sometimes pay off. I've been taking pictures of the sky and things in it on and off for over 30 years. I started with a cheap Tasco telescope from a catalog company and a 110 film camera glued to the eyepiece - it didn't work well (if at all), but it got me hooked. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/91-astrophotography-on-a-budget

Steaming into Sustainability (emf2024)

Sun, 02 Jun 2024 15:50:00 +0200

How do you get several three storey Cornish beam engines, a collection of Grade I listed buildings and a whole network of steam infrastructure on the path towards net zero? This talk is the experience of a volunteer on the practical challenges met whilst helping the London Museum of Water and Steam with several major projects. Expect tales of reverse engineering boiler control system ladder logic, interfacing raspberryPis to 100psi steam lines and working out the water/gas/steam usage to run 200-year old steam water pumps. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/112-steaming-into-sustainability

How to give your electronic projects a professional looking finish (emf2024)

Sat, 01 Jun 2024 20:30:00 +0200

This talk is a ‘how-to’ or recipe to make your electronic projects look professionally finished. It will cover simple graphic design and small-scale metalwork with hand tools. The emphasis is on the techniques useful for personal making and hobby use. As an example we'll look at how to make a professional-looking bench power supply for general test and experimental use. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/99-how-to-give-your-electronic-projects-a-professional-looking

Up - A Scientist's Guide to the Magic Above Us (emf2024)

Sat, 01 Jun 2024 20:30:00 +0200

Find joys hidden in plain sight - explore a slice taken from the surface of the Earth up into distant space and discover what we can see. From the glow of a glow-worm to the fuzzy smudge of a distant galaxy, learn where to look and also understand the science behind the phenomena. By the end of this talk you'll know where to look in the air, sky and in space to see murmurations, rainbows and shooting stars and why they cause us to stand and stare. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/107-up-a-scientists-guide-to-the-magic-above-us

A Brief History of Calendar Systems and Movable Feasts (emf2024)

Sat, 01 Jun 2024 17:50:00 +0200

Join us for a calendrical safari of the weird and wonderful history of Calendar Systems and Movable Feasts. Marvel, as we compute the date of Pancake Day. Gasp, as we gaze on the metric madness of the French Republican calendar. Find out why on earth, the UK tax year starts on April 6th?! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/84-a-brief-history-of-calendar-systems-and-movable-feasts

Security Theatre (emf2024)

Sat, 01 Jun 2024 17:10:00 +0200

We will take a peek behind the scenes at the technology used in performing arts venues in order to asses the cyber security implications and how we can address them. A modern performing arts space is no longer several independent systems providing show elements such as light and sound, but rather an IP network fabric delivering the desired elements flexibly around the venue and sometimes beyond. As a community we have gathered a good understanding of designing reasonably secure networks and protocols I would like to apply this knowledge to the unique demands of a theatre. If you often find yourself distracted by the coordination of the light fixtures rather than the performance this talk is for you. Or may you just like designing networks and learning about interesting protocols. I previously covered Audio over IP in a talk at MCH2022: https://media.ccc.de/v/mch2022-113-audio-networks-and-their-security-implications In the interest of transparency I am partially employed (and was previously fully employed) by Holoplot a professional audio company that principally sells network based loud speakers. I'm also a freelance security consultant. However, I'm doing this talk purely in a personal capacity and all thoughts an opinions expressed are my own not those of any employers, clients, or customers. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/153-security-theatre

Connecting Arduinos to websites: A sequence of chaotic live demos (emf2024)

Sat, 01 Jun 2024 11:40:00 +0200

Controlling websites with an Arduino is like magic. Suddenly little bits of hardware can control all kinds of games and interfaces on screens. And building a UI for your electronics becomes trivial too. This is a talk for anyone who’s ever tinkered with hardware or web design, and wants to join the physical to the digital. During this talk I will explain the basic techniques of keyboard emulation and using the Javascript Web Serial and Web Bluetooth APIs. To make it fun, and introduce some peril, I will demo all of the techniques live: controlling the Google Chrome Dino game by jumping up and down on stage, making a musical instrument from stretchy rubber and allowing audience members to connect to a set of handbells from their phones. Along the way will be plenty of tips on what to buy and what to avoid, I’ll demystify some of the complexity around Bluetooth and USB, and share several ideas for how to use this to cause mischief amongst friends, colleagues and enemies. I have done this before, but only once. Fingers crossed. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/173-connecting-arduinos-to-websites

Practicalities of being a walking lightshow (emf2024)

Sun, 02 Jun 2024 11:40:00 +0200

Festooning your clothes or costume with lots of glowy lights is fun. Making the glowy lights survive hours or days on end of dancing in sweaty raves or muddy festivals is harder. In this talk I discuss several ways of being a walking lightshow, the unfortunate lessons I learned over years of trying them out in the real world, and some attempts at avoiding these failures in future. [Specifically I will cover: chemiluminescence, electroluminescence, UV reactive materials, LEDs, things to consider when making light-up clothing, surprise 100v shocks and how to avoid them, and how to cheat at syncing to the music.] Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/416-practicalities-of-being-a-walking-lightshow

Endocrine Biohacking - Friends of Blåhaj and beyond (emf2024)

Fri, 31 May 2024 14:10:00 +0200

Biohacking for girls, gays, theys, and undisclosed entitites. Why biohacking is good, cool, and a human right A brief history of biohacking and why endocrine biohacking is so cool how to manage your own endocrine care how to access managed endocrine care safe sourcing of international pharmaceuticals alternative routes of care (and modelling risk) Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/17-endocrine-biohacking-friends-of-bl%C3%A5haj-and-beyond

How to go solar off grid in the UK. (emf2024)

Fri, 31 May 2024 12:00:00 +0200

How to specify and deploy an off-grid system in the UK. Covers power requirement calculations and performance tradeoffs in the real world. How to handle low production near winter solstice. Touches on battery selection, care and feeding and dimensioning for a given power demand. How Inverters were selected. Reliability issues. Aimed at people wanting to deploy their own systems. I've been running off grid for the last 5 years in the West Midlands, and will share the what I have learnt during that time. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/188-how-to-go-solar-off-grid-in-the-uk

Is everything difficult, or is it just me? (emf2024)

Fri, 31 May 2024 19:40:00 +0200

It isn't just you. There are so many pressures on us, not only from our jobs and industry, but from the state of society, politics and the economy as a whole. Join me on a joyful journey through the alphabet of overwhelm, we’ll cover Anxiety, Burnout, Capitalism, Depression, Emotional Labour and many other fun factors. We’ll talk through how to recognise symptoms in yourself and your friends. Lets learn how to survive, and hopefully thrive, in this ABSea of sh*t. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/321-is-everything-difficult-or-is-it-just-me

The Best Word In Morse Code (emf2024)

Fri, 31 May 2024 16:20:00 +0200

After accidentally becoming fluent in Morse Code I have waded through a sea of dots and dashes to find THE best word in Morse Code (ok, maybe its just my personal favourite - but I have reasons to back it up!) Of course, as a mathematician, I couldn't leave it there and have also determined what I believe to be the best number in Morse Code too. From steganography to lexical anomalies we explore the delights of this not exactly binary alphabet. You may not have time to learn all of Morse Code, so come and learn the singular most awesome word in Morse instead! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/294-the-best-word-in-morse-code

Bringing Any Super 8 Camera Into The Digital Age (emf2024)

Sun, 02 Jun 2024 12:50:00 +0200

This talk will describe the development process for a digital cartridge to fit any Super 8 home movie camera without any modifications required. There are a huge number of unused 8mm home movie cameras that have been languishing unloved for the last four decades since their owners were seduced by videotape. Many of them are built to a rather high quality, and best of all, they can still be found for not a lot of money. You can still buy the film, and it's a lot of fun shooting a real movie, but it's not cheap. Wouldn't it be great if you could drop in a digital cartridge instead for modern day digital video with a retro feel! This project started in early 2023, and this will be its first outing in front of a live audience. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/431-bringing-any-super-8-camera-into-the-digital-age

Rocket Science For Teenagers (emf2024)

Sat, 01 Jun 2024 18:30:00 +0200

Model rocketry is great fun and an excellent way to get young people interested in science and engineering. In 2022 and 2023 I mentored a team of 3 teenagers to enter UKROC, the UK youth rocketry challenge. The team had to design and build a rocket to take a raw egg to 250m and return it to the ground in 45 seconds, without breaking the egg. The team went in 2 years from not knowing much to (spoiler alert) winning UKROC and then the International championship at the Paris Airshow. I will talk about the basics of model rocketry (physics, engineering, legal, financial, safety etc), what is involved in entering UKROC, our experiences and how you can get involved in the next UKROC competition. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/18-rocket-science-for-teenagers

What the Frack? The inside view of unconventional oil production. (emf2024)

Fri, 31 May 2024 19:50:00 +0200

Few things are as polarizing today as the production of oil, and unconventional production (including 'fracking') is even more controversial. Whether you're for it or (more likely) against it, it's well worth knowing what is actually involved in making it happen and where the real risks are. The presenter recently left a long career in the US oil industry and will give you a view into this world without any spin or agenda and instead give you the opportunity to deepen your understanding of what it's really all about. What is 'unconventional oil'? What does the process to produce it look like on the ground? What equipment is used? What are the real environmental impacts (beyond climate change)? Whether you want to geek out about heavy equipment or to become a more-educated protester, you'll learn something new. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/59-what-the-frack

Beyond the seventh mountain, beyond the seventh river - Openstreetmap as a base map in geographical research (sotm2024)

Sun, 08 Sep 2024 14:30:00 +0200

Openstreet map has for a long time been treated as a road map, enabling you to find a route between two points, as well as an information map, gathering various points of interests. Together with students of the UKEN University from Krakow, we decided to look at the use of OSM as a environmental map also showing the transformation of space by humans. The speech is the result of exercises conducted by employees of the Geoinformation Research Team and students of the UKEN University in Krakow, Poland. The basic assumption we made is that OpenStreetMap can be sufficient as a data provider for various geographical works - as a base map for field exercises, as an almost complete environmental database for some compact area (such as an island or a national park). After reviewing the list of tags describing the geographic environment in OSM, we knew this would be possible. We have selected several research polygons, which we call cartographic polygons. These include the Peljesac Peninsula in Croatia, the Aegean Coast near Thessaloniki in Greece, the area around Lake Inari, the Lemenjoki National Park in Finland, and the wild Bieszczady Mountains in Poland. We selected the training fields so that they were both places with nature close to natural conditions and places significantly transformed by human activity. Usually, these were also important places for some key reasons - for example, on the Peljesac Peninsula, a bridge was built to facilitate communication between the two parts of Dalmatia. Not all places were visited, but we have collected cartographic material for all of them. Before each trip, we trained a group of participants on how to use and supplement OSM. Each participant set up their own user account. Field work consisted of completing the content of OpenstreetMap as accurately as possible - groups of two people were sent into the field and, using the OSMAND or EveryDoor applications, they inserted all interesting objects on the map. The rest is small-scale work - tedious verification and editing of the map in the JOSM editor. Each stage of work was also preceded by a thorough analysis of official OSM tags - which constitute information about all elements of the natural environment. It was found that the best represented features were those related to relief, land cover and hydrology. In particular, the content regarding land cover (down to a single tree and bush), and the richness of descriptions of relief forms (OSM WIKI, Glossary of landforms) allow the creation of appropriate thematic maps - landcover maps and geomorphological maps. The principle adopted in JOSM is that we complete the map to the highest degree of accuracy possible using available data and processing capacity. For example, we supplement the terrain coverage for Poland from the available official orthophotomap from the national geoportal with a terrain resolution of 5 cm. The distinction between land cover types is made by students of higher years of geography, so there should not be too many interpretation errors. What information is completed on the map? As for the relief of the land - valleys and valley types, rock walls, erosion undercuts, landslides and landslide niches. When it comes to hydrological elements, using scientific publications, we entered the exact location of the sources (along with a description of water chemistry and name, if this data was available). An additional module of our work is urban micromapping - We check how accurately we can supplement field data so that they can serve two purposes - for students and spatial planning specialists in the analysis and inventory of urban space, and for people with disabilities as a base for accessibility maps used in applications, e.g. blind . For this purpose, we carried out tests of terrain mapping using a geodetic GPS receiver (STONEX 900A). We chose the area on the campus of our university due to the presence of the remains of an old water bed supplying water to mills and a city moat - a lot of unevenness, steps, suddenly ending sidewalks, etc. Additionally, we have also started work on old housing estates in Krakow's Nowa Huta district - inhabited mainly by older people, and therefore often beneficiaries of all programs regarding the availability of public facilities and apartments. Approximately one thousand points were measured in the above locations with an accuracy of 2 mm - 1 cm. In further stages, they will serve as the basis for the point cloud made during unmanned aerial vehicle raids. A number of additional works were also carried out as part of the project, e.g. wild waste dumps in the Ojców National Park were mapped and marked (we will most likely use the tag amenity=waste_dump_site) All work on the project resulted not only in a significant improvement in the quality of the OSM map, but also in the training of a large team who, in their free time, complete OSM data in their area. Both the intimate and field parts of the work are still in progress. We will complete the work by the time of the presentation in Nairobi. This is our beginning in the work of OpenstreetMap, but we would like to use our previous experience in completing OSM data in various places around the world in many task programs, e.g. for UN Mappers and HOT OSM. Best regards form Poland. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/CDT3PZ/

The role of crowd-mapping in post-emergency humanitarian operations (sotm2024)

Sun, 08 Sep 2024 13:40:00 +0200

Following a theoretical and methodological analysis of the scientific literature on PGIS, this study aims to explore the unexplored potential of the connections between PGIS (using OSM) and digital humanitarianism, as well as the empirical references from a case study in Morocco. INTRODUCTION / BACKGROUND Considering that NGOs and International Organizations have been applying PRA methodologies to community mapping for over two decades without any scientific recognition, we could subscribe to the general opinion that among practitioners, researchers, and activists, the practice of Web-GIS with OSM is more advanced than the underlying theory of its applications [12]. The so-called "digital humanitarianism" can support climate justice by providing tools and platforms for data collection, analysis, and dissemination that empower vulnerable communities to advocate for their rights, mobilize for climate action and advance equitable solutions. Overall, digital humanitarianism can amplify the voices of marginalized communities, enhance transparency and accountability, and promote greater inclusivity in the fight for climate justice. Digital humanitarianism is located at the intersection of new socio-technical practices, a new epistemology, and new institutional relationships [5; 8], as demonstrated by communities like Ushahidi, the Humanitarian OpenStreetMapTeam (HOTOSM), and the Missing Maps. PURPOSE OF THE STUDY The study aims to gain a better understanding of the nature of the link between crowd-mapping and participatory planning by analysing the distinctive features of the application case, the criticalities and problems that emerged, and the possible strategies to be activated to tackle them especially in contexts where people living in rural and remote areas and in peri-urban areas face problems such as inadequate access to essential resources, such as food and water security, and are more exposed to low quality basic services (health and education) and the effects of natural disasters. This fosters inequality, can limit capabilities and promote environmental injustice. METHODOLOGY AND FINDINGS The fieldwork is part of an emergency intervention led by a consortium project combining five NGOs financed by Caritas, with an overall objective of assisting the population impacted by the earthquake that struck in Morocco on September 8 and 9, 2023. As part of this intervention, which calls for various support measures (distribution of family kits, distribution of housing tents and school modules, social-health interventions and psychological support), a humanitarian mapping action is currently being carried out with the help of a group of women belonging to a popular radio station attentive to 'open data'. The project starts from an integrated strategy that brings together humanitarian mapping and future labs, presenting a dynamic approach to addressing social challenges in post-emergency contexts and crisis areas. Case study: the contribution to crowd - mapping experimentation (training, definition of a working group, creation of a virtual mapping environment with the use of OSM and Osmand) is investigated, an ongoing process started by OfficianSocialeCOPE (the Research Centre of COPE ONG) and the University of Catania and Palermo (Italy) within the context of a post-emergence project (which will end in July 2024l supporting the victims of the Earthquake of September 2023 in Morocco with an approach to address the perception of individual and collective vulnerability in a rural post-emergency context. The expected maps are also employed in contrasting contexts, such as in counter-mapping initiatives where indigenous communities (in the case of High Atlas and Sahara villages) seek to regain a certain level of control over ancestral lands and city neighborhoods, resources and services by utilizing participatory mapping methodologies. This makes people aware of their power of pressing issues on local government policies. Localisation of the territorial landmarks reference points takes into account the WEF (Water, Energy, Food) nexus's provided topics, which included access to fresh food, electricity, and water, as well as other issues that the participants perceive as significant to the neighborhood, (watercourses forests, cultivated areas, potholes, etc. in rural areas, but also small income generating activities potentials). More specifically, residents, through PGIS mapping tools for on field visit, report issues such as the level of connection of remote areas with other villages and secondary roads, natural and artificial water sources, soil dryness and exposition to drought in High Atlas, as well as associative realities such as cooperatives or Community Based (CSOs) already established or expressing the will to formalise to create income and revenues. It is critical to consolidate/train the social labs' working groups, which will be made up of territorial representatives and stakeholders from various sectors, such as volunteers, community leaders, and members of local organisations (e.g., muqaddim [neighbourhood or village community leader], kaid [mayor], school teachers, association representatives, headmasters, etc.). Furthermore, the working groups were separated by gender in order to better convey gender-specific demands and requirements. Through the use of GIS tools (QGIS, Google Earth Pro) and a Web map server (OpenStreetMap), and with the classification of the map contributors' working group, future labs are implemented to share experiences and knowledge on mapping activities and their application in the humanitarian context of reference (PHASE 1 and 2), aiming to plan disaster risk reduction and response and propose development processes strategies (PHASE 2 and 3). The final product to stakeholders includes developing a project outcome using a story-map tool (PHASE 3). FINAL DISCUSSION For the first time, in very remote areas of Morocco, the areas and names of settlements, agricultural and productive land and, above all, areas at low and high risk of natural disasters will be mapped with the help of local knowledge. For the purposes of 'spatial learning, discussion, information exchange, analysis, decision-making and advocacy' [11], many approaches and tools will be used 'to represent people's spatial knowledge'. The primary objective will be to learn how community members define vulnerability and to classify various community stressors. The end result that will be presented to stakeholders will be a combination of satellite imagery, GPS survey locations, participatory mapping and spatial analysis of the geographic information system (GIS), combined with information obtained through interviews and field surveys. The development, georeferencing and visualisation of Indigenous Geographic Knowledge (IGK) will help communities to engage in peer-to-peer conversations and ensure that specific issues and concerns are taken into account by the authorities. Only by considering the participatory process itself could the promoted activity become an example of good governance, i.e. transparent and consensus-based decision-making processes for land management. This is why the different geographical viewpoints of women are of particular interest. The article intends to highlight how PGIS can facilitate the creation and exchange of indigenous ecological and spatial knowledge and improve individual social learning regarding the environment and response to natural disasters and promote development. The fact that the case study was developed in a vulnerable context of North Africa is meant to emphasise that in order to help reduce the digital divide, the lack of attention to research and investigation in the field of digital mapping in Africa compared to the significant progress made in industrialised countries must be taken into consideration. Furthermore, it is shown how important it is to evaluate experiences (both failures and successes) and to develop instructions and strategies to promote best practices in this area, ensuring that the reasoned adoption of the PGIS meets the expectations of different groups in developing countries and does not fall into the dynamics whereby the participatory method may underlie systematic inequalities through unequal and superficial use of PGIS applications, which thus risk being used to legitimise decisions already made by other parties. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/TXYEFS/

Closing Session (sotm2024)

Sun, 08 Sep 2024 15:30:00 +0200

We say goodby to this year's State of the Map conference and to Nairobi. You will see some impressions of the conference and we say thank you to all volunteers and to the local team of Nairobi. We hope that we can already announce the venue of State of the Map 2025. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/8ZVKZV/

Pre-recorded Lightning Talks (sotm2024)

Sun, 08 Sep 2024 16:00:00 +0200

Pre-recorded lightning talks are short presentations (maximum 5 minutes) about a topic related to OpenStreetMap. ## Mapping the Infrastructure for Disaster Risk Reduction with OpenStreetMap, uMap and Wordpress _by Raquel Dezidério Souto_ This web map is part of a research project that aims to provide a platform for mapping official and collaborative data on risk reduction and disasters that have occurred in the state of Rio de Janeiro (Brazil), with the municipality of Maricá as the project's pilot area of interest (AOI). Background music: "Science Documentary" by Lexin_Music, https://pixabay.com/music/build-up-scenes-science-documentary-169621/, [Pixabay Content License](https://pixabay.com/service/license-summary/) Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/TY73TC/

What happens when VGI is threatened? A systems perspective analysis of the events behind the introduction of rate limiting in OpenStreetMap (sotm2024)

Sun, 08 Sep 2024 14:00:00 +0200

This talk presents a systems perspective analysis of events in October-November 2023 which started with large-scale vandalism of OpenStreetMap data in Israel and ended with the introduction of rate limiting. Noting how the project reacted in face of this unique situation and the undermining of its basic assumptions facilitating the project helps uncover resilience- and vulnerability-inducing mechanisms within it, to characterize the range of possible external influences on the project, and assess their possible outcomes. OpenStreetMap (OSM) is generally considered to be a ‘do-ocracy’ [1], a governing system in which power stems from doing and those who do more (contribute more) have greater ability to influence the project. This does not mean that hierarchy within OSM is entirely bottom-up, as Fast & Rimmer’s systems perspective model of a Volunteered Geographic Information project suggests [2] - it is made of interconnected components (the technical infrastructure, project, and contributors) each providing a different level of direct access to the core of the project. Entities may move between these components, but a certain level of separation still exists, enforced informally or formally by gatekeeping procedures or individual acts. The fuzziness of borders and the interdependence of components open for multiple types of interactions that may translate to major impacts on the nature of the project. In this talk we use communication records from various media (the OSM_Israel Telegram group [3], community forum discussions [4,5], and GitHub issues [6,7]) to: i) to analyse a specific set of events - the politically-motivated edits in Israel and the subsequent introduction of rate limiting in OSM [8] - from a systems perspective; and ii) conceptually explore power dynamics and impacts within collaborative geodata projects and specifically OSM along with their implications for the project’s vulnerability and resilience. The chain of events started on 20 October 2023, when two members of the OSM_Israel Telegram group [3] reported receiving offensive comments on their recent edits. One of them noted that the commenting user was performing edits to the OSM data in Israel that were clearly acts of vandalism, i.e. deleting and distorting data. It was only the day after that the members of the Telegram group realised that these acts were part of a greater effort in which 3 newly registered OSM users were performing large-scale deletions and distortions of data in Israel. The timing of these edits, taking place while the Israel Defense Forces were launching airstrikes over Gaza strip in retaliation of the 7 October attack by Hamas, and their related changeset comments, e.g. “There is no country Israel & Free Palestine”, clearly attested that they were politically-motivated (For a representative example, see [9]). The events were quickly reported to the OSM Foundation’s (OSMF) Data Working Group (DWG), the voluntary body responsible for handling data issues such as copyright infringement and vandalism. The DWG issued bans to involved users, yet these were replaced in the next few days by more new users together making tens of thousands of similar edits. Meanwhile, one user, responding to these acts, further vandaled the map by ‘annexing’ part of the Gaza strip [10]. In the immediate aftermath of these events, most of the OSM data for Tel Aviv was deleted from the map and data all across Israel and the eastern Mediterranean basin, as far as Crete, Cyprus, and Turkey, suffered from distortions (the scripts the vandal accounts were using automatically distorted random objects crossing the area of Israel, including objects such as coastlines that extend beyond these boundaries). Yet the impacts of the events did not end with the DWG reverting the vandal edits. These events had a direct connection with the introduction of a daily rate limit (set individually based on the seniority of the editing user and the number of edited entities, among other things [8]). The idea of such a limit had already existed for a while and was discussed within dedicated GitHub issues [6,7], yet it was only after members of the Israeli OSM community had commented within these issues and in a related community forum discussion [5] that the notion had been implemented. Interestingly, a DWG member which was handling the bans and reverts was the one who referenced the Israeli community to the forum discussion - in response to a question raised in the Israeli Telegram about whether any measures have been implemented to ensure this would not happen again, this user had suggested that they will ask that question in the relevant forum discussion. As extreme as this vandalism case was in comparison to other acts of vandalism or politically-motivated edits, its outcome tells a story regarding the fluidity of power dynamics within the project and accordingly - its vulnerability- and resilience-inducing mechanisms. The enforcement of rate limiting required a temporary coalition between individuals within the contributors and project components, where DWG members used the ‘traditional’ crossing path - from project to contributors, i.e. the DWG engaging with contributions to the point of joining the Telegram group - to mobilise support for their cause by encouraging contributors to engage with the management of the project, i.e. joining the GitHub discussion on rate limiting. This collaboration was in turn enabled by a joint sense of urgency stemming from the vandals violating the basic assumptions required for OSM to function - shared goals, adherence to community procedures, and mapping limited to verifiable objects. On the one hand, the temporary coalition formed between the local OSM community and the DWG members shows that the fuzzy nature of component boundaries allows for flexibility that enhances resilience in the sense of the ability to reorganise and adapt when conditions change. However, it shows that even temporary coalitions (it is useful to remember the Israeli community’s dissatisfaction with how the DWG handled the Jerusalem node issue [11]) of a handful of people reacting to a local event can lead to a global change occurring without a general consensus within the community (some dissatisfaction with the decision was already expressed [12,13]). If this becomes a common practice, it may undermine the stability of community procedures within OSM, especially if disagreements emerge due to clashing interests. Beyond this specific insight, this case allows mapping out different axes of power dynamics within OSM - the stakeholders (i.e. the system components), the crossing paths (e.g. project-to-contributors, contributors-to-infrastructure), the sources of capital (e.g. the masses, the project, access to resources and/or infrastructure), the nature of crossing (e.g. invitation, infiltration, takeover, acquisition), and motivations (e.g. individual/communal interests, safeguarding the project, values). Characterising other cases of external or semi-external engagement with OSM in light of these, e.g. corporate engagement with OSM, the collaboration of Meta and HOT (The Humanitarian OSM Team), and the development of Rapid, can produce insights on their deeper implications for the project and help imagine future paths of influence and their impacts. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/FSYR9S/

Analysis of renewable energy infrastructure representations in OpenStreetMap (sotm2024)

Sun, 08 Sep 2024 10:40:00 +0200

The research evaluates the accuracy and completeness of wind and solar energy infrastructure data in OpenStreetMap (OSM) for Belgium and Ireland, identifying common mapping errors and proposing techniques to enrich available data. By combining OSM data with CORINE Land Cover inventory, we study land use patterns around renewable energy infrastructures, facilitating environmental planning. We are witnessing the rise of a collective awareness of the importance of building a more environmentally sustainable future. Within this context, the relevance of renewable energy sources is widely acknowledged; however, to support the energy transition, the availability of reliable data about energy supply, infrastructures, and their environmental impacts is essential [1]. OpenStreetMap (OSM) emerges as a valuable data source to meet these requirements. In this work, we describe our research on evaluating the OSM database in a study of wind and solar energy infrastructures. As a case-study, we analyse two countries: Belgium and Ireland. Data within OSM is well-known to have a diverse level of completeness and granularity [2]. Considering OSM's vibrant mapping communities coupled with both (a) the environmental visibility of wind and solar energy infrastructures and (b) their relatively limited number compared to other built infrastructures, it is reasonable to assume that the majority of these installations are well mapped within OSM. OSM energy-related objects are mapped under the _“power”_ tag, with available key-value combinations to identify wind and solar sources. Wind turbines are commonly tagged as _“power=generator”_ and _“generator:source=wind”_, while solar farms are identified as _“power=plant”_ and _“plant:source=solar”_. By combining OSM data with the CORINE Land Cover (CLC) inventory we considers two research questions. Firstly, we seek to identify common mapping errors and tagging issues associated with wind and solar energy infrastructure representation within OSM. This involves examining geometries and tagging mistakes while evaluating the accuracy and completeness of these infrastructures. Secondly, we perform a geographical analysis to consider the distribution of infrastructures across various CLC land covers. We seek to detect patterns around land cover and renewable energy infrastructure. Our methodology is summarised as follows: OSM data, in PBF format, is downloaded from _GeoFabrik_. Initially here we just consider Ireland and Belgium due to local knowledge and their manageable data sizes. Analysis is performed using _Python_ and the _osmium_ library. Pending acceptance, source code will be made openly available on GitHub in documented Jupyter notebooks. We answer our research questions using three key steps: 1. Assess available wind and solar infrastructures in OSM for the correctness of OSM datatypes and potential geometric errors. 2. Differentiate between individual installations and larger "farms", to evaluate the quality and completeness of OSM data. 3. Investigate commonalities around land use surrounding renewable energy infrastructures using CLC. Initially, we extract all OSM objects with _“power”_ tag =_“plant”_ or _“generator”_, yielding a full listing of all available power sources. We filter solar and wind sources based on the _"generator:source"_ or _"plant:source"_ tags. The accuracy of the OSM datatypes and geometries is checked before moving to "farms" identification. To accurately differentiate single installations from farms, we analyze solar and wind sources separately due to their different geometric nature. We employ a point-in-polygon search with spatial indexes to assign nodes – of either wind or solar type – to intersecting areas of the same energy type. This process raises some geometric questions concerning the meaning of areas without nodes and nodes not linked to any area. We observed several issues: (a) not mapping individual panels within solar farms or defining turbines as circular areas, (b) nodes not associated with any area, (c) unlinked solar nodes representing private installations, (d) the absence of OSM areas or relations for turbines frequently indicated incomplete mapping. This final issue is significant: 91.4% of wind nodes in Belgium and around 87.4% in Ireland are not located within any mapped area. Considering the limited number of turbines included in OSM areas or relations, we employed spatial clustering on all turbines to identify wind farms and validate our findings by automatically comparing clusters with existing OSM areas and relations. DBSCAN (Density-based spatial clustering of applications with noise) is particularly suited for our purpose. One of the most important DBSCAN parameters is the maximum distance between two samples belonging to the same cluster which we set as 5 times the rotor diameter [3]. We assume a diameter value of 130 meters for all turbines [3] considering the frequent absence of the _"rotor:diameter"_ tag. Comparing clustering results with OSM data allows us to evaluate quality and completeness of areas and relations, to identify new farms, and to extend existing linkages to unassigned infrastructures. Due to their geometric nature, the process described cannot be applied to solar infrastructures. Given that all remaining solar data are areas, our methodology proposes two different processes, based on the power-tag value (“generator” or “plant”). Although OSM guidelines suggest that solar farms should be tagged as “plant”, deviations from this standard are possible. To avoid discarding valid data, we conducted an area-in-area search on solar generators. This approach assumes that if a solar generator area encompasses multiple solar generators, it may denote a farm. This process enables us to identify a few tagging mistakes where the _"generator"_ value was used instead of _"plant"_. While it may be possible to apply the same approach on solar _"plant"_, this would cause a significant data loss, thus we opt for keeping all plant-objects. Ultimately, this decision is strongly dependent on the data accuracy requirements. The refined datasets provide a comprehensive overview of wind and solar energy sources, facilitating further analyses into renewable energy. Our second research question considerations the analysis of land uses around energy infrastructure by integrating CLC. We use an arbitrary buffer of 1000m for this analysis. In Belgium, around 18% of wind farms are located within 1000 meters from heterogeneous agricultural areas, while 17% and 15% are near urban fabric and arable land respectively. In Ireland, most wind farms are near pastures (~24%), scrub (~18%) and forests (~18%). We notice how agricultural areas, in the form of heterogeneous agricultural areas, pastures, or arable land seem to prevail in both contexts. For wind energy, artificial surfaces appear relevant only in Belgium; however, both countries have solar farms near urban fabrics LC. Within the buffer from solar infrastructures this LC appears ~19% of the time in Belgium and ~12% in Ireland. In Belgium, heterogeneous agricultural areas (~19%) and forests (~12%) are also significant, while pastures predominate in Ireland (~31%), followed by arable land (~16%). However, 56% of the Irish territory is classified as pasture LC. Our work seeks to assess and improve completeness and accuracy of renewable energy infrastructure data in OSM. Our analysis distinguishes between individual installations and larger farms. Our strategy based on density-based clustering for identifying wind farms faciliates evaluation of the OSM data. We developed methods to associate solar panels to farms thereby mitigating tagging errors. Overall, we highlight challenges arising from inconsistent mapping practices and deviation from OSM mapping guidelines. The refined datasets offer comprehensive insights into wind and solar energy sources allowing additional analyses and assessment of their integration into the surrounding landscape. The next steps for this work include validating our approach for a larger set of countries and regions while also integrating further internal and external completeness and quality evaluations. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/MKPJFW/

Investigating Corporate Editors in OpenStreetMap (sotm2024)

Sun, 08 Sep 2024 11:30:00 +0200

A discussion of the results of a survey distributed to corporate editors working in OSM. In recent years, OpenStreetMap (OSM) has evolved from being a Volunteered Geographic Information Project to one of the most successful Geospatial Crowdsourcing Platforms in the world. Volunteers, governments, and corporations all make contributions to its global map. Corporate editors (CEs) are the latest entrant in the OSM ecosystem, and their prolific contributions have drawn significant interest from the OSM community as well as the scientific community. In 2018, the OpenStreetMap Foundation introduced a set of Organized Editing Guidelines in response to community outcry related to the edits made by these CEs and a perceived lack of dialogue and transparency between corporations and the larger community. Previous research has focused on the changing landscape of OSM users with the growth of corporate editing, cataloguing the global footprint of corporate editing and the map features that CEs are editing. Others have studied the impacts of having a dedicated workforce that can make significant changes to the map in a very short period of time, as CEs were shown to have different editing habits than volunteer mappers. This study focuses on the CEs themselves, as while other research has explored the impacts of their existence, they have not explored who these editors are, and the reason for their employment. We sought to learn more about the demographic makeup, careers, and motivations and community relationships of these individuals. With these three research objectives, we created an anonymous mixed methods survey that was distributed directly to every listed CE account provided in accordance with the Organized Editing Guidelines on the OSMwiki. Non-exclusive groups were created prior to the collection of results based on previous literature and our research objectives. These groups were then compared to each other using ANOVA and compared to the population using T-tests in R . A non-exclusive typology was also created after results were collected to allow for further analysis of results. This typology was based on the statistical distribution of answers to key questions and it, paired with the groups created based on literature, allowed for a multi-pronged analysis. The findings reveal that corporate editing in OSM is a legitimate career path and can be more nuanced than simply adding or editing features on the map. Though the most popular employment length was one year, some participants had been employed for upwards of five years. There is a group of CEs that spend almost no time directly editing the map in OSM, yet – on average – have been employed for longer than those who spend the most time editing. Given that over a third of participants mapped in OSM prior to their employment as a CE, it was not surprising that there are ties between CEs and the OSM community, but we found that there was a link between community involvement and job satisfaction, as there was significant overlap between the most satisfied and most involved respondents. When editing, all respondents edited a variety of features, no specialization where a CE would only work with a single feature type was seen. Some editors edited the map before making it a career, some started editing on their free time after getting a job as a corporate editor, and others do not map outside of work. There is also a variety of salary types with an hourly wage being the most popular, but other CEs being paid a monthly or annual salary. A profile of a typical CE was created using the mode of each question’s response and reveals many are enjoying their jobs and would like to continue. There is insight into the workplace by depicting the resources available to editors and a general framework of their work week, with 8-hour days, one project meeting per week, and good relationships between colleagues. There is not much direct interaction between the typical CE and members of the community, but they do use community resources (like OSMwiki) and consider its status as an open project important to their employ in the field. Unfortunately, we encountered several challenges in reaching out to individual editors as the organizations they work for explicitly prevented them from answering the survey. This had a significant impact on our ability to collect responses, as over half the CE community was made unavailable to this study. Due to low participation numbers, we must establish that our results do not serve as a definite representation of CEs. Low participation was also the rationale for the multi-pronged analysis, as we sought to learn as much as possible from a limited population. Though all CEs reserve the right to not participate in this study, the blanket refusal seen by some corporations is at odds with the autonomous agency which has been a tradition of OSM. At one company, all direct messages sent to any of their CE accounts on OSM redirect to the inbox of their manager, which raises similar questions. While our results may not provide a faithful representation of CEs, our work furthers conversation regarding these workers and broaches the topic of their agency. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/SHA79S/

Shifting trends in global evolution of corporate mapping in OSM (sotm2024)

Sun, 08 Sep 2024 11:00:00 +0200

This talk will look at corporate editing in OSM at three scales - global, national and local. Our results show that corporate editing increased from 2016 to 2021, but has decreased since then. Nevertheless, in recent years there has been a diversification of corporations, with an increase in edits from Digital Egypt or Grab and other smaller corporations. Corporate mapping tends to focus more on high and medium HDI regions, but our results also suggest that there is only a small influence of corporate mapping dynamics on other parts of the OSM mapping community in a country. Introduction: In recent years, with the emergence of corporate editing in OpenStreetMap (OSM), there has been interest, and in some cases concern, about its influence in OSM. For instance, large corporations like such as Apple, Microsoft, Meta and Amazon have hired large teams to edit in OSM [1]. The launch of the Overture Maps Foundation, by Amazon, Meta, Microsoft and TomTom hosted by the Linux Foundation in 2022 and the release of its first dataset [2] has also led to heated debates on the OSM forum, regarding the future of OSM. Concerns have been raised about the monopolisation of geodata, the replacement of OSM by other sites or the backlining of OSM [3]. Consequently, analysing and continuously monitoring the impact of corporate contributors and continuing to observe their fluctuating patterns of editing will be significant to the understanding of the sustainability of OSM. Therefore, this talk will look at corporate editing in OSM at three scales - global, national and local to answer the two research questions: (RQ1) What is the impact of corporate mapping on global scale mapping? (RQ2) What is the impact of corporate mapping on country and small-scale mapping? Methodology: There are two main avenues to track corporate contributors: Either through corporate affiliated OSM User IDs (UIDs) or through corporate hashtags in OSM changesets. UIDs of corporation affiliated mappers have been used in the past to track corporate activity in OSM (e.g. [1, 4, 5]). A list of affiliated usernames can be collected from disclosed lists on the OSM Wiki or corporations GitHub pages [6]. The second way to track corporate edits is through corporate hashtags in changesets. Since 2009, it became possible to add hashtags to changesets in OSM, and this has become common practice, especially to show affiliation to regions, events, organisations or corporations [7]. For the analysis presented here, in total 24 companies were tracked including Apple, Kaart, Amazon, Microsoft, TomTom, Grab, DigitalEgypt, Mapbox and Meta. We used tracking with hashtags was used as proposed by [7]. The dataset used for the analysis integrated data from two sources: The OpenStreetMap History Database [8] and the OSM Changeset database. The OSHDB was used to derive OSM geometries and attribute information as well as information about the editors. The data was then intersected with a dataset of country boundaries to assign a mapping to a specific country. The OSM changeset dataset was joined to this contribution dataset. The dataset included a plethora of information, but the most relevant columns for the analysis were the OSM ID, Changeset timestamp, hashtags and User IDs, country, year and month as well as the geometry information – including the centroids. (We aim at presenting this dataset in detail in another workshop at SOTM 2024.) At the global level, two analyses were carried out. First, the temporal development of corporate and total edits from 2016-01-01 – 2023-12-31, including a breakdown by individual corporation. Second, the absolute number of corporate edits per country and the percentage of corporate edits based on total edits per country for the period 2019-06-01 to 2023-05-31 were analyzed. For an additional overview, the country-level results were grouped by Human Development Index (HDI) class, for a more in depth understanding of the spatial distribution of corporate edits in respect to socio-economic factors. Countries with more than 15% corporate edits and more than 100,000 total edits in this period were selected for an in-depth analysis. A total of 28 countries met these requirements and we extracted the monthly corporate and non-corporate edits. The overall timeframe for analysis was divided into two time periods: t0 (2019-06-01– 2021-05-31) and t1 (2021-06-01 – 2023-05-31). For each country we derived the change in average activity for both corporate and non-corporate mapping. Three countries were selected from the 28 countries with high corporate mapping activity for the small-scale analysis: Colombia, Indonesia and the United Arab Emirates. For these countries we produced a high-resolution spatial dataset based on a H3 grid utilizing the centroid geometry of each OSM contribution. We performed a spatial auto-correlation analysis to identify regions where corporate (and non-corporate) edits have increased / declined over the past years. In addition to the maps, a normalized confusion matrix was calculated to compare the spatial autocorrelation results and present the overlap or difference between the trends in corporate and non-corporate mapping. Results and Discussion: At the global scale (RQ1), corporate editing increased from 2016 to 2021 and has decreased since then. There is a wide variety of companies involved in OSM, but the large number of edits and its concurrent decrease in edits is mainly driven by three companies, namely Meta, Kaart and Apple. Other researchers have investigated corporate mapping activity [1, 4, 7], but a decline in their mapping activity has not yet been reported or expected. The observed decline is particularly evident in the case of Apple, which experienced a peak in edits during 2020 (14 million edits) and 2021 (12 million edits) before decreasing by more than half in 2022 (4 million edits). Corporate edits are concentrated in high and medium HDI regions, with almost 80% of edits distributed across 32 countries. As seen in other analyses, non-organised mapping tends to focus on very high HDI regions [9], while humanitarian mapping tends to focus on low HDI regions [10]. The results presented here suggest that corporate mapping tends to focus more on high and medium HDI regions. The discussion about digital inequalities and power imbalances that may arise from corporate contributions in particular countries or regions should be ongoing, as it is a discussion for OSM as a whole. As of now, it is not clear why the large tech corporates map less. At the same time, it is unlikely that all high and medium HDI countries are completely mapped in OSM already [10]. Regarding the small-scale analysis our results show that there is no strong correlation between the increase or decrease in the mean corporate or non-corporate edits for the three selected countries. For most regions with a strong increase (high-high cluster) or decrease (low-low cluster) in corporate or non-corporate edits, there is no significant change for the other. This suggests that there is only a rather small influence of corporate mapping dynamics on other parts of the OSM mapping community in a country. The ability to quantify the impact of corporate editing, particularly on volunteer mapping behaviour, continues to be an important measure for the OSM community. For example, further investigating would be necessary to understand the intentions and impacts of corporate mapping for various map features (not just looking at overall edit count). Understanding the intentions of different groups and communities in OSM and their impact on the data is a core necessity to obtain ’OSM Data Literacy’, especially for everyone who relies on high quality OSM data for research, business or decision making. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/HD9RQD/

Crisis Mapping: Teaching High School ELL Students How to Make Maps That Save Lives (sotm2024)

Sun, 08 Sep 2024 13:30:00 +0200

This paper presents the learning outcomes of a Mini-Mapathon course developed, implemented, and evaluated for the first time in a population of 28 Asian Junior high school ELL students in three Human Geography courses at an international high school. The paper includes an introduction to crisis mapping and concludes with an analysis of students’ knowledge and skill gains, and attitudes towards map making. Students’ survey responses were analyzed using mixed methods. In conclusion, the paper proposes that the Mini-Mapathon course could be implemented in other schools with a larger sample size to investigate learning outcomes. . I designed and developed the Mini-Mapathon curriculum to answer three key research questions below. 1. How did the design support changes in students’ perceptions of their crisis mapping knowledge and skills? 2. How did participating in the Mini-Mapathon support student expressed interest in crisis mapping in the future? 3. How did the Mini-Mapathon support students in engaging crisis mapping? I designed and delivered the Mini-Mapathon, via three 45-minute Human Geography courses to 28 junior Asian high school students at an international school in Beijing, China. The English Language Learners (ELL) student population were all Chinese and their ages ranged from 16-18, consisting of 15 male students and 13 female students. Prior to implementing the research project with 28 Human Geography students, I researched the best way to teach crisis mapping to ELL students by participating in Mapathons and Mapalongs. I piloted three crisis mapping Mini-Mapathons for 55 Asian 4th grade students in three classrooms after learning crisis mapping was done effectively with 10 year old students in Milan, Italy (Gaspari, et al., 2021). The pilot programs with 4th grade Asian students and subsequent project were implemented only after the 4th grade students learned about crises in their IB-PYP curriculum, and after I conducted an extensive literature review of this relatively new (2005), interdisciplinary and innovative field of crisis mapping, investigated many mapping software platforms, and spoke to representatives from www.ushahidi.org, www.hotosm.org , and www.missingmaps.com. A website was built (www.crisismapping.weebly.com) to turn the Mini-Mapathon experience into an exportable educational activity that could be replicated or delivered in formal and informal learning environments. Using the ADDIE approach, I sought to design, implement, and evaluate a Mini-Mapathon curriculum to answer my three research questions. I implemented my applied research project on teaching crisis mapping through a Mini-Mapathon and collected pre and post surveys in late April, 2022, during the spring semester at an international high school in my three Human Geography classes. Twenty-eight Asian students participated in the Mini-Mapathon so that medicine and services could be delivered to vulnerable populations in Nigeria and Zimbabwe by Doctors Without Borders and The Red Cross. During the 45 minute Mini-Mapathons, students were taught how to map buildings and roads using Humanitarian Open Street Mapping software via www.hotosm.org and they took pre and post surveys so that I could better understand and measure how students learn during Mapathons and determine if my methodology for teaching crisis mapping was effective (Branch, 2009). The learning objectives of the Mini-Mapathon design were as follows: 1) Students will be able to co-create interactive open street maps using geo-spatial software. 2) Students will be able to analyze the role maps play in crisis response such as refugee crises and disasters and identify the stakeholders including citizens, international humanitarian organizations such as UNHCR, Doctors Without Borders, and Red Cross, NGO’s, government agencies, and military branches. 3) Students will be able to develop geographical knowledge and spatial awareness. I delivered pre and post surveys to better understand how students learn, what they learn, and assess the quality of crisis mapping instruction in my three Human Geography courses with 28 Asian high school students. How to Create an Account tutorial along with the other static and video tutorials can now be found on the website I built www.crisismapping.weebly.com. I began each class with a 2–3-minute video focusing on the problem, population in need and showcasing the work of the Spanish Red Cross, UNHCR, or Doctors Without Borders, to increase cultural and historical context and show the organization who can operationalize our map to provide relief to those in need. I then proceeded to explain that some places do not have accurate maps because they do not have Google cars driving around or adequate resources in the government to make up to date maps, however, volunteers like us can make the new maps together using satellite imagery. I asked the students to create their own OSM accounts in previous classes because we had been using the OpenStreetMap resource to explore chokepoints, or straights and canals, to better understand geography and global trade in previous lessons. I provided anonymous usernames and passwords if students had not yet created their OSM accounts to save time. Some opted to use the Tutorial How to Create An OSM Account and some students taught others how to create an account quickly. Next, I proceeded to implement the following step by step in class instructions in order to make learning visible and meet the academic language needs of the ELL students (Hattie, 2008; Yoder, et al., 2016). Step 1) Watch a fellow student map in front of the classroom following the teacher instruction through a four-step tutorial How To Map A Building. The tutorial can be found on www.crisismapping.weebly.com Step 2) Review the four-step process by coaching the student verbally through the four-step tutorial How to Map a Building. Step 3) Correct the teacher’s mistakes of not following the order and incorrectly mapping the building size, and mapping a shadow. Step 4) Answer any questions students may have. Step 5) Ask students to start mapping their first building and raise their hands before saving and uploading their work so the teacher or aid can inspect and correct their work if needed. PDF and video tutorials on How to Map a Building and How to Map a Road were delivered through the school’s information communication technology platform so students could learn at their own pace through multi-modal scaffolded instruction. The population sample of 28 Asian ELL high school junior students completed pre-surveys prior to the learning intervention or Mapathon and then completed the post survey. The pre and post survey questions were a mix of qualitative and quantitative questions (see Table 3). The quantitative survey data was analyzed using Microsoft Excel. The descriptive analysis was performed with SPSS to find the frequencies, percentages, the mean and standard deviation of survey question data. The descriptive statistics are presented below in the form of tables, graphs, and charts below. I used descriptive statistics and analysis instead of inferential statistics because this was a pilot project with a small sample size. The goal was to understand the impact of the new curriculum on this particular population and not to generalize effects of an intervention for all similar students. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/NQHRLV/

Assessing the performance of AI-assisted mapping of building footprints for OSM (sotm2024)

Sun, 08 Sep 2024 08:30:00 +0200

fAIr is an open AI-assisted mapping service developed by the Humanitarian OpenStreetMap Team (HOT), with the aim of improving and assisting mapping for humanitarian aid and disaster relief. The proposal illustrates the research undertaken to assess the performance of fAIR underlining ML model training, from the training datasets selection process, the choice of the metrics used to measure accuracy, and finally the analysis of the results obtained testing for different metrics. The research falls within the broader spectrum of research on understanding the fine tuning process for geographic domain adaptation in image analysis validation, particularly for building footprints detection. **Introduction** Building footprints features are useful in a wide range of applications such as disaster assessment, urban planning, and environmental monitoring (You et al., 2018; Owusu et al., 2021; Yang, Matsushita, & Zhang, 2023), and their identification has been gaining increasing interest and attention from the ML research for Earth Observation (Hoeser, Bachofer, & Kuenzer, 2020). Particularly in the disaster response context, accurate and prompt availability of such information is crucial (Boccardo & Giulio Tonolo, 2015; Deng, 2022; Sun et al., 2022). fAIr, developed by the Humanitarian OpenStreetMap Team (HOT), a fully open AI-assisted mapping service to generate semi-automated building footprints features, addresses this need (fAIr website, 2022). fAIr stands for “Free and open source AI that is resilient for local contexts, and represents the Responsibility of HOT for local communities and humanitarian mapping", reflecting the objective of HOT to improve and assist mapping for humanitarian aid and disaster relief. Useful open-source data sets of AI-generated building footprints exist (e.g. Microsoft’s global buildings dataset, available through Rapid, and Google’s Open Buildings for Africa and the Global South at large), however, the Machine Learning (ML) models are not currently open-sourced. fAIr, on the other hand, addresses the lack AI models openness by being a fully open source project (HOT Tech Blog, 2022). While in OSM building footprints mapping is currently supported in most countries through Rapid, "users should take care to ensure adjustments and corrections are made as needed" (Rapid - OSM wiki, 2024); fAIr goes over this issue by reintroducing _the human in the loop_. In fact, at its current state, fAIr allows OSM mappers to create their own local training dataset, train/fine-tune a pre-trained Eff-UNet model, and then map into OSM with the assistance of their own local model. In its initial release, the performance of the model following training was not assessed, thus the objective of this research is to address this gap. This proposal describes the research developed in recent months to assess how the ML fine-tuning process performs, investigating the currently used accuracy metric, and comparing against different sets of evaluation metrics. The final aim of this research is to advise on the optimal metric for this building footprints segmentation task. The research falls within the broader spectrum of research on understanding the fine-tuning process for geographic domain adaptation in image analysis validation (Rainio, Teuho, & Klén, 2024; Maier-Hein et al., 2024). **Data and Methodology** fAIr is a software service that performs semantic segmentation to detect building footprints from openly available local satellite and UAV imagery at high resolution (cm) (OpenAerialMap website, 2017). In computer vision (CV), semantic segmentation is the task of segmenting an image into semantic meaningful classes, which is performed with convolutional neural networks (CNNs) architectures (Hoeser & Kuenzer, 2020). The deep learning CNN model used in fAIr is called RAMP (Replicable AI for MicroPlanning), and its architecture originates from an Eff-UNet model (RAMP model card, 2020; Baheti, Innani, Gajre, & Talbar, 2020). With the aim to analyse the current validation accuracy performance and compare against other metrics, an initial literature review on fine-tuning processes for geographic domain adaptation in image analysis validation was performed, which led to outlining a list of candidates for validation metrics (Reinke et al., 2024; Maier-Hein et al., 2024). In parallel, manual labelling on selected areas of interest (AoI) was carried out on a data set of sixteen urban regions, chosen as the most representative of different grades of urbanity, density, regional characteristics, roof cover types, etc. The pre-processing of the AoI images was performed for each urban region through fAIr-dev website (fAIr website, 2022), and produced 256x256 georeferenced tiles for both the original RGB images and labelled masks (see example in Figure 3). Then, the ML training was run on all sixteen training datasets using an Nvidia Tesla T4 GPU, for different batch sizes, epochs, and zoom levels. **Preliminary results** Figure 2 shows an example of outcomes of the ML training for four of the urban regions with five types of validation metric (categorical accuracy, precision, recall, IoU - intersection over union, and F1 Score) and categorical cross entropy as the loss function. The analysis of the research results is still a work in progress. The performance of IoU, the suggested metric for this type of image analysis problem (Reinke et al., 2024), will be assessed against the currently used metric, categorical accuracy, and other commonly used metrics. As a preliminary example of future analysis, Figure 3 shows how categorical accuracy scores compare with other validation metrics at their final value, i.e. the value at the epoch at which the checkpoints are saved, which currently is set at the maximum for the validation categorical accuracy (early stopping). The different characteristics of the urban regions are also going to be assessed against the performance of the current model. From empirical tests, it is expected that the model has lower accuracy in more dense areas. Fig 4 seems to confirms that, for a specific epoch count (here 20 is shown as an example) and batch size, the performance is higher in urban regions that are more sparse and that present a grid disposition, compared to more dense regions, for all metrics except for Recall. The same figure, but for roof types, suggests that the model performance is lower for cement roof types, as opposed to mixed cover, metal and shingles covers. In terms of urban "type", the results suggest that the current model performs better in the refugee camps regions, and worse peri-urban regions, with higher variability among the validation metrics for semirural and highly urban regions. Further analysis on the statistical significance of these preliminary patterns is under way, with the possibility to extend the research to other urban regions. **Conclusions** To avoid overfitting of the training dataset, early stopping is in place, thus it is important to choose the optimal metric with respect to how fAIr performs, and the research is going to point out the statistical significance of different choices for the model performance and for different urban characteristics. Further research will concentrate on using other factors to help drive the fine-tuning process, like loss regularisation, and will extend the analysis to the prediction performance. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/PG3K3G/

Analyzing the Spatial Distribution of Fuel Stations in Harare, Zimbabwe: Leveraging OpenStreetMap for Disaster Preparedness, Mitigation and Recovery (sotm2024)

Sun, 08 Sep 2024 10:30:00 +0200

Whether they are man-made or natural, disasters pose serious risks to communities all over the world. A comprehensive evaluation of gasoline station infrastructure is necessary to ensure public safety and reduce fire dangers. This research, which focuses on Harare, Zimbabwe, uses Geographic Information Systems (GIS) to examine building patterns and access building footprints, road networks, and public facilities using the OpenStreetMap Database. Fuel station mapping and dataset overlaying allow to define fire risk levels that are susceptible to fire hazards and identify danger zones. This study supports risk management, public safety, disaster preparedness, and mitigation initiatives in Harare, Zimbabwe. Natural or man-made disasters pose serious risks to communities all over the world and frequently have dire repercussions, including the loss of life, destruction of property, and disruption of social order [1]. Fire occurrences are particularly dangerous among these calamities, especially when they include infrastructure such as gasoline stations [2]. The potential for large-scale fire catastrophes underscores the need of ensuring the safety of gasoline station infrastructure, as evidenced by occurrences documented in Zimbabwe [3]. Petroleum derivatives, such as gasoline, diesel, kerosene, and LPG, have the potential to ignite fires when handled improperly [4]. It is clear that a comprehensive fire danger assessment is necessary, which highlights the need for proactive fire management planning [4]. Between 1993 and 2004, there were around 243 fire-related incidents at fuel service stations worldwide that were recorded. it's evident that these sites present significant risks Geospatial technology has become an invaluable instrument for disaster preparedness, response, and mitigation as a result of these issues [5]. By offering open data necessary for disaster response and mitigation, initiatives such as Humanitarian OpenStreetMap and the utilization of platforms similar to OpenStreetMap have made substantial progress in these efforts [6]. These systems ensure the availability of high-quality data for efficient mitigation measures and provide quick and open access to geospatial data, facilitating prompt disaster response activities [7]. The OpenStreetMap data consists of many datasets that use points, lines, polygons, and area attributes to represent real-world features. These databases include characteristics that are useful for study, mitigation, recovery, and preparedness for disasters. Through the use of Geographic Information Systems (GIS) techniques, mapping into and querying the OpenStreetMap Database, this project seeks to overcome the difficulties presented by fire dangers, namely in gasoline station infrastructure. In order to identify danger zones and potential vulnerabilities, the research specifically aims to perform a thorough examination of building footprints, conventional construction standards, and public spaces such as marketplaces, parks, schools, hospitals, houses of worship, and road networks in Harare, Zimbabwe. Additionally, it seeks to map gas stations, obtain exact locations, and extract pertinent data from OpenStreetMap and other sources by utilizing Geographic Information System (GIS) approaches. The study also aims to categorize areas at risk of fire danger according to a number of factors, such as proximity to fuel stations and the position of LPG filling stations according to Zimbabwean government rules and retail premises, as well as other factors identified through spatial analysis. Additionally, it seeks to offer practical suggestions and solutions for improving public safety and lessening the effects of fire disasters in Harare, Zimbabwe, offering insightful information for initiatives related to disaster preparation, mitigation, and recovery. to advance resilience and sustainable development in the area while also adding to the scientific understanding of the dangers of fire hazards related to gasoline stations. This study's methodology combines spatial analytic methodologies, data extraction from OpenStreetMap and other sources, and Geographic Information System (GIS) analysis. To fully comprehend the gaps that now exist, we will first start by gaining access to the data that is already available on the OpenStreetMap Database. The gasoline stations will then be mapped into the OpenStreetMap database, where pertinent data such as locations and infrastructure aspects will be recorded. This information will then be taken out of OpenStreetMap. The procedure involves extracting comprehensive information on the locations of buildings, roads, and public spaces including playgrounds, marketplaces, hospitals, and schools from the massive OpenStreetMap database. A thorough examination of the geographic distribution of filling stations, public buildings, and fire service stations will be done using a geographic information system. The objective of this research is to categorize areas at risk of fire hazards according to the Zimbabwean government's standards for the placement of retail and LPG filling stations. These rules include factors such as the distance from fuel stations and other infrastructural concerns. To fully comprehend the spatial distribution of fuel stations in relation to fire stations, residential buildings, and public amenities like schools, hospitals, places of worship, markets, parks, and more, techniques like Euclidean, nearest neighborhood analysis, and geoprocessing analysis will be used. In order to do the study, the number of buildings in each of the four fire danger risk zones—very high, high, medium, and low risk—will be grouped and examined. In order to determine the number of structures in each of these designated zones, a query to the OpenStreetMap dataset will be made. This will yield important information on the possible effects of fire hazard events on different regions within the research area. This study seeks to give crucial information for risk and disaster management (preparedness, mitigation, and recovery) by undertaking a thorough investigation of fire hazard threats linked with petrol stations in Harare, Zimbabwe. By employing Geographic Information System (GIS) techniques and utilizing geospatial data from OpenStreetMap, the project aims to improve public safety, lessen the effects of fire disasters, and advance scientific knowledge of fire hazard hazards. Additionally, this study's conclusions and suggestions aim to promote resilience and sustainable development in Harare and beyond. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/VFUBCD/

From Complexity to Clarity: Simplifying OpenStreetMap Data for Improved Active Transportation Analysis (sotm2024)

Sun, 08 Sep 2024 09:30:00 +0200

OpenStreetMap (OSM) provides detailed street networks essential for analyzing active transportation (AT) infrastructure. However, the granularity and inconsistencies in OSM data pose challenges in modeling AT users' movements at the street level. This study proposes a novel methodology to generate axial networks for AT users using OSM data, simplifying the network while preserving topology. Applied to cities like Turin, Tel Aviv, and San Francisco, this approach effectively streamlined pedestrian and bicycle networks. The proposed methodology can enhance AT infrastructure, contributing to safer and more efficient urban mobility. Introduction OpenStreetMap (OSM) offers comprehensive street networks that span nearly every city worldwide. The networks contain essential details like road type and name, and individual streets are often represented through multiple concurrent segments. The segments include separate lanes for motor vehicles, dedicated bike paths, and pedestrian walkways. OSM's comprehensive dataset allows the creation of specialized networks customized for pedestrian and cyclist analysis, providing users with a powerful tool for understanding and improving active transportation (AT) infrastructure. These specialized networks play a pivotal role in monitoring and understanding walking and bicycling patterns, contributing to infrastructure enhancement aligned with cities' goals for fostering AT to combat traffic congestion, obesity, and air pollution (Nelson et al., 2021) Nevertheless, the granularity of these networks may pose challenges in modeling AT users' movements on a street level. For example, when assessing AT safety or suggesting a walkability index at the street level, the current data representativeness on OSM necessitates significant manipulation to do so. Furthermore, owing to OSM's open-editing model, the standards for mapping elements are not consistently defined, leading to contentions and variations in data quality (Haklay, 2010). Individuals often map elements based on personal needs and knowledge, introducing inconsistencies in the dataset. Consequently, in some locales, all designated lanes for various users are meticulously mapped, while in others, only a single lane representing the presence of a street is depicted. Additionally, there are instances where only lanes for motor vehicles are detailed, with scant attention paid to lanes catering to other road user groups. Previous research has endeavored to address this issue. For example, a study suggested a topology-preserving simplification of OSM network data for large-scale simulation in sumo (Meng et al., 2022). However, they primarily focus on less complex areas and prioritizing vehicular considerations when generating the new network over those of AT users. Aim In this study, we propose an innovative solution to generate an axial network specifically designed for monitoring and analyzing AT users, using exclusively OSM data. Our approach simplifies the network while preserving its topology. We apply this solution across diverse spatial contexts, from straightforward geographic regions to complex urban environments. Furthermore, we implement our methodology in several cities worldwide—Tel Aviv (Israel), Turin (Italy), and San Francisco (United State)—each characterized by unique urban structures and varying levels of economic development. Methodology The preliminary tasks use OSMnx (Boeing, 2017) to acquire OSM street network data, converting it into a graph while correcting topological errors. Then, the data is stored in a geodata table, including polyline geometry, names, and road types. Our algorithm filters out unsuitable roads, like motorways and trunk roads, and replaces roundabouts with their central points. The network is then ready for the multilane detection algorithm. Polylines identified in a multilane scenario are aggregated into a centerline and added to the Simplification OSM Data (SOD) network. Other polylines are added to the SOD network, retaining their original geometry. A multilane scenario is identified when polylines share the same street name, have similar angles, and are close together. Polylines are grouped by street name, and azimuth (0°-180°) narrows the angle range to ensure that parallel lines are considered parallel, regardless of orientation. The Density-Based Spatial Clustering of Applications with Noise (DBSCAN) clusters similarly angled polylines using a 10° radius and a minimum of two samples. Outliers with significantly different angles are excluded. The remaining clusters apply a right-shifted buffer to each polyline. If two or more polylines in the same class overlap by at least 10% in the shifted buffer, they're classified as multilane, and the entire class is replaced with one or more centerlines. The core idea behind creating a new centerline is to identify its start and end vertices and then add intermediate vertices to preserve the overall shape of multilane polylines. Overlapping buffers are merged into a single polygon, and the two polygon vertices that best define the original polylines are used to establish the new centerline's start and end. Intermediate vertices are then added at regular intervals to maintain the original polylines' orientation. The simplification process introduces significant changes to the locations of many polylines, resulting in issues of continuity, topology, accuracy, and inconsistency in the SOD network. Most problems can be resolved using existing methods, but connecting roundabouts requires extra effort. This process has three steps: transforming the roundabout representation to a point, connecting nearby dead-end polylines, and linking polylines in proximity. Following these steps ensures proper continuity and maintains the network's topology. Findings The case study centered on Turin, Italy, simplified its street network to 11,807 polylines from an initial 49,750. This effort reduced the complexity of 411 streets, converting 138 roundabouts to single points. Despite some challenges near intersections, the final version preserved topology. For validation, 43 streets in Turin were reviewed, revealing a 51% success rate, 28% with minor flaws, and 14% with partial success. Issues such as threshold errors, external mapping inaccuracies, and ambiguous street configurations affected the results. Similar challenges were faced in Tel Aviv, Israel, where 50% of 22 test streets matched perfectly with the reference network. Yet, 23% had minor issues, and 9% were entirely incorrect. In San Francisco, the comparison showed 80% accuracy with 20 streets evaluated. While most streets were correctly simplified, minor flaws were present in a few cases, mainly due to inconsistencies between the SOD and reference networks. Overall, the methodology successfully streamlined street networks, although it achieved varying rates of success across different cities. Discussion Our study offers a robust methodology for generating axial networks for AT users using OSM data, balancing data simplification with topology preservation. Its successful application across diverse cities such as Turin, Tel Aviv, and San Francisco demonstrate its versatility and effectiveness in varied urban environments. The approach simplifies the complex urban network data, streamlining pedestrian and bicycle analysis while retaining essential details. This enables urban planners and policymakers to better monitor and understand AT patterns, leading to infrastructure improvements that support safer, more efficient, and environmentally friendly urban mobility. Our research offers both scientific contributions and practical benefits. Scientifically, it has been applied to evaluate the built environment for pedestrian walkability using a spatial data clustering approach. Additionally, it has been utilized in research to evaluate safety and bike network connectivity, aiming to improve bicycle and pedestrian infrastructure in California cities. Practically, this work has been published on GitHub, making the code accessible to everyone for their specific needs and goals. References Boeing, G. (2017). OSMnx: New methods for acquiring, constructing, analyzing, and visualizing complex street networks. Computers, Environment and Urban Systems, 65, 126–139. Haklay, M. (2010). How good is volunteered geographical information? A comparative study of OpenStreetMap and Ordnance Survey datasets. Environment and Planning B: Planning and Design, 37(4), 682–703. Meng, Z., Du, X., Sottovia, P., Foroni, D., Axenie, C., Wieder, A., Eckhoff, D., Bortoli, S., Knoll, A., & Sommer, C. (2022). Topology-Preserving Simplification of OpenStreetMap Network Data for Large-scale Simulation in SUMO. SUMO Conference Proceedings, 3, 181–197. Nelson, T., Ferster, C., Laberee, K., Fuller, D., & Winters, M. (2021). Crowdsourced data for bicycling research and practice. Transport Reviews, 41(1), 97–114. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/LAZXYU/

Assessing the attribute accuracy and logical consistency of road data in OpenStreetMap (sotm2024)

Sun, 08 Sep 2024 09:00:00 +0200

Our work aims to assess OSM road data quality with a focus on car driving. Current work-in-progress proposed indicators to assess attribute accuracy, with a focus on speed limits and methods for estimating the logical consistency of road data. Due to the crowdsourced nature of OpenStreetMap (OSM) and the lack of quality control during the contribution, the data quality issue has become a research focus [1]. Understanding and addressing these data quality issues can facilitate unlocking OSM's full potential for diverse applications. OSM data quality assessment methods can be divided into two broad categories: extrinsic and intrinsic. Extrinsic quality assessment methods compare OSM data with a reference dataset (e.g., authoritative data sources). This is where most initial research on OSM data quality started from [2-4]. Yet, a reference dataset may not always be available. On this ground, researchers called for attention to the intrinsic indicators of OSM data quality [5] and proposed intrinsic data quality measures based on the data, data history, and metadata [5-9]. It is crucial to acknowledge that the quality of OSM data is not a one-size-fits-all metric. Rather, it heavily depends on the purpose of the application domain, known as "fitness-for-use" [5,10]. The diverse application potentials introduce dynamic data requirements. Navigation is one of the primary application domains in which OSM plays a pivotal role. Among them, vehicular traffic constitutes a significant portion of road usage and has a substantial impact on urban mobility and infrastructure planning. Additionally, the complexities involved in automotive navigation and traffic systems require a higher level of data accuracy and reliability, making it a compelling starting point for investigating intrinsic road data quality. In the context of car driving, the attribute accuracy and logical consistency of road data are particularly important [11]. Attribute accuracy refers to the correctness and logical coherence of attributes associated with road features, such as speed limits, road classifications, and turn restrictions [12]. Logical consistency ensures that the road network data follows the correct topological rules, such as proper connectivity of different road classes. The attribute accuracy and logical consistency of OSM road data are essential for traffic planning and supporting navigation applications. To address the challenges of the evaluation of OSM data quality for navigation, when a reference dataset is unavailable, this research narrows its focus on assessing the attribute accuracy and logical consistency of OSM road data. To assess the attribute accuracy, we first identified important attributes related to car driving, such as road name, road class, surface, speed limit, capacity, height limit, total weight limit, and vehicle type. Then our method assesses the attribute completeness by looking into the tags related to the aforementioned attributes, and whether the relevant information is available. The attribute completeness provides us with a first overview of the attribute data. In the next step, a set of rules based on country-specific traffic laws is defined, and the relevant attributes are checked against these rules. So far, we have looked into the traffic law in Germany and defined rules for speed limits according to the road classes. Our proposed method looks into the “maxspeed” tag of each road segment, and verifies their value against the rule defined for the corresponding “highway” value. When a mismatch occurs, these road segments are identified and considered as inaccurate. The inaccuracy of the speed limit is calculated as the number of road segments with an invalid “maxspeed” value divided by the total road segments with “maxspeed”. At the current stage of our work-in-progress, we verified our method in the Heidelberg region, where the inaccuracy rate is very low. Regarding logical consistency, a set of rules is defined based on country-specific conventions. We acknowledge that different regions in the world have different road construction and road mapping conventions. So far, we have based on our case study in Germany, and defined rules for the values of the “highway” tag. These rules include: the value of the “highway” tag should be consistent along a path; a link road should be connected to its corresponding highway; connection of different classes of roads should be logically consistent (a way with a high level of importance in the road network should not connect directly to a way with a much lower level of importance). Our work aims to assess OSM road data quality with a focus on car driving. Current work-in-progress proposed indicators to assess attribute accuracy, with a focus on speed limits and methods for estimating the logical consistency of road data. In the next step, we plan to build more rules for speed limits, considering the geometry of the road and their neighbouring zone to infer the speed limit. We will also leverage machine learning methods to set up rule sets for speed limits and road connections for different regions of the world. With the proposed assessment, OSM data users can verify road data quality in terms of attribute accuracy and logical consistency, before their intended use. With the evaluation method, we also aim to inform the potential improvement of OSM road data quality, especially for navigation. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/R9CVQD/

OSMF Board AMA (sotm2024)

Sun, 08 Sep 2024 14:00:00 +0200

OpenStreetMap Foundation Board Ask Us Anything (i.e. AMA). We will take questions from the audience, or other questions that people can submit before the event, and we will talk about and answer them. We can talk about the past actions of the board, and what future plans we have. This is a chance to ask the OSM Foundation Board questions, to engage with the board. Let’s have a conversation about the Foundation, the Board and how all the parts work together. If you know nothing about what the board is doing, this is a chance to find out. Find out what the Foundation does and doesn’t do, what it can and can’t do. Find out how you can help, how you can get involved. The Board is committed to openness and wants to engage with the community. Feel free to ask us questions also outside this specific session. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/C8UWGW/

Lightning Talks IV (sotm2024)

Sun, 08 Sep 2024 11:30:00 +0200

Lightning talks are short presentations (maximum 5 minutes) about a topic related to OpenStreetMap. ## Hot course in OSM data use (new course!) _by Sam Colchester_ ## Hot OpenSummit '23-24 _by Geoffrey Kateregga_ ## OSM Malawi: Insights into the contributions of the OSM community _by Priscilla Kapolo_ ## The growth of OSM community in Zambia (Local knowledge mapping) _by Priscovia Ng'ambi_ ## QField - an efficient way for field mapping & data collection _by Micheal Kaluba_ ## Maps that matter: Fighting climate crisis with maps _by Babalola Oluwabukola_ Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/8NU7CS/

Go Out And Map (sotm2024)

Sun, 08 Sep 2024 13:30:00 +0200

So you want to improve the map of your village or city. How do you do that — install Mapillary and go cycling? Print a map and use a pen to draw over it? Install an editor app and go tapping buttons? Just try to remember everything and bring it home to map in JOSM? Let's see what tools we have and how to make the best map with no money and lots of enthusiasm. Ground surveying for OpenStreetMap has been my passion for 14 years. In this time I tried virtually everything: from drawing walking papers by hand or printing them, to making photos, audio notes, using mobile editors, even building a hardware thing to attach to a car wheel. Ultimately I want to help everybody to collect as much data for OSM as possible, with the best quality attainable. And in this talk, I will dig some of the surveying history, as well as demonstrate a few modern ways, including the new notes mode present in Every Door app. You would definitely want to go out and map after seeing this talk. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/SC7HYF/

Do we need 11 000 shop=* values? (sotm2024)

Sun, 08 Sep 2024 11:00:00 +0200

About work on reducing one of minor problems of OpenStreetMap: rare, unclear and confusing tag values. Such as for example shop=mięsny How cleanup of such tags may help? Why it is dangerous to make this kind of edits? How it can be useful and how it can be problematic or annoying? How it can be done so benefits are much greater than damages? What kind of help would be welcome? Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/Z8F8RB/

The Current State of Collaboration between Digital Twin and OSM (sotm2024)

Sun, 08 Sep 2024 10:30:00 +0200

In recent years, advancements in 3D city models have been instrumental in urban planning and public engagement. In Japan, over 200 cities have adopted open digital twin data in CityGML format as promoted by Project PLATEAU of the Ministry of Land, Infrastructure, Transport and Tourism. This initiative, detailed in Binyu et al.'s research and the 3D City Index report, involves collaboration with the global OpenStreetMap community. Utilizing open database license ODbL, the integration of digital twin data with OpenStreetMap has been explored since 2022, aiming to enhance the global adoption of 3D city models and showcase the benefits of collaborative urban development. # References Lei, B., Stouffs, R., & Biljecki, F. (2023). Assessing and benchmarking 3D city models. International Journal of Geographical Information Science, 37(4), 788–809. https://doi.org/10.1080/13658816.2022.2140808 Toshikazu Seto. (2023). Role of 3D City Model Data as Open Digital Commons: A Case Study of Openness in Japan's Digital Twin "Project PLATEAU", Academic Track, FOSS4G 2023 Prizren. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/PRQKRX/

openrouteservice version 8 - Experiences and insights from 10+ years of running and providing a global OSM-driven, free and open-source routing engine (sotm2024)

Sun, 08 Sep 2024 08:30:00 +0200

Starting as a small research project at the University of Bonn and later the University of Heidelberg at around 2008, Openrouteservice has been steadily growing since. This ensures that now almost 120,000 users get free and equal access to basic mobility solutions every day. With the release of version 8, this conference talk will give you an exclusive behind-the-scenes look at almost a decade of OpenStreetMap-driven open-source software development and delivery. Our successes and challenges, and how we stayed true to our values, providing free and open-source software as a non-profit organization. With over ten years of history and over 120,000 users, openrouteservice has established itself as a cornerstone in the area of open-source and OSM-based routing engines. Driven by an increasing availability of road network data through the OpenStreetMap project, openrouteservice could steadily grow and evolve and find its unique spot as a good addition among other routing engines such as OSRM and Valhalla. The current portfolio of freely available services now ranges from standard routing, isochrones and vehicle optimization to custom routing algorithms designed especially for use cases such as relief operations in flooded or earthquake shaken areas. Openrouteservice was created as part of a research project at the University of Bonn around 2008 and was moved to the University of Heidelberg in the subsequent years. It has since been steadily developed, maintained, and supported. In 2017, we launched our public and complimentary API, offering fair quotas for a diverse range of our mobility tools, including routing, isochrones, matrix, vehicle optimization, geocoding, and numerous other features. This was so well received that openrouteservice partnered up with the German “Federal Agency for Cartography and Geodesy” in 2018 to provide routing services to the German Federal Government. In early 2019 the project was transferred to the Heidelberg Institute for Geoinformation Technology (HeiGIT), a non-profit and non-governmental research organization associated with the University of Heidelberg. The combination of non-profit, non-governmental, research, and free and open-source software allows us to make decisions based on social, ethical and environmental reasons without being influenced by commercial interests. The resulting stability and continued support already motivated over 600 other prominent non-profit organizations to install and use openrouteservice and build on top of our service APIs to run their missions. These missions encompass scenarios such as disaster relief efforts, supply chain management, last-mile logistics for health items, accessibility analysis to ensure equal access to health facilities, or planning the support areas for fire brigades. With our latest release, version 8, we would like to take this opportunity to provide the OSM community, which we so heavily build on, with an insight into nearly a decade of OSM-driven open-source software development and delivery. What it takes to run and provide a global public API, and how we are navigating the current professionalisation push for open-source software to shift from formerly hacky self-hosted solutions to data centre ready deployments. We will also share details on how we deal and operate with the ever lasting questions about osm data quality, accuracy and explainability of our routing results. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/XUJWAM/

Lightning Talks III (sotm2024)

Sun, 08 Sep 2024 09:30:00 +0200

Lightning talks are short presentations (maximum 5 minutes) about a topic related to OpenStreetMap. ## Campus Guide: Enhancing campus navigation through accurate and updated OSM maps _by Victor Ademoyero_ ## Mapswipe for web _by Geoffrey Kateregga_ ## Mapping activities and impact in Uganda by Geo-YouthMappers _by Umar Katongole_ ## OSM and OpenAerialMap data for machine learning _by Remígio Chilaule_ ## Essentials for a geospatial entrepreneur _by Antidius Kawamala_ ## Perspective of women participation in OSM (brief insights of survey conducted in March 2023) _by Benedicta Ohene_ Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/ZZTZRB/

How to develop your own style of OpenMapTiles with your favorite editor? (sotm2024)

Sun, 08 Sep 2024 09:00:00 +0200

This presentation introduces how to develop your own style of OpenMapTiles for MapLibre GL from scratch with *your favorite editor*. - Introduce of OpenMapTiles schema. - Introduce of Charites to use your favorite editor. - Introduce of other tools to compile JSON format for MapLibre GL. This presentation describes with how to use command line tools to create MapLibre GL style. I recommend to use UNIX based operation system or Raspberry Pi. The editors supports VS Code, Emacs, or Vim. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/NHZVNW/

Generating Ways with the Strava Heatmap (sotm2024)

Sat, 07 Sep 2024 15:30:00 +0200

The Strava Global Heatmap visualizes aggregated public GPS traces, guiding athletes worldwide in planning their routes by highlighting popular paths. This presentation demonstrates how the Heatmap, in conjunction with our routing engine, can be utilized to identify and fill in missing ways in OpenStreetMap (OSM). We will discuss an algorithmic strategy for creating generated pathways and introduce a prototype of an interface that facilitates the easy integration of these pathways into OSM. We will showcase how Strava's Heatmap can promote OSM's goal of developing a more comprehensive global map, highlighting a mutually beneficial relationship between the two platforms. At Strava, we encourage and support over one hundred million athletes to be active. Athletes memorialize their physical activity via activity uploads that they can share with friends around the world. The vast majority of activities uploaded to Strava include time-series GPS traces. This wealth of information underpins our geospatial products, such as advanced routing capabilities and the visually engaging Global Heatmap. Through Strava Metro, we extend this aggregated and de-identified data at no cost to entities like governments, urban planners, and NGOs, aiding in the creation of more efficient human-powered transportation infrastructures. The backbone of Strava's routing algorithm lies in attributing popularity to roads and trails in our edge graph. We align raw GPS lines from Strava activities to these edges, enabling a popularity-driven routing experience that highlights preferred routes within the collection of OSM ways. With over a billion uploads, Strava athletes cover over 55% of the ways in OpenStreetMap with human-powered activity. In contrast, the Global Heatmap presents an unaligned aggregation of GPS lines for over one billion public activities, offering an intuitive visual representation to aid athletes in exploring their surroundings. It's this dataset that Strava Metro partners leverage to extract insights on the safety, directness, and overall appeal of routes in cities, parks, and recreation areas. We found that Metro partners will often overlay the Heatmap onto physical maps to identify and fill gaps in local pedestrian and cycling infrastructures. In response, we built a prototype of a tool that automates the identification and labeling of unaligned geometries, allowing our partners to streamline the process of integrating these new geometries into OSM. This innovative approach utilizes GPS data points unattributable to existing OSM edges to generate potential new pathways, enabling mappers to enrich the map with previously uncharted ways. Leveraging Strava's global scale, we have batch-processed a collection of these potential pathways worldwide. This data can help fill in unmapped areas and highlight regions needing more mapping attention. It can also highlight commonly used unauthorized paths and potential areas for infrastructure development. This presentation will delve into the algorithms that facilitate the generation of these new edges and explain how mappers can harness this data to enrich the OSM database, fostering a more comprehensive map for human-powered transport. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/HVVYM7/

Open mapping through tropical forest biodiversity conservation (sotm2024)

Sat, 07 Sep 2024 14:30:00 +0200

The botanical collection Arboretum and Palmetum Leon Morales Soto houses 412 species from 64 botanical families, totaling 4892 individuals. The mapping carried out by the SAGEMA chapter of YouthMappers allowed sharing valuable information about Colombian flora with the university community, facilitating its conservation and recognition through the integration of collection data into OSM. The project aims to promote the conservation of threatened tropical ecosystems through open mapping. It involved the participation of 12 students and a training strategy through open workshops to replicate the project in other Latin American regions. The Universidad Nacional de Colombia is one of the most important ecological nuclei and connection points in Medellín and the Aburrá Valley. In its approximately 37 hectares, the university harbors a high diversity of fauna, especially birds, insects, small mammals, and reptiles, which find shelter, food, nesting areas, and a passage point in their biological corridor in the tree cover. Therefore, the conservation of this space is of special importance to the city. The collection stands out for housing various species representative of different Colombian tropical ecosystems, such as the dry forests of the Cauca and Magdalena canyons, the humid forests of Chocó, and the flooded forests of the Amazon, among others, offering students and visitors the opportunity to immerse themselves in the biodiversity of the extraordinary Colombian tropical forests and ensuring the maintenance of native species. The "Open Data, Vibrant Ecosystems" project aims to bring the university community closer to the care and appreciation of the flora and fauna present on the Universidad Nacional de Colombia, Medellín campus, through the recognition and appropriation of the living collection Arboretum and Palmetum Leon Morales Soto. It is based on open and collaborative mapping to encourage students to interact with the different species of palms, trees, shrubs, and herbaceous plants that the collection houses, and aims to go beyond visualization and consultation by inviting them to be active participants in the collection's tree inventory data collection, creation, use, and download through open data and the OpenStreetMap platform. As a result of the first phase of mapping the project, the collection's inventory was imported into OpenStreetMap, adding around 3000 new data points to the map. The project is developed in 3 phases: Training, Data validation in office and field, Data import to OSM. For the first phase, a work route was established for data import. First, information gaps and technical knowledge needed for the import were identified. Based on this analysis, collaboration was sought with volunteers from the OSM Colombia and OSM Latin America communities who had experience in tree mapping in OSM. A schedule of five training sessions was established for project members to acquire the knowledge and technical skills necessary for mapping the collection. As part of the project's dissemination and replicability strategy, it was decided to open the talks to the general public and especially invite the OSM Colombia and YouthMappers Latin America community to the training cycle. Five (5) training sessions were held in February and March 2024. The attendance range per talk was between 14 and 30 people, including students, educators, researchers, and institutions from 5 countries in Latin America (Colombia, Brazil, Mexico, Peru, Nicaragua, Chile). The training process covered topics such as data cleaning, mapping project documentation strategies, data import models with QGIS, urban trees and green areas in the OSM ecosystem, and open data licensing. To ensure the project's replicability, a YouTube channel was created with recordings of all the training sessions. A wiki was created documenting the data cleaning process, selected tags, the validation phase, and the import model. For fieldwork preparation, the QGIS program and the QField application were used. Through QGIS, tree data obtained from the university's Environmental Management System were imported, and then each campus of the Universidad Nacional de Colombia - Medellín Campus was divided into quadrants/polygons, with the aim that each member verified the tree data/points in the assigned quadrant. Field data verification was done through the QField application. The qfiel form identifies the mapper with their OSM username, allows them to add new individuals, map dead trees, and delete absent individuals. Information on species, growth habit, condition, and a photo was collected during the recognition. Python code was used to complement the information collected in the field, using the GBIF open repository API to add information about the botanical family for each of the mapped species. After socializing the import in the OSM Colombia community, the data import was carried out by quadrants under the user of each of the project participants, using an import model with QGIS that allows the translation of data into the tags used by the platform. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/3ZU3ZR/

Catching OSM Up with External Data with a Workflow and Tools for Conflation and Validation (sotm2024)

Sat, 07 Sep 2024 16:00:00 +0200

This report outlines a project to improve the workflow for integrating external open datasets into OpenStreetMap (OSM), ensuring compliance with import guidelines. The process includes tools for conflating data with OSM, supported by roles and tasks specific to this workflow. The AllThePlaces project supports this by extracting and mapping open (government) data to the OSM schema. A new tool, "DiffedPlaces", is proposed to automate diffs, perform data matching with an improved machine learning algorithm, and host the results. In addition, the existing OSM Conflator tool set, enhanced with a web-based data validation application, will be connected to DiffedPlaces. This is a work-in-progress report on an applied university research project to improve the workflow for integrating external "third party" datasets into OSM to complete OSM while adhering to the the import guidelines. First, the workflow for conflating (merging, fusing) external data into OSM is outlined with the main roles and tasks involved. Then some existing and missing software tools and challenges are presented. At the beginning there's data compliant to the ODbL license - especially selected open government data (OGD) - in raw format, or open data already mapped to the OSM schema from the existing AllThePlaces (ATP) project. ATP is a set of spiders and scrapers for extracting external open data. ATP implements periodic extraction, schema mapping, and hosting. A missing piece is the planned open source tool with the working title "DiffedPlaces", which will periodically process "diffs" from ATP and external data, i.e. OSM elements to be created, updated or deleted. DiffedPlaces will provide matching (incl. deduplication, record linkage, named entity resolution) and "diffing" external data to OSM as well as hosting. Another existing tool set is the OSM Conflator web application originally implemented by Ilya Zverev. It implements extraction and schema mapping (like ATP) as well as diffing, validating and hosting. Part of OSM Conflator is the cf_audit GUI web application, which presents the diffed data to be validated by the mappers. It already gives an idea of how diffing reduces tedious manual validation. Only after several validations and communication with the community, the data is finally updated to OSM. This tool will be extended to replace Overpass and it's limited matching capabilities with a connection to DiffedPlaces. This will allow OSM Conflator to focus on validation and hosting, while the matching and diffing would be done in one place, in DiffedPlaces, where other OSM tools and data editors can also connect. One of the challenges is data matching, which is being addressed with an extended random forest based algorithm from Piech et al. 2020. Another challenge is the management of the OSM elements to be deleted. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/N7TGMA/

State of the art in combining OSM and Linked Data (sotm2024)

Sat, 07 Sep 2024 14:00:00 +0200

Thousands of Linked [Open] Data sources and knowledge graphs allow to access an enormous amount of structured interconnected data with built in interoperability. This talk explains the basics of Linked Data and offers an overview about the potential its combination with OSM has and the most popular methods available for linking, extracting, combining and querying data from OSM and Linked Data sources. Linked Data defines data structured with design principles that make it easily interoperable. Thousands of Linked [Open] Data sources and knowledge graphs around the world allow to access an enormous amount of structured interconnected data. The combination of this data with OpenStreetMap has considerable potential for valuable insights, quality control and new methods of interaction. This talk explores the basics of Linked Data and offers an overview of the state of the art in methods for mapping links to Linked Data sources and for extracting, combining and querying their data. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/A3Y3BC/

Download OSM data translated into your language using free software components and standard protocols (sotm2024)

Sat, 07 Sep 2024 13:30:00 +0200

This presentation will introduce a download service of OpenStreetMap GIS layers in English, but also in French for French-speaking areas. In addition to the translation aspect, this service is intended as a proof of concept for an approach that is interoperable, flexible and replicable: it uses open source software components, some of which are supported by OSGeo, and interoperable WMS and WFS protocols of the OGC (Open Geospatial Consortium), while providing detailed OSM data for the countries in question. While English dominates the OSM ecosystem and remains the reference language for the project, several initiatives allow non-English speakers to participate in and benefit from the project: a multilingual forum, translation of the wiki and certain self-learning platforms, translated user interfaces for applications and editors, including OSM label presets. But regardless of the technology or service used, the raw OSM data, once downloaded, is still exclusively in English, and any searching or filtering of OSM data in free GIS software such as QGIS can only be done in this language. This feature can slow down the learning process for non-English speaking OSM contributors, but more importantly, it remains a barrier to adoption by audiences outside the OSM community: for example, public services accustomed to creating/distributing/using data in the official language, or one of the official languages, of their country. This presentation will introduce a download service of OpenStreetMap GIS layers in English, but also in French for French-speaking areas, created on a voluntary basis by the association Les Libres Géographes (The Free Geographers). In addition to the translation aspect, this service is intended as a proof of concept for an approach that is interoperable, flexible and replicable, while providing detailed OSM data for the countries in question. It allows users to download all OSM data and all its labels in various GIS formats, in the form of 16 thematic or generic layers that are updated daily. It uses open source software components (PostGIS, Imposm, GeoServer, GeoNetwork, MapStore), some of which are supported by OSGeo, and interoperable WMS and WFS protocols from the Open Geospatial Consortium (OGC), making it easy to replicate the service. The presentation will be an opportunity to demonstrate these different aspects, get feedback or suggestions from the audience, and possibly discuss extending the translation to other existing OSM data download services. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/MJKAC8/

Improving data homogeneity across a country (sotm2024)

Sat, 07 Sep 2024 11:00:00 +0200

This talk aims to share the efforts of OSM contributors to improve national datasets based on experiences in the Democratic Republic of the Congo. From data analyses to the setup of crowdmapping projects through welcoming new mappers to join and writing documentation. This talk is going to introduce a number of existing tools that proved to be useful in the DRC community. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/ZHME3F/

Datenethik in der Schweiz (dgna)

Thu, 21 Nov 2024 20:30:00 +0100

Jeden Tag hinterlassen wir unbewusst Unmengen an Datenspuren. Diese Daten werden laufend durch unterschiedliche Parteien gesammelt, ausgewertet und analysiert. Dies häufig, ohne unser Wissen. Von vielen solcher Auswertungen profitieren wir direkt oder indirekt. Zugleich schlummert in solchen Datenpraktiken aber auch das Potenzial, Menschen oder Gesellschaften negativ zu beeinflussen. Die Ethik beschäftigt sich entsprechend vermehrt mit dem Bereich der Datenethik. Was macht die Nutzung von Daten fair? Wie stehen Datenpraktiken im Verhältnis zum Recht auf Privatsphäre? Was haben wir für Erwartungen an Organisationen? Wie kann jede:r Einzelne mit Daten ethisch umgehen und zur Datenethik beitragen? Diese und weitere Fragen diskutiert Nicole Pauli mit Cornelia Diethelm (Expertin für Digitale Ethik) und Veronika Ludwig (Swiss Data Alliance). Cornelia Diethelm ist Expertin für Digitale Ethik und vermittelt zwischen der Wirtschaft und den Erwartungen der Gesellschaft. Sie setzt sich mit strategischen Trends auseinander und gibt ihr Wissen auch als Studiengangsleiterin und Dozentin für Digitale Ethik an der Hochschule für Wirtschaft Zürich weiter. Sie ist ausserdem Mitglied in drei Verwaltungsräten. Veronika Ludwig ist Juristin mit Schwerpunkt im Europäischen und Schweizer Datenschutz und in der Data Governance. Sie bringt über 17 Jahre Berufserfahrung als In-House Counsel im Konzernumfeld in der Logistik-Branche und dem Bankwesen mit. Als Vorstandsmitglied der Schweizer Data Privacy Community und aktive Mitgestalterin und Datenschutzberaterin bei Swiss Data Alliance engagiert sie sich für eine zukunftsorientierte und ethische Datenpolitik. Ihr besonderes Interesse gilt der Entwicklung rechtlicher Rahmenbedingungen, die die Nutzung von Gesundheitsdaten fördern und gleichzeitig die Patientenrechte wahren. about this event: https://www.digitale-gesellschaft.ch/event/netzpolitischer-abend-zu-datenethik-in-der-schweiz/

Preparing for disasters with open map data and tools - learning through anticipatory action in Zimbabwe, Liberia and Timor Leste (sotm2024)

Sat, 07 Sep 2024 10:30:00 +0200

Historically, the open mapping movement’s disaster focus has been response, but evolving local capacity, insight, technology and partnerships mean new anticipatory action and disaster preparedness open mapping methodologies enable a transition from reactive to proactive approaches to disaster management. This talk explores key findings on the transformative role of open mapping in this topic, demonstrated by three HOT collaborations; Anticipatory Response Program in Zimbabwe, Flood Tracking Project in Liberia, and Mapping for Anticipatory Action in Timor-Leste, plus analysis of post-disaster data demand from NGO and government responders. The talk will also surface insights on how OSM communities can increase their own disaster resilience and preparedness through mapping. Building on the foundations laid by the Missing Maps project, HOT is developing partnerships, data models and mapping campaigns that augment remote mapping efforts of humanitarian mappers (largely building / road network basemaps) through work with local communities, government and other actors creating data and analysis at a community level to conduct proactive disaster management. Anticipatory Response Program, Zimbabwe In Zimbabwe, a country impacted by disasters such as floods, cyclones, and droughts, the Anticipatory Response Program (ARP) explored anticipatory response through: - Identifying gaps in anticipatory planning, preparedness, and response that could be addressed with open geospatial data and tools. - Understanding the limitations in data tools and infrastructure supporting anticipatory action. - Stimulating opportunities for joint project collaboration between community organizations, disaster agencies, and the Open Mapping hub - East and Southern Africa. - Strengthening participation and ownership. - Developing data models through stakeholder identification of information relevant to the enhancement of disaster response Data collection involved mapping relevant features to inform better response capability by Caritas Zimbabwe and other stakeholders in Muzarabani district. This was conducted via remote and field mapping using open mapping tools and updating OpenStreetMap and Mapillary in 14 wards. Features included buildings, roads, and relevant points of interest (POIs) such as health facilities, shops, markets, schools, water sources, flood-prone road sections, religious centers, and public toilets. Data analyses evaluated suitability of POIs as evacuation centers and cash voucher assistance points and evaluated proximity to communities, thus visualizing community vulnerability to disasters and contributing to local contingency planning. Specifically, this information served as input to hazard maps and Multi-Hazard Contingency Plans (MHCP) for the pilot wards, ensuring authorities are prepared for disasters, and response efforts are supported by high-quality relevant geospatial data. Tracking Flooding in Rural Liberia Coastal settlements of Liberia - 565kms of mainly lowlands, hosting mangroves, swamps and nine river estuaries - face climate risks such as flooding, rising sea levels, and coastal erosion. Coastal cities experience annual average precipitation of >500mm, causing floods and sea erosion that disrupt livelihoods and damage properties and infrastructure. HOT’S Open Mapping Hub - West and Northern Africa, iLab Liberia and OSM Liberia collaborated to address urgent needs of the Commonwealth District in Grand Cape Mount County. An open, participatory mapping approach was used with key stakeholders to accomplish: - Mapping stakeholders and climate change-related interventions - Filling gaps in existing datasets, plus visualizations and decision-making tools for government and humanitarian actors. - Increasing climate resilience awareness through focus groups, radio programs, talk shows, town hall meetings, and resources for use by local authorities, youth, and women’s groups. - Mapping building footprints, road networks, waterways, and land use and collecting field data on buildings, education, health, commerce, infrastructure, waterways, and other amenities to provide detailed information on the vulnerability, exposure, and flood hazards for more robust data analysis. Data products were developed based on requirements and use cases from the National Disaster Management Agency, Liberia National Police, Ministry of Health, Environmental Protection Agency, Liberia Water and Sewer Corporation, Liberia Land Authority, Liberia National Red Cross Society, Ministry of Internal Affairs, Liberia Institute for Statistics and Geo-Information Services, Ministry of Public Works, Liberian Hydrological Services, Liberia Geographical Society, and others. Access to reliable data analysis hinders stakeholder’s disaster mitigation, preparedness, response, and recovery initiatives. These actors can now develop resilience programs to support the people in the district and adopt tools and workflows for other affected counties across Liberia. Mapping for anticipatory action in Timor-Leste Timor Leste faces natural disasters, including cyclones, earthquakes, tsunamis, and heavy rainfall. This is exacerbated by inadequate infrastructure and many communities who, despite developmental strides, grapple with poverty and food insecurity. Local map data plays a pivotal role in addressing these issues proactively, offering crucial support to local actors in decision-making and impact-based forecasting, but was incomplete and lacking depth. The Red Cross Crescent Climate Centre and Timor-Leste Red Cross worked with HOT’s Open Mapping Hub - Asia Pacific and OpenStreetMap Timor-Leste community on mapping, community engagement, and surfacing insights into areas at risk from floods, landslides, and other climate-related hazards. After identification of priority areas based on natural disaster risks, remote mapping and field mapping campaigns created basemaps augmented with relevant local features, including specific building features indicating susceptibility to floods or other hazards, such as minimum foundation height and building materials. Alongside open geospatial data, qualitative information on community perspectives on previous disasters / responses was collected using surveys, focus groups and SketchMap. The generation of geospatial data necessary for anticipatory action was complimented by key insights, eg. on flood impacts on livelihoods and a lack of essential early warning systems. However, there is high motivation, engagement, and interest in proactive local community action, incorporating open mapping, and opportunities for extending the initiative through government and community collaborations. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/VS77B3/

Writing computer code by voice (emf2024)

Sat, 01 Jun 2024 12:10:00 +0200

What does a computer programmer do if they can’t type code? Speak it, of course! Like many programmers and heavy computer users, I suffer from chronic hand pain aggravated by computer keyboard use (often called repetitive strain injury, or RSI). After having mild symptoms for years, in 2019 my hand pain worsened from irritating to unignorable. Eventually I got desperate enough to try to learn to code by voice. To my surprise, it worked. Speech recognition technology has advanced dramatically in the past decade, but most people’s ideas about voice-driven UI are based on highly limited voice assistants like Siri or Alexa, powerful but imprecise tools like LLMs, or special-purpose dictation tools. What does a voice interface for precise control by expert users look like? A small but growing community of programmers, many affected by RSI, have been developing tools that explore this question. I use one such tool, called Talon, to control my computer, write and edit computer code, and even to write my dissertation. In this talk, I will live-demo how I edit code by voice, as well as tackling the following questions: 1. What is voice-coding like? What unique challenges does it present? 2. How do voice control systems like Talon work under the hood? 3. Could voice coding ever be *better* than typing? 4. What can we learn from all this about designing voice interfaces for expert users? Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/217-writing-computer-code-by-voice

Lightning Talks II (sotm2024)

Sat, 07 Sep 2024 16:00:00 +0200

Lightning talks are short presentations (maximum 5 minutes) about a topic related to OpenStreetMap. ## EcoMappers activities and growth in Rwanda _by Liliane Nishimirwe_ ## Hot CWG mentorship _by Benedicta Ohene_ ## YouthMappers activities and growth in Sri Lanka (2021-2024) _by Sajeevini Sivajothy_ ## #DEI in OSM - Ladies in Maps Zimbabwe _by Letwin Pondo_ ## Microgrants program in Latin America _by Maya Lovo_ ## My journey in OSM: YouthMappers Tanzania _by Iman Seleman_ Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/SYRTRW/

Working Amateur Satellites on a Budget (emf2024)

Fri, 31 May 2024 14:50:00 +0200

Always thought it was expensive to receive signals from Space? In this talk I will go through the simple homebrew antennas and cheap (around £10) receivers that you can use to get such diverse things as weather satellite images, pictures from the ISS, receive telemetry from the orbiting CubeSats, and even begin communicating with the first Amateur Geosynchronous Satellite, QO-100 where you can receive TV pictures from amateurs across the world with a rust old satellite dish and a cheap LNB. It is amazing what you can do with a piece of bent water pipe or a coat hanger! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/130-working-amateur-satellites-on-a-budget

Photobombed by a Robot Arm in space (emf2024)

Fri, 31 May 2024 17:10:00 +0200

Get ready to take a trip into space. We'll be travelling 400km up to the International Space Station, to take a look at Earth through the lens of the Astro Pi computers that were sent there in 2020. This talk will focus on what has been learnt from years of giving young people the chance to take photos from the ISS using affordable commercial hardware. There will be plenty of the amazing images that have been captured so far, along with some examples of unexpected interruptions and the challenges when you can’t actually see or touch the equipment yourself. There will also be a chance for the audience to join in with an interactive game based on some of the photos. You'll need an Internet connected device to join in. Ground replicas of the actual hardware will also be on show and available for inspection. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/165-photobombed-by-a-robot-arm-in-space

Field-FX: Digital art, Demos and Prizegiving (emf2024)

Sun, 02 Jun 2024 19:00:00 +0200

Music and animation, art and code, all come together in a demoscene tradition with a history of over 40 years. It's generative art, storytelling, creative coding and more, with contributors of diverse skill levels from across the globe. We're having a party on Saturday night, and we're going to have a prizegiving ceremony and recap of the winning entries on stage on Sunday. Prepare to be awed! You can take part too! Check out field-fx.party online to find out how. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/378-field-fx-digital-art-demos-and-prizegiving

Badge Talk (emf2024)

Sun, 02 Jun 2024 15:20:00 +0200

In which the badge team have a natter about the tildagon badge, the hexpansion format, the development process, pitfalls and panics along the way. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/449-badge-talk

So You Want To Hack On Rail Data: What's out there, and what can you do with it? (emf2024)

Sun, 02 Jun 2024 16:30:00 +0200

The British rail industry publishes a lot of open data: there's at least 18 distinct data sources, plus the ones I'm forgetting. This'll be a whirlwind tour of most or all of those sources, with a view at helping people who would be interested in playing with train data but don't know where to start. You'll (hopefully) leave with some ideas for what you could build (if you didn't already have some), know what data sources you'd need, and have enough context to understand those sources' documentation. I will assume software experience (ie there'll be slides with JSON, XML, and various less pleasant things) but not rail experience. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/397-so-you-want-to-hack-on-rail-data-whats-out-there

Foxdog Studios: Robo Bingo (emf2024)

Fri, 31 May 2024 20:30:00 +0200

Bingo meets tech in an interactive, smartphone powered comedy act like no other. Experience a whole new side of bingo created by Foxdog Studios (Lloyd & Pete) and their robotic bingo mascot, Mr Bing. Expect chaos, games and laughs. Join the fun without leaving your seat as bingo cards are beamed to your phone using their own locally hosted web-based software. Claim your prize by tapping the button and blast “Bingo!” out the main speakers (but be ready to go to bingo jail if you cry wolf). Full of lo-fi robotics and novelty instruments, this hit show is coming from the Edinburgh fringe to Electromagnetic Field. “The lo-fi tech wizardry is ingenious, and it’s irresistible fun to play along” Guardian As seen on CLICK BBC and THE PADDOCK Channel 4 Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/286-foxdog-studios-robo-bingo

Seams Like Magic: A primer on sewing basics (emf2024)

Fri, 31 May 2024 12:40:00 +0200

At EMF 2022 I ran a drop in sewing workshop. Whilst it was popular, one question that I didn't have time to answer properly was the broad: "I want to make my own clothes: where do I start?" I'd like to answer just that question in this talk. I'll cover things like: tools/equipment you need (and what you don't!), how to read a sewing pattern, key things to remember and suggestions for easy projects to get started with. I've previously worked costuming for theatre and designing/making wedding dresses. Whilst my main focus has been on garment sewing, I'm happy to help people with their wild projects: how to make your projects waterproof, how to make wacky shapes and how to work with weird fabrics are all things I can help with. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/258-seams-like-magic-a-primer-on-sewing-basics

The Tech behind the Tennis - A peek under the hood of a Grand Slam Tennis Tournament (emf2024)

Sat, 01 Jun 2024 12:50:00 +0200

For two weeks every summer, half a million people attend the oldest and most prestigious Tennis Tournament, with another billion people following from afar. Underneath the pristine courts of Wimbledon, a massive technology operation underpins almost every aspect of the event, from the grass growing, to the scores appearing on screens around the world. This talk will cover the many interesting ways that technology supports this huge live event as well as a behind the scenes peek of the IBM operation in the broadcast centre. IBM has been the Official Information Technology Partner with Wimbledon since 1990. Presenter works for IBM as part of the Wimbledon team Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/234-the-tech-behind-the-tennis

Being Elliot Carver: How to run your own Cable TV station (or network) (emf2024)

Sun, 02 Jun 2024 18:20:00 +0200

There's nothing good on TV, and streaming curses you with the Paradox of Choice. So why not be Elliot Carver for a day and run your own Cable, satellite or UHF TV station - or even a whole network? With a few low-cost computer boards (Raspberry Pi's work but others are fine too) and video modulators, you can recreate the wonders of 1990s Cable TV in your own home, flat, or living room. I'll also talk about going further and how I recovered and resurrected a General Instrument ACC-4000 headend controller PC and used it to configure a small fleet of cable boxes. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/203-being-elliot-carver

Remote controlled Chaos Cart - How to motorise trash. (emf2024)

Fri, 31 May 2024 15:40:00 +0200

Using a fad of the 2010s and the UK's most popular river dweller the Leeds hackspace has combined 2 hoverboard wheels with a shopping trolley to create a monstrosity. Armed with a PA system, rally lights, under glow and 2 car horns it’s the perfect centre of chaos for protests or your ALDI shop. During our presentation, we invite the audience to delve into the fascinating world of motorising random objects and the art of upcycling, along with the myriad challenges we encountered along the way. From designing our own lithium-polymer batteries to countless iterations and rigorous testing, we'll discuss the intricacies of dealing with electromagnetic interference, experimenting with various motor controllers, and even designing our own from scratch. We want people to experience the shenanigans we went through and the fun we had along the way to hopefully get more people into whacky-wheeled…..wehicles. But it's not all talk! We're excited to demonstrate the trolley live, allowing you to experience first-hand the joy and sheer mayhem it brings. Our goal is to inspire you to embark on your own wacky-wheeled adventures, learning from our missteps and benefiting from our advice and tips. No Project is ever truly done lastly we want to look into the future: The intended use cases and how we aim to share our knowledge and plans with the wider community. Our commitment to openness and collaboration means that anyone bold enough to motorise anything around them can benefit from our experiences and insights. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/421-remote-controlled-chaos-cart-how-to-motorise-trash

Infrastructure Review (emf2024)

Sun, 02 Jun 2024 19:00:00 +0200

Members of the EMF infrastructure teams (network, power, lighting, video, telephony) will talk about how we made the event happen this year. There will be graphs. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/552-infrastructure-review

“Subsea internet cables could help detect earthquakes” (denog16)

Mon, 18 Nov 2024 15:00:00 +0100

There are plenty of seismic stations on land helping detect and record earthquakes but very little deployed in our sea’s and oceans. Marine seismic detectors have traditionally been expensive, unreliable and not widely deployed. In recent years, research has shown that new and existing submarine cables can be used to detect seismic activity. Given that two thirds of our planet is covered by Oceans, this new development provides a great opportunity to improve our knowledge of the geological activity of our planet. Additionally, an early warning of an imminent Tsunami can save thousands of lives. This presentation will introduce the recent developments in sensing on Submarine Fibre Optic Cables and introduce the key sensing technologies employed. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/SVMJWM/

An engineer’s guide to parenthood (emf2024)

Sun, 02 Jun 2024 13:20:00 +0200

A lot has happened at the other end of life since the last EMF camp; pregnancy, birth and adjusting to life with a tiny human. I am an engineer, so when two thin blue lines appeared and I found myself thrown into the chaos of pregnancy and parenthood, I discovered that the best way of dealing with it was to use the engineering approach that was already ingrained in me. “An engineer's guide to parenthood” if you will. Some bits worked (some less so!) and that’s what I want to share with you this year, following on from my 2022 talk, "An engineer's guide to grief". Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/60-an-engineer-s-guide-to-parenthood

A country you can't put in a box. (emf2024)

Sun, 02 Jun 2024 17:50:00 +0200

A talk about the difficulties of geospatial analysis when the country you are interested is on the edge of the world map. We'll go over some background before showing what happens when you try and draw a box around this country and the issues this causes everyone from blury satellite views to navigation failing. And why it happens. The east and west edge of the classic Eurocentric world map, with the prime meridian down the middle, are both the same place, this causes some interesting effects. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/96-a-country-you-cant-put-in-a-box

Lessons learned Open Sourcing the UK's Covid Tracing App (emf2024)

Sun, 02 Jun 2024 11:00:00 +0200

On the 7th of May 2020, six-weeks after lockdown was announced, the source code for the UK's COVID-19 contact tracing app was published on GitHub. This is the story of how Open Source helped save lives. Come and learn about how we convinced the NHS to open source the app. What pitfalls there were. How we allayed security concerns. What went wrong. How we dealt with trolls. And why it was so important to be as transparent as possible. This talk asks if we did the right thing? Should have done something differently? Could we have been more open? Were the risks justified? Was being Open Source a help or hindrance? This is a personal recollection of a very strange period in health-tech history. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/16-lessons-learned-open-sourcing-the-uks-covid-tracing-app

How we make videogames (emf2024)

Sat, 01 Jun 2024 17:30:00 +0200

I am the creative director and programmer at Hollow Ponds, a videogame development studio. I'm going to briefly show some of our earlier games for context, and then talk about a number of interesting things about the development of our forthcoming game FLOCK - a multiplayer game about exploring a big wild landscape on the back of a giant bird, seeking out strange creatures, and charming them into a big flock. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/207-how-we-make-videogames

Run your own fucking infrastructure - 2024 edition (emf2024)

Fri, 31 May 2024 12:40:00 +0200

In a 2012 talk about running your own infrastructure I made some predictions on the future and made some claims. A long time has passed and let's see what came true and what was not so correct. After that talk we also started building our own infrastructure. I will show what we are running, what you can run and share experiences running infrastructure for larger groups of people. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/24-run-your-own-fucking-infrastructure-2024-edition

London to Brighton, by train and on foot (emf2024)

Sat, 01 Jun 2024 13:00:00 +0200

During the pandemic, trains got weird for a while. We weren’t quite sure whether it was safe to travel collectively, and the impacts of that difficult time continue to shape our railway network to this day. Meanwhile, many of us were exploring our own, hyperlocal neighbourhoods on foot with obsessive levels of depth that we never otherwise would have got around to. (Was I the only one who highlighted every street I walked in a London A-Z to see if I could get complete coverage?!) In 2021, I did a design-based MA all about railways, railway infrastructure, and what it means to travel and live communally. To do this, I walked all the way from London to Brighton (in sections), following the railway line as closely as possible. This is a talk about what I saw and what I thought about, and will hopefully be enjoyed by fans of trains, hiking, community and travel. (And anyone else who fancies a sit down, I’ll try and make it interesting, I promise) Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/69-london-to-brighton-by-train-and-on-foot

Return loss problems associated with faster optical networks (denog16)

Tue, 19 Nov 2024 10:00:00 +0100

As communication speeds increase, a new problem of communication errors caused by "return loss" has become apparent in optical connector connections. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/LYC7PW/

Thomas the Privatised Tank Engine 30 years on (emf2024)

Sun, 02 Jun 2024 17:30:00 +0200

It has been 30 years since Private Eye released this biting satire of the privatisation of British Rail. Today, the railway system is now part public part private, leaving plenty of confusion for passengers. Who runs your local station? Who sets the rail fares, and who covers your refund? And where the hell does HS1 and HS2 fit into all this? I will take you through how the UK rail organisations are structured, who does and owns what, and how does this affect passengers? - What's the difference between Network Rail and National Rail? - How does split ticketing work? - What did Labour announce in April? And most importantly: Who should I be angry at when I'm crammed in sideways on a delayed Sunday afternoon train to Leeds? No knowledge of the rail industry is required to enjoy this talk, but experts will find it depressing. I may swear, mostly about MPs. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/375-thomas-the-privatised-tank-engine-30-years-on

NIS2 Implementing Act for Digital Services – EU regulation maze revisited (denog16)

Tue, 19 Nov 2024 09:00:00 +0100

Following up on last year's introductory talk about NIS2 and the cybersecurity regulations, we'll look at the technical and methodological requirements specifically for digital service providers. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/Y88EBE/

Engineering lessons from a 300 year-old poem (emf2024)

Fri, 31 May 2024 17:50:00 +0200

There are three things about this poem that will surprise you. First: though written 300 years ago, it contains superb guidance on being an engineer or maker of any kind. Second: you’ll immediately recognise some of its best lines. Third: its author was an indomitable twenty-three year old hunchbacked dwarf, who had educated himself due to religious persecution. I hope you’ll take away some maxims that’ll stick with you and inform your work. And if you’re someone who’s never ‘got’ poetry, this may be the poem that unlocks it for you. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/218-engineering-lessons-from-a-300-year-old-poem

Analyzing network reliability up to 800G - Impact of SNR thresholds on BER for Coherent (16QAM) and Non-Coherent (PAM4) high speed transceivers under environmental variations (denog16)

Mon, 18 Nov 2024 17:30:00 +0100

This presentation investigates the proximity to a low Signal-to-Noise Ratio (SNR) threshold that can still maintain a tolerable Bit Error Rate (BER) in 100G / 400G / 800G network links. Additionally, we account for factors such as temperature and cable length to predict the duration for which a reliable network connection can be sustained between transceivers. The analysis, based on data retrieved using a Flexbox, focuses on comparing the reliability of coherent (16QAM) and non-coherent (PAM4) transceivers, with a detailed discussion on the implications of these technologies on network performance. For a better understanding of the correlation between these factors, Machine Learning techniques were used. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/KBFMT3/

OSMF board – what are they even doing? (sotm2024)

Sat, 07 Sep 2024 15:30:00 +0200

If you have ever wondered what OSMF and OSMF board are doing and why they exist it is a good presentation for you. Will include a brief overview (as promised in the title) of what they are doing, reason for their existence and why you may want to care about them. And why you may want join the board or one of working groups. Presented by OSMF board member. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/8XCQJB/

From shared broadcast domain into fully routed network without renumbering (denog16)

Tue, 19 Nov 2024 12:00:00 +0100

We had to move a couple of hundred machines from a big Layer 2 broadcast domain into a fully routed network. We also increased the bandwidth available for each server by mounting a new NIC into each server, To avoid synchronisation with service owners, we did not renumber hosts. In addition, there is connectivity to the large Layer 2 domain that is still in place and still has a few thousand hosts in need of migration. In this talk you will learn how we engineered this migration, minimised downtime and ensured the documentation of our network is always up to date. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/WNS7MA/

Certification of Network Products for Application in German Public Mobile Networks (denog16)

Mon, 18 Nov 2024 17:00:00 +0100

Starting with 1st of January, 2026, operators of public mobile networks in Germany are obliged to employ certified network products within their networks. The obligation affects all network products, which are newly introduced into public mobile networks and provide functions, for which a security assessment document has been approved by the BSI. This also includes network products, which provide 3GPP-specified functionalities and are listed in the list of critical functions by the Federal Office for Information Security (BSI) and the Bundesnetzagentur (BNetzA). The talk will address the necessary steps by operators of public mobile networks to successfully include certification of network products into their procurement and onboarding processes. Therefore, the talk will showcase the technical approaches taken in the certification process and how they are intended to interplay with provider processes. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/BHTKAJ/

Introduction of RPKI at the Deutsche Telekom global Network AS 3320 (denog16)

Mon, 18 Nov 2024 11:00:00 +0100

Introduction of RPKI at the Deutsche Telekom global Network AS3320 was finalized in February 2024, since 22nd February 2024 AS 3320 rejects RPKI invalid Prefixes. This presentation talks about the Project phases, the implementation and experiences we made during the introduction of RPKI on a global Tier-1 ISP Network. This includes some technical details and organizational view for the continuous RPKI operation. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/ACGCDS/

Geber, Newton, Thoth: What Alchemy Tells Us About Modern Science (emf2024)

Sat, 01 Jun 2024 16:50:00 +0200

Alchemy is a misunderstood art. From Hellenistic Egypt through to the modern day, the story of alchemical science teaches us about how science has changed in the last 2000 years and how it has stayed the same. The influence of this ancient science resonates through our modern world in scientific theory, misconceptions and popular culture. Learn how ancient alchemists formed accurate predictive models of the material world around them, How the Victorians lied to you and possibly even the secret to making gold. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/151-geber-newton-thoth

DDoS mitigation state-of-the-union (denog16)

Tue, 19 Nov 2024 11:00:00 +0100

DDoS attacks and attackers are out there today, and likely won't go away anymore. This talk will outline some current available technologies and developments in the area of DDoS countermeasures, which are designed to make DDoS detection faster, provide better information and decision criteria on what is currently going on in a network, and what is required to mitigate attacks with as few as possible unwanted side effects. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/TG9GBD/

Women Vs Hollywood (emf2024)

Sat, 01 Jun 2024 17:20:00 +0200

Why, given that 50% of screenwriters in the silent era were women and that there were quite a few female directors and producers, did women get pushed out of filmmaking and never really come back? What happened in the studio era, and why has nothing changed in all the waves of forward movement since? Why, today, do the number of female directors hover around the 10% mark, even after #MeToo and #TimesUp? Female A-list stars still earn only about half as much as their male counterparts, partly because only about 12% of leading roles go to women. Films made by or for women get smaller budgets, smaller releases and smaller marketing spend than male-made equivalents, and the picture is much, much worse for women of colour. So why is this and how do we change things? And why is Barbie such an important step forward? Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/121-women-vs-hollywood

IPv4 over IPv6 networks (denog16)

Mon, 18 Nov 2024 15:20:00 +0100

In this session we are going to cover usage of RFC8950 (IPv4 NLRIs with IPv6 Next Hop) Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/BWWEJ7/

OGRE tech and off-grid living (emf2024)

Sat, 01 Jun 2024 11:00:00 +0200

A talk looking at Off-Grid Renewable Energy technology and off-grid living. This presentation is based on 20 years of off-grid living experience and showcases case studies from an off-grid eco-village from 2000 to 2018. The talk aims to share some of the knowledge gained and look into the possibilities for future renewable off-grid living opportunities and how new technologies might be used to improve convenience and efficiency. Topics covered will include the practical basics of harvesting, storing and using renewable energy as efficiently as possible, new ideas and practical examples, micro-hydro, solar, wind-power, batteries, electrics and wiring, efficiency, smart-micro-grids, renewables and more...... Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/159-ogre-tech-and-off-grid-living

VPP: A 1Tbps+ router with a single IPv4 address (denog16)

Tue, 19 Nov 2024 14:30:00 +0100

In this talk, we explore the changes needed to convert a set of fully open source amd64 based VPP routers running in AS8298 to be able to use exactly one IPv4 and IPv6 address in an OSPFv3 and iBGP configuration. The use of /30 or /31 IPv4 transit networks between routers is a thing of the past, paving the way to conserve IPv4 addresses! The talk discusses the changes made to VPP and a popular routing suite Bird2, to enable both Babel and OSPFv3 to route traffic without using IPv4 transit networks, including operational notes how the author rolled this out in AS8298. Finally, the author will make good on his promise from previous DENOG, predicting a 1Tbps VPP machine. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/YGU3SW/

Data is plural (emf2024)

Sat, 01 Jun 2024 18:00:00 +0200

I once accidentally got YouGov to poll whether it should be ‘the data is’ or ‘the data are’. Whether you favour 'are' or 'is', in many ways, data is plural. When we talk about data, we’re talking about different things, contexts, needs, and perspectives. Thinking of ‘data’ as a singular thing brings risks. We always have to set data in a more plural context and can never think about ‘just’ the data. And data we think of as being about us – singular, as individuals – is often about a plurality of others, and its value – to governments and tech companies – is in plurality or aggregate. All of this means we need to rethink our approach to data and take a relational, collective and democratic - a plural, political and human – approach. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/398-data-is-plural

Carrier Scale DNS - DNS@DT (denog16)

Tue, 19 Nov 2024 15:30:00 +0100

This talk will give an overview of DTs DNS platform and the challenges arising from carrier scale DNS deployments. It will cover the architecture and new requirements as well as scalability and the implementation status and impact of encrypted DNS (e.g., DoH/DoT and DNS discovery). The presentation will also address shortcomings of the new discovery mechanisms which are currently being standardized within IETF. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/GJGBFQ/

Instant Overflow Injection - Shifting traffic to overflow providers in a moment's notice (denog16)

Mon, 18 Nov 2024 15:30:00 +0100

Single peering interfaces can get loaded during peak usage and/or failure scenarios while the network as a whole still has spare capacity. As remedy we can use upstream via our so-called overflow providers. In normal operation mode we will prefer direct peerings and only use overflow providers as fallback. For events like the European Football Championship we want to be able to shift traffic to those fallback routes with low effort, low wait times, high granularity and high confidence. We have implemented a service that injects on-demand copies of the existing fallback routes with the preferences tuned to let them be preferred over the "normal" peering routes. The routes are advertised via BGP sessions to our routers and are not distributed any further. The service is using GoBGP and running in Kubernetes. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/NCYK9Q/

Submarine cables - lifelines of countries and continents (denog16)

Mon, 18 Nov 2024 14:30:00 +0100

In recent years, we’ve heard a bit more about submarine cables, mostly related to fiber cuts. Given that they’re lifelines of countries or even continents, they are important, yet we know little about them. So, what’s the rationale behind the large selection of submarine cables, often on the same route? Is it just about resiliency and shorter routes, or are there other differentiators? This talk will provide insight into the construction, operation, maintenance, and selection of submarine cables, using the connections between the United Kingdom and Continental Europe as an example. We will dive into what it takes to construct a submarine cable, discover why and how it breaks, and provide guidance on what to consider when purchasing. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/CKRBRG/

How to make a puzzlehunt (emf2024)

Fri, 31 May 2024 19:10:00 +0200

What do semaphore, octopuses, Scrabble, rotary telephones and Microsoft Paint have in common? If you've been to previous EMFs, you might recognise these as some of the themes for our puzzles! We are Dreamcat and we are a group of friends who made our first puzzlehunt for EMF 2018 and haven't stopped since. We love the combination of escape room, treasure hunt, video game, and just a dash of immersive theatre. We want to share that enthusiasm with you, talk about our top mistakes from the last 6 years and what we learned, and hopefully inspire you to go make your own puzzlehunts. Come along to learn: - How to co-opt serious IoT tools for frivolous escape room purposes - Why Portal is still the best video game ever made - How hard, actually, is “too hard” - Exactly how many paperclips were harmed in the making of this year's experience No spoilers for this year's puzzlehunt. Unless you come talk to us at the bar after. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/101-how-to-make-a-puzzlehunt

Sending text messages through space (emf2024)

Fri, 31 May 2024 12:00:00 +0200

When we’re out and about, text messages (and also voice calls, mobile data etc.) sent and received through our everyday smartphones are all routed through fixed land-based ‘cell tower’ antennas no more than a few km distant, which form what we might term a ‘Terrestrial Network’ (TN). In rural areas, we often lose cellular wireless signal entirely, even within highly technologically advanced economies such as the UK, EU, US etc. We then find that we are unable to send or receive text messages, even emergency messages. In the 1990s, visionary scientists and engineers developed alternative voice and messaging systems, using satellites as their ‘flying’ cell towers. We will discuss an example of such a pioneering network, called Iridium, which has operated successfully from the late 1990s right up to the present day. Today’s scientist and engineer visionaries are now proposing that the same ‘space-based’ capabilities could be added to our everyday smartphones, without needing to purchase a separate satellite-messaging device. This would allow our phone, when necessary, to switch from the land-based TN to the space-based ‘Non-Terrestrial Network’ (NTN). In this presentation we will discuss some of the technical challenges in achieving this ‘Direct-to-Device’ (D2D) satellite messaging feature, and some of the solutions which are being proposed, and even already being tested for real. One of the leading players in this space is Starlink, so buckle up for a wild ride! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/40-sending-text-messages-through-space

Fighting Allergies with Pollen Forecasting (emf2024)

Fri, 31 May 2024 14:30:00 +0200

Many people rely on pollen forecasts to know when their allergies are likely to cause trouble. So when the main source of them in Finland scaled back after losing funding, a replacement was needed. Hear about the process of starting at zero knowledge of pollen forecasting, discovering the available models and data, and putting it together to get 3-day forecasts for any location in Europe, as a hobbyist with some help from the Finnish Meteorological Institute. Includes learning about atmospheric science, academic data, coordinate projections, Rust and more. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/414-fighting-allergies-with-pollen-forecasting

DENOG16 Closing (denog16)

Tue, 19 Nov 2024 15:40:00 +0100

Thank you for joining us for DENOG16, join us for a quick review and some announcements before heading home! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/P8QBJW/

SCION: Secure Path-Aware Internet Routing (denog16)

Mon, 18 Nov 2024 15:10:00 +0100

SCION is a secure path-aware Internet architecture, designed to achieve high resilience to routing attacks and path selection for Internet users and operators with safety critical traffic such as in financial and healthcare sectors. RPKI/ROV is useful for origin validation but does not validate paths, ASPA is still an evolving technology, whilst BGPSEC has yet to be widely deployed and needs explicit router support along a path to achieve the full benefits. SCION has commercial and open-source implementations and is in production use by the financial services and healthcare industry in Switzerland and internationally. This includes the SCION Research & Education Network (SCIERA) which includes connections to OVGU Magdeburg. It is also currently being evaluated for use in government, power utility, aviation, military and other applications, with a number of vendors interested in implementing it in their products. This talk will discuss the SCION design and architecture, its trust model, how it can be deployed, as well as some deployment experiences to-date. It will also discuss the IETF/IRTF work, and the community efforts supported by the SCION Association to encourage further deployment and development. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/GZAQ7E/

End of Day 1 (denog16)

Mon, 18 Nov 2024 18:00:00 +0100

That's a wrap for day1, we'll share all details about the social and how to get there! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/38JPGU/

Hack The Plan: How I Made a Career out of Not Knowing What I Want To Be When I Grow Up. (emf2024)

Sun, 02 Jun 2024 15:00:00 +0200

"So what do you do?" Everything. ────────── As a kid I couldn't decide what I wanted to be when I grew up. I still can't, but over the past twenty years I've turned that into a superpower. In this talk I'll tell you how I hacked the idea of a standard career and managed to combine skills from different fields and specialties, leading to some unique roles and opportunities. If you love learning and constantly adding new tools to your intellectual toolkit, you’ll find that being a 'nerd of all trades' is not just fun—it’s the best way to live. The only downside? When someone asks "so what do you do" at parties, you'll never quite know what to say! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/31-hack-the-plan

Modern Metro Networks: Everything, Everywhere, all at Once (denog16)

Tue, 19 Nov 2024 14:00:00 +0100

Metro networks are arguably one of the more challenging areas in carrier network engineering: Feature creep, space constraints, harsh physical environments and the requirement to deliver all services everywhere, for cheap. At Wobcom AS9136 we _just_ wanted to modernize the transport network. Two years later we ended up redesigning just about everything: Putting white box routers into outdoor shelters, moving subscriber services to the edge and rethinking business CPEs. This talk covers our journey and what design considerations lead us where we are. We will explore a wide range of linked topics: - Environment (Power, Space, Temperature) - Optical problems and solutions (OWDM, OpenZR+) - Network ASICs - Network Operating Systems - Protocols (MPLS, SR, EVPN, etc.) - Subscriber Management - Full Automation - CPEs and their management Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/ZDGXDY/

What could possibly go wrong with FTTH - ask the Swiss! (denog16)

Mon, 18 Nov 2024 16:30:00 +0100

The so-called ‘Glasfaserstreit' (fibre optic dispute), an antitrust case, successfully prevented the intention of the incumbent to monopolise the Swiss fibre optic network. As a result, >2 million households can currently subscribe to a symmetrical 25 Gigabit FTTH connection for ~€70 per month. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/DJAA3V/

How to escape from a WW2 POW Camp (emf2024)

Fri, 31 May 2024 12:00:00 +0200

During WW2, British plane crews sometimes found themselves imprisoned behind enemy lines. With only light punishments for escape attempts, some of these prisoners worked on incredible schemes to get back home. This illustrated talk will talk about these escapes, from famous ones to those that are undeservedly forgotten. It's a story of impressive creativity, of people trying to hack their way to freedom, including tunnels, dummies and an attempt to build a plane. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/359-how-to-escape-from-a-ww2-pow-camp

Podlove Web Player (subscribe11)

Sat, 19 Oct 2024 11:10:00 +0200

Der Podlove Web Player ist ein Open Source Podcast Player für das Web der seit 2012 weiterentwickelt wird. Der featurereiche Player unterstützt viele Podcast Metadaten und kommt an zahlreichen Orten der Medienlandschaft zum Einsatz. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/9LXHPD/

How to get anything from anywhere to anywhere (emf2024)

Sun, 02 Jun 2024 17:50:00 +0200

You have an object / art installation/auction purchase and want it somewhere else? What are the options of getting it there without breaking yourself? This will be a short, hopefully entertaining, overview of transport options, their financial and environmental impact and the time they take. This talk is based on examples of personal experience sending hacky art installations around Europe and the globe. By doing this many questions had to be answered for example: - how big are doors? - why acessability regulayions are great or not? - what fits in an elevator? - how much fits in a van? - what fit’s in a cargo aeroplane? There will be dragons! Along the way we’ll encounter customs officers, new excitement around rules for international road haulage, air freight and how astronomically long container shipping takes. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/193-how-to-get-anything-from-anywhere-to-anywhere

SIP Interworking between voice carriers (denog16)

Tue, 19 Nov 2024 09:30:00 +0100

Everything uses IP nowadays but some stuff is special: Telephony. The connection between customers and their provider is well known but the interconnections of providers themselves are something different. This talk covers the German market, other countries work totally different (some examples might be given). Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/HSQJC7/

Measuring the State of DNS Privacy: Past, Present and Future (denog16)

Tue, 19 Nov 2024 11:30:00 +0100

The Domain Name System (DNS) is a critical component of the Internet infrastructure, responsible for translating human-readable domain names into machine-readable IP addresses. However, the increasing centralization of DNS traffic through large content-delivery hyper-giants (such as Google), coupled with the fact that the majority of DNS communication traditionally runs over unencrypted transports (UDP/TCP), has led to increased security and privacy concerns. In this talk, I will present recent results on the resiliency and efficiency of DNS, the state of adoption of protocols that enable DNS privacy and their performance implications. I will conclude with a future outlook of a protocol design whereby traditional communications no longer have to trade performance for privacy, but can achieve the best of both worlds: privacy-enhancing DNS + secure communication on the Web. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/SLHTY7/

Creating searchable Post Office Inquiry transcripts (emf2024)

Sat, 01 Jun 2024 16:20:00 +0200

The Post Office Horizon IT Inquiry was established in 2020, led by retired high court judge Sir Wyn Williams, to investigate the “failings which occurred with the Horizon IT system at the Post Office leading to the suspension, termination of subpostmasters’ contracts, prosecution and conviction of subpostmasters”. Transcripts of the inquiry hearings are put online, but only in PDF and text format. This talk will explain my history of scraping and parsing official information, how I have taken these transcripts and converted them into a linkable, searchable, and readable version, how I automatically keep the site up to date, and why I've done this. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2024/63-creating-searchable-post-office-inquiry-transcripts

IXP Update (denog16)

Tue, 19 Nov 2024 15:00:00 +0100

News from IXPs in Germany As introduced 2021 we collect some parameters from all IXPs, which are active in Germany. This talk aggregates the Updates for all the IXPs in a common format and will be presented in a neutral way. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/Y9RMD9/

Creating a Sustainable Supply Chain in the Network Industry (denog16)

Mon, 18 Nov 2024 11:30:00 +0100

In response to increasing regulatory pressures, major telecommunications providers have begun to measure and report their carbon footprints. However, this initial step is just the beginning of a complex journey toward achieving sustainability. One of the most significant challenges these companies face is addressing Scope 3 emissions, which are generated by their supply chains and lie outside their direct control. In this presentation, I will discuss the current state of sustainability efforts within the telecom industry, with a particular focus on the intricacies of reducing Scope 3 emissions. Rather than offering quick fixes, I will explore practical approaches companies can consider, such as switching to more sustainable suppliers, collaborating closely with existing suppliers, and gradually introducing contractual clauses that emphasize sustainability. Attendees will gain a realistic understanding of the challenges involved and will be introduced to strategies that can help their organizations begin the process of reducing their supply chain's carbon footprint. This discussion aims to provide a balanced view, emphasizing that while these steps are crucial, they require time, commitment, and a willingness to engage in long-term efforts. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/7VPLSK/

Deployment of a multi vendor EVPN based data center fabric using Netbox and Ansible (denog16)

Mon, 18 Nov 2024 14:00:00 +0100

This year we deployed a new data center fabric from scratch. A requirement was to use different vendors with different nos. In addition we use Ansible for the whole configuration. This talk is about: - how to efficiently use Netbox with Ansible - using Ansible with multi vendor equipment - challenges building a multi vendor EVPN fabric from scratch Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/DSWSHD/

DENOG16 Opening (denog16)

Mon, 18 Nov 2024 10:00:00 +0100

Welcome to Berlin, welcome to DENOG16 Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/AYJDAW/

The Elephant on an Adventure: A Custom-Built Shelter for Network Devices (denog16)

Mon, 18 Nov 2024 10:30:00 +0100

We take you along on our adventurous journey through the design and implementation phases of a custom-built outdoor cabinet, from conception to completion, sharing what we’ve learned in the process. While building a new fiber network from scratch, Eurofiber faced a dilemma: We needed to install network devices in the great outdoors of Berlin’s heating power plant sites, but your typical data center devices wouldn’t fit in the standard telco cabinets available on the market. For our purposes, we require full-depth racks, access from both sides, and active cooling. So we could either go for smaller, hardened outdoor equipment, which limits the choice of devices. Or we’d have to buy concrete data center containers the size of a garage, which are larger than we need, take more bureaucracy to build, and are also expensive. To bridge this gap and keep the costs reasonable, we designed our own micro-datacenter, basically a larger street cabinet tailored specifically to our requirements: It provides active cooling, front and rear access, and fits full-depth devices while providing redundant power and sufficient protection from the elements. This adventure took us deep into the engineering world of the infrastructure required for operating network devices. Have you ever had to consider cooling capacities, battery temperatures, air-flow velocities, or noise emission laws? We take you through the design process as well as the lessons we learned on the construction site and the operational experiences after finally taking the network into production. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/8GNVX9/

The Journal of Importing Open Data Address in Taiwan into OpenStreetMap (sotm2024)

Sat, 07 Sep 2024 14:30:00 +0200

Importing a government-release open data dataset is an important data source for OpenStreetMap. I will talk about the experience of the OpenStreetMap Taiwan community importing tasks. I will describe the methods and the challenges we face during the whole import process. We have already dealt with 9 counties and cities' address datasets, and looking forward to dealing with more datasets released by other local government agencies in the future. Importing a government-release open data dataset is an important data source for OpenStreetMap. Most of the time you have to judge if the data quality is good enough to do so, and once you decide to import, you have to convert the dataset's field into the correspondent tags of OpenStreetMap. I will talk about the experience of the OpenStreetMap Taiwan community importing the open data datasets of addresses from the Taiwan government. I will describe the methods and the challenges we face during the whole import process. We have already dealt with 9 counties and cities' address datasets, and looking forward to dealing with more datasets released by other local government agencies in the future. I will report 6 cities and 3 counties importing address tasks. And talk about the experience of previous import tasks, like importing ETC tolls, public bicycle stations, bus stops, etc. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/ZVVQTA/

Newcomer Session (denog16)

Mon, 18 Nov 2024 09:30:00 +0100

Welcome to DENOG, if this is your first event, feel free to join us to learn everything about the event, the community and more! Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog16/talk/VWX3FM/

Meet the OSMF Working Groups (sotm2024)

Sat, 07 Sep 2024 13:30:00 +0200

The OSM Foundation is kept running with the help of many volunteers. They look after our servers, the data, the community, the conference, membership and much more. In this session, some of our working groups will introduce themselves. Hear about what they do and how you can help. There will be also plenty of time to ask questions. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/HS8SVU/

OpenStreetMap and the GDPR (sotm2024)

Sat, 07 Sep 2024 11:30:00 +0200

The privacy that OpenStreetMap gives to users in its software and programming interface has lagged behind the requirements of the European Union’s General Data Protection Regulation in some respects. We are now taking steps to remedy this and the changes that mappers and API clients will see are discussed here. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/EBMVWS/

MapLibre Tiles: A Next Generation Vector Tiles Format specially designed for OSM data (sotm2024)

Sat, 07 Sep 2024 11:00:00 +0200

MapLibre Tiles (MLT) is a new vector tiles format which offers a significant tile size reduction and accelerated decoding performance compared to the de-facto standard Mapbox Vector Tiles (MVT). MLT also adds support for missing features like nested properties, linear referencing and M-values. Our evaluation against MVT on a OpenMapTiles schema based OSM tileset shows a reduction in tile size of nearly up to 80% with even faster decoding times. This talk explains how MLT can be used in combination with OSM data and the advantages it offers. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/T3CXBD/

Cloud-native OSM for Visualization & Analysis (sotm2024)

Sat, 07 Sep 2024 10:30:00 +0200

[Cloud-native approaches and formats](https://cloudnativegeo.org/) are increasingly becoming the defaults for geospatial data analysis, visualisation and distribution. Standards like STAC and formats like GeoParquet, FlatGeobuf and PMTiles are being adopted to meet high volume and performance needs. OpenStreetMap can take advantage of these new approaches to increase adoption, interoperability and solve analysis and visualisation problems that were previously complex. This talk will discuss a few ways to bring cloud-native formats to OSM use-cases and present lessons on building new applications that take advantage of these improvements. Particularly, we will discuss how to use cloud-native approaches to improve OSM validation and change visualization efforts. OpenStreetMap data is core to projects used by millions of users worldwide. With the increase in volume of data, developers are turning to cloud-native approaches to efficiently manage geospatial operations and visualizations. The primary OSM data distribution are currently Shapefiles, GeoJSONs, Raster and Vector tiles, and OSM specific formats like osm and osc. What are the possibilities of other formats like GeoParquet, FlatGeobuf and GeoArrow? How can these formats improve existing workflows in OSM and allow users new ways to work with OSM data? How can we enable interoperability with other datasets and tool ecosystems? These are some of the questions we will address in this talk. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/BXGLWA/

Protecting Web Applications with Project Foxhound (god2024)

Wed, 13 Nov 2024 16:25:00 +0100

Recent developments in web technologies have seen a paradigm shift from monolithic server-based applications to REST-based microservices with feature-rich browser-based frontends. This progression has brought with it novel classes of security flaws. In this talk we review how client-side variants of injection vulnerabilities such as cross-site scripting (XSS), cross-site request forgery (CSRF) and the recently discovered client-side request hijacking, arise and how traditional defense mechanisms are ineffective. We summarize recent research in this area which shows that such issues are widespread and can have a diverse range of consequences. We go on to show how dynamic taint-tracking has proved to be an effective technique for the discovery of vulnerabilities in client-side JavaScript. The initial overhead in implementing tainting is, however, extremely high, as it typically involves delving into the inner workings of modern web browsers and JavaScript interpreters. We show how Project Foxhound (https://github.com/SAP/project-foxhound/) can help to reduce this burden by providing a flexible, open-source tool which can be fully integrated into browser automation frameworks such as Playwright. Foxhound is gaining traction in the community as the go-to tool for client-side vulnerability studies. We finish the talk by showing how Foxhound can also be used in privacy studies, an update on upcoming features, and how the community use and contribute to the project to help build a safer web! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

The Crucial Role of Web Protocols and Standards in Digital Wallet Ecosystems (god2024)

Wed, 13 Nov 2024 10:15:00 +0100

In the coming years, all EU member states will be required to provide their citizens with a digital identity wallet, as mandated by the European Union. The EU Digital Identity Wallet (EUDI Wallet) represents the largest implementation of its kind to date and brings with it significant challenges, particularly in terms of security, privacy, and interoperability. To address these challenges, the EU has chosen to leverage open standards widely adopted in the web ecosystem — such as OpenID for Verifiable Presentations (OpenID4VP) based the widely-used web standard OAuth 2.0, and Selective Disclosure JWT (SD-JWT) built on the JSON Web Token (JWT) framework. However, wallet ecosystems operate quite differently from the traditional web, requiring adaptations to these protocols to meet the unique demands of secure, decentralized identity management. This talk will provide a comprehensive overview of the EUDI Wallet's architecture and the key challenges posed by adapting native web protocols for wallet ecosystems. It will also explore the crucial role browser vendors will play in ensuring the security and smooth functioning of this new digital identity landscape. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Modern solutions against Cross-Site Attacks (god2024)

Wed, 13 Nov 2024 17:00:00 +0100

Web security is increasingly an opt-in approach, leaving developers with both the opportunity and the responsibility to protect their applications. This talk will explore why and how developers can secure their sites against evolving threats. We'll delve into the nuances of cross-site leaks (xs-leaks) and discuss the Cross-Origin Resource Policy (CORP) as well as the abstractions provided by. Learn how these tools can empower you to build custom defenses and proactively safeguard your web applications. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

The Debian OpenSSL bug and other Public Private Keys (god2024)

Wed, 13 Nov 2024 13:40:00 +0100

In early 2024, hundreds of DKIM setups still used cryptographic keys vulnerable to a bug from 2008 in Debian's OpenSSL package. Vulnerable hosts included prominent names like Cisco, Oracle, Skype, and Github. In 2022, it was discovered that printers generated TLS keys that could be trivially broken with an over 300-year-old algorithm by Pierre de Fermat. Vulnerabilities in public/private key generation are amongst the most severe ones in cryptographic software. The speaker has developed the open-source tool badkeys, a tool to check cryptographic keys for known vulnerabilities. The talk will cover some of the findings and plans for future improvements in badkeys. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

GenAI im Threat Modeling (god2024)

Wed, 13 Nov 2024 12:30:00 +0100

Viele Teams stehen vor der Herausforderung, beim Threat Modeling relevante Bedrohungen zu identifizieren, insbesondere wenn nur wenig Security-Expertise vorhanden ist. Die Auswahl und Bewertung von potenziellen Risiken kann für Nicht-Experten schwierig sein. Dieser Lightning Talk zeigt, wie Generative AI (GenAI) hier unterstützen kann, indem sie Bedrohungsszenarien basierend auf bestehenden Daten und Modellen vorschlägt und hilft, erste Entscheidungen zu treffen. Der Vortrag gibt einen kurzen Überblick, wie GenAI als Hilfestellung den Threat-Modeling-Prozess effizienter und zugänglicher machen kann - und welche Einschränkungen es gibt. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Closing (god2024)

Wed, 13 Nov 2024 17:25:00 +0100

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Network Fingerprinting for Securing User Accounts - Opportunities and Challenges (god2024)

Wed, 13 Nov 2024 14:05:00 +0100

Network fingerprinting exists for a while and some methods such as JA3 have achieved wide adoption across the industry. Introducing network fingerprinting into login flows can help you stave off attackers. However, there are various challenges that you need to overcome: technical, organizational and regulatory. In this talk we will take a look at the opportunities that network fingerprinting provides us. We will go through the various challenges that can arise and discuss possible ways of tackling them. I will draw from insights gathered at 1&1 Mail & Media - the company behind web.de, GMX and mail.com. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

How (Not) to Use OAuth in 2024 (god2024)

Wed, 13 Nov 2024 09:35:00 +0100

OAuth 2.0 has become the backbone of secure delegated authorization on the web, enabling users to grant third-party applications access to their data without revealing their credentials. It's also foundational for federated authentication via OpenID Connect and plays a critical role in emerging technologies like wallet ecosystems. However, despite its wide adoption, OAuth implementations are fraught with risks — many of which can lead to serious security breaches. The challenges arise from OAuth's use in contexts far more dynamic and high-stakes than what was originally envisioned. Today, OAuth protects sensitive financial APIs, powers identity verification systems, and secures modern app ecosystems — yet, many implementations remain vulnerable to attack. Even with the guidance from RFC6749 and RFC6819, subtle misconfigurations and outdated practices are still common, often due to the complexities of real-world deployments. To address these evolving security needs, the IETF is finalizing the OAuth 2.0 Security Best Current Practice (BCP), an updated set of recommendations designed to mitigate common vulnerabilities and improve OAuth implementations across industries. This new RFC introduces stronger security measures and deprecates insecure approaches like the Implicit Grant, while also tackling new threats such as the Authorization Server Mix-Up Attack. In this talk, we will dive into the core challenges of securing OAuth in today's dynamic and high-stakes environments. Attendees will learn about the most critical updates from the Security BCP, including the MUSTs, MUST NOTs, and SHOULDs that are essential for robust OAuth implementations. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

NIS2 entmystifiziert - Was Unternehmen nun tun müssen (god2024)

Wed, 13 Nov 2024 10:45:00 +0100

Die NIS2-Richtlinie (Network and Information Security Directive) der Europäischen Union stellt eine Weiterentwicklung der bestehenden Cybersicherheitsanforderungen dar und zielt darauf ab, die Resilienz und Sicherheit kritischer Infrastrukturen in der EU zu stärken. In Deutschland liegt derzeit mit dem NIS2UmsuCG (NIS-2-Umsetzungs- und Cybersicherheitsstärkungsgesetz) ein Regierungsentwurf zur konkreten Ausprägung auf nationaler Ebene vor. Im Vergleich zur ursprünglichen NIS-Richtlinie erweitert NIS2 den Anwendungsbereich und verpflichtet mehr Unternehmen und Sektoren, strenge Cybersicherheitsmaßnahmen zu implementieren. Unternehmen müssen sich nun auf umfassendere Risikomanagementanforderungen, Meldepflichten bei Sicherheitsvorfällen und Sanktionen bei Nichteinhaltung einstellen. Doch was heißt das konkret für Unternehmen, sicherheitsverantwortliche Stellen und EntwicklerInnen in Unternehmen? Der Vortrag entmystifiziert die wesentlichen Neuerungen der NIS2 und zeigt, welche konkreten Schritte Unternehmen jetzt unternehmen müssen, um Compliance zu erreichen. Dazu gehören unter anderem die Etablierung robuster Cybersicherheitsstrategien, die Anpassung interner Prozesse und die Einführung effektiver Meldeverfahren. Angesichts strengerer Vorgaben und verstärkter Kontrollen wird es für Unternehmen entscheidend, die richtigen Maßnahmen rechtzeitig umzusetzen, um Bußgelder und Reputationsverluste zu vermeiden. Im Rahmen des Vortrages wird insbesondere praxisnah auf den aktuellen Stand des Gesetzgebungsverfahrens und relevante Pflichten für Unternehmen eingegangen. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

OWASP Juice Shop 10th anniversary: Is it still fresh? (god2024)

Wed, 13 Nov 2024 09:10:00 +0100

Once upon a time, developers and security experts relied on mostly server-side rendered vulnerable applications to train their web hacking skills. In 2014 the Juice Shop entered the stage as one of the first Rich Internet Application representatives. What started as a personal pet project with two dozen hacking challenges, became an OWASP Flagship project shortly after and grew in size, scope and use case coverage significantly over the years. Join us on a 10th anniversary tour through the origins, history and evolution of OWASP Juice Shop from 2014 to 2024, including new juicy hacking delicacies as well as some crazy shenanigans happening in and around the project. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

GenAI in the Battle of Security: Attacks, Defenses, and the Laws Shaping AI's Future (god2024)

Wed, 13 Nov 2024 12:05:00 +0100

The presentation explores the security challenges and opportunities posed by Generative AI (GenAI). While GenAI offers tremendous potential, it also has a darker side, such as its use in creating deepfakes that can spread misinformation, manipulate political events, or facilitate fraud, as demonstrated in a live deepfake example. Malicious variants of GenAI, are used in phishing attacks, social engineering schemes, and the creation of malware. Additionally, GenAI enables more intelligent network attacks through autonomous botnets decreasing the risk of exposure. Despite these risks, GenAI also provides defensive advantages by enhancing security measures, such as improving threat detection, strengthening access control, and identifying code vulnerabilities. This is exemplified in a live demo showcasing deepfake and AI-based content detection. The presentation also examines the different types of attacks that AI models, including GenAI, are susceptible to, across any task, model, or modality. This includes adversarial attacks, where inputs are specifically crafted to deceive AI systems. Additionally, attacks such as Prompt Injection and Visual Prompt Injection manipulate inputs to mislead models. However, navigating the complex landscape of AI compliance is essential. Organizations must adhere to regulations like the EU AI Act and standards such as ISO 27090, while also following guidelines from bodies like OWASP to ensure the security, transparency, and ethical use of AI systems. The OWASP AI Exchange plays a key role in modeling threats to GenAI, addressing risks and point out solutions. To defend against these threats, various detection and mitigation techniques have been developed and will briefly be presented. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

SSRF: Attacks, Defense and Status Quo (god2024)

Wed, 13 Nov 2024 16:15:00 +0100

Web apps use Server-Side Requests to request data from other servers, e.g., for link previews. However, they are exploited by attackers who might request internal resources or non-public services. This attack is called Server-Side Request Forgery (SSRF). The talk explains what SSRF is, how it can be used to exploit servers, and how to defend against it, which is surprisingly complex. Finally, we will discuss our research on the prevalence of countermeasures in the wild. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

SAP from an Attacker's Perspective – Common Vulnerabilities and Pitfalls (god2024)

Wed, 13 Nov 2024 14:30:00 +0100

As organizations increasingly rely on SAP systems to manage critical business processes, the security of these environments is an increasing challenge for companies and has also been recognized by the OWASP Core Business Application Security (CBAS) project. This talk will explore the security of SAP systems from an attacker's perspective, uncovering common vulnerabilities and pitfalls and their respective impact. Drawing from extensive penetration testing experience, this presentation will provide a deep dive into how attackers might exploit SAP vulnerabilities and offer practical guidance on mitigating these threats. We will begin by highlighting prevalent SAP vulnerabilities discovered during real-world pentesting engagements, covering key attack techniques used against SAP systems that exploit misconfigurations, insecure coding practices, and authentication flaws. As an example, we will illustrate the configuration options of SNC, the proprietary protocol for transport layer encryption in SAP environments. Using the open-source tool sncscan, security professionals and administrators alike can assess the encryption and signing settings of SAP systems, ensuring the confidentiality and integrity of sensitive data. The session will also provide actionable guidance on mitigating these vulnerabilities, focusing on best practices and tools that can significantly enhance the security posture of SAP systems. By raising awareness of common vulnerabilities and pitfalls we aim to empower security professionals and SAP administrators to better protect their systems against potential exploitation. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Begrüßung (god2024)

Wed, 13 Nov 2024 09:00:00 +0100

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Double-Edged Crime: How Browser Extension Fingerprinting Might Endanger Users and Extensions Alike (god2024)

Wed, 13 Nov 2024 16:35:00 +0100

Browser extensions are powerful tools that enhance the web browsing experience, offering their users a wide range of functionalities. However, these features can also introduce security and privacy issues for their users, mainly through a technique known as extension fingerprinting — where malicious websites track users based on the extensions they have installed. This is particularly interesting since many websites rely on advertising-based revenue for their existence, and the cookie-less form of tracking is also increasingly getting traction on the Web. Popular libraries such as FingerprintJS and Castle have already incorporated extensions as identifiable sources in their armor. In this talk, we will present the growing threat of browser extension fingerprinting, shedding light on how extensions can inadvertently expose both users and the extension to certain risks. Our recent research uncovers that over 3,000 Chrome and Firefox extensions are vulnerable to fingerprinting through techniques such as JavaScript namespace pollution and other observable side effects despite existing defense mechanisms [1]. The audience will takeaway the following: What are some of the ways by which browser extensions can be fingerprinted. The risks for both user privacy and extensions' behavior. Insights from recent research on vulnerable extensions. Potential strategies to mitigate fingerprinting risks. And, of course, how to keep your extensions from being the "most wanted" on the Web! [1] Agarwal, Shubham, Aurore Fass, and Ben Stock. "Peeking through the window: Fingerprinting Browser Extensions through Page-Visible Execution Traces and Interactions." (To appear at) Proceedings of the 31st ACM SIGSAC Conference on Computer and Communications Security. 2024. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Overview of OWASP AI Exchange: A Comprehensive Guide to AI Security (god2024)

Wed, 13 Nov 2024 11:40:00 +0100

The OWASP AI Exchange provides a comprehensive framework to address the evolving security challenges presented by AI systems. As artificial intelligence continues to transform industries, securing these systems against emerging threats has become a top priority. This presentation will offer an in-depth overview of the OWASP AI Exchange, focusing on its mission to foster collaboration and align AI security standards across various industries. Attendees will explore the major security risks in AI, such as model poisoning, data theft, adversarial attacks, and vulnerabilities in machine learning algorithms. The session will also delve into the controls and countermeasures highlighted in the OWASP AI Exchange, offering mitigating risks throughout the AI lifecycle. Additionally, the session will address how organizations can use the AI Exchange to improve governance, implement best practices, and protect the confidentiality, integrity, and availability of AI systems. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

„Well, What Would You Say if I Said That You Could?” – Scanning for Vulnerabilities Without Getting Into Trouble (god2024)

Wed, 13 Nov 2024 14:55:00 +0100

The need for comprehensive measurements of security and privacy risks on the Web is undeniable as it helps developers in focusing on emerging trends in security. However, large-scale scans for server-side vulnerabilities remains a sensitive topic, due to their potential to harm servers, disrupt services, and incur financial losses. Even smaller, singular tests can be controversial, as demonstrated by incidents like the CSU scandal around Lilith Wittmann in 2021 or the Modern Solution case in 2023. The gray area surrounding the legality, ethics, and industry perspectives on server-side scanning has led to hesitancy among researchers and ethical hackers, creating a critical gap in our understanding of how to conduct such scans responsibly. In this talk, we investigate and interactively discuss the murky boundaries of vulnerability scanning by exploring five typical scanning scenarios that researchers face on the Web. Drawing from We give insights into 23 in-depth interviews we conducted with legal experts, research ethics committee members, and website/server operators to identify what types of scanning practices are acceptable and where the red lines are drawn. We further substantiate these insights with findings from an online survey conducted with 119 server operators. Attendees will gain great insights into the current state of Web scanning, including the lack of judicial clarity and the ethical dilemmas researchers and ethical hackers face. This interactive session also offers a platform for audience members to challenge their own understanding of ethics, share opinions, and contribute to shaping the future of responsible Web security scans. In this talk, the audience will: Get an in-depth understanding of the legal and ethical challenges associated with large-scale server-side scanning research. Learn current best practices for conducting responsible Web security scans (at scale). See firsthand insights from legal experts, ethics committees, and operators on acceptable security research practices. Get an opportunity to engage in an interactive discussion to voice opinions and help influence future research Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Community Capacity Building- Case Study OSM Kenya (sotm2024)

Fri, 06 Sep 2024 15:30:00 +0200

Examining the case of OSM Kenya, we showcase and exhibit how initiatives have empowered local communities through open mapping, fostering collaborations, and skill development. We have catalyzed sustainable impact driving positive change across the country and around the world through empowering over 200+ young people who are members of our community. Gaining insights and strategies for enhancing community engagement and capacity within the OpenStreetMap ecosystem in Kenya and beyond borders. The presentation will be centered around Community Capacity Building as a model for building sustainable communities for the global south, Sharing tricks and skills that we have adapted over five years, we desire to showcase our growth as a community through the contribution of open data. During the presentation, we will recognize the community for working together to achieve such a milestone as we seek to enlighten other communities toward achieving greater goals. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/99HWEX/

Strengthening Collaboration between Organizations and Local Communities in West Africa Through the OSMer in Residence Program (sotm2024)

Fri, 06 Sep 2024 16:30:00 +0200

Improving the map in OpenStreetMap involves data availability and reliability. Through the operations in which they are involved, organizations have a vast amount of data at their disposal, much of which is confidential and goes against the spirit of Open Data, which is all about sharing. This session will show how the OSMer in Residence program has fostered this paradigm shift through collaboration between HOT's Western and Northern Africa Hub and Médeçins Sans Frontières The shared vision of creating a detailed, accessible, and community-driven map of the world continues to drive the open mapping movement. Increasingly, organizations across diverse sectors are recognizing the value of open data and its potential impact on societal development. Several organizations have made a commitment to open up their data and actively contribute to OpenStreetMap (OSM). However, as OSM is an open-source community project, decisions and action are guided by community consensus. For any organization seeking to integrate its data into this platform, obtaining local community support is essential. The OSMer in Residence program serves as a crucial link between these organizations and the dynamic OSM community in Africa. Based on the concept of the Wikipedian in Residence, the OSMer in Residence program is designed to embed an OSM subject matter expert in a host organization or institution to maximize the value for the host organization in terms of their ability to leverage OpenStreetMap as a database that supports improved humanitarian and development outcomes in accordance with OSM community norms. In its pilot phase, Open Mapping - West and Northern Africa Hub(WNAH) collaboratedwith Médecins Sans Frontières/Doctors Without Borders (MSF), a humanitarian organization that provides emergency relief to some of the most vulnerable and excluded communities around the world, with data and maps being of high importance to supporting their operations. This pilot phase has led to workflow proposals facilitating the integration of an organization's data into OpenStreetMap by involving the local community where the data was collected. Data confidentiality and organized editing in OpenStreetMap will be addressed during this session. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/MRBEFX/

Women in OSM Tech - What worked best for me (sotm2024)

Fri, 06 Sep 2024 14:30:00 +0200

This proposal outlines my journey into the tech sector via OpenStreetMap (OSM) as a woman with no prior tech background. I'll share my transformation from beginner mapper to proficient user, skilled in OSM mapping and QGIS for data analysis.In a field where women's representation is limited, my involvement in OSM Tech stands as a testament to breaking barriers and fostering inclusivity—an opportunity provided to me by OpenMap Development Tanzania (OMDTZ). I’ll show the significance of providing equal opportunities and a supportive environment for women in technology in OSM and highlight the potential of OSM as a catalyst for personal and professional advancement. I aim to share, reflecting on the supportive environment that facilitated my growth while arguing for the importance of creating an inclusive space in OSM communities where women and other underrepresented groups can aspire to achieve anything.With less than a year in OSM Tech, I am already actively participating in organizational projects, including the solid waste management baseline survey—an area I am interested in as an environmental personnel. I will also share what has worked best for me and how I overcame challenges so that other women out there who want to take on the challenge can feel empowered and able to take the first steps Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/A7DUFU/

Photo mapping from my village to Pharmacies and Addresses (sotm2024)

Fri, 06 Sep 2024 14:00:00 +0200

**A picture is worth a thousand words**, I am a Pharmacists by training and only discovered the love for technology and maps recently. After discovering OpenStreetMap and taking up mapping based on interest. I share my experience, motivation and how I have used photos to improve OpenStreetMap data in Accra. I joined OpenStreetMap in 2018 but it was only until recently that I finally found much interest in the project and community. In this presentation, I share with you my experience contributing to OpenStreetMap as a Pharmacist. I also will talk about interesting discoveries and observations whilst collecting data for mapping into OSM. Finally, I share my workflow and current projects. **Related links** * https://wiki.openstreetmap.org/wiki/Photo_mapping * https://wiki.openstreetmap.org/wiki/Organised_Editing/Activities/Ghana_House_Addresses Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/MRQDGE/

Incorporating OpenStreetMap into Academic Curricula: Insights from GeoTE Tanzania's Five-Week Field Training programs with YouthMappers and Academic Partners (sotm2024)

Fri, 06 Sep 2024 13:30:00 +0200

Through this initiative, GeoTE Tanzania focuses on integrating OpenStreetMap (OSM) into academic curricula through five-week Field Training sessions with YouthMappers and academic partners. This program emphasizes practical application and problem-solving using OSM data across disciplines such as wildlife, forestry, agriculture, rural and urban development, and environmental studies. By partnering with universities like Sokoine University of Agriculture, GeoTE facilitates hands-on learning experiences that prepare students to address community challenges with geospatial techniques. "Incorporating OpenStreetMap into Academic Curricula: Insights from GeoTE Tanzania's Five-Week Field Training with YouthMappers and Academic Partners" explores the transformative role of OSM in academic settings and community development. GeoTE Tanzania's approach to integrating OSM into academic curricula revolves around practical application and problem-solving, empowering students to leverage geospatial data for real-world impact. The program's structure emphasizes collaboration with academic partners and organizations like YouthMappers to deliver comprehensive Field Training sessions lasting five weeks. These sessions serve as immersive learning experiences where students apply OSM data and techniques to address community challenges across various domains, including wildlife conservation, forestry management, agricultural development, and urban planning. Through step-by-step mentorship on project ideation and execution, students gain proficiency in using OSM as a tool for spatial analysis and decision-making. The program's focus extends beyond technical skills to cultivate critical thinking and problem-solving abilities essential for effective community engagement. A cornerstone of GeoTE's approach is its partnership with academic institutions like the Sokoine University of Agriculture, where Field Training sessions are integrated into the academic calendar. This collaboration ensures that students receive academic credit while gaining practical experience in OSM mapping and analysis. GeoTE Tanzania's experience offers valuable insights into the potential of OSM to enhance academic curricula and foster community development. By equipping students with OSM skills and empowering them to address local challenges, GeoTE contributes to building a sustainable ecosystem of geospatial practitioners capable of driving positive change in their communities. The presentation will highlight key learnings, challenges, and best practices gleaned from GeoTE's experience, providing attendees with actionable strategies for incorporating OSM into academic programs and community development initiatives. Through case studies and testimonials, the talk will showcase the tangible impact of OSM integration in empowering students and advancing community-driven solutions. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/YNEPJM/

OSMF Funding (sotm2024)

Fri, 06 Sep 2024 11:00:00 +0200

The "OSM Funding" talk is dedicated to illuminating the management of the OpenStreetMap Foundation as a non-profit organization, reliant on donations and event sponsorship. With a commitment to transparency, the talk aims to provide a clear description of how the OSM Foundation's finances are handled, ensuring the community is informed about fund allocation and usage. By providing a clear understanding of where funds are directed and how they benefit the broader OSM Community, attendees are empowered to build mutual trust with the OSMF. The OSM Foundation endeavors to foster trust and collaboration while maximizing the impact of financial resources for the collective benefit of all of OSM. The abstract outlines the focus of the "OSM Funding" talk, emphasizing the OpenStreetMap Foundation's management as a non-profit organization reliant on donations and event sponsorships. With a commitment to transparency, the talk aims to inform the community about fund allocation and usage, ensuring everyone understands how their contributions support the broader OSM Community. By providing clarity on financial matters, the OSM Foundation seeks to foster trust and collaboration while maximizing the impact of resources for our community. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/C8B93B/

A Replicable Model for OpenStreetMap Training Programs in High Schools (sotm2024)

Fri, 06 Sep 2024 11:30:00 +0200

In this presentation, we will share our experience conducting an OpenStreetMap training program with the Kibera Girls' Soccer Academy in Kenya. We will cover various aspects such as the planning process, development of curriculum, hands-on mapping activities, and achieved outcomes. Our aim is to provide practical insights that attendees can use to run similar programs in other schools or regions, promoting greater OpenStreetMap engagement among youth. In 2022, Map Kibera collaborated with YouthMappers to launch and manage a technical training program for an all-girls secondary school in Kenya. The training program primarily focused on OpenStreetMap (OSM) but also included sessions on career guidance and digital wellbeing to introduce the students to STEM. In this session, we aim to share the resources that were used to model how OSM communities and organizations can join forces with secondary schools to conduct impactful training programs. We will also emphasize the significance of OpenStreetMap in developing technical skills and advocating for STEM education in young learners. Additionally, we will include how such programs promote inclusivity and the strategies to make training programs accessible and encouraging, especially for girls in marginalized communities. The attendees will gain a better understanding of the steps involved in planning an OpenStreetMap training program for high school students and acquire insights into customizing mapping activities to cater to a younger audience. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/WCFXG7/

Lightning Talks I (sotm2024)

Fri, 06 Sep 2024 16:30:00 +0200

Lightning talks are short presentations (maximum 5 minutes) about a topic related to OpenStreetMap. ## Discover OSM with free GIS tools in Africa geoportal _by Esri Eastern Africa_ ## Disaster hackathon 2.0 in Bangladesh _by Ibtehal_ ## Impact of anticipatory mapping in disaster preparedness _by Jacques Niyigena_ ## Geospatial conference Tanzania (GIS day) November 15-16 2024) _by Kawamala Antidius_ ## Discover the UN maps learning hub! _by Séverin Ménard_ Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/87HBBY/

On the Ground (sotm2024)

Fri, 06 Sep 2024 15:30:00 +0200

OpenStreetMap is a community project to map the world. Everybody can contribute whatever they want. Or can they? What are the rules that govern what can be mapped in OSM and how? How are we creating a coherent global map and not just a bunch of random data about the world? OpenStreetMap is a community project to map the world. Everybody can contribute whatever they want. Or can they? What are the rules that govern what can be mapped in OSM and how? How are we creating a coherent global map and not just a bunch of random data about the world? For years we have had the "on the ground rule" (really more of a guideline) that helps us decide what and how to map. It has served us well, but it is also sometimes misunderstood. And it is not the whole story. In this talk we want to explore this rule and its many aspects and the other principles anchoring the project in the real world. We want to show how the rule helps avoiding conflicts but also shine a light on where it is sometimes bent and why. We want to figure out what it is that keeps the international and diverse OpenStreetMap community working towards a common goal. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/V3FYDH/

Closing + Infrastructure Review (dhcp2024)

Sun, 03 Nov 2024 15:00:00 +0100

Closing the DHCP 2024 events. All active leases must be returned at this point Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.dhcp.cfhn.it/dhcp-2024/talk/RFCCTU/

Dokumentationsgetriebenes Monitoring mit Netbox und Prometheus (dhcp2024)

Sat, 02 Nov 2024 16:00:00 +0100

Keiner mag es, Dokumentationen zu schreiben? Wenn es einen Mehrwert bringt, schon! Dokumentationsgetriebenes Monitoring beschreibt den Ansatz aus Dokumentation z.B. ein automatisch konfiguriertes Monitoring zu generieren. Ein Vortrag über das Konzept, konkrete Umsetzung und Erfahrungen aus mehreren Jahren Betrieb. In diesem Vortrag zeige ich, wie wir bei einem Fashion-Unternehmen Netbox und Prometheus für automatisiertes Monitoring, vom Server bis zur Kasse und Drucker im Laden, nutzen. Netbox liefert als CMDB alle nötigen Infos, die Prometheus dann automatisch zur Überwachung nutzt. Ein dafür gebautes Open Source Netbox-Plugin bereitet die Daten dafür auf. Der Clou dabei: Die Dokumentation von Systemen in Netbox ist keine "lästige" Pflicht mehr, sondern bietet echten Mehrwert. Es ist kein händisches, fehleranfälliges Konfigurieren von mehreren Systemen mehr nötig. Wir haben eine Singel Source of Truth, die alle nachgelagerte Systeme versorgen kann. Ideal für alle, die an praktischen und automatisierten Monitoring-Lösungen interessiert sind. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.dhcp.cfhn.it/dhcp-2024/talk/XNTYRX/

Opening (dhcp2024)

Thu, 31 Oct 2024 19:00:00 +0100

Opening the DHCP 2024 event Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.dhcp.cfhn.it/dhcp-2024/talk/C3JZBF/

A Novel Approach to Street-Level Data Collection: Using Customized Bajaji (tricycle) and Mapillary to Enrich OpenStreetMap in Dar es Salaam (sotm2024)

Fri, 06 Sep 2024 14:30:00 +0200

In recent years, data creation methods have evolved, incorporating machine learning, AI, deep learning, and virtual reality to streamline processes. However, these advancements have not uniformly benefited communities in developing countries. Nonetheless, OMDTZ tirelessly seeks solutions to ensure more high-quality data are gathered, with low cost and extensive local involvement. One standout initiative involves a customized tricycle, known as bajaj, which is cost-effective, enabling access to streets of varying conditions. Equipped with an affordable street view camera, it collects images used to automate generation of vector data attributes to enrich OpenStreetMap. This session aims to share the experience and process, inspiring other communities to consider similar adaptations. Over the years, OMDTZ and other volunteers have spearheaded a number of initiatives aimed at updating OpenStreetMap through various projects and mapathons in Tanzania. These efforts have added countless buildings, roads, and amenities, impacting social well-being and lifesaving initiatives. As technology has advanced, methods for data creation and updating have evolved, leveraging machine learning, AI, deep learning, and virtual reality to streamline processes. In line with these advancements, OMDTZ has invested in methods to ensure efficient and high-quality data capture. One such method involves using Mapillary to capture street view imagery, which is then utilized to automate the generation of vector data and attributes such as road surface, traffic signs, and drainage coverage. Additionally, OMDTZ has customized Bajaj, equipping it with navigation and a GoPro Max camera for data collection. This approach offers cost-effectiveness compared to traditional vehicles, increased mobility in intricate urban areas, and fosters community involvement by leveraging local knowledge. Combining these technologies with local resources revolutionizes street-level data collection, contributing to the continuous improvement of OpenStreetMap in Dar es Salaam Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/J9ATMQ/

teaching an old libvirtd new tricks (dhcp2024)

Sat, 02 Nov 2024 16:30:00 +0100

Wie auch viele andere Organisationen setzt auch das Studierendennetz Selfnet e.V. Virtualisierung zum einfachen Bereitstellen von Servern ein. I diesem Vortrag erkläre ich euch, wie wir libvirtd um einige für uns und auch vielleicht andere nützliche Funktionen erweitert haben: - Routing von VMs via BGP zur Live-Migration - Out of Band management für VM-Admins - Schnelles Erzeugen von VMs mit cloud-init Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.dhcp.cfhn.it/dhcp-2024/talk/CNM7XE/

Urlaub außerhalb der Cobolgruft - mit Aussicht auf Container (dhcp2024)

Fri, 01 Nov 2024 20:30:00 +0100

Eine Kreuzfahrt, die ist lustig? Mag sein. Für neurodiverse Entitäten ist sie anstrengend. Gut, dass es Frachtschiff-Kreuzfahrten gibt. Ihr wisst nicht, was eine Frachtschiff-Kreuzfahrt ist? In diesem Talk erfahrt Ihr mit Fotos und Berichten meiner beiden Reisen, warum die Aussicht auf Container ein besonderer und für Neurodiverse besonders empfehlenswerter Urlaub ist. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.dhcp.cfhn.it/dhcp-2024/talk/NN73L8/

Mein Mann, der Computer - Leben mit einem Autisten (dhcp2024)

Fri, 01 Nov 2024 16:00:00 +0100

Ich hab Euch schon viel über meine neurodiverse Psyche (ADHS, Borderline) erzählt. Aber wusstet Ihr, dass ich mit einem Computer verheiratet bin? Habrok, Autist, nennt und beschreibt sich selbst so. In diesem Talk erfahrt Ihr, warum. Im ersten Teil des Talks gibt's Basic-Knowledge zu Autismus: Spektrum, Diagnose und Symptome, Abgrenzung zu ADHS und anderen Neurodiversitäten. Dann erkläre ich Euch, warum sich Habrok selbst "Computer" nennt und das eine so bildhafte wie hilfreiche Metapher ist. Und im dritten Teil des Talks gibt's WawuschelLeaks aus dem Leben zweier neurodiverser Entitäten mit sechs Katzen, um Euch besondere Herausforderungen, Lösungen und Skills zu erklären. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.dhcp.cfhn.it/dhcp-2024/talk/CRDR8E/

Code & Kilo: Schwergewichte im etwas anderen Rack (dhcp2024)

Fri, 01 Nov 2024 18:00:00 +0100

Kraftsport, Fitness, Powerlifting in ihren Basics aufbereitet für technikaffine und nah am Schreibtisch gebaute Personen mit ein bisschen Körperlichkeit CN: Sport, Ernährung, Fitness, Körperbilder, Gesundheit Kraftsport, Fitness, Powerlifting - all das ist etwas weiter weg vom klassischen Brötchenjob in der IT, bietet aber in Freizeit und als Gesundheitsmaßnahme als Kontrast zu Schreibtischarbeiten Spiel, Spaß und Spannung. Es findet eine Einführung in Kraftsport und "das Fitnessstudio" (was es so nicht gibt, aber wir vereinfachen!) statt, bevor wir auf verschiedene Zweige des Krafttrainings einsteigen. Der Fokus liegt dann auf Powerlifting/Kraftdreikampf und dem Stärker werden in den Disziplinen Kniebeuge, Bankdrücken und Kreuzheben. Neben der gesundheitlichen Motivation wird über körperliche Stärke und Körperbilder gesprochen sowie die eigentlich sehr schöne Idee, den eigenen Körper nach individuellen Vorstellungen zu gestalten - bis gesellschaftliche Ideale und Rollenbilder hallo sagen. Bringt gerne Fragen mit! Licensed to the public under https://creativecommons.org/publicdomain/zero/1.0/ about this event: https://talks.dhcp.cfhn.it/dhcp-2024/talk/ULLCMW/

Kubernetes braucht kein SSH - Einführung in Talos Linux (dhcp2024)

Fri, 01 Nov 2024 20:00:00 +0100

Talos Linux ist eine spezialisierte Distribution für den Betrieb von Kubernetes-Clustern, die ausschließlich über eine API interagiert und ohne SSH auskommt. In diesem Vortrag erkläre ich die Vorteile von Talos und warum es die beste Wahl für ein Kubernetes-Cluster ist. Eine Linux-Distribution ohne SSH? Klingt verrückt, ist aber eine wirklich gute Idee – zumindest, wenn man Kubernetes betreiben möchte. Talos Linux ist eine spezialisierte Distribution, die ausschließlich für den Betrieb von Kubernetes-Clustern entwickelt wurde. Die Interaktion mit dem System erfolgt ausschließlich über eine API. Welche Vorteile das mit sich bringt und warum Talos aus meiner Sicht die beste Art ist, ein Kubernetes-Cluster außerhalb der üblichen Cloud-Provider zu betreiben, erkläre ich in diesem Vortrag. Wir besprechen die Grundlagen und rollen live einen Cluster aus (mögen die Demo-Götter uns wohlgesonnen sein). Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.dhcp.cfhn.it/dhcp-2024/talk/QCUZNY/

OpenMate 1.0 - Auf dem Weg zum Open Source Getränk (dhcp2024)

Fri, 01 Nov 2024 21:30:00 +0100

Ein Überblick über die hohe Kunst der eigenen Herstellung von aromatisiertem Zuckerwasser daheim Mate Eistee ist kommerziell verfügbar. Aber lässt sich dieses Gebräu auch mit vertretbarem Aufwand selbst daheim herstellen? Wir wagen einen Blick in die DIY-Produktion von Softdrinks und tasten uns über Sprite und Cola an die hohe Kunst eines Mate-Eistees heran. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.dhcp.cfhn.it/dhcp-2024/talk/8HCEWR/

Juristisches Kuriositätenkabinett für Naturalparteien (dhcp2024)

Sat, 02 Nov 2024 20:00:00 +0100

Du hast keine Ahnung, was eine Naturalpartei ist? Macht nichts, solange Du weißt, dass Jurist*innen gern und viel zu oft mit unverständlichen Fachbegriffen um sich werfen. :) Über diese und weitere juristische Kuriositäten will ich Euch in diesem Talk berichten - nicht nur just for fun, sondern auch, damit Ihr künftig etwas besser versteht, was Ihr über Jura lest. Es gibt einige unter Jurist*innen bekannte Urteile, die auch ins MINT-Kuriositätenkabinett passen und Rechtslai*innen erweitern werden. Freut Euch auf Popcorn! Leider müssen wir zu Beginn des Talks ein wenig trockenes Jura machen, weil Ihr die Urteile und Kuriositäten mit etwas Basic Knowledge besser versteht. Stehen wir das zusammen durch? Kommt drauf an. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.dhcp.cfhn.it/dhcp-2024/talk/QQWPXY/

Setting the Stage for the Future of Web Based Mapping (sotm2024)

Fri, 06 Sep 2024 14:00:00 +0200

Over the years, iD has become a quite capable, versatile and reliable editor for OSM. However, it is currently also facing of a number of challenges: For example, it needs to keep being able to cope with the growing amount and richness of OSM’s map data, as well as to afford the increasingly important task of keeping the map up to date. This talk outlines a proposal to transform iD’s current user interface centered around OSM’s data model into an adaptive user experience that is better tailored towards the needs of individual mappers and outlines an approach of how we can get there as a community. In the past, iD had to and has overcome several challenging hurdles to become what it is today: A quite unique map editor that is the point of entry of most contributors of OpenStreetMap into the world of mapping. Today, iD is facing of a number of signifiant challenges to make it even more usable to a wide user base, and will continue to do so into the foreseeable future especially in regards to make it fit for the mapping topics of the future. For example, the editor needs to be able to cope with the growing amount and richness of OSM’s map data as well as as the increasingly important task of keeping the map up to date. The design of iD’s current user interface is substantially based on OSM’s data model. This can be seen for example in the workflow of creating a new map feature: It starts out with a blank “dummy” map geometry which – in a second step – has to be converted into a map feature by choosing a preset. While this is true to the way OSM represents this information in the data (i.e. in the form of nodes, ways and relations which are enriched with tags), this is for most simple use cases an unnecessary complication. Instead of primarily catering to the needs and requirements arising from the underlying data structures, iD’s usability should be instead built around the needs of of the different groups of mappers. And as these vary quite significantly depending on the interests and/or experience of the individual mappers, a promising approach to bring all of these together is to evolve iD’s user interface into an adaptive mapping experience with the goal to make vital mapping workflows intuitive, easy, fast and delightful. This transformation will definitely not be a small endeavor and is far from finally defined: in fact this should only be a start of a larger discussion. Let us together flesh out the details of this project. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/3D9RGU/

Some Assembly Required (sotm2024)

Fri, 06 Sep 2024 13:30:00 +0200

The more detailed our mapping of the real world becomes, the more it becomes apparent that a single node, way or relation is insufficient to represent the complex properties of a real-word object. Streets have many lanes. Buildings have entrances, 3D shapes and POIs inside. And let's not even start talking about the complexity of a major railway station. This talk will take a systematic look at the different ways how complex objects are being mapped in OSM. We explore how editors cope with the complexities of detailed mapping and discuss the implication on how our processing tools need to change to better handle relationships between objects. In the early OSM days, when the map was still largely a white canvas, it was very easy to stick to a simple one-to-one relationship between real-world features and OSM objects. A street is a way. A building is a single closed way. But the more we get into the details of mapping, the more this one-to-one principle gets us into trouble. Streets have many lanes. Buildings have entrances, 3D shapes and POIs inside. And let's not even start talking about the complexity of a major railway station. For some of these complex constructs we have developed mapping schemas - using special tagging, relations or relying on spatial properties. But more often than not, the question of relationship between OSM object is sidestepped. The situation is more dire on the side of the processing tools. Most generic tools still look at every OSM object as an isolated feature. The tools that do process complex objects often do so only for a very specific type like 3D buildings or turning restrictions. This talk will take a systematic look at the different ways how complex objects are being mapped in OSM. We explore how editors cope with the complexities of detailed mapping and discuss the implication on how our processing tools need to change to better handle relationships between objects. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/98JMSV/

Sustainable Transport on the Map (sotm2024)

Fri, 06 Sep 2024 11:00:00 +0200

Better information leads to better city policy. Unfortunately, many of the world’s cities still lack basic information on their own transport systems, leading to decisions measured against anecdotes rather than data. Using new tools for data processing and display, OpenStreetMap can provide the information that governments need to make better decisions. In this panel we will share recent success stories of cities adopting OSM-based metrics to plan better transport. We will reveal new tools that governments, mappers, and advocates can use. And we will discuss the challenges that still remain and the roles the OSM community can play in overcoming them. Transport is among the largest sources of greenhouse gas emissions, and transport emissions are growing especially quickly in the Global South. Experts agree that vehicle electrification will not be sufficient to avoid climate catastrophe: we also need to redesign cities to make it easy for people to walk, bicycle, or ride public transport instead of driving. OpenStreetMap can help. OpenStreetMap can empower cities to make planning decisions based on real data, and to set more meaningful goals for progress. OSM has empowered cities like Fortaleza and Recife, Brazil, to plan expansions of their bicycle lane networks that serve the greatest number of potential cyclists. OSM has helped cities as distant as Seattle, USA; Jakarta, Indonesia; and Pimpri-Chinchwad, India, to optimize their public transport networks and make it easier for everyone to ride the bus. And this is only the beginning. New tools are proliferating, such as ITDP’s Atlas of Sustainable City Transport and Trufi’s GTFS-Builder. These tools make it much easier to turn OSM data into useful indicators that can guide city policy. In the case of Trufi’s work, it does so by converting OSM data into industry-standard formats that can be used for trip planning or network analysis, As tagging evolves, OpenStreetMap is emerging as a solid foundation for creating multimodal route planning networks, thanks to its comprehensive information for generating integral maps. Furthermore, Trufi has developed a specific course on mapping public transportation routes, with the objective of training the OpenStreetMap community to contribute effectively to this particular aspect within the platform. ITDP’s Atlas, on the other hand, uses OSM as well as other open sources to present measurements of meaningful indicators that city governments can use to set goals or compare themselves to nearby jurisdictions. Some challenges, however, remain. It can be difficult to explain the virtues of OSM to governments who have never used it before. The tagging schema does not include certain nuances that are important for bicycle infrastructure planners (although a current proposal remedies many issues). And, looking more broadly into the future, there are many promising opportunities for the OSM community to push into new frontiers of data on topics like road usage, footpath quality, and parking. In order to prevent catastrophic climate change, we need to change the way people move around cities. In order to do that, we need maps. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/LDB3BA/

Lightning Talks, Day 2 (sps24)

Fri, 18 Oct 2024 18:15:00 +0200

We are happy to announce Lightning Talks to this year's conference again! They are open to everyone 😊 about this event: https://c3voc.de

The hitchhiker's guide to asyncio (sps24)

Thu, 17 Oct 2024 13:25:00 +0200

asyncio is the de-facto standard for asynchronous programming in Python and enables concurrent operations without using threads or processes. In this talk, we will delve into the technical details of asyncio and show how it can be used to improve the performance of Python applications. We will start by discussing the difference between threading, multiprocessing and async programming. Then, we will introduce the basic building blocks of asyncio: Event loops and Coroutines. We will dive deep into the way Coroutines work, discussing their origins and how they are linked to Generators. Next, we will look at Tasks, which are a higher-level abstraction built on top of Coroutines. Tasks make it easy to schedule and manage the execution of Coroutines. We will cover how to create and manage Tasks and how they can be used to write concurrent code. Finally, we will also cover some more advanced topics such as Async Loops and Context Managers, and how to handle errors and cancellations in asyncio. Whether you are new to asyncio or have experience with it, this talk will provide valuable insights and tips for leveraging its full potential. By the end of this talk, you will have a better understanding of how asyncio works, and how to use it to create efficient, high-performing Python applications. about this event: https://c3voc.de

Closing (sps24)

Fri, 18 Oct 2024 19:00:00 +0200

Thank you for joining us today. See you next time! about this event: https://c3voc.de

More Than Pixels – Unlock your image data with Vision-Language Models (sps24)

Fri, 18 Oct 2024 15:50:00 +0200

Join us on two Vision-Language Adventures! We'll uncover the information hidden inside big image collections with Vision-Language Models (VLMs) showing us the way. Who knows which forgotten gems await us? In the first part, we'll use CLIP and FAISS to go on a treasure hunt in your photo collection. You'll learn how to filter through millions of images in a breeze, using natural language. Bye-bye endless scrolling, hour-long tagging, and frustrated folder searching. In the second part, we will harness the power of VLMs to help us caption images – translating pixels to words. Then we'll make use of the BERTopic library to reveal even deeper insights into your photo collections. By the end of this talk, you'll be equipped with the knowledge and tools to unlock new insights, identify patterns, and make your image data work harder for you. This talk is for an intermediate audience – it is good if you bring some knowledge in Computer Vision, NLP or just general Deep Learning. about this event: https://c3voc.de

Empowering Independence: Robot-Assisted Shopping for the Visually Impaired with Product Recognition (sps24)

Thu, 17 Oct 2024 11:10:00 +0200

Shopping independently presents significant challenges for the visually impaired. I address these obstacles with a Python-based shopping assistance system that combines product and hand detection with speech recognition. In this talk, we’ll explore how computer vision technology, leveraging a camera and pre-trained models, enables visually impaired users to navigate supermarkets and select products autonomously. By recognizing items and providing acoustic guidance for hand positioning, a self-driving system empowers users to shop without external help. Additionally, attendees will learn how voice commands, processed through speech recognition, create a user-friendly interface. about this event: https://c3voc.de

Demystifying Spark: A Deep Dive into Its Workings (sps24)

Fri, 18 Oct 2024 14:00:00 +0200

Apache Spark is a powerful framework often used alongside Python for big data processing. You've seen its capabilities, but what powers its impressive performance? In this session, we'll delve into the internal workings of Spark. We'll explore concepts like Resilient Distributed Datasets (RDDs), which are fundamental to Spark's fault tolerance. We'll see how Spark distributes tasks across a cluster, leveraging Python's strengths in parallel processing. Finally, we'll uncover the secrets of in-memory computations, the key to Spark's blazing speed. Gaining a deeper understanding of Spark's internals, especially within the Python ecosystem, empowers you to: Optimize your Python big data applications for peak performance. Troubleshoot issues more efficiently. Write effective Spark code that unlocks its true potential and complements your Python expertise. Whether you're a data scientist, developer, or simply curious about big data, this talk will bridge the gap between Python and Spark. about this event: https://c3voc.de

Prototype to Production for RAG applications (sps24)

Fri, 18 Oct 2024 17:40:00 +0200

Retrieval Augmented Generation (RAG) has been used to mitigate hallucination issues from LLMs and rapidly provide LLMs with external knowledge that were not part of the pre-training data. While tutorials offer convenient ways to build POCs quickly, transitioning these prototypes to production environments often catches us off-guard with unforeseen challenges. This talk takes a deeper dive into the topics that are often missing from cookbooks and tutorials yet are crucial in scaling your RAG prototype to production. Our discussion will use real examples to help you better understand some of the best practices in production RAG for observability, security, scalability, and fault tolerance. about this event: https://c3voc.de

Lab Automation with Python (sps24)

Thu, 17 Oct 2024 17:40:00 +0200

In a brief review of the history of Python at Hamilton, we learn the different uses of Python and the great libraries that are available to simplify the life of an engineer. From device drivers and abstraction of complex processes to data acquisition, analysis and visualization, Python provides a one-stop shop to help developers get to their goals quickly. With an outlook, we show how laboratory specialists and researchers will be able to build on a solid ground in the future. about this event: https://c3voc.de

The OSM Spectrum (sotm2024)

Fri, 06 Sep 2024 10:30:00 +0200

OpenStreetMap (OSM) is a collaborative mapping platform with provides open and easy access to its users. It has diverse usability including the general public to governmental and non-governmental organizations. This abstract presents the usage of OSM in general and in the context of Nepal. OSM is used by the local community, the government sector and NGOs, tourism, classrooms, and various projects contributing to the development and gender equality making it a versatile data source. OSM gives a sense of empowerment and responsibility to individuals and contributes to fostering resilience and sustainable development. OpenStreetMap (OSM) is a free and open-source mapping platform where individuals collaboratively create, edit, use, and share geospatial data. OSM is used by a variety of users and stakeholders for their respective purposes. For the general public OSM is used for navigation because of its user-friendly nature. Mobile applications like MAPS.ME and OsmAnd provide offline access to maps. Additionally, it facilitates community engagement bringing a sense of empowerment and responsibility among individuals. Government sectors and NGOs use OSM data for planning developmental activities. The OSM data is extensively used in humanitarian response, Nepal is prone to disasters like earthquakes, landslides, and floods OSM has played a crucial role in allowing volunteers to respond quickly with the most updated maps with local information. OSM also plays an important role in tourism; guides, hikers, trekkers, and mountaineers use tourist maps prepared using OSM data as it provides detailed maps of hiking trails, mountain peaks, and natural landmarks. Gender equality is also an important domain that OSM has impacted upon, its various projects of mapping women-centric points of interest, addressing the issue of female genital mutilation, She Leads She Inspires programs, and empowering women as contributing to it remotely itself is the task that most females prefer to do. The students in the classrooms use OSM data for their projects and research. OSM data is preferred in the analysis as it is up-to-date and contains detailed information. Different student clubs like the Geomatics Engineering Society (GES), a registered OSM community in Nepal conduct training, workshops, and mapathons contributing to capacity building. Overall, OpenStreetMap offers a spectrum of usability to individuals, volunteers, companies, and organizations and stakeholders ranging from navigation to disaster response and empowerment of individuals and community as a whole. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/A3JTVT/

Welcome (sps24)

Fri, 18 Oct 2024 11:00:00 +0200

Welcome to the Python Summit! about this event: https://c3voc.de

Float – Everything You Wanted to Know About (sps24)

Thu, 17 Oct 2024 14:00:00 +0200

It is common knowledge that floating point numbers (`float`) are tricky. When misused, floats may lead to construction disaster – I will mention some notable accidents. But mainly, I will dig the topic from Python interface and rounding methods (`int` vs `round`, `divmod`, `math` library), via special symbols (`NaN`, `Inf`, `-0.0`, …), invoking different processor modes (`FLT_ROUNDS`), down to the bits of IEEE 754 standard. about this event: https://c3voc.de

Quantum Machine Learning: Qiskit 1.X vs PennyLane 0.X (sps24)

Fri, 18 Oct 2024 12:10:00 +0200

Recently, quantum machine learning algorithms have become popular due to a drastic increase in the power of quantum computation. Analysis of images with 10^54 pixels, easy encoding of Fourier series-like data, generation of novel chemical molecules – and all that with a couple of Python code lines! It's only left to choose a framework for trying out next-level deep learning models … but which one? The "grandfather" of Python quantum computing packages, PennyLane, with tons of user-friendly tutorials – or maybe a Qiskit, which runs naturally on IBM quantum computers, and moreover in February 2024 got a first major release? The answer is not that obvious, and together, we'll look at the pros and cons of both via training quantum circuits, assessing compatibility with popular Python machine learning packages – and all that on examples of real-world problems from financial and natural sciences. about this event: https://c3voc.de

Lightning Talks, Day 1 (sps24)

Thu, 17 Oct 2024 18:15:00 +0200

We are happy to announce Lightning Talks to this year's conference again! They are open to everyone 😊 about this event: https://c3voc.de

Code Makeover: Mastering the Art of Python Refactoring (sps24)

Thu, 17 Oct 2024 12:10:00 +0200

"Code Makeover: Mastering the Art of Python Refactoring" is your guide to transforming cluttered Python scripts into models of efficiency and readability. Discover the art of refining your code without losing your mind in the process. From recognizing the need for a makeover to applying the finishing touches, this talk will equip you with the strategies, best practices, and cautionary tales to ensure your code not only works beautifully but is also a joy to read and maintain. about this event: https://c3voc.de

Parallel Python at last? Subinterpreters & free-threading in practice (sps24)

Thu, 17 Oct 2024 15:50:00 +0200

Python has never been good at parallel computing. Multi-threading doesn't scale beyond a handful of threads because of the notorious GIL (Global Interpreter Lock). Multi-processing feels like a cumbersome workaround that increases complexity and overhead. And yet, we're firmly in an era of multicore machines, big data, and massive ML models that require all the compute they can get. Python, otherwise the star of data science and ML, doesn't really shine when it comes to parallel workloads. But that is finally changing! There is more focus and progress happening in this area than ever before, and promising leaps forward are on the horizon. Subinterpreters, already merged in 3.12, offer a tentative step towards making the GIL less than "global" … while the free-threading build of Python 3.13 offers a path towards removing the GIL entirely in the future. Let's explore these new developments and look at how they work, what they do and do not solve, and how we can take advantage of them. about this event: https://c3voc.de

Property based testing with Hypothesis (sps24)

Thu, 17 Oct 2024 16:25:00 +0200

The website of the Hypothesis project boldly asserts: "Normal 'automated' software testing is surprisingly manual. Every scenario the computer runs, someone had to write by hand. Hypothesis can fix this." While it's debatable whether property-based testing should fully replace the manual parametrization of tests with different inputs and outputs, there's no doubt that Hypothesis is a powerful tool for uncovering bugs nobody would even have considered looking for. In fact, during its development, the authors of Hypothesis accidentally discovered countless bugs in CPython and libraries, thus coining the term "The Curse of Hypothesis". The framework, although incredibly powerful, might seem overwhelming at first. In this talk, I will demonstrate how even simply throwing random strings at functions can reveal surprising bugs. From there, we'll progress towards generating more complex data, which will be less daunting than it initially appears. You'll also see how Hypothesis seamlessly integrates with various ecosystems and can be a valuable tool in any developer's toolkit. about this event: https://c3voc.de

Learning From Experiments With Causal Machine Learning (sps24)

Fri, 18 Oct 2024 11:35:00 +0200

While we have witnessed spectacular advancements in Machine Learning over the past months and years, robustness of results and establishment of causal relations remain lacking. During this talk we will walk you through an example of using causal Machine Learning techniques to estimate causal, heterogeneous treatment effects with Open Source Python tooling. Learning causal relationships – in contrast to mere correlations – is of great importance for many applications where we'd like to learn how to intervene with the real world: To whom should we administer which medical drug? To whom should we offer a marketing voucher? For which automated processed should we make a human expert intervene? In such situations we'd like to rest assured our decision don't just rely correlations – potentially tainted by common confounders. Rather, we'd like to make causal statements about the heterogeneous effects of administering a treatment. In terms of making this happen, the field of Causal Inference has been able to incorporate progress from Machine Learning in theory. Yet, in practice, applications remain challenging: tooling is still somewhat immature and little examples to follow exist. Therefore, we would like to walk you through a case study of estimating causal, heterogeneous treatment effects with Open Source Python tooling. about this event: https://c3voc.de

Even if we desperatly want to, we do not always need Deep Learning (sps24)

Fri, 18 Oct 2024 16:25:00 +0200

In the pursuit of classifying train stations from Open Railway Maps data, for Europe's largest rail cargo company. Initially, the project focused on developing a robust deep learning framework, which required extensive manual labeling of images to train the model effectively. Recognizing the impracticality and time-consuming nature of manual labeling, we conceptualized an approach to expedite the labeling process using cluster algorithms and graph information. Our method involved an automated labeling algorithm, which significantly accelerated the annotation phase. This algorithm demonstrated remarkable efficiency, automatically labeling images with high accuracy, thereby drastically reducing the manual effort involved. During the implementation, we discovered that our automated labeling algorithm was, in itself, the comprehensive solution for the classification task we aimed to address. This realization highlighted that our initial objective of deploying a deep learning model could be achieved through "classic" means. In conclusion, our project unveiled that the automated labeling algorithm was not just a tool to facilitate deep learning, but an effective standalone solution in itself. This unexpected outcome emphasizing that sometimes, the journey towards deep learning can reveal simpler, yet equally powerful, solutions. Damn, as all data scientists deep down, we wanted to take advantage of some sexy deep learning and ended up with a great, but not so sexy core data science solution. about this event: https://c3voc.de

From SHAP to EBM: Explain your Gradient Boosting Models in Python (sps24)

Fri, 18 Oct 2024 13:25:00 +0200

XGBoost is considered a state-of-the-art model for regression, classification, and learning-to-rank problems on tabular data. Unfortunately, tree-based ensemble models are notoriously difficult to explain, limiting their application in critical fields. Techniques like SHapley Additive exPlanations (SHAP) and Explainable Boosting Machine (EBM) have become common methods for assessing how much each feature contributes to the model prediction. This talk will introduce SHAP and EBM, explaining the theory behind their mechanisms in an accessible way and discussing the pros and cons of both techniques. We will also comment on Python snippets where SHAP and EBM are used to explain a gradient boosting model. Attendees will walk away with an understanding of how SHAP and EBM work, the limitations and merits of both techniques, and a tutorial on how to use these methods in Python, courtesy of the "shap" and "interpret-ml" packages. about this event: https://c3voc.de

Artificial Intelligence: Why Explanations Matter (sps24)

Fri, 18 Oct 2024 11:10:00 +0200

In the rapidly evolving field of Artificial Intelligence (AI), the importance of understanding model decisions is becoming increasingly vital. This talk explores why explanations are crucial for both technical and ethical reasons. We begin by examining the necessity of explainability in AI systems, particularly in mitigating unexpected model behavior, biases and addressing ethical concerns. The discussion then transitions into Explainable AI (XAI), highlighting the differences between interpretability and explainability, and showcasing methods for enhancing model transparency. A real-world examples will demonstrate how these concepts can be practically employed to improve model performance. The talk concludes with reflections on the challenges and future directions in XAI. about this event: https://c3voc.de

Automate your network in 5 easy steps with Python and Netmiko (sps24)

Thu, 17 Oct 2024 11:35:00 +0200

Network automation is important for efficient and reliable network management. In simple terms it means using software to automate tasks like configuring or testing network devices like routers or switches. This increases the speed of deploying new configurations while reducing human error – a win-win situation for everyone! This talk introduces Netmiko, a powerful yet simple Python library for network automation. Netmiko provides an easy-to-use interface for SSH-based interactions with network devices. The syntax of Netmiko is easy to understand and it's vendor agnostic approach let's you automate all kinds of network devices. I'll show you how Netmiko works, starting with building your inventory of devices and connecting to them. Then we'll move on to sending config commands and configuring the devices. Finally, we'll verify if the config was applied successfully. By the end of this talk, you will be able to use Netmiko to automate your own network devices! about this event: https://c3voc.de

Closing (sps24)

Thu, 17 Oct 2024 19:00:00 +0200

Thank you for joining us today. See you next time! about this event: https://c3voc.de

Mapping Kenya: 15 Years of Map Kibera and beyond (sotm2024)

Sat, 07 Sep 2024 09:00:00 +0200

Map Kibera arose from a desire to expand OSM beyond the confines of Europe and North America. In 2009, it pushed the boundaries of what then-new technologies could do. What have the mappers learned over the years? This talk will welcome you to Nairobi and through the ups and downs of mapping in Kenya - from the history of mapping in 20th Kenya, through Map Kibera’s start, into slums and rural parts of Kenya, and finally to current-day Kibera, where mappers are mapping street lights, waste disposal, schools, and more. How has Map Kibera and OSM had a community impact even as drones, satellite technology and AI are revolutionizing mapping? What has changed, and what has remained the same? We will discuss the global impact of Map Kibera, on community-based mapping in OSM and on the general application of technology in developing countries. This talk will include a discussion of mapping in Kenya dating back to the colonial era, the establishment of Kibera as a region of Nairobi, and its growth into a massive informal settlement. Kibera has been viewed as a place to develop by the Kenya government, International aid agencies, charities, and missionaries. It was a flashpoint of the post-election violence of 2007/8. Map Kibera’s Kenyan leaders will discuss the most recent mapping and local impacts made by the use of OSM. Mapping of street lights in Kibera led to new and more street lights installed in Kibera. Mapping of waste management in Mukuru led to the placement of dumping waste bins. Data on schools has led to a pilot project to install solar panels on selected schools. None of these impacts have been easy, but we will share lessons learned about OSM, open data and communities. Finally, we conclude with a discussion of emerging and ever-changing technology, and the fate of the techno-optimism of the early 21st century. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/B3EH7D/

Welcome (sps24)

Thu, 17 Oct 2024 11:00:00 +0200

Welcome to the Python Summit! about this event: https://c3voc.de

UN Maps - Supporting Peace with Open Data (sotm2024)

Fri, 06 Sep 2024 09:30:00 +0200

UN Maps is an initiative from the Department of Operational Support at the United Nations which aims not only to enrich topographic and operational data in UN mission areas but also to provide peacekeeping and humanitarian actors with topographic maps, operational geo-information, search and navigation tools, and imagery and street-level base maps. UN Maps is built on both UN internal authoritative geospatial information and open data, especially OpenStreetMap. UN Maps has also built a thriving community, called UN Mappers, around the collection and validation of open geospatial data with contributors from local communities, academia and UN staff in the field. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/EWNBAV/

Opening Session (sotm2024)

Fri, 06 Sep 2024 09:00:00 +0200

We welcome the OpenStreetMap community in Nairobi but also online to celebrate the international State of the Map conference. This session will provide also some formal instructions and helpful information. For example you will learn how the QA (question and answer) sessions are run. And what we will do on Friday and Saturday evening. Creative Commons Attribution 3.0 Unported https://creativecommons.org/licenses/by/3.0/ about this event: https://2024.stateofthemap.org/sessions/WTH9FS/

Die Zukunft ist dezentral: Podcasts und das Fediverse (subscribe11)

Sun, 20 Oct 2024 10:30:00 +0200

Das Fediverse ist ein datenschutzfreundliches, gemeinnütziges und dezentrales Netzwerk – das häufig auf Basis von Mastodon Servern mit dem ActivityPub Protokoll umgesetzt wird. Wir wollen einen Blick darauf werden, warum diese Struktur besonders für Podcaster:innen von Vorteil sein kann und das gleich auf mehreren Ebenen: Statt sich auf zentrale Plattformen zu verlassen, eröffnet das Fediverse neue Wege für die unabhängige und nachhaltige Verbreitung von Inhalten. Die Kommunikation im Fediverse läuft nicht über einzelne, große Anbieter – sondern verteilt sich auf viele kleine, miteinander verbundene Instanzen. Das gibt Podcaster:innen mehr Kontrolle über die Art und Weise, wie sie mit ihrem Publikum in Kontakt treten. Auch das Hosting von Podcasts wird durch die dezentrale Struktur flexibler und ermöglicht eine größere Unabhängigkeit von kommerziellen Plattformen. Wir zeigen außerdem, wie das Fediverse nicht nur ein Raum für neue Netzwerke bietet, sondern auch eine Antwort auf die Herausforderungen der zunehmend zersplitterten, datenkapitalistischen Social-Media-Landschaft sein kann. Gänzlich durch die rosa Brille schauen wollen wir hier aber auch nicht: Viele Strukturen sind noch ausbaufähig, die Anzahl der User:innen wächst eher schleppend und für viele Menschen gibt es ziemlich viele Einstiegshürden. Welche Potenziale wir noch ausschöpfen könnten und was es dafür braucht – darüber wollen wir mit euch diskutieren. Downloads der Umfrageergebnisse auf https://github.com/ultralove/fediverse-stats Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/7LUKDS/

Bespoke Synth for live music performances (sonoj2024)

Sat, 19 Oct 2024 15:45:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by/4.0 about this event: https://c3voc.de

Mein Podcast ist erfolgreich (subscribe11)

Sat, 19 Oct 2024 16:00:00 +0200

Dein kleiner Hobbypodcast wird erfolgreicher, doch mit mehr Hörern kommen die Herausforderungen. In dieser Session zeige ich dir welche Stolpersteine dich erwarten, wenn du für deinen Podcast den Podlove Publisher benutzt. Außerdem erwarten dich kleine technische Hilfestellungen, was du tun kannst um deinen Podcast weiterhin mit dem Podlove Publisher zu verteilen und nicht sofort zu einem kommerziellen Anbieter wechseln musst. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/CFGGP9/

Wisskomm liebt Podcasts: (subscribe11)

Sat, 19 Oct 2024 19:30:00 +0200

Lässt man die letzten paar Jahre der Podcast-Entwicklung Revue passieren, kommt man an der Rolle der Wissenschaftspodcasts kaum vorbei: Sie waren von Anfang an da, zählten immer mit zu den beliebtesten Formaten, quasi Liebe auf den ersten Stream. Diese Ausgangslage führte auch zur Gründung von wissenschaftspodcasts.de, ein großes Angebot mit dutzenden Podcasts aus dem Wissen(schaft)sbereich, die sich Hörer:innen in einem „Warenkorb“ zusammenstellen können. Zudem findet schon seit 2013 jährlich das Treffen der Wissenschaftspodcaster:innen, GanzOhr, statt. Auf der Plattform wissenschaftspodcasts.de haben sich im letzten Jahrzehnt rund 360 Podcasts aus dem Wissen- und Wissenschaftsbereich versammelt. Alle diese Podcasts haben eine Kuration durchlaufen, die von einem insgesamt bis zu 10-köpfigen Redaktionsteam gestemmt wird. Neben der inhaltlichen Seriosität spielt auch die Form der Zugänglichkeit eine wichtige Rolle: Nur Angebote mit offen zugänglichem RSS-Feed können für die Aufnahme in das Projekt in Erwägung gezogen werden. In der Wissenschaftskommunikation sind Podcasts inzwischen ein etabliertes Kommunikationsmedium, gerade auf institutioneller Ebene geradezu Standard geworden. Nicht zufällig waren Podcasts und Wisskomm rasch ein beliebtes Team. In diesem Workshop wollen wir daher nicht nur der Frage nachgehen, was Podcasts für die Wissenschaft „getan“ haben, sondern auch wie das Format zurückwirkt: Wie hat das kreative, offene Format der Podcasts den Blick auf gelungene Wissenschaftskommunikation verändert? Welche Rolle haben Wissenschaftler:innen durch dieses neue Sprachrohr in der Gesellschaft erlangen können? In diesem Workshop wollen wir einen Blick hinter die Kulissen dieses Projekts gewähren und von unseren Erfahrungen mit jahrelanger Kuration erzählen. Was funktioniert gut, woran sind wir vielleicht auch gescheitert – und wie kann bzw. soll es weitergehen? Der Workshop soll Raum für Austausch für Wissen(schaft)spodcaster:innen und natürlich auch Hörer:innen bieten. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/LJLPSH/

Hands-On with Castopod: (subscribe11)

Sun, 20 Oct 2024 12:30:00 +0200

Take control of your podcasting journey with Castopod, the open-source platform designed for all creators. In this 45-minute workshop, you’ll get a comprehensive, hands-on experience in setting up your own Castopod server and learn how to publish your podcast. We’ll dive into the platform’s intuitive interface, exploring how to upload episodes, manage your RSS feed, and customize your podcast’s public page. We’ll also touch on advanced features like integrating with Mastodon and other Fediverse platforms, enabling you to directly engage with your audience in a decentralized environment. This workshop is ideal for podcasters, developers, and tech enthusiasts who are eager to gain the skills needed to self-host and take full ownership of their podcasting content. By the end of the session, you’ll have a fully operational Castopod instance and the knowledge to maintain and grow your podcast independently. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/DXWG7N/

Vom Spieltisch zum Podcast: Die Kunst, authentisch zu bleiben (subscribe11)

Sun, 20 Oct 2024 14:00:00 +0200

Kleine Rollenspiel-Podcasts stehen vor großen Herausforderungen. Als Spielleitung wollen sowohl die Spielrunde als auch das Publikum abgeholt werden, doch die Erwartungen und Bedürfnisse dieser beiden Gruppen sind unterschiedlich. Also bleibt die Frage am Ende des Tages: Handeln wir authentisch? Und was ist das eigentlich…?! Jahrelang Rollenspieler, plötzlich Podcaster. Erst wirkt es identisch, so als würde man bei der üblichen Rollenspielrunde einfach ein Mikro dazustellen. Doch Moment mal, was ist so ein Pen-and-Paper-Rollenspiel eigentlich? Gemeinsam wird hier eine Abenteuergeschichte erzählt, in der die Gruppe einzelne Personen und deren Fähigkeiten und Träume ausspielen. Ziel ist die Erzählung einer spannenden und interessanten Geschichte, über die man gemeinsam fachsimpeln und scherzen kann. Als Spielleiter, der die Rahmenhandlung gestaltet, ist es manchmal gar nicht so einfach, der gesamten Runde gerecht zu werden. Mit einem Podcast-Publikum ist jedoch plötzlich alles anders: Nicht nur der Handvoll Personen am Tisch soll nun eine interessante Geschichte erzählt werden, sondern auch einer unüberblickbar großen Anzahl an Ohren quer in Deutschland und der Welt. Wir berichten von unseren Erfahrungen damit, dem großen Rätsel der Authentizität – und unserer Antwort darauf. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/UKFXVC/

C3VOC Infrastruktur und Geschichte (subscribe11)

Sat, 19 Oct 2024 20:30:00 +0200

Das CCC Video Operation Center ist eine Arbeitsgruppe des Chaos Computer Club die bei Chaos(-nahen) Veranstaltungen Vorträge & Co. aufzeichnet, live überträgt und veröffentlicht – so auch jede SUBSCRIBE. Das alles mit OpenSource Software auf eigener Hardware & Cloud – in dieser Form bereits seit dem CCCamp 2011. TBD = VOC Geschichte * FeM auf Congress seit 2005 = [[https://wiki.fem.tu-ilmenau.de/history/streaming/projekte/c3/22c3/start|22C3]] * 2010 * Vortragsaufzeichung Easterhegg 2010 (Andi) * ICMP5 http://www.icmp5.de/ Blümchenwiese * Workshop/Vortrag von Andi * derpeter und Andi treffen sich * Froscon (meise, derpeter) * derpeter ist auf GPN und holt florolf mit ins Boot * [[https://wiki.fem.tu-ilmenau.de/history/streaming/projekte/c3/27c3/start|27C3]] * Treffen/Workshop FEM+VOC * Tracker 3.0 kommt zum ersten Mal zum Einsatz * 2011 * CCCamp 2011 * Das erste pysikalische VOC: Ein Schiff-Fracht-Kontainer * [[https://wiki.fem.tu-ilmenau.de/history/streaming/projekte/c3/28c3/start|28C3]] * "dieses jahr sind auch die kollegen aus bonn mit dabei, die theora streaming machen" [https://c3d2.de/news/pentacast-43-28c3.html FEM ab 0h12m17s37] * 2012 * Froscon: florolf? * [[events:29C3]] [[https://wiki.fem.tu-ilmenau.de/history/streaming/projekte/c3/29c3/start|FeM-Wiki]] * 2013 * Juli: [[events:sigint13]] * Eigene Hardware!!! * Froscon: andi und florolf * drei kleinere Events leihen sich Hardware aus: MRMCD, TrollCon, hackover * [[events:30C3]] * FeM ist in Form von Atze und Texec stärker mit eingebunden als davor * 2014 * Fossgis (Berlin), SOTM EU (Karlsruhe) * Mazdermind kommt mit ins (Kern-)Team * Hack*n*Play, Easterhegg Stuttgart, GPN, FrOSCon, MRMCD, Hackover * EuroPython Berlin * "fünfter Raum" * Projektanträge Köln und München * Framegrabber Verleih: * Datenspuren Dresden * Nethack Stuttgart-Vaihingen * [[events:31C3]] * AGS * Audio-Podcasts mit Video * Chaosradio * Sendezentrum (31C3, 2x Podlove Podcaster Wochenende, Republica) * 2015 * Datengarten und andere Vortragsreihen * Easterhegg Braunschweig (AGS) * [[events:cccamp15|CCCamp 2015]] * [[events:32C3]] * FOSSGIS, Podlove Podcaster Workshop, Cryptocon, Chaos Cologne, PyData Berlin, GPN, FrOSCon, MRMCD  … Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/RDLXWN/

Wie aus Computern Homecomputer wurden (vcfb24)

Sun, 20 Oct 2024 11:00:00 +0200

Jeder kann die Geschichte seines eigenen ersten Computers erzählen. Aber meistens gibt es dann doch noch eine Geschichte, die älter ist. Suchen wir doch mal nach den allerersten Möglichkeiten, die sich Mitte der 1970er-Jahre ergaben, sich einen Computer nach Hause zu holen. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

Performing live with Ardour (sonoj2024)

Sat, 19 Oct 2024 10:50:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by/4.0 about this event: https://c3voc.de

lustigen Titel einfügen – ein Impulsvortrag (subscribe11)

Sun, 20 Oct 2024 12:30:00 +0200

Humor ist nicht dasselbe wie Comedy! Humor ist das Gegenteil! Meine These: Erfolgreiche Podcasts kommen ohne Humor nicht aus – er ist entscheidend, um aus Hörer*innen Fans zu machen. Humor prägt den Independent-Podcast seit dem ersten Tag. In diesem Impulsvortrag werde ich anhand von Beispielen zeigen, wie wir Humor oft unbewusst als scharfes Schwert einsetzen, um eine lebenswerte Gesellschaft zu gestalten. Humor in Podcasts ist kein schmückendes Beiwerk, sondern der Kern unserer Haltung zur Welt und zu unseren Inhalten. Erst er macht aus „Radio“ einen „Podcast“. Würdigen wir ihn! Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/CXJDHN/

ALTAIR, IMSAI, Dazzler und CP/M (vcfb24)

Sun, 20 Oct 2024 14:00:00 +0200

Im Vortrag geht es um die Entwicklung der ersten Rechner auf Basis von Intel 8080 und Zilog Z80, um die Menschen und Firmen, die die Frühgeschichte von Personalcomputern auf dieser Basis gestaltet haben, und speziell um die Anfänge der Computergrafik für Individualnutzer anhand der Dazzler-Grafikkarte von Cromemco. Die Dazzler nahm quasi alles vorweg, was technisch bis in die 1980er-Jahre entwickelt wurde, und wurde als Gesamtlösung mit der Cromemco Cyclops, der ersten Digitalkamera für Privatnutzer, und der Cromemco D+7A Soundkarte (damals noch als Digital/Analog-Wandler ausgelegt) sowie dem Joystick JS-1 konzipiert. Einige der Artefakte werden in der zugehörigen Ausstellung live gezeigt. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

EventSync (jh24)

Sun, 06 Oct 2024 14:59:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Wie konfigurierbar ist die Konfigurierbare Datenstation Robotron K8915? (vcfb24)

Sun, 20 Oct 2024 13:00:00 +0200

Bekannt ist der U880-basierte Robotron-Rechner K8915 aus dem thüringischen Zella-Mehlis vor allem als CP/M-Maschine. Es gibt jedoch auch eine Terminal-Variante der sogenannten "Konfigurierbaren Datenstation". Aber wie kommt dieser sperrige Name zustande? Was ist die Philosophie hinter dem als Multitalent anmutenden K8915? Der Vortrag soll dazu motivieren, auf eine Entdeckungsreise in ein längst vergessenes Computersystem zu gehen. Er soll den Versuch unternehmen, eine jahrzehntealte Datenverarbeitungs-Architektur und Bedienphilosophie nachzuzeichnen. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

Actually Real (jh24)

Sun, 06 Oct 2024 14:38:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

ArtCode (jh24)

Sun, 06 Oct 2024 14:45:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

10 Alpakas (jh24)

Sun, 06 Oct 2024 15:13:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Plattformfrei und Spaß dabei! (subscribe11)

Sun, 20 Oct 2024 11:00:00 +0200

Elons Musk Übernahme und Zerstörung von Twitter hat uns gezeigt warum Abhängigkeit von Plattformen eine sehr schlechte Idee sind. Was Podcasts angeht steuern wir gerade auf solche Abhängigkeiten zu, dabei ist das gerade bei diesem Medium völlig unnötig. Stellt euch vor ein nicht ausgelasteter Milliardär, nennen wir ihn Nole Smuk, kauft Spotify auf und beschließt dass alle Podcasts der Kategorie $fügthierdieKategoriedererPodcastseindieihrammeistenhört rausgeschmissen werden. Klingt nicht so geil oder? "Plattformfrei und Spaß dabei!" sagte mal ein weiser Mensch. Die Übernahme und Zerstörung von Twitter durch Elon Musk hat uns gezeigt warum wir diesen Spruch verinnerlichen sollten. Podcasts haben schon immer Plattformfrei funktioniert, Big Player wie Spotify, Audible & Co. haben sie sicher einer größeren Masse näher gebracht, aber gebraucht haben wir sie eigentlich nie. Doch wir sind gerade dabei uns in diese sehr ungesunde Abhängigkeit zu begeben, auf Konsumenten wie Produzenten Seite. Dabei hat gerade das Medium Audio, aus technischer Sicht, das überhaupt nicht nötig, es gibt etliche Podcast Apps die mit ihrem Feature-Set einen deutlich besseren Konsum ermöglichen und auch Hosting Möglichkeiten gibt es fast mehr als Sand am Strand. Die erfolgreichsten und bekanntesten Podcaster waren es schon bevor es Spotify & Co. gab oder Leute wussten was Podcasts sind ist. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/TDZEXZ/

Abschlussveranstaltung (vcfb24)

Sun, 20 Oct 2024 17:00:00 +0200

Rückblick über das VCFB 2024. Verleihung des Publikumspreises für die beliebtesten Ausstellungen mit Verlosung eines Preises unter den Teilnehmenden der Abstimmung. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

UnderTune (jh24)

Sun, 06 Oct 2024 14:17:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Free your Podcasts, Free your Audience. (subscribe11)

Sun, 20 Oct 2024 11:30:00 +0200

As the landscape of podcasting evolves, so does the need for innovative tools that empower creators to take control of their content and distribution. Enter Castopod, an open-source podcast hosting platform that seamlessly integrates with the Fediverse, offering unprecedented autonomy and connection in the world of podcasting. In this 30-minute talk, we'll explore how Castopod enables podcasters to publish directly to the Fediverse, bypassing traditional gatekeepers and fostering a decentralized, community-driven approach to content sharing. We'll dive into the technical aspects of Castopod, its commitment to open-source principles, and how it aligns with the values of the Subscribe community—promoting independence, creativity, and collaboration. You will gain insights into how Castopod not only enhances the podcasting experience but also contributes to the broader open-web movement, making it a vital tool for the future of podcasting. Whether you're a podcaster, developer, or passionate listener, this session will inspire you to rethink how podcasts are created, shared, and consumed in a rapidly changing digital landscape. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/L9ZTDF/

How to write a digital folk punk song in 40 minutes (sonoj2024)

Sat, 19 Oct 2024 17:00:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by/4.0 about this event: https://c3voc.de

Also ich hätte es ja lieber statisch: Alternativen zu Publisher, Podigee & Co (subscribe11)

Sat, 19 Oct 2024 15:00:00 +0200

Wir tauschen uns in diesem Workshop darüber aus, wie man Podcasts auch ohne komplexe serverseitige Software veröffentlichen kann und ob man das tun sollte. Seit 2018 veröffentliche ich den Podcast [7 Gute Gründe](https://www.7gutegruende.de/) mit dem statischen Webseitengenerator [HUGO](https://gohugo.io/) und habe einige Erfahrungen gesammelt. Lasst uns über Vorteile, Nachteile und Alternativen sprechen. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/EX999T/

Groovebox, Looper & Sampler in the browser (sonoj2024)

Sat, 19 Oct 2024 13:25:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by/4.0 about this event: https://c3voc.de

Digital Vinyl DJing with Pis (sonoj2024)

Sat, 19 Oct 2024 11:55:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by/4.0 about this event: https://c3voc.de

Cutify Bot (jh24)

Sun, 06 Oct 2024 14:24:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Alpascanner (jh24)

Sun, 06 Oct 2024 15:06:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Als die Bälle laufen lernten (vcfb24)

Sun, 20 Oct 2024 10:15:00 +0200

Der Vortrag unternimmt einen zielgerichteten Ausflug in die Geschichte der Anfänge der Videospiele, analog und digital, die wegen der Gewinnspanne mit einem Minimum an Bauelementen auskommen mussten. An Computertechnik im Heimbereich war noch lange nicht zu denken. Der Fernseher war mittlerweile dank Ralph Baer als Massenmedium etabliert. Die Erzeugung fixer Objekte auf dem Screen war den Umständen entsprechend aufwandsarm, aber wie bewegte man ein Objekt, also vorzugsweise den Ball? Analoge Spiele nutzten den näherungsweise linear verlaufenden Teil der Lade- bzw. Entlade-Kurve eines Kondensators. Für die digitalisierten Spiele musste man sich etwas Aufwandsarmes einfallen lassen. Die späteren Atari-Gründer N. Bushnell und T. Dabney haben das getan. Allerdings gibt es kaum eine Beschreibung dessen. Die außerordentlich geniale Lösung kommt lediglich mit zwei Binärzählern aus. Der Vortrag befasst sich mit den Erläuterungen dazu. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

Was war Samstag? (subscribe11)

Sun, 20 Oct 2024 10:00:00 +0200

Die Session-Hosts (oder Teilnehmer der Session) erzählen in drei Sätzen was gestern in den jeweiligen Barcamp Sessions passiert ist. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/RVBVEG/

Erstellung und Nutzung von Transkription und LLMs für Podcasts (subscribe11)

Sun, 20 Oct 2024 10:00:00 +0200

Wir lernen, wie man aus seinen Podcasts Transkripte generiert und wie man sie in Feed und in die eigene Website einbindet, wie Transkripte heute schon von Podcast Clients unterstützt werden und wie man darüberhinaus und in Zukunft diese nutzt, um ein noch besseres Angebot zu machen. Durch neue Machine-Learning-Systeme wie Whisper werden Transkripte immer einfacher erstellbar, werden dabei auch immer treffsicherer. Die Automatisierung der Transkription erzeugt zwar noch viele Fehler, aber auch fehlerhafte Transkripte können schon sehr dabei helfen, Inhalte zu finden und wiederzufinden. Die Zusammenfassungen von LLMs sind darüberhinaus hilfreich thematische Zusammenfassungen und automatische Kapitelerkennung durchführen zu lassen. Im Workshop schauen wir, was es für Werkzeuge gibt, wie man diese einsetzt und diskutieren das Hin und Wider dieser Technologien. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/LUV8EX/

Toiletten-Karte (jh24)

Sun, 06 Oct 2024 14:10:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Abschlussrunde (subscribe11)

Sun, 20 Oct 2024 15:00:00 +0200

Die SUBSCRIBE 11 findet ihren krönenden Abschluss und wir treffen uns noch einmal in großer Runde um unsere Erfahrungen des Wochenendes. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/YWNPK3/

Welcome (sonoj2024)

Sat, 19 Oct 2024 10:40:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by/4.0 about this event: https://c3voc.de

My Cycling City (jh24)

Sun, 06 Oct 2024 14:52:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Comfort Board (jh24)

Sun, 06 Oct 2024 14:31:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

Podstock (subscribe11)

Sat, 19 Oct 2024 16:45:00 +0200

Was ist das Podstock? Wer organisiert es und wie? Das Podstock (Podcast + Festival + Barcamp) ist ein Treffen für Podcast-Macher\*innen und -Hörer\*innen, das sich vor allem an eher unabhängige Podcasts richtet. Wer möchte, kann den Podcast oder etwas ganz neues auf die Bühne bringen, aber auch Workshops mit und ohne Podcast-Bezug gibt es jede Menge. Ein besonderes Merkmal: Das Podstock ist nicht kommerziell und gewinnorientiert, die Preise bezahlen nur die Unkosten. Es gibt keine Werbepartner und der Schwerpunkt liegt nicht auf dem Business-Aspekt des Podcastens, sondern auf den Menschen und dem Spaß. Oder kurz: Podstock ist, was Du draus machst. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/FDYZLU/

Podcast Hosting mit Podigee: (subscribe11)

Sat, 19 Oct 2024 14:00:00 +0200

Wir zeigen euch warum man ein Podcast Hosting braucht und warum Podigee vielleicht genau das richtige für euch sein könnte. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/JFKN8K/

Im Dunkeln ist alles viel aufregender (subscribe11)

Fri, 18 Oct 2024 20:30:00 +0200

Eine Zeitreise in die letzten 50 Jahre der Entwicklung individueller Kommunikation in Netzen und warum Podcasts zu einer der wichtigsten Medienformen geworden sind. Die Entwicklung individueller Kommunikation im Internet und seinen Vorläufern musste viele Umwege gehen um dort zu landen, wo sie heute steht. Der Vortrag blickt zurück auf die wichtigsten technischen und sozialen Entwicklungen im Internet, die die Basis für Podcasts gelegt haben, wie wir sie heute kennen. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/W8P7CU/

Zwischen den Codezeilen - die Ultraschall Keynote (subscribe11)

Sat, 19 Oct 2024 11:50:00 +0200

Unser Vortrag stellt die Features der 5.1 Release vor und skizziert die größeren Entwicklungslinien der kommenden 6er Release. Ultraschall ist ein Open-Source-Projekt, das seit fast 11 Jahren auf der Digital Audio Workstation (DAW) REAPER aufbaut und speziell für die Bedürfnisse von Podcastern entwickelt wurde. Während viele DAWs hauptsächlich für die Musikproduktion konzipiert sind, bietet Ultraschall eine angepasste Benutzeroberfläche und Funktionen, die den gesamten Prozess des Podcastings vereinfachen. Tausende Produzent:innen von Podcast nutzen seit 2021 die stabile 5er Version. Wir haben wieder dutzende Optimierungen und einige spannende neue Features für die neue 5.1 zusammengebunden. Die Keynote zeigt aber auch, woran wir längerfristig arbeiten - neue Technologien eröffnen uns hier völlig neue Möglichkeiten. Und garantiert ist keine Blockchain dabei, versprochen! Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/VNPF3M/

Speichertechnologien im Rückblick (vcfb24)

Sat, 19 Oct 2024 14:00:00 +0200

Den Freunden des Vintage Computing sind Magnetbänder, Disketten, Lochkarten, Lochbänder usw. natürlich bestens bekannt. Aber wie ging das los? Was war sehr lange davor? Und welche Erwartungen und welche Möglichkeiten haben wir zumindest für die nahe Zukunft? Eine Zeitreise aus der Sicht des Computermuseums an der HTW. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

Choose Your Own Adventure: (subscribe11)

Sat, 19 Oct 2024 17:30:00 +0200

In diesem Vortrag nimmt der Host Nicolas Wöhrl von “methodisch inkorrekt!” das Publikum mit auf eine Reise durch 12 Jahre Podcast-Abenteuer. Er erzählt, wie aus einem kleinen Projekt ein Podcast mit über 300 Episoden, einer treuen Community und schließlich einer GmbH mit zwei ordentlich bezahlten Geschäftsführern wurde. Aber: Es geht nicht darum, den einen “richtigen” Weg zum Erfolg zu finden – denn den gibt es nicht! Stattdessen liefert der Vortrag konkrete Learnings, von Hörergewinnung über Themenfindung bis zur Finanzierung. Dabei wird klar: Es gibt nicht die eine Erfolgsformel, sondern viele Möglichkeiten, die eigenen Stärken ins Spiel zu bringen und sich Sicht- und Hörbar zu machen. Wer glaubt, es gäbe nur den einen Weg, schadet nur der eigenen Kreativität und blockiert das Potenzial, wirklich etwas Einzigartiges zu schaffen. Also: Werdet mutig, experimentiert, glaubt nicht alles was in diesem Vortrag gesagt wird sondern findet euren eigenen Weg – denn die besten Geschichten schreibt ihr selbst. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/JLSXQA/

Podcast als Idee oder Unternehmen (subscribe11)

Sat, 19 Oct 2024 14:45:00 +0200

Stefan Schulz macht Podcast aus einer Hand, Katrin Rönicke macht Podcasts als Unternehmen. Wir reden darüber, wo Ideen herkommen und wie man sie sich nicht austreiben lässt. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/S7H98Y/

Puerto Patida und das Leben am Limit der Soundspuren (subscribe11)

Sat, 19 Oct 2024 12:20:00 +0200

Je 10 Teammitglieder, 3 iPads, 12 Tonspuren, 3000 Einspieler. Seit etwa 10 Jahren machen wir aufwändige Produktionen und lieben es. 2016 wurde Puerto Patida für den Grimme Online Award nominiert, seitdem ist viel passiert. Wir sprechen über die Learnings aus jahrelanger Erfahrung und Entwicklung von Podcastformaten. Folgende Fragen stellen sich: Was lernten wir aus Filmproduktionen? Was zeigt die Erfahrung? Wie wird das finanziert? Datenaustausch und Hosting von vier Formaten. Mögliche Probleme beim Wechsel von Feeds. Selbst entwickeltes Chat-Tool für Showformate. Bis hin zur wechselnden Community-Betreuung. Und was lernen wir daraus für neue Formate? Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/ZNQSQL/

Gesprächspodcast: Gästeanfrage und Gesprächsführung (subscribe11)

Sat, 19 Oct 2024 14:00:00 +0200

Du startest oder betreibst einen Gesprächspodcast zu einem bestimmten Thema? Du möchtest prominente Gäste/vielbeschäftigte Expert*innen für Deinen Podcast gewinnen und weißt nicht genau, wie Du das anstellen sollst? Du willst längere Gespräche führen und bist Dir unsicher, wie Du die Gespräche strukturieren willst und wie stark Du Dich überhaupt vorbereiten sollst? Ich zeige Dir, wie Du E-Mails so formulierst, dass die Chancen für eine positive Antwort steigen und wie Du Dein Gespräch so vorbereitest, dass Du spontan sein kannst und Dich dennoch nicht verlierst. Bringe gerne Beispiele für eine Person mit, die Du zu einem bestimmten Thema anfragen möchtest und dann entwickeln wir gemeinsam eine Anfrage und eine Gesprächsstruktur. Mein Hintergrund: Ich habe nach einem Volontariat 12 Jahre beim Hessischen Rundfunk gearbeitet, überwiegend als Redakteurin und Moderatorin, u.a. für die monothematische Politsendung "Der Tag". Von 2012 bis 2024 war ich Pressesprecherin der Europa-Universität Flensburg. Seit zwei Jahren hoste ich den Podcast "Erschöpfung statt Gelassenheit - warum Achtsamkeit die falsche Antwort auf so ziemlich jede Frage ist". Seit Juli 2024 arbeite ich freiberuflich als Podcasterin, Autorin und Moderatorin. Von Beginn meines beruflichen Daseins an musste ich Menschen darum bitten, bei irgendetwas mitzumachen: Ein Interview geben, für einen Beitrag zur Verfügung stehen, als Künstler*in auftreten, eine Kooperation eingehen etc. Meine Erfolgsquote ist recht hoch - ich erkläre mir das mit den sorgfältig aufgesetzten, transparenten, informativen und fokussierten Anfragen, die ich versende. Mein Podcast besteht aus einem Gespräch von bis zu 2 Stunden - schon bei HR2/Kultur habe ich am liebsten längere Gespräche geführt. Ich habe viele Fortbildungen zu Gesprächsführung besucht und glaube mittlerweile, dass gute Vorbereitung, aufmerksames Zuhören, die Bereitschaft, sich selbst zu zeigen und die Fähigkeit, sich mittels einer klaren Fragestellung auch auf unübersichtlichem Gelände zurechtzufinden, unabdingbare Voraussetzungen für ein gelungenes Gespräch sind. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/98M7YB/

Welcome to SUBSCRIBE11 (subscribe11)

Fri, 18 Oct 2024 16:00:00 +0200

Begrüßungsveranstaltung und Standortbestimmung der unabhängigen deutschen Podcastszene Mehr als fünf Jahre sind vergangen seit der letzten SUBSCRIBE und es wird eine Herausforderung, die alte Dynamik wieder aufzunehmen, doch sind viele Projekte wie Podlove und Ultraschall immer noch wichtig und aktiv und auch die Intensität des Podcastings hat nicht abgenommen. Podcasts sind mittlerweile komplett im Mainstream angekommen und viele Hobby-Podcaster haben dieses Hobby zum Beruf machen können. Zelebritäten und und andere Wichtigtuer haben alle Podcasts als wichtiges Outlet erkannt und die unterschiedlichsten Finanzierungsmodell werden ausprobiert. Was bleibt von der freien Szene und welche Bedeutung wird sie künftig haben? Wir versuchen eine Standortbestimmung und Selbstreflexion. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/YVHJZC/

Ich kann so nicht arbeide - Albtraum Comedypodcast (subscribe11)

Fri, 18 Oct 2024 17:45:00 +0200

Ich hatte eine lustige Podcast-Idee. In diesem Talk dreht es sich um die 10 Dinge, die ich nach einem Jahr und hundert Folgen gelernt habe. Ein Talk für alle, die auch eine Podcast-Idee haben und nicht wissen, was auf sie zu kommt, aber danach sofort loslegen möchten. Wie fängt man an? Was tun, wenn Gäste kein eigenes Mikrofon haben aber auch keinen Computer? Was, wenn man im Hotel zum Interview verabredet ist, aber niemand davon weiß? Sind drei Backups zu viel? Wie bleibt man Freunde, wenn man 60 Stunden miteinander redet? Wie erklärt man der größten Medienagentur Deutschlands, dass das alles doch nur eine Schnapsidee ist? Wie fühlt es sich an, plötzlich beim größten Comedy-Festival dabei zu sein, weil die nicht wissen, dass man nur 500 Hörer*innen hat? Mit zwei Freund*innen hatte die Idee, die Komödie "Kein Pardon" von 1993 Minute für Minute zu besprechen. Was nach einer witzigen Idee klingt, wurde zu einem harten Ritt. Der Talk soll motivieren, es uns trotzdem gleich zu tun. Ein Talk über 10 Fehler, 10 Missverständnisse und 10 Überraschungen. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/8JFHS3/

RiffReporter: Journalismus neu gedacht (subscribe11)

Sat, 19 Oct 2024 16:00:00 +0200

Die RiffReporter, eine 2017 gegründete Genossenschaft von über hundert Journalist*innen, bieten eine Lösung für die Krise im Journalismus. Sie recherchieren tiefgehend zu Themen wie Weltgeschehen, Umwelt und Technik. Seit Ende 2023 moderieren Karl Urban und Marcus Anhäuser den RiffPodcast. Journalismus ist gilt als vierte Gewalt und wichtiger Pfeiler der Demokratie. Und der schwankt: Medienhäuser sparen, Lokalenmedien verschwinden, öffentlich-rechtliche Medien werden politisch in Frage gestellt. Dabei ist längst klar: Regionen, in denen die Berichterstattung zurückgeht, haben Lobbyismus und extremistische Kräfte ein leichtes Spiel. Die RiffReporter bieten eine Antwort auf diese Krise: In der 2017 gegründeten Genossenschaft haben sich über hundert Journalistïnnen zusammengeschlossen. Sie recherchieren und schreiben zu aktuellen Themen: dem Weltgeschehen, Umwelt, Klima oder Technik. Es sind viele Recherchen dabei, die aktuelle Themen in großer Tiefe ausleuchten. Auch mehrere Podcasts erscheinen im Angebot der RiffReporter (RiffReporter Podcast, AstroGeo, Über Geschichte, Fließende Wasser). Karl Urban und Marcus Anhäuser sind seit Ende 2023 die Hosts des RiffPodcasts (https://www.riffreporter.de/de/riffreporter-podcast). Sie stellen euch Genossenschaft und Podcast vor und möchten mit euch darüber sprechen, wie ihr zum genossenschaftlichen Journalismus steht. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/8WP7NS/

Paperware (vcfb24)

Sat, 19 Oct 2024 10:30:00 +0200

Keine Programmiersprache kann ein so umfangreiches Archiv an Textdokumenten vorweisen wie BASIC. In Büchern und Zeitschriften, aber auch als Listing-Ausdrucke, Notizen, Randanmerkungen und auf Zetteln existiert ein Fundus von Texten zu BASIC, der seiner Auswertung noch harrt. Die Dokumenten bergen dabei nicht bloß "papierne Software", sondern sind auch Ausdruck von programmiererischen Individualstilen, tragen Merkmale von regionalen oder plattformbezogenen Vorgehensweisen, künden von autodidaktischem Programmierlernen und liefern damit einen tiefen Einblick in die professionellen und hobbyistischen Programmierkulturen der Vergangenheit. In meinem DFG-Forschungsprojekt an der Universität Bonn werte ich diese Programmcodes als Texte mit Hilfe unterschiedlicher philologischer, informatischer und medienwissenschaftlicher Methoden aus. Im Vortrag stelle ich meine Methodologie vor und zeige Beispiele aus dem reichhaltigen Papierarchiv sowie erste Ergebnisse der computerphilologischen Forschung zu BASIC. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

Bildet Banden! (subscribe11)

Fri, 18 Oct 2024 17:15:00 +0200

Ich habe beschlossen, aus meinen Projekten eine Podcast-Kooperative zu machen. Warum und wie erkläre ich hier. In diesen Vortrag möchte ich meine Beweggründe für das Gründen einer Kooperative erklären. Warum dieser Ansatz für freie Podcastende eine gute Möglichkeit ist, und warum wir ihn brauchen. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/C97GAF/

The B Programming Language (vcfb24)

Sat, 19 Oct 2024 11:15:00 +0200

Everyone knows about C, but only few have seen its predecessor B. Unlike C, B was not compiled to machine code but to various incarnations of an interpreted code. Unfortunately, the original B compiler does not seem to have survived, but the interpreter, standard library and a few binaries have. With this it was possible to recreate a compiler – of course written in B itself – that is reasonably close to what it would have been around 1971. Because B is so minimal it is a perfect language to study how a simple compiler works. In the talk you will see what B is like, how it works, how it was reconstructed, and of course see it running under the first edition of UNIX. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

Wie man einen (Retro-)Podcast from scratch startet (subscribe11)

Fri, 18 Oct 2024 19:45:00 +0200

Podcasts sind en vogue - doch wie startet man einen, wenn man absoluter Neuling ist? Neben einem spannenden Thema braucht es vor allem passende Tools für die Produktion und Veröffentlichung sowie eine solide inhaltliche Planung samt Branding. In diesem Talk teile ich meine Lessons Learned nach einem Jahr "ThinkPad-Museum". Podcasts erfreuen sich großer Beliebtheit - das Angebot ist größer als in absehbarer Zeit konsumiert werden könnte. Schön, wenn man selbst mit einem spannenden Thema zur Vielfalt beitragen möchte. Doch, wie kommt man als Neuling zum gewünschten Ergebnis? Mit spannenden Inhalten ist ein Grundstein gelegt, der mithilfe von passendem Audio-Equipment und -Tools weiter reifen kann. Ein Branding mit Wiedererkennungswert kann den weiteren Erfolg maßgeblich beeinflussen. Eine solide inhaltliche und zeitliche Planung ist notwendig - nicht zuletzt, wenn Gäst:innen das Format interaktiver machen sollen. Ist die Folge dann im Kasten, stellt sich die Frage nach dem Hosten des Feeds sowie der Bewerbung der jeweiligen Episoden. Zu guter Letzt kann Analytics dabei unterstützen, mehr über die Zuhörerschaft zu erfahren. In diesem Talk gebe ich euch einen Einblick in meine Arbeit beim ThinkPad-Museum Podcast und zeige euch meine Lessons Learned. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/TFCEPP/

Pixels and Paper (vcfb24)

Sat, 19 Oct 2024 13:00:00 +0200

In vielen populären Computerrollenspielen der 1980er-Jahre nahmen die Handbücher eine vielfach unterschätzte erzählerische Funktion ein. Sie fügten dem Spiel lebendige Beschreibungen und Bilder hinzu, welche die Software seinerzeit oft nur symbolisch hervorbrachte, und regten damit die Vorstellung von der jeweiligen Fantasy-Welt an. Diese hybride Technik war nicht nur Mittel zum Zweck, sondern knüpfte gleichzeitig an bestehende Erzähltechniken aus der Pen-and-Paper-Welt an. Der Beitrag untersucht 16 ausgewählte Handbücher und erörtert daran unterschiedliche hybride Erzählstrukturen, um aufzuzeigen, dass Software und Handbuch gestalterische Einheiten bildeten. Die Paperware zu den Spielen gibt es natürlich auch "zum Anfassen". Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

"Wie lernt eine Maschine?" (subscribe11)

Sat, 19 Oct 2024 12:30:00 +0200

Die digitale Welt entwickelt sich rasant weiter. Es gibt mittlerweile innovative Lösungen für Probleme, die es vor einiger Zeit noch gar nicht gab. Doch sogar mit immer intelligenteren Tools zeigt sich, dass es kein universelles Allheilmittel gibt – keine "One-Size-fits-all"-Lösung für die Audiopostproduktion. Bei Auphonic stehen wir täglich vor der Herausforderung automatisierte Lösungen für einzigartige Audio-Probleme zu finden. Hier zeigen wir euch unsere Lösungen sowie offene Fragen und Probleme, mit denen wir konfrontiert sind. Wir werden verschiedene Anwendungsfälle präsentieren, zeigen wie unsere KI-Tools optimal genutzt werden können, was bei der Entwicklung und dem Training von Modellen zu beachten ist und welche Prinzipien für unterschiedliche Kontexte wie Musik, Sprache, Atmosphäre und Soundeffekte wichtig sind. Wir zeigen euch einen kleinen Abriss über die Geschichte der Audio Postproduktion, wann und wo Auphonic entstanden ist, was wir gerade machen und wie ihr unsere Tools optimal nutzen könnt. Bringt gerne alle eure Fragen mit! Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/VL7KAG/

Podlove Podcast Publisher (subscribe11)

Sat, 19 Oct 2024 10:00:00 +0200

Der Publisher ist Open Source Software zum Veröffentlichen von Podcasts. Wir schauen auf den aktuellen Stand und blicken auf die letzten Jahre Entwicklung zurück. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/EUQJVQ/

Podcast-Design (subscribe11)

Sat, 19 Oct 2024 19:30:00 +0200

Tim Pritlove und Maria Bokelberg im Gespräch über wie man Podcasts gezielt für eine bestimmte Zuschauerschaft zuschneidet, welche Elemente sich von alleine entwickeln müssen und wo man einfach mal Glück haben muss. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.c3voc.de/subscribe11/talk/UWJHKE/

Eröffnungsveranstaltung (vcfb24)

Sat, 19 Oct 2024 10:15:00 +0200

Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://c3voc.de

Können Daten Menschen heilen? (dgna)

Thu, 17 Oct 2024 21:30:00 +0200

Die Hoffnung ist gross, dass Digitalisierung und künstliche Intelligenz unser Gesundheitswesen revolutionieren wird und Menschen schneller und besser heilen kann als bisher. Doch ist diese Hoffnung gerechtfertigt oder nur ein schöner Traum? André Baumgart arbeitet beim Verband Zürcher Krankenhäuser und ist für die Themen Qualität, Patientensicherheit und Digitalisierung verantwortlich. Er wird uns einen profunden Überblick über die aktuelle Lage geben: Welche Tools nutzen die Leistungserbringern, welche stehen uns Patientinnen und Patienten zur Verfügung; Was kann künstliche Intelligenz heute schon leisten und was in naher Zukunft; Aber auch kritische Themen wie gläserner Mensch und Datenschutz werden angesprochen. about this event: https://www.digitale-gesellschaft.ch/event/netzpolitischer-abend-zu-stand-der-entwicklung-der-staatlichen-e-id/

Jugend hackt Luzern 2024, Projektpräsentationen (jhch)

Sun, 13 Oct 2024 15:30:00 +0200

Präsentation der Projekte anlässich des «Jugend hackt» Events vom 11. bis 13. Oktober 2024 im «Tüftelwerk» Luzern. Mit FitnessGoorus haben Diana, Emmi und Valérie ein Spiel geschaffen, um Menschen vor Verletzungen bei der körperlichen Ertüchtigung zu schützen. In fünf Schwierigkeitslevels lernen die Spielenden die Muskeln kennen, die sie bei spezifischen Übungen belasten. Elias und Vadim entwickelten eine Quiz-Webapp, um das Lernen interessanter, beziehungsweise einfacher zu machen. Dank Quizzy ist es in Zukunft für alle problemlos möglich, Lerninhalte in Fragen zu packen, damit Schüler:innen sie spielend erörtern können. Ein Atomkraftwerk explodiert, die Bewohner:innen mutieren zu Zombies: Beim Project Nuclear Terminator, das von Emil, Lev, Luc und Robi erfunden wurde, geht es schlicht ums Überleben. Zur Umsetzung verwendeten die vier die frei verfügbare und für Kinder und Jugendliche einfach zu bedienende Programmiersprache Scratch. about this event: https://c3voc.de

Big Brother Awards (2024) (bba24)

Fri, 11 Oct 2024 20:00:00 +0200

Die Oscars für Überwachung Zweifelhafte Geschäftsmodelle, Politikerinnen im Überwachungswahn oder schnüffelnde Arbeitgeber – die BigBrotherAwards gehen auch in diesem Jahr wieder an die wahnwitzigsten und skrupellosesten Datenkraken in Wirtschaft und Politik. about this event: https://c3voc.de

Unconventional HDL synthesis experiments (rc3)

Tue, 29 Dec 2020 18:00:00 +0100

Most synthesis goes from hardware description languages to FPGA bitstreams or ASIC designs, but what else can you do? In this talk I will demonstrate some more unconventional flows to inspire you about all the amazing experiments that are enabled by open source tools! After a short intro about the open source FPGA ecosystem, I will introduce a project by Dan Ravensloft and myself that synthesizes HDL to 74xx logic chips. Then I will cover a project of mine that synthesizes spreadsheets to HDL. And from there to 74xx logic??? Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://fahrplan.events.ccc.de/rc3/2020/Fahrplan/events/11384.html

Rust in the Linux Kernel - A Status Check (mrmcd24)

Sun, 06 Oct 2024 14:00:42 +0200

Rust has been the up and coming new programming language that will remove whole categories of bugs like memory leaks and race conditions from code forever. Since a few years, step for step more Rust code has been added to mainline. This talk gives a an overview of what kernel modules you can already write (not much) and how Rust code interacts with the existing Linux Kernel written in C. This talk will mostly just summarise the blog entries, for the people who are also too lazy to read: https://blog.christina-quast.de/ https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/KHV8US/

Ethersync – Echtzeit-Kollaboration in deinem Texteditor! (mrmcd24)

Sun, 06 Oct 2024 12:00:42 +0200

Wir möchten euch unser Projekt "Ethersync" vorstellen, eine Software und ein Protokoll für Echtzeit-Kollaboration. Das ganze soll sich anfühlen wie ein Etherpad, aber für ganze Projekte, auf dem lokalen Dateisystem, und mit Neovim, VS Code, oder euren anderen Lieblings-Texteditoren! Wir sprechen über unsere Vision, die technische Umsetzung, und über Herausforderungen, auf die wir dabei stießen. Mit Software wie Etherpad oder Hedgedoc zusammenzuarbeiten fühlt sich ein bisschen an wie Magie: Man kannst sofort sehen, was andere gerade tippen. Der Nachteil ist, dass man online sein muss, um auf den Inhalt zuzugreifen – da das Dokument auf einem Server liegt, ist es verschwunden, sobald man die Verbindung trennt. Wir arbeiten an einer Open-Source-Software namens "Ethersync", um Echtzeit-Kollaboration ins Dateisystem zu bringen! Wir wollen es möglich machen, zusammen Notizen und Dokumentation zu schreiben, und denken auch an Use-Cases wie Pair-Programming – direkt in Neovim, VS Code oder vielleicht bald auch in eurem Lieblingseditoren. Wir folgen dabei dem "Local-First"-Ansatz, bei dem man immer die Kontrolle über die Daten behält, da sie auf der eigenen Festplatte gespeichert sind. In diesem Vortrag möchten wir unsere Vision für diese Art der Zusammenarbeit erläutern und euch unseren Fortschritt und unseren aktuellen Prototypen zeigen. Wir möchten einige der Probleme erklären, auf die wir dabei gestoßen sind, und auf die zugrundeliegende Technologie eingehen (wie Conflict-Free Replicating Data Types und Operational Transform). Denn wie sich herausstellt, ist dies ein schwer zu lösendes Problem. Außerdem möchten wir erklären, wie ihr euch beteiligen könnt: Beispielsweise könnten wir Hilfe dabei brauchen, Plugins für mehr Texteditoren zu entwickeln! https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/V7BRVP/

Complexity Kills: Untersuchung von IT-Sicherheitsherausforderungen in Gesundheitseinrichtungen (mrmcd24)

Sat, 05 Oct 2024 20:30:42 +0200

Eines der Versprechen des Hippokratischen Eids lautet, keinen Schaden anzurichten. Einrichtungen des Gesundheitswesens müssen die Sicherheit der Patienten in jeder Phase der Behandlung gewährleisten. In der heutigen digitalisierten Welt stehen Krankenhäuser vor einzigartigen Herausforderungen in Bezug auf die IT-Infrastruktur und die Cybersicherheit. In dieser Präsentation geben wir einen Überblick über die Komplexität und den Umfang der IT- und Medizingerätelandschaft in modernen Krankenhäusern und bieten einzigartige Einblicke in die wichtigsten Sicherheitsherausforderungen einer der größten Gesundheitsorganisationen in Deutschland. Unser Vortrag wird sich auf die Sicherheitsherausforderungen konzentrieren, denen Krankenhäuser und medizinische Versorgungszentren als Betreiber öffentlicher Gesundheitsdienste gegenüberstehen. Wir möchten organisatorische Faktoren hervorheben, die die Komplexität erhöhen, wie z.B. begrenzte Budgets, verteilte Verantwortlichkeiten, Politik und Einstellungsschwierigkeiten im Wettbewerb mit anderen Branchen, die weniger komplexe Probleme, aber mehr finanzielle Ressourcen haben. Wir möchten die offensichtlichen Herausforderungen beleuchten, die verschiedene Technologien und Infrastrukturen für Krankenhäuser bei der Erbringung ihrer Dienstleistungen darstellen. So unterstützen Software und Infrastrukturen medizinische Prozesse wie Abrechnungs- und Verwaltungssysteme, die für die Verwaltung und Unterstützung der medizinischen Versorgung von entscheidender Bedeutung sind, aber nicht direkt mit der Behandlung zu tun haben. Diese Software ist typisch für den Gesundheitssektor, aber vergleichbar mit der normalen IT-Infrastruktur von Unternehmen. Im Gegensatz dazu agieren die medizinischen Geräte oft als Blackboxen innerhalb der Kerninfrastruktur. Diese Geräte kommunizieren typischerweise mit verschiedenen medizinischen Informationstechnologien in ihren eigenen Anbieter-Ökosystemen und werden als Cluster verwaltet. Diese „IT-Infrastruktur-Inseln“ sind oft mit anderen Kerndiensten des Gesundheitswesens, wie Krankenhausinformationssystemen, über einen unterschiedlichen Grad an interoperablen und modernen medizinischen Kommunikationsstandards verbunden. Es gibt auch hybride Systeme, wie z. B. Software, die als medizinisches Gerät betrachtet wird. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/K8EKGX/

There and back again or on building a robot to sail across the Atlantik (mrmcd24)

Sat, 05 Oct 2024 21:10:42 +0200

In dem Vortrag wollen wir anhand unser beiden aktuell gebauten bzw. im Bau befindenden autonomen Segelboote einen Einblick in den Bau solcher Roboter geben sowie unsere lessons-learned mitgeben, damit Ihr sie nicht auch nochmal extra lernen müsst. Wir sind vom Sailingteam Darmstadt, einer Hochschulgruppe, die autonome (unbemannte) Segelboote entwickelt. Im Vortrag wollen wir, nach einer Übersicht über aktuelle und hoffentlich bald wieder belebte Wettbewerbe, anhand der Entwicklung unserer letzten beiden Boote einen Leitfaden zur Entwicklung solcher geben. Dabei beginnen wir mit den Möglichkeiten, die beim Rumpf und dem Segelplan bestehen, gehen auf Besonderheiten der Elektronik ein und enden bei der Programmierung, dem OS und der langfristigen Planung. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/XNQD9K/

Network File System Security (mrmcd24)

Sun, 06 Oct 2024 13:00:42 +0200

The Network File System was developed by Sun and its protocol version 2 was published to the public in 1989. The assumptions about networks date back to the same era. Still, it is widely used in corporate networks or universities. It is a scalable way to implement network shares, especially in Unix/Linux environments it is often used to mount home directories across large IT landscapes. While there are ways to implement encryption and access controls in a (more) secure manner with Kerberos, many enterprises do not. Furthermore, most operators do not understand the security model of the NFS protocol. In this talk we will talk about the security misconceptions of NFS and how to exploit them. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/7RR38D/

Vereine gründen für das Fediverse (mrmcd24)

Sun, 06 Oct 2024 12:00:42 +0200

Das Fediverse lebt davon, dass es auf vielen Schultern getragen wird. Technische Erklärungen gibt es haufenweise. Ich konzentriere mich auf die organisatorische Ebene. Gründet einen Verein für eure Fediverse-Instanz und verteilt Moderation, Administration und Finanzierung auf mehrere Schultern. Ich spreche darüber, wie das abläuft und was ihr beachten solltet. Ich argumentiere, warum ein Verein eine gute Struktur für so ein Projekt ist. Was es mit Gemeinnützigkeit auf sich hat, und ob das zusammen passt. Was diese Satzung ist, und wo man eine her bekommt. Wie man ein Konto dafür eröffnet und vielleicht sogar, wie es dann weiter geht. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/LTKCKA/

Technikphilosophische Matinee (mrmcd24)

Sun, 06 Oct 2024 10:00:42 +0200

Am Sonntagvormittag, zum Hackermorgengrauen des letzten Tages, treffen sich philosophieinteressierte oder unterhaltungsbedürftige Entitäten mit Sektglas (mit Sekt oder Mate) rund um ein Sofa und philosophieren. Herzlich Willkommen! Ein Update aus der Welt der Philosophie für Technikbegeisterte. Kann Spuren von künstlicher Minderintelligenz, Kybernetik und Technikgeschichte enthalten. Am Sonntagvormittag, zum Hackermorgengrauen des letzten Tages, treffen sich philosophieinteressierte oder unterhaltungsbedürftige Entitäten mit Sektglas (mit Sekt oder Mate) rund um ein Sofa und philosophieren. Herzlich Willkommen! Ein Update aus der Welt der Philosophie für Technikbegeisterte. Kann Spuren von Künstlicher Minderintelligenz, Kybernetik und Technikgeschichte enthalten. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/7FCDTD/

Designing a power bank inside a can of Volt Cola (mrmcd24)

Sat, 05 Oct 2024 21:10:42 +0200

No idea how you would build a power bank that speaks USB-C? This talk is for you! - Beginner friendly, but with all the technical details! - Started from zero in electronics and hardware design - I want to motivate you to do a project without prior knowledge for fun and learning! - Ended up with a functional 250Wh USB-C PD power bank with a custom circuit board inside a can of *Volt Power Cola*. No idea how you would build a power bank that speaks USB-C? This talk is for you! I started the project with no hardware design experience and close to zero knowledge about electronics. My main goal was **learning something new while having fun**, so I picked a project that would be challenging but achievable at the same time. I want to motivate you to do the same, and I'll share what I've learned along the way. I had to learn about basic electricity and electronics, batteries, designing circuit boards, different soldering techniques, spot welding, reading chinese datasheets, 3D printing, CNC milling, the USB PowerDelivery protocol, the I²C protocol, shrinkwrapping a design foil onto a soda can, safety measures, and so much more. The electronics are based on an IP5328P chip. You'll learn about the many challenges and how I solved them. And of course how to build a power bank. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/FXW9UX/

Eisberg voraus! (mrmcd24)

Sun, 06 Oct 2024 15:00:42 +0200

Zu den Rettungsbooten https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/SDEU7P/

Das Hackerdorf: Gemeinsames Wohnen für Nerds (mrmcd24)

Sun, 06 Oct 2024 11:00:42 +0200

Wir Hacker sind nicht nur im Cyberspace zuhause. Auf Konferenzen und Camps bauen wir immer wieder unsere bunte Wunderwelt auf. In Hackerspaces teilen wir dauerhaft Räume, Werkzeug und Wissen. Aber zuhause leben wir immer noch ganz traditionell und für uns alleine. Wie könnte ein Wohnprojekt für Nerds aussehen? Seit mehreren Jahren arbeite ich daran ein gemeinsames Wohnprojekt für Nerds aufzubauen. Die Idee ist, Infrastruktur zu teilen und sich seine Nachbarn aussuchen zu können: So gibt es viele Dinge, die nett zu haben sind, man aber nicht für sich alleine braucht: Einen großen Garten, eine Bastelwerkstatt, Elektroniklabor, Werkzeug, Sauna, Pool... Und warum sollte man neben wildfremden Menschen anstatt von freundlichen Nerds wohnen wollen? Im Frühjahr diesen Jahres haben wir eine Immobilie gekauft. In diesem Vortrag berichte ich von unseren Erfahrungen und gebe Tipps, wie man ein solches Projekt angeht und worauf man dabei achten sollte. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/MF9YLA/

ThinkPads - Geschichte und Trivia (mrmcd24)

Sat, 05 Oct 2024 15:00:42 +0200

Besonders in Business- und Hacker:innen-Kreisen trifft man sie häufig an: ThinkPads. Doch woher kommt die lang anhaltende Begeisterung, was macht die Geräte aus? In diesem Vortrag begeben wir uns auf eine weitere Geschichtsreise und erkunden jede Menge Trivia. Nicht nur im Business-Umfeld sind ThinkPads begehrt - auch in Hackspaces sind sie häufig anzutreffen und führen dort, meistens mit quelloffener Software betankt und zahlreichen Stickern beklebt, ein zweites Leben. Dieser Trend ist schon lange kein Geheimnis mehr und Bestandteil der Popkultur geworden - sogar in Filmen und Serien wird er aufgegriffen. Doch warum setzen Nerds und Nerdettes immer noch auf die über 30 Jahre alte Marke? Die IBM- und Lenovo-Geschichte war schon immer bewegt und hat zahlreiche Exoten zum Vorschein gebracht (und produziert diese weiterhin), die es wert sind besprochen zu werden. In diesem Vortrag begeben wir uns in einen weiteren Gang des nischigen Kaninchenbaus, der neben spannender Geschichte auch zahlreiche Trivia und spannende Exclusives beinhaltet, die der europäische Markt leider nicht gesehen hat. Ein Alleinstellungsmerkmal der Notebooks sind die Eingabegeräte, die in diesem Beitrag ebenfalls nicht zu kurz kommen sollen. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/LSMPU9/

Ein Baudock für Platinen - Erfahrungsbericht vom Bau einer Pick&Place Maschine (mrmcd24)

Sat, 05 Oct 2024 12:00:42 +0200

Ein kleiner Erfahrungsbericht "Warum ich eine Pick- und Place Maschine bauen wollte, welchen Spass ich mit Hardware und Software (OpenPnP) hatte, und warum ich sie nicht mehr besitze". Ein kurzer Blick auf die vielen Dinge die ich dabei gelernt habe und warum es ein gutes Projekt war auch wenn es nie wirklich die Aufgabe erfüllt hat für die es begonnen wurde. Neben einer kurzen Einführung wie man auf die Idee kommt eine Pick&Place Maschine haben zu wollen werde ich anhand meiner Erfahrungen ein wenig Beschreiben warum es wirklich Spaß machen kann so ein Gerät aufzubauen und hinter die Kulissen der Software "OpenPnP" zu schauen und dort eigene Anpassungen vorzunehmen. (**CW**: "Java ist auch eine Insel") Aber auch warum am Ende ich nicht mehr Besitzer einer Pick&Place Maschine bin und damit auch evtl. etwas klären für wen so etwas eine gute Idee ist. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/MEWPHR/

Wie entsteht eigentlich ein Fahrplan? (mrmcd24)

Sat, 05 Oct 2024 19:30:42 +0200

Im Chaos kennen wir Fahrpläne auf den meisten Events - hier soll es aber um die Fahrpläne von Zügen, Bussen, Straßenbahnen und so weiter gehen. Doch: Fahrplan ist nicht gleich Fahrplan, manchmal weicht das, was ihr auf Bahn.expert seht auch um einige Minuten von dem ab, was das Zugpersonal als Fahrplan hat. Wie kommt es zu sowas? Wie entsteht überhaupt ein Fahrplan? Wie werden Baustellen eingearbeitet? Damit soll sich dieser Talk befassen. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/YUMEPB/

Bumpy Roads: Car(e) about sharing your insecurities? (mrmcd24)

Fri, 04 Oct 2024 20:40:42 +0200

Schwachstellen und unsichere Software eines regionalen Carsharing-Anbieters - semi-humorvoll aufbereitet und erklärt, wie sich zum bunten Korallenriff voller Schwachstellen tauchen lässt Am Hafen der MRMCD haben wir einen wunderbaren Ausblick auf die mobilen Gefährten für die Landerkundung, wenn wir einmal den Dampfer der Erkundung der digitalen Weltmeere verlassen. Dort können wir uns verschiedene Kaliber der Kategorie Elektroauto mieten - ein simples Carsharing-Modell. Doch was passiert, wenn wir ein wenig zu genau auf Tauchgang gehen und in die Tiefen der Unsicherheiten eines regionalen Carsharing-Anbieters eintauchen? Wir erleben ein Korallenriff aus verschiedenen Schwachstellen, Information Disclosure und sehr auskunftsfreudiger APIs. Danach entdecken wir den kostbaren Schatz (aka die Rechnung über das, was wir mit dem Carsharing angerichtet haben) und erstellen eine Karte für alle mutigen Seeräuber:innen, die uns noch folgen werden (aka Responsible Disclosure bei CERT Bund). Was wir darüber hinaus über Web-Applikationen, deren Schwachstellen und unsicheres Design lernen können, wird auf unseren Bumpy Roads präsentiert. Seid bereit für den wilden Ritt über Land! https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/MGLHQH/

Föderiertes Forgejo - Wege aus der git-Plattform Isolation (mrmcd24)

Sat, 05 Oct 2024 17:00:42 +0200

Dezentrale Infrastruktur ist resilienter, demokratischer und zielgruppengerechter als massive zentrale Plattformen. Wir meinen, dass Föderierung einen wichtigen Gegenpol zu den hegemonialen Absichten der profitorientierten Dienstleister setzt. Aus vielen leidlichen Erfahrungen gelernt (twitter, xing Gruppen, github copilot), wollen wir unseren Beitrag zu einer dezentraleren Welt leisten. Das Fediverse bietet viele Beispiele für gut umgesetzte, dezentrale Dienste und daran möchten wir anschließen. Unser Ansatzpunkt ist die Föderierung der git Plattform Forgejo. Ein erstes benutzersichtbares Feature “Föderierte Stars” haben wir bereits implementiert und es wird mit den nächsten Updates ausgerollt. Wir geben euch Einblick in den Maschinenraum, stellen Überlegungen zur Sicherheit an, sprechen über Herausforderungen und darüber wie es weitergehen könnte. Hier sind passende PRs: 1. Validierung der LikeActivity: https://codeberg.org/forgejo/forgejo/pulls/3494 2. Validierung der ActorID: https://codeberg.org/forgejo/forgejo/pulls/3662 3. All In One: https://codeberg.org/forgejo/forgejo/pulls/1680 Und hier haben wir einen aktuellen Stand zum Testen: https://federated-repo.prod.meissa.de/ https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/UXMEVM/

We will rockyou2009, rockyou2021, rockyou2024 ... (mrmcd24)

Sat, 05 Oct 2024 16:00:42 +0200

"Größte Passwortsammlung aller Zeiten aufgedeckt" liest man in regelmäßigen Abständen. Besonders die beiden RockYou Versionen von 2021 und 2024 versuchen, sich gegenseitig zu übertreffen. Waren es in der 2021er ca. 8,5 Milliarden Passwörter, überbot die 2024er Version dies mit fast 10 Milliarden Passwörter - oder besser gesagt Zeilen. Wie gut beziehungsweise brauchbar sind diese Listen? Wie kann man mit ihnen vernünftig arbeiten? Und wie lange dauert es, bis John the Ripper so eine Liste abgearbeitet hat? Das sind Fragen, mit denen wir uns in diesem Talk beschäftigen werden. Wenn noch Zeit übrig bleibt, gibt es auch noch einen Rant über Passwörter. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/FJLE3D/

Die Zeit für Gaming auf Linux ist jetzt. (mrmcd24)

Sat, 05 Oct 2024 20:30:42 +0200

In den letzten Jahren hat ein Handheld auf Linux Basis das Thema Gaming auf Linux auf den Kopf gestellt. Warum jetzt auch für dich Zeit gekommen ist sich damit zu beschäftigen und wodrauf du achten musst möchte ich dir in einer kleinen Rundfahrt zeigen. Ich thematisiere meine persönlichen Erfahrungen, mögliche Fallstricke, Tipps und Tricks sowie die unterschiedlichen Methoden damit du die Spiele, wie du sie von Windows kennst, auch auf Linux ausführen kannst. Dieser Vortrag richtet sich an bestehende Anwender von Linux, die schon ein paar Erfahrungen sammeln konnten. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/NRYP7R/

Unlocking the Power of OSINT (mrmcd24)

Sat, 05 Oct 2024 14:00:42 +0200

"The first victim of war is the truth" US Senator Hiram Johnson 1914 More than 100 years have passed since then and even if no bombs have fallen on us for more than 80 years and no grenades or rockets have been fired at us, we have never been so manipulated in our opinion-forming as we are today - and it has never been so easy. Whether Saddam's alleged chemical weapons, premature babies torn from incubators, decapitated children or images of riots after racist attacks against African Americans in the USA that were taken years earlier in Pakistan. Targeted disinformation, deception and false testimony from alleged witnesses have always been the methods and tools of so-called intelligence services. While their methods and methods of operation have remained hidden until now, the internet today offers us all the possibilities to do the same - to expose their lies - to uncover their deceptive maneuvers and to form our own opinion based on our knowledge. "Das erste Opfer des Krieges ist die Wahrheit" US-Senator Hiram Johnson 1914 Seitdem sind mehr als 100 Jahre vergangen, und auch wenn seit mehr als 80 Jahren keine Bomben mehr auf uns gefallen sind und keine Granaten oder Raketen auf uns abgefeuert wurden, sind wir in unserer Meinungsbildung noch nie so manipuliert worden wie heute - und noch nie war es so einfach. Ob Saddams angebliche Chemiewaffen, aus Brutkästen gerissene Frühgeburten, enthauptete Kinder oder Bilder von Ausschreitungen nach rassistischen Übergriffen gegen Afroamerikaner in den USA, die Jahre zuvor in Pakistan aufgenommen wurden. Gezielte Desinformation, Täuschung und Falschaussagen von angeblichen Zeugen waren schon immer die Methoden und Werkzeuge der so genannten Geheimdienste. Während ihre Methoden und Arbeitsweisen bisher im Verborgenen blieben, bietet das Internet heute allen die Möglichkeit, dasselbe zu tun - ihre Lügen zu entlarven - ihre Täuschungsmanöver aufzudecken und sich auf der Grundlage unseres Wissens eine eigene Meinung zu bilden. False reports, AI-controlled targeted influencing of opinion, predictive analysis, disinformation and deception through more or less synchronized media. Never before have we been so externally controlled and manipulated. Social networks and the possibility that the Internet offers everyone to spread unchecked reports have brought both criminal and political organizations worldwide onto the scene. On the other hand, reports are deliberately withheld and information is filtered out in order to get the desired reaction. If hope dies last, then the truth dies first, but how do we tell what is true and what is fake? Who can we still trust? This is where OSINT comes in: investigating and evaluating news from publicly accessible sources using publicly accessible methods and techniques. The speaker uses practical examples to show how OSINT works and expressly warns of the danger of publishing the results without checking them. This can have consequences under criminal law. Falschmeldungen, KI-gesteuerte gezielte Meinungsbeeinflussung, vorausschauende Analysen, Desinformation und Täuschung durch mehr oder weniger gleichgeschaltete Medien. Noch nie wurden wir so sehr von außen gesteuert und manipuliert. Soziale Netzwerke und die Möglichkeit, die das Internet jedem bietet, unkontrolliert Meldungen zu verbreiten, haben sowohl kriminelle als auch politische Organisationen weltweit auf den Plan gerufen. Auf der anderen Seite werden Berichte bewusst zurückgehalten und Informationen herausgefiltert, um die gewünschte Reaktion zu erzielen. Wenn die Hoffnung zuletzt stirbt, dann stirbt die Wahrheit zuerst, aber wie erkennen wir, was wahr und was gefälscht ist? Wem können wir noch vertrauen? Hier kommt OSINT ins Spiel: die Untersuchung und Bewertung von Nachrichten aus öffentlich zugänglichen Quellen mit öffentlich zugänglichen Methoden und Techniken. Der Referent zeigt an praktischen Beispielen, wie OSINT funktioniert und warnt ausdrücklich vor der Gefahr, die Ergebnisse ungeprüft zu veröffentlichen. Dies kann strafrechtliche Konsequenzen haben. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/JUWBMU/

A Practical Approach to Generative AI Security (mrmcd24)

Sat, 05 Oct 2024 13:00:42 +0200

The rise of applications based on AI (mostly generative AI) forces us to think about the security and privacy implications of those systems. Security considerations about generative AI unfortunately lack the foundations for practitioners out there that need to secure those systems. The information out there is mostly divided into unpractical academic research and unreflected proof of concepts on social media. We will first dive into the range of generative AI applications using examples of the openAI ecosystem. This will give the audience an understanding about the fundamental problem of AI from a security perspective. We then offer an insight into the attack surface that those applications have. This will help understand what needs to be secured and what can be secured. In many cases, good old security best practices will be a good start although AI security brings new challenges that we will discuss. In addition we will talk briefly about privacy issues related to AI that we need to consider in the future. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/JGHXUQ/

Die 20 Jahre MRMCD Gala (mrmcd24)

Fri, 04 Oct 2024 21:40:00 +0200

Vor 20 Jahren haben wir angefangen die MRMCD zu organisieren. In einer festlichen Gala (wir bitten um entsprechende Kleidung) wagen wir einen Blick zurueck und vielleicht einen Blick vorwaerts... tbd https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/SQF7W7/

Proxmox Server bei Hetzner: Mehrere interne Netzwerke und nur eine öffentliche IP-Adresse (mrmcd24)

Sat, 05 Oct 2024 13:00:42 +0200

Hetzner macht es besonders leicht, auf einem angemieteten Server Proxmox zu installieren. Dazu muss man lediglich das bereitgestellte Proxmox Image bei der Installation aus dem Rescue System auswählen. Etwas herausfordernder wird es, wenn man mehrere virtuelle Server auf Proxmox installieren und dem Rest der Welt zugänglich machen will - was ja vermutlich der Grund für die Auswahl und Installation von Proxmox war. Bei einem Proxmox im Heimnetzwerk ist es recht simple: Man gibt dem Dienst einfach eine freie IP-Adresse aus dem verwendeten privaten Netzwerk. Bei einem Internetanbieter muss ich üblicherweise für jeden per IPv4 erreichbaren Dienst eine IP Adresse dazu kaufen. Das kann schnell teuer werden. Und bei einigen Anbietern bekomme ich auch nur eine begrenzte Anzahl an IPv4 Adressen. Eine kostengünstige Variante ist, die virtuellen Server mit privaten Adressen zu versorgen und auf dem Host zu natten (Destination NAT). Für die Weiterleitung an das richtige Ziel kann man zum Beispiel VyOS (virtueller Router) oder den NGINX Proxymanager verwenden. Ihr ahnt es bereits - wir verwenden hier den NGINX Proxymanager. Die Youtube Videos zu diesem Thema hatten mich damals nicht überzeugt beziehungsweise waren die Lösungen nicht skalierbar. Aus diesem "Mangel" heraus ist dieses Setup und diese Konfiguration entstanden. Ich verwende sie inzwischen seit mehreren Jahren für Trainings und Workshops für Cyber Security Professionals. Auch meine eigenen Server betreibe ich nach dieser Art ohne Probleme. In diesem Talk werden wir auf einem Hetzner Dedicated Server ein Proxmox System von Scratch installieren, das bedeutet: - Booten in das Rescue System - Auswahl des Images - Konfigurieren des Setup Scripts (installimage) - Update von Proxmox auf die aktuelle Version - anpassen der Proxmox Netzwerkkonfiguration (mehrere Netzwerke) - Einbinden der Hetzner Storagebox - Instalaltion einiger Server und Dienste - Konfiguration des DNS - Installation und Konfiguration des NGINX Proxymanagers Dieser Talk ist als Demo angelegt. Ich werde alle Schritte live ausführen und am Ende werden wir eine funtkionierende Proxmox Installation mit internen Netzwerken und NGINX Proxymanger haben. Der Talk wird aufgezeichnet, so dass alle Schritte später selber ausgeführt werden können. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/FHMMQW/

Rettungsring oder gefährlicher Ballast? Informationssicherheit-Leitfäden für KKU (mrmcd24)

Sat, 05 Oct 2024 15:00:42 +0200

Schon lange sind die Zeiten vorbei, als Kleinst- und Kleinunternehmen (KKU) nur in bekannten Gewässern und immer in Sichtweite der Küste segelten. Doch sind sie für die Reise auf den digitalen Ozeanen und die hier lauernden Gefahren wie alles verschlingende Datenstrudel und bösartige Seeräuber vorbereitet? So wurden Sammlungen von Anweisungen erstellt, welche, wenn richtig und vollständig befolgt, unser KKU vor dem Schiffbruch bewahren sollen. Aber ist das nun der ersehnte Rettungsring oder vielleicht nur gefährlicher Ballast? Ziel des Vortrages ist es, auf Grundlage der Inhalte verschiedener Leitfäden (u.a. der DIN SPEC 27076 und der ISA+ Informations-Sicherheits-Analyse) die Fragen zu diskutieren, ob KKU damit angemessen und wirksam unterstützt werden, ob inhaltliche Lücken existieren und der aus Sicht des Vortragenden erforderliche Anspruch "compliant and secure" erreicht werden kann. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/SCKE7K/

we know perimeter security is dead - how to get over it and where to? (mrmcd24)

Sat, 05 Oct 2024 17:45:00 +0200

We're still training perimeter security as one of the main mantras of information security in companies. I show what perimeter security is and why it is outdated. I will give an alternative to replace permieter security with a zero trust approach and how to implement that in a company network. This is a talk over a needed change in network architecture as the older approach called perimeter security is not only not effective anymore but actually dangerous for companies. I will explain why the perimeter security approach is dangerous and why we need to stop doing it. I'll describe on what to do instead - and how to get there, even in a compliancy heavy company enviroment. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/8CZJFN/

Besser natürlich dumm als künstlich intelligent! Über Generative KI -Sie werden enttäuscht sein (mrmcd24)

Sat, 05 Oct 2024 12:00:42 +0200

Summary: Generative AI is a more than impressive technology. But we are still a long way from having a generative AI that does what it suggests. Die generative KI ist eine mehr als beeindruckende Technologie. Aber wir sind noch weit davon entfernt, eine generative KI zu haben, die tut, was sie vorschlägt. Algorithms write source code, compose pieces of music, write scientific articles. But they guarantee neither quality nor functionality, let alone authenticity. AI knows neither true nor false nor right and wrong - which is why it cannot lie, but can "hallucinate". AI tries to "please" like a student who tries to give a plausible answer that pleases his teacher to a question that he cannot answer. AI does not care about ethical or legal issues. If it is not "tamed", it can become a danger that can no longer be controlled. Generative AI can destroy livelihoods - be it through "hallucinated information about people., or in the military sector, where it already plays a far greater role than assumed. Generative AI not only optimizes logistics and production processes. Generative AI can also take over military strategic planning and direct military operations, from acts of sabotage (blocking GPS) to the independent selection of targets and the choice of appropriate weapon systems. Algorithms are also increasingly contributing to business decisions in the economy. From automated application processes to portfolio strategies and marketing campaigns. This scenario has yet to be fully realized - humans still make the final decision - but for how much longer? The speaker will attempt to explain clearly why generative AI is neither intelligent nor creative, and why algorithms may take on the role of co-pilot, even autopilot, but never the role of flight captain. Algorithmen schreiben Quellcode, komponieren Musikstücke, verfassen wissenschaftliche Artikel. Aber sie garantieren weder Qualität noch Funktionalität, geschweige denn Authentizität. KI kennt weder wahr noch falsch noch richtig und falsch - deshalb kann sie auch nicht lügen, aber "halluzinieren". KI versucht zu "gefallen", wie ein Schüler, der versucht, auf eine Frage, die er nicht beantworten kann, eine plausible Antwort zu geben, die seinem Lehrer gefällt. Die KI kümmert sich nicht um ethische oder rechtliche Fragen. Wenn sie nicht "gezähmt" wird, kann sie zu einer Gefahr werden, die nicht mehr kontrolliert werden kann. Generative KI kann Existenzen zerstören - sei es durch "halluzinierte Informationen über Menschen", sei es im militärischen Bereich, wo sie bereits eine weitaus größere Rolle spielt als angenommen. Generative KI optimiert nicht nur Logistik- und Produktionsprozesse. Generative KI kann auch die militärische Strategieplanung übernehmen und militärische Operationen steuern, von Sabotageakten (Blockieren von GPS) bis hin zur eigenständigen Auswahl von Zielen und der Wahl geeigneter Waffensysteme. Auch in der Wirtschaft tragen Algorithmen zunehmend zu Geschäftsentscheidungen bei. Von automatisierten Bewerbungsverfahren bis hin zu Portfoliostrategien und Marketingkampagnen. Dieses Szenario ist noch nicht vollständig realisiert - noch trifft der Mensch die letzte Entscheidung - aber wie lange noch? Der Referent wird versuchen, anschaulich zu erklären, warum generative KI weder intelligent noch kreativ ist und warum Algorithmen zwar die Rolle des Co-Piloten, sogar des Autopiloten, aber niemals die Rolle des Flugkapitäns übernehmen können. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/U8T9QL/

Quietscheentchen ahoi: Abenteuer und Geschichte vom schwimmenden Entenland (mrmcd24)

Thu, 03 Oct 2024 20:00:42 +0200

“Quietscheentchen ahoi” erkundet die faszinierende Welt der Quietscheentchen, von ihrer Geschichte und Herstellung bis hin zu ihrer kulturellen Bedeutung und den physikalischen Eigenschaften. Der Vortrag bietet Anekdoten, wissenschaftliche Einblicke und interaktive Elemente, die die vielfältigen Facetten dieser beliebten Badebegleiter beleuchten. Der Vortrag “Quietscheentchen ahoi: Abenteuer und Geschichte vom schwimmenden Entenland” bietet eine spannende Erkundung der Welt der Quietscheentchen. Beginnend mit ihrer Entstehung und Entwicklung werden die frühen Herstellungsprozesse und Materialien bis hin zu den modernen Varianten beleuchtet. Die Rolle der Quietscheente in der populären Kultur wird durch Beispiele aus Filmen, Fernsehen und Literatur verdeutlicht. Wissenschaftliche Erklärungen zu ihren physikalischen Eigenschaften, wie dem Schwimmen und Quietschen, sowie moderne Fertigungstechniken und Sicherheitsstandards werden ebenfalls thematisiert. Die kulturelle Bedeutung der Quietscheente wird durch psychologische und soziologische Einblicke erklärt, und ihre Rolle als Sammelobjekt und Symbol wird hervorgehoben. Zudem werden verschiedene Veranstaltungen wie Quietscheentenrennen und Wohltätigkeitsaktionen vorgestellt. Der Vortrag enthält auch Anekdoten und persönliche Geschichten, die berühmte Persönlichkeiten und ihre Quietscheentchen präsentieren. Eine interaktive Komponente ermöglicht dem Publikum, eigene Erlebnisse zu teilen. Abschließend fasst der Vortrag die Hauptpunkte zusammen und bietet eine Q&A-Runde zur Vertiefung der Themen. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/MCZPJZ/

TVLuke: Gemeinfreiheit verstehen und nutzen [FreiTalk N8] (chaotikum)

Fri, 10 May 2024 20:00:00 +0200

Gemeinfrei sind Werke, an denen niemand mehr ein Recht hat. Man kann sie also verwenden, wie und wo man möchte. Das ist großartig! Aber wie funktioniert eigentlich diese Gemeinfreiheit genau? Warum gibt es sie? Wie erkenne ich ein gemeinfreies Werk und wie kann ich einschätzen, ob ich es wirklich verwenden darf, oder ob mich nachher doch jemand verklagt?!? Warum kann ein Museum jemanden erfolgreich verklagen, der ein Foto von einem jahrhundertealten Bild auf Wikipedia hochlädt? Wann darf ich ein Gebäude fotografieren und wann nicht? Ist Sampling legal? Was ist denn nun eigentlich ein amtliches Werk? Weil er wissen wollte, was er darf, hat Lukas das Urheberrecht als Laie angesehen. Wie man als Blogger:in, auf Social Media oder Youtube, mit Gemeinfreiheit arbeiten kann, soll in diesem Vortrag gemeinsam nachvollzogen werden. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://chaotikum.org/blog/2024/04/26/freitalk/

Kubernetes ohne Internet (mrmcd24)

Fri, 04 Oct 2024 13:30:42 +0200

Eigentlich wollte ich nur Kubernetes Infrastruktur mit ohne externe Abhängigkeiten aufbauen. Das ist dann etwas eskaliert. Ein Reisebericht. Ob Ozeandampfer beim Hyperscaler oder Badewannenkapitäne mit IoT Systemen - Kubernetes Cluster verschrecken schon längst keine Seemenschen mehr. Doch geht das auch *ohne* Internet? Was brauchen wir, wenn wir ein airgapped Deployment aufziehen wollen? Auf welche Sandbänke und Riffe werden wir auflaufen? Eine Geschichte aus dem Logbuch, warum die Pflege von so einem Schiff auch ohne Seeungeheuer schon seine Tücken hat: Welche Werft nehmen wir? * Wie funktioniert der Stapellauf? (Distributionen) Wie starten wir die Maschine? * Was braucht es für die Ruderanlage? (etcd, kubeapi, containerruntime) * Wie bekommen wir unsere Betriebs- und Schmierstoffe? (Images, Secrets,…) Wie navigieren wir? * Wer gibt hier die Steuerbefehle? (pull & push deployments) * Was ist hier eigentlich alles? (service discovery) Wie sichern wir unsere Ladung? * Wie binden wir es zusammen? (PKI und Zertifikate) * Wie halten wir Seeungeheuer draußen? (perimeter security vs zero trust) Wenn Passagiere schon einmal mit (OCI/Docker) Containern gebastelt haben, dann werden sie auch dem Geschehen an Deck folgen können, trotz manch rauer See. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/8VN8AN/

Einblicke in den Containertransport auf See (mrmcd24)

Fri, 04 Oct 2024 15:30:42 +0200

Einblicke in den Containertransport auf See - oder: wie genau kommen die ganzen Sachen eigentlich aus Asien hierher? Durch mein Interesse an Schiffen habe ich im Laufe der Zeit viele Details zur Containerlogistik aufgeschnappt, über die man sich normalerweise keine Gedanken macht oder zu denen gerne mal Fehlannahmen existieren. Unter Anderem werde ich die Punkte Geschichte und Aufbau des Containers, Containerschiffstypen und -größen und Arbeitsweise unterschiedlicher Containerterminals behandeln. Insbesondere werde ich auch darauf eingehen, was dabei alles automatisiert ist bzw. nicht mehr ohne Computer funktioniert. Alles davon allgemeinverständlich, für Interessierte aber durchaus mit technischen Details. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/NDR897/

Power efficency of (modern) servers (mrmcd24)

Fri, 04 Oct 2024 20:40:42 +0200

Servers use (lots) of power, now how is this power usage distributed across the components inside a server and what configuration changes can be done to improve the power efficiency of a server. Based from monitoring data from ~500 different servers over ~8 years we have a good overview of what matters and what for impact changes that have been made over the years have improved this. Besides this we also performed changes to the inlet temperature to see what the impact is of this in the general population to see if running the data center hotter has an impact on power usage. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/RALJQY/

No More Loopy Code: Data Science Goes Functional (mrmcd24)

Fri, 04 Oct 2024 14:30:42 +0200

Data and their analysis play a key role in our modern society. Deriving correct results is crucial to ensure reliable decision-making, leading to better outcomes in business, healthcare, governance and daily life. Yet, in data science we frequently encounter a makeshift approach, where various tools are tied together with untested procedural glue code. This talk explores the benefits of applying functional programming principles in data science. Emphasising immutability, pure functions and the benefits of strong type systems, we demonstrate how these concepts lead to more reliable and maintainable data workflows. Practical examples will showcase improved code clarity, verifiable specifications, parallel processing capabilities and simplified debugging. Learn how integrating functional programming techniques can transform your data science practices, resulting in more predictable and reproducible outcomes. This talk is aimed both at data scientists and everybody with an interest in analysing data in a reliable and robust manner. Prior knowledge of functional programming is helpful, but not required. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/BUYV9C/

Wie geht eigentlich Norm? (mrmcd24)

Fri, 04 Oct 2024 12:30:42 +0200

Normen und Standards bestimmen viele Dinge in unserem Leben - und scheinen häufig recht unverständlich. Zeit die tiefen Gewässer der Standardisierung zu erkunden! In diesem Talk geht es um die Systematik hinter Normen und vor allem ums lesen und verstehen. Denn Normen scheinen schon fast eine eigene Sprache zu haben, die sehr verwirred sein kann. Wir entschlüsseln die Sprache der Normen und schauen uns an, wie man die für sich benötigten Informationen aus einer Norm herauszieht. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/H8MCEK/

Building an "affordable" home cockpit (mrmcd24)

Thu, 03 Oct 2024 20:00:42 +0200

Since the beginning of this year I've been working on a home cockpit with the goal to finally have some (open source) resources for an "affordable" home cockpit If you're an aviation enthusiast and want to bring your flight sim experience to the next level with a home cockpit, you've got a few options right now: * Get a pre-built one... those cost you somewhere around 60-80k EUR * Get individual parts and build it your self... that's also expensive. A simple front panel (without any electronics) can cost more than it costs me to built it with self designed PCB and 3D printed front panel... Also, some ready to use panels are expensive too. The MCDU for example, the part where pilots interact with the Flight Management and Guidance Computer (FMGC), can cost around one grand each, and for the A320 you need 2 of them. * The last option is fully DIY. There are some people out there who have done that already but sources for building your own are scarce, at times in proprietary formats and generally only bits and pieces here and there, not a repo of ready to use files for a full cockpit. So I set out to build part of my own A320 cockpit, this time also with the explicit goal to make it easy for others to replicate this. I gonna talk about the journey I've had so far, where I ran into issues and what I'm looking forward to https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/NHKAX7/

Fedivoyage – per Anhalter durch das Fediversum (mrmcd24)

Fri, 04 Oct 2024 19:40:42 +0200

Das Fediverse ist ein Zusammenschluss unabhängiger, oft nicht-kommerzieller sozialer Netzwerke. Es besteht aus einer Vielzahl von verschiedenen Softwares, die alle den Anspruch haben, miteinander kommunizieren zu können. blinry und piko haben einige davon ausprobiert und berichten über ihre Reise durch das Fediverse. Viele von Euch kennen wahrscheinlich Mastodon, vielleicht noch Pixelfed oder Peertube; und einige wissen auch noch, dass Wordpress da irgendwie auch reinpasst. blinry und piko haben aus Neugierde ein gutes Dutzend verschiedener Plattformen des Fediverse ausprobiert und geben eine Übersicht aus der User*innen-Perspektive: Wie fühlt sich die jeweilige Software an? Welche Communities finden sich dort? Und vor allem: Will it federate? Die Reiseroute: Peertube, Akkoma, Pixelfed, Bookwyrm, WriteFreely, Funkwhale, Lemmy, Friendica, kbin, flohmarkt, Mobilizon https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/JSVBKN/

Sicherheit anfordern mit Sicherheitsanforderungen (mrmcd24)

Fri, 04 Oct 2024 13:30:42 +0200

Müssen Devs in der letzten Minute unter Druck Sicherheit anflanschen? Nein? Wieso haben wir denn dann keine Sicherheit angefordert? Lasst uns anschauen, was Sicherheitsanforderungen sind, wo sie herkommen und wie wir damit Sicherheit in die Softwareentwicklung und schließlich in unsere Anwendung bekommen. In der geschäftlichen Softwareentwicklung konkurrieren sperrige nicht-funktionale Sicherheitsanforderungen um das Budget mit den funktionalen Anforderungen, für die Kunden unsere Software mögen und bezahlen. Geldgeber neigen dazu diese Funktionalität zu priorisieren. "Die Security"™ hat den Ruf als Mahner, Blockierer und Aufwandstreiber. Wieso eigentlich? Wieso taucht Security immer erst auf einer Checkliste auf, bevor das Deploy-Knöpfchen gedrückt wird und nicht früher? In diesem Vortrag schauen wir uns an, was eigentlich Sicherheitsanforderungen sind, woher sie stammen, wie konkret sie zum Teil explizit gefordert (und ignoriert) werden und wie wir mit dem Risikomanagement-Megaphon einen transparenten, verantwortlichen Umgang erreichen. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/7MJ8T9/

I do the Infrastructure, you do the magic - Das CAN Subsystem im Linux Netzwerk Stack (mrmcd24)

Fri, 04 Oct 2024 19:00:42 +0200

SocketCAN - Das CAN Subsystem im Linux Netzwerk Stack. Der vor über 40 Jahren entwickelte CAN-Bus (Controller Area Network) ist ein serieller Feldbus für den Datenaustausch zwischen elektronischen Steuergeräten (ECUs) in der Automobiltechnik und der Fabrikautomation. Weitere Einsatzgebiete sind zwischen Ladestationen und Elektrofahrzeugen, in E-Scootern und E-Bikes oder in der Hausautomation/Solarreglern. Viele interessante Endgeräte und zum Teil proprietäre Protokolle die untersucht, Reverse Engineered oder gefuzzed werden wollen. Hier setzt SocketCAN an, eine seit über 15 Jahren im mainline Linux Kernel integrierte Unterstützung für CAN Hardware, die es ermöglicht über die bekannte Socket Schnittstelle CAN Nachrichten zu verschicken und zu empfangen. Der Talk klärt die dringendsten Frage, wie kann ich mit CAN loslegen, welche Hardware wird unterstützt. Außerdem erläutert er die Grundlagen des CAN Buses, geht auf Gemeinsamkeiten und Unterschiede im Vergleich zu Ethernet ein. Angesprochen werden die vom Kernel unterstützten CAN Protokolle (CAN-Raw, ISO-TP, J1939). Ferner werden eine Reihe von Standard CAN Tools vorgestellt, z.B. zum aufzeichnen/abspielen/analysieren von CAN Traffic. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/GHYGXC/

Kryptographie-Fails aus der Praxis (mrmcd24)

Fri, 04 Oct 2024 12:30:42 +0200

Ich muss verschlüsseln; da nehme ich AES! Was dabei (und auch bei anderen Primitiven als AES) in der Praxis alles schiefgehen kann zeigen ausgewählte Beispiele von in der Wildbahn gesichteten Fehlern. Keine Mathe- oder Kryptographiekenntnisse notwendig! Zum sicheren verschlüsseln oder signieren muss man einiges beachten. Was passiert, wenn man es nicht macht, zeigen wir anhand von real releasten Fehlern und lernen dabei im Vorbeigehen, wie man es richtig macht. Zielgruppe: Leute, die Verschlüsselung und Signaturen sicher und korrekt benutzen wollen. Kryptographen lernen hier (hoffentlich) nichts Neues. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/WBRLLR/

Energie aus der Tiefe: Das Meer der Energydrinks und ihre Geheimnisse. (mrmcd24)

Fri, 04 Oct 2024 11:30:42 +0200

Tauchen Sie ein in die Welt der Energydrinks und Mate! Erfahren Sie mehr über Inhaltsstoffe, Wirkungen und Unterschiede zwischen diesen Getränken. Analysieren Wir gemeinsam gesundheitliche Aspekte und Nachhaltigkeit. Ein informativer und unterhaltsamer Vortrag für alle Energie-Enthusiasten – setzen Wir die Segel Richtung Energie! Tauchen Sie ein in die faszinierende Welt der Energydrinks und Mate bei unserem Vortrag "Energie aus der Tiefe: Das Meer der Energydrinks und ihre Geheimnisse". Wir beginnen mit einer Einführung in die Geschichte und Entwicklung von Energydrinks, gefolgt von einer detaillierten Analyse ihrer Hauptinhaltsstoffe wie Koffein, Taurin und Zucker. Erfahren Sie, wie diese Bestandteile Ihre Leistungsfähigkeit und Konzentration beeinflussen können und welche Risiken bei übermäßigem Konsum bestehen. Zusätzliche wird es ein Vergleich zur Mate geben, die in der Hacker-Szene ein sehr beliebtes Getränk ist. Wir untersuchen die Ursprünge und Inhaltsstoffe von Mate und vergleichen diese mit Energydrinks. Dabei gehen wir auf Gemeinsamkeiten und Unterschiede ein, um ein klares Bild der jeweiligen Vor- und Nachteile zu zeichnen. Unser Vortrag beleuchtet die kulturelle Bedeutung von Mate in der Hacker-Szene und warum es dort so populär ist. Zusätzlich behandeln wir Nachhaltigkeitsaspekte und umweltfreundlichere Alternativen zu herkömmlichen Energydrinks, um ein umfassendes Verständnis der Thematik zu bieten. Am Ende des Vortrags haben Sie die Möglichkeit, Fragen zu stellen und sich an der Diskussion zu beteiligen. Ob Sie ein langjähriger Fan dieser Getränke sind oder einfach nur neugierig – dieser Vortrag bietet wertvolle Einblicke und interessante Informationen rund um das Thema Energiegetränke. Setzen wir gemeinsam die Segel Richtung Energie! https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/PUWNUH/

Entwicklung von Ansible Collections (mrmcd24)

Fri, 04 Oct 2024 17:30:42 +0200

Ahoi Freunde der Automatisierung. Setzt die Segel und macht euch bereit für eine Reise durch die Gewässer der Ansible-Automatisierung. Erspäht einblicke in die Entwicklung und den Aufbau von Ansible Rollen und Collections. Wir zeigen euch, was wichtig ist damt einzelne Tasks zusammen spielen um komplexe Setups zu erstellen. Damit - getreu dem Motto der Veranstaltung - nicht nur das Land in Sicht ist sondern auch das Ziel erreiht wird. Wir zeigen euch anhand einer Ansible Collection, wie diese Aufgebaut ist. Wie Ansible Rollen mit Ansible Collections zusammen spielen. Wie Tasks aufgebaut sein können, damit komplexe Setups doch relativ einfach realisierbar sind. Natürlich gehen wir auch auf die Möglichkeiten von Teplates in Jinja2 ein. Auch idempotenz, erstellen und verwenden von Secrets auf dem Zielsystem so wie überprüfen von Hashsummen werden angesprochen. Dieser Vortrag richtet sich an Wesen, die bereits von Ansible gehört haben und nun eigene Rollen oder Colletions entwickeln wollen. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/BXHDAZ/

Käpt'n-Wahl per Flaschenpost: Online-Voting und seine Grenzen (mrmcd24)

Fri, 04 Oct 2024 19:00:42 +0200

Das Interesse an Online-Voting ist in den letzten Jahren deutlich gestiegen - vor allem die Pandemiejahre haben viele Gruppen dazu gezwungen, sich nach Alternativen zu Wahlen vor Ort umzuschauen. Gleichzeitig hat sich Online-Voting auch weiterentwickelt und kann mit kryptographischen Verfahren wie Zero-Knowledge-Beweisen bessere Sicherheitsgarantien bieten. Aber werden diese in der Realität auch erreicht? Und welche Grenzen bleiben trotzdem für Online-Wahlen, egal, wie viel Kryptographie wir verwenden? https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/WUCFUL/

Designing PCBs with Python: faebryk (mrmcd24)

Fri, 04 Oct 2024 16:30:42 +0200

[faebryk](https://github.com/faebryk/faebryk) is an open source Python library for electronic design automation (EDA). Instead of designing your circuits graphically, you describe them in code, gradually refining your design from abstract to specific. This is not only beneficial from the design side but also allows one to adopt tooling and approaches common in software development like version control. The talk gives an introduction to faebryk and it's core principles. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/HG3GXN/

Digitale Mündigkeit für Einsteiger:innen (mrmcd24)

Fri, 04 Oct 2024 19:40:42 +0200

Täglich treffen wir viele Entscheidungen im digitalen Raum: Den Cookie-Banner akzeptieren? Den AGB einer Online-Plattform zustimmen? Welche Apps nutzen? Hat das alles womöglich etwas mit dem Erhalt der Demokratie und von Freiheitsrechten zu tun? Der Vortrag möchte den Blick weiten, dass es bei unserem Handeln im digitalen Raum nicht nur darum geht, uns als Individuen vor kriminellen Hackern zu schützen, sondern dass wir als Gesellschaft Freiheitsrechte und die Demokratie auf's Spiel setzen, wenn wir unsere Wahl von Messengern, Mailanbietern, Kartendiensten usw. nicht überdenken. Der Vortrag zeigt auf, dass Datenschutz wie Umweltschutz auch eine kollektive Dimension hat. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/NQ7Z7R/

Neurodivergenz und Technologie (mrmcd24)

Fri, 04 Oct 2024 11:30:42 +0200

Welche Technologien verwenden Personen mit ADHS, Personen mit Lese-Rechtschreib-Störung, oder autistische Personen, um ihr Leben und Arbeiten zu organisieren? Welche Technologien werden in der Mensch-Maschine-Interaktion zu diesem Zweck erforscht und entwickelt? Und - was wünschen sich neurodivergente Personen eigentlich? Das sind die Fragen, mit denen ich mich im Rahmen meiner Dissertation beschäftige. Folgt mir in meinen Kaninchen-Bau aus medizinischen Beschreibungen, Diagnose-Kriterien, verkürzten Schlussfolgerungen, und Techno-Solutionismus. Je nachdem, wieviel bis dahin weiter gegangen ist, geht's womöglich auch etwas spezifischer um Prokrastination, mal schauen ;) Alles mit wissenschaftlichem Unterbau, mit genügend Chancen zum Lachen und sich über neurotypische behindertenfeindliche Leute ärgern. Eine erste Publikation zum Thema -- sogar Open Access! -- gibt es hier: https://dl.acm.org/doi/10.1145/3663384.3663386 Der Talk wird auf Deutsch sein, und die diversen wissenschaftlichen Fachbegriffe werde ich natürlich passend erklären. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/7QLFUF/

Brackwasser hacken (mrmcd24)

Thu, 03 Oct 2024 15:40:42 +0200

Das schwarze, koffein-haltige Gold aus Bohnen gewonnen hat mehr komplexität in seiner Zubereitung als den meisten bewusst ist. Wie geht man vor, beim hacken seines Kaffees, um ein dem eigenen Geschmack passendes Heißgetränk aus den Bohnen zu extrahieren? In diesem Talk soll es um einen Crash-Kurs in den maßgeblichen Variablen der Kaffeezubereitung gehen und wie auf dem Koordinatensystem der Geschmäcker navigiert wird um die hohe See des Kaffeegeschmacks zu ergründen und in neue, noch unerschlossene Fahrwasser zu gelangen. Wer sich dieser Reise bisher nicht gestellt hat weiß nicht was einem entgeht. Wir beginnen mit einer kurzen Einführung über die verzehrbaren Bohnenarten, deren Röstung (Röstgrade), über gängige Zubereitungsmethoden und deren Variablen bis hin zur Navigation durch die hohe See des Kaffeegeschmacks. Am Ende des Talks sollte man eine erste Idee davon haben, welche Bohnen sich für welche Zubereitung eignen, worauf man beim Kauf achten kann und wie man sich stück für stück ausprobiert. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/H7FTZZ/

Schriften und Typografie: Wie funktionieren die eigentlich? (mrmcd24)

Fri, 04 Oct 2024 16:30:42 +0200

Du schreibst oder liest Texte mit einem Computer? Dann hast Du mit Schriften und Typografie zu tun. Wir betrachten was unterschiedlichen Schriftformate typografisch leisten aber auch wie Font-Rendering technisch funktioniert. Komm mit auf diesen Tauchgang von American Typewriter bis Zapf Dingbats! Schriften bestimmen wie wir Inhalte wahrnehmen, lassen uns Marken wieder erkennen, und verleihen Inhalten Charakter. Viele Schriftsysteme fließen von links nach rechts und von oben nach unten, andere nicht. Diese Unterschiede sorgen für komplexe Probleme mit denen Schriftysteme zurecht kommen ~~müssen~~ sollten. Wir gehen auf Typografische Begriffe ein und wie Du damit Deine Texte besser gestalten kannst. Bei der technischen Betrachtung findet sich auch Inspiration für IT-Security Themen. \#WTFont https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/7W7ZNJ/

Paperless – was das ist und warum du das haben willst (mrmcd24)

Thu, 03 Oct 2024 15:40:42 +0200

Wir haben ihn alle: Den unordentlichen Stapel geöffneter Briefe, Faxe und Flaschenpostsendungen irgendwo in einer Ecke, den man einmal im Jahr durchwühlt, um seine Steuererklärung zu machen. Fortgeschrittene haben Aktenordner, aber auch in denen findet man Dinge schwer wieder. Und dann gibt es da auch noch diese neuartigen digitalen Dokumente, die es einem regelmäßig ins Postfach spült. Was macht man eigentlich damit? Fear not! Elektronische Dokumentenmanagementsysteme gibt es inzwischen in Open Source, und sie ergeben sowohl für Organisationen als auch für Privatpersonen Sinn. Lerne auch du, mit Technik Ordnung in deine Dokumentensammlungen zu bringen. Bürokratie kann so aufregend sein! In diesem Talk werde ich auf die Nachteile klassischer heimischer Dokumentenablageansätze eingehen und erklären, wie sich diese mit einem Dokumentenmanagement lösen lassen. Weiterhin werde ich einen Crashkurs zum Aufbau eines eigenen Ablagesystems auf Basis von Paperless-ngx geben. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/B9K89S/

Paddeln und Fotokunst für saubere Flüsse und Meere. (mrmcd24)

Fri, 04 Oct 2024 17:30:42 +0200

Was können wir als Einzelpersonen tun, um unser Engagement für Umweltschutz und Nachhaltigkeit zu unterstreichen? Stephan Horch, Gründer und 1. Vorsitzender des Clean River Project e.V., präsentiert mit einer Mischung aus Fakten, Zahlen und unterhaltsamen Anekdoten das globale Problem des Plastikmülls in unseren Gewässern. Dabei legt er besonderen Wert auf den lokalen Bezug, indem er aufzeigt, warum dieses Problem direkt vor unserer Haustür beginnt. Gleichzeitig zeigt er auf, welche konkreten Maßnahmen wir ergreifen können, um aktiv zur Lösung beizutragen. www.cleanriverproject.de Redner: Stephan Horch 1 . Vorsitzende Clean River Project e.V. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/3SVESD/

Knots (mrmcd24)

Thu, 03 Oct 2024 15:00:42 +0200

Basic knots and how to tie them. Knots provide secure and reliable ways to join ropes or other materials, ensuring stability and safety in various applications such as climbing, sailing, and construction. They are versatile tools for binding, securing loads, and creating functional loops or bends. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/G97UT8/

Warum genau Du genau jetzt mit Amateurfunk anfangen solltest! (mrmcd24)

Thu, 03 Oct 2024 19:00:42 +0200

Wau Holland war Funkamateur, es gibt die Chaoswelle und auch sonst laufen einem im Chaos immer wieder Wesen über den Weg, die Amateurfunk als Hobby haben. Trotzdem gibt es vielleicht noch Menschen, die die Faszination an diesem rund 100 Jahre alten Hobby besser verstehen wollen. In diesem Vortrag geht es darum die Vielfalt bzw. die "Hobbies im Hobby" vorzustellen. Es wird außerdem beleuchtet wie und womit Mensch auch mit kleinerem Budget, ohne Einfamilienhaus mit riesiger Antennenanlage anfangen und vor allem sehr viel Spaß haben kann. Darüber hinaus wird ein Einblick in die Amateufunk-Lingo und das Drumherum gewährt: Was ist eigentlich ein QSO und was hat es mit diesen Rufzeichen auf sich? Was darf ich ohne Lizenz machen und wozu benötige ich überhaupt eine Lizenz? Und welche Dinge, die ich im Amateurfunk lerne, begegnen mir im "echten Leben" wieder? https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/VJTBR3/

Wartungsarme Bastelinfrastruktur? Ein Versuch. Über systemd-timer & ähnliche Tools (mrmcd24)

Thu, 03 Oct 2024 15:00:42 +0200

Früher war es nur ein kleines Debian! Dann war es kaputt. Oder wollte Updates. Oder reboots. Oder Backups. Oder Redundanz. Menschen haben das tatsächlich genutzt! Mit 18 habe ich vor der Schule noch schnell Mailserver geflickt. Irgendwann wollte ich dann noch ruhiger Schlafen, und habe ein Monitoring dazu gebaut. Ein Erfahrungsbericht über ca. 10 Jahre Infrastrukturbetrieb. Am Ende kennt ihr mein Setup einer "wartungsarmen" persönlichen Infrastruktur, und auch alles, was ich nicht nochmal so machen würde. Seit einigen Jahren betreibe ich "ein wenig" Infrastruktur (das Monitoring zählt 108 "instance"-Werte). Das alles bunt gemischt und teilweise IPv6 only im eigenen Netzwerk. In diesem Vortrag erzähle ich von meinen Erfahrungen, und was ich euch mitgeben möchte. Ein paar Tools uns Skripte sind entstanden, vielleicht ist ja auch was für euch dabei? Konkrete Themen sind unter anderem: - automatische Updates - Reboots nach Kernelupdates - Backups - Configmanagement - Monitoring all dieser Tasks - (Geo-)Redundanz - Kubernetes!? - Was man noch so alles tun müsste https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/BMFXS9/

Schiffe erkennen leicht gemacht (mrmcd24)

Thu, 03 Oct 2024 14:00:42 +0200

Nach einer Vorstellung des AIS (Automated Identification System), mit dem fast alle Schiffe Position, Fahrt usw. mitteilen müssen, gehe ich noch detaillierter auf verschiedene Punkte des verwendeten AIS-Protokolls ein. Seit etwa 20 Jahren müssen Schiffe ab einer bestimmten Größe verschiedenste Informationen per AIS senden, um die Verkehrslenkung und Kollisionsverhütung zu unterstützen. Diese Informationen sind mit geringem Aufwand frei empfangbar. Bei der Beschäftigung mit diesem System bin ich in der Definition des Protokolls und der Nachrichtenformate auf einige Punkte gestoßen, die ich sehr elegant gelöst fand und gerne vorstellen möchte. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/KYHJ8Y/

Stapellauf (mrmcd24)

Thu, 03 Oct 2024 13:37:42 +0200

Es geht los ! https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/AJC9PV/

Offene parlamentarische Daten – eine Schatzsuche (mrmcd24)

Thu, 03 Oct 2024 19:00:42 +0200

Wie kommt man jetzt an eine Liste aller Mitglieder des Deutschen Bundestags – bitte maschinenlesbar? Das ist eine Frage, die gar nicht so leicht zu beantworten ist. Der Bundestag bemüht sich um Offene Daten – wer etwas tiefer gräbt, stellt aber schnell fest: die Sache ist etwas komplizierter. Deshalb machen wir uns gemeinsam auf die Suche nach Maschinenlesbarkeit in deutschen Parlamenten, fischen in XMLs und schrubben IDs. Die sind nämlich im Laufe der Zeit... äh... etwas dreckig geworden. Wir entdecken, wie viele unterschiedliche IDs es für Abgeordnete alleine in der Dateninfrastruktur der Bundestagsverwaltung gibt (fümpf!), welche Gefahren bei der Arbeit mit Namen lauern (Prof. Dr. gleicher Nachname und hat jetzt auch noch geheiratet lässt grüßen) und wie man am Ende dann doch noch ins Rettungsboot springt. Der Talk gibt also nicht nur einen Überblick, welche Daten verfügbar sind – sondern auch, wie man damit umgeht, ganz praktisch, zum Nachmachen und mit Beispielcode. Wir schauen uns an, wie man mit Python/Pandas an Daten kommt, was darin steckt und wie man die verschachtelten Datenstrukturen umformen und auswerten kann. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/WSZ8JU/

Heizkeller sehen und sterben (mrmcd24)

Thu, 03 Oct 2024 16:40:42 +0200

Vom Chaos in deutschen Heizkellern und warum dort neuerdings Linux läuft. Wir, meine Kolleg*innen und ich, bei othermo GmbH installieren Linux Gateways in deutschen Heizkellern und versuchen dem Chaos an Hersteller-spezifischen Protokollen der letzten 30 Jahre Herr zu werden und auf einer vereinheitlichten Datenbasis Einblicke und Optimierungen zu ermöglichen. Vom Leid und der Freude diese Protokolle zu reverse-engineeren und dann in einem Linux-Gateway mit unserem größtenteils Open Source Software Stack zu verarbeiten wollen wir euch berichten. Wusstet Ihr, das vermutlich eure Verbrauchsdaten der Heizkörper durch die Luft schwirren? Oder das eure Heizung vermutlich mehr Daten zum Lesen und Einstellen bereit hält als ihr vermutlich denkt? Hacken auf eigene Gefahr! Abrunden wollen wir das ganze mit schmerzhaften Anekdoten von offenen telnet ports und gestorbenen Standardisierungsversuchen. https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/Y9EKD9/

Dein ISMS, das unbekannte Wesen (mrmcd24)

Thu, 03 Oct 2024 16:40:42 +0200

In vielen (größeren) Organisationen ist ein ISMS (**I**nformations**s**icherheits**m**anagement**s**ystem) vorhanden: Was ist das? Was soll das? Was kann das? Was nicht? Und: Kann man das hacken? Agenda - Einführung - Management-Systeme - ISO 27001, IT-Grundschutz, ... - ISMS Paradoxen (aka: Theorie) - Quantensprünge zwischen abstrakten und konkreten Welten - Risikobewertungen - ISMS-oxid und Sie (aka: Praxis) - Motivation / Ursachen - Compliance(-Reporting) - Audits & Zertifizierungen - Anekdoten - Empfehlungen https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://talks.mrmcd.net/2024/talk/FLSXPQ/

Abschlusspräsentation Hamburg (jh24)

Sun, 22 Sep 2024 13:30:00 +0200

Alle Projekte werden auf der großen Bühne vorgestellt. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://fahrplan.alpaka.space/jhhh24/talk/GX9SYX/

Stabilisator (jh24)

Sun, 22 Sep 2024 14:13:00 +0200

Leopold, Vindhya Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://fahrplan.alpaka.space/jhhh24/talk/TVPVHV/

Laser Einführung - Teil 1 (chaotikum)

Fri, 27 Sep 2024 19:00:00 +0200

Wir haben seit einigen Wochen ein neues Gerät in unserem Hackspace. Nach langem überlegen, welches Modell wir kaufen wollen, wie wir es anschließen und wie wir die Abluft lösen können, haben wir uns für den Lasercutter Flux Hexa entschieden. Dieser 60W CO2 Laser hat eine Arbeitsfläche von 73 x 41 cm und kann unter Idealbedingungen Holz bis zu einer Stärke von 1 cm schneiden! - https://chaotikum.org/nobreakspace/inventory/fluxhexa/ - https://wiki.chaotikum.org/hackspace:infrastruktur:fluxhexalasercutter Hier eine Aufzeichnung der Sicherheitseinweisung für das Gerät. Zweiter Teil mit mehr Praxis: https://chaotikum.org/media/2024-09-27-laser-einfuehrung-teil-2/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://chaotikum.org/blog/2024/09/18/habemuslaser/

Laser Einführung - Teil 2 (chaotikum)

Fri, 27 Sep 2024 19:00:00 +0200

Wir haben seit einigen Wochen ein neues Gerät in unserem Hackspace. Nach langem überlegen, welches Modell wir kaufen wollen, wie wir es anschließen und wie wir die Abluft lösen können, haben wir uns für den Lasercutter Flux Hexa entschieden. Dieser 60W CO2 Laser hat eine Arbeitsfläche von 73 x 41 cm und kann unter Idealbedingungen Holz bis zu einer Stärke von 1 cm schneiden! - https://chaotikum.org/nobreakspace/inventory/fluxhexa/ - https://wiki.chaotikum.org/hackspace:infrastruktur:fluxhexalasercutter Hier eine Aufzeichnung der Einweisung für das Gerät. Erster Teil (Sicherheitseinweisung) unter: https://chaotikum.org/media/2024-09-27-laser-einfuehrung-teil-1/ This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://chaotikum.org/blog/2024/09/18/habemuslaser/

using io_uring for storage (asg2024)

Thu, 26 Sep 2024 09:55:00 +0200

A brief report about how we use io_uring in SLASH/fellow https://gitlab.com/uplex/varnish/slash, an always consistent, eventually persistent storage engine for Varnish-Cache. (FOSS, LGPL) Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/U7GJJW/

initrd performance improvements (asg2024)

Thu, 26 Sep 2024 18:00:00 +0200

Every second spent on waiting for a system to boot is wasted time. In this talk I present the steps we took in Ubuntu to speed up the boot and the initrd generation time. The presented improvements are not specific to Ubuntu and can be ported to other implementations (like dracut) to benefit other distributions as well. The talk will present further speed improvements that can/will be implemented in the future. That includes rewriting parts in modern languages like Rust. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/9T8LTT/

systemd-ifying postmarketOS, our immutable future, and why Alpine is cooler than you thought (asg2024)

Thu, 26 Sep 2024 10:50:00 +0200

postmarketOS was started with the lofty goal of enabling long term support for mobile phones and other devices with traditionally short lifespans, and doing so outside of the Android walled garden. This has inevitably resulted in a lot of upstream focused hardware bringup and development. Join us and learn what our community have been building, how we're running systemd on Alpine Linux and what we see in the future for postmarketOS. Through community driven efforts and collaboration, postmarketOS has grown into a highly adaptable platform which runs on anything from smartwatches and TVs to phones and laptops. In this talk, Caleb and Clayton discuss how our unique approach to tooling and package management have allowed such a small community to scale up to support hundreds of devices with more than 5 different bootloaders, over a dozen user interfaces, and now two init systems. They will cover: * A rough overview of the distro architecture * How device abstractions work in postmarketOS * Pmbootstrap and apk for fast developer iteration at a low cost * Systemd bootstrapping and current status * Our plan for an immutable postmarketOS (and request for feedback) Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/LJXCKK/

Booting an embedded system like a PC (asg2024)

Thu, 26 Sep 2024 10:50:00 +0200

This shows how to boot an [mkosi](https://github.com/systemd/mkosi) generated arm64 [Debian](https://debian.org) Image with [UKI](https://github.com/uapi-group/specifications/blob/main/specs/unified_kernel_image.md) and systemd-boot on a [u-boot](https://docs.u-boot.org/en/latest/develop/uefi/u-boot_on_efi.html) based EFI firmware with a [fTPM](https://github.com/microsoft/ms-tpm-20-ref/tree/main/Samples/ARM32-FirmwareTPM/optee_ta/fTPM) as a Trusted-Application in [OP-TEE](https://optee.readthedocs.io/en/latest/general/about.html) Embedded systems are very similar to IT managed PCs. A manufacturer of the device wants to ensure, that the system integrity is good, e.g. before unlocking secrets that allow accessing cloud services. Therefore the recent developments of the UAPI group and systemd are also very useful in the embedded world. This talk gives an overview of the involved software components and how they are combined. It shows how to build a firmware for an i.MX8MM that allows booting modern Linux images. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/VZGAAG/

mkosi-initrd: initrds built from system packages (asg2024)

Thu, 26 Sep 2024 17:30:00 +0200

mkosi-initrd is a project to build initrds from normal system packages (rpms, debs). Initially separate, it now is part of mkosi — just another build stage. systemd uses mkosi for automated tests, and this now includes building an initrd and booting a VM with it, so such initrds are getting fairly wide testing, albeit in fairly narrow circumstances. The process of adoption of mkosi-initrd in distributions has been slow, but with an implementation natively in mkosi, the technical base is really good. What remains to be done to make this the default approach? Can Fedora 41 finally make this an option for users? Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/JTXJR7/

Boring infrastructure: Building a secure signing environment (asg2024)

Thu, 26 Sep 2024 15:15:00 +0200

Many Linux distributions rely on cryptographic signatures for their packages and release artifacts. However, most of the used signing solutions either do not rely on hardware backed private key material or are run in untrusted environments. This presentation will provide a general overview of the [Signstar](https://gitlab.archlinux.org/archlinux/signstar/) project, which is currently under development by Arch Linux to provide a generic signing solution based on a Hardware Security Module (HSM). To improve build automation and general supply chain security for Arch Linux, some of its developers have started to conceptualize and work on a generic, central signing solution: [Signstar](https://gitlab.archlinux.org/archlinux/signstar/). In this context, related work has been evaluated for adoption, but it soon became clear, that to meet the distribution's requirements a custom solution would be implemented. For transparency and auditability reasons Nitrokey's NetHSM has been chosen as Hardware Security Module (HSM). Developers are actively working on a high-level Rust library and CLI to interface with the device over network. In this presentation I will introduce the viewer to some of Arch Linux's relevant history and requirements, the evaluated architecture and setup. Together we will have a look at Signstar's threat model, its design for minimizing credentials exposure of the HSM, as well as its integration with the OpenPGP ecosystem. Additionally, we will explore avenues for future work on other generic cryptographic operations in the context of X.509, SSH and Secure Boot. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/WWEGGC/

Ideas for improving systemd-boot (asg2024)

Wed, 25 Sep 2024 18:20:00 +0200

Ideas for improving systemd-boot Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/DT3RCU/

Can systemd-resolved replace Avahi? (asg2024)

Thu, 26 Sep 2024 18:00:00 +0200

Multicast DNS (mDNS) and DNS Service Discovery (DNS-SD), collectively know as zeroconf, are technologies used for devices to find each other and advertise services on the local network. There are two widely used FOSS implementations: mDNSResponder is used by Apple and Android, while Avahi is used by most GNU/Linux distributions. However, there is a third one in systemd-resolved -- widely installed but rarely used. In this talk, I will explain how mDNS and DNS-SD work individually and together, and explore how to use them with resolvectl. I'll also try to go over the deficiencies in the systemd-resolved and have a discussion about the ways that it can be improved to replace Avahi as the default implementation on GNU/Linux systems. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/C3DZDS/

Jüdischer Anarchismus - Eine Einführung (DS2024)

Fri, 20 Sep 2024 17:30:00 +0200

Vortrag und Gespräch Denjenigen, die sich mit der jüdischen Gewerkschafts- und Arbeiter:innenbewegung beschäftigen, ist auch der Anarchismus ein Begriff, der von Anfang an ein treibender Teil der Bewegung gewesen war. Emma Goldman, Morris Vinchevski, Morris Rosenfeld, David Edelstadt, Josef Bovshover, Jacob und Katharina Merison sind so bekannte wie unterschiedliche Figuren, die im sozialistischen wie anarchistischen Milieu aktiv waren. Wir werden uns im Vortrag mit dem Denken dieser Personen auseinandersetzen und einen Einblick in die Grundlagen, typischen Merkmale und osteuropäischen Spezifika der jüdisch-anarchistischen Bewegung bekommen. Der Vortrag gibt einen knappen Überblick über einschneidende historische Ereignisse und die Differenzen innerhalb der Bewegung, darunter auch die Debatten um Klasse, Nation und Religion. Der Vortrag dauert ca. eine Stunde, danach ist Zeit für Fragen und Diskussion. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/DBM9YN/

busd: There is a new D-Bus broker in town (asg2024)

Thu, 26 Sep 2024 14:30:00 +0200

D-Bus is an IPC mechanism that is very ubiquitous on Linux systems everywhere (desktop, cloud and embedded). It is the mechanism you'd use to communicate with many of the core Linux userspace subsystems, such as systemd, NetworkManager etc. Traditionally, most of these services have been written in C, a language known for its lack of safety and expressiveness. In the past years, Zeeshan has developed a library, called zbus for enabling implementation of D-Bus services and clients in a programming language designed for safety: Rust. zbus has become the go-to library for writing D-Bus code in Rust. While that is major step forward, the communication typically still happens through a broker and the two major broker implementation are both are written in C and have been stagnating for years. This is why Zeeshan has recently started working on writing a D-Bus broker based on zbus, called busd, which not only aims provide a drop-in replacement for existing brokers, but also modernize the D-Bus space by providing new features needed by apps and services, such as systemd. In this talk, Zeeshan will walk us through a summary of his journey so far, the current state of busd and his plans and dreams for the future of D-Bus. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/WB7DYF/

A new way to develop on immutable Linux (asg2024)

Wed, 25 Sep 2024 18:18:00 +0200

A new way to develop on immutable Linux Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/NSKLAR/

systemd: round table (asg2024)

Thu, 26 Sep 2024 09:55:00 +0200

Let's have an open discussion with systemd developers who are at ASG and users in the audience. We will open with the developers saying what they plan to work on in the near future, and then allow questions / comments from the audience. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/YQZBGT/

Removing Cloud Providers From the Zero Trust Equation (asg2024)

Thu, 26 Sep 2024 12:20:00 +0200

This presentation introduces a novel approach to enhance the trust in SPIFFE by leveraging confidential computing technologies, specifically Confidential Virtual Machines. The presentation will provide an introduction to the realm of confidential computing, as well as an overview of SPIFFE/SPIRE. Armed with this knowledge we will demonstrate a practical example that integrates the AWS Instance Identity Document plugin with AMD SEV-SNP, showcasing the implementation challenges and solutions. SPIFFE is a framework to generate identities for software systems in dynamic and heterogeneous environments. SPIFFE Verifiable Identity Documents (SVIDs) enable us to be explicit about the trust we place in systems. However, the degree of trust we can place in SVIDs relies heavily on the soundness of the data gathering and verification process during node attestation. This presentation introduces a novel approach to enhance the trust in SVIDs by leveraging confidential computing technologies, specifically Confidential Virtual Machines (CVMs) such as AMD SEV-SNP or Intel TDX. These technologies enable us to track platform information directly in hardware, including firmware, boot loader, and kernel images, which are then signed with a key rooted inside the CPU itself. By incorporating hardware-protected platform information directly into the SVID generation process, we can significantly enhance the confidence placed in the resulting identity documents. Additionally, consumers of these SVIDs will be able to assert these properties before placing trust in a system. The presentation will provide an introduction to the realm of confidential computing, as well as provide an overview of SPIFFE/SPIRE, including the architecture of SPIRE agents and servers, the concept of workloads and SPIFFE SVIDs, and the role of node plugins in the attestation process. A practical example that integrates the AWS Instance Identity Document plugin with AMD SEV-SNP will be demonstrated, showcasing the implementation challenges and solutions. Through this presentation, attendees will gain insights into how confidential computing technologies can bolster the security of critical systems in an untrusted cloud environment, paving the way for more robust and resilient infrastructure in modern computing environments. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/AG7L3K/

Varlink Now! (asg2024)

Thu, 26 Sep 2024 10:20:00 +0200

Why bother with Varlink IPC, and why now? The Varlink IPC has been around for a while, but recently we started using it heavily in systemd. In this talk I'd like to explain what Varlink IPC is, and why we are now adopting it so heavily. And I also want to explain why I think that Varlink is a good candidate as IPC of choice for any Linux software, both low-level and higher-level. We'll compare it with D-Bus in particular, and highlight where it shines (and where it doesn't shine so much). Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/XSYMKW/

Avocado Linux: Highly Secure Accelerated Embedded Development Platform for (A)IoT (asg2024)

Thu, 26 Sep 2024 14:30:00 +0200

Developing embedded products often involves a trade-off between robust security and accelerated development. Production environments, while offering high security and immutability, can inhibit rapid development cycles. Conversely, sandbox environments provide the flexibility and integration needed for fast development but are not suitable for production deployment. The transition between these two environments is typically fraught with challenges, consuming significant time and effort. This talk introduces Avocado Linux, a highly secure, image-based operating system and layer repository with deeply integrated developer tools. Avocado strikes a perfect balance between flexibility and immutability, combining the best of both worlds, accelerating time to market without compromising on security. By leveraging innovative systemd features like System Extensions, Configuration Extensions, and Portable Services, Avocado Linux provides a robust framework for service management, process isolation, and secure, atomic updates. Its design ensures robust security and system integrity, with comprehensive use of dm-verity and mechanisms for recovery and factory reset, safeguarding device data integrity even in the face of unexpected failures. Join us to explore how Avocado can transform your embedded systems development with faster integration, enhanced reliability, and seamless composability. Discover how this distribution delivers significant business value by enabling rapid deployment, maintaining security, and ensuring system integrity. Learn how Avocado abstracts away the complexities of system development, allowing your team and applications to thrive and your embedded product to scale and succeed. About the Talk In this talk we will explore * Demo use cases for building complex products * Developer tools and workflows * Manufacturing optimizations for provisioning and end of line testing * In field debugging and system fault tolerance Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/QWTAFC/

libpathrs: securing path operations for system tools (asg2024)

Thu, 26 Sep 2024 10:20:00 +0200

Container runtimes and other privileged system management tools have historically struggled with safely operating on a path within a directory tree controlled by a malicious user. [libpathrs][] is a library which makes it easy to do said path operations, as well as providing some other safe path-related utilities such as providing safe wrappers to operate on procfs files in a safe way. [libpathrs]: https://github.com/openSUSE/libpathrs As part of the kernel work on openat2(2) and continuing kernel work to make magic-links safer (against both confused deputy attacks and resource re-opening attacks), the need for a library to make it easy to do all sorts of VFS operations safely became obvious, and so [libpathrs][] was born. [libpathrs][] uses openat2(2) if available, but has a fallback to the old fashioned (and more finicky) method of doing safe-ish path resolutions. This talk will talk about how [libpathrs][] works and how it can help secure container runtimes and privileged system management tools against attacks, as well as touching on some ongoing kernel work which would allow for even more hardening. After the talk, slides will be available from [my site](https://www.cyphar.com/talks). [libpathrs]: https://github.com/openSUSE/libpathrs Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/ZZFL7L/

Reproducible Builds at Sidero Labs: Tools and Techniques (asg2024)

Thu, 26 Sep 2024 09:30:00 +0200

Ensuring consistent and secure software builds is crucial in today's cloud-native environments. At Sidero Labs, we've developed a comprehensive approach to reproducible builds for Talos Linux using a variety of tools and techniques. This talk will explore our use of Docker Buildx, Kres, and other key components that contribute to our build system. We'll share insights into our methods, challenges faced, and solutions implemented, providing practical guidance for developers aiming to achieve reproducibility in their own projects. To achieve a fully reproducible stack, from the kernel and initramfs to the software we own and third-party software we build, we use multiple tools in our toolset: - Buildx: Provides a consistent environment for building software. - Kres: Our project scaffolding tool for generating and updating build instructions and dependencies. - Code Patches: Address issues in third-party projects that prevent reproducible builds. - Tests: Written by us to ensure and verify reproducibility. In this talk, we will cover each of these tools and techniques, providing examples and practical insights. You will learn how to apply these methods to achieve reproducible builds in your own projects, gaining a complete picture of our approach and how it can be adapted to your needs. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/RYZJ9W/

Integrating systemd soft-reboot into a distribution and surviving it (asg2024)

Thu, 26 Sep 2024 11:35:00 +0200

In this talk, I will discuss how Linux distributions can integrate and benefit from using systemd soft-reboot. Using openSUSE Tumbleweed as an example, I will show where and how it makes sense for traditional Linux distributions to use it and where the pitfalls are. With openSUSE MicroOS, we have a distribution with a read-only root file system that particularly benefits from a soft-reboot because a reboot is necessary after every update in order to change the root file system. However, this also requires special measures to ensure that it always functions smoothly. Afterwards I will talk about the requirements and solutions for services to survive a soft reboot and what's necessary to make the whole thing supportable. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/YUAPMX/

Installing your OS with systemd-repart (asg2024)

Thu, 26 Sep 2024 16:30:00 +0200

There's a new installer for GNOME OS, and it's built on top of systemd-repart. Here's how and why we did it Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/CMQTNL/

Integration testing environment for mixed HPC and cloud workloads (asg2024)

Wed, 25 Sep 2024 18:15:00 +0200

Integration testing environment for mixed HPC and cloud workloads Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/XNQLTE/

systemd: state of the project (asg2024)

Thu, 26 Sep 2024 09:30:00 +0200

Same as every year, a lot has happened in the systemd project since last year's ASG. We released multiple versions, packed with new components and features. This talk will provide an overview of these changes, commenting on successes and challenges, and a sneak peak at what lies ahead. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/RLZEPD/

Efficient RAUC Updates using composefs (asg2024)

Wed, 25 Sep 2024 18:00:00 +0200

A quick overview of how RAUC uses libcomposefs to handle new use-cases. Traditionally, RAUC focused on A/B updates for whole partitions, either by using filesystem images or tar archives. While the image-based OS approach has many benefits, there are scenarios where more loosely coupled components need to be handle in addition to the root filesystem. In RAUC, these can be handled with using the new "artifact updates" support. As a system might have many artifacts installed in parallel, such as for containers (systemd-nspawn or otherwise) and systemd-sysexts, efficient storage is important. In many cases, these are updated often, so download efficiency is important as well. After evaluating multiple alternatives, we've now decided to integrate composefs. Besides solving the requirements above, it additionally provides the same level of integrity protection as a dm-verity root filesystem, which is important in systems using secure boot. This talk will show how RAUC uses libcomposefs and the new use-cases supported by having an efficient content-addressed backing store with full authentication. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/3DKX9V/

Debian, empty /var/, empty /etc/ and factory reset (asg2024)

Wed, 25 Sep 2024 18:10:00 +0200

This presentation will review how far Debian (and more generally, traditional distributions) is from supporting factory reset: what can work, what is missing and possible hacks^Wways to do it without starting a distribution-wide effort. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/3K8NZT/

Successes and struggles using the systemd user instance in developer environments (asg2024)

Thu, 26 Sep 2024 17:00:00 +0200

This talk will explore several of the ways we've leveraged the systemd user instance in our developer environments at Meta, challenges we faced while doing so, and how we worked around those challenges. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/H7CVUQ/

Improving systemd’s integration testing infrastructure (asg2024)

Thu, 26 Sep 2024 16:30:00 +0200

The Sovereign Tech Fund paid Codethink to help improve the integration testing infrastructure of systemd. This talk covers how the integration test suite used to work and what it does now. Systemd's integration test suite used to have a number of shortcomings in terms of features and maintainability. The Sovereign Tech Fund provided an opportunity to improve things, and rewrite the test suite to use a select number of special-purpose tools and Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/9JKWCT/

GNOME OS + systemd-sysupdate (asg2024)

Thu, 26 Sep 2024 17:00:00 +0200

As a reference for developers and testers, GNOME OS is an experimental Linux distribution that ships the latest in-development GNOME desktop, core applications, and stack. GNOME OS is currently using OSTree, this talk covers the ongoing work to add features to systemd-sysupdate and transition to it. Features like optional transfers, delta updates, and major version upgrades. GNOME OS is an experimental Linux distribution that ships the latest in-development GNOME desktop, core applications, and stack. It serves as a reference for developers and testers. This operating system is designed and built around the modern systemd and GNU-based userland built from the Freedesktop SDK. Currently, GNOME OS uses OSTree to deploy the root filesystem and manage updates. This means that the base OS is immutable (read-only) and updates can be quickly downloaded as deltas. OSTree allows easy rollback to multiple previous versions of the root filesystem, which is essential for a testing-first distribution focused on finding bugs. Our work focuses on transitioning GNOME OS to use systemd-sysupdate. Migrating to sysupdate would bring the following benefits: * Provide a trust chain from the bootloader, all the way up, both online and offline; * Achieve a closer integration with systemd; * Advance our support for image-based design and its benefits, e.g., immutability, auto-updating, adaptability, factory reset, uniformity and other modernised security properties around image-based OSes. For that, we are adding a number of features to systemd-sysupdate to make it more production ready; * Implement optional transfers in systemd-sysupdate * sysupdate should allow upgrading to a newer major version * pluggable backends for systemd-sysupdate (or systemd-import) This project was partly inspired by Lennart Pottering's article "Brave New Trusted Boot World", in which he explains a vision of the future of Linux systems. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/MGDHYQ/

What's your PID 1 up to? (asg2024)

Thu, 26 Sep 2024 12:20:00 +0200

How do you continually test and release new versions of systemd with confidence? Also, once released, how do you monitor PID 1 itself and your PID 1 usage across your server fleet? This talk dives into Meta’s way of answering these questions so we can minimize the risk of breaking changes and fun each systemd release brings us. Some of the technology in the talk is OSS, so you too, can join in on the fun knowing how your systemd usage is across your own infrastructure! This talk will dive into how Meta baseline’s our systemd usage across the fleet and use that data for CI, releasing and monitoring systemd. * Who am I + what do I work on * The common big monitoring hole many bare bone infrastructures have * PID 1 * PID 1 usage * Systemd @ meta * Imaging initrd * Initrd * Main os * Twine containers * Overview of OS image building and deployment @ meta * How we build images * How we provision servers * Chef’s role * What we check from our PID1 statistics to ensure a box is “healthy” enough to take workloads * Usage of hyperscale’s systemd-cd @ meta * What is systemd-cd * [https://sigs.centos.org/hyperscale/internal/ci/](https://sigs.centos.org/hyperscale/internal/ci/) * How do we use it * What issues has it found for us * Monitoring of meta’s systemd usage across the millions of hosts * Stats collected * Introduce monitord * Dbus (fun) vs. varlink * mention OSS alternative(s) found - explain why invented monitord * Introduce monitord-exporter * Show usage outside of meta (will be my small home infra + VPS’s) Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/7APG3H/

SSH authentication using user and machine identities (asg2024)

Thu, 26 Sep 2024 15:15:00 +0200

Strong authentication requires multiple signals: identity claims proves that identity of the person, while device attestation proves possession of a given machine, and device bound keys prevent the key from being stolen. In this presentation we will take a look at how the TPM provides device attestation and device bound keys. We will connect this with identity claims from SSO providers to provide a centrally managed short-lived SSH certificates for users and their devices. This is implemented as an open-source project called “ssh-tpm-ca-authority”. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/JCJ9YT/

Home Directory Encryption in GNOME (asg2024)

Thu, 26 Sep 2024 17:30:00 +0200

Thanks to work made possible by the STF grant, all the pieces are there for GNOME to integrate with systemd-homed. This talk describes what it took to get here, what new features it gives us, what still remains to be done Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/FFY3BB/

Building Secure Container Images for the Cloud with Yocto (asg2024)

Thu, 26 Sep 2024 11:35:00 +0200

Yocto is a tool for building custom Linux distros. When you think about it, a container image is just a custom Linux distro. The distro (e.g. Alpine) is your base image and the customizations are the rest of your application or microservice. Like Podman, Yocto can generate a complete root filesystem in the form of an OCI container image. Originally targeted at bare metal, the Yocto configuration and build process seems complex when compared to the Containerfile approach of cloud native tools. Yocto's OpenEmbedded origins also mean that reduced image size, SBOM generation, license compliance, and reproducible builds were concerns early on in the project rather than afterthoughts. With security and risk of litigation now top of mind, this talk explains Yocto's uniquely layered and ultimately monolithic approach to solving these real-world software problems. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/KZPRPN/

oo7-daemon + systemd per-user credentials (asg2024)

Wed, 25 Sep 2024 18:05:00 +0200

oo7-daemon (a temporary name based on the oo7 client library) project aims to provide a replacement for the gnome-keyring-daemon as the new D-Bus Secret Service provider in the GNOME desktop environment. In this talk I will go through the latest development plans and the progress made to integrate TPM backed credentials support to oo7-daemon using systemd per-user credentials as a backend. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/8TMT9T/

Portable software bills of materials with Nix and systemd portable services (asg2024)

Wed, 25 Sep 2024 16:30:00 +0200

While software bills of materials become of increasing value to further trust in the software supply chain, generating high quality SBOMs still poses some challenges in some ecosystems due to the lack of proper tooling or accessible build metadata. In this talk, I'll explain and demonstrate how we can leverage the static dependency graph of functional package managers like Nix to generate very precise SBOMs, that can be relevant for running a service on any linux distribution thanks to systemd portable services. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/7XGYDC/

Creating Arch Linux images using mkosi (asg2024)

Wed, 25 Sep 2024 17:00:00 +0200

Arch Linux creates 2 cloud images, 2 vagrant images every month using custom bash scripts and requiring root for building. This talk will look at how these images can be created using mkosi, building them in CI, testing the build images and as a bonus; build reproducible? Project link: https://gitlab.archlinux.org/archlinux/arch-boxes Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/QFUGLT/

The road to a trusted and measured boot chain in Bootable Containers (asg2024)

Wed, 25 Sep 2024 11:55:00 +0200

Fedora image based variants (CoreOS, Atomic Desktops, IoT) are currently built using ostree and rpm-ostree. This enables an hybrid approach where the system is managed like an image but modifications are still possible using RPMs. But this approach has limits: - It is difficult for users to customize their operating system and share those customizations. - The integrity of the boot chain is not guarenteed and it is costly to validate the system content at runtime. To address those shortcomings, we are introducing the bootable containers (bootc) project. With bootable containers, the content of the operating system, including the kernel and initrd (or a UKI) is shipped in a container image alongside its corresponding base userspace root filesystem. This image can then be modified using container native tools and shared via a container registry. To chain from platform Secure Boot to a verified root filesystem, the ostree project has integrated support for composefs. It combines multiple Linux kernel features (overlayfs, EROFS and fs-verity) to provide read-only mountable filesystem trees stacking on top of an underlying "lower" Linux filesystem. We will detail how we are integrating composefs and UKI support in Bootable Containers to enable a trusted and measured boot chain while letting users customize and re-sign their images to fit their needs. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/HVEZQQ/

bootc: Generating an ecosystem around bootable OCI containers (asg2024)

Wed, 25 Sep 2024 15:20:00 +0200

Containers have become the de facto choice for deploying most applications, and all of us benefit from the isolation, portability, and the surrounding ecosystem. In this talk we’ll take a deep dive into the world of bootable containers, using the same ideas, goals and technology for the host system (whether virtualized or bare metal). We’ll look at the bootc project under the github.com/containers umbrella and its current flagship distribution usage in the new Fedora/CentOS bootc project and initiative. We hope you are as excited as we are by taking cloud-native approaches down to the operating system level, and a key goal is finding points that can be shared with other components of the ecosystem, from the uapi-group.org to other container-based OSes. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/LA9LXV/

Rediscovering systemd Portable Services (asg2024)

Wed, 25 Sep 2024 17:30:00 +0200

systemd introduced Portable Services support in 2018, as part of v239. This feature was covered at ASG 2018 and in a blog post published at the time: https://0pointer.net/blog/walkthrough-for-portable-services.html But a lot has changed in the past 6 years, and very crucial new features have been introduced, so it is time to have another look at this topic and see what has happened in the meanwhile, what new use cases have opened up, and what is coming in the near future. https://systemd.io/PORTABLE_SERVICES/ Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/DGVBSC/

An extendable and securely signed image-based OS with updates (asg2024)

Wed, 25 Sep 2024 16:30:00 +0200

With systemd tooling, including mkosi, it is possible to build an OS image that fulfills all checkmarks a modern image-based OS should have, but with a standard off-the-shelf distribution! This talk gives an overview for a possible workflow, including A/B updates and offline signed images and updates, in real-use. As a bonus, it is also self-replicating and uses as little configuration as possible, leveraging built-in systemd auto detection. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/LJAYYL/

Fort Kairos: A New Dawn for Secure Linux in Untrusted Environments (asg2024)

Wed, 25 Sep 2024 14:35:00 +0200

At the edge, there's one thing we know for sure: it's not to be trusted. But imagine if Kairos could change that, letting you sleep soundly knowing your intellectual property is secure. Kairos is a fully open source project to run kubernetes at the edge. As such, we have put Trusted Boot into action. Inspired by Lennard Pottering, the mind behind Systemd, we've leveraged Secure Boot, Trusted Boot, TPM, and disk encryption. The result? A Linux OS that's built tough against the challenges of untrusted environments. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/9VPPTC/

Fixing an old Linux process memory security bug (asg2024)

Wed, 25 Sep 2024 11:55:00 +0200

There is a well-known trade-off between security lockdowns and a user's abiliy to debug/inspect a system. The Linux kernel is finally fixing an old proc/mem security bug which illustrates this trade-off nicely. The kernel will provide a mechanism, so distros need to implement a policy according to their own security needs, to restrict proc/mem access (it gives userspace RW access to processes memory). This talk goes into the what, why and how of getting this bug fixed, with some policies for plugging the long-standing hole for different use-cases, without breaking debuggers or container supervisors. This talk is based the Linux patch series [1] which is extending the /proc/*/mem access controls beyond the normal file-based permissions, to restrict various access during kernel builds (Kconfig level) or early boot via static/read-only key parameters. It is expected to land in kernel v6.11, to be released in late Q3 / early Q4 2024. The author is looking for opinions whether this should be backported to stable trees since the patch is somewhere between a bugfix and a new feature. [1] https://patchwork.kernel.org/project/linux-fsdevel/patch/20240613133937.2352724-2-adrian.ratiu@collabora.com/ Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/9UVMR7/

systemd & TPM in 2024 (asg2024)

Wed, 25 Sep 2024 15:20:00 +0200

An update on systemd's TPM features, i.e. what happened since last year, i.e. systemd-pcrlock, NvPCRs, and Varlink APIs. At last year's ASG I already did a systemd & TPM talk, and this is supposed to be a follow-up to that, with everything that happened since then, plus what's next and what's missing. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/VQLZBT/

Using Trusted Platform Modules (TPMs) at scale for protecting keys (asg2024)

Wed, 25 Sep 2024 10:15:00 +0200

Meta runs a large production fleet of servers, all making extensive use of TLS for inter-host communication. As part of a general approach of securing keys against exfiltration a project has been undertaken to make use of existing TPM chips to provide secure storage for high privilege private keys. This talk will touch upon the approach taken to allow for the use of a hardware backed key without compromising performance, but mostly focus on the software infrastructure that needed to be built to provision and monitor TPM health across the fleet (a prerequisite for confirmation of viability). Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/JQZ78P/

eBPF Data Collection for Everyone – empowering the community to obtain Linux insights using Inspektor Gadget (asg2024)

Wed, 25 Sep 2024 11:15:00 +0200

In this presentation we show how eBPF programmers can easily distribute their programs using Inspektor Gadget, a tool designed for the creation, deployment, and execution of eBPF programs (gadgets) across Kubernetes and Linux environments. Inspektor Gadget encapsulates eBPF programs into OCI containers, providing well-understood and easily distributable units. We then detail how an end user can use Inspektor Gadget to easily derive valuable systems insights. We'll give a brief overview of Inspektor Gadget's automatic data enrichment process, transforming complex kernel information into high-level, understandable concepts tied to Kubernetes and container runtimes. This feature bridges the knowledge gap between raw, low-level data and more interpretable information, improving the understanding of system behavior. We will explain how users can write their own gadgets and make use of different helper APIs provided by Inspektor Gadget for socket enricher, file path discovery and container filtering, etc. We will show how to combine existing gadgets into a new one, add additional post-processing logic using WASM or Lua and export the resulting data to different targets, using for example OpenTelemetry. Throughout the talk, we'll demonstrate more of Inspektor Gadget's features, its support across various environments, discuss its operational mechanics, and share insights into the future direction of the project. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/PVGU77/

Lessons learned from migrating AI accelerator drivers from the kernel to userspace (asg2024)

Wed, 25 Sep 2024 12:40:00 +0200

The kernel driver is dead; long live the userspace driver! In this talk, we’ll discuss the motivation, challenges and outcomes of migrating drivers for Meta’s AI accelerator chips from the kernel to userspace. Topics include: - Managing systemd units at scale - Experiences of running IPC over D-Bus - Re-writing the driver in Rust - The tooling necessary to support a variety of environments - Overall deprecation challenges and wins Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/77PFFF/

Enhancing Security with Systemd: Secure Web Tokens and TPM 2.0 (asg2024)

Wed, 25 Sep 2024 10:45:00 +0200

As the digital landscape evolves, ensuring robust security measures becomes paramount. In this talk, we will explore the implementation of a new systemd service designed to enhance secure web token management through TPM 2.0 and FIDO2 support. This integration facilitates seamless interaction with the xdg-credentials-portal, aiming to provide a straightforward and secure approach to handling credentials. Key Points: Systemd Service Implementation: An in-depth look at how we are leveraging systemd to create a secure service for web tokens. TPM 2.0 and FIDO2 Integration: Understanding the role of TPM 2.0 and FIDO2 in enhancing hardware security. Seamless Integration with xdg-credentials-portal: Demonstrating the ease of use and benefits of integrating with the xdg-credentials-portal for secure credential management. New Functionality in Systemd: Discussing the significance of this new functionality and its potential impact on the systemd community. Targeted at systemd developers and enthusiasts, this session will provide valuable insights into the implementation process, the benefits of using TPM 2.0 modules for hardware security, and the overall enhancement of systemd functionalities. Attendees will leave with a clear understanding of the concepts and the practical steps required to integrate these security features into their own projects. Join us to explore the future of secure web tokens with systemd and how this integration can simplify and strengthen security protocols in your system architecture. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/9KSPSA/

Reproducible and Immutable OS Images with NixOS (asg2024)

Wed, 25 Sep 2024 09:30:00 +0200

Many consider NixOS a great tool for declarative definition of their OS, but only few know about its capabilities for Image-based Linux. NixOS offers the tools to combine modern technologies such as discoverable disk images (DDIs), unified kernel images (UKIs), and TPM-based measured boot for transforming declarative configurations into security-focused and immutable OS images for both the server and the desktop. This talk showcases how we build such reproducible and immutable DDIs with NixOS, and how ukify, systemd-repart, dm-verity and measured boot are involved in that process. We will also briefly cover the support of SecureBoot in NixOS through the Lanzaboote project, and what else is yet to come for image-based NixOS. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/MRDURE/

Introducing azure-init, a minimal provisioning agent written in Rust (asg2024)

Wed, 25 Sep 2024 10:15:00 +0200

[Azure-init](https://github.com/Azure/azure-init) is a fresh open source reference implementation for provisioning Linux virtual machines in Azure. In contrast to existing systems like cloud-init, azure-init aims to be minimal, focusing on basic instance initialization from Azure metadata. Azure-init also consists of a flexible structure to enable its use by other provisioning agents like Fedora CoreOS’ [Afterburn](https://github.com/coreos/afterburn/). Finally, azure-init aims to be fast and secure, being written in Rust. In this talk we will review the motivations for the creation of azure-init, the current status of the project, and vision for its future development. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/BK7KMD/

Platform security in NixOS (asg2024)

Wed, 25 Sep 2024 14:35:00 +0200

You may have heard about this weird distribution, NixOS, that breaks compatibility with /usr. This talk explores the properties inherent to NixOS, focusing on its distinct approach to package management and system configuration. Learn how these principles combine with general upstream efforts at bringing TPM2, Secure Boot and more to your Linux distribution. Everything you wanted to know about why NixOS do things a certain way will be answered here. The idea is that you get out of this talk understanding the different compromises done by the NixOS community and what they get out of it. We will cover https://github.com/nix-community/lanzaboote which is a Rust UEFI stub similar to systemd-stub with fewer features but with one unique special feature for NixOS, similar to UKI addons. We will also do a status report of where NixOS stands in terms of adoption of systemd features such as systemd-pcrlock. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/UQ3CYU/

interacting with systemd from high level languages (asg2024)

Wed, 25 Sep 2024 17:30:00 +0200

Probably the way systemd is thought of and used is mostly as a service manager, and a collection of tools built around the idea of “low level user space”. We rarely think of it as a library that can be used as part of any high level language or application. This talk will cover this aspect of systemd, and through the lens of pystemd, explore how applications can use (and abuse) systemd. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/VAQPQW/

Waiter, an OS please, with some sysext sprinkled on top (asg2024)

Wed, 25 Sep 2024 17:00:00 +0200

On general purpose image based systems such as Flatcar and Fedora CoreOS, users are encouraged to run all their applications using containers. To make updates safe and predictable, the system is mounted as read only and local modifications are discouraged. While containers offer a lot of flexibility on Linux, there are still cases where installing binaries or running applications directly on the host operating system is preferred. For example to add kernel modules, use an alternative container runtime version, add more udev rules, etc. Some of those use cases could be addressed with statically linked binaries, but their management is manual and their usage creates new issues around updates, versionning, memory footprint and not everything can be statically compiled. Alternatively, one can build its own image but at non-negligeable maintenance costs. Systemd's system extensions (sys-ext) provide a mechanism to extend the content of the host while preserving the safety guarentees around updates. We will demonstrate how Flatcar, Fedora CoreOS and Atomic Desktops are leveraging sysext images to securely extend the OS. With practical examples and usecases (e.g Cluster API) learn how to install Python, Podman, Kubernetes, ZFS, everything at the same time, by composing your very own image with systemd-sysext. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/HJLF3C/

Improving bpftrace reliability (asg2024)

Wed, 25 Sep 2024 10:45:00 +0200

bpftrace is a popular and powerful dynamic tracer for Linux systems. In the vast majority of uses cases, bpftrace does its job quickly, efficiently, and accurately. However with the rapid increase of users, use cases, and features, the bpftrace community has started to feel (technical) growing pains. In particular, we've started to uncover various reliability issues. In this talk, we will cover what is already done as well as what is currently broken and how we will systematically fix and prevent these issues from re-occuring. Because bpftrace sits at the intersection of operating systems, compilers, and observability, we have the fortunate advantage of being able to absorb techniques and tricks from these fairly different disciplines. We hope that some of the knowledge we share will be both interesting as well practical to attendees. Audience participation is highly welcome. In particular, we are quite interested in receiving feedback in the form of bug reports, feature requests, complaints, etc. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/MXAEYZ/

systemd 255 in Tizen, or how we have paid our technical debt and took another one (asg2024)

Wed, 25 Sep 2024 12:40:00 +0200

In this talk we present the story of upgrading systemd in Tizen by eleven releases. We share both the lessons we've learnt during the most recent upgrade as well as decade long experience of the maintenance and development of key packages in the only GNU/Linux distribution that uses kdbus. We describe our day-to-day git workflow as well as upgrade procedures we came up with over the years. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/QLJGJJ/

Full Disk Encryption in openSUSE MicroOS and Tumbleweed (asg2024)

Wed, 25 Sep 2024 11:15:00 +0200

The openSUSE project has been looking for a Full Disk Encryption (FDE) solution since long ago. After some iterations we are converging in a systemd based solution. This talks will present the alternatives and will focus in the current proposed solution based on systemd-pcrlock. The openSUSE distribution is moving toward a FDE based on systemd, using signed policies or nvindex policies. We will review the different solutions that we worked on, and we will compare them briefly. We also describe some of the architectural changes done in the distribution before we can use the systemd tools. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://cfp.all-systems-go.io/all-systems-go-2024/talk/93KLUJ/

Minecraft Ethik (jh24)

Sun, 22 Sep 2024 14:05:00 +0200

Maxi, Lennart, Anna Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://fahrplan.alpaka.space/jhhh24/talk/FSRVBU/

VersaTiles - freie Karten für alle (DS2024)

Sat, 21 Sep 2024 19:15:00 +0200

Noch nie war es so einfach, eigene interaktive Karten zu erstellen. Eigene Karten im Internet zu veröffentlichen sollte theoretisch einfach sein. In der Praxis ist es jedoch oft komplex, sehr teuer oder das Ergebnis sieht nicht ansprechend aus. Wir sind zwei Datenjournalisten und haben mit [VersaTiles](https://versatiles.org) einen [komplett neuen, freien Kartenstack](https://github.com/versatiles-org) entwickelt, der es jedem ermöglicht, interaktive Karten zu nutzen. Dabei haben wir den Stack so konzipiert, dass er allen maximale Flexibilität bieten: - Nutze [unseren Kartenserver einfach als Quelle](https://github.com/versatiles-org/versatiles-documentation/blob/main/guides/use_tiles.versatiles.org.md). - Setze in wenigen Minuten einen [eigenen Server](https://github.com/versatiles-org/versatiles-documentation/blob/main/guides/install_versatiles.md) auf. - Deploye [einen Service in der Cloud](https://github.com/versatiles-org/versatiles-documentation/blob/main/guides/deploy_in_google_cloud.md) oder in Sekunden auf einem Raspberry Pi. - Passe Styles an, erstelle Datenvisualisierungen, integriere den Server in bestehende Redaktionssysteme ... In diesem Vortrag werden wir den gesamten Stack vorstellen: von der Generierung der Vector Tiles, dem neuen Containerformat, über die verschiedenen Serverimplementierungen bis hin zum Frontend. Wir zeigen Beispiele, wo VersaTiles schon überall eingesetzt wird, und geben einen Ausblick auf die nächsten Features. Zudem erfahrt ihr, wie ihr uns unterstützen könnt, um VersaTiles weiterzuentwickeln. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/MQGWVR/

give data back Soll ichs wirklich machen oder lass ichs lieber sein? (DS2024)

Sun, 22 Sep 2024 15:15:00 +0200

Wieviel von und über mich steckt eigentlich schon in den großen KI-Modellen? Die kostenlose Nutzung von KI-Services bieten einen großen Mehrwert in meinem Leben. Möchte ich das honorieren, indem ich auch eigene Daten für das Training von KI freizugeben (give data back)? Habe ich überhaupt die Kontrolle darüber? Man muss schon etwas tiefer graben, wenn man wissen will, welche Daten überhaupt für die marktführenden Modelle verwendet wurden. Habe ich eigentlich ein Recht darauf, dass keine Content von mir verwendet wird? Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/E3ZPEJ/

Die erste Speedhacking-Show der Welt (DS2024)

Sat, 21 Sep 2024 22:30:00 +0200

Zwei Kontrahent_innen führen um die Wette Hacker-Alltagstasks aus. In dieser packenden Gameshow treten Hacker_innen im Wettstreit in (beinahe) alltäglichen Aufgaben des Hackerlebens gegeneinander an. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/XUMDQE/

Time beat (jh24)

Sun, 22 Sep 2024 13:32:00 +0200

Gabriel, Warisara, Pablo, Ruben, Vadim, Nic, Sophie, Ile, Clara, Liora Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://fahrplan.alpaka.space/jhhh24/talk/FDAC7G/

Stand der Entwicklung der staatlichen E-ID (dgna)

Thu, 19 Sep 2024 21:30:00 +0200

Am 7. März 2021 hat das Schweizer Stimmvolk den Vorschlag für eine privatwirtschaftlich betriebene E-ID wuchtig abgelehnt. Kurz darauf verlangte das Parlament vom Bund eine vom Staat herausgegebene und Privatsphäre schonende E-ID zu entwickeln. Seither sind mehr als drei Jahre vergangen. Nun möchten wir herausfinden, was der aktuelle Stand bei diesem Projekt ist. Am Abend sind Annett Laube, Professorin für Informatik und Leiterin des Institute for Data Applications and Security der Berner Fachhochschule, Rolf Rauschenbach, Informationsbeauftragter E-ID beim Bundesamt für Justiz und Daniel Säuberli, Präsident der Digital Identity and Data Sovereignty Association (DIDAS), zu Gast. Rolf Rauschenbach fragen wir, welche technischen Entscheide warum getroffen wurden und welche noch offen sind. Annett Laube fragen wir, wie die Wissenschaft vom gewählten Ansatz punkto Privatsphäre, Sicherheit und technischem «State of the Art Level» meint. Weiter diskutieren wir, warum nun – entgegen dem ursprünglichen Versprechen – doch weitgehend auf die Veröffentlichung als Open Source Software verzichtet werden soll. about this event: https://www.digitale-gesellschaft.ch/event/netzpolitischer-abend-zu-stand-der-entwicklung-der-staatlichen-e-id/

Abstimmungsergebnisse im Europäischen Parlament - einfach und durchsuchbar (DS2024)

Sun, 22 Sep 2024 12:00:00 +0200

Wir zeigen, wie wir auf HowTheyVote.eu namentliche Abstimmungen im EU-Parlament zugänglicher machen. Wir stellen HowTheyVote.eu vor, eine quelloffene Plattform, auf der wir automatisiert Abstimmungsdaten aus dem Europäischen Parlament sammeln, sie mit weiteren Informationen kombinieren, übersichtlich darstellen und durchsuchbar machen. Dabei starten wir ausgehend von den verschiedenen offiziellen Datenquellen. Wir demonstrieren einige Fallstricke in Scraping-Projekten und im Umgang mit inkonsistenten Daten und ihrer Verknüpfung. Der Vortrag richtet sich an alle, die Interesse an der Arbeit des Europäischen Parlaments, an Web-Scraping-Projekten oder offenen Daten haben. Das Europäische Parlament ist die einzige unmittelbar demokratisch legitimierte der drei großen, gesetzgebenden EU-Institutionen. Im Juli ist das 10. Europäische Parlament mit 720 Abgeordneten zusammenkommen, die gemeinsam über 440 Millionen EU-Bürger*innen vertreten. Als Bürger*in selbst zu überprüfen, wie gut diese Vertretung klappt, ist leider schwierig: Zwar werden die Ergebnisse meistens inklusive Abstimmungsverhalten der einzelnen Abgeordneten veröffentlicht, aber sie sind schwer zu finden und nachzuvollziehen. Im Vortrag gehen wir kurz auf die grundlegende Rolle des Europäischen Parlaments im Europäischen Gesetzgebungsverfahren ein und schauen uns an, wie die veröffentlichten Abstimmungsdaten des Parlaments zu lesen sind. Danach geben wir einen Überblick, wie unsere automatisierte Sammlung und Aufbereitung technisch funktioniert. Dabei zeichnen wir nach, was wir seit unserem ersten Prototyp aus 2021 gelernt haben und versuchen Strategien für den Umgang mit unzuverlässigen Datenquellen an die Hand zu geben. Wir schließen mit einigen Ideen, wie unsere unter einer offenen Lizenz gesammelten Daten genutzt werden können. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/GWT7MZ/

GNU Taler: Event- und Regionalwährungen mit Freier Software und Privacy (DS2024)

Sat, 21 Sep 2024 16:30:00 +0200

Wir stellen die Verwendung von GNU Taler im Rahmen von Event- und Regionalwährungen vor. GNU Taler ist ein Bezahlsystem, welches nicht nur der bessere digitalen Euro sein will, sondern auch als Event- und Regionalwährung einsetzbar ist. Dabei basieren alle Komponenten auf freier Software und das Taler-Protokoll sorgt kryptographisch dafür, dass Kund\*innen anonym bezahlen können. Bei Händler\*innen ist Einkommenstransparenz sichergestellt, eine Eigenschaft die besonders für Event-Währungen interessant ist. In diesem Vortrag stellen wir euch die Taler-Bezahlinfrastruktur vor und zeigen, wie auch ihr sie auf eurem Event oder in eurem Hackerspace einsetzen könnt. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/EDXTKR/

Endiome (jh24)

Sun, 22 Sep 2024 13:47:00 +0200

Moritz, Toni I., Jerome, Daniel, Mika Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://fahrplan.alpaka.space/jhhh24/talk/PQCA7R/

Linux "Hello World!" nur mit einem Hex Editor (DS2024)

Sun, 22 Sep 2024 12:30:00 +0200

WHAAT!? No Compiler? Heutzutage schreibt niemand mehr "Hello World!"s von hand. Meißtens nimmt man eine sprache wie Python, C oder Rust. Wer es sich schwer machen will nimmt assembly. Aber irgendwie ist da ja trotzdem ein schritt in dem die .s datei in machine code umgewandelt wird. Warum kann ich nicht einfach ein Programm schreiben ohne compiler / linker? Und was ist eigentlich ELF? Die Antworten zu diesen Fragen findet ihr in diesem Talk Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/BQBNYV/

Save Food – Eat Food (jh24)

Sun, 22 Sep 2024 13:56:00 +0200

Alexander, Anna, Daniel, Konrad Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://fahrplan.alpaka.space/jhhh24/talk/UQQ3XB/

Reboot Politics - Live Podcast (DS2024)

Sun, 22 Sep 2024 12:00:00 +0200

Eine Live Folge mit Politik aus Dresden, Deutschland und dem Internet Wir sind Stephanie Henkel aka Ückück (https://stephanie-henkel.com) und Florian Karow (https://zwecki.uber.space/) und wir sprechen in unserem Podcast über Politik, aktuelle Themen und alles, was uns interessiert. Die Live-Folge ist dieses Mal ohne Überlänge, dafür mit ein paar Spezial-Themen zum großen Datenspuren-Jubiläum. Mehr zum Podcast findet ihr hier: https://podcasts.homes/@rebootpolitics Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/RWPFXV/

14 Mio Euro später (DS2024)

Sat, 21 Sep 2024 16:00:00 +0200

Learnings aus dem Prototype Fund Warum sollten einzelne Personen gefördert werden? Kommen die besten und erfolgreichsten Projekte nicht aus Startups, Accelerators & Co.? Die letzten Jahre haben uns gezeigt, wohin es führen kann, alle Innovation mit Profitinteresse zu betreiben und Marktinteressen bestimmen zu lassen, wohin die Reise geht. Unsere Förderprojekte zeigen, dass es kein „Move fast and break things“ mit Millionen an VC braucht, um Neues und Sinnvolles zu schaffen. Wenn Einzelpersonen etwas entwickeln wollen, dann oft aus einem bestimmten Grund: Sie wollen ein reales Problem lösen, das sie selbst betrifft. Der Prototype Fund wurde 2016 gemeinsam mit dem BMBF ins Leben gerufen - schon damals mit der Idee, dass Menschen, die im Bereich Freier und Open Source Software einen meist unbezahlten aber wichtigen Beitrag für die Gesellschaft leisten, mehr Unterstützung und finanzielle Mittel brauchen. 8 Jahre und 14 Millionen Euro später läuft die geplante Förderperiode des Prototype Fund vorerst aus und wir können sagen: Wir haben viel gelernt! Weil wir fest davon überzeugt sind, dass der Prototype Fund kein Einzelfall bleiben soll, sondern als Blaupause für andere, ähnliche Fördertöpfe für die Zivilgesellschaft dienen kann, teilen wir unsere Lessons Learned für leichtgewichtige Förderstrukturen: Unkomplizierte Projektanträge, kurze Laufzeiten und 1:1-Betreuung sind nur einige der Zauberworte. Im Vortrag wollen wir Förder*innen ermutigen, sich aus ihrer Komfortzone zu bewegen und anzuerkennen, dass es für erfolgreiche Förderprojekte nicht immer 30 Seiten Antrag braucht, um die Zivilgesellschaft von innen heraus zu stärken. Wir wollen Menschen aus Behörden, Unternehmen und anderen Organisationen, die die Möglichkeit haben, Gelder zur Verfügung zu stellen, einen Einblick in die Strukturen von leichtgewichtigen Fördertöpfen geben. Und wir wollen zeigen: Strukturen für mehr Geld für die Zivilgesellschaft müssen nicht groß und komplex sein, um zu wirken. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/H8TVV7/

Digital Fight Club - Was hat das Netz je Gutes für uns getan? (DS2024)

Fri, 20 Sep 2024 19:00:00 +0200

In der 4. Auflage des DFC wollen wir mit Nele Hirsch die Protentiale des freien Internets feiern. „Das Internet“ erscheint uns häufig eher unter dem Blickwinkel von Problemen und Herausforderungen. Aber was ist eigentlich das Tolle, Gute und Schöne am Internet? Was bedeuten die Möglichkeiten der räumlichen und zeitlich unabhängigen Kommunikation und der Zugriff auf weltweites Wissen? Das Internet bietet unendliche Möglichkeiten der Kooperation und Kollaboration, des Teilens von Wissen und der Teilhabe. Aber diese Potenziale entfalten sich nur, wenn wir sie aktiv gestalten. In diesem Vortrag berichtet Nele Hirsch (freiberufliche Pädagogin im eBildungslabor) von ihren Erfahrungen mit dieser Herausforderung. Themen sind unter anderem das offene Teilen dank freien und offenen Bildungsmaterialien und Creative Commons, die Entwicklung eines Geschäftsmodells des Teilens mit freuen Lizenzen. Die Fallstricke einer mündigen Mediennutzung, die Vernetzung über das Fediverse (ein Zusammenschluss unabhängiger sozialer Netzwerke) und die Freuden eines eigenen Zuhauses im Internet mit einer eigenen Domain. Aufbauend auf dem Impuls ist Raum um gemeinsam zu diskutieren, wie wir gemeinsam eine Zukunft schaffen, in der freies Wissen und digitale Mündigkeit das Fundament für eine soziale, nachhaltige und demokratische Gesellschaft bilden. Vortrag mit Diskussionsrunde in der Reihe Digital Fight Club. Der Digital Fight Club ist ein Angebot an alle, die sich für die aktuellen netzpolitischen Themen und Entwicklungen interessieren, an einem regelmäßigen Austausch interessiert sind und sich gemeinsam für ein besseres Internet einsetzen möchten. Wir beginnen mit grundlegenden Informationsangeboten und Impulsvorträgen. Im Anschluss bleibt Raum für Fragen, einen gemeinsamen Austausch und Diskussion sowie ein gemeinsames Nachdenken darüber, welche (politischen) Handlungsperspektiven zu dem jeweiligen Themenbereich möglich sind und welche politischen Forderungen sich ableiten lassen. Die Impulsvorträge behandeln jeweils ein konkretes netzpolitisches Thema. Sie geben Einblick, ordnen ein und verdeutlichen Zusammenhänge. Dadurch werden die teilweise vielschichtigen Themen besser verständlich und Einflussmöglichkeiten der Zivilgesellschaft deutlich. Die Reihe ist eine Kooperation des Medienkulturzentrum Dresden e.V., der Sächsischen Landeszentrale für politische Bildung, der Landeszentrale für politische Bildung des Saarlandes, der Hessischen Landeszentrale für politische Bildung, der Landeszentrale für politische Bildung Rheinland-Pfalz und der Volkshochschule Dresden. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/9BLCMK/

Kontrollkarten kontern! (DS2024)

Sun, 22 Sep 2024 13:15:00 +0200

Bezahlkarten sollen Geflüchtete abschrecken und ihr Leben noch schwerer machen. Was nun? Seit November 2023 die Ministerpräsident:innen einen Beschluss gefasst haben, rollt die Bezahlkarten-Maschine. Es soll sie zwar bundesweit einheitlich geben, aber viele Kommunen sind schonmal vorgeprescht und haben sie eingeführt. Ausbaden müssen das die Geflüchteten: Bargeld-Limits, komplizierten Überweisungen, eingeschränkte Teilhabe und geografischen Einschränkungen machen ihr Leben noch schwerer. Dieser Vortrag gibt einen Überblick über den Kontrollkarten-Einsatz in Deutschland und erklärt, warum Bezahlkarten für Geflüchtete nicht einfach wie andere elektronische Zahlungsmittel sind. Und was man auf verschiedenen Ebenen jetzt tun kann, mit solidarischen, zivilgesellschaftlichen und juristischen Mitteln. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/PBVUUC/

Resistance against dictatorship in Belarus in times of war [EN] (DS2024)

Sat, 21 Sep 2024 21:00:00 +0200

Talk from ABC-Belarus Almost 4 years since the crash of the uprising against Lukashenko’s regime and more than 2 years in the war in Ukraine, people in Belarus continue to resist dictatorship despite all the dangers of repressions. And although the creation of the mass popular movement is almost impossible, some continue individual actions against the regime in different forms. At the same time, thousands continue to stay in prisons and struggle against the continuous repressions there, while more and more people are arrested on the regular basis on made up charges. In this talk we will look at the past and the modern Belarus, resistance of the people in hard political conditions and the lives in prisons of anarchist and antifascist comrades. At the event you will have the possibility to donate to the work of the collective as well as buy some merch. Language: English You are expected to have basic knowledge of the topic. Recommended videos for catch up: * Tractors, Rockets and Internet in Belarus: How authoritarian regime uses technology to repress * 3 years after uprising in Belarus – political situation and repressions in the country Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/J8WDNL/

Live Podcast: Dicke Bretter (DS2024)

Sat, 21 Sep 2024 20:45:00 +0200

Live-Folge des Podcasts „Dicke Bretter“ In dieser Folge wollen wir über Digital- und Netzpolitik auf Landesebene sprechen. Unser Gast ist Daniel Gerber. „Dicke Bretter“ ist ein Podcast von Elisa Lindinger, Elina Eickstädt und Constanze Kurz, produziert von der Chaosradio-Crew des CCC Berlin. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/JLUGT7/

Staatliche Überwachung: Erfahrungen und Beispiele aus der Praxis (DS2024)

Sun, 22 Sep 2024 15:00:00 +0200

Vortrag über die Überschneidung aus Repression und Technik **Dieser Vortrag richtet sich an Aktivist*innen. Es werden lediglich die notwendigen technischen Grundlagen erklärt, um die Überwachungsmaßnahmen zu verstehen** Die Repression gegen uns nimmt zu. Es laufen mehrere §129er Verfahren, was den Behörden eine Rechtsgrundlage für Überwachungsmaßnahmen gibt. Beschlagnahmte Smartphones, Funkzellenabfragen, Telekommunikationsüberwachung. Wir schauen uns an: - Wie läuft das strafprozessual ab (Gesetze, richterliche Beschlüsse, Akte)? - Wie funktioniert die technische Umsetzung seitens der Polizei? - Was können wir dagegen tun? Außerdem: - Eine Einschätzung zum Thema Staatstrojaner - Der Einsatz von IMSI-Catcher - Ein paar Tipps zum Thema Hausdurchsuchung - Datenschmutz-Anfragen Bringt gerne eure Fragen mit! Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/CQBJL8/

Überwachung in Sachsen - Wenn die Polizei 1984 als Rechtsgrundlage nutzt (DS2024)

Sat, 21 Sep 2024 20:15:00 +0200

Eine kritische Auseinandersetzung mit dem Sächsischen Polizeigesetz. Unser aktuelles Polizeigesetz in Sachsen ist teilweise verfassungswidrig und die vom Sächsischen Verfassungsgericht monierten Punkte drehen sich fast alle um Überwachung. Was bedeutet das? Wie geht es weiter? Und wie sehen einige Überwachungsmaßnahmen in Sachsen konkret aus? Darum geht es in diesem Vortrag. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/GNG8EG/

Closing (DS2024)

Sun, 22 Sep 2024 16:30:00 +0200

Abschluss Hiermit wird die Veranstaltung beendet. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/YPM7GN/

transtravel (jh24)

Sun, 22 Sep 2024 14:20:00 +0200

Lucy, Felix Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://fahrplan.alpaka.space/jhhh24/talk/XWPZEJ/

Einführung in Embedded-Programmierung mit RIOT OS (DS2024)

Sun, 22 Sep 2024 13:30:00 +0200

Deine ersten Schritte in Microcontroller-Programmierung - mit RIOT OS [RIOT OS](https://www.riot-os.org/) ist ein kleines Betriebssystem für Mikrocontroller, das von einer breiten Community und unter anderem an der TU Dresden entwickelt wird. In dieser praktischen Einführung laden wir Programme auf unsere Demo-Boards, schalten LEDs, nutzen Timer und greifen auf andere Boards über ein Funknetzwerk zu. Zur aktiven Teilnahme ist ein eigener Laptop erforderlich; Demo-Boards und sonstige Infrastruktur (bei Bedarf auch Raspberry Pis mit vorinstallierter Entwicklungsumgebung) werden bereitgestellt. Programmierkenntnisse in C oder Rust sind empfohlen, aber nicht unbedingt erforderlich. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/EMK8EE/

ELSTER - Nicht nur diebisch, sondern auch neugierig? (DS2024)

Sun, 22 Sep 2024 14:00:00 +0200

Ist das Steuererklärungssystem ELSTER DSGVO-konform? Im April 2007 bringt der Chaos Computer Club die Meldung, dass der Staatstrojaner über ELSTER auf die Rechner zu überwachender Bürger installiert wird. Die Meldung schlägt hohe Wellen, weil sie so realistisch klingt. Sie entpuppt sich als Aprilscherz - aber wer weiß das schon so genau? Ich will mal so sagen: Der Staat hält sich sehr zurück, um diesen Verdacht auszuräumen. In dem Vortrag stelle ich meine Überlegungen zum Thema vor, meine Erfahrungen mit den Finanzbehörden und zahlreiche IFG-Anfragen. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/LJ73ME/

Privatsphäreschonende Gesundheitsdatenverarbeitung (DS2024)

Sun, 22 Sep 2024 14:15:00 +0200

Kann man mit Gesundheitsdaten forschen, ohne die Privatsphäre der ganzen Bevölkerung zu verletzen? Der europäische Gesundheitsdatenraum steht vor der Tür und es sieht zur Zeit nicht danach aus, dass wir mit dessen Umsetzung zufrieden sein können. Gesundheitsdaten aller europäischen Versicherten werden zentral gesammelt und nicht nur für die individuelle medizinische Versorgung gevorratsdatenspeichert, sondern auch für die Wissenschaft. Dabei ist hier explizit nicht nur akademische, sondern auch privatwirtschaftliche Wissenschaft gemeint. Das heißt, nicht nur Universitäten werden auf die Daten zugreifen können, sondern zum Beispiel auch die Pharmaindustrie und die ganz Großen wie Apple oder Google. Unter dem Vorwand der Verbesserung des Nutzungserlebnisses von proprietären Gesundheits-Apps (vorauseilende Mutmaßung der Speaker) werden die persönlichsten aller Daten in Hände gegeben, in denen sie wirklich nichts zu suchen haben. Ist damit alles verloren? Wir sagen nein! In diesem Vortrag präsentieren wir, wie man mit Hilfe von probabilistischen Datenstrukturen personenbezogene Daten verarbeiten kann, ohne die Privatsphäre der jeweiligen Personen zu beeinträchtigen. Dazu zeigen wir die Ergebnisse einer Fallstudie mit zufallsgenerierten Gesundheitsdaten. Wir möchten mit dem Vortrag deutlich machen, dass es durchaus möglich ist, personenbezogene Daten unter gewissen Voraussetzungen in fremde Hände geben zu können. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/NGTE3G/

Alpakagotchi (jh24)

Sun, 22 Sep 2024 13:41:00 +0200

Jona, Helena Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://fahrplan.alpaka.space/jhhh24/talk/PBZJN3/

Die FSFW Schul-, Uni- und Makersticks (DS2024)

Fri, 20 Sep 2024 19:10:00 +0200

Freie Software Freies Wissen USB-Live-Linux: ideal für OER-Verbreitung & Nutzung von Lernenden Seit 2019 bietet die Hochschulgruppe „Freie Software — Freies Wissen“ (FSFW-Dresden.de) zusammen mit dem Chaos Computer Club Dresden (C3D2) an zwei Dresdener Schulen Computerkurse (für die Klassen 4 - 7) an. Dabei nutzen wir eine „Schulstick“ genannte und auf dem bewährten Debian-Linux aufbauende Software-Sammlung, deren Entwicklung 2016 als „Uni-Stick“ an der TU Dresden begann und die mittlerweile eine umfassende Lern-, Spiel- und Arbeitsplattform für Schülerinnen und Schüler von der Grundschule bis zum Abschluss bietet. Eine große Vielfalt aktueller Freier Software inklusive Betriebssystem wird so auf handelsübliche USB-Sticks (min. 16GiB, Kosten etwa 6€) kopiert, dass jeder Desktop- oder Notebook-Rechner (x86 mit mehr als 2GiB Arbeitsspeicher) damit innerhalb von zwei Minuten gestartet und benutzt werden kann, ohne dass die bereits auf dem Computer installierte Software verändert wird. Dies ermöglicht z.B. die Nutzung auf Hardware der Eltern oder Geschwister, ohne dass diese Angst haben müssen, dass etwas an ihrem System beschädigt werden kann. Die auf dem Schulstick enthaltenen Programme sind kindgerecht ausgewählt und vorkonfiguriert und stehen ohne Download, Installation und Registrierung sofort zur Verfügung. Auch eine stetig wachsende Anzahl an „Open Educational Resources“ (OER), d.h. frei verfügbaren Bildungsmaterialien, sind auf dem Stick zu finden. Somit erhalten die Schülerinnen und Schüler einen mächtigen digitalen Werkzeugkasten in Daumennagelgröße, mit dem sie ihr persönliches System auf jeder geeigneten Hardware in der Schule und zuhause starten können. Neben dem Schulstick und dem Unistick gibt es noch eine weitere Stick-Variante, die sich an „Maker“ richtet und eine erweiterte Softwareauswahl (u.a. für 3D-Druck) hat. Eine aktuelle Version des Schulsticks zum Download und weitere Informationen sind auf https://schulstick.org/ zu finden. Im Vortrag auf den datenspuren2024 zeigen wir diverse Anwendungen wie CircuitJS, FreeTube, YouTube, Ranger, GDU und viele mehr. Zusätzlich präsentieren wir die Customizations: - Im Firefox haben wir Usability-Hacks und Add-ons integriert, um ihn vorkonfiguriert ohne nervige Meldungen beim ersten Start zu nutzen – was eine knifflige Herausforderung darstellt! - Unser Terminal-Desktop ist mit einer umfangreichen tmux, Ranger, Vim und einer Git-Toolsuite sowie einer speziellen Konfiguration ausgestattet. - Wir bieten einen Theme-Umschalter für hell und dunkel sowie einen automatischen Nachtmodus mit einstellbarem Blaufilterübergang. - Außerdem haben wir dicke Scrollbalken implementiert und ein Easter Egg im Makerstick versteckt. Wir zeigen auch die Historie im Repository sowie die Contributors-Page auf GitHub. Darüber hinaus präsentieren wir die Stickvarianten und die durch Symlinks aktivierten Features. Ein weiterer Punkt sind die Bash-Buildskripte, die Verwendung von jq und die Feature-install-hooks; zukünftig planen wir eventuell den Einsatz von Python und mehr nativen Debian-Paketen. Abschließend geben wir einen Ausblick auf die Entwicklung einer OER-Portal-App (hier gibt es Fördermittel und Unterstützungsbedarf!) und eines ML-unterstützten GUI-Assistenten, sowie ein i18n-Bootmenü. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/YCVJNS/

CRA and friends: EU product, service and software regulation (DS2024)

Sat, 21 Sep 2024 14:00:00 +0200

The talk takes a dive into the EU acronym soup to explore new and upcoming European legislation. Over the past legislative cycle the European Commission has put out a plethora of initiatives, many of which will become relevant soon, apply partially or are in full effect. From the CRA, NIS2, eIDAS and AI Act to eco-design and rules for so-called VLOPs: pretty much everything got an overhaul. This talk aims at explaining the bigger picture of internal market regulation and its recent changes and takes a deeper look into initiatives with impact on open-source software. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/7GVU8U/

Digitale Mündigkeit in Schulen (DS2024)

Sat, 21 Sep 2024 13:00:00 +0200

Betriebssysteme im Schulkontext und deren ethisches Dilemma Ich habe mir einige Linux-Distributionen für Schulen angesehen und bin immer noch nicht zufrieden. Die Schule soll unsere Kinder zu mündigen, entscheidungsfähigen Wesen heranziehen. Durch das politische und gesellschaftliche Bestreben, immer mehr Dinge digital durchzuführen, ist der verantwortungsvolle Umgang mit Computern immer wichtiger. Oft fängt es leider schon mit dem Betriebssystem an, welches die Kinder vorgesetzt bekommen. Es gibt genau ein System; Individualisierung, das Installieren oder Entfernen von Software, oder das Anfertigen eigener Backups sind oft nicht möglich. Viele Grundsätze, die wir im Umgang mit Computern prädigen, werden im Keim erstickt. Und dann wundert sich die Gesellschaft, weshalb auch junge Wesen eine Technikfeindlichkeit entwickeln. Ich möchte euch meine Erfahrungen und Wünsche als (ehemaliger) Schüler und Jugend-forscht-Betreuer und noch-Studi vorstellen und meine Vorstellungen einer (vielleicht utopischen?) Digitalisierung an Schulen mit euch diskutieren. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/9QMNPD/

Reisebericht aus dem Mediendschungel (DS2024)

Sat, 21 Sep 2024 18:00:00 +0200

Wie viel Macht haben "Lügenpresse" und "der Algorithmus" wirkllich? Ein Erfahrungsbericht. Im Juni 2018 bin ich durch Zufall ins Team des Pentaradio gestolpert und wurde dort mit einer Leidenschaft fürs Podcasting angesteckt. Neben Pentaradio und dem Schlüsseltechnologie-Podcast bin ich mittlerweile auch seit zwei Jahren als freier Mitarbeiter bei MDR Sachsen tätig, für ein Ratgeberformat zu IT-Fragen. Außerdem habe ich in den letzten Monaten eine YouTube-Präsenz mit gut 100.000 Views aufgebaut. Das alles macht mich sicherlich nicht zu einem Medienwissenschaftler, aber es erlaubt mir einen Einblick in die Mechanik des Medienbetriebs, den ich in diesem Vortrag mit Euch teilen möchte. Ich habe bereits auf den letzten Datenspuren zu Podcasting gesprochen: https://media.ccc.de/v/ds23-217-wie-das-podcast-projekt-gelingt Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/ZZAPNN/

The struggles in Palestine (DS2024)

Sat, 21 Sep 2024 16:15:00 +0200

Online talk with activist from Palestine Mahmoud is a Palestinian farmer, nonviolent activist and academic. Soliman is a research fellow at the Center for Trust, peace and Social Relations, Coventry University. He has more than 20 years of experience in organizing nonviolent campaigns and nonviolent collective actions against building the Segregation Wall and the Israeli settlements in the occupied Palestine. In his Talk Mahmoud will shed a light on what has changed in the West Bank since the October 7th. How the daily life of Palestinians in the West bank look like under the settler attacks. What can be done to stop the silence Nakba in the West Bank Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/L9JNYA/

Von Opfermythos und Gedenkzirkus: Der 13. Februar in Dresden (DS2024)

Sat, 21 Sep 2024 15:00:00 +0200

Kritische Blicke auf den 13. Februar von damals bis heute. Schon wenige Stunden nach der Bombardierung legte die NS-Propaganda den Grundstein der doch so "unschuldigen Kunst- und Kulturstadt Dresden" - und damit für den Opfermythos, der sich in unterschiedlichen Versionen durch inzwischen fast 80 Jahre Geschichte zieht. Der "Mythos Dresden" wurde und wird in mannigfaltiger Weise aufrecht erhalten. Zeit, einen tieferen - und kritischen - Blick in die Darstellungen und Wahrnehmungen des 13. Februars zu werfen, um auch das aktuelle Gedenken kritisch in den Fokus zu nehmen. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/QRXFEU/

Not here nor there – Jewish left in Palestine-Israel navigating a nationalist landscape (DS2024)

Sat, 21 Sep 2024 17:45:00 +0200

Continuation of the conversation with activist Sahar Vardi Like many in the region, the Jewish-Israeli left has had to adapt and respond to the horrors of the past year. The talk will give one activists perspective on the political, emotional and activist shifts seen on the ground, and how these relate to the international left. Sahar Vardi is an Israeli anti-militarist activist and one of the founders of Hamushim, a project challenging Israel’s military industry and arms trade. Sahar is also a former member of the anarchist against the wall. Previous talk from Sahar Vardi at Libertarian Days in Dresden 2023: Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/XU33C3/

Struggles against right wing-government in Finland (DS2024)

Fri, 20 Sep 2024 20:00:00 +0200

Updates on new government in Finland by Antti Rautiainen In spring of 2023, after center-left government of Sanna Marin was defeated in Finnish elections, leader of neoliberal National Coalition party invited right-wing populist Perussuomalaiset (Finns, literal translation Basic Finns) -party to form the most right-wing government in Finland since 1920’s. Since then, multiple protest movements have arisen in Finland, against austerity, anti-immigrant and anti-labor measures of the government, and revealed racist messages and cooperation of right-wing populist with Nazis. Labour unions declared wave of strikes, including halting of most Finnish foreign trade for 1 month in spring of 2024. However, this far protest movements have gained only minor victories. How history of the right-wing populism in Finland explains its relatively easy access to positions of power? What are lessons of the 2023-2024 protest movement in Finland for movements in other countries, struggling against rise of the right-wing populism and far right? Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/RFXFNE/

Sequoia PGP: A not quite new implementation of OpenPGP (DS2024)

Sat, 21 Sep 2024 13:00:00 +0200

PGP's been around since 1991, GnuPG since 1999, and since 2017 there's also Sequoia PGP. Talk will be in English. PGP gibt es seit 1991, GnuPG seit 1999, und seit 2017 gibt es auch Sequoia PGP. Sequoia PGP ist ein Versuch von drei ehemaligen g10code-Mitarbeitern, das OpenPGP-Ökosystem mit neuen Werkzeugen, und anderen Workflows zu erweitern. In diesem Vortrag, werde ich kurz auf die Geschichte von Sequoia eingehen. Dann werde ich Sequoia selbst vorstellen. Insbesondere werde ich erklären was unsere Designprinzipien sind (unopinionated low-level APIs, die per default sicher sind, und optionale high-level Bibliotheken und Dienste) und wie Sequoia aufgebaut ist (wir verwenden einen library first Ansatz). Danach werde ich unsere verschiedenen Bibliotheken und Werkzeuge presenierten. Der Schwerpunkt wird dabei auf sq, unserer neuen Kommandozeilenschnittstelle, liegen. Ähnlich wie Git, verwendet sq ein Subcommand Interface. Der größte Unterschied zu bestehenden Werkzeugen ist jedoch wie sq versucht starke Authentifizierung einfacher zu machen. Ich werde auch unsere Konzepte dafür erklären. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/JVWRHD/

Der STF und die Tragödie der Digitalen Allmende (DS2024)

Sat, 21 Sep 2024 17:00:00 +0200

Von informationeller Selbstbestimmung zu glücklichen Open-Source-Maintainer:innen. “Privatsphäre war gestern” - das war lange ein Motto der Datenspuren, getragen von der Einsicht dass unser Grundrecht auf informationelle Selbstbestimmung ständig angegriffen wird (“Ich weiß was du letzten Sommer gemailt hast” ließen wir für die ersten Datenspuren auf 20.000 Postkarten drucken). Ein Baustein dieser Selbstbestimmung sind sichere und gut gewartete Software-Systeme, denn nur diese können private Daten sicher schützen. Heute besteht nahezu jedes dieser Systeme aus einer Vielzahl von Open-Source-Komponenten, die zwar von der Industrie und anderen Anwender:innen gerne genutzt werden, um die Wertschöpfung zu verbessern, die aber in vielen Fällen unter mangelnder Unterstützung leiden. Fast 60% aller Maintainer:innen ziehen in Erwägung, ihre Projekte an den Nagel zu hängen oder haben dies bereits getan. Wir können also auch digitales gemeinschaftliches Eigentum übernutzen, man könnte dies die Tragödie der digitalen Allmende nennen. Diese Einsicht hat vor zwei Jahren zur Gründung des Sovereign Tech Fund (STF) geführt. Die Organisation wird vom Bundesministerium für Wirtschaft und Klimaschutz finanziert und arbeitet an der Stärkung des Open Source Ökosystems im öffentlichen Interesse. Der Vortrag wird einen Einblick in die unterschiedlichen Instrumente geben, mit denen der STF arbeitet und auf die Initiativen eingehen, die aktuell pilotiert werden. Im Anschluss möchte ich die Frage in den Raum geben, welche anderen Perspektiven auf die beschriebene Herausforderung bestehen und welche Lösungen darüberhinaus denkbar sind. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/CGL3ZS/

Opening (DS2024)

Sat, 21 Sep 2024 11:30:00 +0200

Opening Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/PSGSBK/

Openwashing ans Licht! (DS2024)

Sat, 21 Sep 2024 14:30:00 +0200

Mit welchen Methoden wird proprietäre als Freie Software ausgegeben? Was kann man dagegen tun? Openwashing ist ein wachsendes Problem für Nutzer und Entwicklerinnen Freier Software, für öffentliche Verwaltungen und das gesamte Freie-Software-Ökosystem. Immer wieder schmücken sich Unternehmen mit den Begriffen „frei" und "open" und versuchen zu verschleiern, dass sie proprietäre Software vertreiben. Die vermeintliche Kreativität der Openwasher ist groß. Sie schaden dem Ziel, mit Steuermitteln ausschließlich Freie Software für Verwaltungen zu beschaffen, wie es die Free Software Foundation Europe (FSFE) mit ihrer Initiaitve "Public Money? Public Code!" seit langem fordert. Und sie führen auch Verbraucher und andere Unternehmen hinters Licht. Die FSFE hat deswegen in einer Community-Umfrage Informationen über Openwashing gesammelt. Der Vortrag greift die Ergebnisse dieser Umfrage auf und gibt eine Übersicht über verbreitete Openwashing-Methoden und -Indikatoren. Er wirft ein Schlaglicht auf einige Openwashing-Beispiele und stellt Ideen zum Vorgehen gegen Openwashing vor. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/8BQFAG/

Sculpt OS: a novel operating system for truly trustworthy computing (DS2024)

Sat, 21 Sep 2024 12:00:00 +0200

We will present Sculpt OS, a showcase of the Genode Operating System Framework. We will present Sculpt OS, a showcase of the Genode Operating System Framework developed at Genode Labs in Dresden. Following a brief introduction to microkernels and hard facts about Genode, we will explore various Sculpt features on a live system. We will top off the talk with a look at the SDK. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/XBNY7R/

Diskussionskultur fixen! Ein Bottom-Up-Opt-In-Lösungsvorschlag (DS2024)

Sat, 21 Sep 2024 12:00:00 +0200

Der Vortrag stellt 5 Schritte zur Verbesserung der oft miserablen Diskussionskultur im Netz vor. Auch unter Menschen, die grundsätzlich ähnliche Ziele haben (Demokratie stärken, in einem Projekt zusammenarbeiten, ...) verlaufen digitale Diskussionen oft unkonstruktiv oder sie eskalieren sogar. Das kostet Nerven und Ressourcen, die eigentlich dringend u. a. für die Verteidigung der FDGO gegen Totalitarismus und Klimastress gebraucht werden. Die Initiative für konstruktive digitale Diskussionskultur () hat einen **konkreten Lösungsvorschlag**: Eine Selbstverpflichtung auf acht Regeln für konstruktives Diskutieren. Wenn ein eigener Beitrag diesen Regeln entspricht, kann er mit einem speziellen Hashtag gekennzeichnet werden (→ opt-in). Dadurch ist es möglich, mit Hilfe eines Tools "konstruktive" Beiträge herauszufiltern und somit unter den vielen anderen (mutmaßlich weniger relevanten) Beiträgen zu mehr Sichtbarkeit zu verhelfen. Mit anderen Worten: Durch diese gefilterte Ansicht verbessert sich das Signal-Rausch-Verhältnis erheblich, ohne dass dadurch Änderungen an der Plattform notwendig sind. Zum Ansatz gehören weiterhin Konzepte für Troll-Resilienz und verteilte Moderation sowie geeignete Anreizstrukturen. Das Ziel ist, plattformübergreifende virtuelle Räume zu etablieren in denen konstruktiv auch über kontroverse Themen diskutiert werden kann – und dadurch Lösungen für objektive Probleme zu finden. Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/ about this event: https://talks.datenspuren.de/ds24/talk/YCNET8/

Linus Lüssing über die Freifunk Freiraumdisko [Fünf Minuten Termine] (chaotikum)

Wed, 03 Jul 2024 20:00:00 +0200

Linus erzählt über die Möglichkeit über Freifunk per Multicast Musik zu verteilen und gemeinsam den Stream per MPD zu moderieren. Ein Vortrag im Rahmen der Fünf-Minuten-Termine. Die Idee ist eigentlich einfach: Ab und zu nutzen wir das volle Haus und jede Person, die möchte, kann kurz vorstellen, was auch immer ihr vorschwebt. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ about this event: https://chaotikum.org/blog/2024/07/01/5min/

Johannes Thorn über Leinwände, die dokumentieren [Fünf Minuten Termine] (chaotikum)

Wed, 03 Jul 2024 20:00:00 +0200

Wie kriegt man Menschen dazu, zu dokumentieren. Vielleicht indem man nicht all zu viel von ihnen verlangt. Johannes stellt ein paar Canvases vor, die nur das allerwichtigste verlangen, um nötige Doku zu haben. Ein Vortrag im Rahmen der Fünf-Minuten-Termine. Die Idee ist eigentlich einfach: Ab und zu nutzen wir das volle Haus und jede Person, die möchte, kann kurz vorstellen, was auch immer ihr vorschwebt. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ about this event: https://chaotikum.org/blog/2024/07/01/5min/

TVLuke bringt eure Technik nach Draußen [Fünf Minuten Termine] (chaotikum)

Wed, 03 Jul 2024 20:00:00 +0200

Beim HanseKulturFestival haben wir die Lübecker Lesezeichen mitgebracht, ein Projekt, um zu zeigen, wie 3D-Druck funktioniert. Das hat viele menschen fasziniert und legt nahe, dass es eine gute Idee ist, Technik nach draußen zu bringen und Menschen zu zeigen. Ein Vortrag im Rahmen der Fünf-Minuten-Termine. Die Idee ist eigentlich einfach: Ab und zu nutzen wir das volle Haus und jede Person, die möchte, kann kurz vorstellen, was auch immer ihr vorschwebt. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ about this event: https://chaotikum.org/blog/2024/07/01/5min/

Fabis erste Schritte mit Unity [Fünf Minuten Termine] (chaotikum)

Wed, 03 Jul 2024 20:00:00 +0200

Fabi hat mit Unity ein Spiel geschrieben, in welchem er als Pflanze durch die gegend Läuft. In fünf Minten gibt er einen kleinen Einblick in das Design und die Funktionen, die er in Unity für sich entdeckt hat. Ein Vortrag im Rahmen der Fünf-Minuten-Termine. Die Idee ist eigentlich einfach: Ab und zu nutzen wir das volle Haus und jede Person, die möchte, kann kurz vorstellen, was auch immer ihr vorschwebt. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ about this event: https://chaotikum.org/blog/2024/07/01/5min/

jboy über Hammern mit System [Fünf Minuten Termine] (chaotikum)

Wed, 03 Jul 2024 20:00:00 +0200

jboy erklärt in nur fünf Minuten die aktuellen Entwicklungen von Rowhammer-Angriffen. Ein Vortrag im Rahmen der Fünf-Minuten-Termine. Die Idee ist eigentlich einfach: Ab und zu nutzen wir das volle Haus und jede Person, die möchte, kann kurz vorstellen, was auch immer ihr vorschwebt. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ about this event: https://chaotikum.org/blog/2024/07/01/5min/

OpenPGP-Infrastruktur für Organisationen: Einfach, Sicher, Open Source (froscon2024)

Sat, 17 Aug 2024 14:00:00 +0200

Wir zeigen auf, wie GnuPG als praktische, benutzerfreundliche und compliance-gerechte Lösung für Verschlüsselung eingesetzt werden kann, die den Anforderungen von DSGVO und VSA entspricht und die Praxis der IT-Verwaltung erleichtert.

In einer Zeit, in der Datenschutz und sichere Kommunikation immer mehr an Bedeutung gewinnen, stehen Organisationen vor der Herausforderung, die Anforderungen der DSGVO und anderer Vorschriften umzusetzen. Doch leider sieht die Realität oft so aus: Verschlüsselung gilt als kompliziert, teuer und umständlich und wird gerne "vergessen". Dieser Vortrag richtet sich an Verantwortliche, Administratoren und Interessierte in Vereinen, Unternehmen und Behörden und zeigt, wie Open Source Lösungen, insbesondere GnuPG, diese Lücke schließen können.

Traditionelle Methoden wie Keyserver sind veraltet, stattdessen ermöglicht GnuPG eine robuste und komfortable Public Key Infrastruktur (PKI) zu etablieren, die sowohl für Nutzer:innen als auch für Administrator:innen leicht zu handhaben ist.

Wir stellen moderne Ansätze zur Schlüsselverteilung vor, wie die Nutzung von LDAP für interne Zwecke und das Web-Key-Directory (WKD) für externe und interne Anwendungen. Ein weiterer Schwerpunkt liegt auf der Beglaubigung von Zertifikaten (öffentliche Schlüssel) und dem Herstellen des Vertrauens in diese. Von klassischen Methoden, wie dem Abgleich von Fingerprints, bis hin zu modernen Verfahren wie der Nutzung von flexiblen Certificate Authorities (CAs) und automatisierten Signaturen mit GnuPG actium, zeigen wir, wie Vertrauen effektiv verwaltet werden kann.

Es wird auch auf die Umsetzung von organisatorischen Themen eingegangen, wie das Arbeiten im Team oder den Weggang einer Mitarbeiter:in.

In Summe steht mit Open Source Lösungen wie GnuPG eine effektive, kostengünstige und benutzerfreundliche PKI bereit, die den Sicherheits-Anforderungen gerecht wird und die Zertifikatsverwaltung erleichtert.

about this event: https://programm.froscon.org/2024/events/3152.html

Closing (hackmas2024)

Sat, 31 Aug 2024 20:00:00 +0200

We close the event about this event: https://sessions.hack-mas.at/event/6uHXTqeW8azcXsDf3/closing

Explosion in a Tunnel; Understanding Swiss Cheese (emf2024)

Sun, 02 Jun 2024 16:40:00 +0200

The talk takes a deep-dive into the Abbeystead explosion (using pretty much all available sources available on the subject), one of the worst civil engineering disasters in post-war history, through the lens of the HSE investigation. It looks at what the project was for, how it was designed, what went wrong, and why. Swiss cheese is a way of conceptualizing accidents, and the explosion is used so show how this works. Hopefully by the end, everyone will have heard about a facinating case study in bad project management, weird critical infrastructure, and have recieved a safety talk by stealth. about this event: https://www.emfcamp.org/schedule/2024/97-explosion-in-a-tunnel-understanding-swiss-cheese

EveryWhere, a regenerative mesh network for communities (emf2024)

Sat, 01 Jun 2024 19:10:00 +0200

EveryWhere is an open source system for creating mesh networks to allow communities to connect with themselves without having to use commercial systems to do so. Inspired by David Graeber's idea of the sustainable activities of play and care, EveryWhere aims to make new rituals around technology that allow the network to exist across generations. In 2022 we convened a group of artists, technologists, designers and activists to start the project. As result of the connections made, we have identified themes and ideas that we will present in this talk. The five themes are Community, Sustainability, Software, Hardware and Creative. Within each of these themes, we've identified four main areas of concern. The purpose of this talk would be to relate our progress up to this point and to galvanise further collaboration with the EMF community. We are a pair of artistic researchers and creative technologists and we care! about this event: https://www.emfcamp.org/schedule/2024/195-everywhere-a-regenerative-mesh-network-for-communities

Small Town, Big Ideas - The challenges of building a rural Makerspace (emf2024)

Fri, 31 May 2024 13:20:00 +0200

It turns out that building a Hackspace in a rural area is really hard. From the name of the group causing security concerns to finding a venue and members, a lot of the challenges that are presented in rural environments don't really seem to be present in the cities where hackspaces are most frequently found. In this talk, I'll go over the challenges I've faced in building a Hackspace in a rural town and hopefully show how others can avoid the same pitfalls! about this event: https://www.emfcamp.org/schedule/2024/210-small-town-big-ideas

OMG WTF SSO: A beginner's guide to Single Sign-On (mis)configuration (emf2024)

Sat, 01 Jun 2024 11:30:00 +0200

Single Sign-On (SSO) is sold as a way to • centralize managing your organization’s users, • make life easier for your colleagues, and • enforce consistent security standards. But SSO protocols are just ways for an identity provider to share information about an authenticated identity with another service. Me having a way to tell my vendor “yeah, that’s Bob” doesn’t tell me what the vendor does with this information, or if the vendor always asks me who’s coming in the door. A bad SSO implementation can make you think you’re safer, while hiding all the new and fun things that have gone wrong. To get the most out of implementing SSO, I need to know what I’m trying to accomplish and what steps I need to follow to get there. To illustrate why SSO needs to be set up carefully, for each of the things you need to do right, I’ll give you some fun examples of creative ways you and your vendor can do this wrong. We all learn from failure, right??? I’m sharing this info because this year I got deeply involved in the SSO setup for several vendors at work. It turns out that I’m good at asking weird questions, and it’s an extremely valuable thing to do. If you know how things should be, then you know where they could be broken, and you can ask your vendors (and your colleagues!) “weird questions” before an adversary does. about this event: https://www.emfcamp.org/schedule/2024/233-omg-wtf-sso

How to build post-quantum cryptographic protocols and why wall clocks are not to be trusted. (hackmas2024)

Fri, 30 Aug 2024 22:00:00 +0200

Rosenpass is a post-quantum secure cryptographic protocol, an implementation of that protocol in the Rust programming language, and a governance organization stewarding development of both protocol and implementation. When used with WireGuard, Rosenpass functions as a ready-to-use virtual private network with full security against quantum attackers.The development of a technology like Rosenpass is complex and requires a good footing in cryptographic research, software engineering, industry practices, and science communication. Bringing together these diverse threads of activity is an ongoing challenge. Individual work is not enough, it takes a group; an organization. We are the group that tries to tackle these challenges for Rosenpass.In this talk, we will focus on Rosenpass as a protocol and explain the principles used and challenges encountered when designing such a protocol. Equipped with ample time and many scientific illustrations, we hope to give insight to an audience with many different levels of knowledge about cryptographic subjects.This is not a lecture for experts. This is supposed to be entertainment for the technologically inclined.In the talk we are going to explain what key encapsulation methods are, how they are different from "non-interactive key exchanges" – often just called "Diffie-Hellman" operations. We will demonstrate how key encapsulation methods can be used to build a secure cryptographic key exchange protocol and how the X-Wing fighter can be used to provide cryptographic redundancy.Finally, we will turn our attention to attacks we found against WireGuard, show off a protocol level denial-of-service attack against WireGuard and explain how we solved that attack in Rosenpass. about this event: https://sessions.hack-mas.at/event/jzGHNoejBMT5hNBbC/how-to-build-post-quantum-cryptographic-protocols-and-why-wall-clocks-are-not-to

Gameboy Gamedev in 2024 - ein Überblick (hackmas2024)

Thu, 29 Aug 2024 20:15:00 +0200

Was, den gibts noch?!1? Dank geupdateter C-Toolchain gibt es in der Gameboy-Homebrew-Szene regelmäßig neue Releases. Worauf muss man achten wenn man ein Spiel für den Gameboy entwickeln möchte? Ist das nicht mühsam?Wie verhält es sich im Vergleich zu normaler C Programmierung?Was für Frameworks und Game Engines (?!) gibt es? Wie erstellt man Graphiken und Musik? Nach einem kurzem eher High-Level-Überblick über die Gameboy-Hardware würde ich ein paar spezifische Tools vergleichen und danach könnten wir eine Diskussionsrunde starten oder so... Programmierkenntnisse sind von Vorteil, aber nicht zwingend notwendig, weil es mittlerweile auch ein Drag'n drop Tool gibt about this event: https://sessions.hack-mas.at/event/2mnKTTNjreMx356Fq/gameboy-gamedev-in-2024-ein-ueberblick

unexpected coffee: a dive into industrial coffee machines (emf2024)

Fri, 31 May 2024 18:30:00 +0200

A bit more than two years ago, someone contacted our Hackspace asking if we would be interested in an electronically defective, but probably repairable industrial coffee vending machine. An industrial coffee machine with a touchscreen and cocoa toppings? No idea where we would find enough room for it or if it would actually be used, but of course we'd be interested! After a few months of collecting (additional) dust and annoying a few members, we started the quest to get this machine back to work and to explore the (questionable) world of industrial coffee vending legacy, from hardware, over electronics to software architecture. This is a talk about how we repaired the machine, how these machines usually work, a dive into legacy software and electronics setups, and why those coffee vending machines taste like they do. Last but not least, we will discuss how we started to reverse engineer the internal system communication and if we would award a hackvalue of over 9000 for this type of machines. There is also the final question: does it run Doom? about this event: https://www.emfcamp.org/schedule/2024/254-unexpected-coffee-a-dive-into-industrial-coffee-machines

How to Save a Life (emf2024)

Sat, 01 Jun 2024 15:40:00 +0200

You, Eleanor Shellstrop, are dead. You are in cardiac arrest. Your heart has stopped beating, you have stopped breathing, and medically speaking you have died. Not a great start to your day! But worry not: someone has called 999. This talk is the story of that 999 call. This talk, presented by the CAD & Technical Lead at the London Ambulance Service, will describe everything that happens between dialling 999 and getting to hospital, and all of the technology involved in triaging the call, dispatching the ambulance, and helping patients over the phone before it arrives. This isn't a heartwarming human-interest story from the documentaries — this is the full ins and outs of all the systems, processes, and infrastructure that keeps people safe across a major city every day. We'll explore how we use open data to find exactly where you are, exactly how we decide who gets help quickest and who must wait, and how your phone can help save your life. We'll also look at what happens when it all goes wrong, and how we respond to business continuity incidents — after all, we can't just shut up shop if the system goes down. Expect high-level conversations about medical emergencies, but this talk is suitable for all ages. about this event: https://www.emfcamp.org/schedule/2024/405-how-to-save-a-life

Lightning talks (Friday) (emf2024)

Fri, 31 May 2024 17:10:00 +0200

Short 10 minute talks on any topic about this event: https://www.emfcamp.org/schedule/2024/547-lightning-talks-friday

Making Music with Hair (emf2024)

Fri, 31 May 2024 15:00:00 +0200

Combining his deep interest in the biology of hair with generative music systems, Chris will give you a an insight into how he has brought the two fields together. After a chance introduction to an Austrailian biology student in 2022, Chris and Jay have spent the last few years researching the mechanics of hair growth, the structures of Amino Acids and Keratins and the composition of different parts of human hair. They used this research to develop a suite of software tools that use these bio-mechanics as a structure for creating music. Chris will cover: - the biology of hair - generative music systems - implementation in Max/MSP and Ableton Live The talk will end with a brand new piece of music created from a single strand of hair. about this event: https://www.emfcamp.org/schedule/2024/202-making-music-with-hair

Getting Started in Laser Cutting (emf2024)

Sun, 02 Jun 2024 13:30:00 +0200

A presentational workshop with Q&A on getting started in Laser Cutting, diodes vs CO2, water cooling vs RF lasers. What is a Galvo Laser? Where to buy and what to expect? What different controllers are there? Which software exists and which to use for what? Including advice on taking your project from idea to finished item. Combining laser cutting and 3D printing. Materials types and finishing techniques. Laser cutter maintenance and good practice. Laser cutting in a shared workshop with multiple users and access control/issues/good practice What is the difference between an expensive laser cutter (£12k) vs cheaper (£3k). Laser cutting for profit/work. * Interests Disclosure - I service and repair laser cutters for a living and have been a contractor to a related software provider for 4 years. about this event: https://www.emfcamp.org/schedule/2024/194-getting-started-in-laser-cutting

Living on the canals of the UK - Lessons from the water (emf2024)

Sun, 02 Jun 2024 16:00:00 +0200

The canals of the UK have undergone transformation from industry to decay to leisure and in recent years to housing. In this talk, we'll go through some of the history of this modern day shanty town along with lessons for any budding boaters considering life on the cut. We'll cover the fundamentals of boat life including legality, work from home challenges, common pitfalls new boaters can face along with everything you need to know if boat life could work for you! about this event: https://www.emfcamp.org/schedule/2024/156-living-on-the-canals-of-the-uk-lessons-from-the-water

Influence policing: a view from the cockpit of UK law enforcement’s domestic digital influence campaigns (emf2024)

Sat, 01 Jun 2024 14:30:00 +0200

Critical research on digital influence and micro targeting has generally focused on privacy violations by commercial marketers and Cambridge Analytica-style political manipulation. But increasingly, the UK government, police, and security services are using these tools for public policy. The targeted advertising and influence platforms give public sector actors complex tools with which to target behaviour change communications - allowing them to tailor nudge messages based on online behaviour, interests, and fine-detail location. This is allowing the police to use targeted behaviour change advertising to attempt to prevent crime before it happens - but poses serious questions for accountability, ethics, and privacy. Drawing on a dataset of more than 12,000 government adverts from the Meta Ad Library and in-depth interviews with law enforcement, we map the landscape of what we call 'influence policing' in the UK, and discuss the ethical and democratic implications of this new mode of policing. about this event: https://www.emfcamp.org/schedule/2024/237-influence-policing

The XZ backdoor - what, why, and how? (emf2024)

Fri, 31 May 2024 17:40:00 +0200

Earlier this year, a developer was trying to benchmark a database. But something was wrong - SSH was taking up too much CPU time in the background. This accidental observation led to the discovery of an audacious attempt to introduce a backdoor that would allow an attacker access to almost any system in the world running SSH, an attack made up of both technical and social components. This talk will describe the backdoor itself, the process that went into it being possible to inject in the first place, and how this was exacerbated by a series of entirely reasonable decisions on the part of Linux distributions. It's a story of social engineering, novel obfuscation mechanisms, and a long con over several years. We'll delve into why distributions patch upstream code, why dependency chains are complicated, and how it's even possible for a compression library to break all the SSH security mechanisms that are intended to prevent this sort of thing from happening in the first place. about this event: https://www.emfcamp.org/schedule/2024/409-the-xz-backdoor-what-why-and-how

Alle können PETG – hast du schon mal Keramik 3D-gedruckt? (hackmas2024)

Fri, 30 Aug 2024 21:00:00 +0200

Von der Teetasse über das Flugzeugtriebwerk zum Knochenimplantat ist das Motto dieses Talks, der dem geneigten Publikum 3D-Druck von Hochleistungskeramik näherbringt. Dabei gibt es einen Crashkurs, wieso Keramiken die Nerds der Materialien sind, wieso ein 3D-Drucker für Keramik noch etwas nur für gut betuchte Bastlerinnen und Bastler ist und wofür 3D-gedruckte Keramikteile schon heute genutzt werden. Ob alternative Energieversorgung oder neue Therapiekonzepte in der Medizin - einige Anwendungen werden erst durch die Möglichkeiten des Keramik-3D-Drucks geschaffen. Hier lernt ihr, wie damit die Welt ein klein wenig besser gemacht werden kann. Aber natürlich darf auch die Technik dahinter nicht zu kurz kommen und daher gibt es Einblicke in die bunte Welt des Lithography-based Ceramic Manufacturing. about this event: https://sessions.hack-mas.at/event/efptiTfAKjFmRE9Q5/alle-koennen-petg-hast-du-schon-mal-keramik-3d-gedruckt

The Edible Native Plant Project, or the Fine Line Between Food and Poison (emf2024)

Sat, 01 Jun 2024 18:10:00 +0200

A research project that started with the question, 'what was the average person in Britain eating 500 years ago?', and resulted in a rich knowledge base of over 1200 native and naturalised plants with food uses. The vast majority of our modern foods originate overseas, introduced to Britain by colonialism and Victorian exploration, and the global human diet now contains less than 100 plants, with limited biodiversity. Starting from the BSBI's database of native and naturalised plants, over the course of 3+ years I painstakingly reseached each entry for historic, archaeological, or ethnographically documented food uses. This body of ancestral knowledge could help provide local food resilience, reduce the impact of the plants we eat, and better protect food supplies from climate change, pollinator loss and disease. The research is still in its raw form as a giant spreadsheet, so the first part of the talk will focus on the process of research and identification, and some of the trickier questions such as the difference between a food and a medicine, what level of toxicity is tolerable, and how to really define a native plant. The second part will focus on some highlights of the results, including obscure disused vegetables, native things you can still forage, lost recipes for brewed alcohols and psychoactives, vegetables we've bioengineered for edibility, some exciting natural poisions, and addressing whether or not lettuce really exists. about this event: https://www.emfcamp.org/schedule/2024/461-the-edible-native-plant-project

Unlimited Power: An Engineer's Low-Down on Nuclear Fusion Technology (emf2024)

Sun, 02 Jun 2024 17:10:00 +0200

Most technical people hear about fusion power in the news or see it in games and movies, and are familiar with the joke that it's always 20 years away. Beyond this, it's surprisingly rare to find good information beyond the basic physics and the marketing promise of unlimited, clean energy. As an engineer working in the fusion technology sector, I give a primer on how fusion power works, why its benefits are so incredibly tantalising yet hard to achieve, what the latest exciting developments are, and how the UK is a surprising trailblazer. I outline some of the cutting-edge technologies involved in developing fusion power, including superconducting magnets, plasma control using deep learning methods, and hypersonic fuel injection. The audience is also given facts and figures to get a flavour of the unimaginable scale of what is being done: materials at nearly 0K adjacent to plasmas hotter than the cores of stars, gigawatts of power from teaspoons of fuel, magnetic fields multiple times more powerful than MRI machines, and neutron fluxes strong enough to transmute matter in bulk. Coming away from this presentation, the audience will have learned about the fundamentals of nuclear fusion and appreciate the key issues enough to put the marketing and news reports into context. They might even be excited and enthused about what's to come in this quickly growing technology space. about this event: https://www.emfcamp.org/schedule/2024/471-unlimited-power

Mothers' G(q)uilt: An exploration of mothers' experiences through an interactive quilt (emf2024)

Fri, 31 May 2024 15:20:00 +0200

This is a talk about how we combined textiles, electronics and storytelling to provide a platform for people to share experiences. For this project, we wanted to explore more the findings of previous research around the guilt mothers feel when feeding their babies, but in a more creative way. Coming at the project from 3 very different points of expertise, we worked with mums to design and make a touch interactive quilt. We asked mothers of young babies to describe their emotions around feeding, a topic often emotional and controversial, and send a voice clip along with a piece of their baby’s clothing which we stitched together to create a special interactive quilt. The quilt is embedded with electronic touch sensors which activate the clips when the metal buttons of the clothes are touched. By interacting with them you can hear the stories through headphones. All this results in a very intimate and emotional experience that provides a platform for visibility and understanding and we think is a great conversation starter to share stories and create community. The talk will include a timeline of how we created a digitally augmented quilt, and a few thoughts if you want to make one too. It will also include some of our own reflections when working on a project that brings up difficult emotions and sensitive topics. about this event: https://www.emfcamp.org/schedule/2024/34-mothers-g-q-uilt

Dateimanagement mal anders (hackmas2024)

Fri, 30 Aug 2024 18:00:00 +0200

Man nehme ein paar hundertausend Dateien und ein flexibles Wissensmanagement-Werkzeug und lässt seiner Fantasie freien Lauf.Nun stell' dir vor, du kannst deine Dateien in dein Wissensmanagement-System verlinken und trotzdem von einem Verzeichnis in ein anderes verschieben, ohne, dass deine Links brechen.Dein Datei-Management als auch dein Wissensmanagement bauen unter anderem auf Multi-Klassifikation mittels Schlagworten (Tags) auf.Wie ist es, wenn man vergessen darf, wo die Dateien abgelegt wurden?Was kann man mit der Idee machen, zu seinen Dateien alle möglichen Meta-Daten im Wissensmanagement zu verwalten?Wenn dich diese Gedanken interessieren, dann schau' bei dieser Session vorbei, wo Karl gerne seine Dateimanagementworkflows herzeigt, die in seinem Fall auf Org-mode und der filetags-Werkzeuge aufbauen.Motivationsartikel, der meine filetags-Tools zusammenfasst: https://karl-voit.at/managing-digital-photographs/Online demo: https://karl-voit.at/demo-filetags-intro/filetags: https://github.com/novoid/filetags/ about this event: https://sessions.hack-mas.at/event/YaEdYnu5FZ4K96T7F/dateimanagement-mal-anders

Does Robot Wars have a Meta? (emf2024)

Sun, 02 Jun 2024 16:30:00 +0200

Robot Wars is a TV show that inspired a generation of engineers to take up the sport of "Robot Combat", but what drove success in the design of those competing? Looking at some famous matches and designs, this talk will break down the rock-paper-scissors of the sport, and try to provide an understanding of how this can help to educate a new generation of engineers today. Should the sport have a Meta, it will mean certain designs always win out over others - however should it not, then it may suggest it is not the design itself that determines success, but rather ones understanding of design. about this event: https://www.emfcamp.org/schedule/2024/134-does-robot-wars-have-a-meta

GPS time, leap seconds, and a clock that's always right (emf2024)

Fri, 31 May 2024 14:00:00 +0200

It sounds easy enough: build a clock that always shows the correct local time, no matter where you take it. Mobile phones can sort-of do this, but they manage by listening to the cell towers, so this won't work everywhere. "Radio controlled" clocks just listen to a low frequency broadcast, there's a few different transmissions across the world but they're incompatible and know nothing of time zones. Desktop computers can use the internet for time, but you still have to tell it what zone you're in. Really, it should be possible to build a clock with nothing more than a GPS receiver, which figures out the time on its own, with no need for internet or cellular connection. It turns out that doing this requires an on-board world atlas, a spherical coordinate point-in-polygon algorithm, and a complete database of offsets and daylight savings rules. I finally created a clock that automatically corrects itself as you carry it across country and timezone borders. The journey to this point was so ridiculously tedious that it borders on the absurd. In this talk I'll run through some of the highlights, and of course no talk about GPS time would be complete without mentioning leap seconds, which cause problems even when they don't happen. about this event: https://www.emfcamp.org/schedule/2024/337-gps-time-leap-seconds-and-a-clock-thats-always-right

Secure Messaging (and current attacks against it) (hackmas2024)

Thu, 29 Aug 2024 22:00:00 +0200

Secure messaging apps are one of the most-used app categories on current mobile devices, and a significant subset of human communication is handled through them. This makes them an interesting target for forensics, surveillance, and general information collection for intelligence services and police institutions. In this talk, we will discuss various options for such surveillance and their respective difficulties, pointing out which options do not seem realistic given all the practical considerations.Speaker: Rene Mayrhofer about this event: https://sessions.hack-mas.at/event/FzXNrZZ9aWunEByvY/secure-messaging-and-current-attacks-against-it

Closing ceremony (emf2024)

Sun, 02 Jun 2024 20:00:00 +0200

The ceremony in which we close the festival. Goodbye! about this event: https://www.emfcamp.org/schedule/2024/551-closing-ceremony

When a tree falls in the forest.... does it cause a fire? (emf2024)

Fri, 31 May 2024 20:30:00 +0200

Overstory uses satellite imagery plus machine learning to understand individual trees - at scale. I'll talk about how we do this, some of the practical challenges of remote sensing and earth observation, and how we translate this into real world prevention of wildfire and power outage by working with utilities, who manage many thousands of miles of power cables. about this event: https://www.emfcamp.org/schedule/2024/417-when-a-tree-falls-in-the-forest-does-it-cause-a-fire

Coding Beyond the Screen: The unique challenges of programming massive public laser displays (emf2024)

Fri, 31 May 2024 19:00:00 +0200

Join BAFTA winning digital artist Seb Lee-Delisle in this engaging talk about his life and work over the past few years. Although Seb is known for his large and spectacular outdoor light and laser shows, he is fundamentally a coder. In this fun keynote, he’ll talk about the unique challenges of working with computers at this scale, and demonstrate how to code mesmerising particle effects with an actual laser. about this event: https://www.emfcamp.org/schedule/2024/119-coding-beyond-the-screen

Exploring and extending the Elite game engine for the BBC Micro (emf2024)

Sat, 01 Jun 2024 13:40:00 +0200

If you are a British nerd of a certain age, you almost certainly played Elite on the BBC Micro. And if you didn't, this talk will explain why you should care about a now 40-year-old game. It was years ahead of its time, with 3D graphics, a procedurally generated open world, and a whole novel's worth of lore - all running on an 8-bit home microcomputer in 1984, when most games were little more advanced than Pac-Man or Space Invaders. Over the last few years, I've been picking apart the original Elite game engine to understand how it worked, and also to experiment with extending it. In this talk, I'll examine some of the methods that the game used - how it used the graphics hardware, how the game state is represented in memory, how the ship models were designed, how the AI worked, and how galaxies and planets were generated. I'll also explain some quirks of the game... including the real reason that docking was so hard. I'll demonstrate some new tools I've developed, which access the game state in real time, letting you experience the original game in new ways - including an OpenGL frontend with VR support, and an attempt to recreate an arcade-style version of the game, with an old-school vector display. Finally, if all goes to plan, I will attempt to demonstrate something that was an impossible dream for 40 years: multiplayer Elite on the original BBC Micro version. about this event: https://www.emfcamp.org/schedule/2024/113-exploring-and-extending-the-elite-game-engine

CrashIT! Eine Security Gruselgeschichte (hackmas2024)

Fri, 30 Aug 2024 17:00:00 +0200

Vor mehr als 2 Jahren habe ich einem österreichischen Einmannunternehmen mehrere kritische Schwachstellen in der Software, die sie an Kunden vertreiben, gemeldet. Trotz Unterstützung des österreichischen CERT.at gelingt es mir seit 2 Jahren nicht, sie dazu zu bringen, diese Lücken zu schließen, was mich zum unfreiwilligen Admin von mehr als 100 Registrierkassen österreichischer Unternehmen macht. Ich würde gerne in einem kurzen (mit viel Galgenhumor gespickten) Vortrag erzählen, wie es dazu gekommen ist. about this event: https://sessions.hack-mas.at/event/9yNBZjgCs2k9PhJdA/crashit-eine-security-gruselgeschichte

Reliable Radio Communications (hackmas2024)

Thu, 29 Aug 2024 16:00:00 +0200

Jetzt auch ausführlich erklärt in deutscher Sprache. Der lange steinige Weg vom Bit in den Äther und zurück. English available.- Übersicht der Arten von Funkgeräten, ihren Eigenschaften und Fähigkeiten mit Fokus auf Datenübertragung (ISM Module, Sprechfunkgeräte, LoRa, vllt bis Bluetooth WLAN DVB-T/C/S und UMTS/LTE)- Bausteine der nachrichtentechnischen Übertragungskette folglich Kodierschritte und ihre Aufgaben (Quell, Kanal, Leitungs)- Golay Implementation nach DO3RB, die versucht möglichst alles möglichst einfach umzusetzen (2MBit/s auf CM0+ @ 48 MHz) bietet Synchronisationsmarker, Fehlerkorrektur und Lauflängenbegrenzung, alles was ISM Module glücklich macht :)Using Coding Theory to get LoRa-like performance from every ISM Radio Transceiver. about this event: https://sessions.hack-mas.at/event/ZF2xn38oXxWTDKHx8/reliable-radio-communications

Keeping shell history in sync with turtles and magic (emf2024)

Sat, 01 Jun 2024 15:00:00 +0200

Atuin is a command line tool for searching and synchronizing shell history across devices. I'll be telling the story of how I accidentally made a popular open source project, diving in to how it synchronizes and encrypts data, and covering some of the lessons learned from working in public For disclosure; I currently work on Atuin, which is what this talk is about. about this event: https://www.emfcamp.org/schedule/2024/160-keeping-shell-history-in-sync-with-turtles-and-magic

GDPRhub - the European wiki for data protection decisions (hackmas2024)

Sat, 31 Aug 2024 16:00:00 +0200

I could briefly present noyb's GDPRhub.eu, a wiki for data protection decisions from all over Europe, in case a number of people are interested. There we collect and document national and European data protection cases in English, so that lawyers, researchers and other interested people from all over the world can get an idea of the state of the GDPR.I could present in both German and English, though I would only prepare English slides, since it's all a bit last-minute. about this event: https://sessions.hack-mas.at/event/en2ypCh2pqyg2z44t/gdprhub-the-european-wiki-for-data-protection-decisions

BIG PIPES! A dive into Scotland's hidden underground hydroelectric infrastructure 🌊 (emf2024)

Sun, 02 Jun 2024 13:20:00 +0200

A look at the history and construction of Scotland's hidden network of remote dams, tunnels, shafts and underground generating stations. Not many are aware of how extensive, ground-breaking, enduring and socially significant the hydro infrastructure hidden under our Lochs and Glens really is. Come and join me for a healthy dose of BIG PIPES! about this event: https://www.emfcamp.org/schedule/2024/288-big-pipes-a-dive-into-scotlands-hidden-underground

EverSong - singing voice transfer with Google Magenta’s DDSP + diffusion-based vocoder. (emf2024)

Sat, 01 Jun 2024 14:20:00 +0200

Emily Peasgood and Mark Hanslip will present a talk on creating EverSong, followed by an invitation to try their vocal transfer models in real-time. EverSong is a sound installation where you can hear the lifespan of a person in a song, from 5-years-old at the start to 95-years-old at the end. It explores the fragility of life, its circularity, invites people to celebrate the moment we are in right now and questions our legacy as humans moving into an increasingly digital age. Since January 2024, Peasgood & Hanslip have worked with DDSP-SVC, a newly-developed process which builds on Google Magenta’s DDSP by combining it with a diffusion-based vocoder. They recorded vocal datasets with people aged 5-95 and trained models which can be mapped onto Emily’s voice enabling her to sound younger and older than she is. This technology is starting to be adopted by contemporary pop musicians, high-profile examples being web services such as Grimes’ Elf and Holly Herndon’s Holly+. EverSong represents a new application of this technology by making it possible to hear a voice age in real time. It will be experienced in tunnels and pathways, installed sustainably in nature, touring before finding a permanent home in an ancient site. about this event: https://www.emfcamp.org/schedule/2024/120-eversong-singing-voice-transfer

From Haunted Karaoke to the Humour Feature: an Exploration of Auto-Generated Comedy (emf2024)

Fri, 31 May 2024 16:20:00 +0200

In a world where large language models like GPT and Gemini are becoming more and more ubiquitous, what does this mean for comedy? If computers getting things obviously wrong is a factor in their comedy value, do the improvements in generative AI take us into an uncanny valley where the outputs are realistic enough to no longer be funny? Join our presenters as they each argue the case for one side of the battle between generations from large language models, vs. more naive generation approaches. We’ll explore what makes comedy funny at all, and then drill deeper into why we find content generated by computers so hilarious - often when it’s not trying to be! Throughout the talk we’ll give some examples of humorous computer generated content from past projects - intentional or otherwise. Learn why you shouldn’t join us for dinner when the recipes are auto-generated; see how we abuse state-of-the-art AI safety techniques to make LLMs funnier; and join for a group singalong for some live-generated parody karaoke. about this event: https://www.emfcamp.org/schedule/2024/169-from-haunted-karaoke-to-the-humour-feature

How to 3D Print A Rocket Engine (emf2024)

Sun, 02 Jun 2024 17:10:00 +0200

A talk about the state of the art with metal 3D printing, and how it can let you make rocket engines much more cheaply and quickly than ever before. I will briefly describe the anatomy of a rocket engine and why the extreme conditions it must endure make designing one hard, and then introduce powder metal 3D printing and how you print an engine. I work for a company in this field, and I will show various images and videos of our engines being fired, as well as the engines themselves so that people can have a look, and some samples with internal cutaways to show the internal structures that 3D printing technology now makes relatively easy. I will also discuss drawbacks and common failure-modes of 3D printing for rocket engines, and talk about where new advances in the field might take us, such as multi-metal prints, hybrid machining, and other exciting technologies. about this event: https://www.emfcamp.org/schedule/2024/131-how-to-3d-print-a-rocket-engine

Digital Skeleton Keys - We’ve got a bone to pick with offline Access Control Systems (emf2024)

Sat, 01 Jun 2024 13:00:00 +0200

Offline RFID systems rely on data stored within the key to control access and configuration. But what if a key lies? What if we can make the system trust those lies? Well then we can do some real spooky things… This is the story of how a strange repeating data pattern turned into a skeleton key that can open an entire range of RFID access control products in seconds. It’s a scrappy but scary hack that spawned from something we noticed whilst trying to duplicate an access card onto a subdermal RFID implant. This covers the discovery of the flaw, how we investigated it, and how significant the flaws ended up being. about this event: https://www.emfcamp.org/schedule/2024/80-digital-skeleton-keys-we-ve-got-a-bone-to-pick

Image generative AI - FOSS only (hackmas2024)

Fri, 30 Aug 2024 19:30:00 +0200

Try out open source image generation - and learn how to control AI magic. No prior knowlege needed. Bring ideas on what you want to generate.First theory / terminology you'll need for the toolsPropriety tools and why they suckThe 3 major base-models SD1.5, SDXL and FLUX.1/SD3 - diffusion vs flow modelsELI5: latent spaces, u-nets, [un]CLIP, VAE, cfg-scale, samplers and schedulersThen I'll show you how to use the 2 major web UIs:The beginner tool a1111 stable diffusion web uiThe pro tool comfyuiFast view over other tools that I haven't triedThen I'll explain what you can customize - with example workflows in comfyui Models: LoRAs - low rank adapters - diff/patches to base models for generation guidance, i.e. pose, canny edge, styles, concepts, etc. IPAdapter: Transfer styles, faces and do per-layer-prompting Hyper/turbo models: Generate 20 1kx1k images per second on a 4090 Conditioning: unCLIP use pictures as prompt. Latent space walks + Different CLIPs for different layersInitialization: Start from a (masked) image - inpainting, outpainting, overpainting, refining, transformingSpecial models for upscaling (SUPIR) and animation (AnimateDiff)Bring a laptop / tablet / phone if you want to try it. I'll rent a 3090/4090 and provide you a beginner setup for at least 20h during/after the talk.A matrix channel / mastodon hashtag for AI art would be cool. Maybe we can do a contest / exhibition?Slides: https://schickmas.at/2dd2f1cbd7c3 about this event: https://sessions.hack-mas.at/event/w4DZtGfeNK86AGbhr/image-generative-ai-foss-only

The Last Miles of The Internet (emf2024)

Fri, 31 May 2024 13:20:00 +0200

How does your home router get to the "internet" in the UK? With the rise of alternative fibre networks, and major operators finally deploying fibre to the home, the copper cables that have connected us since the 1900s are being rapidly replaced with fibre networks. This talk will dive into the detail of how these new optical fibre access networks being deployed today actually work, and how cat videos get from the internet to your home. about this event: https://www.emfcamp.org/schedule/2024/305-the-last-miles-of-the-internet

HEU1993 to WHY2025: Dutch hacker camps from the past and the future (emf2024)

Sun, 02 Jun 2024 19:10:00 +0200

The Dutch hacker camps take place between editions of EMF. They have a long history and a bright future! In this talk the Dutch camps from the past will be visited and the state of the next camp, WHY2025, will be presented. about this event: https://www.emfcamp.org/schedule/2024/474-heu1993-to-why2025-dutch-hacker-camps-from-the-past

Gas boilers suck! Hack yours today, save money, save the planet! (emf2024)

Sat, 01 Jun 2024 12:20:00 +0200

Gas boilers, almost all homes in the UK have them, but they are dreadful! +90% of the ones I've seen are badly spec'ed and horribly configured, so they burn way too much gas. Then Martin Lewis keeps telling us to "lower the flow temperature" but it's never really explained how to, or what this does to save gas (and money). Well have I got a Slide Deck for you!! As with any serious problem, it needs hard data. So I wired my Raspberry Pi home server to my central heating controls, wrote a bunch of code, and spent last winter collecting data from my boiler, a dozen temperature sensors, some humidity sensors and the Octopus Energy API. I have pretty graphs to show what happens all around my home, how altering the flow temperature works, how altering set points work, why my house was too cold, then too hot, and used way too much gas. I'll explain the (simple) physics and how to tweak your system for best performance too. But ultimately, we all have to stop burning gas and move to heat pumps, a solution not understood by many and requiring something of a mind shift from the way gas central heating has always worked. I'll explain how heat pumps work and what you can do to prepare for their arrival in your home. The future is bright, and it's heading rapidly in this direction. about this event: https://www.emfcamp.org/schedule/2024/161-gas-boilers-suck-hack-yours-today-save-money-save-the-planet

Driving fancy LED panels with commodity hardware (emf2024)

Sun, 02 Jun 2024 18:10:00 +0200

Ever wondered about what's behind large advertising billboards? Interested in pretty blinking lights? Curious about electronics and circuit board design? This talk might be for you! Our hackspace recently got a donation of ~800 LED matrix panels (squares with lots of tiny LEDs on them), with little in the way of documentation. I'll explain how they work, how we got them to light up and display things, and how to make it fast enough to display 30fps video -- all with commodity parts that cost less than 20 pounds. We'll explore the weird and wonderful world of poorly translated datasheets and control software, marvel at the library of weird glitched-out images I ended up with on the road to success, and dive into the strange but extremely useful Programmable I/O block of the RP2040 microcontroller. If the stars align, you'll be able to see everything working on a real demonstration panel, too! Although we'll be going into detail on some bits, this talk should be accessible to most audiences. about this event: https://www.emfcamp.org/schedule/2024/199-driving-fancy-led-panels-with-commodity-hardware

Don't be evil by accident: algorithmic harms and ethics for technologists (emf2024)

Sun, 02 Jun 2024 14:00:00 +0200

Technologists are wizards. Today, we wield the power to effect changes from a tent, a bedroom or an office the likes of which fifty years ago one might need the power of a small nation-state to accomplish. Having seen these systems from all angles - building the tech, researching digital consent academically, and fighting biased public sector algorithms in the media and the courts - I'm confident that we really haven’t adapted to that reality. In the choices we make in technical practice, we find ourselves paving the road to hell with our good intentions. Most of us aren't trained in ethics, policy or politics - so how do we manage the weighty burden of being responsible for people’s safety? What can we do – both as individuals and as a society as a whole – to try and stop algorithmic harms? And, how do we stop our robots from killing us? about this event: https://www.emfcamp.org/schedule/2024/355-dont-be-evil-by-accident-algorithmic-harms-and-ethics

The Role of Media in Impact Campaigns (emf2024)

Sat, 01 Jun 2024 21:30:00 +0200

Special event - Talk followed by secret film screening What do impact campaigns accomplish in the creative landscape, and what is the role and responsibility of the media in driving that social impact? Inspired by the film "Don't Look Up", where Benn produced the impact campaign, we will explore this dynamic together. When the ethics are no longer focused on being accurate, but rather being first,and being attention grabbing, it becomes difficult for people to discern what is and is not an important story. So we wonder how some of the most important stories either fall through the ether entirely, or are seen and dismissed by the apparatus of the 24 hour news cycle and 3 second refresh feeds. That's what films like Don't Look Up tackle so well. Benn is a SXSW Grand Jury Prize & UNICEF Prize winning, Oscar Shortlisted, Webby nominated producer. He has been a social impact advisor and producer working across film, games and events, with a mission to bridge gaps between story and policy, and ultimately champion vast perspectives to aid social movement. He is the Head of Partnerships for Neon Picturehouse, and Executive Producer & Vice-Chairman of HF Productions. He serves as an Advisor of Think Film, Global Environment Media, Screen South, SIE Society, and Treun House Atelier. Benn also consults on projects from producing Netflix impact campaigns (“Don’t Look Up”, “Breaking Boundaries…), Sony’s Picture This, and SDGs in Action with UN DESA as part of the High Level Political Forum. about this event: https://www.emfcamp.org/schedule/2024/630-the-role-of-media-in-impact-campaigns

Girls Just Wanna Play Games (and be represented in them) (emf2024)

Sat, 01 Jun 2024 19:50:00 +0200

This talk will take you through a short history of female protagonists in video games, my experience as a female-perceived person playing games, including how this affects my interactions with others, and will finally look at some research to see the theories behind this, as well as some ideas for how we can make sure video games are for everyone. about this event: https://www.emfcamp.org/schedule/2024/521-girls-just-wanna-play-games-and-be-represented-in-them

Machine learning from the ground up (hackmas2024)

Thu, 29 Aug 2024 19:00:00 +0200

An exploration of the theoretical fundamentals of machine learning and and how machine learning frameworks work. We’ll cover key concepts such as functions, parametrizing functions from data, judging the accuracy of models, GPU computing and some basic model architectures.This session is designed for those interested in the foundational ideas behind machine learning—no coding or advanced mathematics required. Our focus will be on the basics, without digging to much into specific AI applications or large language models (LLMs).English or German possible.Duration: 30min + 15min Q&ADevices: Beamer, Laserpointer would be nice about this event: https://sessions.hack-mas.at/event/BGinNaMNhqf8ZWNjA/machine-learning-from-the-ground-up

Downpour & more: how and why to make creative tools (emf2024)

Fri, 31 May 2024 17:50:00 +0200

I recently released Downpour, an app that anyone can use to make little games on their phone. And before that I made Cheap Bots, Done Quick, a website that anyone could use to make a Twitterbot on their computer. And so unsurprisingly I am a big advocate of making creative tools - I love the feeling of seeing other people make cool stuff, and knowing that I enabled that to happen. In this talk, I'm going to talk about some design principles I've gathered from making these kinds of things, share some stories of people using them in ways I didn't expect, and generally try to persuade you that it's an interesting space that you might want to play in. about this event: https://www.emfcamp.org/schedule/2024/320-downpour-more-how-and-why-to-make-creative-tools

The Auto Plane Spotter: a robot to point at aeroplanes (emf2024)

Fri, 31 May 2024 19:50:00 +0200

As a semi-professional plane spotter when I hear or see an aircraft fly over I will sometimes point at it. But I can't always tell if there's an aircraft flying over, and I can't be awake 24/7 so I miss some, which I find unacceptable. Enter the auto spotter, a robot that is capable of pointing at the nearest aircraft continuously. The auto spotter uses 1090Mhz ADS-B Out transmissions to work out where the nearest aircraft is relative to its location and works out the bearing and elevation for a pointer. This is the same public data that is used to feed flight information services and can be received by anyone with the right (relatively cheap) equipment; all commercial and many general aviation aircraft around the world use it to transmit their positions, speeds, altitudes and more. You may have seen the pointer at EMF2022 (in between rain showers) and this talk goes into some of the details of how it was developed, and how it works. about this event: https://www.emfcamp.org/schedule/2024/45-the-auto-plane-spotter-a-robot-to-point-at-aeroplanes

Cobwebs, snowflakes and crows' feet (emf2024)

Sat, 01 Jun 2024 18:30:00 +0200

The bicycle wheel is quite possibly the best thing humans have ever invented. But then, I would say that - I build them for a living. Come along for a quick ride through their creation, evolution and revolution, a detour through some weird and wonderful designs and maybe a look at what a high-tech future holds for this deceptively simple structure. about this event: https://www.emfcamp.org/schedule/2024/116-cobwebs-snowflakes-and-crows-feet

Astrophysics for Supervillains (emf2024)

Sun, 02 Jun 2024 15:40:00 +0200

“Could you crash the Moon into the Earth?” “If the Sun explodes, would we all get vaporized?” “What’s the weather like on Mercury?” Discover the answers to these questions (and many more!) at "Astrophysics for Supervillains"! Facts about space are all well and good but discovering that if you threw someone into a black hole, they would be spaghettified – stretched out long and thin before getting squashed smaller than an atom – is truly, fascinatingly gruesome. This quirky space talk will teach children about the solar system, galaxies, the universe, and, most importantly, the answer to the question “Which planet is entirely populated by robots?”. about this event: https://www.emfcamp.org/schedule/2024/428-astrophysics-for-supervillains

Praxistipps zur sicheren Authentifikation (hackmas2024)

Thu, 29 Aug 2024 17:10:00 +0200

Diese Session klärt Fragen wie folgende: Wie soll man denn so viele verschiedene eindeutige Passwörter verwalten? Was ist der Unterschied zwischen den verschiedenen Mehrfaktorauthentifizierungsverfahren (TOTP, FIDO2, Passkeys, SMS, PINs, CardTANs, ...)? Welche TOTP-Apps (Google Authenticator, FreeOTP, Aegis, ...) sind vertrauenswürdig? Welche der Verfahren soll ich verwenden? Was schützt gegen Phishing (und was nicht)? Was sind die Nachteile von Passkeys, die aktuell so gehypt werden? Bei welchen Verfahren muss ich jemand anders inwieweit vertrauen?Teile des Inhaltes sind bereits mit https://karl-voit.at/2023/03/05/Passwortsicherheit/ und https://karl-voit.at/2023/03/05/TOTP-Auswahl/ von Karl verbloggt und haben beim Barcamp Graz 2023 einen Best-Session-Award erhalten. about this event: https://sessions.hack-mas.at/event/zf77xEvjmJogsf4Ce/praxistipps-zur-sicheren-authentifikation

CHERI and Arm Morello: mitigating the terrible legacy of memory-safety security issues, in practice at scale (emf2024)

Fri, 31 May 2024 18:30:00 +0200

Computing is riddled with security vulnerabilities, many of which arise from memory safety issues. Conventional hardware architectures and the C/C++ codebase are chronically prone to exploitable errors - a 75-year-old problem at the heart of computing. This talk will introduce CHERI, showing how (finally?!) we can do better. The CHERI research project has developed a new architecture+software approach, using unforgeable hardware capabilities to implement pointers. Morello is an Arm experimental platform for evaluation of CHERI to explore its potential for mass-market adoption, part-funded by the UKRI Digital Security by Design programme, and other groups are developing CHERI-enabled RISC-V processors, including Microsoft, Google, lowRISC, SCI Semiconductor, Codasip, and RISC-V International. This talk will introduce the problem, and CHERI and Morello, for a broad audience: the hardware extensions, their potential for fine-grained memory safety and software compartmentalisation, the CHERI software stack, and machine-checked mathematical proof that the architecture design provides the intended security. CHERI complements alternative high-level-language approaches, that would need code to be rewritten from scratch, and we'll talk about the often-low cost of porting code to CHERI. I'll demo how CHERI prevents exploitable memory safety errors on a Morello box, running Arm CHERI hardware and a complete CHERI software stack. This is joint work by the CHERI and Morello teams at the University of Cambridge, Arm, SRI International, and the University of Edinburgh. about this event: https://www.emfcamp.org/schedule/2024/87-cheri-and-arm-morello

The coffee fix: Why it's so hard to pull a great espresso, and how to improve your shots (emf2024)

Fri, 31 May 2024 16:30:00 +0200

Pulling a shot of espresso sounds so simple - just pump some water through a bed of coffee grounds. But while it sounds simple, many things can go wrong. What ends up in the cup can too easily end up bitter, sour, watery, chalky, harsh, or flat. So how can you be an espresso alchemist, and convert your bitter shots into gold? In this talk, I'll cover the anatomy of what goes on during coffee extraction, and the problems that can lead to bad flavoured coffee. I'll also give a whirlwind tour of the different coffee machines, equipment, and hacks that are designed to make better espresso - both the high-value gadets and the duds. You'll learn how to 'dial in' a shot to prevent it being too sour or bitter, and what steps you can take to maximise deliciousness! about this event: https://www.emfcamp.org/schedule/2024/133-the-coffee-fix-why-its-so-hard-to-pull-a-great-espresso

Let's Party Like It's 1994 - Re-Imagining How to Find Stuff Online (emf2024)

Fri, 31 May 2024 14:40:00 +0200

Internet search results were a toxic hellstew of ads, SEO spam, content farms and misinformation/disinformation even before the arrival of Large Language Models like ChatGPT in 2023. In 2024 nearly half the world’s population votes in elections that will have consequential impacts for key issues like climate change and civil rights, and it’s more important than ever before that search results can be relied upon. This talk will highlight a few ways to put search back in the service of the searcher rather than a handful of global megacorps. We’ll time-travel 30 years to the Internet’s Cambrian Explosion period, before Lycos, AltaVista and BackRub/PageRank, and look how technologies like Really Simple Syndication (RSS) and open source self-hosted meta-search engines like SearXNG can help. And then, demo gods permitting, I’ll show you how this can all come together to put a search engine in every pocket. about this event: https://www.emfcamp.org/schedule/2024/13-lets-party-like-its-1994

CERN Technology: Following the White Rabbit down a 27km hole. (emf2024)

Sun, 02 Jun 2024 14:00:00 +0200

How does the most complicated machine in the world work? Why should we pay 16 billion euros to keep some physicists happy with a new toy? What has CERN ever done for us? What happens when you lose control of a beam the size of spaghetti with the energy of a full express train? This talk, delivered by a beam instrumentation engineer at CERN, will introduce CERN and it's accelerator complex, and discuss the technology required to deliver one petabyte of cutting-edge science per day to over 170 research facilities in 36 countries. The talk will also cover some of CERN's open source software and hardware contributions to date, and finally explore their science and technology roadmap for the coming years. about this event: https://www.emfcamp.org/schedule/2024/181-cern-technology-following-the-white-rabbit-down-a-27km-hole

The Tiny Tool Kit Manifesto (emf2024)

Fri, 31 May 2024 12:40:00 +0200

What is the best tiny toolkit for hacking in a field, fixing robots in the wild and repairing products for friends? We've spent years creating our own bespoke tiny toolkits, with tiny tools, that work for our own specific needs as makers and hackers. In this talk, we will share the knowledge we’ve gained along the way, a philosophy of tools and tiny toolkits, the best of the tool kits we’ve assembled, and the most trusted tools we've collected, made and modified. We hope that you too, will be inspired to make your own tiny tool kit. Small is Beautiful. about this event: https://www.emfcamp.org/schedule/2024/265-the-tiny-tool-kit-manifesto

Are archivists pointless when the cloud can just save everything? (emf2024)

Sat, 01 Jun 2024 12:20:00 +0200

I’m an archivist. Every day I deal with the records that people chose to save, or forgot to destroy. Archival material ranges from the sublime (Royal wills, lost love letters, newspapers announcing the Titanic’s demise) to the ridiculous (broken chips of wax from old seals, IOUs from unknown persons, too much human hair). A key role of an archivist is to decide what to save and what to destroy. But this is the past. Today most records are no longer on paper but sent in the form of bytes and I’ve started to wonder what the point of my job really is? We have free access to near-unlimited email inboxes, all our photos are backed up to the cloud to access from anywhere, and instant messaging is synced between our devices. Why bother deciding what to keep for posterity? Just save everything, let computers do the hard work, and all will be well. This approach unsettled me so much that I set off to explore what it would really mean if we “saved everything”: how this would affect our world, communities, and ourselves as humans. In this talk, I will share this journey and my thoughts with you, and try to persuade you that my job is not in fact pointless. about this event: https://www.emfcamp.org/schedule/2024/253-are-archivists-pointless-when-the-cloud-can-just-save

Lesezeichen zum Scrapen, Pimpen und Hosten von Webseiten (hackmas2024)

Thu, 29 Aug 2024 18:00:00 +0200

Nur Adressen speichern? Bookmarklets mit JS und HTML bieten mehr 🤖In meinem Vortrag werde ich die Eigenschaften von Lesezeichen vorstellen, wie z.B. die persönliche Sammlung und die Möglichkeit, sie über Schlüsselwörter in der Adressleiste zu öffnen. Außerdem werde ich auf die Verwendung von Bookmarklets eingehen, die aus HTML, CSS und JavaScript bestehen und die Erstellung von persönlichen Webseiten ermöglichen.Ein Schwerpunkt meines Vortrags ist das Scraping von Webseiten, wobei ich anhand eines Beispiels die schrittweise Entwicklung von JavaScript-Code in der Konsole demonstrieren werde. Weiter werde ich zeigen, wie Webseiten durch Pimpen individualisiert werden können, z.B. durch das Ersetzen von Links oder die Implementierung eines Dark Mode.Ein weiterer Aspekt meines Vortrags wird das Hosten von Webseiten sein. Dazu werde ich ein Bookmarklet vorstellen, das einen minimalen HTML-Editor ermöglicht. Zudem werde ich auf den kreativen Einsatz von Bookmarklets zur Erstellung interaktiver Webseiten, am Beispiel eines einfachen Countdowns, eingehen. Ich freue mich darauf, meine Erkenntnisse zu teilen.https://etherpad.wikimedia.org/p/hackwords about this event: https://sessions.hack-mas.at/event/yf9RMPHR86nooaP3p/lesezeichen-zum-scrapen-pimpen-und-hosten-von-webseiten

How to use Twilio in ten minutes flat (emf2014)

Sat, 30 Aug 2014 15:15:00 +0200

A very quick demonstration of how to use Twilio in under ten minutes. Expect audience participation! about this event: https://c3voc.de

The 55th Flotilla (Live) (emf2014)

Sat, 30 Aug 2014 22:00:00 +0200

I write electronic music & build controllers with a nautical theme! Between playing tracks I'll answer questions about how our kit is set up and how it works. about this event: https://c3voc.de

UCL Family Geek Showoff (emf2014)

Sat, 30 Aug 2014 13:00:00 +0200

A series of short, funny, geeky talks by people who know their stuff, hosted by Steve Cross. Family friendly and fun for everyone. about this event: https://c3voc.de

Gasman's ZX Spectrum Chiptune Extravaganza (emf2014)

Fri, 29 Aug 2014 21:00:00 +0200

I'll perform bleepy electronic music with a Sinclair ZX Spectrum, keytar and vocoder. My set consists of pop covers, classic tracks from the PC and Amiga demo scene, and original music. about this event: https://c3voc.de

Tastes Great, Less Wordy: Document Natural Language Processing (for Beer) (emf2014)

Fri, 29 Aug 2014 15:00:00 +0200

Natural Language Processing (NLP) is among the oldest of Computer Science fields, dating back at least to the 1950s. In this talk I'll present a crash course in basic NLP, focusing on tools to perform document-level summarization and understanding. We'll use these techniques to make sense of the language people use on the web when describing beer. about this event: https://c3voc.de

Dermot Jones plays Spanish guitar (emf2014)

Fri, 29 Aug 2014 22:00:00 +0200

Me and a Spanish guitar. My biggest enthusiasms in music are The Kinks and Snooks Eaglin, and it shows! about this event: https://c3voc.de

High Altitude Ballooning (emf2014)

Fri, 29 Aug 2014 14:00:00 +0200

We'll cover all the basics of high altitude ballooning and share some stories from years of HAB experience. Designing your own flight, what you'll need, things to consider, and top tips to ensure a good result. As an added incentive, we'll be assembling and launching our own high altitude balloon right after the talk! Come and see a real HAB launch and stick around to watch us track it and receive telemetry live. about this event: https://c3voc.de

The Science of Hedonism and the Hedonism of Science (emf2014)

Fri, 29 Aug 2014 15:00:00 +0200

Sex, drugs and rock and roll are ancient indulgences: we are hooked, and have been since the very beginning. Modern science has revealed why these "base" pursuits define our species. But moreover, scientific innovations have been used to revolutionise how we get laid, get high and rock out. Our highest intellectual achievements combined with our primal pursuits has led to countless spectacular outcomes that continue to change the experience of being human. about this event: https://c3voc.de

Our Data, Ourselves (emf2014)

Sun, 31 Aug 2014 14:30:00 +0200

I'll be talking about the "Our Data, Ourselves" project at King's College London, which been done in conjunction with some teenage coders via Young Rewired State. They are already contributing to the app, and have started to examine the data they have generated. We will report on their attitudes to privacy, how the app works, and some preliminary results. about this event: https://c3voc.de

UCL Geek Showoff (emf2014)

Sat, 30 Aug 2014 20:30:00 +0200

A series of short, funny, geeky talks by people who know their stuff, hosted by Steve Cross. This show will not be suitable for children! about this event: https://c3voc.de

How Many Bugs Can a Time Server Have? (emf2014)

Fri, 29 Aug 2014 14:00:00 +0200

Tim and Mike will talk about a number of new advisories (to be released on the 29th), including remote root in a network device. about this event: https://c3voc.de

EMF 2014 Opening ceremony (emf2014)

Fri, 29 Aug 2014 13:30:00 +0200

It begins! about this event: https://c3voc.de

State of Bahn Reisendeninformation (eh21)

Sun, 31 Mar 2024 21:00:00 +0200

Ein kleiner Einblick in den aktuellen Stand der Reisendeninformation. Wir schauen zusammen warum eigentlich manche Dinge so laufen wie sie laufen. Wie entsteht ein Fahrplan? Warum sagt mir eigentlich nie jemand warum mein Zug seit 20 Minuten im Gleis steht? Was kann der neue Navigator? + 30 Minuten Q&A Session (off camera) Der Talk selbst (60 Minuten) wird aufgezeichnet und vermutlich nachträglich released. Es gibt keinen Stream. Die 30 Minuten Q&A sind komplett ohne Aufzeichnung. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/ABPGGA/

Fakebit Polytechnic (emf2014)

Sat, 30 Aug 2014 21:30:00 +0200

Wiimote-controlled chiptune-inspired lo-fi synthpop from Dave Green (former NTK editor) & Dave Pape (Museum of Techno). about this event: https://c3voc.de

Opening Ceremony (emf2024)

Fri, 31 May 2024 11:00:00 +0200

The ceremony in which we open the festival. Hello! about this event: https://www.emfcamp.org/schedule/2024/550-opening-ceremony

2xAA plays his Game Boy (emf2014)

Sat, 30 Aug 2014 23:00:00 +0200

A performance and talk about the chiptune music I create on my Game Boy, along with specially written visuals to go along with the set. about this event: https://c3voc.de

Build your own quadrotor from scratch (emf2014)

Sat, 30 Aug 2014 14:00:00 +0200

A talk about building UAVs, in particular quadrotors, from scratch, in an age where it's easy to buy them ready-made, or in kit form where you just have to plug a few components together. about this event: https://c3voc.de

Hexayurts, Distributed Infrastructure, and Maximizing Global Minimalism (emf2014)

Sun, 31 Aug 2014 11:45:00 +0200

The Hexayurt Project is an open source housing project with > 1000 units deployed each year. However, there's more to the story - a transformation vision about how engineering "outside of the market" can change the world in ways that markets cannot manage. Over three billion people live substantially outside of the market: where could they go with with this technology? about this event: https://c3voc.de

Why are computers so @#!*, and what can we do about it? (emf2014)

Sun, 31 Aug 2014 11:00:00 +0200

Computers have become ubiquitous and essential, but they remain massively error-prone and insecure - as if we were back in the early days of the industrial revolution, with steam engines exploding left, right, and centre. Why is this, and can we do better? about this event: https://c3voc.de

What do we have in Computers? (emf2014)

Sat, 30 Aug 2014 11:00:00 +0200

At the moment there is a priestly cult around people who know the secrets of computers, we are treated well because we are scarce - like scribes in ancient Egypt, and we are similarly instruments of power, can we afford to ignore it? But what happens when *everyone* can do it? about this event: https://c3voc.de

Robotics and Computer Vision with MATLAB and Simulink (emf2014)

Sun, 31 Aug 2014 14:15:00 +0200

In this talk I will discuss how to dramatically improve the speed and quality of your robotics and computer vision projects using MATLAB and Simulink to program your Arduino, Raspberry Pi and LEGO Mindstorms. Firstly, I will introduce MATLAB and Simulink, the industry standard tools used by engineers worldwide to program everything from cars engines to smartphone cameras to spacecraft navigation systems. Next I will give some examples of how these tools can greatly speed up the development of software for a wide range of low-cost hardware devices. Examples include, getting started with Computer Vision on a Raspberry Pi in only 3 lines of code; Programming an Arduino without learning C++ and modifying your code at runtime; Graphically designing a complex control system for a LEGO Mindstorms robot. about this event: https://c3voc.de

LaserTag - How Quasar works (emf2014)

Sat, 30 Aug 2014 12:00:00 +0200

An introduction in to how the Quasar lasertag game works, a very brief history (to put in to context the age of the base design), and some demonstrations of it in operation, and some recent enhancements added. about this event: https://c3voc.de

How to catch a cat burglar with a Slice of Pi (emf2014)

Sun, 31 Aug 2014 11:00:00 +0200

I'm new to the Raspberry Pi. This is the story of how I embarked on a project to catch fly tippers on our local farms, but got distracted trying to frighten kids at Halloween, and discovered I'm feeding the local feline population. about this event: https://c3voc.de

The Dilemmas of Sci-Fi (emf2014)

Sat, 30 Aug 2014 11:00:00 +0200

Featuring some of the more well-known science-fiction shows such as Firefly, Stargate and Star Wars, I will explore some of the dilemmas featured, such as whether it is right to kill a man to secure a nation's peace, is it right to let many die to save the life of one and what ethical theories are used in these pieces, such as Utilitarianism or Kantian ethics. about this event: https://c3voc.de

Amateur Radio: The Original Nerd Hobby! (emf2014)

Fri, 29 Aug 2014 19:00:00 +0200

I find great satisfaction entering an aspect of the past and exploring the elements of how we communicate: radio! It's the culture that evolved nerdiness - let's explore our roots and why it still exists! about this event: https://c3voc.de

EMF 2014 Retrospective and Closing Ceremony (emf2014)

Sun, 31 Aug 2014 20:00:00 +0200

about this event: https://c3voc.de

EMF network in a field 2014 (emf2014)

Sun, 31 Aug 2014 19:15:00 +0200

We will give a short talk detailing how we set up the network, brought high-speed Internet to the farm, and delivered wired and wirelessly across the site. Particularly we'll talk about what we did differently this time around, what went well, what proved more of a hurdle than expected, and finally we'll go through some stats on how the network was used. about this event: https://c3voc.de

Vandalising your Github commit history for fun and profit (emf2014)

Sat, 30 Aug 2014 19:30:00 +0200

Why would anybody feel the need to create a webservice for writing graffiti on a Github commit history graph, when there are real problems that need solving? Come and find out in this talk, which also features the Sinclair Spectrum font and a brief exploration of the Github API. about this event: https://c3voc.de

Showing keys in public (emf2014)

Fri, 29 Aug 2014 20:00:00 +0200

If a reporter wants to get the point across that certain people shouldn’t have access to a particular key, would it be wise for said reporter to then show that key to the world? Like the New York City subway key? The key to the subway? On the Internet?! This and other media fails will be shown. And maybe even one or two non-fail examples…. Several cases of key-copying-by-sight will be discussed with lots of pictures and videos. How this can happen will be explained, as well as what to do to prevent it. about this event: https://c3voc.de

Programming for impostors and scientists (emf2014)

Sat, 30 Aug 2014 15:45:00 +0200

A defence of shitty scientific programming. I'd like to outline some of the issues that scientists learning to code on the job might face, and also acknowledge how learning some software engineering skills will help your science progress faster and more reproducibly, with a few (not original) ideas about what those helpful things might be. about this event: https://c3voc.de

Where Games Break (emf2014)

Sat, 30 Aug 2014 18:15:00 +0200

A gently performative, slightly poetic talk on the ways games break; in personal and political, difficult and perfect ways. about this event: https://c3voc.de

Run your own infrastructure II (emf2014)

Sun, 31 Aug 2014 13:45:00 +0200

A followup talk to one given at OHM in 2013 about how to run your own infrastructure rather than relying on Google or other large companies. about this event: https://c3voc.de

My Container Ship Holiday Slideshow (emf2014)

Sun, 31 Aug 2014 15:45:00 +0200

This summer I went on holiday on a container ship, so this talk will be a slideshow of my holiday photos. I'll also go on tangents about supply chains, Shenzhen, shipping containers, rare earth metal mines, GPS, and that kind of thing. about this event: https://c3voc.de

SimPrints (emf2014)

Sat, 30 Aug 2014 17:30:00 +0200

We have developed a rugged, low-cost, portable fingerprint scanner and software that integrates with almost any existing mHealth application, allowing for real-time identification and access to patient records. We’re going to present our story, beginning as clueless students who managed to build a prototype from scratch in less than one year. With almost no money we tested it in the remote corners of Bangladesh, working with the largest development NGO in the world. about this event: https://c3voc.de

The ZX Spectrum - a secret history (emf2014)

Fri, 29 Aug 2014 20:00:00 +0200

Matt Westcott has followed the Spectrum's journey first-hand into obscurity and back again as an object of nostalgia - this is its story, told through personal experiences and a backdrop of world history. Learn how the ZX Spectrum served as a beacon of hope during the Sarajevo war, slipped under the Iron Curtain to find a new set of devotees, and sent its first tweet from an Oxford pub... about this event: https://c3voc.de

Minimal effort web application security (a.k.a. how to make my job harder) (emf2014)

Sun, 31 Aug 2014 12:00:00 +0200

In this talk I will present a few quick tips on making your web applications more resistant to common attack vectors, without putting a lot of effort in. In some cases, simply adding a line to a configuration file can completely prevent entire classes of attack from being viable. We'll take a look at hardening against XSS, SQL injection, clickjacking, password cracking, and a few other bits if there's time. With any luck, you'll make my job a bit more difficult. about this event: https://c3voc.de

Hackerspaces and Diversity (emf2014)

Sat, 30 Aug 2014 13:15:00 +0200

A talk about hackerspaces, the problems with them, and how you can help combat those problems. about this event: https://c3voc.de

Disruptive disintermediation: selling open digital health services to the NHS (emf2014)

Sun, 31 Aug 2014 13:45:00 +0200

I'll provide a short update on progress made in the campaign to make NHS IT less bad. about this event: https://c3voc.de

Make metal castings from 3D Printed Moulds (emf2014)

Sat, 30 Aug 2014 16:30:00 +0200

Traditional metal casting can make parts of very high strengths, and 3D printing can produce things quickly out of fragile plastic parts. However the two processes can be joined, to produce the mould from a home-made 3D printer for use to make traditional metal castings. This talk will focus on the use of 3D printed parts to make investment castings in Aluminium. about this event: https://c3voc.de

Hacking and healthcare (emf2014)

Sat, 30 Aug 2014 18:45:00 +0200

A talk covering the basics of health, what you should be doing, and monitoring yourself at home. about this event: https://c3voc.de

USB tinkering for hackers and makers (emf2014)

Sun, 31 Aug 2014 15:00:00 +0200

We have written USBProxy, an open source software tool targeted at cheap hardware, such as the BeagleBone Black, which allows us to build, explore and break USB devices with simple software. I will show how we can use USBProxy to monitor and debug USB connections and how we can build a USB device in software using £35 of hardware. about this event: https://c3voc.de

How Life Reflects Numbers and Numbers Reflect Life (emf2014)

Sat, 30 Aug 2014 15:00:00 +0200

What's the world's favourite number? How do numbers unconsciously influence decision-making? And what has Eratosthenes got to do with spaceships? I'll answer all these questions and more in a one hour talk about my latest book. about this event: https://c3voc.de

Learning to Make – How I built an electromechanical display and taught myself basic electronics (emf2014)

Sat, 30 Aug 2014 19:45:00 +0200

Over the past 5 years since the final year of my undergraduate degree in 2009 I have been building a split-flap display (departure board) like you'd have seen at train stations and airports several years ago. This talk is about how I learnt almost everything I know through curiosity, trying, and making and iterating. about this event: https://c3voc.de

Mesh Your Brain (emf2014)

Sat, 30 Aug 2014 12:30:00 +0200

First, a quick overview of current hacker-friendly EEG systems. Then, a more in-depth look at how to hack together a robot army with the NeuroSky MindFlex and a Pinoccio microcontroller. about this event: https://c3voc.de

Open Space Projects (emf2014)

Sun, 31 Aug 2014 16:00:00 +0200

Inclusive and collaborative space projects for the techy, creative and curious and where to get started. about this event: https://c3voc.de

A look at Linux containers, what they do and what they don't (emf2014)

Sun, 31 Aug 2014 12:45:00 +0200

A deep dive into cgroups, unshare and other technologies in the Linux kernel used to create isolated containers (as used by Docker/lxc). about this event: https://c3voc.de

We don't need no stinkin' tension wrenches (emf2014)

Sat, 30 Aug 2014 16:45:00 +0200

You thought two hackers, one keyboard was bad? Just wait until you see what hollywood does to lockpickers. From no-contact lockpicking to real rocks in a fake keys, and from reasonably realistic heists to 'fuck it, we'll do it live', we'll overview the diverse manner in which lockpickers and lockpicking are portrayed in the media. about this event: https://c3voc.de

Beyond Materials: Invisibility and Perfect Imaging (emf2014)

Sat, 30 Aug 2014 15:45:00 +0200

I will talk about my PhD which is on using metamaterials and transformation optics to create invisibility cloaks and perfect Imaging devices. (Working invisibility cloak prototypes will not be provided) about this event: https://c3voc.de

A brief guide to dog behaviour and human interaction (emf2014)

Sun, 31 Aug 2014 12:30:00 +0200

A talk about dog behaviour and communication. This is especially targeted at anyone afraid of dogs but is relevant to anyone looking to understand the basics of canine communication and how it affects their interactions with humans and other creatures. about this event: https://c3voc.de

5 Scientific Tools That'll Blow Your Mind (emf2014)

Sat, 30 Aug 2014 16:00:00 +0200

Back in the days when I was a professional, card-carrying scientist, I was fascinated by the various tools that were being developed to measure very small things, very precisely. This talk covers some of the ones that really stuck, the ones that make you go "Really?? That's possible?" about this event: https://c3voc.de

Walt Disney World: This was supposed to be the future (emf2014)

Sat, 30 Aug 2014 14:00:00 +0200

A short talk on the legislative history of Disney World. It's not *quite* as boring as it sounds. about this event: https://c3voc.de

The digital democracy dream (emf2014)

Sat, 30 Aug 2014 11:45:00 +0200

A talk about the ways in which the internet is being used all over the world by activists and others to try and win freedoms, and improve democracy. about this event: https://c3voc.de

Evading Anti-virus (emf2014)

Sun, 31 Aug 2014 16:00:00 +0200

A exploration into current techniques malicious hackers use to evade anti-virus systems, presented in a way that less technical attendees can still enjoy whilst containing enough detail to keep more experienced viewers interested. about this event: https://c3voc.de

Machine learning and its use in creepy internet stalking (emf2014)

Sun, 31 Aug 2014 15:15:00 +0200

This presentation will discuss the extreme vulnerability that most people have to being stalked online and then focusing on a few examples of research going on in universities on network inference. The purpose of this talk is to shed light on the topic of social network inference and show yet another application of machine learning. about this event: https://c3voc.de

Reading Hitler's Mind: Bletchley Park and The First Computer (emf2014)

Sat, 30 Aug 2014 18:30:00 +0200

The world's first computer, Colossus, was commissioned in 1943 just a few minutes away from the EMF camp. It gave Bletchley Park unprecedented access to the Hitler's most private communications. How did it work? Why was it built? Who designed it? All this and several shameless plugs for The National Museum of Computing. about this event: https://c3voc.de

The Archers Avoider (emf2014)

Sat, 30 Aug 2014 14:00:00 +0200

At BBC Research and Development, part of our job is to think about and demonstrate what radio might be like in the future. To do this effectively, we need to be able to quickly and cheaply show how our ideas would work on physical radio sets, because this is still how the majority of people listen. This talk is about techniques we've developed to do this, from helping people to describe what they want from a radio, to filtering out bad ideas ("cat wigs"), to prototyping experiences on physical devices using a Raspberry Pi and web technologies. about this event: https://c3voc.de

Fuzzy Fuzzy Logic (emf2014)

Fri, 29 Aug 2014 19:00:00 +0200

Fuzzy logic is used widely in electronic, engineering and robotic applications for dealing with uncertainty. However it is ill suited for certain types of problems, in which it doesn't model uncertainty with enough accuracy. This talk will give an overview of the emerging field of type-2 fuzzy logic, and how and what you can do with it in the real world today. about this event: https://c3voc.de

Collaborative Science Fiction Film made at EMF (emf2014)

Sun, 31 Aug 2014 18:30:00 +0200

A showing of the science fiction film that has been filmed around the EMF site during the event, along with a Q&A with the team. about this event: https://c3voc.de

Hacking biometric security (emf2014)

Sun, 31 Aug 2014 16:45:00 +0200

A talk about how biometrics are not always secure, & the security systems are often poorly implemented. about this event: https://c3voc.de

DDD: Disney Driven Development (emf2014)

Sun, 31 Aug 2014 18:00:00 +0200

A talk about Disney's four keys (Safety, Courtesy, Efficiency, Show), giving examples of how Disney uses them in building their parks, and how we apply them to web development. about this event: https://c3voc.de

Surreal Numbers And Mathematical Games (emf2014)

Sun, 31 Aug 2014 19:15:00 +0200

John Conway created/discovered the Surreal Numbers (along with the game of life cellular automaton) while pondering the game of Go. They include all the reals and rationals you probably know but also infinite and infinitesimal values, lots of them. Combinatorial Game Theory is an additive theory of games with perfect information and no chance element. Fortunately, though it touches on things at the core of Mathematics, it requires almost no other concepts to understand it It turns out some Games are Numbers, however any Game that is interesting enough to be worth playing is not a Number. We need a new language to describe them (whence Uppitiness, Atomic Weight and Chilling). We will find out how to play the Nim perfectly, realise Dots and Boxes has more to it than you thought, play Col, Snort and Cutcake, understand the Tweedledee and Tweedledum argument, learn Hackenbush and maybe begin to analyse Go and chess end games. about this event: https://c3voc.de

Materials and Makers (emf2014)

Sat, 30 Aug 2014 12:00:00 +0200

3D printing is opening up new opportunities to make complex or one-off objects. But makers need to think about materials: What materials can be used, how processing affects the properties, and the post-processing of fabricated objects. about this event: https://c3voc.de

Perfect session management in privacy-sensitive web applications (emf2014)

Sat, 30 Aug 2014 11:00:00 +0200

Web applications that provide sensitive data must have perfect session management. This talk will show what problems and solutions there are using web standards that work anywhere. Did you know that many frameworks are doing it wrong? about this event: https://c3voc.de

How we spent a year building a spaceship simulator in a caravan (emf2014)

Sat, 30 Aug 2014 17:45:00 +0200

A year ago we bought an old caravan and converted it into a 3 player starship disaster simulator called the "LHS Bikeshed". This is the story of how we've done it and not torn out all of our hair in the process. about this event: https://c3voc.de

Q&A on Physical Security with the worlds greatest lock hackers (emf2014)

Sun, 31 Aug 2014 18:30:00 +0200

Join Jos Weyers, Warren Rockley, Nigel Tolley and John Naughton as they answer your questions on anything lock and physical security related. about this event: https://c3voc.de

How to stand for Parliament (emf2014)

Sat, 30 Aug 2014 17:15:00 +0200

I'm a geek standing as an MP next year, and I'm learning how it all works as I go along, blogging and publishing open data wherever possible. I'll talk all about what I've found out so far, what's left to learn, and how easy it really is to stand up for a better future. about this event: https://c3voc.de

The softprinter (emf2014)

Sat, 30 Aug 2014 14:30:00 +0200

A talk about the OpenKnit project, and a demonstration of a working prototype. about this event: https://c3voc.de

Trials and tribulations of a badge project (emf2014)

Sun, 31 Aug 2014 17:00:00 +0200

How TiLDA MKe went from a list of Ideas the week before EMW, to epaper and finally the to the badge around your neck. With all the bumps along the way. about this event: https://c3voc.de

Games Minus Industry (emf2014)

Fri, 29 Aug 2014 16:00:00 +0200

Videogames mash all media together with system design, making them inherently flexible in a way nothing else has ever been. Unfortunately, they're also tragically limited by over-dependence on industry and commercially appealing genres. I'll use mountain biking to unpick Super Hexagon, and then the pieces of both to unpick the divergence between the innate weirdness of videogames and the games industry's entrenched resistance to that. about this event: https://c3voc.de

The Security of the Internet of Things (emf2014)

Fri, 29 Aug 2014 15:45:00 +0200

A talk about the current state of security in internet-enabled embedded devices with a variety of sensors and actuators, from curtains through home automation systems to full-scale power plants. With plenty of actual examples. about this event: https://c3voc.de

The Making Of The·Grid (emf2014)

Fri, 29 Aug 2014 17:00:00 +0200

We'll talk about the planning, design and construction of The·Grid, a large light and sound installation at EMF. We'll share a few stories from its development and talk about how you can write your own code to run on it, with examples. about this event: https://c3voc.de

BaseBot (emf2014)

Fri, 29 Aug 2014 15:15:00 +0200

The BaseBot is a set of laser cut templates, circuit boards and easily sourced standard hardware which acts as a base for experimentation and education with mobile physical computing. about this event: https://c3voc.de

How buying multiple train tickets can be much cheaper than one (emf2014)

Fri, 29 Aug 2014 18:30:00 +0200

Due to the horrendous complexity of the British railway system, it is possible to buy more than one train ticket for a journey - for exactly the same trains - and save upwards of 70% on the cost of the ticket. Hear how this works and the site I built that helps you find these savings. about this event: https://c3voc.de

Hacking the ZX Spectrum (emf2014)

Fri, 29 Aug 2014 18:00:00 +0200

Ben Heck, famed retro console modder and youtube star, will be talking about how he recently miniaturised a ZX Spectrum to make it portable and playable on-the-go. He’ll also be talking about some of his other mods that have been widely publicised over the years. about this event: https://c3voc.de

How to be an Effective Terrorist: fear and loathing in cyber security (emf2014)

Fri, 29 Aug 2014 17:00:00 +0200

Dr Jessica Barker is a security consultant often present in the media helping people to understand the threats they are exposed to. She’ll be talking about how we should be explaining risks rather than hiding them from users, allowing people to effectively manage their online activity and protect themselves. about this event: https://c3voc.de

Not Safe For Work: Industrial Control System Security (emf2014)

Fri, 29 Aug 2014 16:00:00 +0200

Infrastructure supports people, and it needs maintained and secured. Come learn about the challenges of securing control systems, and how you can help no matter what your background. You will laugh and you will cry, and we'll give you the whole seat, but all you'll need is THE EDGE. about this event: https://c3voc.de

Cryptris (emf2014)

Fri, 29 Aug 2014 16:45:00 +0200

Developed alongside PhD research into a new cryptographic protocol, Cryptris is a game that seeks to explain to the public the principles of asymmetric cryptography. The game explains the concepts of added randomness, cyclical operations and addition graphically to show how keys unlock messages. about this event: https://c3voc.de

Can open data help save the world? (emf2014)

Fri, 29 Aug 2014 17:15:00 +0200

Open data is a force that will change the world – we hope for the better. It's hard to imagine how we might scale society without it. I'll talk about the Open Data Institute's experiences at the front-line over the last 2 years, and what we think might happen next (I run the ODI). about this event: https://c3voc.de

Von L2 auf EVPN-VXLAN in 4 Jahren (froscon2024)

Sat, 17 Aug 2024 16:30:00 +0200

2020 habe ich darüber berichtet, wie wir uns ein seit 15 Jahren kontinuierlich gewachsenes Data-Center-Netzwerk ohne Vendor Lockin vorstellen. Dieses Jahr berichte ich darüber wie dieser Übergang abgelaufen ist: von strategischen Überlegungen, konkreten Konfigurationsansätzen und der Gestaltung eines unterbrechungsfreien Rollouts. Nach einigen Zwischenschritten haben wir Mitte 2024 den lang erwarteten Umstieg eines reinen Layer-2-Netzwerks auf ein EVPN-BGP-VXLAN-basiertes System mit "Routing-to-the-Host" geschafft. Alle Migrationsschritte verliefen komplett online und wir setzen bewusst auf die maximal mögliche Menge an Open-Source-Komponenten. Im Vortrag schauen wir zurück auf die bisherige Entwicklung und die Anforderungen unseres Netzes, in dem Kundendaten, Storage, Management und andere Funktionen ihren Platz haben. Dabei kommen FRR und NixOS als tragende Bauteile zum Einsatz, ebenso wie Whitelabel-Switches. Beweisfotos von hässlichen und hübschen Kabel-Arrangements werden genauso geliefert wie lustige und frustrierende Anekdoten aus dem Labor, der Migration und dem Live-Betrieb. about this event: https://programm.froscon.org/2024/events/3035.html

What’s new in Keycloak, the open source IAM? (froscon2024)

Sun, 18 Aug 2024 14:00:00 +0200

Authentication and authorization are keys to automation and new business capabilities. All of this requires APIs and services that an Identity and Access Management (IAM) solution can provide. After presenting some highlights of the latest Keycloak version, this talk will focus on changes to OpenID Connect and Keycloak's capabilities around scalability, high availability and customizability via declarative user profiles. Additionally, features that are currently under development and planned for one of the next Keycloak versions will be presented. about this event: https://programm.froscon.org/2024/events/3066.html

Abstimmungsergebnisse im Europäischen Parlament - einfach und durchsuchbar (froscon2024)

Sun, 18 Aug 2024 11:15:00 +0200

Wir stellen HowTheyVote.eu vor, eine quelloffene Plattform, auf der wir automatisiert Abstimmungsdaten aus dem Europäischen Parlament sammeln, sie mit weiteren Informationen kombinieren, übersichtlich darstellen und durchsuchbar machen. Dabei starten wir ausgehend von den verschiedenen offiziellen Datenquellen. Wir demonstrieren einige Fallstricke in Scraping-Projekten und im Umgang mit inkonsistenten Daten und ihrer Verknüpfung. Der Vortrag richtet sich an alle, die Interesse an der Arbeit des Europäischen Parlaments, an Web-Scraping-Projekten oder offenen Daten haben. Das Europäische Parlament ist die einzige unmittelbar demokratisch legitimierte der drei großen, gesetzgebenden EU-Institutionen. Im Juli wird das 10. Europäische Parlament mit 720 Abgeordneten zusammenkommen, die gemeinsam über 440 Millionen EU-Bürger*innen vertreten. Als Bürger*in selbst zu überprüfen, wie gut diese Vertretung klappt, ist leider schwierig: Zwar werden die Ergebnisse meistens inklusive Abstimmungsverhalten der einzelnen Abgeordneten veröffentlicht, aber sie sind schwer zu finden und nachzuvollziehen. Im Vortrag gehen wir kurz auf die grundlegende Rolle des Europäischen Parlaments im Europäischen Gesetzgebungsverfahren ein und schauen uns an, wie die veröffentlichten Abstimmungsdaten des Parlaments zu lesen sind. Danach geben wir einen Überblick, wie unsere automatisierte Sammlung und Aufbereitung technisch funktioniert. Dabei zeichnen wir nach, was wir seit unserem ersten Prototyp aus 2021 gelernt haben und versuchen Strategien für den Umgang mit unzuverlässigen Datenquellen an die Hand zu geben. Wir schließen mit einigen Ideen, wie unsere unter einer offenen Lizenz gesammelten Daten genutzt werden können. about this event: https://programm.froscon.org/2024/events/3045.html

Renaissance of Terminal User Interfaces with Rust (froscon2024)

Sun, 18 Aug 2024 11:15:00 +0200

Terminal user interfaces are not dead, on the contrary; they are on the verge of re-birth with the power of Rust. Join us as we delve into cooking up terminal user interfaces with Ratatui, pushing the boundaries of the terminal experience. For every programmer the terminal is very important when it comes to productivity and efficiency. Using text-based user interfaces in the terminal is one of the ways of truly taking advantage of this. And what’s better than a highly performant systems programming language such as Rust for building TUIs? This talk aims to show how the TX (terminal experience) can be improved with the TUI tools written in Rust and gives a brief introduction to how to build TUIs using the Ratatui library. The following questions will be answered: - What is a terminal user interface (TUI) and why is it used? - How to build TUIs in Rust? - What can we build with TUIs? (example tools and workflows) - What is the future of TUIs? (the terminal is the future!) Additionally: - Why shouldn’t we build every app with electron? (i.e. what are the problems with the GUI applications?) - How common are TUIs? (statistics and TUI alternatives to GUIs) - How powerful is Rust when it comes to building TUIs? about this event: https://programm.froscon.org/2024/events/3147.html

NeoVim - jenseits von q! (froscon2024)

Sun, 18 Aug 2024 10:00:00 +0200

(Neo)Vim sieht auf den ersten Blick immer etwas einfach aus. Doch es steckt ein moderner Editor dahinter! Im Vortrag schauen wir kurz in die Geschichte von Vi, Vim und Co.. Dort gibt es einige Überraschungen! Außerdem gibt es einen Überblick über die besten Features von NeoVim, wie zum Beispiel LSP Client (Autocompletion, Refactorings…), die Lua API oder das Plugin Ökosystem. (Neo)Vim sieht auf den ersten Blick immer etwas einfach aus. Doch es steckt ein moderner Editor dahinter! Die Geschichte von Vi, Vim und NeoVim reicht schon circa 50 Jahre zurück. Wir drehen eine kurze Runde durch die Vergangenheit und schauen uns an, wo das alles herkommt. Dabei wird es einige Überraschungen geben! Außerdem stellt NeoVim moderne Editor-Features bereit. Einige davon sehen wir uns an: - Language Server Protocol Client (für Autocompletion, Refactorings…) - Diagnostics API - Lua API (und die init.lua) - Tree sitter Syntax Parser - Terminal Emulator - Plugin-Ökosystem Es gibt passend zum Vortrag noch einen NeoVim Konfig-Workshop: https://programm.froscon.org/2024/events/3134.html ! about this event: https://programm.froscon.org/2024/events/3132.html

Was gibt's Neues in Bareos? (froscon2024)

Sun, 18 Aug 2024 16:30:00 +0200

Nach der obligatorischen Einführung geht der Vortrag auf die verschiedenen Neuerungen in Bareos 23 ein. Hierbei soll es insbesondere um die zum Teil sehr deutlichen Performance-Verbesserungen gehen, die wir erreichen konnten. Im Anschluss gibt es noch einen Einblick in die aktuelle Entwicklung neuer Backends für deduplizierende Speichersysteme und die flexible Objektspeicher-Anbindung, die Voraussichtlich mit Bareos 24 veröffentlicht werden. Als Backup-Software steht Bareos vor der Herausforderung, dass immer mehr Daten von immer schnelleren Speichersystemen über immer schnellere Netzwerke gesichert werden müssen. Hier hat Bareos 23 durch verschiedene Verbesserungen viele der historisch bedingten Defizite aufgeholt. Der Vortrag geht u.a. darauf ein wie der File Daemon nun Aufgaben parallel verarbeitet und an welchen Stellen es immer noch an verschiedenen Stellen Potenzial für weitere Verbesserungen gibt. Es gibt seit etlichen Jahren den Wunsch deduplizieren zu können. Hier entwickeln wir im Moment ein modernisiertes Speicherformat, dass es erlaubt die gesichertern Daten storageseitig zu deduplizieren. Darüber hinaus arbeiten wir daran das S3-Backend, dass aktuell auf der in die Jahre gekommenen libdroplet basiert, durch ein neues und deutlich flexibleres Backend zu ersetzen. about this event: https://programm.froscon.org/2024/events/3104.html

Uno, dos, tres, Quarto! (froscon2024)

Sun, 18 Aug 2024 10:00:00 +0200

Quarto ist ein Framework zur Erstellung von Dokumenten in verschiedenen Dateiformaten. Da diese Dokumente in Markdown geschrieben sind und ausführbare Befehle im Quellcode enthalten können, eignen sie sich hervorragend für die Erstellung von Tutorials und Datenberichten. Außerdem können solche Dokumente mit Hilfe von Git vernünftig versioniert werden. Also adiós Word und willkommen in der Quarto-Welt! as Framework Quarto hat in den letzten Jahren in den Bereichen Data Science und Forschung an Popularität gewonnen und steht in starker Konkurrenz zu seinem Vorgänger R Markdown. Quarto ermöglicht es, aus einer einzigen Quelle mehrere Dokumentformate wie docx, odt oder pdf und sogar ganze Homepages zu erzeugen. Die Inhalte werden in Markdown-Dokumenten geschrieben und folgen damit den FAIR-Prinzipien. Dadurch können die Dokumente wie Quellcode behandelt und ihre Änderungen mit einem Versionskontrollsystem wie Git verwaltet werden. Wie in R Markdown können Quarto-Dokumente Codeblöcke (so genannte Chunks) enthalten, die vor der Umwandlung (Rendering) ausgeführt werden können. Daher eignet sich Quarto sowohl für das Schreiben von Tutorials als auch für Datenreports. Im Gegensatz zu R Markdown kann Quarto unabhängig von R auf Jupyter Notebooks ausgeführt werden. Dies macht Quarto auch für Entwickler interessant, die mit Python arbeiten. Darüber hinaus können durch Erweiterungen (Extensions) personalisierte Layouts für das eigene Branding erstellt werden. Dieser Vortrag stellt verschiedene Möglichkeiten und Szenarien vor, in denen Quarto eingesetzt werden kann und bietet Raum für die Diskussion weiterer Ansätze. about this event: https://programm.froscon.org/2024/events/3146.html

The Government and the Art of Infrastructure Maintenance (froscon2024)

Sun, 18 Aug 2024 14:00:00 +0200

Hint: This talk is going to be in German. The Sovereign Tech Fund is a state-funded organization in Germany which is strengthening the open source ecosystem in the public interest. In this talk we share insights into our work and challenges, including findings from our recent Open Source maintainer survey. Join us in taking a look at how the Sovereign Tech Fund, a state-funded organization in Germany, has been developing ways to strengthen and support the free and open source ecosystem in the public interest. This ecosystem underpins the digital infrastructure, in particular the software components and tools, on which governments, private companies, and individuals rely. But what does it mean to strengthen this ecosystem? In this session we’ll look at the different ways STF is putting public money to work for this mission. Some of the issues STF is working on include: a) Limited funding for long-term maintenance and security work b) Fragmented career and employment prospects for project maintainers c) Growing the pool of open source maintainers and contributors We’ll include lessons from the first two years of our existence, some insights from our survey of open source maintainers, as well some ideas on how all the different parts in the FOSS landscape can work together for a more resilient and fair system. This is a work in progress, but we’re trying to ensure the software our societies depend on is sustainable long-term. about this event: https://programm.froscon.org/2024/events/3149.html

Shutdown (froscon2024)

Sun, 18 Aug 2024 17:30:00 +0200

about this event: https://programm.froscon.org/2024/events/3162.html

ThinkPads (froscon2024)

Sun, 18 Aug 2024 15:15:00 +0200

Besonders in Business- und Hacker:innen-Kreisen trifft man sie häufig an: ThinkPads. Doch woher kommt die lang anhaltende Begeisterung? Was macht die Geräte aus und welche Implikationen haben sie auf unsere Nerdkultur? In diesem Vortrag begeben wir uns auf eine kleine Geschichtsreise um unter anderem diese Fragen zu beantworten. Nicht nur im Business-Umfeld sind ThinkPads begehrt - auch in Hackspaces sind sie häufig anzutreffen und führen dort, meistens mit quelloffener Software betankt und zahlreichen Stickern beklebt, ein zweites Leben. Dieser Trend ist schon lange kein Geheimnis mehr und Bestandteil der Popkultur geworden - sogar in Filmen und Serien wird er aufgegriffen. Doch warum setzen Nerds und Nerdettes immer noch auf die über 30 Jahre alte Marke? ThinkPads stehen seit jeher für Langlebigkeit, Qualität und Erweiterbarkeit - doch gilt das immer noch in Zeiten von verlötetem RAM und dünner werdenden Tastaturen? Die IBM- und Lenovo-Geschichte war schon immer bewegt und hat zahlreiche Exoten (Notebook mit zwei Bildschirmen, Geräte mit PowerPC-Prozessor, ausklappbare Tastaturen) zum Vorschein gebracht, die es wert sind besprochen zu werden. In diesem Vortrag begeben wir uns in einen nischigen Kaninchenbau, der neben spannender Geschichte auch zahlreiche Trivia und spannende Menschen beinhaltet. about this event: https://programm.froscon.org/2024/events/3141.html

Floralpaka (jh24)

Sun, 21 Jul 2024 13:54:00 +0200

about this event: https://c3voc.de

WLAN mit ESP-NOW (froscon2024)

Sun, 18 Aug 2024 16:30:00 +0200

ESP-NOW ist ein drahtloses Kommunikationsprotokoll, welches die Firma Expressif für ihre eigenen WLAN-Chips entwickelt hat. Das schlanke Protokoll ermöglicht einen schnellen und ressourcenschonenden Datenverkehr zwischen den Netzwerkteilnehmern. Gerade diese Eigenschaften macht diese Technologie für batteriebetriebene Geräte interessant. Das Vernetzen von Geräten untereinander ist heute quasi Standard. In den allermeisten Fällen wird dabei TCP als Netzwerkprotokoll verwendet. Um aber z.B. via TCP eine Verbindung aufbauen und Daten austauschen zu können, sind eine Reihe von Schritten notwendig, welche, je nach Gegebenheiten, lange dauern und unter Umständen auch rechenintensiv sind. Erfolgt dann noch die Übertragung der Daten kabellos, merkt man schnell, wie stromhungrig Funktechnik sein kann. Diese Dinge erschweren die Entwicklung batteriebetriebener WLAN-Geräte erheblich. Im Rahmen dieses Vortrages wird erklärt, warum dies so ist und ESP-NOW wird, als alternatives Netzwerkprotokoll, dem gegenübergestellt. Schnell wird klar werden, warum ESP-NOW eine echte Alternative für den kabellosen Datenaustausch batteriebetriebener Geräte ist. Um sich nicht ganz in langweiligen theoretischen Tiefen zu verlieren, erfolgt ein Teil der Vergleiche mit Hilfe von konkret gemessenen Kennzahlen aus einem Sensor-Projekt des Autors mit verschiedenen Evolutionsstufen. about this event: https://programm.froscon.org/2024/events/3047.html

Zugänglichkeit für alle ist mehr als Barrierefreiheit! (froscon2024)

Sun, 18 Aug 2024 10:00:00 +0200

Digitale Barrierefreiheit ist gescheitert, sagt Domingos de Oliveira, einer der profiliertesten Experten auf diesem Gebiet. Recht hat er! Deswegen sollten die bekannten Fehler nicht wiederholt werden, wenn statt Webseiten Software zugänglicher gestaltet wird. Das gängige, WCAG-basierte Verständnis von Barrierefreiheit wird kurz vorgestellt und seine prinzipiellen Schwäche aufgezeigt: das Denken in einzelnen Behinderungen. Zugänglichkeit für alle kann so nicht erreicht werden. Eine Alternative bietet der Usability-Ansatz der ISO-Standards. Die elf zugrunde liegenden Prinzipien werden eingeführt, wesentliche Accessibility-Standards benannt und die Leitlinien für die Zugänglichkeit von Software (ISO 9241-171) vorgestellt. So ist ein normenkonformer Ansatz für die Entwicklung zugänglicher, ergonomischer Software möglich. about this event: https://programm.froscon.org/2024/events/3048.html

Making Open Source education an integral part of the curriculum in Computer Science programs (froscon2024)

Sat, 17 Aug 2024 17:45:00 +0200

The students of today are the decision-makers of tomorrow. Hence, professors in computer science and connected disciplines should raise awareness for topics such as digital sovereignty or free and open source software. This talk reflects on attempts to include these aspects in the curriculum - not only by specific lectures but also by motivating students to make the results of their projects and theses available to the general public under open source licenses. The talk showcases some "lighthouse projects" but also discusses challenges - especially when it comes to maintaining work once it has been graded. Vendors of proprietary software invest substantial time and money to win teachers and professors as lobbyists for their products. But how can members of the free and open source communities counter these attempts? And how can we provide students with the ability to make fair and well-balanced decisions about licenses and technology later on? While many computer science students use open source software during their studies and later at work, important basics about licensing or open source communities are often not part of the curriculum. However, since the students of today are often the decision makers of tomorrow it seems crucial to enable students to make well-informed decisions - not only regarding technological aspects but also incorporating ethical issues and sociological goals connected to digital sovereignty. I have spent more than 15 years with teaching activities at various universities. During this time, I made several attempts to raise open source awareness and achieved remarkable progress in making results of student projects available as open source software to the general public. This talk reflects on possible strategies with their pros and cons. Furthermore, it discusses challenges that often arise - such as selecting proper technologies or motivating students to continue their work after their project has been graded. about this event: https://programm.froscon.org/2024/events/3130.html

In Rust Radikal Refactorn (froscon2024)

Sun, 18 Aug 2024 14:00:00 +0200

Unsere jahrelange Erfahrung mit Rust bei OpenTalk führte zu einer radikalen Umgestaltung unserer Codebasis. Unser Vortrag teilt Einblicke in radikales Refactoring mit Rust, einschließlich Unterstützung, Fallstricken und bewährten Praktiken für Produktivität und Wissenstransfer im Team. Durch die jahrelange Nutzung von Rust bei OpenTalk war es unvermeidbar, unsere Codebasis von Grund auf radikal umzugestalten. Dabei war es besonders wichtig, sicherzustellen, dass das Produkt keine Regressionen erleidet. In diesem Vortrag möchten wir euch auf diese Reise mitnehmen und unsere Erkenntnisse teilen: - Was wir unter dem Begriff radikales Refactoring verstehen. - Wie Rust uns beim radikalen Refactoring unterstützt hat. - Welche Fallstricke wir begegnet sind. - Die wichtigsten Do's and Don'ts in Bezug auf Produktivität, Komplexität und Nutzen. - Wissen und Aufgaben an das Team übertragen. - Wie man Aufgaben klein verteilt. about this event: https://programm.froscon.org/2024/events/3105.html

Sovereign Cloud Stack - One platform — standardized, built and operated by many. (froscon2024)

Sun, 18 Aug 2024 11:15:00 +0200

Eine Projektvorstellung des Sovereign Cloud Stack mit einem Schwerpunkt auf der Zusammenarbeit mit der öffentlichen Hand, einer Menge Lessons-Learned aus den letzten drei Jahren und einem Ausblick auf die spannende Zeit, die jetzt nach der Förderung ansteht. Das Sovereign Cloud Stack-Projekt startete vor drei Jahren mit dem Ziel, Cloud-Infrastrukturen und -Dienste zu standardisieren und die Art und Weise, wie Cloud-Anwendungen betrieben werden. "Eine Plattform standardisiert, gebaut und betrieben von vielen" stellt das Leitmotiv des Projekts dar. Die drei Säulen des SCS Projekts sind zertifizierte Standards, eine modulare Open-Source-Referenzimplementierung und offene Betriebsmodelle. Insbesondere vor dem Hintergrund der zertifizierbaren Standards ist eine Kooperation mit der öffentlichen Hand von Bedeutung und notwendig. Das SCS-Projekt wird seit Sommer 2021 vom Bundesministerium für Wirtschaft und Klimaschutz gefördert. Die Förderung endet diesen September, und wir möchten einen Überblick geben, was wir bisher erreicht haben, welchen Einfluss wir auf unsere umliegenden Ökosysteme hatten und erläutern, warum dieses Projekt fortgesetzt werden muss und wie die Hebelwirkung in Zukunft aussehen wird. SCS wird in der 'Deutschen Verwaltungscloud Strategie' (DVC) erwähnt und arbeitet auf politischer Ebene daran, Open Source und offene Standards auf den Tisch zu bringen. An verschiedenen Stellen gibt es in der öffentlichen Hand Bestrebungen auf Open-Source-Technologie zu setzen: Mit der Referenzimplementierung des SCS wird für den Betrieb von Cloud-Infrastruktur ein schlüsselfertiger Open-Source-Stack, finanziert aus öffentlichen Geldern, zur Verfügung gestellt. Public Money, Public Code at its best. Insbesondere wird der Vortrag auf die Initiativen und Diskussionen in den Upstream-Communitys (wie OpenStack, Cluster-API, OSISM, …) eingehen, die wir initiiert und durchgeführt haben, sowie auf die Änderungen und Ergänzungen, die wir initiiert haben, eingehen. Der Vortrag wird in ehrlicher Weise darlegen, wo und wie wir unsere Upstream-Bemühungen unter- oder überschätzt haben, was wir daraus gelernt haben und wie wir es in Zukunft angehen wollen. Außerdem wird der Vortrag auf die Erfolge und auch Schwierigkeiten bei der Adaption des Sovereign Cloud Stack seitens Cloudanbietern und Dienstleistern der öffentlichen Hand eingehen. Der Vortrag wird einen Rückblick bieten, um dem Publikum ein besseres Verständnis dafür zu vermitteln, was in Zukunft notwendig ist, um unsere Mission erfolgreich zu verwirklichen. about this event: https://programm.froscon.org/2024/events/3151.html

Text-zu-Bild-KI “Stable Diffusion” (froscon2024)

Sun, 18 Aug 2024 16:30:00 +0200

“Stable Diffusion" generiert Bilder aus Texteingaben und ist seit Ende August 2022 für alle quelloffen verfügbar. Stehen wir vor einer Revolution der Bilder und dem „Ende der Kunst“? Wir diskutieren Funktionsweise und Ökosystem, Copyright, soziale und gesellschaftliche Auswirkungen sowie die Kunst des “Prompting”. Der Vortrag soll einen Einstieg und die nötigen Hinweise geben, um selbst Bilder generieren zu können. Themen sind Funktionsweise, Varianten wie Text-to-Image, Image-to-Image und ControlNet, Auswirkung von Modellen und Seeds sowie das Prompting. Es geht auch um das rasant wachsende Ökosystem und die möglichen Einsatzmöglichkeiten. Die aktuellen Entwicklungen und zu erwartenden Neuerungen sowie gesellschaftliche Auswirkungen sind weitere Themen. Um direkt selbst einsteigen zu können, zeige ich die Nutzung von stable horde (crowdsourced distributed computing) about this event: https://programm.froscon.org/2024/events/3090.html

eSIM management on Qualcomm phones (froscon2024)

Sun, 18 Aug 2024 15:15:00 +0200

In recent years phones have started getting an eSIM chip built-in to the phone which is a modern replacement for a physical SIM card you slot into the device. Unfortunately until recently managing these eSIMs (installing a SIM card from your operator, enabling or disabling the card) was limited to proprietary apps shipped with Android. Let's talk about how eSIMs work on a Qualcomm phone using 100% open-source user space and mainline Linux kernel, and what QMI and QRTR are doing in this stack. about this event: https://programm.froscon.org/2024/events/3079.html

High performance Serverless Java on AWS (froscon2024)

Sun, 18 Aug 2024 11:15:00 +0200

Java is for many years one of the most popular programming languages, but it used to have hard times in the Serverless community. Java is known for its high cold start times and high memory footprint, comparing to other programming languages like Node.js and Python. In this talk I'll look at the general best practices and techniques we can use to decrease memory consumption, cold start times for Java Serverless development on AWS including GraalVM (Native Image) and AWS own offering SnapStart based on Firecracker microVM snapshot and restore and CRaC (Coordinated Restore at Checkpoint) runtime hooks. I'll also provide a lot of benchmarking on Lambda functions trying out various deployment package sizes, Lambda memory settings, Java compilation options and HTTP (a)synchronous clients and measure their impact on cold and warm start times. Java is for many years one of the most popular programming languages, but it used to have hard times in the Serverless community. Java is known for its high cold start times and high memory footprint, comparing to other programming languages like Node.js and Python. In this talk I'll look at the general best practices and techniques we can use to decrease memory consumption, cold start times for Java Serverless development on AWS including GraalVM (Native Image) and AWS own offering SnapStart based on Firecracker microVM snapshot and restore and CRaC (Coordinated Restore at Checkpoint) runtime hooks. I'll also provide a lot of benchmarking on Lambda functions trying out various deployment package sizes, Lambda memory settings, Java compilation options and HTTP (a)synchronous clients and measure their impact on cold and warm start times. about this event: https://programm.froscon.org/2024/events/3025.html

Parship, Tinder, Animina und Co. (froscon2024)

Sun, 18 Aug 2024 10:00:00 +0200

Über 39% der Deutschen nutzen Online-Dating, und 25% der Paare finden sich dort. Doch die meisten Plattformen setzen auf Tricks und suboptimale Algorithmen, um Nutzer zu binden/melken. Dieser Vortrag beleuchtet die Technik dahinter, die Erfolgschancen und Strategien, sowie Fragen wie: Was sind "red flags" und das Fünf-Faktoren-Modell (FFM)? Kann man mit kostenlosen Accounts erfolgreich sein (Frau ja, Mann nein)? Ist Online-Dating unromantisch? Für Technikinteressierte gibt es Tipps zu Automatisierung, ChatGPT und API-Nutzung. 39% der deutschen Internetnutzer haben oder hatten einen Account auf einer Online-Dating-Plattform. Mindestens 25% aller deutschen Paare haben sich auf einer solchen Plattform kennengelernt. Online-Plattformen verdienen das meiste Geld mit Nutzern, die erfolglos suchen. Entsprechend sind fast alle Algorithmen darauf ausgelegt, Nutzer so lange wie möglich zu binden bzw. zu melken. Dieser Vortrag gibt einen kurzen initialen Überblick über die existierenden Plattformen auf dem deutschen Markt und taucht danach direkt in die verwendete Technik und die wahrscheinlich eingesetzten Algorithmen ein. Was hat es mit dem Fünf-Faktoren-Modell (FFM) auf sich? Was sind "red flags" und "green flags"? Gibt es eine optimale Online-Dating-Plattform für mich? Wie kann man durch den Einsatz von Geld seine Chancen erhöhen? Kann man ohne bezahlte Accounts überhaupt Erfolg haben (Spoiler: auf den meisten Plattformen ist das fast unmöglich)? Wie hoch ist der Anteil der inaktiven Profile (Spoiler: gigantisch)? Was ist eine erfolgversprechende Taktik beim Online-Dating? Ist das alles nicht total unromantisch? Gibt es Open-Source-Alternativen? Und für die technisch interessierten unter den Suchenden gehen wir natürlich auch auf Themen wie "Was kann ich automatisieren?", "Kann mir ChatGPT helfen (Spoiler: ja)?", "Kann ich mir kostenlose Accounts erhacken? (Spoiler: teilweise)" und "Welche Plattformen bieten APIs an?" ein. about this event: https://programm.froscon.org/2024/events/3060.html

Boring infrastructure: Building a secure signing environment (froscon2024)

Sun, 18 Aug 2024 15:15:00 +0200

Many Linux distributions rely on cryptographic signatures for their packages and release artifacts. However, most of the used signing solutions either do not rely on hardware backed private key material or are run in untrusted environments. This presentation will provide a general overview of the [Signstar](https://gitlab.archlinux.org/archlinux/signstar/) project, which is currently under development by Arch Linux to provide a generic signing solution based on a Hardware Security Module (HSM). To improve build automation and general supply chain security for Arch Linux, some of its developers have started to conceptualize and work on a generic, central signing solution: [Signstar](https://gitlab.archlinux.org/archlinux/signstar/). In this context, related work has been evaluated for adoption, but it soon became clear, that to meet the distribution's requirements a custom solution would be implemented. For transparency and auditability reasons Nitrokey's NetHSM has been chosen as Hardware Security Module (HSM). Developers are actively working on a high-level Rust library and CLI to interface with the device over network. In this presentation I will introduce the viewer to some of Arch Linux's relevant history and requirements, the evaluated architecture and setup. Together we will have a look at Signstar's threat model, its design for minimizing credentials exposure of the HSM, as well as its integration with the OpenPGP ecosystem. Additionally, we will explore avenues for future work on other generic cryptographic operations in the context of X.509, SSH and Secure Boot. about this event: https://programm.froscon.org/2024/events/3139.html

Eine mini SPS für die Heimautomatisierung (froscon2024)

Sun, 18 Aug 2024 16:30:00 +0200

In diesem Vortrag stelle ich eine von mir entwicklete semiprofessionelle Speicherprogrammierbare Steuerung vor. Jeder kann diese Steuerung selber aufbauen und nach seinen Wünschen anpassen. Sie ist bereits in mehreren Projekten im Produktiveinsatz. Kann direkt an das Raspberry PI angeschlossen werden. Die Steuerung lässt sich in ein Standardgehäuse einbauen. In diesem Vortrag werde ich das von mir entwickelte Jackalope etwas genauer vorstellen. Es handelt sich um eine semiprofessionelle Speicherprogrammierbare Steuerung die frei programmiert werden kann. Der Anschluss erfolgt über den Seriellen Port direkt an das Raspberry PI auch die Stromversorgung erfolgt über das RPI oder das RPI wird über die Steuerung versorgt.
Alternativ lässt sich die Steuerung über einen seriellen Port direkt an jeden PC anschliessen.
Es stehen eine grosse Menge an Anschlüssen zur Verfügung:

6x Digital Ausgang über Relaiskontakt (Schließer 60 Volt 1A)
8x Digital Eingang über Optokoppler 3-30 Volt
2x Analog Eingang mit Spannungsvorteiler (Wandler 1 und 2)
2x Analog Eingang über Operationsverstärker (Verstärkung 1-40 über Poti einstellbar) (Wandler 3 und 4)
1x Analog Eingang über Messverstärker AD620
2x Analog Ausgang 0-5 Volt mit 12 Bit Auflösung
433 MHz Funk zum schalten von Funksteckdosen (Intertechno)
Kopplung von bis zu 60 dieser Steuerungen über Funk

Die Firmware ist OpenSource, fertig ausentwickelt und im Produktiveinsatz getestet! Weitere Informationen, Fotos und die Aufbauanleitung findet ihr auf der Projekthomepage: Jackalope SPS Projekt Homepage about this event: https://programm.froscon.org/2024/events/3211.html

Manjaro's Weg in die Zukunft (froscon2024)

Sun, 18 Aug 2024 16:30:00 +0200

Ein kurzer Überblick zu Manjaro als Distribution basierend auf Arch Linux und unsere Pläne für die Zukunft. Manjaro ist eine bekannte und viel genutzte Linux Distribution basierend auf Arch Linux. In den vergangen Monaten gab es tiefgreifende Veränderungen über die dieser Vortrag einen Überblick gibt sowie unsere Pläne für die nächsten Jahre darlegt. Hierbei wird sowohl auf technische Veränderungen und Projekte als auch auf zukünftige Open Source Produkte und Service im Umfeld von Manjaro eingegangen. about this event: https://programm.froscon.org/2024/events/3210.html

alpaka.problem (jh24)

Sun, 21 Jul 2024 13:44:00 +0200

about this event: https://c3voc.de

Erfolgreiche Phishing Awareness Projekte mit Gophish (froscon2024)

Sun, 18 Aug 2024 11:15:00 +0200

Technische und organisatorische Maßnahmen für die erfolgreiche Durchführungen von Phishing Awareness Kampagnen auf Basis der Opensource Software Gophish. Phishing Mails sind immer noch einer der gefährlichsten Angriffsmethoden von Cyberkriminellen. Phishing Awareness Kampagnen sind deshalb in aller Munde. Organisationen möchten einen Überblick über den Ausbildungsstand Ihrer Benutzer bekommen und diese gleichzeitig langfristig und regelmäßig ausbilden. Professionelle Dienstleiter bieten Services für solche Aktionen an. Vorrausetzung für den effizienten und erfolgreichen Ablauf dieser Aktionen ist allerdings fast immer eine Schwächung der Firewall Einstellungen damit die Testmails die Postfächer der Endanwender erreichen. Alternativ dazu kann man diese Schulungsaktionen auch selber auf Basis von Opensource Software aus dem eigenen Netz heraus durchführen. Gophish https://getgophish.com/ ist eine solche Software welche die technische Basis hierfür stellen kann. Wie immer in solchen organisatorischen Maßnahmen ist allerdings der technische Aspekt nur der kleinste Teil eines erfolgreichen Projektes In diesem Vortrag betrachten wir die technischen und vor allem organisatorischen Erfahrungen und erforderlichen Anpassungen an die Technik von Gophish um die Mitarbeiter erfolgreich prüfen zu können. about this event: https://programm.froscon.org/2024/events/3050.html

Ist free/libre Open-Source noch zu retten? (froscon2024)

Sat, 17 Aug 2024 15:15:00 +0200

Free/Libre and Open Source Software (FLOSS) steht an einem Wendepunkt. Große FLOSS-Projekte ändern ihre Lizenzformen. Wie uns das Beispiel von XZ gezeigt hat, sind wir nur um Haaresbreite einem Armageddon entkommen. Die allgegenwärtige Verbreitung von Künstlicher Intelligenz (KI) basiert oft auf regelmäßigen Lizenzverstößen. Die Mehrheit von uns nutzt täglich Dienste wie Google, Zoom oder Office 365 und hält gleichzeitig den Einsatz von Open-Source-Software wie WordPress und Firefox als Zeichen des Widerstands gegen proprietäre Lösungen. Doch reicht das? Hintergrund: Seit Jahren gründen FLOSS-Communities gemeinnützige Vereine, um Veranstaltungen zu organisieren, Markenrechte zu sichern und Community-Richtlinien zu etablieren. Dennoch scheitern viele dieser Initiativen daran, über die Rolle von Evangelisten und Botschafterinnen hinauszukommen. Die Freiwilligenarbeit in FLOSS-Communities ist kräftezehrend, unbezahlt und oft von Burnout begleitet, während die Anforderungen der Nutzer:innen immer anspruchsvoller werden. Kernthesen: * Finanzierung und Wertschätzung: Projektmitwirkende müssen für ihre Beiträge finanziell unterstützt werden. Es muss ein klares Selbstverständnis über den monetären Wert von FLOSS-Projekten entwickelt werden. * Lobbyismus und politische Rahmenbedingungen: Es ist notwendig, politisch aktiv zu werden und die Rahmenbedingungen zu ändern, um FLOSS-Projekte nachhaltig zu fördern. * Zusammenschlüsse und Synergien: Anstatt mehr von allem zu wollen, müssen wir uns auf strategische Zusammenschlüsse und Kooperationen konzentrieren. Wir brauchen leicht erzählbare Geschichten und eine gemeinsame Marschrichtung. Ziele des Vortrags: * Aufzeigen der aktuellen Herausforderungen und Bedrohungen für FLOSS-Projekte. * Diskussion über die Notwendigkeit der finanziellen Unterstützung von FLOSS-Projekten. * Förderung der Zusammenarbeit und strategischer Allianzen innerhalb der FLOSS-Community. * Aufruf zur politischen Aktivität und Schaffung besserer Rahmenbedingungen für FLOSS. about this event: https://programm.froscon.org/2024/events/3085.html

A Comparative Analysis of Embedded Container Runtimes (froscon2024)

Sun, 18 Aug 2024 14:00:00 +0200

Nowadays containers are so ommnipresent that a world without containerization seems unthinkable. They are often the Solution for portable and isolated environments for running applications. But a containerization Solution for Servers might not fit on embedded systems and vice versa. We want to provide an overview about existing containerization Solutions, their architecture, functionality, ecosystem and how they can be used in embedded Systems. Nowadays containers are so ommnipresent that a world without containerization seems unthinkable. They are often the Solution for portable and isolated environments for running applications. Containers are, as just mentioned everywhere, but not all environments come with the same constraints and usecases, a containerization Solution for Servers might not fit on embedded systems and vice versa. This talk aims to provide an overview about existing containerization Solutions, their architecture, functionality, ecosystem and how they can be used in embedded Systems. Firstly, we quickly recap the fundamental technologies for containers including namespaces and cgroups. Additionally, we explore the broader context of containerization, contrasting it with alternative approaches such as virtual machines, traditional application deployment and UserModeLinux. Subsequently, we delve into the realm of container runtimes, focusing on popular implementations such as the Open Container Initiative (OCI) standards that include runc and crun, but also solutions like lxc will be covered. We also discuss older approaches such as lmctfy and CoreOS's rkt. Another important point is the ecosystem surrounding embedded containers, encompassing container registries for image distribution and the tooling required for building and managing containerized applications in embedded environments. Finally, a comparative analysis is presented that evaluaties embedded container runtimes based on criteria such as performance, security, ease of use and ecosystem support. about this event: https://programm.froscon.org/2024/events/3028.html

';-- can i be doxxed? (jh24)

Sun, 21 Jul 2024 14:36:00 +0200

about this event: https://c3voc.de

WoKlo? (jh24)

Sun, 21 Jul 2024 14:28:00 +0200

about this event: https://c3voc.de

Scrum auf Diät (froscon2024)

Sun, 18 Aug 2024 10:00:00 +0200

Agile und Lean-Ansätze haben viele Gemeinsamkeiten. Scrum ist im Softwareentwicklungskontext der wohl am häufigsten eingesetzte und beliebteste agile Ansatz - allerdings widerspricht das Scrum-Framework in vieler Hinsicht dem Lean-Gedanken. Scrum weist sowohl hinsichtlich der durch den Scrum Guide gelegten theoretischen Grundlage als auch hinsichtlich der gelebten Praxis Praktiken auf, die den Entwicklungsprozess und die Wertschöpfung mehr stören als unterstützen. Paradigmen und gängige Praktiken wie Timeboxing, kleine Teams und Estimation stellen nur scheinbare Lösungen für die Bewältigung komplexer Problemstellungen in der Softwareentwicklung dar, verschieben aber tatsächlich nur die Herausforderungen auf eine andere Ebene. Ich möchte in diesem Talk die Widersprüche darlegen und Lösungsmöglichkeiten aufzeigen. Dabei möchte ich dazu ermutigen, über Scrum hinauszudenken und so noch effizientere und besser vorhersagbare Prozesse zu realisieren. about this event: https://programm.froscon.org/2024/events/3056.html

Improving Security Posture of Critical FOSS Projects with Security Audits (froscon2024)

Sun, 18 Aug 2024 10:00:00 +0200

The Open Source Technology Improvement Fund, Inc has organized and managed close to 100 security audits for critical open source projects since 2015. This session will go over the top types of vulnerabilities found and fixed in open source security audits, the top 5 lessons learned, and highlight common auditing mistakes and how to avoid them. Security Audits are a proven and effective method for improving the security posture of Open Source Projects. The Open Source Technology Improvement Fund, Inc (ostif.org) has been a trusted partner for facilitating and managing security audits for critical open source projects since 2020, helping critical FOSS projects mature and improve. With recent funding from Sovereign Tech Fund, OSTIF wishes to share case studies of successful engagements. about this event: https://programm.froscon.org/2024/events/3135.html

Alt werden mit C++ (froscon2024)

Sun, 18 Aug 2024 14:00:00 +0200

Für eine langlebige Codebasis ist der Charakter und die weitere Entwicklung der einmal gewählten Programmiersprache bedeutsam. Dies wird verdeutlicht anhand von Beispielen und Erfahrungen im Projekt Lumiera mit der Sprache C++. Diese Sprache bietet Abstraktionsmittel, die sehr hilfreich sein können, in einer großen und komplexen Codebasis die Flexibilität und Änderbarkeit zu erhalten. Allerdings tritt die schrittweise Evolution dieser Sprachmittel selber in Wechselwirkung mit der Entwicklung der Codebasis und erzeugt Wartungsprobleme. Dies wird beleuchtet am Beispiel von Lambdas und Funktoren, der Einführung von RValue-Referenzen, sowie der Entwicklung von Generics und Concepts. Software lebt solange sie änderbar ist. Für langlebige Software ist der Charakter der Programmiersprache bedeutsam. Der Charakter jeder Sprache, und die damit verbundenen Methoden entwickeln sich weiter. Daraus entsteht eine Wechselwirkung mit einer bestehenden Codebasis, die sich ebenfalls weiterentwickelt. Exemplarisch sei dies am Beispiel der Erfahrungen im Projekt Lumiera mit der Sprache C++ aufgezeigt. In diesem OpenSource-Projekt wird Software für professionellen Film/Videoschnitt entwickelt. Die Entscheidung für eine Plattform ist im Kern eine Entscheidung für ein Ökosystem. Ein langlebiges Projekt muss auf Autonomie und Handlungsfähigkeit achten. Daher scheiden die meisten zunächst offensichtlichen und beliebten Plattformen aus. Für Lumiera hat man sich damals für C++ in einem Unix-Umfeld entschieden. Realistische andere Optionen wären noch gewesen: D, Java, C, Haskell. Einmal getroffen, ist eine solche Entscheidung mehr oder weniger endgültig. Denn jede der großen Programmiersprachen steht auch für eine bestimmte Denkhaltung und Herangehensweise. Software bleibt nur änderbar, wenn sie mit den beschränkten menschlichen Fähigkeiten im Einklang steht. Das gilt, sofern Software von Menschen und für Menschen gebaut wird. Die wichtigste Beschränkung liegt hierbei in der Fähigkeit, die Folgen von Änderungen zu verstehen und zu beherrschen. Das wird ermöglicht durch den sachgemäßen Ansatz von Abstraktionen. Durch einen Interface-Kontrakt wird die Implementierung zum Detail, und damit lokal änderbar. Für einen Kontrakt muss aber auch das Verhalten festgelegt werden. Damit dringt die Abstraktion in die Implementierung ein, und erfordert entsprechende Ausdrucksmittel. Der vorherrschende Lösungsansatz für diese Problematik war in den letzten 20 Jahren die Trennung von Infrastruktur und Funktionalität. Ein Stück Funktionalität wird zu einem abstrakten Element, das in einen anderweitig geregelten Kontrakt eingebunden werden kann. Einmal etabliert, könnte ein solches Schema oft an weiteren Stellen angewendet werden, sofern man auch noch von den konkreten Funktionsargumenten abstrahieren könnte. So entsteht die Forderung nach Funktionen auf generischen Argumenten. In der Praxis war der Weg dorthin mühsam und erforderte viele Workarounds. Die Sprachmittel in C++ waren anfangs wenig geeignet und problematisch: im Grunde gab es nur die schon in C nutzbaren Funktions-Pointer. Jedoch hat C++ durch seine Klassen und das Typsystem eine ausgeprägte Stärke im Bauen neuer Abstraktionen. Die Boost-Libraries haben daraus ein neues Sprachmittel geschaffen: Funktions-Objekte. Mit C++11 wurden diese auch Teil der Sprachdefinition; zugleich jedoch wurden auch Lambda-Ausdrücke als neues Sprachmittel eingeführt. Beide Sprachmittel stehen nun gleichberechtigt nebeneinander und ermöglichen völlig neue Anwendungsmuster. Und die Sprache entwickelte sich weiter. Mithilfe der RValue-References wurde das transparente Durchreichen von Argumenten möglich. Die hierfür notwendigen semantischen Anpassungen sind subtil und tückisch. Eine schrittweise Umstellung einer großen Codebasis ist ein langlaufender Vorgang und eine organisatorische Herausforderung. Oft muss man aber Argumente nicht nur durchreichen, sondern eine generische Funktion soll Eigenschaften ihrer Argumente verstehen und sich daran anpassen können. In den meisten älteren Programmiersprachen scheitert an dieser Forderung die Weiterentwicklung in Richtung einer Funktions-Abstraktion. Zum Glück (oder leider) galt das nicht für C++, denn während der Standardisierung der Sprache sind einige Design-Unfälle passiert, deren anfangs gar nicht intendiertes Verhalten in den Compilern dazu verwendet werden konnte, diese »Schallmauer« zu durchbrechen. Gemeint ist die Template-Metaprogammierung, eine Art »schwarze Magie«, mit der man eine funktionale Hilfs-Sprache während des Compilier-Vorgangs ausführen lassen kann. Warum lässt man sich auf schwarze Magie ein? Antwort: weil man dadurch mächtiger wird. Die Sprachmittel werden ausdrucksstärker. In wenigen Zeilen Code lässt sich eine komplexe Funktionalität zuverlässig und sicher realisieren. Dadurch gewinnt man Zeit, über die eigentlichen Anforderungen nachzudenken. Man geht damit aber technische Schulden ein: der Umgang mit der Codebasis erfordert vertiefte Kenntnisse, und einen mathematisch-geprägten Denkstil. Trotzdem war diese Entwicklung in der Praxis derart erfolgreich, dass das C++ - Komitee diesem Trend gefolgt ist, und die Aufgabe übernommen hat, die historisch gewachsene schwarze Magie in klar definierte und sauber verwendbare Sprachmittel inkrementell weiter zu entwickeln. Im Besonderen entstanden so Variadische Ausdrücke und Concepts. Wenn man diese Aufgabe ernst nimmt, kann man sich nicht damit begnügen, einen pragmatischen Gebrauch zu kodifizieren und syntaktisch nett zu verpacken. Vielmehr sind neue Sprachmittel gefordert, die sich zwar in den Stil der Sprache nahtlos einfügen, und auch das gleiche leisten wie die historisch gewachsene Lösung, aber dennoch auf einer neuen Basis stehen, klar definiert und leichter korrekt verwendbar sind. Das ist eine sehr anspruchsvolle Aufgabe; das Ergebnis ist erstaunlich, hat aber auch sehr viel Zeit in Anspruch genommen und ist in manchen Teilaspekten immer noch unfertig. Diese schrittweise Weiterentwicklung der Sprache führt dazu, dass im bestehenden Code eine Menge von Hilfsmitteln entsteht, die aufeinander aufbauen und weithin im Einsatz sind. Jedoch sind die Lösungen aus verschiedenen Entwicklungsstadien untereinander oft nicht kompatibel, da sich die gesamte Herangehensweise geändert hat. In einer größeren Code-Basis entstehen so komplexe interne Binding-Schichten, die erhebliche Probleme bei der Wartung aufwerfen können: zusammenhängende Systeme ziehen sich über weite Strecken durch den Code, und stützen sich jeweils auf Hilfsmittel ab, die untereinander nicht austauschbar sind. Beispiele hierfür sind:

Loki-Typlisten vs. Variadic Arguments
Type-Traits vs. Concepts

Da die jeweiligen Alternativen den gleichen Zweck auf unterschiedlichem Weg erreichen, kann eine Umstellung herausfordernd sein und läuft auf eine großflächige Überarbeitung etablierter Infrastrukturen hinaus. Daraus erwächst aber auch die Chance, in der Codebasis weithin etablierte Lösungen zu hinterfragen und weiterzuentwickeln. about this event: https://programm.froscon.org/2024/events/3133.html

Flatcar Linux: what's new in this Container OS? (froscon2024)

Sun, 18 Aug 2024 15:15:00 +0200

Flatcar Linux is a Linux based Operating System designed to run container workloads from single containers to bigger deployments with Kubernetes. After introducing the basis of this Container OS the new features and integrations will be introduced. In this talk, the basis of Container OS will be covered: provisioning with Ignition, immutability of the OS (`/usr` in read-only, etc.), container runtimes available to deploy containers without additional installation steps. We will then show what's new since the last year: composability of Flatcar with systemd-sysext, support with new providers like Hetzner, Flatcar in the Cluster API environment, etc. about this event: https://programm.froscon.org/2024/events/3038.html

Enterprise Mail-Security mit Open-Source? (froscon2024)

Sun, 18 Aug 2024 16:30:00 +0200

Ist es möglich die Versprechen kommerzieller Anbieter im Bereich der Mail-Security auch mit verfügbarer Open-Source Software umzusetzen? Wir glauben das ist möglich und möchten euch dafür das Anti-Spam Mail-Framework Rspamd näher vorstellen. Kommerzielle Anbieter von Mail-Appliances nutzen gern das Buzzword Enterprise und viele Weitere, um ihre Produkte zu beschreiben. Die Frage ist: Was bedeutet das überhaupt? Und kann ich eine wirksame Mail-Security-Infrastruktur noch auf meinen eigenen Servern mit Open-Source und vielleicht sogar ohne eine "Cloud" betreiben? Mit Rspamd haben wir ein Mail-Framework in der Hand, das viele Enterprise Buzzwords selbst abbilden kann (oder könnte) und zusammen mit weiteren Diensten eine sehr gute Lösung bietet. In unserem Vortrag schauen wir uns die Buzzwords der kommerziellen Anbieter genauer an und zeigen euch mit welchen Mitteln diese im Rspamd umgesetzt werden können. Außerdem möchten wir euch zeigen was Rspamd zu einer einzigartigen Lösung im Open-Source Mail-Security Bereich macht. about this event: https://programm.froscon.org/2024/events/3131.html

Avokatzo & Pizza (jh24)

Sun, 21 Jul 2024 14:03:00 +0200

about this event: https://c3voc.de

Enterprise IT: Ein agiler Realitätsabgleich (froscon2024)

Sun, 18 Aug 2024 14:00:00 +0200

In der turbulenten Welt der Unternehmens-EDV treffen absurde Regeln auf innovative Selbstschutzmechanismen der MitarbeiterInnen. Die (Miss)Kommunikation innerhalb eines großen Unternehmens hat oft System. Jobausschreibungen werden mit Hilfe von LLMs auf Basis von ein paar Wortfetzen aus dem letzten 4-Stunden-Standup formuliert und ohne Sanity-Check online gestellt. Klingt das interessant, unterhaltsam oder sogar vertraut (unser Beileid!!)? Dann ist diese Session für Dich! In dieser aufschlussreichen (und hoffentlich auch unterhaltsamen) Session werfen stoeps und leyrer einen Blick auf die skurrileren Auswüchse der Unternehmens-EDV und geben Tipps, wie man mit den kafkaeskeren Auswüchsen einer "gewachsenen Bürokratie" in großen Unternehmen kreativ Effektiv umgehen kann. Ein blick auf die typische Jobangebote in der IT-Branche und das Entschlüsseln der wahren Bedeutung von Versprechen wie "flache Hierarchien" und "freier Obstkorb" gehört hier ebenso dazu, wie Tipps zum Schutz des eigenen Hinterkopfs im Corporate-Infight, ohne dabei den Fokus auf die eigentliche Arbeit zu verlieren. Auch das Thema "herausfordernde Kommunikation mit KollegInnen, Vorgesetzten, Projektmanagern/Scrum-Mastern und KundInnen" wird beleuchtet und auf hoffentlich humorvolle Weise adressiert, um zu zeigen, dass klare Kommunikation nicht nur effektiver, sondern auch unterhaltsamer gestaltet werden kann. Selbstverständlich kommen auch moderne Konzepte wie der agile Wasserfall und "Managment by Excel" zur Sprache und "good enough" statt "best-practices" steht bei uns im Sinne eines iterativen, agilen Vorgehens auch bei dieser Präsentation im Vordergrund. Stoeps und Leyrer präsentieren einen lockeren Mix aus Erfahrungen, Anekdoten und witzigen Einlagen, um die Herausforderungen der Unternehmens-IT auf eine einzigartige und humorvolle Weise zu beleuchten. Machen Sie sich bereit für eine Session, die nicht nur Ihre IT-Survival-Skills verbessert, sondern auch für den ein oder anderen Lacher sorgt. about this event: https://programm.froscon.org/2024/events/3122.html

Musify (jh24)

Sun, 21 Jul 2024 14:20:00 +0200

about this event: https://c3voc.de

Finding Bugs in Closed-source Software: An Open-source Static Binary Analysis Tool (written in Rust) (froscon2024)

Sun, 18 Aug 2024 15:15:00 +0200

Building a product with an entirely open-source software stack is still challenging at best - sometimes even infeasible. The past has shown that vulnerabilities in closed-source components may be exploited by attackers to undermine the security of a system. Attackers invest a considerable amount of effort and expertise into reverse-engineering these components to uncover complex vulnerabilities. Manufacturers that rely on closed source components oftentimes have neither the resources not the expertise to perform the same level of auditing. This imbalance leads to security issues in the final product that may directly impact its users. The cwe_checker is an open-source research prototype that performs static analysis of binary code to find potential vulnerabilities. It currently supports the analysis of Linux user space programs and kernel modules as well as bare-metal firmwares. Our goal is to reduce the time and expertise needed by vendors to thoroughly audit their closed-source dependencies. The talk will start with a short introduction to the general problem area, as outlined in the abstract, and proceed by introducing the goals behind the cwe_checker. It continues with a presentation of the idea, requirements, and high-level architecture of the cwe_checker. In its main part, the talk will walk through the development of a simple data-flow analysis that detects instances of CWE252 (Unchecked Return Value). It will cover both, conceptual aspects behind the static analysis algorithm and the concrete code that implements it using the internal cwe_checker APIs. Finally, the algorithm will be used to find unchecked return values of `copy_from_user`, a programming error that is almost certainly exploitable, in non-upstream Linux device drivers taken from embedded device firmware images. To conclude the talk, an overview of other available analyses as well as possible directions for future research will be given. Students interested in Rust and program analysis are invited to contact us for thesis projects and internship opportunities. External contributions to the cwe_checker have unfortunately been uncommon due to the steep learning curve and absence of walkthrough-style documentation. (There is detailed rustdoc documentation of all APIs.) It is hoped that this talk will equip interested listeners with information to start developing their own analysis ideas within the cwe_checker. about this event: https://programm.froscon.org/2024/events/3064.html

Was ist neu in MariaDB 11.4? (froscon2024)

Sat, 17 Aug 2024 14:00:00 +0200

MariaDB 11.4 wird der nächste LTS Release. Zeit sich Gedanken zu machen... MariaDB hat dieses Jahr beschlossen, dass die Version 11.4 die neue Version mit Langzeit-Support werden wird. In den nächsten Monaten kann man sich daher überlegen, wie man diese Version in die Produktion bringen bringen will... In diesem Vortrag schauen wir uns an, welche Neuerungen es mit MariaDB 11.4 geben wird, was eher von akademischem Interesse sein wird und was von praktischem Nutzen ist. Zudem gehen wir noch kurz auf Probleme ein, welche bei der Migration von älteren Versionen auf MariaDB 11.4 auftreten können. about this event: https://programm.froscon.org/2024/events/3081.html

The brand new MySQL 8.4.x - What's in it for you... (froscon2024)

Sat, 17 Aug 2024 16:30:00 +0200

Mit dem neuen MySQL 8.4.0 (Long Term Support) veröffentlicht das MySQL-Team sein neues Major Release. Der MySQL-Code, die fertigen Binaries (aka MySQLCommunity Edition) und auch die kommerzielle MySQL-Version stehen auf den bekannten Webseiten zum Download bereit. Doch was hat sich geändert, wo liegen die Herausforderungen? All das wird in diesem Vortrag erläutert... Wie üblich bringt ein neues Release einer Datenbank nicht nur neue Funktionalitäten mit sich, sondern auch einige, die eingestellt wurden. Und natürlich stellt sich die Frage, wie man von einem 'alten' Release auf ein 'neues' Release migriert. Und neben der eigentlichen Migration ändern sich je nach MySQL-Anwendungsfall auch Betriebsprozesse und 'Best Practices'. In diesem Vortrag wollen wir eine Migration exemplarisch betrachten, uns MySQL 8.4 im Detail anschauen und anhand einer kurzen Demo demonstrieren. about this event: https://programm.froscon.org/2024/events/3097.html

Proxmox (froscon2024)

Sat, 17 Aug 2024 15:15:00 +0200

Mit Proxmox lassen sich Workloads auf unterschiedlichen Plattformen virtualisieren. Der Vortrag zeigt den aktuellen Funktionsumfang mit einem Schwerpunkt auf den Automatisierungsmöglichkeiten via API und CLI. Die Proxmox Virtualisierungslösung auf Basis von Linux KVM und LXC ist inzwischen in Version 8 erschienen. Windows wird mit Hilfe der VirtIO-Treiber von Fedora vollständig unterstützt. Linux-VMs sind natürlich gar kein Problem, und Applikationen in LXC-Containern laufen direkt auf dem Host-Kernel. Daneben bietet Proxmox eine einheitliche webbasierte Managementoberfläche und die Möglichkeit, unterschiedliche Storage-Typen und Netzwerkkonzepte einzubinden. about this event: https://programm.froscon.org/2024/events/3031.html

Alle können lernen - für alle in der Schule (jh24)

Sun, 21 Jul 2024 14:14:00 +0200

about this event: https://c3voc.de

Wie funktioniert ChatGPT ganz genau? (froscon2024)

Sat, 17 Aug 2024 16:30:00 +0200

Der Vortrag zeigt in Form einer Zeitreise die Entwicklung von Neuronalen Netzen bis hin zu Transformern und der Architektur von ChatGPT und LLMs (Large Language Models). Wir bleiben dabei nicht auf einer oberflächigen Ebene sondern gehen vollständig ins Detail, bleiben aber allgemein verständlich. Sprachmodelle und deren Funktionsweise sollten für Open Source Devs nicht nur verfügbar, sondern auch vollständig verständlich sein. Das Themengebiet der Neuronalen Netze ist zwar recht mathematisch und eine Aufarbeitung aller notwendigen Wissenselemente komplex. Wir bewältigen die Komplexität mit Hilfe des Stilmittels einer Zeitreise. Dabei werden die Entwicklungen, beginnend ab 1900, bis hin zu aktueller Technologie schrittweise erklärt. Die Meilensteine, die dazu geführt haben, dass wir heute KI in Form von Open Source Sprachmodellen verfügbar haben, werden dabei beleuchtet. Damit das ganze sowohl präzise als auch allgemeinverständlich bleibt verwenden wir sowohl eine bildhafte also auch eine präzise mathematische Darstellung. Teilnehmende brauchen keine speziellen Vorkenntnisse. Alle Teilnehmenden sollten nach dem Vortrag eine sehr gute Vorstellung haben wie LLMs und KI-Chatbots funktionieren. Open Source Devs werden nach dem Vortrag Sprachmodelle nicht nur in ihre Software integrieren können sondern auch verstehen wie das ganze funktioniert. about this event: https://programm.froscon.org/2024/events/3054.html

Bezahlt sie doch einfach!!? - eure Freie Software (froscon2024)

Sat, 17 Aug 2024 17:45:00 +0200

Wenn wir viel mehr Freie Software möchten, dann braucht es mehr Menschen welche diese beruflich entwickeln. Das geht nur mit Unternehmen die wirtschaftlich arbeiten, weil es Wagnis und Wettbewerb braucht. Deshalb ist es sinnvoll für erhaltene Freie Software Leistungen freiwillig zu bezahlen und so den Kreislauf anzuschieben. Dazu schauen wir auf Beispiele und praktische Erfahrungen. Als Gegenentwurf zu einer großen Behörde oder gemeinnützigen Organisation die Freie Software macht, erklärt dieser Vortrag, warum Zahlungen besser auf viele Empfänger verteilt werden sollten - auch an Einzelpersonen, wie das gehen kann und welche Wirkung es verspricht. Viele Vorschläge der letzten Jahre, Freie Software zu finanzieren, schauten auf gemeinsame Geldtöpfe oder öffentliche Förderung. Das übersieht den Steuerungsaspekt einer Zahlung. Software-Engineers sind mehr als andere in der Lage zu beurteilen, was eine Freie Software-Komponente beiträgt oder was gebraucht wird. Zusätzlich werden immer wieder neo-proprietäre Geschäftsmodelle gesichtet: Anbieter, welche nur die proprietäre Version pflegen und bedienstleisten. Oder Datenbankenprodukte für die es im breiten Einsatz auf den Serverfarmen nun doch verpflichtend Geld kostet. Allerdings funktionieren diese Ansätze nur gut, weil vorher der Teil der Software populär wurde, der noch Freie Software war. Besser ist es, wenn mehr Geld für reine Freie Software Leistungen fließt. Entschieden von denen, die etwas davon verstehen und davon haben, den Besucherinnen und Besuchern der FrOSCon zum Beispiel. Und deren Organisationen, ob Behörde, Unternehmen oder Verein. Mit Geschichten und Beispielen erzählt Bernhard Reiter wie sein Unternehmen seit mehr als 20 Jahren freiwillig für Freie Software bezahlt und warum. about this event: https://programm.froscon.org/2024/events/3126.html

Moderne Linux Kommandozeilenwerkzeuge - Edition „Eiche RUSTikal” (froscon2024)

Sat, 17 Aug 2024 15:15:00 +0200

In den letzten Jahren konnte ein Trend zu Re- bzw. Neuimplementierungen existierender Linux Kommandozeilentools in Rust beobachtet werden. Neben Go und bash ist Rust die führende Sprache bei diesen Implementierungen. Lasst uns gemäß dem "In Rust we trust" Schwerpunktthema der FrOSCon 19 einen Blick auf die besten, praktischen und auch unterhaltsamen Linux Kommandozeilenwerkzeuge werfen, die diesen Kriterien entsprechen. Die coolen, neuen Kommandozeilentools, die in den letzten Jahren veröffentlicht wurden, sind - mit wenigen Ausreißern wie Node.js oder Java - zumeist in Bash-Script, Go oder eben Rust geschrieben. Rust hat in diesem Bereich, sicherlich auch durch seine Plattformunabhängigkeit, einen großen Appeal, der sich auch in der Anzahl der verfügbaren Tools wiederspiegelt. Lasst mich Euch auf eine kleine Reise mitnehmen und euch Tools jenseits des POSIX Standards zeigen, die Euren Kommandozeilen-Alltag - und gebt es zu, die Kommandozeile ist noch immer besser als jedes GUI und Alexa, Siri, Jeeves und Cortana zusammen - vereinfachen oder verschönern und ev. sogar ein Lächeln ins Gesicht zaubern können. Ein Talk für all jene, die Kommandozeilenfenster einer GUI vorziehen oder einfach mal neugierig sind, was denn da so "in dem schwarzen Fenster" (das gar nicht schwarz sein muss) so alles geht. Rust oder Kommandozeilenkenntnisse werden nicht vorausgesetzt. about this event: https://programm.froscon.org/2024/events/3125.html

Why openSUSE is the perfect OS for handhelds (osc24)

Thu, 27 Jun 2024 14:00:00 +0200

The **Steam Deck** has revolutionized the gaming handheld market. With the Linux-based immutable **SteamOS**, **Valve** has fostered an **active community** developing mods and alternative systems for this platform. **Other manufacturers** distribute **Windows-based** mobile consoles. However, time and time again it has been shown that **they lag behind Linux** in terms of software support. But **how easy** is it to **bring** a Linux distribution, say **openSUSE**, to the **Steam Deck**? In this talk, a **prototype** based on **openSUSE's** open technologies and infrastructure will be presented, which is **already** (almost) fully **functional** on the Steam Deck and many other devices. What are the **advantages** of this and comparable systems? Are there any disadvantages? Why will **YOU** personally want to use such a **system**? And why is **openSUSE** a perfect basis for this and many other device classes? The answers to these and many other questions are waiting for you! So **come along**! The **Steam Deck** has revolutionized the gaming handheld market. With the Linux-based immutable **SteamOS**, **Valve** has fostered an **active community** developing mods and alternative systems for this platform. **Other manufacturers** distribute **Windows-based** mobile consoles. However, time and time again it has been shown that **they lag behind Linux** in terms of software support. But **how easy** is it to **bring** a Linux distribution, say **openSUSE**, to the **Steam Deck**? In this talk, a **prototype** based on **openSUSE's** open technologies and infrastructure will be presented, which is **already** (almost) fully **functional** on the Steam Deck and many other devices. What are the **advantages** of this and comparable systems? Are there any disadvantages? Why will **YOU** personally want to use such a **system**? And why is **openSUSE** a perfect basis for this and many other device classes? The answers to these and many other questions are waiting for you! So **come along**! about this event: https://c3voc.de

SPDX mit dem Open Build Service - und dann? (froscon2024)

Sat, 17 Aug 2024 10:00:00 +0200

“Software Bill of Materials” ein Begriff, der immer mehr in den Fokus der Software- und Produktentwicklung rückt. Auch hier bietet der Open Build Service des openSUSE Projekts passende Unterstützung für Entwickler- und Produkterstellerinnen. Die Erstellung von SPDX und CycloneDX Profilen wird in der öffentlich nutzbaren Instanz von openSUSE.org, wie auch in privat gehosteten, für verschiedene Distributionen unterstützt. Wir zeigen anhand von Beispielen, wie diese Möglichkeiten bei der Erstellung von Appliances mit kiwi, livebuild oder mkosi genutzt und aufgewertet werden können. about this event: https://programm.froscon.org/2024/events/3123.html

MariaDB Vector - Vector Similarity Search in Relational Databases (froscon2024)

Sat, 17 Aug 2024 15:15:00 +0200

Vectors are key to how AI models represent data semantics. Searching for vectors has now become a key requirement of databases in order to facilitate AI first applications. MariaDB Server will introduce Vector similarity search in an upcoming release. In this talk we will discuss what MariaDB vector is, how it works behind the scenes, as well as possible use cases and future roadmap. MariaDB Vector introduces a new high-level interface for indexing within MariaDB Server. This interface allows one to create custom indexing strategies. Vector search requires a special kind of index. The algorithm that is used by MariaDB and many other vector databases is called Hierarchical Navigable Small Worlds (HNSW). In this talk we will focus on the basis of HNSW, why the algorithm returns approximate results and what impacts its performance (tuning parameters). We will also discuss the difference between a Generative AI model and an Embedding AI model and how they can be used to build Retrieval Augmented Generation applications using MariaDB as a datastore. Finally we'll describe the current eco-system of Vector databases what are their strengths and weaknesses. With the information provided, one will be able to make a more informed decision between choosing a dedicated Vector database, or stick with a traditional Relational Database with vector search support. about this event: https://programm.froscon.org/2024/events/3143.html

State of the Union: Das Open-Source Jahr 2024 (froscon2024)

Sat, 17 Aug 2024 17:45:00 +0200

Auch in diesem Jahr sammeln Oliver, Nils und Michael die Themen, Kuriositäten und Aufreger des vergangenen Open Source-Jahres auf und diskutieren gemeinsam mit dem Publikum auf der Open Source Couch. Wir begehen wieder einmal eine Reise durch 12 Monate Open Source, mit Wundern und Aufregern, mit Technik und Kultur, mit Geschichten und Geschichte und mit vielen Themen rund um Freie Software und den Menschen, die dafür und damit arbeiten. Oliver, Nils und Michael gemeinsam mit dem Publikum auf einer Rundfahrt mit Aussicht.. about this event: https://programm.froscon.org/2024/events/3057.html

Next-Gen Desktops: Ublue-OS immutable desktop (froscon2024)

Sat, 17 Aug 2024 16:30:00 +0200

Der Vortrag präsentiert den Immuntable Desktop mit Ublue-OS als wegweisende Entwicklung im Bereich des Desktop-Computings. Ublue-OS bootet direkt in einen OCI-Container, was die Erstellung eines immuntable Desktops vereinfacht und für eine robuste Sicherheit und Stabilität sorgt. Durch die Trennung von Betriebssystem und Anwendungen mittels Technologien wie Flatpak sowie die Integration von Distrobox für die nahtlose Verwaltung von Anwendungen, bietet der Immuntable Desktop eine sichere, stabile und benutzerfreundliche Desktop-Umgebung. Praktische Demonstrationen verdeutlichen die einfache Erstellung und Anpassung des Desktops sowie die Durchführung von Updates und Rollbacks. Der Vortrag zeigt auf, wie Ublue-OS den Brückenschlag zwischen Desktop und Cloud-Technologien vollzieht und somit die Zukunft des Desktop-Computings maßgeblich gestaltet. Der Immuntable Desktop mit Ublue-OS markiert einen Wendepunkt in der Evolution des Desktop-Computings. In einer Zeit, in der Sicherheit und Stabilität oberste Priorität haben, bietet dieser Ansatz eine revolutionäre Lösung für die Herausforderungen, denen herkömmliche Desktop-Betriebssysteme gegenüberstehen. Ublue-OS bootet direkt in einen OCI-Container, was bedeutet, dass die Erstellung eines immuntable Desktops kein spezielles Know-how erfordert, wie es bei NixOS der Fall ist. Stattdessen können Sie einfach ContainerFiles (Dockerfiles) verwenden, um Ihren individuellen Desktop nach Ihren Bedürfnissen zu erstellen und anzupassen. Im Rahmen dieses Vortrags erhalten Sie einen umfassenden Einblick in die Vorteile des Immuntable Desktops mit Ublue-OS: Sicherheit: Durch die strikte Trennung von Betriebssystem und Anwendungen mittels Technologien wie Flatpak wird der Immuntable Desktop zu einer Festung gegenüber potenziellen Bedrohungen. Malware und unerwünschte Manipulationen haben keine Chance, das System zu kompromittieren. Stabilität: Dank des immuntable Ansatzes bleiben Ihre Systeme konsistent und stabil, selbst nach Updates oder Änderungen. Rollbacks ermöglichen es, bei Bedarf schnell zu einer zuverlässigen vorherigen Version zurückzukehren, ohne dass dabei Datenverlust oder Unterbrechungen auftreten. Benutzerfreundlichkeit: Die Erstellung und Anpassung eines immuntable Desktops mit Ublue-OS ist dank der Verwendung von ContainerFiles (Dockerfiles) einfach und zugänglich. Dies ermöglicht eine schnelle Bereitstellung und Verwaltung von individuellen Desktop-Konfigurationen, ohne dass spezielles technisches Know-how erforderlich ist. Zusätzlich ermöglicht Distrobox die nahtlose Integration von Anwendungen durch die Nutzung von Containern, was die Bereitstellung und Verwaltung weiter vereinfacht. In diesem Vortrag werden auch praktische Demonstrationen durchgeführt, um Ihnen einen realistischen Einblick in die Funktionsweise des Immuntable Desktops mit Ublue-OS zu geben. Sie werden sehen, wie einfach es ist, einen individuellen Desktop zu erstellen, Updates durchzuführen, Rollbacks durchzuführen und Anwendungen sicher und effizient zu nutzen. Der Immuntable Desktop mit Ublue-OS bietet eine Antwort auf die wachsenden Anforderungen an Sicherheit, Stabilität, Benutzerfreundlichkeit und erleichtert die Verwaltung von Anwendungen durch die Integration von Distrobox. about this event: https://programm.froscon.org/2024/events/3039.html

kivitendo - OpenSource ERP für den Saatgutanbau (froscon2024)

Sat, 17 Aug 2024 10:00:00 +0200

Implementierung, Anpassungen und Einführung eines Opensource für den Saatgut-Anbau und Handel. Erfahrungsbericht nach gut 2 Jahren arbeiten mit kivitendo im Saatgutanbau. Vom Förderanträgen, Schnittstellen und Herausforderungen. Vorstellung der neuen IMAP-Features zum Emailimport für Buchhaltung und Belege. about this event: https://programm.froscon.org/2024/events/3052.html

Elos (froscon2024)

Sat, 17 Aug 2024 11:15:00 +0200

Wer schon einmal versucht hat Anwendungen zu entwickeln und zu maintainen die auf unterschiedliche System-Events wie z.B. Out-of-memory oder syslog-message reagieren, wird schnell mit der Tatsache konfrontiert, dass viele zur Verfügung stehende nicht maschinenlesbar entworfen wurden. So können schon mit einem unscheinbaren Update geänderte Log-Nachrichten ganze Implementierung unbrauchbar machen. Das Elos-Projekt möchte hier eine Brücke schlagen und bietet eine Lösung um verschieden Quellen in unterschiedlichen Formaten auf ein einheitliches maschinenlesbares Format zu transformieren und in einem Linux-System zu propagieren. Anhand von ausgewählten Event-Quellen und Events eines Linux System wird das eigens entwickelte einheitliche Event Format vorgestellt. Einblicke in den Aufbau von Elos und das noch junge Ökosystem von Plugins sollen zeigen, wie Applikation auf System-Ereignisse reagieren können ohne spezifische Details des jeweiligen Linux-Systems kennen und maintainen zu müssen. Der Vortrag zeigt ein elos-Referenz-System welches auf segfaultende Prozesse reagiert und Nachrichten mit den relevanten Informationen verschickt. about this event: https://programm.froscon.org/2024/events/3089.html

It takes a village (froscon2024)

Sat, 17 Aug 2024 10:00:00 +0200

Wie könnt ihr als FOSS-Entwickler*innen über eure Arbeit kommunizieren - auch wenn es mal nicht so gut läuft? In acht Jahren Prototype Fund haben wir viele Projekte kommen und gehen gesehen und beobachtet, wie nachhaltige Projektentwicklung im FOSS-Bereich funktionieren kann. Wir blicken zurück und diskutieren, wie Entwickler*innen und deren Begleiter*innen wie z. B. der Prototype Fund über Projekterfolge und -misserfolge kommunizieren sollten. Mit Best-Practice-Beispielen im Gepäck zeigen wir euch Kommunikationsstrategien, mit denen ihr der Community helft, eure FOSS-Projekte sicher und langfristig zu nutzen, zur Entwicklung beizutragen oder da weiterzumachen, wo ihr aufgehört habt. Der Prototype Fund ist ein Förderprogramm für selbständige Software-Entwickler*innen und kleine Teams, die innovative Ideen prototypisch umsetzen wollen. Sie bekommen dafür fast 50.000 € Förderung vom Bundesministerium für Bildung und Forschung. Wir unterstützen die Projekte nicht nur finanziell, sondern auch fachlich und organisatorisch, mit individueller Beratung, Weiterbildungs- und Vernetzungsangeboten. Damit machen wir unbürokratische Förderung für eine Zielgruppe zugänglich, die im Fördersystem sonst oft übersehen wird. about this event: https://programm.froscon.org/2024/events/3113.html

init (froscon2024)

Sat, 17 Aug 2024 09:30:00 +0200

about this event: https://programm.froscon.org/2024/events/3160.html

Another Approach to AI (osc24)

Thu, 27 Jun 2024 10:45:00 +0200

Progressively, there are more and more [risks](https://jarnoduursma.com/blog/the-risks-of-artificial-intelligence/) associated with computer intelligence, and as a transparent software company we at Nextcloud have the responsibility to intervene and protect our users. [Microsoft laid off its entire ethics and society team](https://www.theverge.com/2023/3/13/23638823/microsoft-ethics-society-team-responsible-ai-layoffs), the team that taught employees how to make AI tools responsibly. Nextcloud on the other hand, embraces the ethics and challenges that make up today’s AI and aims to take them head on. The field of AI is moving fast, and many of the new capabilities face ethical and even legal challenges. Moreover, many people ask WHY do you need it in the first place. Until Hub 3, we succeeded in offering features like related resources, recommended files, our priority inbox and even [face and object recognition](https://nextcloud.com/blog/all-you-need-to-know-about-facial-recognition-technology-and-the-nextcloud-recognize-app/) without reliance on proprietary blobs or third party servers. Yet, while there is a large community developing ethical, safe and privacy-respecting technologies, there are many other relevant technologies users might want to use. We want to provide users these cutting-edge technologies – but also be transparent. For some use cases, ChatGPT might be reasonable, while for other data, absolutely not. To differentiate these, we developed an Ethical AI Rating. I will describe how our Ethical AI rating works, and give a bunch of examples. And, as a bonus, show how it is integrated in Nextcloud and how it can help you get work done - without leaking your data! I look forward to any feedback you wonderful folks in the audience have. Progressively, there are more and more [risks](https://jarnoduursma.com/blog/the-risks-of-artificial-intelligence/) associated with computer intelligence, and as a transparent software company we at Nextcloud have the responsibility to intervene and protect our users. [Microsoft laid off its entire ethics and society team](https://www.theverge.com/2023/3/13/23638823/microsoft-ethics-society-team-responsible-ai-layoffs), the team that taught employees how to make AI tools responsibly. Nextcloud on the other hand, embraces the ethics and challenges that make up today’s AI and aims to take them head on. The field of AI is moving fast, and many of the new capabilities face ethical and even legal challenges. Moreover, many people ask WHY do you need it in the first place. Until Hub 3, we succeeded in offering features like related resources, recommended files, our priority inbox and even [face and object recognition](https://nextcloud.com/blog/all-you-need-to-know-about-facial-recognition-technology-and-the-nextcloud-recognize-app/) without reliance on proprietary blobs or third party servers. Yet, while there is a large community developing ethical, safe and privacy-respecting technologies, there are many other relevant technologies users might want to use. We want to provide users these cutting-edge technologies – but also be transparent. For some use cases, ChatGPT might be reasonable, while for other data, absolutely not. To differentiate these, we developed an Ethical AI Rating. I will describe how our Ethical AI rating works, and give a bunch of examples. And, as a bonus, show how it is integrated in Nextcloud and how it can help you get work done - without leaking your data! I look forward to any feedback you wonderful folks in the audience have. about this event: https://c3voc.de

"Day 2 Ops" Linux for Kubernetes and Container Workloads (froscon2024)

Sat, 17 Aug 2024 16:30:00 +0200

More than ten years ago, CoreOS released the first Container Optimised Linux. Flatcar Container Linux, CoreOS' spiritual successor, incorporates a decade of operational experience, and focuses as much on processes as it does on technology. On Day 0, everything is exciting! It is the time of minimal viable prototypes and closed Alphas, with only the most daring of early adopters on-boarding. Day 1 is when code meets reality, code matters most, and projects still move fast and break a lot. Day 2 is all about steady-state, with well-defined processes replacing the need for coding rushes. In this talk, we present processes and operational practices for a "day 2" Linux operating system to run Container and Kubernetes workloads at scale - with examples and a few demos on Flatcar Container Linux. about this event: https://programm.froscon.org/2024/events/3103.html

PostgresSQL Update (froscon2024)

Sat, 17 Aug 2024 17:45:00 +0200

Dieser Vortrag stellt die wichtigsten Neuigkeiten in der aktuellen Version 16 und der kommenden Version 17 vor und gibt außerdem einen Überblick über die wichtigsten neuen Erweiterungen und sonstigen Projekte im Postgres-Umfeld der letzten Jahre. PostgreSQL ist die Fortschrittlichste Relationale Open-Source Datenbank. Jedes Jahr wird eine neue Haupt-Version veröffentlicht und diesen Herbst ist Version 17 an der Reihe. Dieser Vortrag stellt (mit einem Fokus auf Administratoren) die wichtigsten Neuigkeiten in der aktuellen Version 16 und der kommenden Version 17 vor. Außerdem gibt es einen Überblick über die wichtigsten neuen Erweiterungen und sonstigen Projekte im Postgres-Umfeld der letzten Jahre. about this event: https://programm.froscon.org/2024/events/3115.html

Running the internet, under-funded and under-staffed? (froscon2024)

Sat, 17 Aug 2024 12:45:00 +0200

Open Source technologies build the foundation of the free and open internet, but many are developed by only a single maintainer or a very small community. Despite the critical role these tools play in the internet ecosystem, they are perpetually under-funded and under-supported. The similarity to other “system relevant” professions is striking: The more we need them to keep the system running, the less we are willing to appreciate and sufficiently fund them. Who cares? We all need to, as without proper funding and without redundant staffing, these projects may die out, leaving critical components unmaintained. This year we see the 10th anniversary of the disclosure of Heartbleed, an OpenSSL bug allowing for massive exploit of that key encryption library. At the time of disclosure, some 17% (around half a million) of the Internet's secure web servers were believed to be vulnerable to the attack. It allowed theft of the servers' private keys and users' session cookies and passwords, making this the “worst vulnerability found since commercial traffic began to flow on the Internet” (Wikipedia). When Heartbleed was discovered, OpenSSL was maintained by a handful of volunteers, only one of whom worked full-time. Yearly donations to the OpenSSL project were about $2,000$. In my talk, I will showcase the state of a couple of key and well-known Open Source technologies, exploring their staffing and funding situation. We will revisit the improvements that happened since Heartbleed put a spotlight on the situation, but I will also share examples of a continuation of the problem, like the Log4j exploit in 2021. The keynote is meant as a call to action both for us as individuals as well as a society, to care for Open Source software and those who write it - as one.of the key common goods our society ‘s infrastructure is built on. about this event: https://programm.froscon.org/2024/events/3084.html

Strategies for Efficient Log Management in Large-Scale Kubernetes Clusters (froscon2024)

Sat, 17 Aug 2024 11:15:00 +0200

Large Kubernetes clusters can generate significant volumes of logs, especially when housing thousands of running pods. This may demand substantial CPU, RAM, disk IO, and disk space for storing and querying large log volumes. In this talk, we will look into different strategies of storing those logs in ElasticSearch, Grafana Loki and VictoriaLogs and examine how we can save 10x or more on infrastructure costs. This talk presents real-world examples of efficient log management in large-scale Kubernetes clusters. It includes setup demonstrations, numerical data, and graphical representations from reproducible benchmarks. about this event: https://programm.froscon.org/2024/events/3069.html

Automatisierte Provisionierung mit SecureBoot und Foreman (froscon2024)

Sat, 17 Aug 2024 10:00:00 +0200

SecureBoot ist Teil von UEFI, welches die Authentizität der Software, die von der Firmware geladen und ausgeführt wird, mit Hilfe kryptografischer Mechanismen sicher stellen soll. Die Verwendung von SecureBoot stellt Administratoren vor gewisse Herausforderungen wenn Hosts automatisiert aufgesetzt werden sollen. Das Open-Source-Projekt Foreman, welches als Basis für orcharhino und RedHat's Satellite dient, ist ein Lifecycle-Management-Tool, das u.a. ein automatisiertes Aufsetzen von Hosts ermöglicht. Mein Vortrag soll eine kurze Einführung in SecureBoot geben, Foreman's Provisionierungsmöglichkeiten, und dessen aktuelle Limitierungen sowie den aktuellen Stand der Upstream-Entwicklung in Bezug auf den SecureBoot-Support. Das Unified Extensible Firmware Interface (UEFI), bis Version 2.0 auch bekannt als EFI, wurde als BIOS-Nachfolger eingeführt und hat sich als Standard heutiger Hardwareplattformen durchgesetzt. Teil von UEFI ist SecureBoot, welches die Authentizität der Software, die von der Firmware geladen und ausgeführt wird, mit Hilfe kryptografischer Mechanismen sicher stellen soll. Ein vertrauenswürdiges Linux-System stellt nur das letzte Glied in einer Kette von Softwarekomponenten dar. Eine typische Vertrauenskette besteht aus Firmware, Bootloader, Linux-Kernel und Kernel-Modulen. Die Verwendung von SecureBoot stellt Administratoren vor gewisse Herausforderungen wenn Hosts automatisiert aufgesetzt werden sollen. Das Open-Source-Projekt Foreman, welches als Basis für orcharhino und RedHat's Satellite dient, ist ein Lifecycle-Management-Tool, das u.a. ein automatisiertes Aufsetzen von Hosts ermöglicht. Der SecureBoot-Support in Foreman ist aktuell begrenzt, die Nachfrage danach steigt. Mein Vortrag soll eine kurze Einführung in SecureBoot geben, Foreman's Provisionierungsmöglichkeiten, und dessen aktuelle Limitierungen sowie den aktuellen Stand der Upstream-Entwicklung in Bezug auf den SecureBoot-Support. Auch alternative Wege, wie angepasste Discovery-Images, sollen kurz vorgestellt werden. about this event: https://programm.froscon.org/2024/events/3075.html

Beschaffung - aber richtig! (froscon2024)

Sat, 17 Aug 2024 11:15:00 +0200

Die Auswahl eines Anbieters in öffentlichen Ausschreibungen rein über den Preis berücksichtigt nicht ausreichend die Besonderheiten von freier Software und Open Source. Dadurch, dass die Software grundsätzlich frei verfügbar ist, müssen andere Kriterien genutzt werden, um die effektiven Kosten der kommerziellen Software-Entwicklung zu decken - für bestehenden und zukünftigen Code. In der Open Source Business Alliance beschäftigen wir uns aktuell mit der Frage, wie das professionelle Open Source Ökosystem nachhaltig bewahrt und gestärkt werden kann. Die öffentliche Verwaltung propagiert digitale Souveränität und Open Source, etliche unserer Mitglieder erleben jedoch, dass sie in Bieterverfahren bei Ausschreibungen der öffentlichen Hand von "Trittbrettfahrer"-Unternehmen über den Preis ausgestochen werden. Diese betreiben teilweise massives Preisdumping ohne jedoch die entsprechende Expertise oder eine Beziehung zu den Entwicklern der Software zu haben. In öffentlichen Ausschreibungen gewinnt meistens der billigste Bieter. Bei Open Source Software aber sollte der Preis nicht das entscheidende Auswahlkriterium sein. Sonst nimmt man dabei in Kauf, dass durch mangelnde Qualifikation das Projekt "vor die Wand fährt". Werden die eigentlichen Entwickler nicht unterstützt, werden Sicherheit, Weiterentwicklung und Pflege der Software zusätzlich gefährdet. Die damit eingehandelten Probleme werden dann oft auf den Umstand geschoben, dass Open Source eingesetzt wurde. Das beschädigt allgemein den Ruf von Open Source Software und widerspricht dem Grundsatz von "Public Money, Public Code". Die Working Group Beschaffung der OSBA erstellt zu diesem Thema eine Handreichung mit Kriterien zur Auswahl bzw. Bewertung der Anbieter, um das bestehende Open Source Ökosystem langfristig zu bewahren und auszubauen. about this event: https://programm.froscon.org/2024/events/3110.html

Operation am offenen Herzen: Erfahrungen einer nahtlosen zentralen API-Migration (froscon2024)

Sat, 17 Aug 2024 17:45:00 +0200

APIs ändern, mit der Kundenbasis wachsen, das Produkt skalieren: Auf dem Papier sind das alles gelöste Probleme. Aus einem Monolithen werden Microservices, dazu eine API v2 und alles noch auf Kubernetes schieben. Fertig – oder?

Wie macht man das in der Praxis für eine Software-as-a-Service Anwendung mit tausenden Kunden? Ohne dass es die Kunden merken oder sie gar Integrationen neu implementieren müssen? Trotz 13 Millionen täglichen Aufrufen, einer über die Jahre gewachsenen Codebasis, einer komplexen GraphQL API, zahlreichen Sicherheitsstandards. Ein Big Bang ist nicht möglich. Wie lösen wir den Konflikt zwischen API-Stabilität und notwendiger Modernisierung? Wie kommen wir zu einer Architektur, die zukünftige Skalierungen und Resilienz erlaubt?

Bei LeanIX standen wir vor über 12 Monaten genau vor dieser Herausforderung. Dieser Vortrag gibt Einblicke, wie wir diese spannende architektonische und technische Herausforderung angegangen sind, was wir dabei gelernt haben und wo wir an die Grenzen der Open Source GraphQL Bibliotheken gestoßen sind.

about this event: https://programm.froscon.org/2024/events/3107.html

Was ich immer schon über Photovoltaik, Wärmepumpen und Heimautomation wissen wollte (froscon2024)

Sat, 17 Aug 2024 11:15:00 +0200

Mein über 100 Jahre altes Haus hat seit einem Jahr eine Wärmepumpenheizung, und seit einigen Monaten eine Photovoltaikanlage. Was bedeutet das für's Wohnen, für's Klima, und für das Energiebudget? Wie verknüpft man das alles in einer Home Assistant-Installation auf einem Raspberry Pi? Und wie navigiert man sich durch den österreichischen Behörden-, Energieversorger-, und Förderdschungel? Dieser Vortrag gibt Antworten. Für diesen Vortrag sind keine besonderen Vorkenntnisse im Bereich Heimautomation oder Energietechnik erforderlich. Ich erkläre unter anderem: * Was ist eine Wärmepumpe? Was ist eine Photovoltaik- (PV-) Anlage? * Wie wirkt sich der Einbau einer Wärmepumpe und einer PV-Anlage auf einen Altbau aus? * Wie kann ich den Energieverbrauch in meinem Haus messen und steuern? * Wie kann ich das alles mittels Home Assistant zusammenführen? * Wie betreibe ich Home Assistant (und ein paar andere Dienste, wie Mosquitto und Grott) mit Podman und systemd auf einem Ubuntu-Raspberry Pi? * Welche Erfahrungen macht man unterwegs? about this event: https://programm.froscon.org/2024/events/3086.html

Jeder Meter Zählt (froscon2024)

Sat, 17 Aug 2024 14:00:00 +0200

Dieser Vortrag gibt einen Einblick in die Arbeit eines Systemadministrator bei der Deutsche Börse. Er räumt mit falschen Vorstellungen über die Börse auf und wird zeigen welche Techologien bei der Börse eingesetzt werden. Außerdem werden kurz die Bestandteile des Stacks der verwendeten Administratortools erläutert. about this event: https://programm.froscon.org/2024/events/3137.html

Wie man eine Open Source Community aufbaut und lebendig hält (froscon2024)

Sat, 17 Aug 2024 15:15:00 +0200

Was passiert wenn kritische Open Source Projekte nicht mehr gepflegt werden? Vox Pupuli ist eine Gruppe aus über 210 Puppet Modulen/Tools Autoren. Sie alle arbeiten zusammen daran, eine anhaltende Weiterentwicklung der über 300 Open Source Modulen/Tools sicherzustellen. Das Ziel ist es aufgegebene Projekte zu adoptieren und einzelne Entwickler zu einem Kollektiv zu bündeln um effizienter arbeiten zu können. In diesem Vortrag geht es darum was Vox Pupuli ist, wie und warum es funktioniert und warum ihr mitmachen sollt! Außerdem möchten wir besprechen wie wir mit Contributions im großen Maßstab umgehen. Die Methoden und Arbeitsweisen werden vorgestellt und es wird gezeigt wie Firmen diese übernehmen und davon profitieren können. Vox Pupuli ist eine lose Gruppierung von über 180 Entwicklern. Wir arbeiten alle mit Puppet, oder haben Tools für das Puppet Ökosystem entwickelt oder wir kennen uns mit Software aus, welche mit Puppet automatisiert wird ("Domain Specific Experts"). Irgendwie haben wir es über die Jahre geschafft eine Community aufzubauen die organisch wächst. Uns eint das wir keine Lust haben allein an Projekten zu arbeiten oder fremde Open Source Projekte nutzen wollten welche dann aber kaputt oder verweist waren. Dies wollen wir verhindern. Wie normale Firmen auch kämpfen wir mit den gleichen Problemen: Es gibt zu viel Arbeit für zu wenig Leute. Wir haben es aber geschafft viel der Arbeit zu automatisieren und Standards für das Puppet Ökosystem geschaffen die auch von Puppet Inc und anderen großen Organisationen übernommen worden sind. In dem Vortrag möchte ich vermitteln wie wir uns organisieren, wie wir effizient mit GitHub arbeiten, wie Onboarding für neue Mitglieder funktioniert und wie wir untereinander kommunizieren. Es geht hier nicht spezifisch um Puppet Entwicklung, dies dient nur als Beispiel. about this event: https://programm.froscon.org/2024/events/3144.html

Huey: Pivoting hundreds of millions of rows in the Browser (froscon2024)

Sat, 17 Aug 2024 10:00:00 +0200

Huey is a browser-based application that lets you explore and analyze large local datasets with an interactive pivot table. Huey is blazing fast, courtesy of DuckDB / WASM. It can load data in .csv, .parquet or JSON format, and it can also open DuckDB database files. Huey's key features are: - An intuitive and responsive pivot table that supports filtering and (sub)totals - Supports many different aggregate functions for reporting and data exploration - Automatic breakdown of date/time columns into separate parts (year, month, quarter etc) for reporting - Supports reading .parquet, .csv, .json and .duckdb database files. (Support for reading MS - Excel .xlsx files and .sqlite is planned) - Export of results and/or SQL queries to file or clipboard - Blazing fast, even for large files - courtesy of DuckDB - Zero install. Download or checkout the source tree, and open src/index.html in your browser! No server required. Note: although Huey can run locally, there is nothing that keeps you from deploying it in a webserver if you want to. DuckDB / WASM enables web developers to build light-weight OLAP and analytics applications directly in the browser. Thanks to DuckDB, performance is blazing fast, while memory consumption remains modest. In this lecture I will demonstrate Huey's features and explain how it was build using DuckDB / WASM DuckDB as well as Huey are open source under a permissive MIT license. Find Huey source on github: https://github.com/rpbouman/huey Live demo: https://rpbouman.github.io/huey/src/index.html about this event: https://programm.froscon.org/2024/events/3023.html

Neue Abenteuer mit Open Source in der Verwaltungsdigitalisierung (froscon2024)

Sat, 17 Aug 2024 10:00:00 +0200

Immer wieder gibt es an verschiedenen Stellen Bemühungen um Open Source in der deutschen Verwaltungsdigitalisierung, wie etwa im aktuellen Koalitionsvertrag. Aber wie geht das denn in der Praxis, Software als Open Source zu beauftragen und auch wirklich öffentlich zur Verfügung zu stellen? Ein Erfahrungsbericht aus den letzten 2,5 Jahren. Bianca arbeitet beruflich an der Digitalisierung der Verwaltung und vertreibt immer noch Faxe aus den Gesundheitsämtern – auch über die Pandemie hinaus. Aktuell ist sie Product Owner für ein Multimillionen Softwareprojekt im Öffentlichen Gesundheitsdienst und genau davon erzählt sie heute. Wie man in Zusammenarbeit mit einem Landesministerium aus einer Kommune individuelle Softwareentwickungen für die öffentliche Verwaltung als Open Source vergeben kann. Auf welche Widerstände man dort stoßen wird und welche Überzeugungsarbeit es braucht, damit das dann geht. Wie sich Entwicklungsteams Richtung Open Development führen lassen können, welche Überlegungen hinsichtlich Lizenzen zu treffen sind. Und wie da auch Ende Software werden kann, die auch wirklich echtes Open Source sind und das von Anfang an. about this event: https://programm.froscon.org/2024/events/3145.html

Uyuni project: where we started... (osc24)

Thu, 27 Jun 2024 10:30:00 +0200

The Uyuni project was announced at the openSUSE conference 2018. In this presentation the attendees will be guided into our journey, from the fork of Spacewalk to the ongoing containerization effort that is taking place these days. While presenting the different ways to contribute to the project, the attendees will be also involved in defining how to shape the future of the project. The Uyuni project was announced at the openSUSE conference 2018. In this presentation the attendees will be guided into our journey, from the fork of Spacewalk to the ongoing containerization effort that is taking place these days. While presenting the different ways to contribute to the project, the attendees will be also involved in defining how to shape the future of the project. about this event: https://c3voc.de

Geld ist nicht alles! (froscon2024)

Sat, 17 Aug 2024 16:30:00 +0200

Einst war Software-Beschaffung für Verwaltungen einfach: Wer den niedrigsten Lizenzpreis aufrief, erhielt den Zuschlag. Auch deswegen ist die öffentliche IT-Infrastruktur in eine fatale Abhängigkeit von wenigen proprietären Unternehmen geraten. Um diese Abhängigkeit zu lösen, gehen Verwaltungen bei Software-Ausschreibungen neue Wege und setzen dabei auf Freie Software. Die Free Software Foundation Europe fordert mit ihrer Initiative „Public Money? Public Code!“ seit langem, den Anteil Freier Software im öffentlichen Sektor zu erhöhen. Mit Erfolg: Immer mehr Länder und Kommunen in Europa wollen Freie Software beschaffen. Das stellt öffentliche Verwaltungen vor eine Herausforderung: Welche Kriterien in Ausschreibungen stellen sicher, dass durch die Vergabe gute Produkte beschafft werden und gleichzeitig das Freie-Software-Ökosystem nachhaltig gestärkt wird? Wie lässt sich verhindern, dass Unternehmen gewinnen, die das Ökosystem schädigen – zum Beispiel durch Openwashing oder fehlende Maintenance für das Produkt? International gibt es dazu verschiedene Ideen und Ansätze. Hier soll anhand von Beispielen diskutiert werden, wo bei der Beschaffung Freier Software Fallstricke lauern, wo an Kriterien für die nachhaltige Beschaffung Freier Software gearbeitet wird, welche Metriken sich für die Ausschreibungspraxis eignen und wie sie implementiert werden können. about this event: https://programm.froscon.org/2024/events/3111.html

Clean CSS (froscon2024)

Sat, 17 Aug 2024 11:15:00 +0200

Können die Prinzipien von Clean Code auf CSS angewendet werden? Kann so eine strukturierte und modulare Möglichkeit gefunden werden, um umfangreiche Stylesheets lesbar zu halten und einfacher zu warten? Wie sind uns dabei die neuen CSS Features der letzten Jahre von Nutzen? In der Welt der Softwareentwicklung wird oft über sauberen Code in Programmiersprachen gesprochen, aber wie steht es um CSS? Zumal CSS sehr häufig zum Einsatz kommt und der Umgang mit CSS schnell äußerst kompliziert und unzugänglich wird. In diesem Vortrag betrachten wir den Versuch, die Prinzipien von Clean Code auf CSS anzuwenden, um CSS flexibel, lesbar, wartbar und erweiterbar zu machen. Wir beleuchten nicht nur bewährte Methoden, sondern auch einige der Neuerungen im CSS-Bereich der letzten Jahre, die diese Ziele unterstützen. Dazu gehören CSS-Variablen und neue Pseudoklassen. Dieser Vortrag präsentiert keine fertige Lösung aus langjähriger Erfahrung, sondern versteht sich als Ansatz und Betrachtung, wie Clean-Code-Prinzipien genutzt werden können, um CSS noch besser zu strukturieren und neue, elegante Lösungen zu finden. Egal, ob Sie ein erfahrener Entwickler oder ein Anfänger sind, dieser Vortrag bietet wertvolle Einblicke und praktische Tipps für die tägliche Arbeit mit CSS. about this event: https://programm.froscon.org/2024/events/3150.html

systemd soft-reboot and surviving it as application (osc24)

Thu, 27 Jun 2024 13:30:00 +0200

Since systemd v254 there is the nice feature of "soft-reboot" and since systemd v255 systemd services can survive a soft-reboot. In this talk I will speak about what soft-reboot exactly is, what are the benefits and what are the problems and the status of integration in openSUSE Tumbleweed and MicroOS. Based on this I will also explain how a systemd service can survive a soft-reboot and which requirements the application needs to fulfill for this. Since systemd v254 there is the nice feature of "soft-reboot" and since systemd v255 systemd services can survive a soft-reboot. In this talk I will speak about what soft-reboot exactly is, what are the benefits and what are the problems and the status of integration in openSUSE Tumbleweed and MicroOS. Based on this I will also explain how a systemd service can survive a soft-reboot and which requirements the application needs to fulfill for this. about this event: https://c3voc.de

Quo vadis VMWare (froscon2024)

Sat, 17 Aug 2024 14:00:00 +0200

Dieser Vortrag beleuchtet das VMWare Broadcom Debakel und zeigt Strategien, Empfehlungen und OSS Alternativen für ein Leben nach VMWare auf. about this event: https://programm.froscon.org/2024/events/3140.html

Begrüßung durch Prof. Dr. Marco Winzker, Vizepräsident Studium, Lehre und Weiterbildung (froscon2024)

Sat, 17 Aug 2024 12:25:00 +0200

about this event: https://programm.froscon.org/2024/events/3158.html

20 Jahre OpenStreetMap (froscon2024)

Sat, 17 Aug 2024 11:15:00 +0200

OpenStreetMap ist 20 Jahren alt. Der Vortrag blickt zurück auf die Entwicklung des Projektes und wagt auch einen Blick in die Zukunft. OpenStreetMap wurde im Juli 2004, also vor ziemlich genau 20 Jahren, gegründet. Der Vortrag blickt zurück auf die Entwicklung des Projektes in dieser Zeit und wagt auch einen Blick in die Zukunft. Dabei werden unter anderem Aspekte der Datenqualität, der Community, des Rechts und Kuriosa in den Blick genommen. about this event: https://programm.froscon.org/2024/events/3116.html

Normalisiert informationelle Selbstbestimmung (froscon2024)

Sat, 17 Aug 2024 15:15:00 +0200

Immer bequemer wird das Leben dank digitaler Weiterentwicklungen (wenn auch oft in zweifelhafter Form). Doch während es immer leichter wird, digitale Angebote zu verbreiten, wird es für den Einzelnen immer schwerer, selbstbestimmt zu entscheiden und zu handeln. So steht man, wenn man seine eigenen Daten schützen möchte oder sich mit den Vorgehensweisen großer Konzerne nicht einverstanden erklären möchte, immer öfter am Rand der Gesellschaft und sieht sich Rechtfertigungsdruck oder Ausgrenzung ausgesetzt. Mit diesem Impulsvortrag möchte ich dafür sensibilisieren, sich selber digital zu verteidigen oder auch als Ally das Verständnis zu verbreiten, dass informationell selbstbestimmt nutzbare Angebote das alte neue Normal werden müssen, um niemanden alleine zu lassen. about this event: https://programm.froscon.org/2024/events/3136.html

Nokia TCSM2, a bank of TRAUs with E1 interfaces: Part 1, initial examination of the hardware (retronetcall)

Wed, 05 Jun 2024 20:00:00 +0200

about this event: https://c3voc.de

Group 4 Facsimile Service (Fax G4) (retronetcall)

Wed, 06 Mar 2024 20:00:00 +0100

about this event: https://c3voc.de

GSM networks that require transcoding to G.711: the problem and possible solutions (osmodevcall)

Wed, 17 Jul 2024 20:00:00 +0200

about this event: https://c3voc.de

The Atomic Gardener (emf2022)

Sat, 04 Jun 2022 16:00:00 +0200

This talk tells the extraordinary story of Muriel Howorth - science fiction author, choreographer, gardener and amateur nuclear physicist. Far away from the cares of Britain's Atomic Weapons Establishment, Howorth worked from her home in Eastborne in the early 1960s on an astounding DIY atomic experiment. Her aim was to solve world hunger. Sarah Angliss shares rarely seen archival material as she tells Howorth's story and considers the potential of citizen science and the perils of techno fixes for complex societal problems. This event may contain references to giant mutant vegetables. about this event: https://c3voc.de

How Oscilloscopes work - Oder wieso sie so schwer zu bedienen sind (cosin2024)

Sat, 29 Jun 2024 19:00:00 +0200

Leider ist die Bedienung eines Oszilloskop nicht ganz einfach, darum möchte ich euch in diesem Vortrag den Aufbau, Funktionsweise und die Einsatzgebiete des Oszilloskops zeigen. Das Oszilloskop ist neben dem Multimeter das wichtigste Messmittel in der Elektronik, weil man "sehen" kann was der Strom da so tut. Leider ist die Bedienung eines Oszilloskop nicht ganz einfach und braucht auch Übung. Darum möchte ich euch in diesem Vortrag den Aufbau, Funktionsweise und die Einsatzgebiete des Oszilloskops zeigen. Danach solltet ihr besser verstehen, wieso die Knöpfe auf allen Oszilloskopen so Gruppiert sind, wie sie es eben sind und was sie bewirken. Ziel ist es, dass ihr wisst - wann ihr welches Messgerät braucht - wie ihr das Messgerät so einstellt, das ihr das sehen könnt was euch interessiert - wie das Angezeigte zu interpretieren ist und wie genau eure Messung ist about this event: https://fahrplan.cosin.ch/fahrplan/2024/events/0b6d8225-d3b8-57cc-a220-412e140b4f19/

Building a FOSS firmware for the AT860D hot-air soldering station (cosin2024)

Sat, 29 Jun 2024 22:30:00 +0200

A firmware was written from scratch to replace the stock one on the Atten AT860D hot-air stations. It is implemented in PIC16F887 assembler, and buildable using the FOSS gputils toolchain. This talk describes the reverse-engineering of the hardware, the layering of subsystems from HAL to UI, and implementation of the subsystems. Ideas for improvement and lessons learned. This would be based on my blog post at https://tommie.github.io/a/2024/03/foss-firmware-at860d. The code is available under GPL-3 at https://github.com/tommie/at860d-firmware. A proof-of-concept of an event-based RTOS for PIC16F is in https://github.com/tommie/dios, which is an extension to the code structure used in the firmware. The duration is flexible 25-45 min, depending on the interests of the audience, and how deep they want to go on ZCC/PFC triac control, PIC assembler, and event-based vs state-based code structuring. (The form required me to add a session image, so I did, though the text suggests it's optional. :) about this event: https://fahrplan.cosin.ch/fahrplan/2024/events/cb639f26-9b25-5945-8226-45b5e04946da/

Wir bauen uns eine FLOSS CGI/VFX Pipeline (cosin2024)

Sat, 29 Jun 2024 23:30:00 +0200

Computeranimationen von ersten Konzepten bis zum fertigen Video ausschliesslich mit freier Software gestalten. Eine CGI/VFX Pipeline beschreibt alle Teile die benötigt werden die diversen Arbeiten rund um 3D modelierung, animation, texturierung, rendering und compositing zu ermöglichen. Das beinhaltet Software, Dateiformate, Konverter und Workflow-Tools um die Daten zu verwalten. Der Vorstrag stellt diverse Optionen und Konfigurationen vor, um dies ausschliesslich mit freier Software zu ermöglichen. Nebenbei wird auch noch etwas auf die Geschichte dahinter eingegangen und warum Linux und Opensource in der Visual Effects industrie so stark geschätzt und verbreitet ist. about this event: https://fahrplan.cosin.ch/fahrplan/2024/events/2568a804-aa8b-59ad-89bb-9f2345e97979/

Die Wau-Holland-Stiftung: Kampf um die Freiheit von Julian Assange (cosin2024)

Sat, 29 Jun 2024 16:00:00 +0200

Die Wau-Holland-Stiftung (WHS) hat seit 2009 WikiLeaks gefördert und setzt sich seit 2011 für die Freiheit von Julian Assange ein. Ein Rückblick auf die Ereignisse und ein Update zum aktuellen Stand der juristischen Auseinandersetzung in England, den USA und Deutschland. Die Wau-Holland-Stiftung (WHS) hat seit 2009 WikiLeaks gefördert und setzt sich seit 2011 für die Freiheit von Julian Assange ein. Ein Rückblick auf die Ereignisse und ein Update zum aktuellen Stand der juristischen Auseinandersetzung in England, den USA und Deutschland. about this event: https://fahrplan.cosin.ch/fahrplan/2024/events/fa91d1f4-ac19-50b4-b7e7-72d34ae79cf3/

FPGA selber bauen mit 7400 Logik (cosin2024)

Sat, 29 Jun 2024 17:00:00 +0200

Ich habe selber eine FPGA architektur in 7400 Logik realisiert und erzähle, was denn son ein FPGA überhaupt ist und wie dieser funktioniert FPGAs sind eine einzigartige Form von high-performance chip für Nichenanwendugen. Nur wenige kennen FPGAs überhaupt und noch weniger wissen, wie deren interne Architektur aussieht. Inspiriert durch Ben Eaters 8-bit CPU on breadboard habe ich selber einen simplen FPGA in hardware aufgebaut. Anhand dieses Models erzähle ich detailiert und low-level, was ein FPGA ist und wie ich meine Version entwickelt habe. about this event: https://fahrplan.cosin.ch/fahrplan/2024/events/289693b2-6203-5fb6-b569-aeb36c47020e/

Digitalisierung des Gesundheitswesens (oc)

Thu, 25 Jul 2024 20:20:00 +0200

In dieser technisch eher tiefergehenden Einführung werden wir die grundlegenden Fragen klären: Was passiert gerade in der Digitalisierung des Gesundheitswesens? Warum brauchen E-Rezepte manchmal so lange, obwohl sie digital sind? Wie wird eigentlich die sogenannte elektronische Patientenakte (ePA) für alle funktionieren? Was passiert technisch in der Digitalisierung des Gesundheitswesens in der Zukunft? Und was hat das alles mit vertrauenswürdigen Umgebungen zu tun? Nach der Einführung des E-Rezepts im Januar 2024 soll Anfang 2025 das digitale Gesundheitswesen in Deutschland so richtig durchstarten – mit der Einführung der ePA für alle, die nicht den Opt-out wählen. Wir geben Ausblick über den aktuellen Stand der technischen Umsetzung, der Architektur dahinter und der Frage, ob das wirklich eine patient*innenzentrierte Akte sein kann. Slides sind unter https://bkastl.de/cccc24/ verfügbar. about this event: https://c3voc.de

Verbreitung von OpenPGP-Keys mit WKD, WKS und DANE (cosin2024)

Sat, 29 Jun 2024 18:00:00 +0200

Eine Einführung in die dezentrale Verteilung von OpenPGP-Keys mit WKD, WKS und DANE. WKD (Web Key Directory) ist ein Standard, der die Verbreitung von OpenPGP-Keys via HTTPS beschreibt, wobei jeweils pro Domain festgelegt wird, von wo die Keys bezogen werden. DANE (DNS-based Authentication of Named Entities) ist ein Standard, der beschreibt, wie Public Keys (neben TLS- auch S/MIME- und OpenPGP-Keys) via DNSSEC-signierter DNS-Records verbreitet werden können. WKS (Web Key Submission) ist ein Verfahren, um OpenPGP-Keys mittels verschlüsselten und signierten E-Mails in eine WKD hinzuzufügen. Da ich bei der WKS-Implementation von GnuPG diverse Einschränkungen festgestellt hatte, habe ich meinen eigenen WKS-Service geschrieben, der Keys sowohl via WKD, als auch via DANE veröffentlicht. In diesem Talk gehe ich auch auf eben diese Einschränkungen und meine Lessons Learned ein. about this event: https://fahrplan.cosin.ch/fahrplan/2024/events/fdc0738b-d56d-50b6-9138-c9d88c19c35f/

Langweilige IP Router mit Linux (cosin2024)

Sat, 29 Jun 2024 13:00:00 +0200

Eine aktuelle GNU/Linux Distribution lässt sich mit wenigen Handgriffen zu einem pflegeleichten IP Router umbauen. Der präsentierte Ansatz setzt auf übliche Tools aus standard Repositories und bevorzugt Methoden, die mit einem beliebigen Konfigurationsmanagement einfach automatisierbar sind. Das Ziel ist ein möglist langweiliges Linux System, das man auch mal für ein paar Monate im Wandschrank vergessen kann ohne dass das Internet ausfällt. Eine aktuelle GNU/Linux Distribution lässt sich mit wenigen Handgriffen zu einem pflegeleichten IP Router umbauen. Der präsentierte Ansatz setzt auf übliche Tools aus standard Repositories und bevorzugt Methoden, die mit einem beliebigen Konfigurationsmanagement einfach automatisierbar sind. Das Ziel ist ein möglist langweiliges Linux System, das man auch mal für ein paar Monate im Wandschrank vergessen kann ohne dass das Internet ausfällt. about this event: https://fahrplan.cosin.ch/fahrplan/2024/events/e5cc33cb-428a-5688-84d3-e5c120066423/

Script-kidding the Bitcoin blockchain (cosin2024)

Sun, 30 Jun 2024 13:00:00 +0200

Scripting is a central part of how Bitcoin transactions work, so it is interesting to investigate real scripts from the blockchain for fun and profit. Scripting is a central part of how Bitcoin transactions work, so it is interesting to investigate real scripts from the blockchain for fun and profit. about this event: https://fahrplan.cosin.ch/fahrplan/2024/events/dbc77a2b-2f61-548d-8aa0-5bfe814c5a8b/

DNS für webserver (cosin2024)

Sat, 29 Jun 2024 15:00:00 +0200

Ohne DNS ist kein Webserver funktionsfähig. Neben dem offensichtlichen A-Record gibt es eine Vielzahl weiterer für Webserver relevanter DNS-Einträge, die in diesem Vortrag beleuchtet werden sollen. Neben den bereits bekannten DNS-Einträgen wie A, AAAA, CNAME existiert eine Vielzahl weiterer Einträge, die für Webserver von Nutzen sind und einer näheren Betrachtung unterzogen werden sollten (z. B. CAA, TLSA). Insbesondere werden wir uns auch mit den im RFC 9460 beschriebenen HTTPS- und SVBC-Einträgen befassen. about this event: https://fahrplan.cosin.ch/fahrplan/2024/events/ae97c307-be89-5c44-9938-d2bf66b4852d/

OpenQA - review jobs and file bug report (osc24)

Thu, 27 Jun 2024 14:30:00 +0200

We have automation tests running in https://openqa.opensuse.org/. we aim to make each test green. jobs may fail if: 1. Product bugs 2. Test issue [we may need to update/fix our test code, needles etc] 3. Infrastructure issues [hardware issues/ network issues/ system upgrade etc] I will like to show you a bit how file a bug report if you finding any product bug. In general, it covers: 1. How to make sure it is a product bug 2. How to find useful logs 3. How to file a good bug report 4. How to use openQA webUI to file bug report We have automation tests running in https://openqa.opensuse.org/. we aim to make each test green. jobs may fail if: 1. Product bugs 2. Test issue [we may need to update/fix our test code, needles etc] 3. Infrastructure issues [hardware issues/ network issues/ system upgrade etc] I will like to show you a bit how file a bug report if you finding any product bug. In general, it covers: 1. How to make sure it is a product bug 2. How to find useful logs 3. How to file a good bug report 4. How to use openQA webUI to file bug report about this event: https://c3voc.de

Board Talk (osc24)

Sat, 29 Jun 2024 16:45:00 +0200

Board to Provide Talk Board to Provide Talk about this event: https://c3voc.de

Functional Programming in Swift (bobkonf2024)

Fri, 15 Mar 2024 11:45:00 +0100

When people talk about functional programming in modern multi-paradigm languages, they usually mention Rust, Scala, or Kotlin. You rarely hear Swift being mentioned. This is odd, as one might argue that, of these languages, Swift places the strongest emphasis on functional programming. In this talk, I will explain the core functional programming features of Swift, including its expressive type system, value types, and mutability control. Furthermore, I will discuss how Swift’s language design is influenced by the desire to create a language that addresses the whole spectrum from low-level systems programming up to high-level applications with sophisticated graphical user interfaces. Beyond the core language itself, functional programming also permeates Swift’s rich ecosystem of libraries. To support this point, I will outline some FP-inspired core libraries, covering concepts from functional data structures over functional reactive programming to declarative user interfaces. Finally, I will briefly summarise practical considerations for using Swift in your own projects. This includes the cross-platform toolchain, the package manager, and interoperability with other languages. about this event: https://bobkonf.de/2024/chakravarty.html

Software Analytics with Data Science on Software Data (bobkonf2024)

Fri, 15 Mar 2024 16:20:00 +0100

Data Science has demonstrated its value in extracting insights from business data, raising the question: Why not apply these principles to our software systems’ data? In this talk, I’ll introduce you to the world of Software Analytics. We’ll explore how to extract valuable insights from software data by using tools and techniques from data science to get rid of big, systemic problems in our software systems. You’ll learn how to leverage scientific thinking, manage the analysis process, and apply literate statistical programming to analyze software systems in an understandable way. Or to put it in the words of software developers: We automate the analysis of large software systems using open-source tools like Jupyter Notebook, Python, pandas, jQAssistant, and Neo4j. I’ll also demonstrate through live-coding how we can gain new insights from data sources like Git repositories, performance measurements, or source code. Join me in this session to acquire your starter kit for uncovering deeply hidden issues and change the way of improving systems with data-driven software analysis! about this event: https://bobkonf.de/2024/harrer.html

Keynote: Who's Afraid of the Turnstile? (bobkonf2024)

Fri, 15 Mar 2024 09:00:00 +0100

Programmers are well familiar with BNF as a concise and precise formal notation for defining programming language syntax. Nobody would consider describing syntax in prose. But more than 60 years after the introduction of syntax formalisms, it’s still accepted practice that programming language semantics, which is the far more delicate part of a language definition, is specified by a combination of cumbersome prose, hidden assumptions, and wishful thinking. In this talk, I show how we closed this gap in the specification of WebAssembly, hopefully demonstrating that there is little reason to be afraid of formal semantics. In the end, it’s merely syntax! The techniques that the academic community has developed over the past 4 decades work well and scale to a full-blown industrial language. I also give a peek at a novel tool chain this approach enables us to build, which can generate much of the written WebAssembly specification and corresponding proofs and tests, achieving new levels of trust in the correctness of the specification. about this event: https://bobkonf.de/2024/rossberg.html

Cypress überall - Ein einziges Automatisierungswerkzeug für alle Teststufen?! (bobkonf2024)

Fri, 15 Mar 2024 10:15:00 +0100

Das Open-Source-Werkzeug Cypress ist ursprünglich als Alternative zu Selenium im Bereich der End-2-End-Tests in der Webentwicklung gestartet. Inzwischen füllt es mit Component Testing auch die Lücke zwischen Unit- und End-2-End-Tests in der Webentwicklung, die bisher nur ungenügend besetzt war, also bei den Komponenten- und Integrationstests. Lässt man Cypress Component Tests in sein Projekt, dann automatisiert man damit schnell nicht nur Komponententests, sondern auch Unit-Tests. Sie bieten sich damit als Ersatz für typische Unit-Test-Werkzeuge für Webanwendungen wie Jest oder Karma an. Cypress etabliert sich damit als Automatisierungswerkzeug für alle Teststufen, von den Unit- bis hin zu den End-2-End-Test. Kann Cypress wie ein Schweizer Taschenmesser wirklich den kleinen Zoo der bisher verwendeten Werkzeuge ablösen? Wir haben es ausprobiert und berichten über Erfahrungen positiver Art, aber auch über die Grenzen, an die wir gestoßen sind. Unter anderem zeigen wir anhand von Beispiele, wie Cypress als TDD-Werkzeug eingesetzt werden kann, wie einfach bestehende Tests migriert werden können, und haben evaluiert, was unter welchen Bedingungen schneller und stabiler ist, die Unit-Tests in Jest oder die in Cypress. about this event: https://bobkonf.de/2024/sokenou.html

Hyper Hyper! Javascript fatigue und die Hypermedia Renaissance (?) (bobkonf2024)

Fri, 15 Mar 2024 15:05:00 +0100

Hypermedia erlebt in den letzten Jahren eine Renaissance. Das Elixir-Webframework Phoenix bietet mit Live-Views einen Hypermedia-Mechanismus an, um reiche Webfrontends ohne JavaScript zu schreiben. Ähnlich das Turbo-Paket für Ruby on Rails. Dazu gesellt sich seit einiger Zeit HTMX. Das ist eine sprach- und frameworkunabhängige Javascript-Bibliothek die HTML als Hypertext endlich vervollständigen soll. Wer sich schon immer darüber geärgert hat, dass nur Anchor-Tags und Formulare einen Request abschicken dürfen, warum diese überhaupt nur GET bzw. POST unterstützen und warum immer gleich die ganze Seite ersetzt werden muss, ist hier genau richtig. Anders als mit React und Konsorten bekommen wir mit HTMX endlich wieder die Möglichkeit, wirklich deklarativen Frontendcode zu schreiben und den Zustand dort zu lassen, wo er ohnehin hingehört: auf dem Server. Dass die Frontend Buildzeiten auf Null sinken ist natürlich ein netter Bonus. Wer also keine Lust mehr hat, für jede Single Page Application grundlegende Browserfunktionalität nachzubauen (looking at you, Navigation und History) oder Performancehacks für große Selects zu basteln, kann sich hier anschauen, wie das deklarative Hypermedia Web in Zukunft (wieder) aussehen könnte. about this event: https://bobkonf.de/2024/schneider.html

Kontrollsoftware für eine Jupitermission der ESA: Ein Erfahrungsbericht (bobkonf2024)

Fri, 15 Mar 2024 11:45:00 +0100

Die Implementierung der Steuersoftware für das Messinstrument SWI auf der ESA Jupiter-Raumsonde JUICE dauerte acht Jahre und fand unter in vieler Hinsicht ungünstigen Bedingungen statt. Höchste Priorität bei der Entwicklung hatten maximale Laufzeitstabilität und Einhaltung der Liefertermine. Um diese Ziele zu erreichen mussten verschiedene in der Industrie übliche und von der ESA vorgeschlagene Methoden durch effizientere Herangehensweisen ersetzt werden. Die aufgetretenen Probleme und die entsprechenden Lösungen werden im Einzelnen besprochen. about this event: https://bobkonf.de/2024/schirmer-winkelmann.html

Erlang, OCaml, same thing 🤷 (bobkonf2024)

Fri, 15 Mar 2024 12:35:00 +0100

Ever wondered what type-safe, massively concurrent functional programming could look like? Join me on a journey from Erlang to OCaml and back again. We’ll learn about Caramel 🍬 – an experiment in bringing type-safety for the Erlang VM. Caramel was born out of the question: why is Erlang hard to type? – and as it turns out, it is not! If you restrict it enough. So much so that what you end up with is…OCaml? On the flip side, the new algebraic effects and multicore capabilities of OCaml 5 open the possibility of new execution models. How far could we take them? Could we inject Erlang’s famed concurrency model into OCaml? Riot 🌪️ is an actor-model runtime for OCaml 5 that brings multi-core scheduling and lightweight processes, communicating via message passing. Key Takeaways _ Learn more about how type safety and supervision trees make for the ultimate reliability stack - Understand the convergence of Erlang and OCaml - Get started writing Type-safe actor systems in OCaml with Riot about this event: https://bobkonf.de/2024/ostera.html

Property-testing all* the things in SerenityOS (bobkonf2024)

Fri, 15 Mar 2024 15:05:00 +0100

*: not all the things. I’m a big proponent of property-based testing (as in, QuickCheck or Hypothesis), be it in Elm, Haskell, Scala or JavaScript - it’s great at finding tricky edge cases, refining your understanding of your system and giving you confidence it works for more cases than just your happy path unit tests. Imagine my horror when I saw that SerenityOS, my favorite “watch and admire it from distance” open source project didn’t have any support for property-based testing! There were three options: don’t test at all, test with unit tests, or fuzz the binary as a black box. I set out to write a property-based testing framework for SerenityOS, complete with automatic shrinking and all, and to use it to write property tests for apps and libraries all across SerenityOS. In this talk I want to share that journey, the surprising complications and how I overcame them, the tests I’ve written and categories they fall into, and the bugs I’ve found. about this event: https://bobkonf.de/2024/janiczek.html

Konsequente Barrierefreiheit durch Partizipation im Prozess (bobkonf2024)

Fri, 15 Mar 2024 14:15:00 +0100

Ausgangsthesen: (1) Barrierearme oder barrierefreie Software und/oder IT-Systeme (=Produkte) können nur das Ergebnis entsprechend gestalteter Entwicklungsprozesse sein, Barrierfreiheit nachträglich zu implementieren ist kaum möglich und sehr teuer. (2) Die Anforderungen aus der BITV 2.0 bzw. WACG 2.x reichen für die barrierefreie Gestaltung von Software und/oder IT-Systemen nicht aus. Sie müssen durch weitere Anforderungen und durch die systematische Einbeziehung von Menschen mit (unterschiedlichen) Behinderungen erweitert werden. Lösungsansätze: (3) Einen Rahmen zur Prozessgestaltung liefert die neue Norm ISO/IEC 30071-1. (4) Aus unserer Sicht ist vor allem Partizipation im Prozess erforderlich, also: Menschen mit Behinderungen werden von Anfang an, schon bei Anforderungserhebung einbezogen und in verschiedenen Rollen in alle Entwicklungsphasen, wie Design, Implementierung sowie Tests. Erfahrungen: (5) Als Mitglieder eines Teams von Menschen mit unterschiedlichen Behinderungen berichten wir, was unsere Erfahrungen sind und was aus unserer Sicht die wichtigsten technischen wie nicht-technischen Anforderungen sind. Die Basis bildet die Schärfung des Bewusstseins für die tatsächlichen Bedürfnisse und Herausforderungen von Menschen mit Behinderungen, bei Entwickler*innen wie in der Gesellschaft insgesamt. about this event: https://bobkonf.de/2024/paliszewska-rogalla.html

Kommunikationsmuster für Services: Effizient und zuverlässig (bobkonf2024)

Fri, 15 Mar 2024 12:35:00 +0100

Kennt jemand eine IT-Landschaft mit nur einer Anwendung? Ich nicht, selbst die größten Monolithen lösen selten alles alleine. In den meisten Unternehmen existieren normalerweise mehrere Anwendungen, die auf ihre Bereiche spezialisiert sind. Die Spezialisierung wird aber vermutlich selten so weit gehen, dass die verwendeten Daten vollständig disjunkt sind. In den meisten Fällen liegt ein bunter Mix vor: Rein lokale Daten einer Anwendung, redundant gespeicherte Daten und Aufgaben, die von einer zur nächsten Anwendung weitergereicht werden. Wie gehen wir mit diesem Zoo am besten um, ohne in einer Wildnis zu landen, in der Daten und Aufträge verloren gehen, Daten inkonsistent sind oder Aufträge mehrfach ausgeführt werden? Manche sehen in API-Management und REST die Lösung für alle Probleme, andere schwören auf Event-driven-Architecture mit zentralem Event-Broker. Ich werde (einfache) Kommunikationsmuster für die häufigsten Probleme in derartig verteilten Systemen vorstellen, immer mit den Zielen einfach, zuverlässig und effizient. Und dem Wissen, dass es ohne Kompromisse nicht geht. about this event: https://bobkonf.de/2024/butenuth.html

The Unreasonable Effectiveness of Events (bobkonf2024)

Fri, 15 Mar 2024 17:10:00 +0100

For many, event-driven communication is often considered just an implementation detail. However, event-driven architecture has implications that reach far beyond the realm of asynchronous messaging. In this presentation, we will delve into many of these implications in detail. From delivery guarantees to promise theory, from designing event payloads to functional programming, from error handling to strategic domain-driven design - we will embark on a journey from seemingly minor details to the big picture. about this event: https://bobkonf.de/2024/huehnken.html

Zero-Knowledge-Proofs for Privacy and Trust (bobkonf2024)

Fri, 15 Mar 2024 17:10:00 +0100

Zero-knowledge proofs are cryptographic techniques that allow a prover to convince a verifier that certain statements hold, without providing any additional information. They are becoming increasingly popular in the blockchain space, as they provide solutions to overcome inherent weaknesses of blockchains: as they assume a complete lack of trust between participants, every calculation has to be replicated by multiple parties, which leads to poor efficiency. Also, blockchains provide a shared public ledger, which by default is lacking any privacy. In this presentation, we will discuss zero-knowledge succinct non-interactive arguments of knowledge (zkSNARKS). Using the mina blockchain and smart contract system as an example, we will show how they can be used to efficiently create trust in an untrusted environment. We will also look at how they allow creating applications with a programmable degree of privacy. While zero knowledge techniques are a perfect match for blockchains, and they are rapidly gaining traction in that industry, their usefulness goes beyond that. The goal of this presentation is to introduce the audience to the concept of zero knowledge proofs, and provide a basic understanding and intuition of how they work, and under which circumstances they can be useful. about this event: https://bobkonf.de/2024/kant.html

Referenziell transparente Business-Prozesse in funktional (bobkonf2024)

Fri, 15 Mar 2024 16:20:00 +0100

Die explizite Modellierung von Business-Prozessen und deren Visualisierung ist ab einer bestimmten Größe und Anzahl von Prozessen unabdingbar. Ob zur Diskussion über Fachlichkeiten, zur Formulierung neuer Prozess-Modelle oder Wartung und Weiterentwicklung alter Prozess-Modelle - Prozess-Modelle als Diskussionsgrundlage erweisen sich als riesige Hilfe. Wäre es dazu nicht toll, wenn die Prozess-Modelle, einschließlich komplexer Bedingungen von Statusübergängen, referenziell transparent wären, das heißt auf vergleichbaren Daten beruhen, die sich einfach serialisieren und visualisieren lassen? In diesem Talk zeigen wir nicht nur, wie wir unter Zuhilfenahme verschiedener Techniken aus der funktionalen Programmierung derartige Prozess-Modelle formulieren und ausführen, sondern auch, wie wir wiederverwendbare Prozessbausteine definieren, um über Prozess-Modelle zu abstrahieren. Die Modellierung stellt sich dabei so flexibel heraus, dass sie als Grundlage für verschiedene Prozess-Standards, wie BPMN & co verwendet werden kann. Durch die Kombination mit einem Event-basierten System entsteht so mit geringem Aufwand eine mächtige und leicht erweiterbare Prozess-Engine für unterschiedlichste prozessbasierte Anwendungen. about this event: https://bobkonf.de/2024/haerer.html

End-to-end Type-Safety with Your Own API Spec DSL (bobkonf2024)

Fri, 15 Mar 2024 10:15:00 +0100

This talk offers a deep dive into the creation of a custom Domain-Specific Language (DSL) for HTTP API specifications, focusing on achieving end-to-end type safety targeting TypeScript client applications with Go/Rust/OCaml backends. I’ll share my experiences and choices in developing this DSL in OCaml, highlighting its design principles and challenges encountered. Key discussion points include the necessity of type safety across software layers, DSL design strategies, and the detailed process of building and integrating the DSL. I’ll cover some practical challenges and solutions in DSL development, considering aspects like type inference, schema validation, and automatic code generation for the backend routes and the client-side bindings. about this event: https://bobkonf.de/2024/schmaltz.html

Model-Based Testing with QuickCheck (bobkonf2024)

Fri, 15 Mar 2024 14:15:00 +0100

QuickCheck is well-known as a framework for Property-Based Testing whereby one writes tests as properties some code should respect and use generators and shrinkers to prove or find counterexamples to those properties. Building on those principles, quickcheck-dynamic is a new tool to define State-Machine like models of software, generate and run sequence of actions, and express properties of the system in terms of high-level Dynamic Logic expressions. This session is both an introduction to, and an experience report on, the use of quickcheck-dynamic and more generally to the principles and practices of Model-Based Testing. Through a few examples drawn from real-life use of the library, I hope to convince the audience of the relevance of these tools for the development of complex, stateful software. about this event: https://bobkonf.de/2024/bailly.html

Midori is much more than a web browser (osc24)

Fri, 28 Jun 2024 10:00:00 +0200

Midori features by being a light, fast and secure browser but in recent years it has become the epicenter of open source and free software services, with a focus on privacy, OpenSUSE is our center for the construction and distribution of Midori. We want to present Midori to the entire free software and OpenSUSE community as a tool for the protection of privacy, for security, also as a vehicle of innovation for navigation and as an ecosystem for the construction of services that revolve around the browser. We are going to talk about Midori, a renowned browser that has been renewed, we are going to talk about the news, our future plans, our commitment to privacy and free software, and we are also going to talk about how we use OpenSUSE in our construction process and the integration of Midori with other applications and services. VPN browsing, DNS, ad blocker, search engine, AstianGO and many other services aimed at user privacy and security. Midori features by being a light, fast and secure browser but in recent years it has become the epicenter of open source and free software services, with a focus on privacy, OpenSUSE is our center for the construction and distribution of Midori. We want to present Midori to the entire free software and OpenSUSE community as a tool for the protection of privacy, for security, also as a vehicle of innovation for navigation and as an ecosystem for the construction of services that revolve around the browser. We are going to talk about Midori, a renowned browser that has been renewed, we are going to talk about the news, our future plans, our commitment to privacy and free software, and we are also going to talk about how we use OpenSUSE in our construction process and the integration of Midori with other applications and services. VPN browsing, DNS, ad blocker, search engine, AstianGO and many other services aimed at user privacy and security. about this event: https://c3voc.de

Quick Start with ownCloud Infinite Scale (osc24)

Sat, 29 Jun 2024 14:15:00 +0200

Infinite Scale is ownCloud's new file-sharing application, rewritten in Go and designed with a scalable microservices architecture. It can run efficiently on your Raspberry Pi at home or in a large-scale Kubernetes deployment with 1M+ users. In this talk, we’ll give you: - An overview of the benefits and building blocks of Infinite Scale - Real-World example: How Infinite Scale is currently used in Schools - Getting started: How to get your own Infinite Scale server started in just a few minutes Infinite Scale is ownCloud's new file-sharing application, rewritten in Go and designed with a scalable microservices architecture. It can run efficiently on your Raspberry Pi at home or in a large-scale Kubernetes deployment with 1M+ users. In this talk, we’ll give you: - An overview of the benefits and building blocks of Infinite Scale - Real-World example: How Infinite Scale is currently used in Schools - Getting started: How to get your own Infinite Scale server started in just a few minutes about this event: https://c3voc.de

A Message from SUSE's CEO (osc24)

Thu, 27 Jun 2024 09:45:00 +0200

Dirk-Peter van Leeuwen (“DP”) is Chief Executive Officer of SUSE and a member of the Management Board of SUSE S.A. DP will provide a short video to conference attendees. Dirk-Peter van Leeuwen (“DP”) is Chief Executive Officer of SUSE and a member of the Management Board of SUSE S.A. DP will provide a short video to conference attendees. about this event: https://c3voc.de

Open Source Panel Discussion: Chain Reaction (osc24)

Sat, 29 Jun 2024 16:00:00 +0200

Join us for an exciting and dynamic Open Source Panel Discussion, where the conversation and the panel itself are driven by the community! Kick-Off by Douglas DeMaio: Douglas DeMaio will kick off the panel discussion. Douglas will start by selecting the first panelist to join him on stage. This first panelist will then select the next person to join the panel, creating a chain reaction of selections. How It Works: Initial Selection: Douglas DeMaio will choose the first person to join the panel. Chain Reaction: Each new panelist will then select the next person to join the panel, ensuring a diverse and dynamic group of speakers. Volunteer Participation: Volunteers who want to join the discussion are encouraged to express their interest. Feel free to raise your hand or indicate your willingness to participate. Why Participate: Dynamic Discussion: This unique format ensures a wide range of perspectives and a lively, engaging discussion. Community Driven: The selection process allows the community to shape the conversation, making it relevant and inclusive. Networking Opportunity: Meet and interact with leading figures in the open source community and make valuable connections. Topics of Discussion: The future of open source software Challenges and opportunities in open source development Community building and collaboration Driving the Geeko Foundation forward AI in Open Source Come ready to share, learn, and be inspired by the collective wisdom of our open source community! Join us for an exciting and dynamic Open Source Panel Discussion, where the conversation and the panel itself are driven by the community! Kick-Off by Douglas DeMaio: Douglas DeMaio will kick off the panel discussion. Douglas will start by selecting the first panelist to join him on stage. This first panelist will then select the next person to join the panel, creating a chain reaction of selections. How It Works: Initial Selection: Douglas DeMaio will choose the first person to join the panel. Chain Reaction: Each new panelist will then select the next person to join the panel, ensuring a diverse and dynamic group of speakers. Volunteer Participation: Volunteers who want to join the discussion are encouraged to express their interest. Feel free to raise your hand or indicate your willingness to participate. Why Participate: Dynamic Discussion: This unique format ensures a wide range of perspectives and a lively, engaging discussion. Community Driven: The selection process allows the community to shape the conversation, making it relevant and inclusive. Networking Opportunity: Meet and interact with leading figures in the open source community and make valuable connections. Topics of Discussion: The future of open source software Challenges and opportunities in open source development Community building and collaboration Driving the Geeko Foundation forward AI in Open Source Come ready to share, learn, and be inspired by the collective wisdom of our open source community! about this event: https://c3voc.de

We are openSUSE. Asia Summit (osc24)

Sat, 29 Jun 2024 13:15:00 +0200

openSUSE.Asia summit started from 2014, and we will have the 10th openSUSE.Asia Summit in 2024. It will be pleasure to review the journey we went together in the past 10 years, and to share the memorable experience and achievement. We are eager to present how openSUSE.Asia summit started, what is openSUSE.Asia Summit, how we make it run under Asian culture, what is the highlight of the Summit, what we learn to organize the community event from the summit. (Hillwood will also present openSUSE.Asia Summit 2023 in this session) openSUSE.Asia summit started from 2014, and we will have the 10th openSUSE.Asia Summit in 2024. It will be pleasure to review the journey we went together in the past 10 years, and to share the memorable experience and achievement. We are eager to present how openSUSE.Asia summit started, what is openSUSE.Asia Summit, how we make it run under Asian culture, what is the highlight of the Summit, what we learn to organize the community event from the summit. (Hillwood will also present openSUSE.Asia Summit 2023 in this session) about this event: https://c3voc.de

Challenges in making Slowroll (osc24)

Sat, 29 Jun 2024 15:30:00 +0200

I want to tell about past and future challenges that I found in making the [openSUSE Slowroll](https://en.opensuse.org/openSUSE:Slowroll) distribution - a derivative of Tumbleweed. I want to tell about past and future challenges that I found in making the [openSUSE Slowroll](https://en.opensuse.org/openSUSE:Slowroll) distribution - a derivative of Tumbleweed. about this event: https://c3voc.de

sdbootutil: Mastering the Art of Boot Management (osc24)

Sat, 29 Jun 2024 14:15:00 +0200

In the ever-evolving landscape of system management, the **bootloader** is a critical component that often remains shrouded in mystery for many users. This presentation introduces **sdbootutil**, a powerful tool **designed to simplify** the management of bootloaders on **openSUSE**. **sdbootutil** emerges as a response to the need for a more intuitive and robust tool to handle boot configurations, especially for systems utilizing btrfs snapshots. Throughout the talk, we will explore the core functionalities of **sdbootutil**, demonstrating how it streamlines complex boot management tasks into straightforward commands. The session will cover three main aspects: **What is sdbootutil?** - An introduction to the tool, its interface, and its capabilities in managing system bootloaders. **Why does sdbootutil exist?** - We will delve into the challenges and limitations of traditional boot management approaches that led to the development of **sdbootutil**, highlighting its advantages in modern system setups. **What are the future plans for sdbootutil?** - A look ahead at the upcoming features and potential enhancements. This segment will also touch upon how contributions from the community can help shape the future of this open-source project. Whether you are a system **administrator**, a **developer**, or simply a **Linux enthusiast**, understanding **sdbootutil** will equip you with the knowledge to effectively manage boot processes, contributing to more stable and efficient system operations. Join us to uncover how **sdbootutil** can transform your approach to system boot management and **prepare your systems for the demands of the future**. In the ever-evolving landscape of system management, the **bootloader** is a critical component that often remains shrouded in mystery for many users. This presentation introduces **sdbootutil**, a powerful tool **designed to simplify** the management of bootloaders on **openSUSE**. **sdbootutil** emerges as a response to the need for a more intuitive and robust tool to handle boot configurations, especially for systems utilizing btrfs snapshots. Throughout the talk, we will explore the core functionalities of **sdbootutil**, demonstrating how it streamlines complex boot management tasks into straightforward commands. The session will cover three main aspects: **What is sdbootutil?** - An introduction to the tool, its interface, and its capabilities in managing system bootloaders. **Why does sdbootutil exist?** - We will delve into the challenges and limitations of traditional boot management approaches that led to the development of **sdbootutil**, highlighting its advantages in modern system setups. **What are the future plans for sdbootutil?** - A look ahead at the upcoming features and potential enhancements. This segment will also touch upon how contributions from the community can help shape the future of this open-source project. Whether you are a system **administrator**, a **developer**, or simply a **Linux enthusiast**, understanding **sdbootutil** will equip you with the knowledge to effectively manage boot processes, contributing to more stable and efficient system operations. Join us to uncover how **sdbootutil** can transform your approach to system boot management and **prepare your systems for the demands of the future**. about this event: https://c3voc.de

Will the DMA do anything for us? (osc24)

Fri, 28 Jun 2024 17:45:00 +0200

The Digital Markets Act is EU's answer to the anti-competitive behavior of Big Tech. We've filed a complaint with the EU anti-trust authorities about Microsoft so we've been following what is going on in this space, and in this talk I'll give a quick update on where we are! The Digital Markets Act is EU's answer to the anti-competitive behavior of Big Tech. We've filed a complaint with the EU anti-trust authorities about Microsoft so we've been following what is going on in this space, and in this talk I'll give a quick update on where we are! about this event: https://c3voc.de

Don't Fear the Reboot (osc24)

Sat, 29 Jun 2024 10:00:00 +0200

With immutable OS products like MicroOS and Aeon, openSUSE now offers a very different model of system management, one which emphasizes automation, hands-off management, and system self-care. It could be said that such products take the idea of "never touch a running system" and turn it into an operating model. This session will explore some of consequences of such a model, and encourage the shifts in mindset needed for those more used to "traditional" Linux systems to reap the full benefits available from products like openSUSE Aeon and MicroOS With immutable OS products like MicroOS and Aeon, openSUSE now offers a very different model of system management, one which emphasizes automation, hands-off management, and system self-care. It could be said that such products take the idea of "never touch a running system" and turn it into an operating model. This session will explore some of consequences of such a model, and encourage the shifts in mindset needed for those more used to "traditional" Linux systems to reap the full benefits available from products like openSUSE Aeon and MicroOS about this event: https://c3voc.de

Geeko Foundation Update (osc24)

Fri, 28 Jun 2024 17:45:00 +0200

This talk will focus on providing an update about the Geeko Foundation. It will provide people insight as to how the foundation has progressed and give a view on where it is heading. This talk will focus on providing an update about the Geeko Foundation. It will provide people insight as to how the foundation has progressed and give a view on where it is heading. about this event: https://c3voc.de

Open Source: A question of national and global security (osc24)

Sat, 29 Jun 2024 11:00:00 +0200

Climate change, wars, catastrophes, political uproar: Some things are going bad. Risk management on the higher OSI Layers has never been that important - so how well are you prepared? Is your company relying on software imports? Do you even know? do you have a clue where and how much open source software could one day be the one thing that safes your job, life, company? What is crucial for your setup, are your plans when things go bad? Don't get me wrong, this is not a prepper talk. This is about good enterpreneurship, good project management and about digital sobriety. Face it, you WILL run into problems. What's your alternatives? It's not only about digital sovereignty, sustainability, sobriety, or security. Whithout OSS, none of the above is possible. No matter if it's but the malware ransomware hacker attack that takes down your groupware, or the licensing server that keeps denying your requests. How will you cope? From OSI Layer 8 (the user) through managemennt (9 and 10) to 11 (global politics), everybody is affected, in the end this is a question of national security. Especially when spending tax money, you can rely, but you shouldn't depend on foreign actors, but we do. What's your plan? Climate change, wars, catastrophes, political uproar: Some things are going bad. Risk management on the higher OSI Layers has never been that important - so how well are you prepared? Is your company relying on software imports? Do you even know? do you have a clue where and how much open source software could one day be the one thing that safes your job, life, company? What is crucial for your setup, are your plans when things go bad? Don't get me wrong, this is not a prepper talk. This is about good enterpreneurship, good project management and about digital sobriety. Face it, you WILL run into problems. What's your alternatives? It's not only about digital sovereignty, sustainability, sobriety, or security. Whithout OSS, none of the above is possible. No matter if it's but the malware ransomware hacker attack that takes down your groupware, or the licensing server that keeps denying your requests. How will you cope? From OSI Layer 8 (the user) through managemennt (9 and 10) to 11 (global politics), everybody is affected, in the end this is a question of national security. Especially when spending tax money, you can rely, but you shouldn't depend on foreign actors, but we do. What's your plan? about this event: https://c3voc.de

Building a Robotic Future with openSUSE and Open Source (osc24)

Sat, 29 Jun 2024 11:45:00 +0200

Robotics stands at the forefront of technological advancement. It has had a great impact on both industries and our day-to-day lives, and with the recent advancements in AI technology, robotics will only get more important. Open source principles have been instrumental in driving progress in various fields, and it is true for robotics as well. A lot of software used in the field is open source, for example, ROS (Robot Operating System) and Gazebo etc. Linux distros like Ubuntu and Fedora have already established themselves as well known players in the robotics community. However, there is unique opportunity for openSUSE to carve its niche in this domain. This talk aims to explore this opportunity and outline a roadmap for building a robotic ecosystem with openSUSE. Drawing inspiration from existing initiatives such as Ubuntu's Robotics community and Fedora's Robotics Suite, I will propose ways to enhance openSUSE's relevance in the landscape. This includes the creation of specialized packages optimized for robotics applications, establishing partnerships with universities and research institutions to promote openSUSE adoption, and make a vibrant community of robotics enthusiasts and developers. Attendees can expect to gain insights into the pivotal role of open source in robotics and practical steps to advance openSUSE as a preferred platform. Whether you're a developer, student, or simply intrigued by technology and open source, this talk offers a vision for an innovative robotic future with openSUSE. Robotics stands at the forefront of technological advancement. It has had a great impact on both industries and our day-to-day lives, and with the recent advancements in AI technology, robotics will only get more important. Open source principles have been instrumental in driving progress in various fields, and it is true for robotics as well. A lot of software used in the field is open source, for example, ROS (Robot Operating System) and Gazebo etc. Linux distros like Ubuntu and Fedora have already established themselves as well known players in the robotics community. However, there is unique opportunity for openSUSE to carve its niche in this domain. This talk aims to explore this opportunity and outline a roadmap for building a robotic ecosystem with openSUSE. Drawing inspiration from existing initiatives such as Ubuntu's Robotics community and Fedora's Robotics Suite, I will propose ways to enhance openSUSE's relevance in the landscape. This includes the creation of specialized packages optimized for robotics applications, establishing partnerships with universities and research institutions to promote openSUSE adoption, and make a vibrant community of robotics enthusiasts and developers. Attendees can expect to gain insights into the pivotal role of open source in robotics and practical steps to advance openSUSE as a preferred platform. Whether you're a developer, student, or simply intrigued by technology and open source, this talk offers a vision for an innovative robotic future with openSUSE. about this event: https://c3voc.de

Moderation and Code of Conduct are vital for a community (osc24)

Sat, 29 Jun 2024 13:00:00 +0200

A short talk about why proper moderation and a code of conduct are vital for a community. I will add more to this abstract over the next couple of days. A short talk about why proper moderation and a code of conduct are vital for a community. I will add more to this abstract over the next couple of days. about this event: https://c3voc.de

If we build it, will they come: Contribution Beyond Coding (osc24)

Sat, 29 Jun 2024 14:45:00 +0200

Tech communities, like any other communities out there, face similar challenges around awareness, adoption, and management. But with open source communities we are typically designing and building software, all with the idea that if we build it they will come. However, we believe we know what our users want, because we are also users of the software that we build. But what if we build all of it and they don't come? In this session the speaker will delve into the how-to's of highlighting existing use cases and exploring new ones, in the context of noncode contributions made by an end user, such as outreach efforts, documentation initiatives, and contributor growth. They will also demonstrate how to foster community interaction on contributing content that drives adoption for an open source project. Tech communities, like any other communities out there, face similar challenges around awareness, adoption, and management. But with open source communities we are typically designing and building software, all with the idea that if we build it they will come. However, we believe we know what our users want, because we are also users of the software that we build. But what if we build all of it and they don't come? In this session the speaker will delve into the how-to's of highlighting existing use cases and exploring new ones, in the context of noncode contributions made by an end user, such as outreach efforts, documentation initiatives, and contributor growth. They will also demonstrate how to foster community interaction on contributing content that drives adoption for an open source project. about this event: https://c3voc.de

Exchange your Exchange: grommunio - an open source drop-in and so much more (osc24)

Sat, 29 Jun 2024 11:30:00 +0200

groupware, video conferences, chat, file sync, mobile device management, archive, web office: Grommunio is much more than just an open source replacement for MS Exchange. In this talk, we will show why we did what we did and how. It's about reading more than 8000 pages of specs, starts with a Chinese programmer and is standing on the shoulder of giants: With grommunio, no changes are necessary to your clients. Be it Outlook, Android or iPhones: No plugins, add-ons, registry-entries or clients need to be installed, it will just work out of the box, and there's several clients for the Linux desktop, too. Oh, and per default, our servers run on opensuse. groupware, video conferences, chat, file sync, mobile device management, archive, web office: Grommunio is much more than just an open source replacement for MS Exchange. In this talk, we will show why we did what we did and how. It's about reading more than 8000 pages of specs, starts with a Chinese programmer and is standing on the shoulder of giants: With grommunio, no changes are necessary to your clients. Be it Outlook, Android or iPhones: No plugins, add-ons, registry-entries or clients need to be installed, it will just work out of the box, and there's several clients for the Linux desktop, too. Oh, and per default, our servers run on opensuse. about this event: https://c3voc.de

Smart ways to monitor your Linux systems using open source software (osc24)

Sat, 29 Jun 2024 13:15:00 +0200

In this talk, I will describe smart and intelligent open source based techniques you can use to monitor your Linux systems in order to avoid unnecessary outages and downtime. I will show how you can get quick and actionable alerts in case of system failures. You will learn how to use modern open source tools to receive timely notifications and information regarding your Linux systems. While email has traditionally been used to notify of IT system failures, it might not be suitable these days since there’s increased mobility. I will show how you can receive critical alerts on your mobile devices such as cellphones using XMPP Messaging. Alerts can also be sent in the form of voice notifications to smart home or office speakers. During this talk, you will also learn how to set up monitoring processes that watch for any signs of trouble on your Linux system. For example: High and unusual CPU usage, low memory, low storage space or failing hard disks, overheating, application failures. For application failures such as web and database services, I will share smart techniques you can use to recover with as little manual interaction as possible. Furthermore, I will outline the different open source based monitoring solutions that currently exist and how they can easily be installed and deployed on your Linux system. In this talk, I will describe smart and intelligent open source based techniques you can use to monitor your Linux systems in order to avoid unnecessary outages and downtime. I will show how you can get quick and actionable alerts in case of system failures. You will learn how to use modern open source tools to receive timely notifications and information regarding your Linux systems. While email has traditionally been used to notify of IT system failures, it might not be suitable these days since there’s increased mobility. I will show how you can receive critical alerts on your mobile devices such as cellphones using XMPP Messaging. Alerts can also be sent in the form of voice notifications to smart home or office speakers. During this talk, you will also learn how to set up monitoring processes that watch for any signs of trouble on your Linux system. For example: High and unusual CPU usage, low memory, low storage space or failing hard disks, overheating, application failures. For application failures such as web and database services, I will share smart techniques you can use to recover with as little manual interaction as possible. Furthermore, I will outline the different open source based monitoring solutions that currently exist and how they can easily be installed and deployed on your Linux system. about this event: https://c3voc.de

Postquantum Cryptography (osc24)

Sat, 29 Jun 2024 11:00:00 +0200

The last years have seen quite some improvements in Quantum Computers. As a sufficiently large quantum computer even if still several years in the future would be able to attack current day cryptography like RSA and Elliptic Curves, we need to start thinking and planning now about transitioning to quantum resistant / quantum safe or post quantum cryptographic ciphers where needed. We will give an introduction to the problem, talk about the state of the standardization and development, and what has happened already in SUSE Linux Enterprise and openSUSE. The last years have seen quite some improvements in Quantum Computers. As a sufficiently large quantum computer even if still several years in the future would be able to attack current day cryptography like RSA and Elliptic Curves, we need to start thinking and planning now about transitioning to quantum resistant / quantum safe or post quantum cryptographic ciphers where needed. We will give an introduction to the problem, talk about the state of the standardization and development, and what has happened already in SUSE Linux Enterprise and openSUSE. about this event: https://c3voc.de

Linux at Volkswagen (osc24)

Fri, 28 Jun 2024 15:30:00 +0200

Software development without Linux is no longer possible within automotive environment. Therefore Volkswagen Group IT created and maintains a Linux distribution for our developers. This short talk will highlight our starting goal to integrate into the existing environment, highlight our integration problems and solutions with contributing to upstream. Furthermore we will show where Linux desktop need to improve in future iteration to be a good fitting replacement for other systems. Software development without Linux is no longer possible within automotive environment. Therefore Volkswagen Group IT created and maintains a Linux distribution for our developers. This short talk will highlight our starting goal to integrate into the existing environment, highlight our integration problems and solutions with contributing to upstream. Furthermore we will show where Linux desktop need to improve in future iteration to be a good fitting replacement for other systems. about this event: https://c3voc.de

Why to log centrally? (osc24)

Fri, 28 Jun 2024 14:30:00 +0200

Why is central logging so important? Convenience, availability and security. Convenience, as you have a single place to check instead of many. Availability, as you can check log messages, even if the sending host is unavailable. Security, as logs leave hosts as soon as they are produced, so an attacker has no chance to modify them. Developers, operators, and security have a single view of the whole network and can easily correlate events from multiple hosts. Often, the various tools to analyze log messages provide you with their own agents to forward logs to SIEM or other analytics tools. However, this is inefficient for several reasons. Most importantly, it is a waste of computing resources. You install multiple applications to do the same job: forwarding log messages. And these messages then travel through your network multiple times. So, what you should do instead is build a dedicated log management layer for central log collection. This ensures that log messages are collected only once. Using the OpenTelemetry protocol, logs, traces and metrics can be collected together, simplifying the architecture of collecting data about your infrastructure even further. From this talk, you can learn how to implement central logging using syslog-ng and how OpenTelemetry changes logging. Syslog-ng in openSUSE Tumbleweed already supports the OpenTelemetry protocol. Why is central logging so important? Convenience, availability and security. Convenience, as you have a single place to check instead of many. Availability, as you can check log messages, even if the sending host is unavailable. Security, as logs leave hosts as soon as they are produced, so an attacker has no chance to modify them. Developers, operators, and security have a single view of the whole network and can easily correlate events from multiple hosts. Often, the various tools to analyze log messages provide you with their own agents to forward logs to SIEM or other analytics tools. However, this is inefficient for several reasons. Most importantly, it is a waste of computing resources. You install multiple applications to do the same job: forwarding log messages. And these messages then travel through your network multiple times. So, what you should do instead is build a dedicated log management layer for central log collection. This ensures that log messages are collected only once. Using the OpenTelemetry protocol, logs, traces and metrics can be collected together, simplifying the architecture of collecting data about your infrastructure even further. From this talk, you can learn how to implement central logging using syslog-ng and how OpenTelemetry changes logging. Syslog-ng in openSUSE Tumbleweed already supports the OpenTelemetry protocol. about this event: https://c3voc.de

Unleashing the Power of GenAI with Edge Ecosystem Analytics and Kubernetes Orchestration (osc24)

Fri, 28 Jun 2024 16:15:00 +0200

The exponentially growing **AI/ML** and **LLMs** advancements bring concerns about privacy, as there is a risk of data exposure to online LLMs service providers. Setting up **LLMs in-house** requires a **high computational cost** which is a major obstacle for businesses across various sectors such as Retail, Healthcare, Finance, etc. These industries seek to leverage the power of LLMs to drive **profitability** in their overall business while maintaining **control over their data.** In this session, we will explore the **Edge Ecosystem Analytics** and its transformative potential in **GenAI Applications**. Through seamless orchestration via **Rancher managed Kubernetes** which can help individuals overcome challenges in adopting and deploying cutting edge Gen-AI applications at the edge. Key Topics: - Overview of **Large Language Models (LLMs)** - Scope for **Edge Computing** in AI revolution - Benefits over privacy concerns by **localization of LLMs** - Real-world Application Showcase by leveraging **GenAI for Edge Ecosystem Analytics** - Integration of Retrieval Augmentation Generation (RAG) Pipeline into **Rancher & K3s** - Challenges while deploying **GenAI applications at the Edge** This short talk will showcase a real-world GenAI-based application, highlighting the utilization of the RAG pipeline as well as a **data modeling pipeline** to continually improve analytic outputs and its seamless integration with **Rancher and K3s**. Attendees would learn about Rancher, K3s in managing Kubernetes deployments for GenAI applications, LLMs optimizations techniques such as **RAG,** overview of **Fine Tuning** and **AI Agents.** The exponentially growing **AI/ML** and **LLMs** advancements bring concerns about privacy, as there is a risk of data exposure to online LLMs service providers. Setting up **LLMs in-house** requires a **high computational cost** which is a major obstacle for businesses across various sectors such as Retail, Healthcare, Finance, etc. These industries seek to leverage the power of LLMs to drive **profitability** in their overall business while maintaining **control over their data.** In this session, we will explore the **Edge Ecosystem Analytics** and its transformative potential in **GenAI Applications**. Through seamless orchestration via **Rancher managed Kubernetes** which can help individuals overcome challenges in adopting and deploying cutting edge Gen-AI applications at the edge. Key Topics: - Overview of **Large Language Models (LLMs)** - Scope for **Edge Computing** in AI revolution - Benefits over privacy concerns by **localization of LLMs** - Real-world Application Showcase by leveraging **GenAI for Edge Ecosystem Analytics** - Integration of Retrieval Augmentation Generation (RAG) Pipeline into **Rancher & K3s** - Challenges while deploying **GenAI applications at the Edge** This short talk will showcase a real-world GenAI-based application, highlighting the utilization of the RAG pipeline as well as a **data modeling pipeline** to continually improve analytic outputs and its seamless integration with **Rancher and K3s**. Attendees would learn about Rancher, K3s in managing Kubernetes deployments for GenAI applications, LLMs optimizations techniques such as **RAG,** overview of **Fine Tuning** and **AI Agents.** about this event: https://c3voc.de

Why This All Matters (osc24)

Fri, 28 Jun 2024 13:00:00 +0200

Rick Spencer has a passion for leading teams in the creation of amazing software. He strives to create clarity of vision, passion for quality, and user-centered decision making to both small and large software development teams. Rick is a General Manager with SUSE since January 2024. He has held positions at InfluxData, Canonical Ltd. and Microsoft. Rick Spencer has a passion for leading teams in the creation of amazing software. He strives to create clarity of vision, passion for quality, and user-centered decision making to both small and large software development teams. Rick is a General Manager with SUSE since January 2024. He has held positions at InfluxData, Canonical Ltd. and Microsoft. about this event: https://c3voc.de

We're all grown up: openSUSE is not SUSE (osc24)

Fri, 28 Jun 2024 13:45:00 +0200

openSUSE is a project with a long proud heritage, however at it's heart we've always had a recurring problem. openSUSE is not SUSE. This session will investigate the problems that the Project and Companies shared names have caused both over the years. Assumptions will be challenged, expectations will be broken, and the session will kick off a grass roots effort from a number of community members to propose openSUSE finds a new, less ambiguous name for itself. openSUSE is a project with a long proud heritage, however at it's heart we've always had a recurring problem. openSUSE is not SUSE. This session will investigate the problems that the Project and Companies shared names have caused both over the years. Assumptions will be challenged, expectations will be broken, and the session will kick off a grass roots effort from a number of community members to propose openSUSE finds a new, less ambiguous name for itself. about this event: https://c3voc.de

NeuVector Integration into AWS CodePipeline CI/CD workflow (osc24)

Fri, 28 Jun 2024 14:30:00 +0200

NeuVector is a open source container security platform. Key strengths are vulnerability and runtime scanning. I demonstrate in this talk how you ensure that only container images without a detected vulnerability move to the next stage in your Pipeline. How you define the baseline of allowed activities of your application. And how you can block the deployment into production if an unexpected behavior at runtime was detected in your testing stage. I'll use AWS CodePipeline, AWS CodeDeploy and AWS CloudFormation. The procedure is applicable to other toolset and Hybrid environments as well. NeuVector is a open source container security platform. Key strengths are vulnerability and runtime scanning. I demonstrate in this talk how you ensure that only container images without a detected vulnerability move to the next stage in your Pipeline. How you define the baseline of allowed activities of your application. And how you can block the deployment into production if an unexpected behavior at runtime was detected in your testing stage. I'll use AWS CodePipeline, AWS CodeDeploy and AWS CloudFormation. The procedure is applicable to other toolset and Hybrid environments as well. about this event: https://c3voc.de

Bridging Worlds: Linux and Azure AD (osc24)

Fri, 28 Jun 2024 15:30:00 +0200

Discover the capabilities of seamless integration between Linux and Entra ID (formerly Azure AD). Gain insights into how this integration can empower an organization, streamline device management and enhance security. I'll guide you through the practical aspects of enabling Linux devices to join Entra ID and ensure smooth authentication. Join me in exploring how integrating Linux with Entra ID can unlock possibilities for your organization's future digital infrastructure. Discover the capabilities of seamless integration between Linux and Entra ID (formerly Azure AD). Gain insights into how this integration can empower an organization, streamline device management and enhance security. I'll guide you through the practical aspects of enabling Linux devices to join Entra ID and ensure smooth authentication. Join me in exploring how integrating Linux with Entra ID can unlock possibilities for your organization's future digital infrastructure. about this event: https://c3voc.de

warewulf - making cluster installations fast and reliable (osc24)

Fri, 28 Jun 2024 16:30:00 +0200

The installation process of whole compute clusters tends to be error prone and struggling work. Warewulf[1] aims to make this work more reliable and fast. This achieved by using containers to install the compute nodes. [1] hhtps://github.com/hpcng/warewulf https://github.com/mslacken/oSC-24 The installation process of whole compute clusters tends to be error prone and struggling work. Warewulf[1] aims to make this work more reliable and fast. This achieved by using containers to install the compute nodes. [1] hhtps://github.com/hpcng/warewulf https://github.com/mslacken/oSC-24 about this event: https://c3voc.de

Sweetening heterogeneous Linux deployments in the Cloud with KIWI (osc24)

Fri, 28 Jun 2024 16:45:00 +0200

When dealing with heterogeneous Linux deployments, a common challenge is developing a strategy to maintain customizations for various needs (such as security settings, default features, etc.). With the cloud, this is even more important as automation helps enable greater success over the long term. This talk will introduce the KIWI image build tool and show how to use it to effectively maintain openSUSE Tumbleweed, openSUSE ALP, Fedora Linux, and CentOS Stream Hyperscale deployments in a straightforward and uniform manner. When dealing with heterogeneous Linux deployments, a common challenge is developing a strategy to maintain customizations for various needs (such as security settings, default features, etc.). With the cloud, this is even more important as automation helps enable greater success over the long term. This talk will introduce the KIWI image build tool and show how to use it to effectively maintain openSUSE Tumbleweed, openSUSE ALP, Fedora Linux, and CentOS Stream Hyperscale deployments in a straightforward and uniform manner. about this event: https://c3voc.de

Pluggable CPU schedulers in openSUSE (osc24)

Fri, 28 Jun 2024 16:00:00 +0200

Apps are made of execution threads. On which CPU should they run? When should they start? For how long should they execute? The CPU scheduler is the part of the kernel in charge of these decisions. What does it mean to write your own scheduler? Is that even possible? This talk will show you how to create your own CPU schedulers, using an unofficial kernel package for openSUSE Tumbleweed, and some programming. Tailoring the execution of your apps to your own specific devices and needs is extremely educational, intellectually rewarding, and is an excellent way to get started in kernel programming. Coding enthusiasts who can't wait to peek under the hood of their systems are invited to attend! Apps are made of execution threads. On which CPU should they run? When should they start? For how long should they execute? The CPU scheduler is the part of the kernel in charge of these decisions. What does it mean to write your own scheduler? Is that even possible? This talk will show you how to create your own CPU schedulers, using an unofficial kernel package for openSUSE Tumbleweed, and some programming. Tailoring the execution of your apps to your own specific devices and needs is extremely educational, intellectually rewarding, and is an excellent way to get started in kernel programming. Coding enthusiasts who can't wait to peek under the hood of their systems are invited to attend! about this event: https://c3voc.de

Rebooting the Libre Graphics Meeting in Nuremberg 2025 (osc24)

Fri, 28 Jun 2024 17:00:00 +0200

The Libre Graphics Meeting (LGM) is an annual meeting on free and open source software for graphics. It has a history since 2006, but it suffered from the pandemic and faced the troubles of a generational shift of the organizers. This year, 2024, the first proper edition was held again in Rennes, France, to get it back on track after the 2019 edition in Saarbrücken and two online editions. Now, I attempt to take over the torch and carry it to Nuremberg in 2025. * An introduction to the LGM and how I became the next local organizer. * What I've learned so far about the structure of the LGM, or what is left of it after the global COVID-19 Pandemic. * Challenges in organizing a local edition of the LGM: a work-in-progress status report. * A call for supporters, partners, sponsors, and a team. * Ideas for a framework for improved support of future LGM local organization teams and interfacing with a global informal network/organization. The Libre Graphics Meeting (LGM) is an annual meeting on free and open source software for graphics. It has a history since 2006, but it suffered from the pandemic and faced the troubles of a generational shift of the organizers. This year, 2024, the first proper edition was held again in Rennes, France, to get it back on track after the 2019 edition in Saarbrücken and two online editions. Now, I attempt to take over the torch and carry it to Nuremberg in 2025. * An introduction to the LGM and how I became the next local organizer. * What I've learned so far about the structure of the LGM, or what is left of it after the global COVID-19 Pandemic. * Challenges in organizing a local edition of the LGM: a work-in-progress status report. * A call for supporters, partners, sponsors, and a team. * Ideas for a framework for improved support of future LGM local organization teams and interfacing with a global informal network/organization. about this event: https://c3voc.de

Pagure CI integration with AWS CodePipeline (osc24)

Thu, 27 Jun 2024 17:00:00 +0200

Pagure is a lightweight git centered forge based on Python with a long usage history in the Fedora project. It's well known in the openSUSE project too with an instance on code.opensuse.org. I demonstrate in this talk the current state of the Pagure Plugin system. How I implemented AWS CodePipeline as additional CI type. And how this can serve as blueprint to optimize the Plugin system and add other CI types. I will share the current status of my work to run Pagure on Kubernetes. And some good-first-issues you can tackle if you want to contribute to Pagure. Pagure is a lightweight git centered forge based on Python with a long usage history in the Fedora project. It's well known in the openSUSE project too with an instance on code.opensuse.org. I demonstrate in this talk the current state of the Pagure Plugin system. How I implemented AWS CodePipeline as additional CI type. And how this can serve as blueprint to optimize the Plugin system and add other CI types. I will share the current status of my work to run Pagure on Kubernetes. And some good-first-issues you can tackle if you want to contribute to Pagure. about this event: https://c3voc.de

Accelerating IoT with a Cognitive Serverless Framework (osc24)

Fri, 28 Jun 2024 11:00:00 +0200

IoT application developers that need to leverage the emerging cloud-edge continuum are faced with a number of challenges. Many of them derive from the limitations imposed by resource-constrained edge devices, infrastructure heterogeneity, and the need to meet criteria such as performance, resilience, security, data sovereignty, and energy efficiency. To overcome these obstacles, the EU project COGNIT (https://cognit.sovereignedge.eu/) is developing a new distributed Function-as-a-Service (FaaS) platform that enables application developers to off-load tasks to a cognitive computing continuum. Through Artificial Intelligence enabled orchestration and automation, this Horizon Europe project will implement a disaggregated architecture that fits the nature of edge environments and abstracts the complexities of the underlying cloud-edge infrastructure. It enables for dynamically managing and adapting resources and workloads in response to incidents, security aspects, and other metrics that are relevant to the evolving needs of the workloads and applications. In this talk we will explore some of the sectors and use cases—including Industry & Manufacturing, Smart Cities, Cybersecurity, Wildfire Detection, Energy—in which the open source technology that we are developing in this project will bring an immediate benefit to IoT/edge application developers and end-users. IoT application developers that need to leverage the emerging cloud-edge continuum are faced with a number of challenges. Many of them derive from the limitations imposed by resource-constrained edge devices, infrastructure heterogeneity, and the need to meet criteria such as performance, resilience, security, data sovereignty, and energy efficiency. To overcome these obstacles, the EU project COGNIT (https://cognit.sovereignedge.eu/) is developing a new distributed Function-as-a-Service (FaaS) platform that enables application developers to off-load tasks to a cognitive computing continuum. Through Artificial Intelligence enabled orchestration and automation, this Horizon Europe project will implement a disaggregated architecture that fits the nature of edge environments and abstracts the complexities of the underlying cloud-edge infrastructure. It enables for dynamically managing and adapting resources and workloads in response to incidents, security aspects, and other metrics that are relevant to the evolving needs of the workloads and applications. In this talk we will explore some of the sectors and use cases—including Industry & Manufacturing, Smart Cities, Cybersecurity, Wildfire Detection, Energy—in which the open source technology that we are developing in this project will bring an immediate benefit to IoT/edge application developers and end-users. about this event: https://c3voc.de

The future of Agama and openSUSE (osc24)

Fri, 28 Jun 2024 11:15:00 +0200

The goal of this session is to foster a conversation about the new installer developed by the YaST Team and how it can fit in the future plans for openSUSE. First, we will provide a high level view of Agama, the new experimental installer that you can see in action at a separate session at openSUSE Conference 2024. Then we will dive into several specific topics like concrete features, current status, future plans, comparison with YaST, compatibility with AutoYaST profiles and much more. Finally we want to use this session to gather opinions from the openSUSE community and to discuss how we want to move forward regarding the installation of our operating systems in the mid and long terms. The goal of this session is to foster a conversation about the new installer developed by the YaST Team and how it can fit in the future plans for openSUSE. First, we will provide a high level view of Agama, the new experimental installer that you can see in action at a separate session at openSUSE Conference 2024. Then we will dive into several specific topics like concrete features, current status, future plans, comparison with YaST, compatibility with AutoYaST profiles and much more. Finally we want to use this session to gather opinions from the openSUSE community and to discuss how we want to move forward regarding the installation of our operating systems in the mid and long terms. about this event: https://c3voc.de

Let's discuss on taking Mirrors Pro (osc24)

Fri, 28 Jun 2024 10:30:00 +0200

Today we will talk about Linux Mirrors. What do people use them for? Why they could use a (tiny bit) of modernization? What are the security implications? Where are we now and where do we plan to go? We will show you what we have done to take care of these concerns, how far we’ve gotten and our vision for the road ahead. We want to hear about everyone's opinions on what we’re doing well and more importantly on what we’re doing wrong. Today we will talk about Linux Mirrors. What do people use them for? Why they could use a (tiny bit) of modernization? What are the security implications? Where are we now and where do we plan to go? We will show you what we have done to take care of these concerns, how far we’ve gotten and our vision for the road ahead. We want to hear about everyone's opinions on what we’re doing well and more importantly on what we’re doing wrong. about this event: https://c3voc.de

What is openSUSE? and how does it help SUSE and its Partners? (osc24)

Thu, 27 Jun 2024 17:30:00 +0200

This session will provide an introduction to the openSUSE Project. It will include details about how the openSUSE community works in close relationship with SUSE to provide benefits to both openSUSE's users and SUSE's Partners. The Session will cover the following topics: * The openSUSE Community * openSUSE's Linux Distributions * openSUSE's Other Projects * How openSUSE helps SUSE and its Partners. * How you can partner with openSUSE Directly. This session will provide an introduction to the openSUSE Project. It will include details about how the openSUSE community works in close relationship with SUSE to provide benefits to both openSUSE's users and SUSE's Partners. The Session will cover the following topics: * The openSUSE Community * openSUSE's Linux Distributions * openSUSE's Other Projects * How openSUSE helps SUSE and its Partners. * How you can partner with openSUSE Directly. about this event: https://c3voc.de

SUSE ALP: State of the matters (osc24)

Fri, 28 Jun 2024 10:00:00 +0200

Last two years I have talked at this conference about the SUSE ALP - about SUSE’s plans, the products to come, alsi the technology included. A year is a long time, therfore I would like to share what has changed since last year, which products are already out, which are just to come and what will come late r, and how the openSUSE project can build their own products on top of it. Last two years I have talked at this conference about the SUSE ALP - about SUSE’s plans, the products to come, alsi the technology included. A year is a long time, therfore I would like to share what has changed since last year, which products are already out, which are just to come and what will come late r, and how the openSUSE project can build their own products on top of it. about this event: https://c3voc.de

Agama in action (osc24)

Thu, 27 Jun 2024 14:30:00 +0200

Agama is a new experimental installer for openSUSE and SUSE. Although it is under heavy development, it can already install openSUSE MicroOS and Tumbleweed, configuring several aspects of the system like networking and several storage technologies. Agama supports both interactive and unattended installations and can be controlled through a modern web interface, a powerful HTTP API and a convenient command line tool. Join this session to see all those capabilities in action on a real installation, no gimmicks! Agama is a new experimental installer for openSUSE and SUSE. Although it is under heavy development, it can already install openSUSE MicroOS and Tumbleweed, configuring several aspects of the system like networking and several storage technologies. Agama supports both interactive and unattended installations and can be controlled through a modern web interface, a powerful HTTP API and a convenient command line tool. Join this session to see all those capabilities in action on a real installation, no gimmicks! about this event: https://c3voc.de

Learning from embedded: less is more (osc24)

Thu, 27 Jun 2024 14:45:00 +0200

Ultimately, packaging is the right way to distribute and run software maintenance. But at the same time, there are very good reasons why in the Embedded world, images are often before package repositories. These reasons evolved over a very long time and did not change since. A number of typical problems, such as software bloat, configuration drift, broken updates etc are unacceptable in embedded systems as they may cause severe errors, ultimately "bricking" devices. Therefore there are specific practices to ensure those typical requirements for the embedded systems, those can be very beneficial also in other niches. If Edge Computing is on very constrained resources, there is actually a way to solve those "regular" problems, having maximum flexible and configurable solution, without _specifically_ developing a different, special distribution. This talk is intended to outline the following questions: - What are those earlier mentioned practices? - What is the benefit applying them and why does it matter? - Why Yocto Project is designed the way it is, and what part can be applied in SUSE world? - What is still missing in the process and what can be done so the result meets the requirements? **Spoiler**: _Keep it as simple as possible, but not simpler!_ :-) . Ultimately, packaging is the right way to distribute and run software maintenance. But at the same time, there are very good reasons why in the Embedded world, images are often before package repositories. These reasons evolved over a very long time and did not change since. A number of typical problems, such as software bloat, configuration drift, broken updates etc are unacceptable in embedded systems as they may cause severe errors, ultimately "bricking" devices. Therefore there are specific practices to ensure those typical requirements for the embedded systems, those can be very beneficial also in other niches. If Edge Computing is on very constrained resources, there is actually a way to solve those "regular" problems, having maximum flexible and configurable solution, without _specifically_ developing a different, special distribution. This talk is intended to outline the following questions: - What are those earlier mentioned practices? - What is the benefit applying them and why does it matter? - Why Yocto Project is designed the way it is, and what part can be applied in SUSE world? - What is still missing in the process and what can be done so the result meets the requirements? **Spoiler**: _Keep it as simple as possible, but not simpler!_ :-) . about this event: https://c3voc.de

ALP and SELinux: One year later (osc24)

Fri, 28 Jun 2024 10:30:00 +0200

With ALP we switch from AppArmor to SELinux. This talk will discuss the current state of SELinux on ALP: - what works well - what are the challenges we've seen - what to expect in the future This talk requires a basic understanding of SELinux (e.g. last years talk) With ALP we switch from AppArmor to SELinux. This talk will discuss the current state of SELinux on ALP: - what works well - what are the challenges we've seen - what to expect in the future This talk requires a basic understanding of SELinux (e.g. last years talk) about this event: https://c3voc.de

Working together in one place with Nextcloud (osc24)

Thu, 27 Jun 2024 15:30:00 +0200

Nextcloud is the most popular self-hosted, open source collaboration platform for a reason. I'll go over some of those reasons, but more importantly, show and tell what Nextcloud can do for you. As home user, small business or big business (but an emphasis on the smaller side of things). Why should you care? A small handful of big tech firms are gathering up the data of nearly everybody on this planet. They use every trick at their disposal, from pricing to gate keeping, to make sure nobody gets in. And with our data comes not only a massive opportunity to squeeze profits out of everybody using digital devices, they also give a variety of 3-letter agencies a treasure trove of data to use for profiling and worse. But the good news is that, while Big Tech prefers everyone thinks otherwise, there is a real alternative to MS 365 and Google Workspace. If you are new to Nextcloud, this will be a great introduction. If you're aware of Nextcloud, I'll show you what it can do. And if you're very familiar with Nextcloud you'll still learn some things you didn't know! Nextcloud is the most popular self-hosted, open source collaboration platform for a reason. I'll go over some of those reasons, but more importantly, show and tell what Nextcloud can do for you. As home user, small business or big business (but an emphasis on the smaller side of things). Why should you care? A small handful of big tech firms are gathering up the data of nearly everybody on this planet. They use every trick at their disposal, from pricing to gate keeping, to make sure nobody gets in. And with our data comes not only a massive opportunity to squeeze profits out of everybody using digital devices, they also give a variety of 3-letter agencies a treasure trove of data to use for profiling and worse. But the good news is that, while Big Tech prefers everyone thinks otherwise, there is a real alternative to MS 365 and Google Workspace. If you are new to Nextcloud, this will be a great introduction. If you're aware of Nextcloud, I'll show you what it can do. And if you're very familiar with Nextcloud you'll still learn some things you didn't know! about this event: https://c3voc.de

Y2038: utmp, wtmp and lastlog (osc24)

Thu, 27 Jun 2024 15:30:00 +0200

The year 2038 problem (also known as Y2038) is a time formatting bug on Unix systems with representing times after 03:14:07 UTC on 19 January 2038. This happens with a 32bit time_t, not with a 64bit time_t. The general statement so far has always been that on 64bit systems with a 64bit time_t you are safe with respect to the Y2038 problem. But this isn't correct: on bi-arch systems like x86-64 (so which can execute 64bit and 32bit binaries) glibc defines __WORDSIZE_TIME64_COMPAT32, which leads to the fact, that struct utmp (used for utmp, wtmp and btmp) and struct lastlog uses int32_t instead of time_t. So we have a Y2038 problem, which is not easy fixable, as this would require ABI and on disk format changes. In this talk I will speak about the background, which tools are affected and how we solved that in openSUSE by dropping utmp, wtmp, btmp and lastlog completely and make use of systemd-logind and other tools instead. The year 2038 problem (also known as Y2038) is a time formatting bug on Unix systems with representing times after 03:14:07 UTC on 19 January 2038. This happens with a 32bit time_t, not with a 64bit time_t. The general statement so far has always been that on 64bit systems with a 64bit time_t you are safe with respect to the Y2038 problem. But this isn't correct: on bi-arch systems like x86-64 (so which can execute 64bit and 32bit binaries) glibc defines __WORDSIZE_TIME64_COMPAT32, which leads to the fact, that struct utmp (used for utmp, wtmp and btmp) and struct lastlog uses int32_t instead of time_t. So we have a Y2038 problem, which is not easy fixable, as this would require ABI and on disk format changes. In this talk I will speak about the background, which tools are affected and how we solved that in openSUSE by dropping utmp, wtmp, btmp and lastlog completely and make use of systemd-logind and other tools instead. about this event: https://c3voc.de

openSUSEway: a Sway Desktop Environment for openSUSE (osc24)

Thu, 27 Jun 2024 17:00:00 +0200

[openSUSEway](https://en.opensuse.org/Portal:OpenSUSEway) is a Desktop Environment based on Sway - a tiling Wayland compositor. In this talk we would like to present the state of the project, what is our vision, what tools we include and why. We will then go through the new features and improvements that were added by the community in the past couple of years, what we have learned from other similar projects, and show a live demo of what an openSUSEway desktop looks like. We will conclude with our future direction and what our next challenges are. [openSUSEway](https://en.opensuse.org/Portal:OpenSUSEway) is a Desktop Environment based on Sway - a tiling Wayland compositor. In this talk we would like to present the state of the project, what is our vision, what tools we include and why. We will then go through the new features and improvements that were added by the community in the past couple of years, what we have learned from other similar projects, and show a live demo of what an openSUSEway desktop looks like. We will conclude with our future direction and what our next challenges are. about this event: https://c3voc.de

openSUSE Aeon - Desktop Linux without getting Down and Dirty (osc24)

Thu, 27 Jun 2024 13:30:00 +0200

openSUSE Aeon is an exciting new take on Desktop Linux, aiming to provide Developers, Sysadmins, and general Linux enthusiasts, a fully functioning Desktop OS without the need for hands on management, tinkering, or any of the other distractions that come with 'traditional' Linux desktops. Leveraging years of experience and development in community and commercial efforts like MicroOS and SUSE Linux Enterprise Micro, Aeon takes the advances there and reworks them into a self-healing, self-managing, desktop platform. This session will introduce openSUSE Aeon to the SUSEcon audience and invite them to both use and contribute to the project. openSUSE Aeon is an exciting new take on Desktop Linux, aiming to provide Developers, Sysadmins, and general Linux enthusiasts, a fully functioning Desktop OS without the need for hands on management, tinkering, or any of the other distractions that come with 'traditional' Linux desktops. Leveraging years of experience and development in community and commercial efforts like MicroOS and SUSE Linux Enterprise Micro, Aeon takes the advances there and reworks them into a self-healing, self-managing, desktop platform. This session will introduce openSUSE Aeon to the SUSEcon audience and invite them to both use and contribute to the project. about this event: https://c3voc.de

Challenges in End-to-End Automation of IT processes (osc24)

Thu, 27 Jun 2024 16:00:00 +0200

In the last years we worked hard at automating (technical) IT processes. In the talk I'll reflect what we did, what went well and what didn't work out. We now see that the next big challenges won't be the technical stuff - that's s "solved problem". We face a couple of challenges: - Reducing manual overhead in planning/preparing - Integration in ITSM processes especially change and incident - Automating manual processes or eliminating them. We'll view at some tools that may help us, but the biggest challenge will be a change in the mindset: How can we reduce work (possibly to zero)? Slides [https://www.jochen.org/vortraege/challenges-in-automation.pdf](https://www.jochen.org/vortraege/challenges-in-automation.pdf) In the last years we worked hard at automating (technical) IT processes. In the talk I'll reflect what we did, what went well and what didn't work out. We now see that the next big challenges won't be the technical stuff - that's s "solved problem". We face a couple of challenges: - Reducing manual overhead in planning/preparing - Integration in ITSM processes especially change and incident - Automating manual processes or eliminating them. We'll view at some tools that may help us, but the biggest challenge will be a change in the mindset: How can we reduce work (possibly to zero)? Slides [https://www.jochen.org/vortraege/challenges-in-automation.pdf](https://www.jochen.org/vortraege/challenges-in-automation.pdf) about this event: https://c3voc.de

Uyuni: the open-source configuration and infrastructure management solution for software-defined infrastructure. (osc24)

Thu, 27 Jun 2024 16:00:00 +0200

Uyuni is a configuration and infrastructure management tool that saves time, costs and headaches when managing and updating tens, hundreds or even thousands of machines. With automated patch and package management, it enables the deployment of patches and packages based on software channels and repositories that can be assigned. Uyuni makes it easier to onboard and manage any Linux server connected to the network, from IoT edge devices to Kubernetes environment, no matter where it is located (private or 3rd party data center or in the public cloud). Uyuni is a single tool for automated deployment of hardened OS templates (bare metal/VM/container) to tens of thousands of servers and IoT devices for faster, consistent and repeatable provisioning and configuration without compromising speed or security. The CVE audit feature allows to check the status of public security patches and with OpenSCAP it's also possible to check for specification compliance and apply remediations right from Uyuni. Uyuni is a configuration and infrastructure management tool that saves time, costs and headaches when managing and updating tens, hundreds or even thousands of machines. With automated patch and package management, it enables the deployment of patches and packages based on software channels and repositories that can be assigned. Uyuni makes it easier to onboard and manage any Linux server connected to the network, from IoT edge devices to Kubernetes environment, no matter where it is located (private or 3rd party data center or in the public cloud). Uyuni is a single tool for automated deployment of hardened OS templates (bare metal/VM/container) to tens of thousands of servers and IoT devices for faster, consistent and repeatable provisioning and configuration without compromising speed or security. The CVE audit feature allows to check the status of public security patches and with OpenSCAP it's also possible to check for specification compliance and apply remediations right from Uyuni. about this event: https://c3voc.de

openQA - current state and moving forward (osc24)

Thu, 27 Jun 2024 10:00:00 +0200

openQA is one of the key elements that ensures the delivery of updates and new versions of operating systems, it is the heart of openSUSE's effort to deliver stable systems for our users, and SUSE's quality gate, used to ensure that updates and new releases of the operating systems aren't breaking operations of customers; however it is growing outside openSUSE, Fedora and SUSE, expanding to other distributions, so we need to start thinking how to collaborate further, and have a clearer picture for users of openQA's ecosystem and integration capabilities. The speaker will give a quick overview of features, challenges and opportunities for further development, but also, wants to provide a window into how to close the gap between users outside of openSUSE/SUSE and the openQA development team Santiago Zarate is the Product Owner of [Quality Engineering Core team](https://progress.opensuse.org/projects/qa/wiki/Core#Scope-of-QE-Core) at SUSE, they collaborate closely with the [Quality Engineering Tools Team](https://progress.opensuse.org/projects/qa/wiki/Tools#Team) and rest of the teams of the Quality Engineering department To know more about openQA - [Talk: Shortening the feedback loops between R&D and the real world with openQA @ SUSECON 2022](https://youtu.be/3HN61L7RzzA?si=cFKT5JkujLc-w3_n) openQA is one of the key elements that ensures the delivery of updates and new versions of operating systems, it is the heart of openSUSE's effort to deliver stable systems for our users, and SUSE's quality gate, used to ensure that updates and new releases of the operating systems aren't breaking operations of customers; however it is growing outside openSUSE, Fedora and SUSE, expanding to other distributions, so we need to start thinking how to collaborate further, and have a clearer picture for users of openQA's ecosystem and integration capabilities. The speaker will give a quick overview of features, challenges and opportunities for further development, but also, wants to provide a window into how to close the gap between users outside of openSUSE/SUSE and the openQA development team Santiago Zarate is the Product Owner of [Quality Engineering Core team](https://progress.opensuse.org/projects/qa/wiki/Core#Scope-of-QE-Core) at SUSE, they collaborate closely with the [Quality Engineering Tools Team](https://progress.opensuse.org/projects/qa/wiki/Tools#Team) and rest of the teams of the Quality Engineering department To know more about openQA - [Talk: Shortening the feedback loops between R&D and the real world with openQA @ SUSECON 2022](https://youtu.be/3HN61L7RzzA?si=cFKT5JkujLc-w3_n) about this event: https://c3voc.de

The XZ Backdoor - report from our side, retrospection and looking forward (osc24)

Thu, 27 Jun 2024 10:15:00 +0200

End of March 2024 we faced the biggest supply chain attack we seen so far in the Open Source Ecosystem. A dedicated attacker had launched a multi year effort to backdoor the xz compression library. openSUSE Tumbleweed contained the backdoor for 3 whole weeks before an outside researcher found it. We will give a report on this attack, our reaction on it and also go into some future considerations to detect or avoid these kind of sophisticated attacks. End of March 2024 we faced the biggest supply chain attack we seen so far in the Open Source Ecosystem. A dedicated attacker had launched a multi year effort to backdoor the xz compression library. openSUSE Tumbleweed contained the backdoor for 3 whole weeks before an outside researcher found it. We will give a report on this attack, our reaction on it and also go into some future considerations to detect or avoid these kind of sophisticated attacks. about this event: https://c3voc.de

Creating a Language Server for RPM Spec Files (osc24)

Thu, 27 Jun 2024 11:30:00 +0200

RPM packaging is a foundation of the software delivery mechanism on RPM-based Linux distributions, with RPM spec files acting as blueprints for package builds. Despite their enduring relevance, support for editing RPM spec files has not evolved significantly over time, leaving users with rudimentary tooling. In response to this challenge, we have developed a prototype of a language server tailored specifically for RPM spec files. Based on a language server protocol, the solution offers a unified editing experience across various editors, giving users features like auto-completion, linting, and jump-to-definition. All of this is achieved by centralizing "code smarts" in one place. Join us to learn about the thinking behind the language server and the challenges we faced when implementing this new tool. RPM packaging is a foundation of the software delivery mechanism on RPM-based Linux distributions, with RPM spec files acting as blueprints for package builds. Despite their enduring relevance, support for editing RPM spec files has not evolved significantly over time, leaving users with rudimentary tooling. In response to this challenge, we have developed a prototype of a language server tailored specifically for RPM spec files. Based on a language server protocol, the solution offers a unified editing experience across various editors, giving users features like auto-completion, linting, and jump-to-definition. All of this is achieved by centralizing "code smarts" in one place. Join us to learn about the thinking behind the language server and the challenges we faced when implementing this new tool. about this event: https://c3voc.de

Secure Boot on Arm systems (osc24)

Thu, 27 Jun 2024 11:30:00 +0200

Secure boot on x86_64 is mostly taken for granted, as it is a mature feature in UEFI. When it comes to Arm, the Secure Boot implementation can differ on each platform as there's no standardization. In this session, we will learn the general approach used by vendors to implement a complete chain of trust and how you could use it in openSUSE for your next embedded project. Secure boot on x86_64 is mostly taken for granted, as it is a mature feature in UEFI. When it comes to Arm, the Secure Boot implementation can differ on each platform as there's no standardization. In this session, we will learn the general approach used by vendors to implement a complete chain of trust and how you could use it in openSUSE for your next embedded project. about this event: https://c3voc.de

Certificate Auto Enrollment on Linux: A Practical Guide (osc24)

Thu, 27 Jun 2024 11:15:00 +0200

Learn how to automate certificate enrollment within your infrastructure using Samba. This session delves into the configuration of Certificate Auto Enrollment, enabling seamless integration with Active Directory Certificate Services. Discover how Samba's approach to certificate renewal simplifies the process, enhancing security and efficiency across your organization. Learn how to automate certificate enrollment within your infrastructure using Samba. This session delves into the configuration of Certificate Auto Enrollment, enabling seamless integration with Active Directory Certificate Services. Discover how Samba's approach to certificate renewal simplifies the process, enhancing security and efficiency across your organization. about this event: https://c3voc.de

Developing on Aeon with Distrobox (osc24)

Thu, 27 Jun 2024 13:00:00 +0200

With the advent of Atomic and Transactional systems like Aeon, our development workflow has to adapt to newer paradigms One of which is the use of containers for development. We will see a little introduction to what Aeon is, what Distrobox is, and how to cover all our use cases with it, so to feel at home, in our new containerized environment. [Presentation link](https://github.com/user-attachments/files/16028608/oSC24-distrobox.pdf) With the advent of Atomic and Transactional systems like Aeon, our development workflow has to adapt to newer paradigms One of which is the use of containers for development. We will see a little introduction to what Aeon is, what Distrobox is, and how to cover all our use cases with it, so to feel at home, in our new containerized environment. [Presentation link](https://github.com/user-attachments/files/16028608/oSC24-distrobox.pdf) about this event: https://c3voc.de

Künstliche Intelligenz (oc)

Thu, 27 Jun 2024 20:00:00 +0200

In dieser umfassenden Einführung werden wir die grundlegenden Fragen klären: Was ist KI? Woher kommt sie? Wie funktioniert KI eigentlich? Wie funktionieren Large Language Models? Was sind die Risiken von KI? Was bringt KI in der Zukunft? Von den historischen Meilensteinen bis hin zu den modernen großen Sprachmodellen wie GPT-4 werden wir die Entwicklungen und das Potenzial der KI durchleuchten. Wir werden nicht nur die technische Seite beleuchten, sondern auch einen Blick in die Zukunft werfen: Was kann KI in den kommenden Jahren für unsere Gesellschaft leisten? about this event: https://c3voc.de

Punkrock Yoga (fusion24)

Sat, 29 Jun 2024 11:15:00 +0200

Punkrockyoga ist ein dynamischer Yoga Stil, der kraftvolles Yoga und guten Punk miteinander verbindet. Du erfährst die Stille im Punk. Neben entspannten Dehnübungen und Meditation kannst Du Kraft sammeln fürs nächste Moshpit. Der Kurs ist für alle Level geeignet. Kopf aus, Punk an. Language: DE Translation: NO Recording: YES Punk rock yoga is a dynamic yoga style that combines powerful yoga and great punk. You will experience the stillness within punk. In addition to relaxed stretching exercises and meditation, you can gather strength for the next mosh pit. The course is suitable for all levels. Head off, punk on. Language: DE Translation: NO Recording: YES about this event: https://c3voc.de

Standing Together (fusion24)

Sat, 29 Jun 2024 15:00:00 +0200

Die Graswurzelbewegung mobilisiert jüdische und palästinensische Bürger*innen Israels, um gemeinsam für Frieden, Gleichberechtigung, soziale und Klima-Gerechtigkeit einzutreten. Während die Minderheit, die vom Status quo der Besatzung und der wirtschaftlichen Ungleichheit profitiert, versucht, uns auseinander zu halten, wissen wir, dass wir - die Mehrheit - weit mehr gemeinsam haben. Die Zukunft, die wir wollen - Frieden und Unabhängigkeit für Israelis und Palästinenser*innen, volle Gleichberechtigung für alle Bürger*innen und wahre soziale, wirtschaftliche und ökologische Gerechtigkeit - ist möglich. Language: EN Translation: DE Recording: YES The grassroots movement mobilizes Jewish and Palestinian citizens of Israel to stand together forpeace, equality, and social &climate justice. While the minority who benefits from the status quo of occupation and economic inequality seeksto keep us apart, we know that we — the majority — have far more in common. The future that we want — peace and independence for Israelis and Palestinians, full equality for all citizens, and true social, economic, and environmental justice — is possible. Language: EN Translation: DE Recording: YES about this event: https://c3voc.de

Blind Folded Experience - YOGA (fusion24)

Thu, 27 Jun 2024 09:30:00 +0200

Schenkt Euren Augen eine Pause und lasst Euch mit geschlossenen oder verbundenen Augen durch eine sanfte und kraftvolle Yogaeinheit leiten. Spürt die Qualitäten der Übungen so bewusst wie noch nie. Schärft eure anderen Sinne, und lasst euch nur von Anna-Lenas Worten führen. Sie hat die Erfahrung gemacht, dass ihr nicht nur während, sondern auch nach dieser Stunde die Welt ganz neu erleben werdet. Language: DE Translation: NO Recording: NO Experience fascination that will broaden your horizon. Follow only Anna Lenas words and let her detailed instructions safely guide you through a gentle, yet powerful, blindfolded yoga session. Find your focus within and strengthen the perception of your other senses. Feel the qualities of body, breath and meditation exercises as consciously as you have never before. Give your eyes a loving break and enjoy this unique body experience with mindfulness. Language: DE Translation: NO Recording: NO about this event: https://c3voc.de

Countercultures (fusion24)

Sat, 29 Jun 2024 19:30:00 +0200

In den 60er Jahren revolutionierte eine von Jugend-Bewegung die westliche Kultur. Die Hippies schufen eine echte Alternative zu Kapitalismus und Patriarchat und strebten eine Welt an, in der Frieden über Krieg siegt, alle Menschen gleich sind und der Konsum nicht alles beherrscht. Diese „Gegenkultur“ spaltete sich bald in verschiedene Flügel auf, die sich heute gegenseitig bekämpfen. Welche zeitgenössischen Bewegungen knüpfen an diese Wurzeln an? Ist es an der Zeit, die Spaltungen zu heilen? Language: EN Translation: DE Recording: YES Back in the 60s a youth-led movement revolutionized Western culture. The hippies started a real alternative to capitalism and patriarchy, seeking for a world where peace prevail over war, all people are equals and consumerism is not ruling everything. This „Counterculture” soon split in different wings, which today fight against each other. Which contemporary movements are connected to this roots? Has time come for the splits to heal? Language: EN Translation: DE Recording: YES about this event: https://c3voc.de

Circaeaa (fusion24)

Fri, 28 Jun 2024 22:00:00 +0200

Juliet singt Songs über queere Selbstverteidigung mit ihren Fingernägeln oder das sich Verlieren in der passiven Rolle einer Lovestory. Mit etwas naiven Harmonien thematisiert sie dabei ambivalente Gefühle und arrangiert sie minimalistisch. Indierocksound und Ambientästhetik suchen Schutz in radikaler Verletzlichkeit. Kraft aus Brüchigkeit, Öffnung zum Anderen und neue Konstellationen von Gemeinschaft. Language: DE Translation: NO Recording: YES Songs about queer self-defense with her fingernails or losing herself in the passive role of a love story. With somewhat naïve harmonies, ambivalent feelings, in a minimalist way. Indie rock sound, ambient aesthetics, protection in radical vulnerability. Power from fragility, opening up to new constellations of community. Language: DE Translation: NO Recording: YES about this event: https://c3voc.de

It´s demographics baby (fusion24)

Sat, 29 Jun 2024 16:45:00 +0200

Die plurale Gesellschaft wird rein statistisch betrachtet die neue Normalität, was uns vor drängende Verteilungs-, Repräsentations- und Teilhabefragen stellt. Statt die Transformation sinnvoll zu gestalten, wird Migration jedoch weiterhin zum Problem und als verhandelbar erklärt. Aktuelle Zahlen und Fakten zu Migration und demographischen Wandel durchbrechen das rechtspopulistische Narrativ und zeigen Wege in ein neues, inklusives Selbstbewusstsein. Moderation: Vanessa Vu Cihan Mutlu, Grundschullehrer (Berlin) Franziska Nguyen, DaMOst & Städteplanerin (Weimar) Nela Riehl, Gymnasiallehrerin (HH), EU-Kandidatin Volt Language: DE Translation: EN Recording: YES In statistical terms, the pluralist society is becoming the new normal, which raises urgent questions about distribution, representation and participation. Instead of shaping the transformation in a useful way migration continues to be framed as a problem and negotiable. Current facts and figures on demographic change and global migration disrupt the right-wing narratives and showways towards a new, inclusive identity. Moderation: Vanessa Vu Cihan Mutlu, Teacher (Berlin) Franziska Nguyen, DaMOst & Cityplanner (Weimar) Nela Riehl, Highschool Teacher (HH) & EU-Candidate Volt Language: DE Translation: EN Recording: YES about this event: https://c3voc.de

BEi DEN LINKEN (fusion24)

Wed, 26 Jun 2024 21:30:00 +0200

Das Stück blickt zurück auf 20 Jahre politischen Aktivismus in Deutschland und beschäftigt sich mit Begegnungen von Migrant:innen und linker Szene. Die Bewohner:innen eines Flüchtlingslagers fragen sich: Wer sind die und warum unterstützen die uns? Und was macht dieser Austausch mit uns? Das Stück handelt von Empowerment und Missverständnissen und wirft einen humorvollen Blick auf eine gemeinsame Bewegung. Language: DE Translation: NO Recording: YES The play reflects on 20 years of political activism in Germany and encounters between migrants and the left. The inhabitants of a refugee camp are wondering: who are these people and why are they supporting us? What is this exchange doing to us? This is a piece about empowerment and misunderstandings with a humorous perspective on a joint movement. Language: DE Translation: NO Recording: YES about this event: https://c3voc.de

BAN NUCLEAR WEAPONS (fusion24)

Fri, 28 Jun 2024 21:00:00 +0200

Es herrscht wieder Krieg in Europa, und die Lager formieren sich neu. Nukleare Drohungen werden ausgesprochen, Milliarden für die Rüstung mobilisiert. Die alten Abrüstungsverträge sind lange gekündigt, und Deutschland weigert sich weiterhin beharrlich, an einem Atomwaffenverbot teilzunehmen. Dabei muss mensch nicht mal pazifistisch sein, um bei Massenvernichtungswaffen die Linie zu ziehen. Leo ist gern gesehener Gast bei uns und nimmt uns mit auf seinen nimmermüden Kampf für eine Welt ohne Atomwaffen. Language: DE Translation: EN Recording: YES Europe is at war again and the camps are reforming. Suddenly we need weapons to defend friends from wars of aggression. Nuclear threats are being made, billions are being earmarked for armament, barely anyone speaks of a ban on nuclear weapons in this country anymore. But you don‘t even have to be a pacifist to draw a line at weapons of mass destruction. This is why we need international law more than ever as a moral compass. Language: DE Translation: EN Recording: YES about this event: https://c3voc.de

Solidarische Bündnisse? (fusion24)

Fri, 28 Jun 2024 13:00:00 +0200

Am 9. Oktober jährt sich der antisemitische, rassistische und misogyne Anschlag von Halle (und Wiedersdorf) zum 5. Mal. Jana L. und Kevin Schwarze wurden dabei brutal ermordet. Der Anschlag ist Teil einer langen Geschichte rechten Terrors in Deutschland. Der Prozess gegen den Täter war ein besonderes Beispiel linker Solidarität, geprägt durch das beeindruckende Engagement der Überlebenden und ihrer Unterstützer*innen. Seither ist es in der Linken leiser um den Anschlag geworden. Nach dem 7. Oktober und dem Krieg zwischen Israel und der Hamas stehen viele Bündnisse auf der Kippe. Wie kann linkes, politisches Gedenken aussehen, das die Perspektiven der Überlebenden und Angehörigen der Ermordeten ernst nimmt, einbezieht und den Anschlag nicht in Vergessenheit geraten lässt? Wie kann ein Gedenken in 2024 aussehen, das rassistische und antisemitische Gewalt und Diskriminierung nicht gegeneinander stellt, sondern zusammen erinnert und bekämpft? Language: EN Translation: DE Recording: YES October 9, 2024 marks the 5th anniversary of the anti-Semitic, racist and misogynistic attack in Halle, part of a long history of right-wing terror in Germany. The trial against the perpetrator was an impressive commitment of the survivors and their supporters and a special example of left-wing solidarity. After October 7 and the war between Israel and Hamas, many alliances are on the brink of collapse. What can a commemoration 2024 look like that does not set racist and anti-Semitic violence and discrimination against each other, but remembers and fights them together? Language: EN Translation: DE Recording: YES about this event: https://c3voc.de

Lotta Puppet Trash (fusion24)

Thu, 27 Jun 2024 22:30:00 +0200

3 Generationen und ein Urlaubsparadies, aber der Haussegen hängt schief. Langeweile und zwei Mütter die angestrengt versuchen, ihre übel gelaunte Tochter von schlimmeren ab zu halten. Oma Odette, geht der Weilen ne Runde saunieren. Und was ist mit dem Neuzuwachs der Familie? Es wird wild, absurd, brutal, lustig und blutig! Happy Holidays! Language: DE Translation: NO Recording: YES 3 generations and a vacation paradise, but the house is a mess. Boredom and two mothers trying hard to keep their bad-tempered daughter from doing worse. Grandma Odette goes for a sauna. And what about the new addition to the family? It's going to be wild, absurd, brutal, funny and bloody! Happy Holidays! Language: DE Translation: NO Recording: YES about this event: https://c3voc.de

Radikale Therapie (fusion24)

Wed, 26 Jun 2024 20:00:00 +0200

Radikale Therapie hat alles was wir gut finden: Selbstorganisiert, hierarchielos, heilsam, radikal. RT ist eine sozialkritische Gruppentherapie, aufbauend auf Co-Counselling und Aspekten der Transaktions-Analyse. Statt einzeln zu therapeutischen Institutionen zu rennen oder unendlich lang auf einen Therapieplatz zu warten, trifft sich eine gleichgesinnte Gruppe in einem geschützten Rahmen, um sich selbstbestimmt über Machtstrukturen und kulturelle und soziologische Prägungen auszutauschen und Wege zu finden authentisch, frei und gut zu sich und anderen zu sein. Hier lernst du erste Methoden kennen und erfährst, wie du eine solche Gruppe finden und gründen kannst. Language: DE Translation: EN Recording: NO Are you tired of therapists who do not understand your worldview? Have you been unsuccessful in trying to phone your way through an endless list of therapists or are you lacking the success mindset of paying for your therapy as a private luxury? Or maybe you just want to exchange with cool, like-minded people in a safe space about the shit that is happening in our society, about societal and political power strutures, cultural and sociological imprinting as well as finding ways to be authentic, free and good to yourself? Then Radical Therapy (RT) could be your thing. RT relies on methods from co-counselling, expanding them with theory from the radical psychiatry of transactional analysis. You will have the opportunity to get a glimpse into elements of RT. Also, of course, you will learn how to find or start a respective group. Language: DE Translation: EN Recording: NO about this event: https://c3voc.de

Tesla stoppen!? Electric cars – a dirty lie? (fusion24)

Fri, 28 Jun 2024 19:45:00 +0200

In Grünheide, Brandenburg, steht eine große E-Autos-Fabrik. Ein zukunftsweisender Schritt für die ostdeutsche Region? Oder ist Elon Musk mit Tesla ein Gegner von Klimagerechtigkeit und nicht der Retter der Erde?Die Proteste mehren sich. Neben einer Bürger*innen-Initiative gibt es Aktionen, ein Klimacamp, Demonstration und eine Waldbesetzung. Wieso ist eine Besetzung ein geeignetes Mittel zum Protest? Die Wasserbesetzung "Tesla stoppen" freut sich auf kritische Fragen und Diskussion. Language: DE Translation: EN Recording: YES There is a factory in Grünheide, Brandenburg. It is meant to produce electric cars. A step into a better future for the East German region? What is the issue with the so-called giga factory? Why has Elon Musk become an opponent of climate justice and not the saviour he claims to be? Why is occupation an appropriate means of protest? The water occupation movement „Stop Tesla“ is looking forward to critical questions and discussion. Language: DE Translation: EN Recording: YES about this event: https://c3voc.de

Selbstbestimmungsgesetz: Juliet Meding & Luce deLire (fusion24)

Thu, 27 Jun 2024 15:00:00 +0200

Das"Transsexuellengesetz" ist Geschichte, soweit so gut. Was das neue Selbstbestimmungsgesetz, dass im November in Kraft tritt aber überhaupt bedeutet, was es mit der Anti-Gender-Ideologie von Rechtsaußen zu tun hat, und warum es Geflüchtete, Transfrauen und Menschen unter Betreuung besonders hart trifft, erfahrt ihr bei diesem StandUp-Theory-Theatre. Es geht - nicht nur - um Nazis in der Sauna! Ihr könnt direkt vor Ort, live und in Farbe, euren Personenstand und Namen ändern lassen und dabei in die Untiefen des Entdemokratisierungsdramas einsteigen. Ihr dürft Euch sogar den rechtlichen Rahmen aussuchen: Gesetz der Bundesregierung oder queerokratische Alternative? Language: DE Translation: EN Recording: YES The “Transsexuals Act” is history, so far so good. But what the new self-determination law, which comes into force in November, actually means, what it has to do with the anti-gender ideology of the far right, and why it hits refugees, trans women and people under care particularly hard, you can find out now. You can have your civil status and name changed on the spot, and delve into the depths of the de-democratization drama. You can even choose the legal framework: Federal government law or queerocratic alternative? Language: DE Translation: EN Recording: YES about this event: https://c3voc.de

Migranos (fusion24)

Wed, 26 Jun 2024 18:30:00 +0200

Migranos ist eine migrantische, selbstorganisierte Initiative von Menschen mit Flucht- und Rassismuserfahrung im sächsischen Alltag, die die gesellschaftliche Teilhabe von geflüchteten Menschen, vor allem jenen in Lagern und im ländlichen Raum stärken. Sie empowern durch neue Vernetzungsformate und Vorträge/ Workshops (u.a. für Fachkräfte und solidarische Menschen). Ziel ist es mehr Sichtbarkeit für ihre Lebenssituation zu erreichen und langfristig eine breitere gesellschaftliche Solidarität zuerzielen. Language: EN Translation: DE Recording: YES Migranos is a migrant, self-organised initiative of people who have experienced flight and everyday racism in Saxony. Theywant to empower refugees to participate in society, especially those living in camps and in rural areas through new networking formats and raise awareness of their living conditions through presentations/workshops (e.g. for experts and supporters). The long-term goal is to achieve a broader solidarity in society. Language: EN Translation: DE Recording: YES about this event: https://c3voc.de

Hass im Netz (dgna)

Thu, 20 Jun 2024 21:30:00 +0200

Mit dem Aufkommen von Social Media und Blog Posts erhielten plötzlich alle eine Stimme. Diese neue digitale Öffentlichkeit bietet aufregende Möglichkeiten zum Austausch und gegenseitigen Informieren. Gleichzeitig sind wir mit neuen Problemen konfrontiert: Digitale Hassrede und Beschimpfungen stellen etablierte soziale Normen in Frage. Was können wir dagegen tun? Vorgeschlagene Lösungen beinhalten oft Zensur oder Deanonymisierung im digitalen Raum. Aber gibt es vielleicht auch andere Wege, um den digitalen Dialog vor der Verrohung zu retten, und die digitale Öffentlichkeit wiederherzustellen? Am Netzpolitischen Abend erzählt uns Sophie Achermann, Leiterin und Mitbegründerin der Public Discourse Foundation, was es für einen gesunden medialen Diskurs braucht, und welche Rolle die Medienhäuser dabei spielen. about this event: https://www.digitale-gesellschaft.ch/event/netzpolitischer-abend-zu-hass-im-netz/

K.I. (fusion24)

Thu, 27 Jun 2024 13:30:00 +0200

Alle reden über die Probleme, die KI verursachen kann, aber wie können wir sie zum Guten nutzen? Elias, ein alter Fusionist und Asperger-Autist mit ADHS, präsentiert „BrAIn Food“ - einen Multimedia-Vortrag, der euch in KI-Genies verwandelt. Es geht um die KI-Kunst, ums Prompts schreiben und KI-Hacks für unseren Alltag, z.B. um Protokolle von chaotischen Treffen anzulegen oder wie die KI Förderanträge für uns schreiben kann. Language: EN Translation: DE Recording: YES Everybody talks about the problems AI may cause, but how could we use it for the good? Elias, an old Fusionist and Asperger autist with ADHD, presents "BrAIn Food" – a multimedia lecture that turns you into AI geniuses. After an overview of the state of AI-art you will understand about writingprompts and using hacks for our Fusionist lifes, I.e.to structure chaotic meetings, score artfunding and many more. There will be space for questions and discussions. Language: EN Translation: DE Recording: YES about this event: https://c3voc.de

Jugend hackt Zürich 2024, Projektpräsentationen (jhch)

Fri, 14 Jun 2024 15:30:00 +0200

Präsentation der Projekte anlässich des «Jugend hackt» Events vom 14 bis 16 Juni 2024 im Hackerspace «Bitwäscherei» in Zürich. In «Evolution City» können die Spieler:innen Kraftwerke bauen, um Strom zu produzieren, womit sie wieder Geld verdienen, um neue Kraftwerke zu bauen. Allerdings steigt der CO2-Gehalt in der Luft bei jedem Kraftwerkbau entsprechend dem Bautyp. Wer 10 Minuten überlebt, ohne zu viel CO2 zu produzieren, gewinnt. Mit «Sicherheit auf die 1!» wurde eine Alarmanlage entworfen, bei der ein Sensor durch einen Micro Controller ein hörbares Signal auslöst, wenn es in Kontakt mit Licht kommt. Das Signal kann über Internet weltweit über eine Webseite empfangen werden: «So kann man immer und überall wissen, ob jemand in den Raum eingetreten ist oder nicht». «trainCCI» - ein alternativer Weg zur Reiseplanung bei instabiler Internetverbindung. Dabei können Reisewillige Abreiseort, -zeitpunkt und Zielort über einfache Kommandozeilen eingeben und erhalten dann – einzig diese Abfrage bedarf Internetanschluss – die entsprechenden ÖV-Verbindungen. Bei «Quack Snacks» geht es schliesslich um gesunde Ernährung. Im Spiel können Gamer:innen in einem Restaurant zum Beispiel zwischen einem Burger und einem Salat wählen. «Wählst du den Salat, wirst du upgegraded, gesund und sportlich.» Nach der Wahl des Burgers erscheint eine Zuckerpuppe, die Diabetes darstellt, ein Schrei hallt durch den Raum, und es erscheint ein Grabmal: «Du wirst gelöscht und stirbst.» about this event: https://c3voc.de

Team Updates @ Field Day (WHY2025)

Sat, 15 Jun 2024 15:00:00 +0200

Team Leads give a short update about the current status of their planning. about this event: https://c3voc.de

Closing (fsck2024)

Sun, 05 May 2024 16:30:00 +0200

Schön wars. Abschließende Infos und ein paar Statistiken. about this event: https://cfp.ctbk.de/fsck-2024/talk/GYEQAJ/

Das MINT-Mobil unterwegs (iger-2024)

Sat, 08 Jun 2024 13:40:00 +0200

Mobile Workshops für Kinder und Jugendliche im Landkreis zu Mathe, Informatik, Naturwissenschaft und Technik Das MINT-Mobil fährt bepackt mit Material von Graphitpulver bis VR-Brillen und Lernrobotern durch den Landkreis und veranstaltet Workshops zu Mathe, Informatik, Naturwissenschaft und Technik für Kinder und Jugendliche. Dieses Projekt möchte ich euch kurz vorstellen (an dem ich seitens der Uni Bamberg beteiligt bin). Dabei möchte ich einige von euch auch dafür gewinnen, in meinen IGERla-Workshop »MINT-Mobil und Experimentierkiste Informatik« zu kommen, um über Ideen, Erfahrungen und Verbesserungen zu reden. about this event: https://cfp.fairydust.reisen/iger-2024/talk/XLAAXV/

Hacker*innen-Jeopardy! (iger-2024)

Sat, 08 Jun 2024 22:00:00 +0200

Wenn ihr beim Anblick des Titels instinktiv vor euch auf den Tisch geschlagen und "Was ist ein beliebtes Abendprogramm auf Chaos-Veranstaltungen?" (oder so ähnlich) gerufen habt, dann habt ihr alles richtig gemacht. Beim Hacker*innen-Jeopardy! müsst ihr schnell sein, wenn ihr die Lösung wisst, und euch auch noch richtig ausdrücken, denn es gilt "Antwort sucht Frage": Die "Antwort" ist hier vorgegeben; eure Aufgabe ist es, einen dazu passenden Fragesatz zu formulieren. Die backspace-Variante des Hacker*innen-Jeopardy! ist euch vielleicht schon von den vergangenen Intergalaktischen Erfahrungsreisen bekannt. Inzwischen gibt es eine neue Iteration der Software. about this event: https://cfp.fairydust.reisen/iger-2024/talk/MN89ZZ/

Meshtastic - sichere, autarke Kommunikation im Funk-Mesh (iger-2024)

Sat, 08 Jun 2024 15:30:00 +0200

Ohne Weltuntergangspropheten zu sein, autarke Kommunikation finden wir schön. Noch schöner, wenn wir auch unter uns bleiben können. Und mit LoRa funken, das ist das i-Tüpfelchen! Über Ge- und Missbrauchsmöglichkeiten sprechen wir in Theorie und Praxis. Was ist ein Node, was macht ein Repeater und was haben Message-Queues damit zu tun? Wie sieht das aus, wenn ich von A nach C eine Nachricht schicken möchte, aber C nicht in Reichweite ist? Könnte ich damit eigentlich auch Sensordaten übertragen? Aufbauend auf Microcontroller-Hardware (ESP32) für lizenzfreien LoRa-Betrieb schauen wir Hard- und Software etwas unter die Haube und probieren aus, ob uns das gefällt. Wer schon ein oder mehrere Boards hat - bitte mitbringen! Einige Boards für 433 MHz haben wir auch vorrätig. about this event: https://cfp.fairydust.reisen/iger-2024/talk/W9PEDM/

Lightning Talks (iger-2024)

Sat, 08 Jun 2024 19:00:00 +0200

Du hast 5 Minuten Zeit, um über dein Herzensthema zu referieren. Wenn du schon immer einen Vortrag halten wolltest, aber dich nie dazu durchringen konntest, diesen offiziell einzureichen, hast du jetzt die Gelegenheit, einen Anfang zu wagen. Die Bühne gehört dir! vmann set! franzt archeologische prospektion martinm Primitives Asset-Management mit Textdateien p.t.flea Driftcart venti Lasers in (Hack)Space about this event: https://cfp.fairydust.reisen/iger-2024/talk/3SSJG7/

Abreise / Closing (iger-2024)

Sun, 09 Jun 2024 18:00:00 +0200

Das IGERla geht zu Ende und wir blicken gemeinsam zurück, bevor sich alle wieder in der Weite des Universums verteilen. Auf Wiedersehen, werte Datenreisende! about this event: https://cfp.fairydust.reisen/iger-2024/talk/RLDUE3/

Remote Attestation in 5G Networks (iger-2024)

Sat, 08 Jun 2024 21:30:00 +0200

The ongoing digitization of the society and services call for a high availability of secure mobile networks, like 5G. Remote attestation can be a measure to maximize trust, security and privacy when using a mobile telecommunications network. In this talk, I give a rough overview on how a mobile network works, followed by some insight into ongoing threats the public mobile network is facing in the past years. As a solution to some of the threats, remote attestation is a heavily discussed topic in research, and even from the mobile equipment vendors. I give an introduction into the topic of remote attestation and how and where it can be used in mobile networks and how it might impact the performance. about this event: https://cfp.fairydust.reisen/iger-2024/talk/YCWG7K/

Elementarinformatik – was ist das? (iger-2024)

Sat, 08 Jun 2024 13:30:00 +0200

Computational Thinking und digitale Handlungskompetenzen kindgerecht vermitteln – FELI an der Uni Bamberg Die Forschungsgruppe Elementarinformatik (FELI) an der Uni Bamberg möchte informatische Konzepte über die Anregung von „Wie funktioniert das?“'-Fragen vermitteln und zudem Lehrkräfte dazu befähigen, dies mit ihren Schülys zu tun. Schon Kinder lernen Computer, Smartphones, das Internet als Konsumentys kennen, als ein Angebot, das sie weitgehend passiv nutzen. Wir wollen ihnen die Fähigkeiten vermitteln, diese Technik als Werkzeug nutzen zu können, ihre Ideen umzusetzen, zu gestalten. Dazu müssen sie verstehen, wie Computer grundsätzlich funktionieren, was ein Algorithmus ist, und wieso der Rechner nicht mit dem Drucker reden kann. about this event: https://cfp.fairydust.reisen/iger-2024/talk/T3VQVG/

First impression of eUPF (osmodevcon2024)

Sun, 05 May 2024 15:15:00 +0200

[eUPF](https://github.com/edgecomllc/eupf) is a rather new implementation of a 3GPP User Plane Function. It is implemented in go and uses eBPF and AF_XDP in order to perform all the GTP-U handling inside the Linux kernel. This talk is about the first impression from setting it up (in combination with open5gs) about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/SWEM3V/

Anreise (Opening) (iger-2024)

Fri, 07 Jun 2024 18:00:00 +0200

Das IGERla ist gelandet. Das IGERla ist gelandet. about this event: https://cfp.fairydust.reisen/iger-2024/talk/JW7KGQ/

KI und Schule - über modernen Götzenkult (iger-2024)

Fri, 07 Jun 2024 21:00:00 +0200

KI ist der neue Hype und Schulen drehen durch. Was KI in der Schule bedeutet, und warum der ganze bescheuerte Futurismus dahinter die Zukunft gefährdet, erkläre ich hier.... Die KI ist da und in der Bildung drehen alle durch. Dabei scheinen die meisten Lehrkräfte und deren Vorgesetzte nicht zu wissen, was ein LLM eigentlich tut. Und das bedeutet, dass wir vor einer Schule steht, die eine Sache will und die andere Sache tun wird, wenn wir Nerds denen nicht sagen, dass das dumm ist. about this event: https://cfp.fairydust.reisen/iger-2024/talk/RTZBE7/

Und sie existiert doch - die fast unmögliche Primzahlenerkennungsmaschine (gpn22)

Thu, 30 May 2024 16:30:00 +0200

Ist es möglich, eine Maschine zu bauen, mit der man Primzahlen erkennen bzw. ermitteln kann? Diese Frage habe ich mir vor ein paar Jahren gestellt und eine "virtuelle" Maschine entwickelt, also eine Maschine, die am Computer "funktioniert". Aber würde so eine Maschine sich auch tatsächlich bauen lassen. Bei der virtuellen Maschine gibt es keine physikalischen Einschränkungen und Herausforderungen wie zum Beispiel Gravitation oder Reibung. In diesem Talk stelle ich einen funktionierenden Prototyp vor. Primzahlen haben Mathematiker und mathematisch interessierte schon immer fasziniert. Und Schüler hassen sie - meistens. In unserer modernen Welt sind sie auch essentiell für Verschlüsselungen. Der Grundgedanke bei den asymmetrischen Verschlüsselungsverfahren basiert auf Primzahlen. Aber wie kann man feststellen, ob es sich bei einer Zahl um eine Primzahl handelt? Mit moderner Technik ist das kein Problem. Aber rein mechanisch? Wie ich in einem anderem Talk gezeigt habe ist so eine Maschine virtuell problemlos möglich. Wie verhält es sich aber in der realen Welt? Wenn man Gravitation, Reibung und andere physikalische Gesetze nicht einfach ignorieren beziehungsweise deaktivieren kann. Funktioniert das immer noch? Ja! Und zu diesem Vortrag bringe ich den ersten Prototypen mit und zeige euch unter anderem, wie man damit Primzahlen ermitteln kann, Divisionen durchführen, eine Zahl in ihre Teiler zerlegen sowie eine Zahl in ein anderes Zahlensystem umrechnen kann. Insgesamt erwartet euch folgendes in diesem Talk: - Feststellen, ob eine Zahl gerade oder ungerade ist - Divisionen mit und ohne Rest durchführen - Eine Zahl in ihre Teiler zerlegen - Eine Zahl in ihre Primfaktoren zerlegen - Feststellen, ob eine Zahl eine Primzahl ist - In Zahlensysteme umrechnen, zum Beispiel in das Binärsystem - Quadratwurzeln berechnen bzw. abschätzen Ob es so eine Maschine jemals wirklich gab und ob sie einen Nutzen hatte beziehungsweise gehabt hätte, weiß ich nicht. Sie ist aber gut geeignet, Primzahlen und andere mathematische Methoden zu visualisieren. Interessant für Lehrer, die ihren Schülern die Primzahlen und andere mathematische Methoden näher bringen beziehungsweise vermitteln wollen. about this event: https://cfp.gulas.ch/gpn22/talk/WDWBUA/

42 Tricks fürs SMD-Löten, Nummer 23 wird sie überraschen! (gpn22)

Thu, 30 May 2024 19:45:00 +0200

SMD Löten und Rework ist ziemlich einfach - wenn man die Tricks kennt. Daher zeige ich euch mal ein paar der Tricks mit denen das Ein- und Auslöten von SMD Bauteilen besser geht. Als Live-Demo zeige ich diverse SMD-Lötarbeiten mit Lötkolben und Heißluft. Der Fokus wird auf Techniken liegen die zur Reparatur von Platinen hilfreich sind. Zudem versuche ich interaktiv Fragen zu beantworten und Dinge zu zeigen mit denen Ihr Probleme habt. Unter anderem zeige ich: * Chips aus- und einlöten (QFP, QFN, SOIC) * Widerstände und Kondensatoren tauschen * THT (Stiftleisten, Stecker) Bauteile entfernen * Bodgewires anlöten und verlegen * Entlötlitze sinnvoll verwenden * Masseflächen identifizieren & damit klarkommen * Niedertemperatur-zinn (Bismuth basiert) * Flussmittel verwenden und wieder saubermachen about this event: https://cfp.gulas.ch/gpn22/talk/GLLLBT/

GPRS support in osmocom-bb (osmodevcon2024)

Fri, 03 May 2024 11:30:00 +0200

The sysmocom team has been working on implementing an open source GPRS modem for DARC on behalf of a grant by ARDC. This talk will present the current state of the implementation and demonstrate how to use it. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/SAX3FE/

JESD204B : Interfacing to modern ADC/DAC with LiteX (osmodevcon2024)

Sat, 04 May 2024 15:40:00 +0200

JESD204B is a pretty common interface to higher speed ADC/DAC used in software defined radio. I'd like to take a moment to explain how it works and how to use the open-hardware LiteJESD204B core to interface to them. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/DQRNVM/

1x1 der medizinischen Bildgebung (gpn22)

Sun, 02 Jun 2024 12:30:00 +0200

Ein wilder Ritt durch die verschiedenen Möglichkeiten Bilder von Menschen zu machen. Kann Spuren von Strahlung enthalten. Moderne Medizin basiert grossteils auch auf neuen Möglichkeiten Dinge sichtbar zu machen und seit der Entdeckung der Röntgenstrahlen 1895 hat sich eine Menge getan. Wir werden Versuchen mit einem Minimum an theoretischem Hintergrundwissen zu klären was diese Ärzte eigentlich meinen wenn sie von Echo oder Kernspin reden, warum "Röhre" nicht gleich "Röhre" ist und welche Vor- bzw Nachteile die einzelnen Verfahren bieten. about this event: https://cfp.gulas.ch/gpn22/talk/CUWDYV/

How a Wifi chip works internally (gpn22)

Sun, 02 Jun 2024 10:00:00 +0200

This talk will provide an overview of all the pieces it takes to receive data via Wifi. Starting with the basics of encoding information in wireless signals we will go over various building blocks (hardware and software) needed to receive bits and bytes via Wifi. Deep Dive into the 802.11 Wifi standard. The talk starts with an overview of which hardware is involved into receiving Wifi signals and how signals get converted into bits. During the talk we will explain the hurdles which need to be taken to receive Wifi and which solutions the Wifi standard describes to solve them. We will also look into several real world Wifi implementations based on SDR transceivers or proprietary datasheets from Broadcom. In the end we will briefly discuss what would be necessary to create open source firmware for full-MAC Wifi chips. about this event: https://cfp.gulas.ch/gpn22/talk/MTNMRD/

Deutsche Bahn für Dummies (gpn22)

Sat, 01 Jun 2024 21:15:00 +0200

Für diejenigen in der Bahnbubble, die nicht so im Universum Eisenbahn stecken, dass sie mit den meisten Zugbetreuern im Fernverkehr per du wären, soll dieser Talk einen Einstieg in das informierte Inanspruchnehmen von schienengebundenen Personenbeförderungsdienstleistungen in Deutschland geben. Wie wurde die Bahn überhaupt zu dem, was sie in Deutschland heute ist? Wie funktioniert Zugverkehr eigentlich? Welche Tools gibt es, um meine Bahnreise besonders effektiv zu gestalten und auch bei Problemen mehr als die anderen Fahrgäste (und manchmal sogar das Zugpersonal) zu wissen? All das und mehr wollen wir in diesem Talk beantworten. about this event: https://cfp.gulas.ch/gpn22/talk/FUNVJJ/

Hacking your ADHD (gpn22)

Sat, 01 Jun 2024 18:45:00 +0200

Was ist dieses ADHS eigentlich, warum gibt es so viele betroffene Personen und was kann eins mit dieser (manchmal) so tollen Superkraft alles machen? Hi, ich bin Niggo und ich habe ADHS. Auch wenn’s eigentlich obvious ist, wurde ich erst viel später als mir eigentlich Recht ist mit dieser Realität vertraut. Seit meiner Diagnose habe ich vieeeeeel über mich selbst, die Art und Weise wie ich denke gelernt – und was es eigentlich im Alltag bedeutet, ADHS zu haben. In diesem Talk möchte ich meine Erfahrungen mit der Odysee der Diagnostik/Behandlung und dem Alltag, mit ADHS zu leben, nahebringen und wie eins daraus das beste macht. Dazu zählen vor allem Hacks, mit denen eins seinen privaten als auch beruflichen Alltag ADHS-freundlicher gestalten kann. about this event: https://cfp.gulas.ch/gpn22/talk/BHHPVL/

Your favorite Osmocom related productivity tips and tools (osmodevcon2024)

Mon, 06 May 2024 10:15:00 +0200

Everybody can quickly talk about / present their favorite tooling and other tips and tricks that make a good development workflow for working on Osmocom related software. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/DUR7GS/

Klimaauswirkungen des Datenschutzes – oder: mit #BingoTechBullshit die Welt zerstören (gpn22)

Sat, 01 Jun 2024 22:30:00 +0200

Rücksichtslose Organisationen (zer-)stören unser Klima und unsere Privatsphäre. Klimaschutz und Datenschutz können uns dabei helfen, dass unsere moderne Gesellschaft lebenswert bleibt/wird. Doch wie verhält es sich mit beidem zueinander? Versauen uns die Cookie-Banner die Umweltbilanz? Wie viele Hektar Regenwald kosten uns Datenschutzerklärungen? Und was hat #BingoTechBullshit mit alldem zu tun? In diesem Talk stelle ich die Methoden und Ergebnisse meiner Bachelorarbeit ([ba-thesis.blog.luap42.de](https://luap42.de/notes/ba-thesis/)) zu den Klimaauswirkungen des Datenschutzes vor. Ich gehe darauf ein, wie #BingoTechBullshit ("KI", "Bl*ckchain" etc.) sowohl dem Klima- als auch dem Datenschutz schaden, und was als Gegenteil datenschutz- und klimafreundliche Technologien sind. about this event: https://cfp.gulas.ch/gpn22/talk/7HQPLZ/

Flightgear: The world of open source flight simulation (gpn22)

Sun, 02 Jun 2024 11:15:00 +0200

Flightgear is an open source flight simulator, We take a look at it, how to get started flying and how to hack on it. Since the release of the Microsoft Flight Simulator 2020, flight simulation has become a more mainstream genre. What flies past many is the existence of an open source flight simulator with a long standing history and way more flexibility in many regards. We take you on a flight through the world of Flightgear... In the first part we will take a look at the history, where the project is headed in the future and how you can make the first steps in the simulator, helping you get in the air. Now that we have an overview what flightgear is, we go on to the second part where we take a look how to interface the flight sim with your own hacked hardware and other systems. We will show you for example our first PCB design we're working on right now which will be a control interface for the simulator as well as similar projects from the community. about this event: https://cfp.gulas.ch/gpn22/talk/KUEALJ/

GlobalPlatform in USIM and eUICC (osmodevcon2024)

Sat, 04 May 2024 10:15:00 +0200

The GlobalPlatform Card Specification and its many amendments play a significant role in most real-world USIM/ISIM, and even more so in eUICC. The talk will try to provide an overview of what GlobalPlatform does in the telecommunications context. Topics include: * security domains * key loading * card and application life cycle * loading and installation of applications * Secure Channel Protocols SCP02, SCP03 about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/DYGQXN/

open5gs status: recent, current and future developments (osmodevcon2024)

Fri, 03 May 2024 17:45:00 +0200

The talk will provide an overview over * recent developments in open5gs (2023) * current areas of work * outlook / roadmap about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/TKCAPQ/

Cyber Resilience Act - Compliance Risk oder Consumer Respect Act? (gpn22)

Sun, 02 Jun 2024 12:30:00 +0200

Der Cyber Resilience Act (CRA) legt Herstellern von Software und auch Open Source Communities strenge Regeln in Bezug auf IT-Sicherheit ihrer Produkte auf. Dieser Vortrag gibt zunächst einen Überblick über die Ziele und Inhalte dieses Gesetzes. Der Schwerpunkt liegt auf den geforderten technischen und administrativen Regelungen und Verpflichtungen. Es wird erläutert, worauf sich Hersteller, Open Source Communities und Verbraucher einstellen müssen und eingeordnet, wie praktikabel und effektiv die Vorgaben möglicherweise sind. Mit dem CRA hat die EU-Kommission eine Verordnung auf den Weg gebracht, die die IT-Sicherheit von Produkten reguliert, mit der Motivation, die Interessen der Verbraucher zu stärken und die EU insgesamt widerstandsfähiger gegen Cyberangriffe zu machen. Dieses Gesetz legt Anforderungen für "Produkte mit digitalen Elementen" fest. Von Herstellern wird die Erstellung einer Cybersicherheitsrisikobewertung und die Bereitstellung von Sicherheitsupdates verlangt. Bestimmte alltägliche Softwareprodukte, wie Betriebssysteme, Browser und Password-Manager, werden als "wichtige Produkte" eingestuft. Diese werden auf die Einhaltung von grundlegenden IT-Sicherheitsanforderungen überprüft. Auch Open-Source-Software und ihre Communities werden von diesem Gesetz betroffen sein. Es wird gefordert, dass diese eine Cybersicherheitsstrategie vorlegen, welche unter anderem den Umgang mit Schwachstellen regelt. Ein Verstoß gegen die Bestimmungen kann mit bis zu 15 Millionen Euro oder 2,5 % des Weltweiten Jahresumsatzes geahndet werden. Des Weiteren wird die ENISA eine Meldeplattform anbieten, über welche Hersteller Schwachstellen melden. In Hinblick auf die Praktikabilität und Effektivität stellen sich eine Reihe von Fragen, auch sind noch nicht alle Details bekannt, z.B. die Spezifikation von SBOMs. *TL; DR: Neues EU-Gesetz, welches Hersteller verpflichtet (IT-)sicherere Produkte zu entwickeln.* about this event: https://cfp.gulas.ch/gpn22/talk/AUEQH7/

Sind wir schon Wayland: Nvidia Edition (gpn22)

Sat, 01 Jun 2024 21:15:00 +0200

Die schlechte Unterstützung von Wayland unter Nvidia-Treibern hat zurecht einen Meme-Status erreicht. Aber gerade in den letzten Jahren hat sich einiges getan, um diesen Status zu verbessern, sowohl seitens Nvidias als auch in der Wayland-Community. Und dank großer Fortschritte im Nouveau-Projekt sind Anwender:innen nicht mehr alleine auf Nvidia angewiesen, auch ein vollkommen offener Grafikstack scheint wieder in greifbarer Nähe. Daher stelle ich mir 2024 wieder die Frage: Lässt sich Wayland endlich problemlos mit Nvidia-GPUs nutzen? Seit 2021 gab es einige Meilensteine, die die Unterstützung von Wayland auf Nvidia-GPUs Stück für Stück verbessert haben. Dies geht von der teilweisen Öffnung der offiziellen Nvidia-Treiber über eine Annäherung Nvidias an die Wünsche der Wayland-Community bis zu den kürzlichen Fortschritten des Nouveau-Projekts, aktuelle Nvidia-GPUs nicht nur zu unterstützen, sondern auch offene Treiber für Vulkan und OpenGL zu liefern, die vollkommen standardkonform sind. Es scheint also, als könnte dies das Jahr des Nvidia-Linux-Desktops werden. In diesem Talk wollen wir uns anschauen, was mittlerweile alles möglich ist, sowohl in Bezug auf Gaming als auch die alltägliche Nutzung des Desktops. Welche Unterschiede gibt es dabei zwischen den verschiedenen Desktopumgebungen? Wie viel manuelle Konfiguration ist noch notwendig, um das beste Wayland-Erlebnis zu erreichen? Und lohnt sich der Umstieg auf Nouveau? Einige nennenswerte Fortschritte der letzten Jahre sind: - Juli 2021: Xwayland, die Kompatibilitätsschnittstelle, um X11-Anwendungen innerhalb einer Wayland-Umgebung auszuführen, erhält Hardwarebeschleunigung für Nvidia-GPUs. Da gerade Spiele (und Wine/Proton) vorrangig nur unter X11 laufen, wird Wayland zum ersten Mal für Spieler:innen mit Nvidia-GPUs interessant. - Oktober 2021: Nvidia veröffentlicht die erste Treiberversion mit Unterstützung für Generic Buffer Management (GBM), einer offenen Schnittstelle zum allokieren von Render Target Buffers, die in allen Wayland Compositors zum Einsatz kommt. Zuvor hatte Nvidia versucht, die eigene Lösung EGLStreams als "bessere" Alternative zu etablieren. - Mai 2022: Nvidia veröffentlicht die "GPU Open-Source Kernel Modules", welche die "sensiblen" Teile des Nvidia-Kernel-Treibers in einen geschlossenen RISC-V-Prozessor auf Hardware-Seite (genannt GPU System Processor, kurz GSP) verschieben und es Nvidia ermöglichen, nur die Kommunikationsschnittstelle für diesen als Open Source zu veröffentlichen. Die Userland-Teile des Treibers (CUDA, OpenGL, Vulkan, DLSS) bleiben weiterhin Closed Source. - August 2023: Der offene Vulkan-Treiber NVK des Nouveau-Projekts wird dem Linux-Grafikstack Mesa hinzugefügt. Dank des Vulkan-basierten OpenGL-Treibers Zink unterstützt Nouveau damit sowohl Vulkan als auch aktuelle OpenGL-Versionen. - Oktober 2023: Nvidia fügt Unterstützung für Gamma Lookup Tables (Gamma LUT) hinzu. - November 2023: Der offene Linux-Kernel-Treiber Nouveau fügt Unterstützung für den GSP hinzu, welcher es ihm zum ersten Mal in fast 10 Jahren erlaubt, die Taktrate auch auf neueren Nvidia GPUs zu verändern und damit einen performanten Einsatz möglich macht. - November 2023: NVK erreicht volle Konformität für Vulkan 1.0. - Februar 2024: NVK erreicht volle Konformität für Vulkan 1.3. about this event: https://cfp.gulas.ch/gpn22/talk/FFJ8QT/

Introduction to XDP, eBPF and AF_XDP (osmodevcon2024)

Sun, 05 May 2024 11:00:00 +0200

This talk provides a generic introduction to a set of modern Linux kernel technologies: * [eBPF](https://ebpf.io/what-is-ebpf/) (extended Berkeley Packet Filter) is a kind of virtual machine that runs sandboxed programs inside the Linux kernel. * [XDP](https://docs.cilium.io/en/latest/bpf/progtypes/#xdp) (eXpress Data Path) is a framework for eBPF that enables high-performance programmable packet processing in the Linux kernel * [AF_XDP](https://www.kernel.org/doc/html/next/networking/af_xdp.html) is an *address family* that is optimized for high-performance packet processing. It allows in-kernel XDP eBPF programs to efficiently pass packets to userspace via memory-mapped ring buffers. The talk will provide a high-level overview. It should provide some basics before the other/later talks on bpftrace and eUPF. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/RBXC3V/

Big Data Analysis with SQL (gpn22)

Sun, 02 Jun 2024 10:00:00 +0200

This talk explains how you can build your own scalable data processing system with just a few open source tools: DBT, Trino, Iceberg and MinIO. And also why SQL is still the best language for data analysis! Have you ever used PostgreSQL to store *massive* amounts of data? Did your queries take *minutes* or even *hours* to compute? The field of data analysis is rather complex and a ton of solutions are available: therefore I will show how to compare systems with each other. You will learn why databases like PostgreSQL or MongoDB are not suited to compute analytics queries on huge amounts of data. Then we will look at data analysis architectures that are capable of scaling to terabytes of data and I will explain why they are better in those particular situations. At the end of the talk you will know which solution is best suited for your next large-scale data project! about this event: https://cfp.gulas.ch/gpn22/talk/L3SXWL/

Molding Sand: Shaping Permissions of Processes (gpn22)

Sat, 01 Jun 2024 22:30:00 +0200

A gentle introduction into the security concepts offered by modern POSIX systems: Kernel Sandboxing and Privilege Separation This talk will cover two concepts that are crucial in modern applications: Sandboxing and Process Separation, as well as the combination and necessity of these two. As programmers, we often make tiny silly mistakes. Tiny silly mistakes, that lead to unnoticeable bugs, which might be exploited in the most dangerous and ugliest ways. Acknowledging this fact, by restricting the powers of a process, makes the impact of potential exploits much harder. After this talk, the audience will know about the necessity of sandboxing, the history of security in operating systems in general, as well as the current mechanisms used to secure modern applications. about this event: https://cfp.gulas.ch/gpn22/talk/Y8VRLY/

"Jetzt ist es kaputt, aber wenigstens war es gut": Informierte Nutzungsentscheidungen und welchen Beitrag Informatische Bildung dazu leisten kann (gpn22)

Sun, 02 Jun 2024 11:15:00 +0200

"Sag mal, du hast doch Informatik studiert - du kannst mir doch sicher sagen, wie ich meine Fotos am besten back-uppe?", fragt mich meine Tante neulich beim Kaffee. Wärend meine Tante mir ihre utopischen Anforderungen erklärt, und ich Erwartungs-Management betreibe, frage ich mich wie ich in diese Situation gekommen bin. Und schließlich frage ich mich als Person mit Lehramtstudium: "Was müsste ich meiner Tante beibringen, damit ich nicht nochmal in eine solche Situation komme und sie diese Entscheidungen selbst treffen kann?" Diese Frage, wie man Schüler:innen (und meine Tante) dazu befähigen kann, in Zukunft Entscheidungen über die Nutzung digitale Systeme selbstständig und informiert zu treffen möchte ich mich in meinem Vortrag diskutieren. Wir treffen jeden Tag Entscheidungen über die Nutzung von Digitalen Systemen, wie zum Beispiel Instant Messenger, Bezahlmethoden oder VPNs. Um eine solche Entscheidung informiert zu treffen, braucht der:die Entscheidende Wissen über die zur Auswahl stehenden digitalen Systeme im Bezug auf seine:ihre persönlichen Werte. Aber welches Wissen ist das? Und welche Werte kann man in Betracht ziehen? Und wie kann man das Schüler:innen beibringen? In meinem Vortrag möchte ich gemeinsam mit dem Publikum über mögliche Antworten und Beispiele diskutieren und in das Thema aus dem Blickwinkel der Informatik Didaktik einführen. Inhaltlich werde ich in meinem Vortrag darüber reden, was informierte Entscheidungen sind - und was informatische Bildung ist. Dabei werde ich auch auf Konzepte aus der Informatikdidaktik wie dem Dagstuhl Dreieck eingehen und diese einführen. Außerdem werde ich über Möglichkeiten zur Vermittlung sprechen. about this event: https://cfp.gulas.ch/gpn22/talk/8CWDWS/

Demoszene: Nachlese (gpn22)

Sat, 01 Jun 2024 22:00:00 +0200

Die feinste Selektion an audiovisuellen Leckerbissen aus der Demoszene des vergangenen Jahres. Frisch zubereitet und serviert in exzellenter Auflösung mit einer Beilage aus feinster Trommelfell- und Großhirnrindenmassage. Du magst Komputerkunst? Du hast Spaß an interessanten Visuals und guter Musik? Du möchtest mit ganz vielen Leuten "AMIGA" durch den Saal rufen? Dann komm zu diesem Event! Wir präsentieren die erlesenste Auswahl und die innovativsten Ideen aus dem letzten Jahr der Demopartys auf großer Leinwand mit dicken Boxen. Seid gespannt, was euch in den 2 Stunden erwartet! Shownotes:

Title	Group	Duration	Party	Category	Link	Notes
Rainmaker	Byterapers & Doomsday	05:00	Revision 2024	PC Demo	https://www.pouet.net/prod.php?which=96597
10 Circles	blinry	02:00	Evoke 2023	PC Demo	https://www.pouet.net/prod.php?which=94732
Mivan	Adsr & Feryx	03:00	Revision 2024	PC Demo	https://www.pouet.net/prod.php?which=96676
Apotheke	Ponk + baya	05:30	Revision 2024	PC Demo	https://www.pouet.net/prod.php?which=96673
Vertical Hold	Sirocco/NoOP	10:00	Revision 2024	PC Demo	https://www.pouet.net/prod.php?which=96613
The Colour out of space	amiga skool	04:00	Revision 2024	Amiga Demo	https://www.pouet.net/prod.php?which=96615
Ghost NOP	Pulpo Corrosivo & Futurs	03:24	Revision 2024	oldskool demo (Amstrad PC)	https://www.pouet.net/prod.php?which=96540
Insomniac Contemplation	Software Failure	02:20	Euskal 2023	Amiga AGA 64k	https://www.pouet.net/prod.php?which=94693
The Mind	Haujobb & SWEET16	03:10	Revision 2024	fantasy console demo	https://www.pouet.net/prod.php?which=96571
A Statement on the Platform Wars	moonbase allstars	02:00	Revision 2024	wild	https://www.pouet.net/prod.php?which=96567
Kinstugi	LJ	02:00	Evoke 2023	PC 4k	https://www.pouet.net/prod.php?which=94742
Empires	Conspiracy	03:30	Revision 2024	PC 64k	https://www.pouet.net/prod.php?which=96589
sp04 - The Cube	spacepigs	02:00	Revision 2024	PC 8k	https://www.pouet.net/prod.php?which=96587
Remnants	Alcatraz	01:40	Revision 2024	PC 256b	https://www.pouet.net/prod.php?which=96536
Asura	mfx	Revision 2024	07:00	PC Demo	https://www.pouet.net/prod.php?which=96600
Sisyphus Unchained	andromeda software developement	04:50	Revision 2024	PC Demo	https://www.pouet.net/prod.php?which=96595
BRVTL	slay bells & Farbrausch	03:00	Nordlicht 2023	PC Demo	https://www.pouet.net/prod.php?which=95048
scrolll	blinry	02:20	Revision 2024	wild	https://www.pouet.net/prod.php?which=96564
Aquaverse	Rebels & Calodox	03:00	Evoke 2023	PC Demo	https://www.pouet.net/prod.php?which=94720
BAD AON	Shiru	04:40	Revision 2024	wild	https://www.pouet.net/prod.php?which=96601	Was fürs POC
Return	Rebels & Calodox	04:15	Evoke 2022	PC Demo	https://www.pouet.net/prod.php?which=91932
Evoke 25	LJ	04:00	Revision 2024	PC Demo	https://www.pouet.net/prod.php?which=96616

about this event: https://cfp.gulas.ch/gpn22/talk/TLA9H9/

Infrastructure Review & Closing (gpn22)

Sun, 02 Jun 2024 14:00:00 +0200

Infrastructure Review & Closing of GPN22 about this event: https://cfp.gulas.ch/gpn22/talk/PXT8GR/

Digital Telecommunication in HF band - WWWAN - World-Wide Wireless Area Network (osmodevcon2024)

Sun, 05 May 2024 19:00:00 +0200

We at Rhizomatica are running the High-frequency Emergency and Rural Multimedia Exchange System (HERMES) already for some years, based on P2P connections in a star topology, using UUCP. Now it is time to move forward. This workshop is focused on the next generation HERMES network stack, which hopefully will allow for worldwide deployment of the network. HERMES project provides a software stack (and hardware integration) for very-long distance telecommunication on HF band. Our focus currently are isolated communities (in terms of telecommunication access), especially in Amazon rain forest communities and Central Africa. Our current setup uses a proprietary P2P HF software-modem (called VARA) and UUCP on top of it, basically for email exchange, and ad-hoc file transfer and remote command execution. Our next-generation system will use an open-source modem (called Mercury) we are developing, together new upper network layers, which we are still evaluating (for eg., NNCP and Reticulum). We aim to expand the network world wide, for providing accessibility anywhere in the world through HF, and towards this goal, we'll carry this discussion / workshop for evaluation which would be the best options to take. We are taking a couple of radios (sBitx v3) for a full chain demonstration, and also a fully functional board (without the enclosure) to donate to anyone who wants to play with HF telecom. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/BBZBGM/

Warum sind hier Menschen mit Seilen? (gpn22)

Sun, 02 Jun 2024 12:30:00 +0200

Die Grenzen von Diversity: Ist Kink noch Diversity oder nur eine persönliche Vorliebe? Warum sind eigentlich auf Hackerveranstaltungen so oft Menschen mit Seilen? Welche gemeinsamen Wurzeln verbinden queere, hackende und kinky Menschen und was könnten wir von einander lernen? Wir machen einen Ausflug in die eigentümlichen Regeln, Rituale und Etiketten der Kink-Szene, um herauszufinden, was davon für andere Lebensbereiche hilfreich ist. Egal ob klare Kommunikation, Awareness gegenüber Diskriminierung und Übergriffen oder die Suche nach Konsens: Viele der Herausforderungen begegnen uns auch in Projekten oder am Arbeitsplatz. about this event: https://cfp.gulas.ch/gpn22/talk/TMWFJ3/

I beg you, please make your own GitHub alternatives! (gpn22)

Sun, 02 Jun 2024 11:15:00 +0200

A case for choosing alternatives to GitHub for your open-source works. Both practical and philosophical. Our thoughts, creations and relationships online are made possible because of large platforms based in Silicon Valley. Let's talk about GitHub. People use it. I mean, that's where everyone else is. Period. End of story. ... Or is it?! The first part dives deep into the rocky history of SourceForge and BitKeeper, which implicitly led to the creation of Git and GitHub, which in turn came with its own set of problems. How does the past correlate to the present? (Recommended speed: 0.75x) The second part talks about the present: GitHub. It is explained how it makes money by hosting open-source projects for free, and its prevalence among open-source developers and professionals, as well as its increasing gamification, vendor lock-in and the real-world impacts it has on open-source projects. Is it really as popular and reliable as you'd think? The third part is about some of the (contrasting) alternatives and efforts to work around the problems caused by the "GitHub model", and what they do differently, and why we need something different than a monoculture. Fossil, Forgejo and SourceHut (as well as very brief mentions of the Friendly Forge Format, forge federation, hosted alternatives to github.com, as well as tiny tools like Tor's Anon-Ticket!) are talked about. Disclaimer: I am involved with Codeberg and Forgejo as a volunteer; I may be a little tiny bit biased. Some of the facts I mention were before I was born, possible signs of peanuts and mild errors - first talk, therefore I'm allowed to make mistakes. :) about this event: https://cfp.gulas.ch/gpn22/talk/WGVZ9W/

Sky130 and TinyTapeout : A quick intro (osmodevcon2024)

Sat, 04 May 2024 17:45:00 +0200

Just a few words about the Sky130 Open PDK and associated tooling as well as the related TinyTapeout program about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/TUFJPD/

elektronische Patientenakte (ePA) Made in Germany - Digitalisierung in der Medizin 2024 (gpn22)

Sat, 01 Jun 2024 17:00:00 +0200

Die elektronische Patientenakte (ePA) ist ein Phantom. Jeder hat eine andere Vorstellung davon. Wie es zu dieser Situation kommen konnte und wie die Digitalisierung im Gesundheitswesen dennoch gelingen kann, darum geht es in meinem Vortrag. Die elektronische Patientenakte (ePA) gilt als die zentrale digitale Anwendung im Gesundheitswesen. Zur Einstimmung präsentiere ich Ihnen alternative Realitäten des Gesundheitswesens und wie politische Fiktionen zu Fakten werden. Danach treffen diese politischen Fakten auf die Alltagsrealität. Dazu nehme ich Sie mit in meine ärztliche Sprechstunde. Ich meine natürlich den Teil, wenn meine ärztliche Patientenbehandlung schon beendet ist und nur noch gerade eben schnell die Daten in die elektronischen Patientenakte (ePA) hochgeladen werden sollen. Im letzten Teil gibt es eine Perspektive, wie die Digitalisierung im Gesundheitswesen über das Konzept der informationellen Gesundheit bzw. der informationelle Erkrankung doch noch gelingen kann. Nein, ich meine nicht die informationelle Selbstbestimmung. An dieser Stelle höre ich dann immer wieder die Frage, kannst Du informationelle Erkrankung noch mal erklären? Das mache ich dann. Vorab nur so viel: Neben dem Digitalanwendungsfall der Corona-Warn-App ist diese Theorie auch nutzbar im Spannungsfeld von Geschlechtsinkongruenz und Geschlechtsdysphorie. Die elektronische Patientenakte (ePA) füllt zukünftig den größten Teil des Gedankenraums dazwischen. Informationelle Erkrankung entsteht, wenn Information von außen auf die Betroffenen lebensverändernd einwirkt. Das hat es schon immer gegeben. Zusammen mit dem Wirkungsverlust von Fakten verlieren wir gerade die Wissenschaft als sozialen Moderationsraum. Muss man das alles zu einer Frage der Gesundheit machen? Nein, muss man nicht, aber wenn sich sonst keiner zuständig sieht, dann schon. Exklusion und Armut machen krank und dann sind wir Ärzte zuständig. Hier geht es um die Verhinderung von Krankheit und vorzeitigem Tod und da sind die Ärzte, als die akademischen Experten für Gesundheit und Krankheit unzweifelhaft gefragt. Gleichzeitig verlagert der Ansatz der bio-psycho-sozio-informationellen Erkrankung, oder kurz der informationellen Erkrankung, Teilaspekte von Krankheit, die heute allein einzelnen Menschen zugeordnet werden, zurück ins soziale System, so wie es die Ottawa-Charta der WHO fordert, um Gesundheit zu befördern. Die Digitalisierung im Gesundheitswesen, kann nur gelingen, wenn konfliktreduziertes Zusammenleben und mehr Gesundheit befördert wird. Die Idee der informationellen Gesundheit macht dies möglich. about this event: https://cfp.gulas.ch/gpn22/talk/98NYLC/

Lower Layer of osmo-trx-ms (osmodevcon2024)

Sat, 04 May 2024 14:30:00 +0200

Brief talk about the lower layers of osmo-trx-ms, the mobile-station side GSM transceiver about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/3SYDHF/

Common Mistakes <> Different Customers - Warum Ransomware-Angriffe so einfach sind (gpn22)

Sat, 01 Jun 2024 13:15:00 +0200

Die zu Grunde liegenden Fehler, die Ransomwareangriffe ermöglichen (und einfach machen), sind häufig über verschiedenen Kunden hinweg die gleichen. Dieser Talk ist nicht nur ein Rant über immer gleiche Fehler, sondern soll IT-Verantwortlichen praxisnaher Empfehlungen zur Absicherung der IT-Infrastruktur geben. Denn die gute Nachricht ist: Der weitaus überwiegende Teil der Ransomwareangriffe lässt sich mit der Umsetzung relativ grundlegender technischer und organisatorischer Maßnahmen frühzeitig verhindern. about this event: https://cfp.gulas.ch/gpn22/talk/GUYAHS/

OpenRailwayMap – wie kommt das Signal auf die Karte? (gpn22)

Sat, 01 Jun 2024 10:00:00 +0200

Seit zehn Jahren stellt das Projekt OpenRailwayMap eine thematische Karte bereit, die Informationen über die Eisenbahninfrastruktur aus der OpenStreetMap-Datenbank darstellt. Wie werden diese Informationen von Freiwilligen erfasst? Welche Informationen können in OpenStreetMap erfasst werden? Wie kann man beitragen? Auch andere Nutzungsmöglichkeiten, z.B. Routing und Geocoding, der Daten werden im Vortrag angerissen. Seit zehn Jahren stellt das Projekt OpenRailwayMap eine thematische Karte bereit, die Informationen über die Eisenbahninfrastruktur aus der OpenStreetMap-Datenbank darstellt. Es schließt damit eine Lücke, die Eisenbahn-Infrastrukturunternehmen offen lassen. Dabei sind ihre Mitarbeitenden selbst auch Nutzer der OpenRailwayMap, wie die Zugriffszahlen belegen. Der Vortragende zeigt, wie er und andere Freiwillige diese Informationen für OpenStreetMap erfassen. Sei es die Mitfahrt im Zug mit Notizbuch und GPS-Empfänger, das Fotografieren oder Filmen aus fahrenden Zügen oder die Erfassung vom Bahnsteig und parallelen Wegen. Auch andere Nutzungsmöglichkeiten der Daten, z.B. Routing auf Bahngleisen, und Geocoding (Suche nach Betriebsstellen oder auf Basis von Streckennummer und Streckenkilometer), werden im Vortrag angerissen. about this event: https://cfp.gulas.ch/gpn22/talk/FNXD3T/

My files are a mess. Why??? The past and future (gpn22)

Sat, 01 Jun 2024 12:00:00 +0200

Files and directories feel like the Sun and Earth: they are the eternal foundations, and pretending they don't exist can only make make things worse. Except files were invented by humans! What if we left our zone of comfort and explored the possibilities? We live in the world of hierarchical file systems. We juggle named files, named directories, and symbolic links daily. It has been this way since the days of DOS, and it remains this way now. It's just the way it is. Or is it? Phone operating systems try to hide the underlying file system from the user. Yuck! Or actually, do we really want to manage our files manually? Is it really that fun to decide if the train ticket to FOSDEM goes under the "2023" or "invoices" directory, and in which order? Or do we just want to find the cursed thing when we need it? Documents have not always been bound to files, and they aren't, and they don't have to be. Put away the Stockholm syndrome, and I'll tell you about semantic desktop, WinFS, alternate streams, [photo managers](https://www.digikam.org/), [Perkeep](https://perkeep.org/), [IPFS](https://ipfs.tech/), and my own plan to ascend. about this event: https://cfp.gulas.ch/gpn22/talk/ZRKD3G/

Lektionen aus 1,5 Jahren Fediverse-Moderation und Administration (gpn22)

Sat, 01 Jun 2024 20:00:00 +0200

*Mastodon lässt sich ganz schnell aufsetzen*, haben sie gesagt. Was sie nicht erwähnt haben: den Aufwand, den die Moderation so mit sich bringen kann. Ein Einblick in die Moderation, Administration und die Lektionen, die ich daraus gelernt habe. about this event: https://cfp.gulas.ch/gpn22/talk/WKPJFE/

Qualitätskontrolle mittels KI/ML (gpn22)

Sat, 01 Jun 2024 13:15:00 +0200

Ein Erfahrungs- und Leidensbericht darüber, wie man Qualitätskontrolle mittels KI/ML an Produktionslinien umsetzen kann. Und das alles über Eigenentwicklungen - wir haben Interna von Tensorflow gesehen, die sonst wohl nur die wenigsten sehen. Ein Erfahrungs- und Leidensbericht darüber, wie man Qualitätskontrolle mittels KI/ML an Produktionslinien umsetzen kann. Und das alles über Eigenentwicklungen - wir haben Interna von Tensorflow gesehen, die sonst wohl nur die wenigsten sehen. Im Talk werde ich die Entwicklungen zeigen, die ich weitgehend alleine, teils auch im Team, seit ~2019 für einen Industriekonzern umsetzen durfte. Das ganze entstand aus einem Hobbyprojekt, was nun Millionen von Teilen mittels Kamera und KI-Modellen auf Fehler prüft. Und was wir dabei gelernt und erfahren haben möchte ich euch nicht vorenthalten. about this event: https://cfp.gulas.ch/gpn22/talk/NAFLDR/

Welcome to OsmoDevCon 2024 (osmodevcon2024)

Fri, 03 May 2024 11:00:00 +0200

Welcome to the event, organizational matters, thanks to sponsors, ... about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/NRLXAB/

fx2adc: Using USB oscilloscopes as general purpose ADC (osmodevcon2024)

Sat, 04 May 2024 16:10:00 +0200

There are several USB oscilloscopes based on the Cypress FX2 + AD9288 (e.g. Hantek 6022BE). So far, most of them were supported by the open source sigrok project, but not for continuous acquisition of samples. This talk will show how those devices can be used to digitize SDR IF signals, and for projects like vhsdecode. For more information, see: https://github.com/steve-m/fx2adc about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/F7CZPM/

onomondo softsim: A software USIM implementation (osmodevcon2024)

Sat, 04 May 2024 12:30:00 +0200

During 2022, sysmocom was tasked by IoT operator Onomondo to develop a software implementation of a rather fully-featured 3GPP USIM (and ETSI UICC). The idea of this project is that one would run it inside an existing trusted execution environment / secure element of an IoT device, removing the need for a physical chip or slot. After some grace period, this project was released as open source software in 2024. Let's have a look on what it can do and how it can be used. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/TRWXYF/

Anatomy of the eSIM profile (osmodevcon2024)

Sat, 04 May 2024 19:15:00 +0200

In the eSIM universe, *eSIM profiles* are the virtualised content of a classic USIM (possibly with ISIM, CSIM, applets, etc.). Let's have a look what an eSIM profile is: * how is the data structured / organized? * what data can be represented in it? * how to handle features provided by eUICC, how can the eSIM profile mandate some of them? * how does personalization of eSIM profiles work? There will be some hands-on navigation through profiles, based on the `pySim.esim.saip` module. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/J888MC/

Traut Euch.... Zivilcourage zu zeigen. (gpn22)

Sat, 01 Jun 2024 14:30:00 +0200

Hin- statt wegsehen, zur Polizei gehen statt weggehen - warum wir uns alle trauen sollten, mehr Zivilcourage zu zeigen und wie dabei der Selbstschutz gewahrt bleibt. Was ist das eigentlich, "Zivilcourage", was bedeutet sie, warum brauchen wir sie heute noch mehr als früher - und zwar offline und online? Das müssen wir in diesem Talk klären. Erst dann können wir uns Fragen widmen wie: Wie erkennt man, ob Menschen unsere Hilfe brauchen oder wir uns (unerwünscht) einmischen? Wie spricht man Opfer an, gerade bei Unsicherheit, ob sie Hilfe brauchen und wollen? Sollten wir das Einmischen lassen, wenn wir unsicher sind? [Spoiler: Nein.] Jede*r kann und sollte Zivilcourage zeigen, unabhängig von Alter, optischen und körperlichen Merkmalen, Herkunft ... aber sich niemals selbst in unkalkulierbare Gefahr begeben. Deshalb müssen wir darüber sprechen, wie wir Zivilcourage zeigen, aber Selbstschutz wahren, können. Und uns vergegenwärtigen, dass echter Einsatz nicht endet, wenn Polizei, Behören und Justiz übernommen haben, sondern dann (vielleicht) erst anfängt. Im dritten Teil des Talks müssen wir über für Opfer gefährliche Arten reden, nicht zu helfen. Nicht, weil gut gemeint oft nicht gut gemacht ist. Sondern, weil Zivilcourage auch heißt, sich im Namen der Opfer gegen untätige Behörden aufzulehnen, auf Täter-Opfer-Umkehr, Victim Blaming und sekundäre Viktimisierung aufmerksam zu machen. Und natürlich wird der Talk auf meine persönlichen Erfahrungen mit Zivilcourage eingehen. Ihr werdet erfahren, warum mich manche Menschen "SEK-Wawuschel", andere "die ominöse Frau mit den giftgrünen Haaren" (oder noch fieseres) nennen - und mir das egal ist. about this event: https://cfp.gulas.ch/gpn22/talk/J3MKEY/

Programmieren mit dem puren Lambda-Kalkül (gpn22)

Fri, 31 May 2024 21:15:00 +0200

Ich zeige euch super spaßige Methoden, wie ihr mit dem puren Lambda-Kalkül programmieren könnt!! **(Nahezu) keine Vorkenntnisse erforderlich!** Programmierung mit funktionalen Sprachen wie Haskell ist inzwischen weit verbreitet. Nahezu alle funktionalen Programmiersprachen basieren auf einer erweiterten Form des Lambda-Kalküls. Wenn man nun sämtliche Erweiterungen wie Schleifen, Listen, Zahlen, Text, Typen, Klassen usw. entfernt, bleibt nur noch das pure, aber dennoch Turing-vollständige, Lambda-Kalkül. In diesem Vortrag zeige ich, wie man trotzdem sämtliche Probleme elegant lösen kann. Dafür erkläre ich (auch visuell!) verschiedene Arten, Daten- und Kontrollstrukturen rein funktional darzustellen. Außerdem zeige ich, wie man Fraktale und andere tolle Bilder mit simplen Ausdrücken generieren kann. Ist wirklich faszinierend!! about this event: https://cfp.gulas.ch/gpn22/talk/BDJB8E/

High-performance I/O using io_uring via osmo_io (osmodevcon2024)

Fri, 03 May 2024 17:00:00 +0200

Traditional socket I/O via `read/write/recvfrom/sendto/recvmsg/sendmsg` and friends creates a very high system call load. A highly-loaded osmo-bsc spends most of its time in syscall entry and syscall exit. `io_uring` is a modern Linux kernel mechanism to avoid this syscall overhead. We have introduced the `osmo_io`API to libosmocore as a generic back-end for non-blocking/asynchronous I/O and a back-end for our classic `osmo_fd` / `poll` approach as well as a new backend for `io_uring`. The talk will cover * a very basic io_uring introduction * a description of the osmo_io API * the difficulties porting from osmo_fd to osmo_io * status of porting various sub-systems over to osmo_io about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/ZBJWUP/

SpeedPitch & ShadowPlay: Two open source mobile-device apps for bicycles (gpn22)

Sat, 01 Jun 2024 10:00:00 +0200

This artist talk presents two mobile-device art applications developed for use with bicycles in the summer of 2021: SpeedPitch is a simple augmented sonic reality experiment that alters music playback speed based on your actual GPS ground speed. The faster you go, the higher the pitch and sudden stops lead to dragging audio samples. Natural motion leads to unnatural sound. ShadowPlay is an exploration of the architecture and light in outdoor spaces through sound. Using a bicycle-mounted smartphone as a brightness sensor and a bluetooth speaker, the mottled patterns of light and shadow become the musical score as one rides along city streets. SpeedPitch was developed through the support of BBK Karlsruhe and ShadowPlay was supported through the UNESCO City of Media Arts Karlsruhe as well as through the City of Karlsruhe. about this event: https://cfp.gulas.ch/gpn22/talk/TEUCHV/

Wenn Ideen Serie werden, von der Produktidee zur Fertigung (gpn22)

Sat, 01 Jun 2024 17:00:00 +0200

Wie funktioniert der Prozess von einer Produktidee über Prototyping, Prüfungen hin zu einem Massenprodukt. Ideen haben wir alle viele und manche sind es wert, daraus ein Produkt zu machen und eine eigene Firma/Startup darum herum zu gründen. Unterwegs gibt es viele Stationen die wichtig sind, teils viel Geld kosten und noch mehr Kosten vermeiden. Ich habe selber mehrere (Elektronik) Produkte erfolgreich von der Idee zur Fertigung gebracht und habe selber immer mehr Spaß an dem Drumherum um die eigentliche Entwicklungsarbeit. about this event: https://cfp.gulas.ch/gpn22/talk/ZYCAVA/

my hobby dabbles at examining network traces (osmodevcon2024)

Sat, 04 May 2024 18:15:00 +0200

Often I get a 3GPP related network trace (pcap), and have to manually gather leads to find out what exactly is going on in it. I have tried different ways to automate the analysis part, and will share what I ended up with. I'll show my little tools that I played with to trace and visualize GSM network activity. Immature as all of it is, maybe it is interesting to share and form a vision of a helpful tool. For example, when the task is to find out: at which network edge of a call leg do the RTP packets drop. First I need to know the chain of RTP ports that one particular subscriber uses. Then I need to count RTP packets arriving at each of them. Another example, there are a bunch of {PFCP,MGCP} conversations, setting up the user plane vectors. Are all the ports configured correctly? I have to read through the entire {PFCP,MGCP} session to overlay all the bits that form the final result. Another example, in a very active network, a particular voice call has a problem. How do I efficiently examine only those packets that are directly related to this particular TMSI / IMSI / RTP packet / RSL-ChanRef / ... about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/QRBB9Y/

Software defined vehicles - Das Jamba Sparabo fürs Auto? (gpn22)

Sat, 01 Jun 2024 15:45:00 +0200

In diesem Vortrag werde ich das Konzept des Software Defined Vehicles (SDV) erörtern, welches aktuell die Automobilindustrie umtreibt, indem es Fahrzeuge durch umfangreiche Software-Integrationen und -Updates hochgradig anpassungsfähig und funktional macht. Wir beleuchten die technologischen Grundlagen, Herausforderungen und zukünftigen Potenziale dieser Paradigmenverschiebung, die von der Vernetzung über die Benutzerschnittstellen bis hin zur Implementierung künstlicher Intelligenz reicht, um die Interaktion zwischen Mensch und Maschine neu zu definieren. Und natürlich spreche ich auch die "Sitzheizung als Abo" an about this event: https://cfp.gulas.ch/gpn22/talk/ZJ7TMZ/

The future of PCB design? How & why to write your schematics in code. (gpn22)

Sat, 01 Jun 2024 12:00:00 +0200

Writing schematics via code isn’t a new idea. But with new open-source projects like Atopile, this workflow suddenly makes a lot more sense. Let’s take a look at why one would even write schematics in code instead of using the established visual way in software like KiCad or Altium, the advantages (from git integration, reusing components & modules, AI support, and more), previous software projects in that field, the current development state and how you can try out this new workflow yourself. Ideally, you already have experience in PCB design, but also PCB design newbies can learn a lot in this talk and learn some tricks for their first circuit board design. about this event: https://cfp.gulas.ch/gpn22/talk/RUW3HF/

Printer Jam: Get a grip on everyday life with OSC (gpn22)

Sat, 01 Jun 2024 10:00:00 +0200

Not sure what to do with your discarded, never working, inkjet printers? Rosa Schuurmans and Riviera Taylor combine the sound of printers with the craft of live coding. Together they hack discarded printers and connect them to live coding environments on computers to generate analogue sounds from digital messages. Printer Jam welcomes familiar, mechanical quirks and the inherent noise of printers. Who knew a printhead could make a banging kick drum? During the performance we'll dive into the inner workings of the project, which is built upon FLOSS technologies such as Tidal Cycles, Open Sound Control and the Arduino ecosystem. Through combining these technologies, Printer Jam foregrounds the surprisingly accessible and flexible OSC specification. Which patterns create the most "interesting" sounds? What OSC messages can you send to create those snappy percussive elements? Or, will everything result in just another printer jam....? * No ink was spilled during the performance. about this event: https://cfp.gulas.ch/gpn22/talk/BZXLLE/

Tastaturen - Ein Drama mit 10 Fingern (gpn22)

Fri, 31 May 2024 21:15:00 +0200

Tastaturen...das periphere Eingabegerät, dass uns die Möglichkeit gibt, eins zu werden mit unseren Systemen, Werkzeugen, und uns ermöglicht, das zu tuen was wir lieben. Es gibt Tastaturen wie Sand am Meer. Viele sind wunderbar und viele sind Schrott, Mechanical Keyboard sind keine Randerscheinung mehr. Trackballs, Ergonomische Mäuse, Stühle und höhen verstellbare Schreibtische... Und doch beherrscht QWERTZ/QWERTY die Welt!? wtf? Warum? Es geht nicht nur um Alternative Layouts... wir schauen uns alles mal an. Bist du bereit in das nächste rabbit hole zu fallen oder hast gemerkt, dass du beim tippen Schmerzen hast? Dann lass uns reden. Ich bin ink, Teil des Click! Clack! Hack! Podcasts und habe echt nur äußerst begrenzt Bock auf Standardtastaturen. about this event: https://cfp.gulas.ch/gpn22/talk/FA8Z3F/

The first Tech Awards Ceremony (gpn22)

Sat, 01 Jun 2024 21:15:00 +0200

Other industries have their (somewhat pretentious) awards ceremonies, but tech (probably) does not. Let us change that and give away awards for stuff like the best bug turned into a feature, the coolest upcoming open source project, most employees laid off despite a really profitable year, the most interesting timezone handling bug and more. The first Tech Awards Ceremony will be a must-see event for anyone within tech. Awards will be a mix of sincere appreciation of cool things, friendly fun, and criticism of capitalist companies that make tech a much more difficult space to be in than it should be. If the event is popular, I hope to make it an annual thing, but let's see how the first one will work out before deciding anything about that. about this event: https://cfp.gulas.ch/gpn22/talk/KVKVDM/

Hochvakuumsysteme billig selbst bauen? Das geht? (gpn22)

Sat, 01 Jun 2024 10:45:00 +0200

Wie baut man eigentlich ein Hochvakuumsystem ohne dabei bankrott zu gehen und was kann man damit so machen? In diesem Talk werde ich über meine 4-jährige Reise durch Hochvakuumsysteme berichten. Hochvakuumsysteme sind die fundamentale Basis für einige große Bereiche der Physik wie etwa Elektronenmikroskopie, Massenspektronometrie und Dünnfilmbeschichtung. Ich bin von diesem Thema seit meinem ersten Praktikum mit 15 Jahren fasziniert. Nach Gesprächen mit einigen interessierten Wesen ist mir nun bewusst, dass dies oft als zu komplex und teuer betrachtet wird. Ich werde meine Erfahrungen und angewandte Hacks und Trick präsentieren um so vielleicht ein paar mehr Motivierte zu finden die dann möglicherweise auch Lust haben etwas in dem Bereich zu hacken. about this event: https://cfp.gulas.ch/gpn22/talk/BBLCDU/

Automotive Ethernet Standards in der (Open Source) Praxis (gpn22)

Sat, 01 Jun 2024 14:30:00 +0200

Im Automotive Bereich gibt es viele neue Standards die eine einfache Vernetzung über 2 Draht Leitungen bis 2,5 Gbits ermöglichen. T1S mit Multidrop ermöglicht es einfache Interfaces, wie LIN, CAN, UART, etc. ins Netzwerk zu bekommen und das alles in einem einfachen Bussystem. Ebenso ein Überblick über die momentan herrschenden Standards und wie man das in vorhandene Projekte bekommt. Beim Besuch des diesjährigen Automotiv Ethernet Congress gab einen Einblick in jetzigen Standards, interessante Bauteile. Dies hat auch noch mal zur Änderungen beim WomoLIN Projekt geführt. Welche Steckertypen werden verwendet, was ist beim erstellen der Leiterplatte beachten muss, wie integriere ich Ethernet PHYs und Switches. Welche Verschlüsslung findet direkt an der physischen Ebene statt. about this event: https://cfp.gulas.ch/gpn22/talk/MVPTEK/

Einfach Mal Machen: Demoszene Edition (gpn22)

Sat, 01 Jun 2024 20:00:00 +0200

Wie kommen Code, Grafik und Musik in einer Demo zusammen? Wie läuft eine Demoparty ab? Und vor allem: Wie kann man da mitmachen? Eine Starthilfe für Neugierige, inklusive Tipps und Tools. Die Demoszene schafft seit 40 Jahren echtzeitgerenderte Computeranimationen am Rande des technisch Machbaren. Egal ob auf einem C64 oder in aktuellen Browsern. Mit eigenen Riten, Methoden und Subkulturen hat sich daraus eine ganz eigene digitale Kulturform geschaffen. Wir schauen uns in diesem Vortrag an wie die Demoszene heute aussieht, werfen einen Blick auf die diversen Möglichkeiten wie man sich daran beteiligen kann und gehen einmal Schritt für Schritt durch, wie ihr eure eigene Grafik, Musik, 3D Model oder Demo in eine Competition auf einer Demoparty einreicht. about this event: https://cfp.gulas.ch/gpn22/talk/9EJPGZ/

srsRAN Project - Application in UL heavy traffic scenarios (osmodevcon2024)

Sat, 04 May 2024 11:00:00 +0200

First, we explore the usecase of Uplink heavy traffic scenarios. Then, describe the approach taken in srsRAN Project to meet the needs of these scenarios and finally showcase its working in a demo about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/HZVJQK/

Lightning Talks II (gpn22)

Sat, 01 Jun 2024 20:00:00 +0200

A short session for even shorter talks Language: English or German -- english -- Wanna say something? The stage is yours. You have 10 minutes to talk about anything. A short talk about the aerodynamics of ducks; promoting your new open-source project; a small hack that you found; social commentary ... anything goes. Available infrastructure: A microphone, beamer and laptop with a USB-Stick to show slides (PDF format). If you want to use your own device to show your presentation, please come to the stage 15 minutes before the event so we can test the setup. If you want to have a talk, we'd like you to write a short e-mail to pony@hadiko.de or just call DECT 7063 (P0N3). However, spontaneous contributions are also welcome if there's still some time left at the end. -- german -- Du willst was sagen? Das Podium gehört dir. 10 Minuten hast du, dann wird gewechselt. Ein kurzer Vortrag über die Aerodynamik von Enten, Werbung für dein neues Open-Source-Projekt, ein kleiner Hack den du neulich entdeckt hast, gesellschaftliche Kommentare ... alles geht. Zur Verfügung stehen Mikrophon, Beamer und ein Laptop mit USB-Stick, um Präsentationen im PDF-Format zu zeigen. Falls du eine Präsentation von deinem eigenen Gerät zeigen möchtest, würden wir dich bitten, 15 Minuten vor Beginn zu kommen, damit wir die Technik testen können. Am besten meldest du deinen Vortrag bei pony@hadiko.de oder DECT 7063 (P0N3) an. Spontane Beiträge sind aber auch gern gesehen, wenn am Ende noch Zeit ist. about this event: https://cfp.gulas.ch/gpn22/talk/VSFSJP/

GSMTAPv3 - The long-awaited successor (osmodevcon2024)

Sat, 04 May 2024 15:10:00 +0200

We all know the inherent problems of GSMTAP (v2) as we know it. Can we finally tackle the much desired successor GSMTAPv3 in 2024? about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/Q3XYVC/

OsmoPCU: past, present and future (osmodevcon2024)

Fri, 03 May 2024 15:45:00 +0200

Summary of the architectural changes done over osmo-pcu code base over last years, what we accomplished and possible next steps. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/KLWCKH/

My Kamailio Config (osmodevcon2024)

Sat, 04 May 2024 11:30:00 +0200

This talk should maybe be titled "How (NOT) to write a Kamailio Config" :-) Some of us at Osmocom have had reason to use Kamailio in recent years, even if only as a basic endpoint for osmo-sip-connector to loop back to itself. Kamailio is quite powerful, and it might be of interest to briefly go through the things I did with it, and also two other related FOSS projects: **SEMS** and **RTPENGINE** * Routing DID * Routing with Osmo dGSM * Gateway to Jitsi Conferences * Mangling Caller ID * Failover routing (Terrestrial/vSAT switch) * Codec Transcoding decisions (with multiple transcoding hosts and optional direct RTP without transcoding) *All this can be learned by reading Kamailo docs, however, there's nothing like learning from real experience, right? (or sharing that experience, and examples)* about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/BUWUKG/

osmo-epdg: The osmocom ePDG for VoWiFi (osmodevcon2024)

Sun, 05 May 2024 10:15:00 +0200

After working on it on and off during 2023, we finally have a working ePDG in the Osmocom universe. Let's have a look at its internal architecture, how it integrates with other network elements and have a look at a demo and protocol traces. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/YJWERZ/

Let’s create a Python Debugger together (gpn22)

Sat, 01 Jun 2024 10:45:00 +0200

Debuggers are indispensable tools for all Python developers, empowering them to conquer bugs and unravel complex systems. But have you ever wondered how they work? Curious about the implementation of features like conditional breakpoints and single stepping? Join me for a talk in which we create our own debugger with conditional breakpoints, single stepping, and a Python-based debugging shell and learn a lot about debuggers along the way. about this event: https://cfp.gulas.ch/gpn22/talk/DH3EHM/

Why IT security needs to innovate!!! (gpn22)

Fri, 31 May 2024 22:30:00 +0200

Der klassische Sicherheitsansatz ist im Zeitalter von Plattform-Engineering und Cloud-Geschwindigkeit nicht mehr haltbar. Mit der Beschleunigung der Software-Entwicklung und -bereitstellung muss die IT-Sicherheit nicht mehr als Hindernis, sondern als Katalysator für die digitale Transformation gesehen werden. Das Ziel der IT-Sicherheit ist nicht nur die Gewährleistung eines sicheren Laufzeitschutzes, sondern auch die Unterstützung der Teams bei der Definition und Erreichung von Sicherheitszielen. Daher benötigen wir einen kontinuierlichen IT-Sicherheitsansatz, der sich darauf konzentriert, den richtigen Stakeholdern zum richtigen Zeitpunkt das richtige Feedback zu geben. Wir werden uns ansehen, wie moderne Sicherheitsteams einen kontinuierlichen Sicherheitsansatz umsetzen, in die Entwicklung integrieren und bessere Ergebnisse als mit traditionellen Methoden erzielen. Die Teilnehmer werden diesen Vortrag mit einem besseren Verständnis verlassen: Wie hat sich Platform Engineering auf die traditionellen Sicherheitsrollen ausgewirkt? Wie können Unternehmen mit organisatorischen Konflikten umgehen? Wie moderne Sicherheitsteams einen kontinuierlichen Sicherheitsansatz umsetzen. about this event: https://cfp.gulas.ch/gpn22/talk/8Q9P3D/

Codec resolution: AMR rates in 2G, 3G and SIP (osmodevcon2024)

Fri, 03 May 2024 15:15:00 +0200

AMR requires out-of-band negotiation of a set of bitrates. Let's take a tour of the various ways AMR rates are represented across our technologies. How do we, in detail, navigate this perilous landscape to select AMR rates so that call legs match? about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/RUHNZU/

NeoVim - jenseits von q! (gpn22)

Sat, 01 Jun 2024 15:45:00 +0200

Common Code möchte geschrieben werden. Warum nicht mit NeoVim? Die Geschichte von Vi, Vim und NeoVim reicht schon circa 50 Jahre zurück. Wir drehen eine kurze Runde durch die Vergangenheit und schauen uns an, wo das alles herkommt. Dabei wird es einige Überraschungen geben! Außerdem stellt NeoVim moderne Editor-Features bereit. Einige davon sehen wir uns an: - Language Server Protocol Client (für Autocompletion, Refactorings…) - Diagnostics API - Lua API (und die init.lua) - Tree sitter Syntax Parser - Terminal Emulator - Plugin-Ökosystem Es wird passend zum Vortrag noch einen NeoVim Konfig-Workshop geben! about this event: https://cfp.gulas.ch/gpn22/talk/ETE9ZT/

REST in the Cloud - Einführung in Webservices ohne Seife und Sonnenschein (gpn22)

Sat, 01 Jun 2024 15:45:00 +0200

Einführung in Webservices mit REST, inklusive historischem Abenteuer in Vorgänger und wie wir REST kaputt machen können (mit Praxisbeispielen!) REST ist die moderne Art, Webapplikationen zu schreiben - sogar Java kann damit umgehen. Representational State Transfer bietet eine Möglichkeit, dass wir nicht nur statische Webseiten anschauen, sondern interagieren können, ohne uns mit Javascript befassen zu müssen (ein Quell der Freude für einen eigenen Talk - oder sieben). Wir schauen uns an, was REST ist und wie wir es verwenden, ohne Einschlafpotential. Die etwas eingestaubte Seife aka Webservices mit SOAP und WSDL schauen wir uns aus historischen Gründen an, genauso wie RPC unter etwas Sonnenschein. Nachdem wir ein Grundverständnis von Historie und Funktionsweise von REST gewonnen haben, finden wir kreative Wege, sie einer unbeabsichtigten Verwendung zuzuführen, die sicherheitsbedenklich sein könnten, garniert mit Beispielen aus der Praxis und den unendlichen Weiten des World Wide Webs. Geeignet zum Einstieg und alle, die ein wenig IT-Archäologie und Software-Forensik hören wollen. about this event: https://cfp.gulas.ch/gpn22/talk/FVCLQX/

Low cost, high speed data acquisition over HDMI (osmodevcon2024)

Sun, 05 May 2024 12:30:00 +0200

Through a reverse-engineering effort it is possible to (ab)use a combination of cheap USB 3.2 HDMI video grabbers based on the Macrosilicon MS2130 in combination with small FPGA dev boards like the Sipeed Tang nano series (both ~10 USD each) to capture arbitrary data by connecting them via an HDMI cable. This can be used as a low cost, high speed logic analyzer, ADC capture, DIY SDR etc. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/UBCQFC/

2.024 G (osmodevcon2024)

Fri, 03 May 2024 14:30:00 +0200

It's the year **2024**, so that's 2.024K (or G for *grand*), right? What does it mean to use 2.024 G data (aka EDGE 2.5G) in the year 2024? Our Osmocom 2G Data stack seems pretty mature at this point. Within the limits of the technology one can still use a remote ssh session, download email, do "instant messaging", including sending photos and short audio messages. All this works fine with one or two UE connected on a lab desk to a TRX configured for *high* capacity, However, introduce some TCH "stealing" the PDCH, some several 100's of UE (even just trying to attach) and some non optimal RF conditions and the capacity of the TRX is severely reduced. In these conditions, modern Android phones will saturate the TRX' capacity even with only their DNS lookups for "connectivity.google.com" - Maybe somewhat ironically? I've considered various steps to try to mitigate this situation. A common goto is to interfere with DNS, but this is disastrous. * In some cases, if Android cannot reach 8.8.8.8, regardless of what the network said to use for DNS, it will simply try again. - Of course, that can't be right. right? * If connectivity.google.com doesn't resolve, well that can't be right either, so try again. * If connectivity.google.com resolves, then HTTP GET /generate_204, and if this doesn't work, report to upper layer that there is no "Internet" and... you guessed it, try again. So we have to allow these things, which in itself is OK, as once the 204 is received, the phone will (probably) leave that alone, at least for a few minutes, but what comes next is all of what one might imagine is in the various phones, checks for system updates, app stores updates, uploading all the surveillance info that the google "services" cached while disconnected, and *who knows what else. *those running HTTP toolkit ;-) And that's before we even consider whatever is installed in "user space" (if such a thing can really be considered to exist on an Android device) starts. My current solution to this is to allow a limited amount of services, and then use netfilter's TARPIT module to get the phones to back off from everything else. Let's look a little a that, and maybe discuss what other optimizations could be done - For example netfilter scheduling and queues at the GGSN's IP interface. How about limiting the DL bandwidth per IP at this point? Give ACKs and short packets priority? We could limit the bandwidth here to the TRX capacity, but what if there is more than one SGSN, maybe an unknown number of SGSN (and TRX) connected at any one time? Now I've pretty much said everything I had to say in this description! But if would be good to discuss it, you all probably have some ideas! about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/L3BXTR/

Nerds im Energiemanagement, eine Idee eskaliert. (gpn22)

Sat, 01 Jun 2024 14:30:00 +0200

Die Geschichte wie ein simpler Temperatursensor zu einem Großflächigen Energiemonitoring im Industrieumfeld eskalierte. Als frisch ausgelernter Facharbeiter rutschte ich in die Position des Prozessoptimierers, doch eine kleine Idee mal eben die Hallentemperaturen zu messen startete ein Projekt, das in 2 Jahren doch etwas eskalierte. Das Projekt soll auf lange Sicht komplett Open-Source werden, vielleicht ist ja was für euch dabei. Wie es dazu kam, was man mit Siemens, Node-Red, TimescaleDB und Grafana so alles im Industriebereich anstellen kann, und was ich auf dem Weg gelernt habe, das erfahrt ihr im Vortrag. about this event: https://cfp.gulas.ch/gpn22/talk/FNUJQR/

Using bpftrace to analyze osmocom performance (osmodevcon2024)

Sun, 05 May 2024 11:45:00 +0200

[bpftrace](https://github.com/bpftrace/bpftrace) is a utility that uses the Linux kernel tracing infrastructure (and eBPF) in order to provide tracing capabilities within the kernel, like uprobe, kprobe, tracepoints, etc. bpftrace can help us to analyze the performance of [unmodified] Osmocom programs and quickly provide information like, for example: * Histogram of time spent in a specific system call * Histogram of any argument or return value of any system call about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/SGKKAA/

Gewinner und Verlierer der Bundestagswahlrechtsreform (gpn22)

Fri, 31 May 2024 21:15:00 +0200

2023 wurde das Bundestagswahlrecht wieder einmal stark reformiert – doch was bedeuten die komplexen Änderungen eigentlich in der Praxis? Wer gewinnt Mandate? Wer verliert alles? Dieser Vortrag sucht die Antworten mit einer Analyse offener Wahldaten – und liefert überraschende Erkenntnisse. Die Wahlen zum Deutschen Bundestag sind komplex: Erststimmen, Zweitstimmen, Überhang- und Ausgleichsmandate, Direktkandidaten und Landeslisten. Und dann ändert sich auch noch ständig, wie aus den Stimmen die Verteilung der Mandate im Bundestag bestimmt werden: 2011, 2013, 2021 und nun zuletzt letztes Jahr (2023). Ein verfassungskonformes Wahlrecht für den Bundestag zu verabschieden scheint gar nicht so einfach zu sein. In diesem Vortrag werden wir uns auf eine Reise durch das deutsche Bundestagswahlrecht begeben und verschiedenen Fragen begegnen: Was haben sterbende Nazis mit dem Wahlrecht zu tun? Was verändert sich bei der nächsten Wahl? Und sind harmlos wirkende Wahlrechtsreformen die deutsche Form des Gerrymanderings? about this event: https://cfp.gulas.ch/gpn22/talk/39KWPM/

bash is a systems programming language (gpn22)

Sat, 01 Jun 2024 13:15:00 +0200

We'll show you all the cursed uses of bash you didn't want to know about. Implementing network protocols, compilers, and emulators? Coming soon to a /bin/bash near you! During the presentation, we'll show you the really juicy details of how we stretched bash to its absolute limits in some of our craziest projects, while also teaching you about features that will hopefully one day prove useful in your own down-to-earth scripts. This is a high effort shitpost: we woke up one day and chose violence — if in "violence" you include using bash for the things that really should use a systems programming language, that is. We implemented emulators, network servers, parsed text and binary data alike, and crafted libraries to help with all of the above – just so you don't have to wonder: "could it be done"? about this event: https://cfp.gulas.ch/gpn22/talk/TL97JJ/

DebugMux: getting baseband logs from old Sony Ericsson phones (osmodevcon2024)

Fri, 03 May 2024 18:30:00 +0200

DebugMux is a vendor specific interface/protocol exposed by [Sony] Ericsson phones and modems. Similar to QMI (Qualcomm MSM Interface), it allows debugging the GSM/GPRS/UMTS stack at run-time. In this talk I will demonstrate an open source DebugMux client software and share my findings about this interface, as well as other interfaces working on top of it. about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/XB9MRJ/

Operating Open Source Mobile Networks at Scale (osmodevcon2024)

Fri, 03 May 2024 12:00:00 +0200

TBD about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/CGVEVM/

Von Nix kommt Nix (gpn22)

Sat, 01 Jun 2024 10:45:00 +0200

Wer in der Chaos Community unterwegs ist, trifft unweigerlich auf Nix. Doch ist es das von vielen geprädigte Allheilmittel für IT Sorgen? Wann ist es wirklich Sinnvoll? Mensch könnte den Eindruck haben, dass in den letzten Jahren NixOS in der Chaos Community zum neuen ArchLinux wurde. Egal in welchen Hackspace man geht, findet man eine Gruppe an NixOS affinen Haecksen und Hackern die am liebsten jeden Linux Rechner auf der Welt zu der besten Distribution ever - NixOS - migrieren wollen. Wir nehmen euch mit in eine Kritische Auseinandersetzung dieser Technologie, deren Glorifizierung, und das Fandom was um NixOS und Nix-related Tooling erstanden ist. Dabei wollen wir auf die Vorteile und positiven Erfahrungen eingehen, die Menschen mit NixOS haben können, und welche Probleme durch eine fundamental andere Herangehensweise an Linux Packetierung und Systemkonfiguration gelöst werden können (Reproduzierbarkeit von Builds, Deterministik in System Konfiguration, die Leichtigkeit mit der sich Entwicklungsumgebungen zwischen verschiedenen Teams teilen lassen, ...) Alledings wollen wir die Probleme nicht unter den Teppich kehren und auch aufzeigen, warum NixOS kein Wunderheilmittel ist und warum es auch gute Gründe geben kann dem neuen Technik Dogma nicht zu folgen (schlechte Dokumentation, eine sehr steile Lernkurve an denen viele Scheitern, einen deutlich höheren Zeitaufwand, durch den Menschen die nicht die Zeit haben sich in ihrer Freizeit in ein neues System einzuarbeiten ausgegrenzt werden, ...). Das Ziel dieses Vortrages ist es eine nuancierte Sicht auf NixOS und Nix tooling zu geben: Gründe warum es eine spannende Technologie ist, aber auch Gründe warum diese nicht Universell anwendbar ist, und nicht als solche von Nix-fans verkauft werden sollte. about this event: https://cfp.gulas.ch/gpn22/talk/ZLDSBA/

Detailed workings of OTA for SIM/USIM/eUICC (osmodevcon2024)

Sat, 04 May 2024 12:00:00 +0200

Everyone knows that OTA (over the air) access to SIM cards exists for decades, and that somehow authenticated APDUs can be sent via SMS. But let's look at the OTA architecture in more detail: * OTA transport (SCP80) over SMS, USSD, CellBroadcast, CAT-TP, BIP * The *new* SCP81 transport (HTTPS via TLS-PSK) * how to address individal applications on the card via their TAR * common applications like RFM and RAM * custom applications on the card * OTA in the world of eUICCs * talking to the ECASD * talking to the ISD-R * talking to the ISD-P/MNO-SD or applications therein about this event: https://pretalx.sysmocom.de/osmodevcon2024/talk/W9X8XH/

A Common(s) World: Gemeinwohlorientierte künstlerische Forschung am ZKM | Hertzlab (gpn22)

Sat, 01 Jun 2024 12:00:00 +0200

Das ZKM | Hertzlab ist als künstlerische Forschungs & Entwicklungsabteilung des Zentrums für Kunst und Medien Karlsruhe die zukunftsgewandte Abteilung. In sechs Themengebieten beschäftigen wir uns mit der Frage, was in 100 Jahren ist, wie wir da hinkommen und wie wir das eigentlich hinkriegen, dass das eine lebenswerte Zukunft für alle ist. Wir geben einen Überblick über aktuelle Projekte des ZKM | Hertzlabs und laden euch ein, mit uns über die Zukunft zu spekulieren. about this event: https://cfp.gulas.ch/gpn22/talk/HWVJLD/

Stellwerke planen für Informatiker (gpn22)

Fri, 31 May 2024 12:00:00 +0200

In diesem Talk möchte ich aus der Sicht eines Informatikers darüber reden wie Stellwerke funktionieren (kurz) und wie sie geplant werden. Insbesondere werde ich den aktuellen Stand der Digitalisierung der Stellwerksplanung humoristisch analysieren und kritisieren. Zielgruppe sind alle ITler die sich für die Bahnwelt interessieren, verständnisrelevante Grundlagen der Bahnwelt werden kurz eingeführt. Der Talk setzt sich kritisch mit den Schnittstellen zwischen Leit- und Sicherungstechnik (Stellwerkstechnik) und Informatik auseinander. Ich zeige Perspektiven auf, wie man diese Stellwerkswelt mit bekannten Techniken der IT-Welt (besser) digitalisieren kann, und was dem entgegensteht. Die Inhalte reichen von NP-Vollständigkeit über Datenmodelle für Stellwerke, das Open-Source-Verständnis der DB und formaler Logik zu deutsche Verwaltungsvorschriften. Ich plane beruflich Leit- und Sicherungstechnik bei der Deutschen Bahn, halte diesen Vortrag aber privat. about this event: https://cfp.gulas.ch/gpn22/talk/HYAMKF/

Passkeys – Login ohne Passwort (?) (gpn22)

Fri, 31 May 2024 20:00:00 +0200

Passwörter sind nicht mehr zeitgemäß! Seit 2023 wird viel Hype um das Thema Passkeys betrieben, viele IT-Dienstleister, Cloud-Anbieter und Mailprovider bieten das System schon an. Aber wie funktioniert das eigentlich? Wie gut ist die Nutzbarkeit, im Vergleich zu Passwörtern und Multi-Faktor Authentifizierung? Warum sind passkeys immun gegen phishing und was unterscheidet sie von "herkömmlichen" Authentifizierungs-Faktoren wie App-notification und Microsoft Authenticator? Vor allem: was muss ich als Service-Anbieter tun, um meinen Nutzern und Kunden auch Passkeys-Authentifizierung anbieten zu können. Der Vortrag wird diese Fragen beantworten und eignet sich nicht nur für Entwickler und Betreiber von Software, sondern für alle Menschen, die sich selbst sicher und einfach bei Internetdiensten anmelden wollen. about this event: https://cfp.gulas.ch/gpn22/talk/ULQSLD/

Coherent optical transceivers - current capabilities and future possibilities (gpn22)

Fri, 31 May 2024 17:00:00 +0200

With the speed of 400G coherent technology was introduced to pluggable optical transceivers (OIF 400ZR and OpenZR+). This technology is complex and powerful for your network, it even has influence on your network device operating system. This talk will provide first insight in Nokia's implementation as well as known or potential interoperability issues addressed by the OIForum. If your transport system, router or even switch already provides coherent pluggable transceivers check the available interface parameters. You can send me these CLI outputs / management software screenshots to thomas.weible@flexoptix.net. I will try to include it into the presentation. And finally new formfactors for 800G and 1,6T will be part of the game as well. Stay tuned.... about this event: https://cfp.gulas.ch/gpn22/talk/8TKX7Q/

Trollen leicht gemacht. (gpn22)

Thu, 30 May 2024 16:30:00 +0200

Einen Einführung ins Trollen. Was sind Trolle? Was macht sie so unglaublich toll und wieso wäre die GPN ohne sie nicht möglich? Wie funktioniert das Trollsystem? Diese und mehr Fragen beantworten wir hier. Wir erklären die Basics für Trolle (Helfende) auf der GPN. Ob du das erste Mal bei der GPN mithelfen möchtest oder schon immer dabei bist. about this event: https://cfp.gulas.ch/gpn22/talk/Z8Y93S/

Kein Bargeld - kein Problem? Bezahlkarten für Geflüchtete analysiert (gpn22)

Fri, 31 May 2024 14:30:00 +0200

Die Bezahlkarte für Geflüchtete kommt. Wir haben uns die drei weitverbreitesten Anbieter der Bezahlkarten genauer angeschaut. Im Rahmen des Vortrages werden Datenschutz- und IT-Sicherheitsmängel in Bezahlkarten-Apps und Webapplikationen für Geflüchtete genauer beschrieben. Durch Meldungen im Rahmen von Responsible Disclosure-Verfahren konnten zahlreiche Mängel im Bereich Datenschutz und IT-Sicherheit verantwortlich aufgedeckt und behoben werden. Nach mehrmonatiger Debatte hat die Ampel-Koalition eine Einigung im Rahmen der sogenannten „Bezahlkarte für Geflüchtete“ erzielt und am 12.04.2024 im Bundestag eine Rechtsgrundlage für die bundeseinheitliche Bezahlkarte für Asylbewerber und Geflüchtete beschlossen. Durch eine Änderung des Asylbewerberleistungsgesetzes soll es zukünftig möglich sein, Leistungen über eine sogenannte Bezahlkarte an Asylbewerber zu vergeben. Die Bezahlkarte ist eine guthabenbasierte Karte mit Debit-Funktion. Einige Gemeinden, Städte und Bundesländer haben bereits vorab Lösungen in dem Bereich eingeführt oder Pilotprojekte durchgeführt. Die Lösungen stammen dabei von verschiedenen Anbietern. Neben einer physischen Karte ist für Asylsuchende ebenfalls die Nutzung einer virtuellen Bezahlkarte im Rahmen von Wallet-Apps möglich. Die Bezahlkarte wird dabei innerhalb einer App auf dem Smartphone gespeichert und kann mittels „mobile Payment“ genutzt werden. Im Rahmen des Vortrages werden Datenschutz- und IT-Sicherheitsmängel in Bezahlkarten-Apps für Geflüchtete genauer beschrieben. about this event: https://cfp.gulas.ch/gpn22/talk/RAMYBJ/

An introduction into internet voting (gpn22)

Fri, 31 May 2024 18:45:00 +0200

Internet voting allows you to submit your vote over the internet using your own device. This talk will give an introduction into the topic: Why might governments, associations or political parties turn to internet voting? What are the security requirements of such a system, and how does this differ to e-banking or postal voting? How do such systems work, and what separates a bad from a good (or at least a "better") voting system? Everything is better digitalized: e-banking, crypto currencies, smart homes, vtubers, ... - so when can we finally vote online? /s When a government, and an association or a political party starts to provide internet voting to its voters, it usually aims to increase turnout or reduce cost, while retaining a similar level of security than their current voting methods. But the security of internet voting is hard to compare to the security of other voting channels or other secure systems, such as e-banking. Further, reduced cost or increased turnout depends heavily on the context the election is held in. But what if the decision is taken, that internet voting needs to be provided? Simple systems usually do not cut it, as they need to relay on strong trust assumptions in the system provider, the administrators and even the voters. Against rogue employees or even nation-state adversaries, a black-box system stands no chance. Even in strong adversarial scenarios needs the system to keep votes secret, but at the same time remain transparent to verify the votes have been tallied correctly. Internet voting systems are in active use for political elections, for example in Switzerland. Looking at the history of such systems shows how full transparency and independent evaluations are necessary to detect flaws. For non-political elections (e.g. universities, associations), few available systems are sufficiently transparent to even begin evaluating them, and certifications such as BSI's corresponding Common Criteria are insufficient on their own. To summarize, the talk answers the following questions: - Why institutions would want or not want to use internet voting. - What properties an (internet) voting systems need to achieve. - What separates a bad from a better internet voting system. No scientific / computer science background is need to follow this session. about this event: https://cfp.gulas.ch/gpn22/talk/TKRTLZ/

RP Pico: Simple Stupid Synth (gpn22)

Thu, 30 May 2024 18:25:00 +0200

Mit einem einzelnen µ-Controller lässt sich kein 32-stimmig polyphoner Synthesizer bauen? Doch, mit gewissen Abtrichen beim Klang schon. Konkret: Per USB an einen Rechner angeschlossen zeigt sich mein RP2040-Pico-basierter Synth als MIDI-Gerät, das zwar nur simple Rechteckschwingungen erzeugt, davon aber für einen µ-Controller ziemlich viele. Bei vollorchestrierten MIDI-Dateien klingt der resultierende Chiptune-artige Sound gar nicht 'mal so verkehrt. Im Vortrag werde ich u.a. darauf eingehen, wie sich die Ideen hinter dem Bresenham-Algorithmus zum Zeichnen von Linien auch beim Audio-Rendering einsetzen lassen, um in den zeitkritischen inneren Schleifen ganz ohne Fließkommazahlen und Multiplikationen auszukommen. Ferner kann der Synthi auch als Blaupause für eigene Pico-basierte Projekte dienen, weil ich die teils herausfordernden USB- und I²S-Tücken prototypisch lösen konnte. Der Source-Code des Projekts ist hier zu finden: https://github.com/soundpaint/pico-simple-stupid-synth about this event: https://cfp.gulas.ch/gpn22/talk/WRLTA9/

Privacy to go (gpn22)

Thu, 30 May 2024 21:00:00 +0200

Der “Werbeblocker” für die Hosentasche mit Pi-hole und WireGuard VPN. User und Userinnen, die keine Werbung, kein Tracking und keinen Schadecode mögen und sich “irgendwie” selber schützen wollen und sich den Umgang mit mit Linux und Docker zutrauen und bestenfalls auch ein paar Netzwerk-Grundlagen haben, werden hier mit Infos dazu versorgt, wie sie mit ihrem eigenen VPN (zuhause oder auf einem eigenen, kostengünstigen Cloudserver) auf jedem Gerät und in jedem Netz (WLAN/WiFi, mobile Daten) und in jedem Land ihren eigenen Werbeblocker immer dabei haben. about this event: https://cfp.gulas.ch/gpn22/talk/TK7H9S/

Fotografieren auf Chaos Events (gpn22)

Fri, 31 May 2024 20:00:00 +0200

Fotografieren auf Chaos Events ist eine Herausforderung. Im Vortrag möchte ich Möglichkeiten zeigen wie es trotz unterschiedlicher Regelung möglich ist cool Bilder zu machen und die Stimmung bestmöglich einzufangen. Fotografieren auf Chaos Events ist eine Herausforderung. Veranstaltungen wie das Camp oder der Congress haben eine eher restriktive Foto-Policy, die GPN dagegen hat eine eher liberale Version, die ein anderes Herangehen und damit andere Bilder ermöglicht. Mit meinem Vortrag möchte ich die Diskussion darüber weiterführen, wie ein für alle akzeptabler Umgang mit den verschiedenen Policies möglich ist und wie trotzdem kreative Bilder entstehen können, die die Stimmung bestmöglich einfangen, ohne den sozialen Frieden zu gefährden. Dazu möchte ich auch die Ergebnisse meiner Umfrage nach dem letzten Congress vorstellen, in der mehr als 1000 Menschen ihre Meinung zur Photopolicy geteilt haben. about this event: https://cfp.gulas.ch/gpn22/talk/J7XBBK/

Quantum random oracle model, a user-friendly introduction (gpn22)

Thu, 30 May 2024 22:15:00 +0200

I will give some insight to the world of (post-quantum) cryptography and what questions in this world look like, from the perspective of a newcomer. In particular, I will give a user-friendly introduction to the Random Oracle Model, a tool frequently used in cryptography proofs. We will look at where the model fails and what problems come up when giving you enemies a quantum computer. No prior knowledge in quantum or cryptography is required to follow this talk, anyone who has programmed before will be able to follow. Last October, I started my PhD with the topic 'Quantum Security of Memory-Hard Functions' at the University of Amsterdam. Since then, I have been working on building an understanding of the tools typically used to prove security of cryptographic constructions. In this talk, I want to give you an introduction to the Random Oracle Model, a typical building block and its application to my topic. We will start from basic assumptions and work our way up to the full model and the construction of memory-hard functions. On the way, we will explore where the model breaks and what challenges arise once we assume our attacker has access to a quantum computer. about this event: https://cfp.gulas.ch/gpn22/talk/JJM9PN/

Retrogaming mit FPGAs (gpn22)

Fri, 31 May 2024 18:45:00 +0200

Um mit Retro-Spielen Spaß zu haben, braucht man entweder die alte Originalhardware oder man greift zu PC und Emulatorsoftware. Was wäre aber, wenn man die alte Hardware nachbilden könnte? Ich zeige, wie man mit sogenannten FPGAs fast vergessene Technik auch ohne Lötkolben daheim nachbaut und so alten Spielen neues Leben einhaucht. FPGAs (Field Programmable Gate Arrays) sind eine eigene Chip-Familie. Anders als z.B. klassische Prozessoren oder Speicherchips erfüllen FPGAs ab Werk keine spezielle Funktion. Erst durch passende Konfiguration erfährt das FPGA, was es eigentlich darstellen soll. Normalerweise setzt man sie ein, wenn es um selten benötigte und spezielle Funktionen geht, die Halbleiter von der Stange nicht bieten und für die die Entwicklung eines eigenen Halbleiters zu teuer und/oder zu aufwändig wäre. Wir nutzen FPGAs, um Chips nachzubilden, die nicht mehr hergestellt werden. Dabei machen wir uns zu Nutze, dass moderne FPGAs komplette Geräte der Homecomputer-Ära in einem einzige Chip unterbringen können. Mit dem MiST habe ich vor über 10 Jahren eines der ersten Geräte dieser Art entwickelt und auf den Markt gebracht. Seitdem ist die Zeit nicht stehen geblieben und mit dem Nachfolger MiSTer ist FPGA-Retrogaming endgültig in der Breite angekommen. Das hat wiederum weitere Entwickler auf den Plan gerufen, sodass inzwischen alle wichtigen Computer und Konsolen der 80er und viele der 90er auf FPGAs umgesetzt wurden. Ich werde erklären, wie sich FPGA-Nachbildungen von Emulatoren unterscheiden und was ein FPGA besser als eine Emulation auf Software-Basis z.B. auf einem PC macht und wo die Nutzung von FPGAs an ihre Grenzen stößt. Neben immer größeren FPGAs, die die Umsetzung immer jüngerer Maschinen ermöglichen, sind auch die Entwicklungen in Fernost im Billigbereich interessant und die Geräte auf denen man FPGA-Projekte aufbauen kann, werden immer erschwinglicher und kleiner. Wie FPGA-Retrogaming funktioniert, wie man damit auch daheim mit kleinem Budget in die Entwicklung integrierter (Retro-)Schaltungen einsteigen kann und wo FPGA-Retrogaming heute steht, werde ich im Detail beleuchten. about this event: https://cfp.gulas.ch/gpn22/talk/HVH9HE/

Intro to Lean 4: A language at the intersection of programming and mathematics (gpn22)

Fri, 31 May 2024 14:30:00 +0200

Type theory is the secret sauce that makes a programming language awesome. The more knowledge we can make the compiler aware of, the more we can rely on the compiler. But what is the limit? What if we could take _make bad state unrepresentable_ to the mathematical extreme? What is a proof anyway, can you eat it? Come on a wonderful journey into the land of dependent types, where we try building type-safe SQL queries, and sweeten the deal with our own syntactic sugar. I give a compressed intro and overview of Lean 4, a purely functional, dependently typed programming language and interactive theorem prover. Knowledge of purely functional languages is *not* required. 1. We start from zero. Introduction to Lean 4 syntax, side-by-side with Rust. Sum and product types, `List`, some easy intro examples. 2. _Dependent types_: Example of `Vec`, i.e. lists with statically known length. Dependent pattern matching. 3. _Propositions-as-types_: You can have logical `And` and `Or` in Rust, too! But how do you model forall quantifiers? How do you model `x <= y` in the type system? 4. Playing around with _types as first-class objects_, using heterogenous lists and projections on them as example. You can't pattern match on types themselves, or... can you? 5. _Metaprogramming_: Custom syntax, custom elaborators. Using what we learned to make type-safe SQL queries work, such as (note the absence of string quotes): ``` let dragons : Table Dragon := [...here be dragons...] let dragons2 : Table ?huh? := SELECT name, coins FROM dragons ``` Code samples from slides: https://gist.github.com/Kiiyya/5566f09b2d1af6aa0d85ba01179dcfdb about this event: https://cfp.gulas.ch/gpn22/talk/WWMGVN/

Lightning Talks I (gpn22)

Thu, 30 May 2024 21:45:00 +0200

Self-Authenticating TLS Certificates for Tor Onion Services (gpn22)

Thu, 30 May 2024 17:45:00 +0200

TLS (the security layer behind HTTPS) and Tor onion services (anonymously hosted TCP services) are both excellent protocols. Wouldn't it be nice if we could use them together? In this talk, I'll cover a working implementation of combining TLS with onion services, without compromising on the security properties that each provides. Topics to be covered include: * Why would you want to combine TLS with onion services? Why isn't onion service encryption good enough? * Why isn't unauthenticated TLS (e.g. self-signed certificates) good enough for onion services? * How can we authenticate a TLS certificate for a .onion domain without relying on public CA's like Let's Encrypt or any other trusted third parties? (No we're not using a blockchain.) * How can we teach standard (unmodified) web browsers like Firefox to apply different certificate validation logic for .onion certificates? * How can we teach standard (unmodified) web browsers like Firefox to validate certificates using typically-unsupported elliptic curves like Ed25519 (which Tor uses)? about this event: https://cfp.gulas.ch/gpn22/talk/XFT8NC/

USB, wie funktioniert das eigentlich? Certified USB4 (Version 2.0) (gpn22)

Thu, 30 May 2024 19:45:00 +0200

Die Fortsetzung der USB Geschichte mit USB4, Alternative Modes, PowerDelivery und USB Type-C. Schauen wir uns gemeinsam an was sich das USB Implementers Forum noch so ausgedacht hat. „[USB, wie funktioniert das eigentlich](https://media.ccc.de/v/gpn21-213-usb-wie-funktioniert-das-eigentlich-)“ auf der #GPN21 war gerade mal genug um die Anfänge von USB bis hin zu USB 3.2 SuperSpeed+ Gen. 2×2 zu behandeln. Diesmal gehts um die ausständigen Teile der umfangreichen Standards, USB4, PowerDelivery, Alternative Modes und USB Type-C. Kann auch Spuren von Schnelladen und Thunderbolt enthalten. about this event: https://cfp.gulas.ch/gpn22/talk/RDYKGK/

Graphite: Vom Pinsel zum Compiler (gpn22)

Fri, 31 May 2024 13:55:00 +0200

Graphite kombiniert Vektor (svg) und pixelbasierte Arbeitsweisen in einer FOSS Grafik-Design Software. Das Node-basierte Bearbeiten erlaubt nicht destruktive Workflows und die prozedurale Generierung von Kunst. In diesem Talk werfen wir ein Blick unter die Haube und ich gebe ein Einblick, warum wir dafür eine eigene Programmiersprache entwickeln und was man damit Cooles anstellen kann. https://graphite.rs/ Zuerst werde ich einen Überblick über das Graphite Projekt geben und den aktuellen Stand vorstellen. Dann erkläre ich wie die node-basierte funktionale Programmiersprache funktioniert und gebe einen Ausblick darauf, was das alles für aufregende Anwendungen ermöglicht. about this event: https://cfp.gulas.ch/gpn22/talk/QURWCW/

How I accidentally invented a video codec (and didn't beat Faxes at image compression) (and played Bad Apple at really low FPS) (gpn22)

Fri, 31 May 2024 10:45:00 +0200

A Bad Apple demo with the longest explanation ever – how I accidentally wrote my own image compression algorithms to cram more FPS into an ESP8266 than ever before. An exploration of data compression in the context of simple video compression. There won't be many real-world codecs in here, but don't worry – you'll accidentally learn all the fundamentals of data compression anyways. This talk is very beginner-friendly. about this event: https://cfp.gulas.ch/gpn22/talk/SAXCFX/

Help Us Identify UFUs: (Em)Powering Vulnerability Scanners with FUEL (gpn22)

Fri, 31 May 2024 10:00:00 +0200

Nowadays, many websites rely on user-generated content, e.g., by allowing users to upload images, videos, documents, or other files. If not handled carefully, Unrestricted File Uploads (UFUs) may appear and become a serious security issue. Our academic results show that some UFU types still fly under the state-of-the-art vulnerability scanners' radars, leaving websites at risk of severe vulnerabilities, such as Remote Code Execution or Cross-Site Scripting. Thus, we propose a File Upload Exploitation Lab (FUEL) to (em)power vulnerability scanners to become better at identifying UFUs and invite the community to reFUEL. If web applications fail to validate or handle user uploaded files properly, security issues such as Cross-Site Scripting or Remote Code Execution may arise. While PHP-based web applications are known to be prone to Unrestricted File Upload (UFU) vulnerabilities, other programming languages and web frameworks might be affected, too. Academic and non-academic work has covered many types of UFUs vulnerabilities and created vulnerability scanners to identify them. We have compared four different vulnerability scanners (BurpSuite, ZAP, FUSE and Fuxploider) with our novel File Upload Exploitation Lab (FUEL) to identify potential shortcomings in the detection capabilities. The results show that none of these state-of-the-art scanners manages to identify the UFU vulnerability in all of the 15 FUEL scenarios. Attendees of this talk will learn about UFUs and some less-known file upload bypasses. Further, we hope to raise the awareness that, similar to humans, no tool is perfect. Last but not least, we will invite the community to extend FUEL with more UFU scenarios to create a more thorough vulnerability scanner evaluation framework. The academic paper is to be published at DIMVA 2024, but we wanted to give the community a sneak preview :) about this event: https://cfp.gulas.ch/gpn22/talk/FSMH9M/

Privacy-preserving and Security in Machine Learning - an Introduction to Federated Learning (gpn22)

Fri, 31 May 2024 17:00:00 +0200

Federated Learning (FL) offers a privacy-preserving machine learning method by enabling collaborative model training across multiple clients without data sharing, securing sensitive information at its source. This talk explores Machine Learning applications and how to keep them secure, for example in critical sectors like healthcare. Collaborative learning, and in particular Federated Learning (FL) is a Machine Learning approach in which multiple clients collaboratively train a Neural Network model on their private data without the need to share the data. This strategy guarantees that data stays in its initial location, never being disclosed to external entities. This talk, will cover an introduction on how FL is used and its advantages when supporting secured data collaboration projects for example in environments like health care, where it is not possible to publish patient data for Machine Learning purposes. We will focus on the security perspective of Machine Learning and privacy attacks and defenses in those systems. This introduction draws upon the teachings of a course conducted by Phillip Rieger from System Security Lab at TU Darmstadt. about this event: https://cfp.gulas.ch/gpn22/talk/8MNJ9B/

Down the Parcel Hole (gpn22)

Thu, 30 May 2024 21:00:00 +0200

Dieser Vortrag beschreibt, wie wir fehlerhafte Prozesse in der Paketverfolgung der meisten deutschen Paketzustelldienste entdeckt haben, wie diese auf unsere Erkenntnisse reagiert haben und warum dies sehr wahrscheinlich auch deine Privatsphäre betrifft. In Zeiten des Online-Shoppings sind die Menschen besorgt, ob Online-Shops ihre Daten vernünftig behandeln und sichern. Online-Shops können über gängige Web-Schwachstellen wie SQL-Injections, XSS usw. angegriffen werden. Dadurch könnten Angreifer persönliche Informationen wie Name, Adresse und Bankdaten kopieren. Wir haben jedoch eine noch einfachere - und bisher unbeachtete - Möglichkeit gefunden, an die persönlichen Daten der Kunden von Online-Shops zu gelangen - ohne irgendwelche Schwachstellen auszunutzen. Da fast alle online bestellten physischen Waren von Paketdiensten ausgeliefert werden, haben wir das Tracking der wichtigsten Akteure im deutschen Paketmarkt analysiert. Durch die Verwendung öffentlich zugänglicher Daten und trivialer Statistik konnten wir Empfängerinformationen (Name, Adresse) schnell und in großer Zahl ermitteln. Dabei war es bei einigen Diensten sogar möglich, die Zustellung von Paketen zu beeinflussen. Gezielte Angriffe könnten dazu führen, dass Adressen und Einkaufsverhalten von Politikern und anderen Personen des öffentlichen Lebens aufgedeckt werden. Auch die Identifizierung von Kunden bestimmter Geschäfte ist denkbar. Die Art und Weise, wie die Sendungsnummern generiert werden, ermöglicht es uns nämlich, gezielt bestimmte Online-Shops anzugreifen. Während unserer Recherche haben wir mehrere Paketdienste kontaktiert (Responsible Disclosure), was zu einigen Verbesserungen führte. Einige Disclosure-Prozesse hatten schnelle und effektive Maßnahmen zur Folge und können als gute Beispiele dienen, während andere noch Raum für Optimierungen bieten. Wir werden auch darüber reden, wie Disclosure-Prozesse besser ablaufen können, und werden ein paar unterhaltsame Ereignisse darstellen. Wir kommen zu dem Schluss, dass Paketdienste eine - vielleicht - unterschätzte Gefahr für die Privatsphäre darstellen. Anstatt zahllose Online-Shops anzugreifen, ist der Missbrauch fehlerhafter Prozesse bei den wenigen marktbeherrschenden Paketzustelldiensten, die von fast allen Shops genutzt werden, ein ziemlich effizienter Weg, um an Adressen und in einigen Fällen an die Möglichkeit zu gelangen, in den Zustellprozess einzugreifen. In unserem Vortrag werden wir den statistischen Ansatz zum Brechen der Authentifizierung für die Paketverfolgung, die zugrundeliegenden Probleme, (negative und positive) Highlights aus den Disclosure-Prozessen und natürlich die Auswirkungen auf die Privatsphäre aufzeigen, die dies gehabt haben könnte und noch haben kann. Bei der diesjährigen GPN sprechen wir zum ersten Mal über zwei Paketdienstleister, die bei uns bisher noch nicht zur Sprache kamen, GLS und UPS. Zum Zeitpunkt der Veröffentlichung war die Schwachstelle bei UPS noch nicht behoben. about this event: https://cfp.gulas.ch/gpn22/talk/ABDM9K/

Common Code <> Different Roots (gpn22)

Thu, 30 May 2024 16:00:00 +0200

Opening of GPN22 about this event: https://cfp.gulas.ch/gpn22/talk/YN9HNK/

Wieso Typ 1 Diabetes so anders ist. (gpn22)

Fri, 31 May 2024 13:15:00 +0200

Kann ich als Typ 1 Diabetikerin in die Apotheke gehen und dort alles bekommen, was ich so an Verbrauchsmaterial brauche? Kann ich einfach ins Krankenhaus gehen und die haben alle Dinge vorrätig, die ich brauche? Die Antwort auf diese beiden Fragen ist nein und was das bedeutet und wieso das so ist werden wir uns ein bisschen in diesem Talk anschauen. Zudem möchte ich aufzeigen wie es in anderen Ländern ist und welchen großen Einfluss auf die Diabetiker*innen eine mögliche "Verbesserung" unseres Systems hätte. about this event: https://cfp.gulas.ch/gpn22/talk/EF77XF/

Kein Kinoerlebnis ohne korrektes Zertifikatsmanagement (gpn22)

Thu, 30 May 2024 16:30:00 +0200

Blu-ray Player und Beamer reicht für den Betrieb eines Kinos nicht aus. Zertifizierte Hardware von zertifizierten Herstellern, eingebaut von zertifizierten Technikern und einiger Papierkram sind Pflicht. Ein Einblick hinter die Kulissen eines Kinos mit digitaler Projektor Anlage, wie Verleiher die Filme Ende-zu-Ende Verschlüsselt an Kinos liefern und Filme vor Raubkopierern geschützt werden. Neben einem Überblick über die Projektor Technik wird in dem Vortrag das Dateiformat und die manuelle Entschlüsselung der Filmdaten gezeigt. (Es wird kein Kopierschutz gebrochen) about this event: https://cfp.gulas.ch/gpn22/talk/RAUZXA/

Life of a Key (gpn22)

Fri, 31 May 2024 18:45:00 +0200

Woher kommen sie? Was sind sie? Und wo gehen sie hin? - Ein Einstiegs-Talk mit vielen Live-Demos über das Erstellen, Modifizieren und Zurückziehen von PGP (Pretty Good Privacy) Keys in GnuPG (GNU Privacy Guard). E-Mail ist selten Ende-zu-Ende verschlüsselt. Eine Möglichkeit, Vertraulichkeit und Integrität in E-Mail sicherzustellen ist PGP. Wenn mensch nicht weiß was mensch tut und z.B. nur Keys mit default Einstellungen generiert, kann mensch schnell in Probleme laufen wie: "Ich habe eine E-Mail Adresse mit vier Aliassen und habe jetzt fünf Key-Paare und gehe in ihnen unter." oder "Ich habe mein Passwort/Key verloren, was mache ich jetzt?". In diesem Talk geht es um eine Möglichkeit, mit PGP Keys in GPG umzugehen, von ihrer Generierung bis sie auslaufen oder zurückgezogen werden. about this event: https://cfp.gulas.ch/gpn22/talk/TDLJP9/

why the cloud is evil (gpn22)

Thu, 30 May 2024 17:45:00 +0200

An informed opinion and judgement of where we are heading with the cloud. Cloud Computing has a lot of aspects, advantages and disadvantages. Many engineers in the IT industry are understandably fascinated by technical aspects, while cloud provider marketing appeals to many IT managers by promising reduced cost and risk on many levels. In his day job, the presenter is oftentimes confronted with myths and wishful thinking regarding cloud computing, so, over time, he gathered a collection of aspects to consider and his own evaluation. That's this talk. about this event: https://cfp.gulas.ch/gpn22/talk/KLRSDL/

Mein eigener HAL9000 - und wie ihr euch auch einen bauen könnt (gpn22)

Thu, 30 May 2024 17:45:00 +0200

Es fing vor ca. 6 Jahren mit einem einfachen Entwurf auf meinem (damals) neuen 3D-Drucker an ... und ist seitdem noch nicht fertig geworden (feature-creep par excellence). Da ich aber gaaaanz kurz vor dem Projektende bin (Version 1.0), werde ich euch auf eine Reise durch das Projekt mitnehmen und möglichst viel Interessantes über die Entwicklung eines eigenen digitalen Sprachassistenten erzählen. Agenda - Projektziele - Demo / Videos - Maker Experience & User Experience - Zutaten - Gehäuse (3D-Design mit OpenSCAD) - Elektronik (Pi Zero2W+Respeaker 2-Mic, Microcontroller mit Display, I/O Port-Extender, ...) - Software (Sprach-Assistent, User-Interface, Admin-Interface, ...) - Status quo & Ausblick - Q & A about this event: https://cfp.gulas.ch/gpn22/talk/CE9CQB/

Common Code <> Different Backdoors (gpn22)

Thu, 30 May 2024 19:45:00 +0200

Ende März '24 wurde zufällig eine Backdoor in der verbreiteten Open Source - Bibliothek xz-utils entdeckt, die unter anderem im ssh-Server moderner Linux-Distributionen verwendet wird. Diese Sicherheitslücke wurde in einem mehrjährigen Prozess vorbereitet und eingebaut. Es wurden dazu sowohl menschliche Schwäche, als auch grundlegende organisatorische und technische Probleme in der Zusammenarbeit rund um Open Source Entwicklung ausgenutzt. Dieser Vortrag wird über die mehrjährige Vorbereitung und Implementierung der Schwachstelle berichten, aber auch einige offene Fragen und mögliche Konsequenzen beleuchten. Warum baut das Internet auf Bibliotheken auf, die einzelne Maintainer in ihrer Freizeit basteln? Besteht ein grundlegendes Sicherheitsproblem in der Nutzung von Open Source Software? Könnte KI die Lösung sein? slides: https://gitlab.com/cy4n/talk-backdoorxz_pub/-/blob/main/xz_gpn.pdf about this event: https://cfp.gulas.ch/gpn22/talk/8MKMDL/

Supply Chain Security with Go (gpn22)

Fri, 31 May 2024 17:00:00 +0200

You become aware of a security vulnerability affecting your Go program(s)! What now? This talk tries to answer that question for various common scenarios, explaining the roles of the various technologies and services (like the Go Module Proxy or Go Checksum Database). The recent xz vulnerability brought the topic of Supply Chain Security to everyone’s attention. I don’t have a solution for preventing the social engineering aspect of the vulnerability. So let’s focus on the part we can control: assuming it has happened, what does our incident response look like? Aside from the more general details about Go, we’ll look at the gokrazy system as a concrete case study in Supply Chain Minimalism (Linux kernel + Go) and how it can be used for sensitive use-cases. about this event: https://cfp.gulas.ch/gpn22/talk/WY37UN/

Was ihr schon immer über Pilze wissen wolltet... (nicht die Psychedelischen) (gpn22)

Thu, 30 May 2024 21:00:00 +0200

In diesem Vortrag geht es in die spannende Welt der Pilze – einer faszinierenden Lebensform, über die wir doch viel zu wenig wissen. Von Pilzen, die größer als ein Wal sind, über sich bewegende Schleimpilze bis hin zu Pilzen, die im Dunkeln leuchten. Haltet euch fest, es wird spannend. Gehalten von Fabian vom Wildschytz. about this event: https://cfp.gulas.ch/gpn22/talk/HX7KC9/

How Games (and chore apps) keep you on longer and coming back regularly (gpn22)

Fri, 31 May 2024 16:00:00 +0200

This talk will be a quick look into the methods of psychological manipulation that games and chore apps use make your sessions with them longer and get you to come back regulary. Ever wondered why you just can't put your game down, even though you know you should already be sleeping? Were you terrible at learning languages in school but suddenly excel at it using Duolingo? The reasons for both are probably the same. I will to go into the manipulation strategies that games and chore apps alike utilise and compare them to user hostile design patterns, that I have already talked about in the past. This talk will not tell you how to feel about these tricks, but it will hopefully provide you with the knowledge you need to detect them and make more conscious decisions on if you want to let them work on you. about this event: https://cfp.gulas.ch/gpn22/talk/S3HXXG/

Data center to cloud migration (gpn22)

Thu, 30 May 2024 22:15:00 +0200

Spätestens seit dem Brand eines Straßburger Rechenzentrums im März 2021 wissen wir, dass manche Anbieter die Cloud-Migration zu wörtlich nehmen. Der Straßburger Brand war jedoch nicht der einzige Unfall eines Rechenzentrums. In diesem Vortrag zeige ich Bilder und Videos von Rechenzentrums-Bränden, Wasserschäden und Naturkatastrophen. Ich spreche über die Ursachen und Auswirkungen dieser Unfälle, sowie über die Maßnahmen, um eigene Systeme gegen solche zu schützen. Neben schweren Katastrophen zeige ich weitere Dinge aus der Kategorie "dumm gelaufen". about this event: https://cfp.gulas.ch/gpn22/talk/DGMEBH/

Computer selbst bauen (gpn22)

Fri, 31 May 2024 15:45:00 +0200

Welche geheimnisvolle Zutat macht eigentlich einen Haufen elektrischer Bauteile zu einem Computer? Und geht das auch mit unter 1.000.000.000 Transistoren, womöglich sogar für normalsterbliche Menschen verständlich? In diesem Vortrag beantworte ich diese Frage auf ganz praktische Weise: Ich stelle einen selbstgebauten, modularen Relais-Prozessor vor, der (hoffentlich) einfach genug ist, ihn vollständig zu verstehen. Klick-klack auf der Bühne inklusive. Prozessoren sind furchtbar kompliziert. Kein Wunder bei dem, was wir alles von ihnen erwarten, und dann auch noch mehrere Milliarden mal pro Sekunde. Da ist es verständlich, dass sie auf den ersten, und auch auf viele folgende Blicke, absolut unergründlich und quasi magisch erscheinen. Dabei gehört gar nicht so viel dazu, Strom zum Rechnen zu bringen. Schon aus gut 100 Relais lässt sich ein ganz einfacher Prozessor bauen, der dann klein genug ist um ihn vollständig zu verstehen. Einen solchen Prozessor habe ich entwickelt und möchte ihn in diesem Vortrag vorstellen. Es wird um drei Themen gehen: * Welche Grundbausteine brauchen wir, und wie passen sie zusammen? * Wie verschalten wir sie so, dass sie nützliche Instruktionen ausführen können? * Wie kann der Maschinencode Programmierung und Elektronik verbinden? Für den Vortrag sind nur Grundkenntnisse erforderlich. Wer weiß, dass Strom durch Kabel läuft, und dass Computer Befehle ausführen, sollte folgen können. Link zum Projekt: https://github.com/fread/visvitalis about this event: https://cfp.gulas.ch/gpn22/talk/GK8WNE/

Congratulations, it’s a Kubernetes! But now what? (gpn22)

Fri, 31 May 2024 13:15:00 +0200

Aufbauend auf meinem [talk von letztem Jahr][1] werden wir in diesem Talk ein bisschen tiefer in die Kubernetes Materie einsteigen und darüber reden wie man denn jetzt überhaupt mal irgendetwas in sein Kubernetes Cluster rein deployed. Wir werden auch versuchen das ganze halbwegs sinnvoll zu tun ohne alle seine Secrets oder Passwörter im Klartext in Git zu haben, oder die YAML config unnötig zu duplizieren. [1]: https://media.ccc.de/v/gpn21-49-from-0-to-kubernetes-eine-einfhrung-zur-container-orchestrierung-mit-praktischen-antworten-auf-die-hufigsten-fragen-wie-warum-oder-wann- Der Talk ist klar für Kubernetes Neulinge die bisher noch keine Erfahrungen damit gemacht haben, wie man denn jetzt mit Kubernetes überhaupt irgendetwas deployed. [Letztes Jahr][1] haben wir in [meinem Talk][1] ja darüber geredet was es denn überhaupt so grundsätzlich für verschiedene Optionen gibt. Dieses Jahr werde ich etwas konkreter darauf eingehen wie man denn nun mit `kubectl`, `helm` und `kustomize` Dinge in Kubernetes deployen kann und wie wir mit [SOPS][2] unsere secrets auch wirklich secret halten. [1]: https://media.ccc.de/v/gpn21-49-from-0-to-kubernetes-eine-einfhrung-zur-container-orchestrierung-mit-praktischen-antworten-auf-die-hufigsten-fragen-wie-warum-oder-wann- [2]: https://github.com/getsops/sops about this event: https://cfp.gulas.ch/gpn22/talk/3RV3BL/

RFID Payment Systems - free drinks and all you can eat (gpn22)

Fri, 31 May 2024 15:45:00 +0200

This talk is about RFID/NFC-based payment systems that are often seen in university mensas or company canteens. You typically pay with the student ID card or you employee badge, which is preloaded with money or linked to you monthly salary. The security of some of these systems is severely broken due to the usage of old and insecure RFID/NFC technologies. We will learn some basics about those insecure RFID/NFC technologies and hear stories of broken systems I've analyzed in the past. about this event: https://cfp.gulas.ch/gpn22/talk/VZFLQB/

Balkonkraftwerk ohne Balkon oder: wie ich lernte, Lobbyistin zu sein (gpn22)

Fri, 31 May 2024 12:00:00 +0200

Meine Erfahrungen mit verschiedenen politischen Instanzen (Petitionsausschuss, verschiedenen Bundesministerien etc) auf dem Weg zu rechtlicher Klarheit und Sicherheit für dein Balkonkraftwerk. Der Kampf gegen Bürokratie und Idiotie. Brühwarm und doch schon wieder kalter Kaffee auf die Mühlen der Demokratie. Politik beeinflussen und mitmachen ist einfacher als man denkt. Gewählte VolksvertreterInnen kochen auch nur mit Wasser und sind auf Expertise von außen dringend angewiesen. Wir alle teilen den Common Code des demokratischen Grundrechts zu wählen, gewählt zu werden oder auf die Politik, z.B. mithilfe einer Petition, direkt Einfluss zu nehmen. Einigen reicht es, alle paar Jahre ihr Kreuzchen zu setzen und den Rest den gewählten PolitikerInnen zu überlassen. Um aber an die Wurzel verschiedener Probleme zu gelangen, braucht es manchmal nervige Penetranz, Commitment und genaues Hinschauen auf die Finger der gewählten VolksvertreterInnen. Nicht alle haben Lust dazu. Aus gutem Grund. Ich habe es trotzdem getan und berichte euch, was ich dabei erlebt habe. PolitikerInnen machen ihren Job am besten, wenn MitbürgerInnen/ExpertInnen und verschiedene Sichtweisen (Wurzeln) gebündelt werden, um an konstruktiven und nutzbaren Lösungen zu arbeiten. Dabei möchte ich es vor allem als Dialog gestalten und auf eure Fragen eingehen. about this event: https://cfp.gulas.ch/gpn22/talk/NMUWVQ/

Keine Angst vor dem Hörgerät - (m)ein Erfahrungsbericht (gpn22)

Fri, 31 May 2024 10:00:00 +0200

Hörgeräte bringen Lebensqualität zurück. Ich habe relativ jung festgestellt, dass ich nicht gut höre, es aber lange hinausgezögert mich drum zu kümmern. Jetzt habe ich seit 3 Jahren ein Paar Hörgeräte und bereue es, dass ich mich nicht schon früher darum gekümmert habe. Ich möchte von meinen Erfahrungen berichten und jeden ermutigen, zumindest mal einen Hörtest zu machen, und keine Angst davor zu haben Hörgeräteträger zu werden: Hörgeräte sind ein cooles Stück Technik! Ich möchte kurz meinen Leidensweg beschreiben und meine Erfahrungen teilen und zeigen, dass Hörgeräte ganz schön viel Technik auf kleinstem Raum unterbringen: Fast wie Airpods nur in Super-Premium. Ich möchte auch Anderen die Hemmung nehmen und ermuntern, sich mit dem Thema zu beschäftige wenn man den Eindruck hat schlecht zu hören oder auch nur schlecht zu verstehen. Hören ist echte Lebensqualität. about this event: https://cfp.gulas.ch/gpn22/talk/S3CJD3/

GPS Spoofing und Jamming - Techniken, Risiken und Detektion (gpn22)

Fri, 31 May 2024 10:45:00 +0200

GPS / GNSS Jamming und Spoofing ist zu einer ernstzunehmenden Gefahr für Verkehr, Navigation und kritische Infrastrukturen geworden. Wir betrachten die damit verbundenen Risiken sowie Hintergründe, Geschichte, Technologien und Abwehrmaßnahmen. In den letzten Monaten sind die GNSS Jamming und Spoofing Vorfälle weltweit signifikant angestiegen - vor allem, aber nicht nur, rund um die Krisenherde unseres Planeten. Zum Verstehen der Hintergründe werfen wir einen Blick auf die Geschichte des Spoofings und die Technik hinter GNSS und PNT. Ebenso schauen wir uns anhand echter Beispiele aktuelle Jamming und Spoofing Technologien an. Welche realen Risiken ergeben sich daraus für den Flugverkehr und kritische Infrastrukturen? Wie lässt sich durch technologische und organisatorische Maßnahmen die Resilienz bestehender Systeme erhöhen? about this event: https://cfp.gulas.ch/gpn22/talk/BK9CWC/

Streng geheim! Verschlüsselung im Alltag (ccchh-extras)

Fri, 12 Apr 2024 19:00:00 +0200

Digitale Selbstverteidigung - Chaos Computer Club Hamburg Aufgenommen in der Zentralbibliothek Hamburg @stephanius@chaos.social @w1ntermute@23.social Moderne Kryptografie ist eine Grundsäule digitaler Selbstverteidigung. Der Umgang mit Verschlüsselung ist in vielen Situation deutlich einfacher geworden – z.B. beim Surfen oder bei Instant-Messengern – manchmal aber leider noch kompliziert wie bei Emails. In diesem Vortrag des CCCHH betrachten wir grundlegende Herausforderungen angewandter Verschlüsselung (AES+RSA), wo sie jeden Tag zum Einsatz kommt (OpenPGP und TLS), und was Anwenderinnen selbst dafür tun können, digital sicherer unterwegs zu sein. Wir erklären den Unterschied zwischen symmetrischen und asymmetrischen Verfahren und was eigentlich das kleine Schloss in der Browserzeile bedeutet. Am Ende gibt's einen 30-minütigen Fragen-Teil. about this event: https://c3voc.de

Mülli3000 (jh24)

Mon, 20 May 2024 15:22:00 +0200

Der Mülli3000 ist ein Roboter, der eigenständig rumfährt, mit einer Kamera Müll erkennt und mit Greifarmen einsammelt. Hendrik, Till und Finn kümmern sich darum, dass der Roboter sehen und erkennen kann. Max, Orzala, Fynn, Sofya, Danny, Jonas und Georg bauen Mülli zusammen und arbeiten an seiner Motorsteuerung. about this event: https://c3voc.de

FamTastic (jh24)

Mon, 20 May 2024 16:20:00 +0200

Immer Streit ums Müllrausbringen? Leah, Nora, Marie, Ile, Lina und Juansi haben eine webbased App entwickelt, mit der man spielerisch Aufgaben im Haushalt aufteilen kann. about this event: https://c3voc.de

Island of Ghosts (jh24)

Mon, 20 May 2024 15:56:00 +0200

Mori, JT, Nils und Ferdi haben ein VR Game entwickelt, bei dem man in einer 3D Welt Geister einfängt. Dafür benutzen sie eine Oculus Quest Brille. about this event: https://c3voc.de

WikiInsta (jh24)

Mon, 20 May 2024 15:44:00 +0200

Doomscrolling ohne Doom: Dimi, Liora, Sophie, David, Felix, Anna und Maxi haben eine App entwickelt, die Zusammenfassungen von Wikipediaartikeln in kleinen Wissenshäppchen zum durchscrollen anbietet. about this event: https://c3voc.de

Qualli-Code (jh24)

Mon, 20 May 2024 16:08:00 +0200

Phineas, Eva, Julian, Ben, Matija und Erik haben eine Webseite gebaut, auf der man verschiedene Programmiersprachen lernen kann. Vielleicht als Vorbereitung für neue Jugend hackt Teilnehmer*innen im nächsten Jahr? about this event: https://c3voc.de

Find ur Plant (jh24)

Mon, 20 May 2024 15:10:00 +0200

Ihr seid im Urlaub und eure Pflanzen verdursten? Mit Find your Plant von Joscha, Egor, Leno und Leo passiert das nicht. Auf der Webseite finden sich alle Infos zu euren Pflanzen und mit dem Bewässerungssystem bleiben sie immer gut versorgt. about this event: https://c3voc.de

Antistalking: Wie Hacker*innen Cyberstalking bekämpfen (chaosdorf)

Sun, 17 Mar 2024 15:00:00 +0100

Leider erfahren auch heute noch viele Menschen, insbesondere Frauen und andere nicht-männliche Personen, Gewalt und Unterdrückung. Stalking ist eine Form von Gewalt, bei der betroffene Personen verfolgt oder bedroht werden. Das kann auch über Internet und andere digitalen Medien stattfinden. Diese Formen werden Cyberstalking genannt. In dem Vortrag werden die technischen Aspekte von Fällen erklärt, bei der Betroffene in ihrer Aktivität am Smartphone verfolgt und manipuliert werden oder auch ihr Standort durch einen Angreifer überwacht wird. Dies wird möglich durch das Teilen von Zugangsdaten und auch durch den Einsatz von sogenannter Stalkerware. Wie diese Verfahren funktionieren und wie der Schutz dagegen effektiv sein kann, werdet ihr bei dem Vortrag erfahren. Unsere Referent*in wifi-cable ist Informatikerin und engagiert sich im Team Antistalking. Das ist eine Gruppe von ehrenamtlichen Expert*innen, die für Betroffene da ist durch technische Beratung, Beantworten von Fragen und Anleitung zur Selbsthilfe. Die Gruppe ist bei den Haecksen organisiert, die sich als feministische Plattform im Chaos Computer Club versteht. Weitere Infos zu dem Projekt finden sich unter https://antistalking.haecksen.org/ about this event: https://c3voc.de

Abschlusspräsentation (jh24)

Mon, 20 May 2024 15:00:00 +0200

about this event: https://c3voc.de

Ein musikalischer Wecker mit zu vielen Funktionen! (fsck2024)

Sat, 04 May 2024 13:30:00 +0200

Ich zeige euch, warum man auch ohne Ahnung von Elektronik ein komplexes Projekt fertigstellen kann, und erzähle euch so einiges über den ESP8266, Bildschirme, C++, DACs, SD-Karten und Knöpfe. Der MusikWecker: nach vier Jahren ein endlich abgeschlossenes Projekt. Was als einfache Idee begann – ein musikspielender Wecker – wurde zu einem recht komplexen System mit vielen Problemen in Software und Hardware. Ich erzähle halbwegs chronologisch die Entstehungsgeschichte des MusikWeckers inklusive der vielen Fehlschläge und einer ausführlichen Demo. about this event: https://cfp.ctbk.de/fsck-2024/talk/DEAZRL/

Disk Space - The Final Frontier? (fsck2024)

Sat, 04 May 2024 20:00:00 +0200

Wir unternehmen eine visuelle Reise zu den Sternen und lernen dabei OpenZFS kennen. Mit der FSCK24 entdecken wir ferne Planeten, treffen Ausserirdische und passen nach und nach unseren Storage-Pool an. So lernen wir unterhaltsam etwas über OpenZFS kennen, dass als Dateisystem mit integriertem Volume Manager frei für alle Wesen verfügbar ist. Auf dieser visuell ansprechenden Reise begleiten wir das Raumschiff FSCK24, wie es sich auf eine Forschungsmission begibt. Dabei kommt von Anfang an OpenZFS zum Einsatz und wir lernen nach und nach immer mehr über dieses Dateisystem kennen. Die Reise ist bunt und turbulent, aber nie langweilig und am Ende hat OpenZFS mehrfach die Crew und das Raumschiff gerettet. Langweilige Folienvorträge gibt es schon genug. Daher vermittle ich Wissen mit Spass und auf unterhaltsame Weise. about this event: https://cfp.ctbk.de/fsck-2024/talk/XCGF98/

Einen Parser in einem Tabellenkalkulationsprogramm erstellen (fsck2024)

Sun, 05 May 2024 13:20:00 +0200

In dem Workshop wird gezeigt und es kann selbst ausprobiert werden, wie ein Parser in einem Tabellenkalkulationsprogramm erstellt werden kann. Parser teilen eine Eingabe in eine für die Weiterverarbeitung notwendige Form auf. In dem Workshop wird an einem Beispiel gezeigt, wie ein Parser selber in einem Tabellenkalkulationsprogramm erstellt werden kann. Es ist für den Workshop hilfreich ein Gerät dabei zu haben auf dem ein Tabellenkalkulationsprogramm installiert ist oder als Webanwendung aufgerufen werden kann. Es gibt freie Tabellenkalkulationsprogramme, welche als Webanwendung aufgerufen werden können. about this event: https://cfp.ctbk.de/fsck-2024/talk/EZK97N/

Datum und Uhrzeit: What a mess! (fsck2024)

Sat, 04 May 2024 12:30:00 +0200

Die IT will einheitliche Strukturen; trifft das auf historisch gewachsene Themen, ist das Desaster garantiert. Das Jahr hat 365 Tage, der Tag 24 Stunden, jede Minute 60 Sekunden, eine Sekunde folgt auf die nächste - und jede der vorigen Aussagen ist falsch. Uhrzeit und Timestamp, Zeitspannen und Zeitzonen - ein Ausflug in ein Thema, das auf den ersten Blick so nebensächlich erscheint und in der Praxis überraschende Schmerzen verursachen kann. Eine Sammlung von Fun Facts, Anekdoten und Corner Cases mit Facepalm-Garantie. about this event: https://cfp.ctbk.de/fsck-2024/talk/CSDFGG/

RISC-V – The Only Architecture You'll Ever Need (fsck2024)

Sat, 04 May 2024 19:00:00 +0200

RISC-V – never heard of it? The open-source processor architecture is relatively new, but already making big waves as *the* ISA for all sorts of applications. In this talk I will give a high-level overview, technical and non-technical, about RISC-V and explain why you should care about it. about this event: https://cfp.ctbk.de/fsck-2024/talk/Y3TEC9/

Neue API und Anwendungen zur Bahninfrastruktur (fsck2024)

Sat, 04 May 2024 16:30:00 +0200

Im Vergleich zum Talk bei der ersten FSCK im vergangenen Jahr ist die Statistik gewachsen und neue Schnittstellen zu Infrastruktureinschränkungen bei der Bahn sind dazu gekommen. Nach einem kürzer gehaltenen Jahresrückblick für 2023 liegt der Fokus des Vortrags darauf, wie die Daten sinnvoll für auch einzelne Reisende verwendet werden können. Zum Schluss geht es um die offene Frage nach den Zugnummern und und was die neue EU-Fahrgastrechteverordnung damit zu tun hat. about this event: https://cfp.ctbk.de/fsck-2024/talk/VSBXYN/

KI im Journalismus: wohin geht die Reise (dgna)

Thu, 16 May 2024 21:30:00 +0200

Künstliche Intelligenz schreibt heute Texte, die aus der Feder eines Menschen stammen könnten. Auch computergenerierte Bilder sind immer schwieriger von echten zu unterscheiden. Dies verändert die Art und Weise, wie wir Medien konsumieren – und es verändert die Arbeit von Medienschaffenden. Aber was bedeutet das? Braucht es in Zukunft gar keinen Journalismus mehr, weil eine KI die Zeitung schreibt? Oder braucht es diesen nun erst recht? Und wie können Medienschaffende diese neuen Werkzeuge nutzen und uns besseren Journalismus bieten? Diese Fragen diskutieren wir mit Timo Grossenbacher. Er ist seit mehr als zehn Jahren an der Schnittstelle zwischen Journalismus und Technologie unterwegs, unter anderem als Head of Newsroom Automation beim Verlag Tamedia. Seit kurzem ist er als selbstständiger Berater tätig. about this event: https://www.digitale-gesellschaft.ch/event/netzpolitischer-abend-zum-thema-ki-im-journalismus-wohin-geht-die-reise/

Eine kleine Tour durch Linux als Netzwerk-Gerät (fsck2024)

Sat, 04 May 2024 21:00:00 +0200

Ich gebe einen Überblick, über die wichtigsten Komponenten in Linux um damit Firewalls, Multi-WAN-Router und andere interessante Konstrukte zu bauen. Linux kann mittlerweile sehr viele Sachen, wenn es um das Thema Netzwerk geht. Ich werde eine kleine Übersicht über diverse Komponenten geben, durch die der Netzwerkverkehr in Linux wandert, wie sie zusammenspielen und wie man daraus Router, Firewalls, Loadbalancing über mehrere Uplinks und ähnliches bauen kann und worauf man achten muss. Vorraussichtlich wird es um folgendes gehen: - nftables - conntrack - Routing - Policy-based Routing - ~~VRFs~~ - Network Namespaces - Multipath-Routing - ~~Traffic Control~~ Wer schon einmal von Hand IP-Adressen, Firewall-Regeln oder Routen gesetzt hat und wissen will, wie das eigentlich wirklich funktioniert ist hier richtig. Grundlegende Kenntnisse zum Thema IP und keine Angst vor einer Shell werden vorausgesetzt. about this event: https://cfp.ctbk.de/fsck-2024/talk/PPVFVV/

Warum keine Dokumentation das Leben deiner Kollegen kosten könnte (fsck2024)

Sat, 04 May 2024 15:20:00 +0200

Alle die Code schreiben kennen es: Man hat ein neues, eher kompliziertes Feature implementiert und müsste jetzt eigentlich das ganze dokumentieren, aber wie fange ich an? Was schreibe ich, und ist das überhaupt hilfreich? about this event: https://cfp.ctbk.de/fsck-2024/talk/THXC8M/

Functional correctness -- Haskell-ing your way to reliable code (fsck2024)

Fri, 03 May 2024 18:00:00 +0200

In the realm of modern software development, ensuring correctness and reliability of software systems is paramount. Functional programming langaunges like Haskell offer a unique approach to achieving these goals through strong type systems, immutable data structures, and pure functions. Despite its practical benefits, functional programming is not yet widely-used in mainstream development. Here, we'll take you on a gentle exploration of the fundamentals of functional programming, emphasizing concepts like referential transparency, purity, and correctness through verifiable specifications. Through practical examples and approachable explanations, we will illustrate how Haskell's paradigms can lead to a more robust and maintainable codebase. This talk serves as a friendly guide for beginners eager to dive into the world of functional programming and to harness its power to write verifiably correct, maintainable software. about this event: https://cfp.ctbk.de/fsck-2024/talk/E77ZQY/

Selfnet: wie kommt das Internet ins Wohnheim (fsck2024)

Sat, 04 May 2024 16:00:00 +0200

"Bei uns kommt das Internet aus dem WLAN-Router". Doch wie kommt es eigentlich da hin? In diesem Vortrag erklären wir euch, was es alles an Infrastruktur und Diensten braucht um über 6000 Studierende in Stuttgarter Wohnheimen zuverlässig mit Netzwerk und Internet zu versorgen. about this event: https://cfp.ctbk.de/fsck-2024/talk/JQZNKZ/

PCB design, by beginners, for beginners (fsck2024)

Sat, 04 May 2024 12:00:00 +0200

How to get started with PCB designs from the very basics At the beginning of this year I had no idea how to design a PCB. I will take you along my journey, giving you an overview on what it takes to design a PCB from the prerequisites in knowledge to your first finished board. I will show you some choices you will have to make, things to consider and some mistakes I did so hopefully you can avoid them when you do your first steps. Note: * This talk does not require any preexisting knowledge on anything in regards to electronics * Due to time constraints this is not a follow along guide, it's only a high level overview over the entire process. about this event: https://cfp.ctbk.de/fsck-2024/talk/BULXBG/

Venture Capital 101 - sind die alle verrückt? (fsck2024)

Fri, 03 May 2024 20:00:00 +0200

Wie funktioniert Venture Capital - Einblicke in eine sehr besondere Branche Venture Capital wird als Thema auf Chaos-Events selten gesehen. Gleichzeitig sind so ziemlich alle großen Software & Security Firmen durch Venture Capital groß und relevant geworden. Dieser Kurzvortrag soll einen Blick hinter die Kulissen einer teils sehr verrückten Branche liefern. Vom Hype um GenAI, über die Schattenseiten, bis hin zu "wie bekomme ich Geld für mein Startup?". Und auch: Was gibt es an Alternativen? about this event: https://cfp.ctbk.de/fsck-2024/talk/LBRS3H/

Opening (fsck2024)

Fri, 03 May 2024 17:30:00 +0200

Opening macht Opening Dinge. Wichtige Dinge about this event: https://cfp.ctbk.de/fsck-2024/talk/VBXEZX/

OpenWrt-Portierung für Quereinsteiger (fsck2024)

Fri, 03 May 2024 21:00:00 +0200

Der Talk richtet sich an alle die sich für die Portierung von OpenWrt interessieren und insbesondere die, die normalerweise eher höher im Software-Stack unterwegs sind. Ich werde anhand von meiner ersten eigenen Portierungs-Erfahrung die notwendigen Schritte sowie mögliche Pitfalls anschaulich erklären. Da das OpenWrt Wiki eher Lückenhaft und teils veraltet ist im Bezug auf eine anschauliche Einführung in die Portierung, soll dieser Talk das aufholen. Von vorne bis hinten einmal durch, was alles Notwendig ist für die Portierung. Da ich gelegentlich immer noch nicht wirklich weiß was ich tue sind die Erklärungen im Talk auf Best Effort Basis und sollten hinterfragt werden :) about this event: https://cfp.ctbk.de/fsck-2024/talk/373VGR/

Coden auf Exoten – Neue Systemhack-Geschichten aus der Demoszene (dgwk2024)

Sat, 02 Mar 2024 20:00:00 +0100

Wir stellen ungewöhnliche Demos auf noch ungewöhnlicheren Systemen vor – vom Teletext zum Apotheken-LED-Schild, und erzählen etwas über die Macher und ihren Prozess. Die Demoszene lotet seit 40 Jahren die Grenzen von Computern aus; neben dem Siegesmarsch des PC haben sich die Kreativen auch eher ungewöhnlichen Plattformen angenommen. Wir zeigen euch Demos für Teletext, selbstgemachte LED-Displays, umgebaute Laufwerke und sogar Apothekenschilder, und sprechen über die Macher, die Ideen und Herausforderungen dahinter. about this event: https://winterkongress.ch/2024/talks/coden_auf_exoten_neue_systemhack_geschichten_aus_der_demoszene/

Revision Nachrichtendienstgesetz – vom Umgang mit Grundrechtsverletzungen (dgwk2024)

Fri, 01 Mar 2024 21:15:00 +0100

Der Bundesrat will mit der Revision des Nachrichtendienstgesetzes neue, viel zu weitgehende Überwachungsbefugnisse ermöglichen. Eine Koalition aus Menschenrechtsorganisationen der NGO-Plattform Menschenrechte Schweiz wehrt sich dagegen: Welche Grund- und Menschenrechte sind auf welche Weise betroffen? Inwiefern bildet dies eine Konstante in der nachrichtendienstlichen Praxis? Wie gehen wir als Zivilgesellschaft damit um? Der Bundesrat will mit der Revision des Nachrichtendienstgesetzes neue, viel zu weitgehende Überwachungsbefugnisse ermöglichen. Eine Koalition aus Menschenrechtsorganisationen der NGO-Plattform Menschenrechte Schweiz wehrt sich dagegen: Welche Grund- und Menschenrechte sind auf welche Weise betroffen? Inwiefern bildet dies eine Konstante in der nachrichtendienstlichen Praxis? Wie gehen wir als Zivilgesellschaft damit um? about this event: https://winterkongress.ch/2024/talks/revision_nachrichtendienstgesetz_vom_umgang_mit_grundrechtsverletzungen/

Prompt entzaubert: Wie KI-Floskeln uns manipulieren (dgwk2024)

Fri, 01 Mar 2024 22:00:00 +0100

Technologie oder Magie? – KI schlägt uns alle in einen Bann. Dabei braucht das Thema dringend mehr nüchterne Reflexion statt marktschreierischer Übertreibungen. Wir entzaubern daher ein paar weit verbreitete Sprüche, die im Hype um künstliche Intelligenz die Runde machen. "Die KI wird mindestens die Hälfte aller Arbeitsplätze vernichten" oder "Dank KI werden wir viel effizienter" rufen uns Schlagzeilen regelmässig zu. Das sind nur zwei von vielen Floskeln, die wir im aktuellen KI-Hype immer wieder hören. Diese Session greift solche mantra-artig wiederholten Aussagen auf und zeigt wie die "Magie" dieser Sprüche funktioniert, macht die eigentliche Bedeutung hinter ihnen transparent, gibt Anregungen, wie wir den KI-Diskurs konstruktiver gestalten könnten Das Ziel der Session: Die Teilnehmer*innen durchschauen rhetorischen Zaubertricks rund um "künstliche Intelligenz", erkennen die Macht von Geschichten auch bei technologischen Themen, erhalten Anregungen, wie sie sich ihre eigenen Glaubenssätze bewusst machen und ihre Haltung souveräner reflektieren können. about this event: https://winterkongress.ch/2024/talks/prompt_entzaubert_wie_ki_floskeln_uns_manipulieren/

Eröffnung Freitag (dgwk2024)

Fri, 01 Mar 2024 20:00:00 +0100

Dies ist die Eröffnung am Freitag. Dies ist die Eröffnung am Freitag. about this event: https://winterkongress.ch/2024/talks/eroffnung_freitag/

Eröffnung Samstag (dgwk2024)

Sat, 02 Mar 2024 12:00:00 +0100

Dies ist die Eröffnung am Samstag. Dies ist die Eröffnung am Samstag. about this event: https://winterkongress.ch/2024/talks/eroffnung_samstag/

Wem gehören die KI-Trainingsdaten? (dgna)

Thu, 18 Apr 2024 21:30:00 +0200

Künstliche Intelligenz (KI) wird kreativ. Sie erstellt Kunstwerke und räumt Preise ab, sie generiert Texte, Bilder, ganze Bücher. Tech-Begeisterte jubilieren und preisen den demokratisierenden Aspekt der Technologie. Endlich kann jede:r kreativ sein. Kultur- und Medienschaffende halten dagegen. Der Vorwurf: Die Modelle wurden mit ihren Gedanken, Werken und Talenten gefüttert, ohne dass sie ihre Erlaubnis gaben oder von den wirtschaftlichen Gewinnen profitieren. Professor Florent Thouvenin von der Universität Zürich erklärt uns, was es mit diesen Vorwürfen auf sich hat, ob und unter welchen Umständen kreative Leistungen von Dritten frei verwendet werden dürfen, und was passiert, wenn ein Chatbot plötzlich Texte im Stil von berühmten Autoren schreibt. about this event: https://www.digitale-gesellschaft.ch/event/netzpolitischer-abend-zum-thema-wem-gehoeren-die-ki-trainingsdaten/

Kein Backup - Kein Mitleid (ccchh-extras)

Fri, 08 Mar 2024 18:00:00 +0100

Digitale Selbstverteidigung - Chaos Computer Club Hamburg Aufgenommen in der Zentralbibliothek Hamburg @stephanius@chaos.social Daten sind Teil unseres Lebens geworden, seien es Fotos, Emails oder wichtige Dokumente. Falls wir sie verlieren, kann das mehr als ärgerlich sein. Aber wo liegen unsere Daten eigentlich? Auf dem Smartphone, in der Cloud, dem Laptop? Welche Gefahren drohen und wie kann ein Privatmensch vorbeugen? Die Gruppe „Digitale Selbstverteidigung“ des CCC Hamburg gibt wichtige Denkanstöße zum Thema Backup-Strategien und ganz praktische Tipps für den Alltag mit Smartphones, Tablets und Computern. Am Ende zeigen wir auch einen anspruchsvolleren Ansatz für Fortgeschrittene bzw. Technikbegeisterte, und natürlich wird wieder viel Zeit für Fragen und Diskussionen sein. about this event: https://c3voc.de

TVLuke findet es nett hier.[5 Minuten Termine] (chaotikum)

Wed, 10 Apr 2024 20:00:00 +0200

Jeder kennt die “Nett hier” Sticker, die für das Bundesland Baden-Württemberg werben. Aber wusstet ihr auch, dass es davon sehr viele Variationen gibt? Also wirklich, sehr, sehr viele? Lukas hat sich die Frage gestellt, was eigentlich die Charakteristika dieses Memes sind, und wollte dann auch etwas dazu beitragen. Ein Vortrag im Rahmen der Fünf-Minuten-Termine. Die Idee ist eigentlich einfach: Ab und zu nutzen wir das volle Haus und jede Person, die möchte, kann kurz vorstellen, was auch immer ihr vorschwebt. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ about this event: https://chaotikum.org/blog/2024/04/06/5min/

Wupo über das Design Archive: event.log.institute [Fünf Minuten Termine] (chaotikum)

Wed, 10 Apr 2024 20:00:00 +0200

Was passiert eigentlich mit dem Design eines Events, wenn das Event vorbei ist? Um die Designs von Events wie dem Congress, der Easterhegg oder der NooK ist eine Kultur entstanden, welche es wert ist, aufgehoben zu werden. Und Wupo hat sich da was überlegt. Ein Vortrag im Rahmen der Fünf-Minuten-Termine. Die Idee ist eigentlich einfach: Ab und zu nutzen wir das volle Haus und jede Person, die möchte, kann kurz vorstellen, was auch immer ihr vorschwebt. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ about this event: https://chaotikum.org/blog/2024/04/06/5min/

Fabi über PaperJS und synodische Perioden[Fünf Minuten Termine] (chaotikum)

Wed, 10 Apr 2024 20:00:00 +0200

Mit P5 kann man kreativ Code schreiben aber extrahiert man Frames sind es Pixelgrafiken. PaperJS hingegen nutzt Vektoren im Browser und daher kann man besser SVGs erzeugen. Das kann für die Weiterverwendung der Grafiken sehr gut sein. Ein Vortrag im Rahmen der Fünf-Minuten-Termine. Die Idee ist eigentlich einfach: Ab und zu nutzen wir das volle Haus und jede Person, die möchte, kann kurz vorstellen, was auch immer ihr vorschwebt. This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License (CC BY NC ND 4.0). https://creativecommons.org/licenses/by-nc-nd/4.0/ about this event: https://chaotikum.org/blog/2024/04/06/5min/

Container-Management leicht gemacht (glt24)

Sat, 06 Apr 2024 15:00:00 +0200

An Containern führt leider (fast) kein Weg mehr vorbei. Das Problem mit Kubernetes zu erschlagen ist allerdings für viele Overkill bzw nicht stemmbar. Dieser Vortrag zeigt einen Zwischenweg um Container in existierende Systemlandschaften zu integrieren ohne alles bisher über System-Management gelernte über den Haufen zu schmeißen. Spätestens seit Kubernetes sind Container "in" und entwickeln sich immer mehr zu einem Paketformat für Software. Im schlimmsten Fall gibt es Software überhaupt nur mehr als Container. Was also tun wenn man solch eine Software verwenden muss/will und sich nicht einen Rattenschwanz an Tooling eintreten will? Mit Podman gibt es hierfür seit ein paar Jahren eine Lösung die sich gut mit Systemd verheiraten lässt und mit der sich Container quasi wie native Services anfühlen. Wie sich das möglichst einfach bewerkstelligen lässt wird im Laufe des Vortrages präsentiert werden. Der Vortrag setzt keine speziellen Vorkenntnisse voraus und es sollte für alle die irgendwo Software warten etwas dabei sein (sei das nun auf einem Raspberry PI, sonstigen Home-Servern oder einer Serverfarm). about this event: https://pretalx.linuxtage.at/glt24/talk/UTAQS9/

Markup languages: contemplated, categorized, and criticized (glt24)

Sat, 06 Apr 2024 11:00:00 +0200

As part of my FOSS project in digital typesetting, I am interested in the depths of markup languages. How did markup languages emerge? How powerful and extensible shall they be? In this talk, I want to summarize my findings. Markup languages like Markdown & MediaWiki are prevalent for software developers to specify formatted content. One might wonder whether all problems are solved because most software developer resort to “Markdown” when user-provided texts are written these days. But are they? At least once you discover the differences between Markdown dialects, you wonder whether Markdown is really a good choice. In my investigations, I started with the simple question how to build a simple markup language parser. It turns out the simplicity in the parser is orthogonal to user friendliness. Simultaneously, I recognized how escaping mechanisms can - indeed - be designed simple and memorable. And they are too often forgotten. When I continued with the parsing topic, I recognized that markup languages do not at all serve the same purpose and need to be categorized. But this seems nontrivial. What is a “lightweight” markup language? What is a “document” markup language? And how can the simplicity of syntax be measured? What makes “XML” extensible? And what limits the adoption of markup languages besides Markdown? In this talk, I want to revisit how SGML turned into XML, remember the good old bbcodes of board software from the 2000s, how Wiki syntaxes were popularized and vanished, and Github made Markdown a big player. Afterwards I will present my findings and propose how to solve related questions. about this event: https://pretalx.linuxtage.at/glt24/talk/G7ALGR/

Lightning Talks (glt24)

Sat, 06 Apr 2024 12:10:00 +0200

Kurzvorträge (max. 5 min) zu verschiedenen Themen. Quick talks (max. 5 min) about different topics. - Wenn Du einen Lightning Talk halten möchtest, dann melde Dich bitte via Email an lightning@linuxtage.at - Um in der vorhandenen Zeit möglichst viele Talks durchführen zu können, bitten wir Dich, Deine Folien (bzw. einen Download-Link) an die gleiche Email-Adresse zu senden. - Das Zeitlimit pro Vortrag wird 5 Minuten sein. - Deine Slides müssen auf einem Standard Ubuntu Laptop "abspielbar" sein: - D.h. am besten ein PDF - oder als ZIP mit Bildern bzw. Videos (als Slideshow) - oder in Libreoffice - Für die Reihenfolge der Vorträge gilt: - die Reihenfolge des Email-Einganges (first come, first serve) - Erst danach spontane Talks aus dem Publikum, bzw. Talks mit eigenem Laptop. -- - If you want to do a lightning talk, then please contact us on the email address lightning@linuxtage.at - In order to perform as many talks as possible, we kindly ask you to provide your slides (or a download link) to the same email address. - The time limit for each talk is 5 minutes. - Your slides must be "playable" on a standard Ubuntu laptop - best would be a PDF - or a ZIP containing images and videos (slideshow) - or via libreoffice - The sequence of talks is determined as follows: - the sequence of the incoming emails (first come, first serve) - then people from the audience may do spontaneous talks, optionally using the own laptop. about this event: https://pretalx.linuxtage.at/glt24/talk/HT9MKN/

more than a DJ - AURA, das freie Softwareprojekt für freie Radiosender (glt24)

Sat, 06 Apr 2024 17:00:00 +0200

AURA ist eine freie Software-Suite für Radio-Automation. Gestaltet und entwickelt nach den Bedürfnissen von freien Radiosendern in Österreich und Deutschland, bietet AURA mit seiner modularen Architektur ein "Komplettlösung" für den Radiobetrieb. Das Projekt verwirklicht zudem das Prinzip "Community by Design" - Radiomacher:innen dürfen die Software von Anfang an testen und mitgestalten. Im Talk erfahrt ihr etwas über das Projekt, seine Architektur und erlebt AURA in einer hands-on Demo in Aktion. Wolltest Du schon immer selbst "on air" gehen und Dein eigenes Radioprogramm gestalten? Freie Sender stehen vor der Herausforderung, dass Softwarelösungen für Radio-Programmverwaltung und -automation rar und teuer sind. Das Projekt AURA setzt ein Zeichen, dass es auch anders geht: AURA ist eine Open Source-Softwaresuite, die von Mitgliedern der freien Radios aus Graz, Linz, Wien, Innsbruck u.A. entwickelt wird. Nach dem „Baukastenprinzip“ können Funktionsmodule wie Playout, Aufnahme, Scheduling, Medienverwaltung, etc. kombiniert werden. Eine moderne und nutzer:innenfreundliche Weboberfläche macht die Programmverwaltung für die ganze Redaktion auch von zu Hause aus möglich. UX und Design von AURA werden in engem Austausch mit der Radio-Community entworfen und verbessert. Mitglieder vom Aura-Team stellen das Projekt und seine Architektur vor. Anhand einer Kurz-Demo kann man AURA in Aktion sehen. Außerdem wird gezeigt, wie das Prinzip „Community by design“ im Aura-Projekt in der Planung und Gestaltung verwirklicht wird. Codebase & Homepage: https://aura.radio about this event: https://pretalx.linuxtage.at/glt24/talk/9WTAQH/

[SPONSOR] grommunio: Die Open Source Revolution bei Groupware-Lösungen (glt24)

Sat, 06 Apr 2024 13:05:00 +0200

In einer dynamischen Landschaft der Unternehmenskommunikation ist die Suche nach effizienten, sicheren und kostengünstigen Groupware-Lösungen heutzutage von entscheidender Bedeutung. Die politischen und organisatorischen Umwälzungen der letzten Jahre haben die Notwendigkeit neuer innovativer und transparenter Lösungen ins Zentrum unternehmerischen Handelns gerückt, insbesondere aus österreichischer und europäischer Perspektive. Es ist längst überfällig, eigene Groupware-Lösungen und IT-Strukturen zu entwickeln, um die organisatorische und wirtschaftliche Unabhängigkeit gegenüber den USA und China zu wahren. Wir sind uns alle bewusst, dass Fragen zur Sicherheit, Unabhängigkeit und Privatsphäre aus dem täglichen Leben nicht mehr wegzudenken sind, was für dien einzelnen gilt und in unserem Bewusstsein zunehmend verankert ist, gilt für Unternehmen in einem noch größeren Maße. Sie müssen langfristige Unabhängigkeit und Handlungsfähigkeit sicherstellen, um ihr Überleben zu gewährleisten. Grommunio hat sich entschlossen, dieser Herausforderung zu begegnen und strebt danach, ein Leuchtturm der Innovation und Transparenz zu sein. Ziel ist es, die langjährige Dominanz proprietärer Plattformen wie Microsoft Exchange herauszufordern. Wir möchten Teil der Lösung sein und eine Alternative bieten, die Innovation, Unabhängigkeit, Freiheit bietet und bei Sicherheit keine Abstriche macht und vor allem unseren Kunden vor allem eines ermöglicht. Innovativ und erfolgreich zu sein. Groupware verstehen wir nicht nur als technische Kommunikationsplattform, sondern als eine gemeinsame Basis des Handelns und Wachsens, die auf der Community aufbaut und Wachstum, Sicherheit und Freiheit fördert. Die Präsentation skizziert die Reise von Grommunio in diesem Marktumfeld und wirft einen Blick auf die technischen Herausforderungen und gefundenen Lösungen. Mit einem Ausblick auf die Zukunft wird die Präsentation die laufenden Entwicklungen und die zukünftige Roadmap von Grommunio vorstellen. Wir werden erläutern, wie Grommunio durch kontinuierliche Verbesserung und Community-gesteuerte Entwicklung die Standards für Groupware-Lösungen neu definiert. Seien Sie dabei, wenn wir erkunden, warum Grommunio nicht nur eine Alternative, sondern eine überlegene Wahl für Organisationen darstellt. about this event: https://pretalx.linuxtage.at/glt24/talk/GKTJKV/

[SPONSOR] Running air-gapped VM updates on scale (glt24)

Sat, 06 Apr 2024 12:10:00 +0200

Der Vortrag behandelt die Herausforderungen und Lösungen für das automatisierte Erstellen von virtuellen Maschinen (VMs) und Aktualisieren in abgeschotteten Umgebungen. Es werden effektive Strategien und Tools zur Verwaltung von Updates in solchen Umgebungen vorgestellt. Der Fokus liegt auf Skalierbarkeit und Effizienz, um große VM-Bestände zuverlässig zu aktualisieren um Einheitlichkeit und Sicherheit zu garantieren. Die Präsentation gibt Einblicke in ausgewählte Praktiken, Technologien und Automatisierungstools, die es ermöglichen, abgeschottete VMs mittels image-basiertem Update zu aktualisieren. Erfahren Sie in diesem Vortrag mehr über das innovative Caretaker-Projekt der NTS Netzwerk Telekom Service AG. Der Caretaker ist ein leistungsstarkes Remote Monitoring & Management (RMM)-System, das auf Ubuntu und Kubernetes basiert. Als virtuelle Maschine in Kundeninfrastrukturen bereitgestellt, überwacht und überprüft der Caretaker automatisch die Gesundheit und Leistung der IT-Systeme. Insbesondere wird darauf eingegangen, wie das Image für die VM strukturiert ist und wie automatisierte Updates des Betriebssystems ermöglicht werden. Tauchen Sie ein in die Welt des Caretakers und erfahren Sie, wie er NTS ermöglicht eine große Anzahl an VMs automatisiert und skalierbar zu aktualisieren. about this event: https://pretalx.linuxtage.at/glt24/talk/9WZ8AN/

Skyfield - Elegante Astronomie für Python (glt24)

Sat, 06 Apr 2024 16:00:00 +0200

Manchmal kann es für Python-Entwickler erforderlich sein, die Position astronomischer Objekte, wie z.B. von Sonne und Mond, und die entsprechenden Auf- und Untergangszeiten zu berechnen. Für Python gibt es diverse astronomische Bibliotheken für unterschiedliche Anwendungen. Großer Beliebtheit erfreute und erfreut sich *PyEphem* (siehe [GLT2016](https://glt.foehnwall.at/glt16.html#pyephem-sonne-mond-und-sterne-in-python)), welches einen Python-Wrapper für eine inzwischen in die Jahre gekommen C-Bibliothek darstellt und für die Entwickler entsprechend umständlich zu warten ist. Vom Betreuer dieses Projektes, Brandon Rhodes, wurde mit **Skyfield** eine vollständige Neuentwicklung unternommen. Skyfield ist in **reinem Python** geschrieben und hat als einzige binäre Abhängigkeit **NumPy**, die bekannte numerische Bibliothek für wissenschaftliches Rechnen, welche mit schnellen Vektoroperationen die Effizienz von Skyfield garantiert. Der Anspruch von Skyfield ist es, sich den vom *United States Naval Observatory* im *Astronomical Almanac* publizierten Werten mit einer Genauigkeit von 0.5 Tausendstel(!) Bogensekunden anzunähern. Der Vortrag bringt zunächst einige für das Verständnis wichtige Vorbemerkungen zu Koordinaten- und Zeitsystemen. Anschließend erfolgt eine Einführung in die Grundkonzepte von Skyfield mit beispeilhafter Berechnung einfacher astronomischer Alltagsprobleme. Vorausgesetzt wird von den Zuhören elementare Erfahrung mit Python. about this event: https://pretalx.linuxtage.at/glt24/talk/XLW3EZ/

Open Source Software und Compliance im Unternehmen: Ein Sheriff im Wilden Westen (glt24)

Sat, 06 Apr 2024 11:35:00 +0200

Wenn wir uns vorstellen, dass OSS der Wilde Westen ist, können viele Dinge sehr frei gemacht und umgesetzt werden – jedoch auch zum Vorteil Einzelner und nicht zwingend im Interesse der Gemeinschaft. Um gewisse Grenzen und Rahmenbedingungen in der Prärie aufzuzeigen, wird im Wilden Westen ein Sheriff ernannt. In Unternehmen werden im OSS-Kontext Open Source Program Offices (OSPOs) als eigene Instanzen etabliert, um die Rahmenbedingungen der OSS-Nutzung zu definieren und die Interessen des Unternehmens und der Community zu schützen. In diesem Talk betrachten wir das WAS und das WIE der Etablierung eines OSPOs in Unternehmen und teilen Erfahrungen und Einblicke aus der Praxis. Nachdem Unternehmen die tlw. strategische Entscheidung getroffen haben, Open Source Software einzusetzen, gilt es sicherzustellen, dass diese nicht willkürlich und unkontrolliert eingesetzt wird. Ziel ist es, die Balance zwischen Unternehmenszielen und freier Software-Entwicklung herzustellen, um den technischen Fortschritt zu fördern, die Potenziale von OSS auszuschöpfen, und Compliance-Einhaltung sicherzustellen. Warum? - Herausfordernd ist (1) die Einhaltung der komplexen und oftmals unübersichtlichen Rechte und Pflichten von Lizenz-Anforderungen, Identifikation von Lizenz-Inkompatibilitäten, Umgang mit Lizenz-Änderungen, oder die verpflichtende Anzeige von OSS-Lizenztexten. Zudem spielt (2) die Rückverfolgbarkeit von OSS-Komponenten entlang der Supply Chain eine Rolle und die verlässliche Erstellung einer Software Bill of Material. (3) Bei OSS ist aufgrund des öffentlichen Sourcecodes die Anzahl an gezielt gesuchten und gefundenen Vulnerabilities höher als bei proprietärer Software. - Mögliche Konsequenzen von Lizenz-Verstößen beinhalten Rechtsstreitigkeiten, Vertragsbrüche, Reputationsverluste, Produktrückrufe, Blacklisting,… Was? - Häufig wird eine eigene interdisziplinäre Instanz – ein Open Source Program Office – im Unternehmen etabliert - Die Lizenz.Konformität und Compliance von Produkten wird vor Release sichergestellt. Wie? - Die Aspekte Prozesse, Methoden, Tools, Organisationsstrukturen werden betrachtet und OSS-Compliance-Standards dahingehend etabliert. - Die rechtlichen Anforderungen werden aufgenommen und in die technischen Entwicklungsprozesse und in die CI/CD und Build Pipleline integriert. - Einführung von standardisierten Formaten wie SPDX, CycloneDX,…, um eine unternehmensübergreifende Zusammenarbeit sicherzustellen. Was kann da noch schief laufen? - Prozesse können den Time-to-market verlängern und den Entwicklungsprozess verlangsamen, wenn wichtige Prozessschritte nicht korrekt verortet sind. - Tools: Nach dem Motto ”A fool with a tool is still a fool” ist eine Tooleinführung nicht inhärent eine Produktivitätssteigerung. - Organisationsstrukturen: Organizational Change durch Veränderung von Verantwortlichkeiten, Veränderung bestehender Job-Descriptions, Bürokratien,…. Was erwartet uns im Vortrag? - Einblicke und Erfahrungen aus der Praxis in der Etablierung eines OSPOs in Unternehmen about this event: https://pretalx.linuxtage.at/glt24/talk/GSVKTF/

Infrastructure as Code and AI - does it fit? (glt24)

Sat, 06 Apr 2024 13:05:00 +0200

AI combined with cloud computing and infrastructure as a code - does that fit? Yes, indeed! Are you curious how the GitHub Copilot could support you in implementing 'Infrastructure as Code' to deploy resources on Azure in an automated way? This talk reveals my approach to using the AI pair programming tool. Starting from scratch, I will create a working Terraform configuration that can deploy a Kubernetes cluster on Azure, by just providing comments. What could good practice for that look like? It shall prove that AI speeds up your development speed and works well for infrastructure as code approaches. about this event: https://pretalx.linuxtage.at/glt24/talk/N73FQV/

Integrationstests mit Szenarien für Container-Kompositionen (glt24)

Sat, 06 Apr 2024 12:10:00 +0200

Hinter Web-Diensten steht häufig eine Zusammenstellung verschiedener Komponenten wie Webserver, Datenbanken oder selbst entwickelter Software. Der Vortrag zeigt wie das Backend der Videokonferenzsoftware OpenTalk in Integrationstests verschiedene Szenarien mit unterschliedlichen Container-Kompositionen implementiert. Um ein Videokonferenzsystem auf Basis der Open-Source-Software [OpenTalk](https://opentalk.eu/) zur Verfügung zu stellen, werden verschiedene Komponenten verwendet, die häufig in Containern laufen: - Die "Kernkomponente" [*OpenTalk Controller*](https://gitlab.opencode.de/opentalk/controller) (eine oder mehrere Instanzen davon) - Das [*OpenTalk Web-Frontend*](https://gitlab.opencode.de/opentalk/web-frontend) - [Janus](https://janus.conf.meetecho.com/) als WebRTC-Service - [PostgreSQL](https://www.postgresql.org/)-Datenbankservice - [RabbitMQ](https://www.rabbitmq.com/) zum Austausch von Nachrichten zwischen den Komponenten - [Redis](https://redis.io/) zur Speicherung der laufenden Videokonferenzen - OIDC-Provider, meist [Keycloak](https://www.keycloak.org/) - [*OpenTalk SMTP-Mailer*](https://gitlab.opencode.de/opentalk/smtp-mailer) zum Versand von Einladungs-Mails - [*OpenTalk Obelisk*](https://gitlab.opencode.de/opentalk/obelisk) als Dial-In-Service - [*OpenTalk Recorder*](https://gitlab.opencode.de/opentalk/recorder) zum Aufnehmen oder Streamen von Videokonferenzen Für die eigenen Komponenten waren bereits in weiten Teilen Unit-Tests vorhanden, die von der CI ausgeführt werden. Integrationstests, welche das Backend auf die korrekte Abarbeitung von Web-Requests und Websocket-Verbindungen in verschiedenen Szenarien prüfen, fehlten jedoch weitgehend. Beispiele für solche Szenarien sind: - Simples Setup mit einem *OpenTalk Controller* und den Beispiel-Accounts *Alice*, *Bob*, *Charlie*, *Dave* und *Erin* - Komplexeres Setup mit mehreren *OpenTalk Controllern* - Ausfallsszenarien (z.B. nachstellen dass *RabbitMQ* während des Betriebs ausfällt und wieder verfügbar wird) Der Vortrag skizziert, wie solch ein Integrationstest aussieht. Es wird gezeigt wie Szenarien aufgebaut sind und welche Methoden wir verwenden um den Code les- und wartbar zu halten. Ansätze die wir wieder verworfen oder ersetzt haben, werden kurz angeschnitten, und was wir daraus gelernt haben. Über Technische und organisatorische Hürden, die wir überwinden mussten oder noch überwinden müssen, wird klarerweise auch berichtet. Die gezeigten Code-Beispiele sind zum Großteil in [Rust](https://www.rust-lang.org/), da der Backend-Teil von OpenTalk in Rust geschrieben ist. Wenngleich Kenntnis dieser Sprache von Vorteil ist, sind die Beispiele in einer Form gehalten, die auch ohne spezifisches Vorwissen gut genug verständlich sein sollte. about this event: https://pretalx.linuxtage.at/glt24/talk/YQKPAS/

Radfahren und Wandern mit dem OSM-Kartenmaterial im Vergleich (glt24)

Sat, 06 Apr 2024 18:00:00 +0200

Der Vortrag bietet einen Vergleich über verschiedene Kartendarstellungen und das Routing bei der Navigation mit Radfahr- und Wander-Apps. Dabei spielt ganz speziell auch das Kartenmaterial von OpenStreetMap eine Rolle. about this event: https://pretalx.linuxtage.at/glt24/talk/HYXSAV/

Das Fediverse: Grundlagen und Eigenbetrieb einer Instanz (glt24)

Sat, 06 Apr 2024 11:00:00 +0200

Der Verein "graz.social – Verein zur Förderung ethischer Digitalkultur" präsentiert das Fediverse. Das Fediverse ist ein verteiltes soziales Netzwerk mit Apps wie Mastodon (Alternative zu Twitter), Peertube (Alternative zu youtube) und Pixelfed (Alternative zu Instagram). Es wird kurz und visuell auf die Besonderheiten dieses Netzwerks eingegangen und danach gezeigt, wie jede und jeder sich mit einem Server darin einbringen kann. In einer Fragerunde teilen Aktive von graz.social gerne ihre Erfahrung in der Moderation einer Instanz. about this event: https://pretalx.linuxtage.at/glt24/talk/MVUQB8/

Securely access your home server from anywhere (glt24)

Sat, 06 Apr 2024 12:25:00 +0200

In this talk, we'll explore how you can securely access your home server or homelab from anywhere using a managed Wireguard VPN (Virtual Private Network). With Headscale, an open source, self-hosted implementation of the Tailscale control server, we can forward traffic from a cheap, rented VPS (Virtual Private Server) to devices in our home network added to our tailnet. This way you don't have to open any ports on your devices at home towards the world wide web to be able to access services running on them. Thereby you mitigate a lot of the risks coming with a publicly accessible server. In this talk, we'll explore how you can securely access your home server or homelab from anywhere using a managed Wireguard VPN (Virtual Private Network). With Headscale, an open source, self-hosted implementation of the Tailscale control server, we can forward traffic from a cheap, rented VPS (Virtual Private Server) to devices in our home network added to our tailnet. This way you don't have to open any ports on your devices at home towards the world wide web to be able to access services running on them. Thereby you mitigate a lot of the risks coming with a publicly accessible server. about this event: https://pretalx.linuxtage.at/glt24/talk/ULPNCG/

Metriken für alle - mit Prometheus und Grafana (glt24)

Sat, 06 Apr 2024 17:00:00 +0200

_Business_ will Daten und hübsche Diagramme über die Applikation sehen und du hast keine Lust, Tage damit zu verschwenden? Dann bist du hier richtig. Dieser Vortrag zeigt, wie du RaspberryPi Pico und Linux Server gleichermaßen mit Hilfe von Prometheus überwachen kannst - und Diagramme in Grafana anzeigst. Traditionelle Monitoring-System, wie Nagios, Zabbix und andere, sind schon lange am Markt und bringen viele Features mit. Diese Tools zu konfigurieren ist leider nicht immer trivial und bringt vor allem auch für Einsteiger einige Hürden mit sich. Prometheus hingegen definiert ein einfaches HTTP-basiertes Protokoll und besinnt sich auf das Wesentliche - Metriken von verschiedenen System zu sammeln, zu speichern und mittels der eigenen Abfragesprache _PromQL_ zur Abfrage bereitzustellen. Auf Applikations-Seite genügt nun meist das Einbinden einer Library, um Standard Metriken für Prometheus bereitzustellen. Der Vortrag zeigt, wie man auf einem RaspberryPi Pico Metriken nur mit einem Standard Webserver exportiert. In einem zweiten Schritt konfigurieren wir dann auf einer klassischen Linux VM einen Standard Node Exporter. Die Metriken beider Systeme zeigen wir dann in auf einem hübschen Dashboard in Grafana an. Und so einfach haben wir unsere _Business Owners_ glücklich gemacht. about this event: https://pretalx.linuxtage.at/glt24/talk/HCXKUZ/

[SPONSOR] How Bluethooth was pushed to handle highly responsive multi client device systems (glt24)

Sat, 06 Apr 2024 11:00:00 +0200

VusionGroup alias SES-Imagotag is one of the technology leaders for electronic shelf labels (ESL). In 2020, the decision was made to innovate ESL technology by using open standards such as Bluetooth. Already at the starting point it was not clear how one BLE-controller would be apply to drive 7k of end devices in an effective and high responsive way. The goal was achieved after 3 years of development work and changes were pushed to Bluetooth V5.4 Core specification and ESL profile release. A rough overview of how Bluetooth SIG works, how multi-device support found its way into the Bluetooth Core Spec, the technical aspects and finally why BLE chip vendors were forced with a completely new situation for their chips and why this forms a base for full IOT environments. about this event: https://pretalx.linuxtage.at/glt24/talk/AZR3WG/

WordPress ActivityPub – Eine nachhaltige Identität im Web (glt24)

Sat, 06 Apr 2024 10:00:00 +0200

Mit dem **ActivityPub**-Protokoll kann eine **WordPress**-Seite direkt Interessierte erreichen und wird zu einem interaktiven Ort, an dem man mit dem gesamten Web kommunizieren kann. Als weiteres Beispiel, dass ActivityPub mehr kann als mittels Mastodon ein dezentrales Twitter zu bauen, wird anhand der Vision des **Calendiverse** vorgestellt. Das [Fediverse](https://de.wikipedia.org/wiki/Fediverse#Kommunikationsprotokolle_und_Instanzen) bietet eine Alternative zu kommerziellen Sozialen Netzwerken. Aber Konten auf Plattformen anderer haben immer ein Probleme gemeinsam: egal ob es sich um Instagram oder einen Mastodon-Server handelt, die Betreiberinnen bestimmen die Rahmenbedingungen der Plattform, nicht du. Viele Fediverse-Anwendungen wie [Mastodon](https://joinmastodon.org/) entschärfen das Problem stark, indem sie es ermöglichen, mit einem Konto auf einen anderen Server umzuziehen (und deine Follower*innen mitzunehmen). Für Personen oder Organisationen mit einer WordPress-Seite gibt es jedoch eine noch nachhaltigere Alternative: mit Hilfe von [Plugins](https://wordpress.com/de/plugins/activitypub) wird deine Webseite direkt zu deiner Identität im Fediverse, es ist gar kein zusätzlicher Account auf z.B. einem Mastodon-Server mehr nötig. Das bedeutet auch, dass du keine zusätzliche Plattform bespielen musst, sondern Funktionalitäten wie Folgen und Gefolgt werden und Interaktionen, wie sie aus sozialen Netzwerken bekannt sind, wie Liken, Teilen, Kommentieren direkt mit deiner Website handhaben kannst. Durch eine in [Entwicklung befindliche Erweiterung](https://event-federation.eu/) wird es in Zukunft auch möglich sein, Veranstaltungen, die auf einer WordPress-Seite verwaltet werden, in dieses dezentrale Netzwerk einzubinden. Dadurch ergeben sich viele neue Möglichkeiten, auch über das Fediverse hinaus. about this event: https://pretalx.linuxtage.at/glt24/talk/EHAKHD/

Shepherding Software Dependencies (glt24)

Sat, 06 Apr 2024 16:00:00 +0200

The number of external dependencies in today's software has grown steadily over the years. With all these dependencies come bugs and security issues. Like a flock of sheep, it can be difficult to keep track of them all, take care of their needs, and leave no one behind. In this talk, we'll present solutions for software composition analysis and dependency management using free and open source tools. Afterwards, we hope you will be convinced that this is something everyone should consider in their software projects, because it is relatively easy to get started, and it will make your life easier in the long run. The number of external dependencies in today's software has grown steadily over the years. With all these dependencies come bugs and security issues. Like a flock of sheep, it can be difficult to keep track of them all, take care of their needs, and leave no one behind. In this talk, we'll present solutions for software composition analysis and dependency management using free and open source tools. Afterwards, we hope you will be convinced that this is something everyone should consider in their software projects, because it is relatively easy to get started, and it will make your life easier in the long run. We will demonstrate how to create a *Software Bill Of Material (SBOM)* at build time using the *OWASP CycloneDX* tools. To further analyze the SBOM, we will demonstrate the use of *OWASP Dependency Track*. We will also demonstrate the use of *Renovate* to help maintainers keep up with dependency updates. To run all these tools in a CI/CD environment, we use *GitLab*. - CycloneDX: https://cyclonedx.org/ - Dependency Track: https://dependencytrack.org/ - Renovate: https://www.mend.io/renovate-free/ - GitLab: https://about.gitlab.com/ about this event: https://pretalx.linuxtage.at/glt24/talk/DXJLMZ/

We got hacked: Lektionen aus realen Security-Vorfällen (glt24)

Sat, 06 Apr 2024 15:00:00 +0200

System-AdministratorInnen (Sysadmins) sind dafür verantwortlich, dass die IT-Infrastruktur rund läuft. Dazu gehört auch das Thema IT-Security. Jeder tatsächliche Vorfall bietet dabei wertvolle Erkenntnisse, die uns helfen können, die Systeme widerstandsfähiger und sicherer zu gestalten. Dieser Vortrag gibt einen Einblick in reale Security-Incidents und welche Lektionen sich aus solchen Vorfällen mitnehmen lassen. Im täglichen Geschäft kümmert sich der Vortragende eigentlich darum, dass die IT-Infrastruktur von verschiedenen Kunden wie gewünscht und möglichst stressfrei funktioniert. Zwischendurch gibt es aber immer wieder spannende Feuerwehr-Einsätze, z.B. wenn Hacker erfolgreich waren und eine Hintertür in einer IT-Infrastruktur gefunden haben. Wir sehen uns einige dieser Security-Incidents an und was wir aus diesen lernen können. Wie wird so ein Angriff überhaupt entdeckt und wie erfolgt die Identifizierung der Schwachstelle, die zu den Vorfällen geführt hat? Welche effektiven Strategien gibt es zur Abwehr? Welche Fehler haben zu dem erfolgreichen Angriff geführt? Und welche Best Practices sollte man beachten, um die eigene Infrastruktur resilienter zu gestalten und ähnliche Vorfälle in Zukunft zu vermeiden? Dieser Vortrag richtet sich zwar besonders, aber nicht nur an Sysadmins. Auch Entwickler:Innen und andere IT-Interessierte, die einen Einblick dafür bekommen wollen, wie echte Hacker-Angriffe in der Praxis aussehen können und welche Schwachstellen in IT-Infrastruktur schlummern bzw. wie man diese vermeidet, werden auf ihre Kosten kommen. about this event: https://pretalx.linuxtage.at/glt24/talk/3MMQBF/

Gizual: Browser-Based Git Repository Visualisation with WebAssembly and Web Workers (glt24)

Sat, 06 Apr 2024 17:00:00 +0200

This talk presents Gizual, a cutting-edge open-source web application for visualising and interacting with Git code repositories. It leverages the power of web workers, WebAssembly, and a combination of optimisation techniques to run a Git visualisation locally in the web browser. The talk will look at some of the technical challenges which were overcome, including strategies to minimise memory footprint, implement performant file operations, and distribute workload using web workers. This talk presents Gizual, a cutting-edge open-source web application, which reimagines Git code repository visualisation and interaction in the spirit of SeeSoft [1]. The Gizual user interface uses a zoomable timeline component for detailed navigation through the commit history of a repository. A zoomable visual overview is then provided for a specified (sub)set of files for the chosen commit, which is colour-coded by metrics such as age of line of code, or author of line of code. Pre-generated preview images and a pool of web workers are used for enhanced performance. Overview statistics such as contribution charts are also provided. Beneath the user interface, Gizual exploits the bleeding edge of WebAssembly (WASM) to run performant Git operations directly in the browser. The WebAssembly System Interface (WASI) [2] is used to run libgit2 [3], together with various custom implementations for efficient file i/o and git index parsing. The talk will cover Gizual's innovative approaches to interaction and visualisation, and some of the technical challenges which were overcome, including strategies to minimise memory footprint, implement performant file operations, and distribute workload using web workers. It will conclude with a look at ongoing and potential future work. [1] https://doi.org/10.1109/32.177365 [2] https://wasi.dev/ [3] https://github.com/libgit2/libgit2 about this event: https://pretalx.linuxtage.at/glt24/talk/VSQXGS/

Die Demokratisierung von Game Development - The Good, the Bad, and the Ugly (glt24)

Sat, 06 Apr 2024 09:00:00 +0200

In diesem Vortrag diskutieren wir die vielschichtigen Effekte der Demokratisierung in der Spieleentwicklung, angefangen bei der Zugänglichkeit durch populäre Game Engines bis hin zu den Herausforderungen und Abhängigkeiten, die sich daraus ergeben und welche die Spieleindustrie 2023 mehr als nur bewegt hat. Wir stellen uns die Fragen: Wird die Spieleentwicklung nun auf Open Source-Lösungen umsteigen? Und welche Optionen stehen überhaupt zur Verfügung? Wir diskutieren das Potential von Open Source und Community-Beteiligung in der Game Development-Branche und reflektieren über mögliche Zukunftsszenarien. about this event: https://pretalx.linuxtage.at/glt24/talk/Y88M7U/

Freie Basis-Software für Unternehmen ohne Cloud (glt24)

Sat, 06 Apr 2024 13:05:00 +0200

Für neugegründete und kleinere Unternehmen ist die Nutzung von Cloud-Software für Abläufe wie internen Kommunikation, Dokumentenverwaltung, CRM, Projektmanagement oder Zeiterfassung. Das hat etliche Vorteile, führt aber zu Einschränkungen bei Vertraulichkeit und mit laufenden Wachstum zu oft überraschend hohen Kosten. Dieser Vortrag stelle einige Alternativen mit freier Software vor, die sich auch in der eigenen IT-Infrastruktur betreiben lassen. Besuchende sollten damit reflektieren können, welche davon in ihrem Unternehmen sinnvoll und wirtschaftlich sein könnten. Gerade für kleine oder neu gegründete Unternehmen ist es auf den ersten Blick attraktiv, auf Cloud-Lösungen zurück zu greifen. Zum Beispiel Slack oder Discord für die Kommunikation, Google Docs oder Office 365 für Dokumente, Salesforces oder Hubspot für das CRM, Projektmanagement mit Trello oder Notion, und dann noch eine der zahlreichen Zeiterfassungslösungen. Jedes der Teile kostet ein paar Euro pro Monat oder ist für kleine Teams gar gratis, und die Wartung der Infrastruktur macht der Hersteller. Klar, die eigenen Daten geistern irgendwo in der Welt herum und werden für Analysen und zum Trainieren von künstlichen Intelligenzen genutzt. Aber das ist heute sowie normal, oder? Schwierig werden kann das für Branchen, wo Kunden erwarten, dass alle Daten im Unternehmen vor Ort liegen. Auch wenn das Unternehmen wächst, kann es preislich ein böses Erwachen geben. Die Gratis-Software will auf einmal Geld, wenn mehr als 10 Projekte darin abgebildet sein sollen. 10 Euro pro Monate und Benutzenden erscheinen mit 3 Personen überschaubar, bei 20 Leuten sind das schon 2400 Euro im Jahr. Und das nur für nur 1 Produkt. Welche Alternativen gibt es hier mit freier Software, die ich selbst hosten kann? Oft sind auch diese nur teilweise gratis, welchen möglicherweisen wichtigen Eigenschaften gibt es erst gegen Bezahlung? Ist die Benutzbarkeit erträglich oder ist das Teil nur für Masochisten geeignet? Wie viel Infrastruktur brauche ich in etwa für ein Hosting? Wie hoch ist der Aufwand für die Installation und das Teil aktuell und am Leben zu erhalten? Die Antwort auf diese Fragen sehen wir uns für einige der gängigsten Alternativen zu Cloud-Software für Unternehmen an. An Ende sollen neugegründete Unternehmen bewerten können, welche der vorgestellten Lösungen für sie früh Sinn machen können, und wo der Einrichtungs- und Wartungsaufwand auf Sicht zu viele Kapazitäten der ressourcenknappen Gründungsphase bindet. Bestehende Unternehmen sollen reflektieren können, für welche ihrer vorhandenen Anwendungen aus einer Kostenbetrachtung eine Migration vor allem wirtschaflich nützlich sein kann. about this event: https://pretalx.linuxtage.at/glt24/talk/CYEDMA/

Python, asyncio, libgpiod, and Pointless Blinking (glt24)

Sat, 06 Apr 2024 14:00:00 +0200

Python's lovely [asyncio](https://docs.python.org/3/library/asyncio.html) library allows me to write event-driven programs in a style that looks much like multithreaded code but isn't. Combining [asyncio](https://docs.python.org/3/library/asyncio.html) with the equally lovely [Linux GPIO subsystem](https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git) is just another logical step. In this talk I show what [asyncio](https://docs.python.org/3/library/asyncio.html) is, how [libgpiod](https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git) works, and how both are used to do pointless projects. Continuing the [story of pointlessly blinking lights](https://www.faschingbauer.me/about/site/work-in-progress/blink/glt2023/index.html) from my last year's talk, I show * How GPIO interrupts are configured to get notified of hardware button presses, and how this can look like in Python (hint: *generators*, and *iteration*). * How button-events can be used in an ``async`` programming style (hint: *asyncronous generators*, and ``async for``). * How this fits into the pointless project of blinking lights. Additionally, I give an overview of async libraries that are more to the point, like * [Textual](https://textual.textualize.io), a terminal UI framework * [python-sdbus](https://github.com/python-sdbus/python-sdbus), the Python binding for the systemd D-Bus client implementation "Slide" material available on [my homepage](https://www.faschingbauer.me/about/site/work-in-progress/blink/glt2024/index.html) about this event: https://pretalx.linuxtage.at/glt24/talk/7XWWLC/

Your web app is taking up too much RAM. Let's fix it using FOSS tools! (glt24)

Sat, 06 Apr 2024 17:30:00 +0200

We've all seen the memes about Google Chrome devouring all the available RAM on your notebook. Is that only due to how the browser works or is it also our fault as web apps developers? In fact, modern JS apps are becoming increasingly complicated, so their compute and memory requirements are rising as well, with some famous websites even taking up entire gigabytes of memory. This does not only fill up the memory of your users devices, but can also cause crashes and performance drops. How do we monitor if that's the case, and how can we fix it? This talk will shed some light on the dark art of memory allocations and profiling, showing how some data structures and some JS frameworks are less efficient than others. Also, what are some FOSS tools that are available to measure it, such as the Chrome Memory Profiler and MemLab, showcasing some custom tooling I've built around those two. about this event: https://pretalx.linuxtage.at/glt24/talk/BFWYDZ/

Embedded Linux Security: The Good, the Bad and the Ugly (glt24)

Sat, 06 Apr 2024 11:35:00 +0200

Linux-based embedded systems are not uncommon these days, but they still have some rough edges, especially in terms of security. In this talk, Richard will outline common problems he encounters when working with customers on embedded systems. The goal is to make you aware of these critical pitfalls you should definitely avoid in your next project. about this event: https://pretalx.linuxtage.at/glt24/talk/N8FX7N/

Fully declarative Homelab on NixOS ❄️ (glt24)

Sat, 06 Apr 2024 11:35:00 +0200

In this talk, we'll explore the intricacies of setting up a reproducible personal home server or homelab using a fully declarative approach on NixOS. Building upon the foundation laid by last year's introduction to NixOS and the Nix ecosystem, this talk takes participants on a journey from a fully declarative disk setup to the configuration of a wide range of services suitable for Linux server and homelab enthusiasts. Emphasizing reproducibility and ease of configuration, this session should appeal to NixOS users and homelab enthusiasts running other Linux distributions. Have you ever wanted to have complete control over your personal home server or homelab? Are you tired of manually configuring and maintaining your server, only to encounter unexpected issues down the line? Look no further! In this Linux conference talk, we will take another look at NixOS (a Linux distribution doing things different) and explore the benefits of a fully declarative approach to setting up your own server. Building upon the foundations laid in last year's talk that served as an introduction to NixOS and the Nix ecosystem, we will dive deeper into the possibilities that await you. Our focus will be on achieving reproducibility in your server setup, ensuring that you can confidently recreate your environment on-demand, without any surprises. We will begin by guiding you through a declarative disk setup and will then venture into the exciting realm of service configuration. Whether you have a particular interest in containerized services or prefer traditional setups, we've got you covered. Our talk will provide plenty of configuration examples, showcasing various services that you could run on your home server or homelab. Join us as we unravel the power and simplicity of NixOS. Discover how a fully declarative approach can revolutionize the way you set up and maintain your personal home server or homelab. Whether you're a seasoned Linux enthusiast or new to the world of server administration, this talk will equip you with the knowledge and tools to take control of your server infrastructure and create a reproducible, reliable, and personalized server environment. about this event: https://pretalx.linuxtage.at/glt24/talk/T37KQQ/

Why is archiving so (un)sexy again? - FLOSS archiving tools for organisations (glt24)

Sat, 06 Apr 2024 17:30:00 +0200

For the unaware archiving seems boring and not so attractive, yet without archiving there would't be no Internet or Chat-GTP. The talk dismantles the urban legend of its dullness and presents outcomes of mur.at research into FLOSS tools for NGOs (and other organisations) to archive and document their projects. Regardless of the experience, archiving seems for the unaware as not so attractive, even boring for the general public. And yet, without archiving there wouldn’t be no Internet. Indeed, without archiving there wouldn’t be no Chat-GTP… or even a Tabelle für die Bundesliga. To dismantle the urban legend of its dullness, we will get back to the roots of archiving in history before taking a look into Open Software and the possibilities it offers for archiving today. Thus, we will see how archiving is crucial to raise awareness about the present legacy of what we do—this being something alive (and kicking) that you will be able to re-use and expand. The talk sums up an ambitious endeavor by mur.at and Artist in Residence Ricardo Ginés (Tactical Tech Berlin) to collect FLOSS tools that NGOs and other organizations can use to better document and archive their projects. Local stakeholders from the arts & culture sector in Graz were interviewed as well as archiving experts from Tactical Tech Berlin, Ars Electronica Archive, ADA - Austrian Digital Art Archive, Stadtarchiv Graz to create hands-on guidelines that were further elaborated on in the mur-worklab in June 2023. The online exhibition "Unarchive", part the Netart Biennial "TheWrong" collected outcomes from the residencies, interviews, worklab talks and additional artistic positions. about this event: https://pretalx.linuxtage.at/glt24/talk/YY7R37/

Zephyr - Ein Open Source Realtime Embedded OS (glt24)

Sat, 06 Apr 2024 17:30:00 +0200

Embedded Geräte sind Geräte mit sehr geringen Resourcen wie zum Beispiel Speicher und CPU. Meist verrichten diese unbemerkt ihre Arbeit. Bei der Entwicklung von Embedded Geräten gibt es viele Herausvorderungen. Geringe Resourcen, Schnittstellen zu Sensoren, Schnittstellen zur Außenwelt (Bluteooth, Ethernet), Updatefähigkeit... Hier können Embedded Betriebssysteme wie Zephyr die Entwicklung vereinfachen und beschleunigen. Embedded Geräte sind Geräte mit sehr geringen Resourcen wie zum Beispiel Speicher und CPU. Meist verrichten diese unbemerkt ihre Arbeit. Bei der Entwicklung von Embedded Geräten gibt es viele Herausvorderungen. Geringe Resourcen, Schnittstellen zu Sensoren, Schnittstellen zur Außenwelt (Bluteooth, Ethernet), Updatefähigkeit, ... Hier können Embedded Betriebssysteme wie Zephyr die Entwicklung vereinfachen und beschleunigen. Der Vortrag liefert eine kurze Übersicht über Zephyr. Welche Vor- und Nachteile es gibt, welche Hardware unterstützt wird und einen Vergleich mit anderen RTOS Systemen wie bzw. FreeRTOS. Anschließend wird anhand einer kleinen Beispielapplikation die Möglichkeiten von Zephyr demonstriert und das Konzept des Devicetrees vorgestellt. Dies ermöglicht eine leichtere Portierbarkeit auf eine andere Plattform. about this event: https://pretalx.linuxtage.at/glt24/talk/TVG9ES/

Was ich immer schon über Photovoltaik, Wärmepumpen und Heimautomation wissen wollte (glt24)

Sat, 06 Apr 2024 14:00:00 +0200

Erfolgreiche Zusammenarbeit von Linux-Distributionen (glt24)

Sat, 06 Apr 2024 10:00:00 +0200

openSUSE, Fedora und Debian haben sich als Linux Distributions Working Group beim Open Mainframe Project mit einer IBM-Vertreterin zusammen geschlossen mit dem Ziel, dass man die Pflege der jeweiligen Mainframe (s390x) Ports gemeinsam macht und alle Linux-Distributionen am Ende die entsprechenden Patches und Erweiterungen integrieren können. Anfangs wurde diese Idee von außen etwas erstaunt betrachtet, aber auf Community-Level sind wir eine "internationale" Linux-Community bestehend aus unterschiedlichen Linux-Distributionen. In der Zwischenzeit haben sich auch SUSE, Canonical (Ubuntu), AlmaLinux und Rocky Linux angeschlossen. Genauso ist man dazu übergegangen die Toolings für automatische Tests mit openQA gemeinsam zu entwickeln. In diesem Vortrag werden die Vorteile gemeinsamer Zusammenarbeit bei Linux-Distributionen mit unterschiedlichen Communities dargestellt und am Beispiel der Linux Distributions Working Group aufgezeigt, wie man gemeinsam entwickeln kann, so dass alle am Ende einen Vorteil haben. about this event: https://pretalx.linuxtage.at/glt24/talk/KYDAVN/

GPIO Development mit dem Raspberry Pi (glt24)

Sat, 06 Apr 2024 15:00:00 +0200

Zuerst gibt es ein Update zum aktuellen Status des 'Raspberry Pi'. Welche neuen Modelle gibt es und was hat sich im allgemeinen im Softwarebereich getan? Viele beliebte GPIO-Libraries wurden in letzter Zeit nicht mehr aktiv weiterentwickelt - was bedeutet das für den Endanwender? Welche Vor- und Nachteile bringt die allgemeine GPIO-Library libgpiod. Im zweiten Teil des Vortrags wird für professionelle Entwickler demonstriert wie man sich mit profiling und debugging Tools tiefgreifend die Performance der Library analysieren kann. Die letzten Jahre waren schwierig für Raspberry Pi Fans, Lieferkettenprobleme machten es kaum möglich, die aktuellen Modelle zu erwerben, während gleichzeitig die Gebrauchtpreise in die Höhe schossen. Zum Glück hat sich die Lage stark verbessert und die neuen Modelle "Zero 2 W" und "Raspberry Pi 5" sind bei den meisten Shops nun lieferbar. Auch Raspberry Pi OS setzt mittlerweile auf Debian Bookworm - und damit den Linux Kernel in Version 6. Dazu gab es auch einige Änderungen, die wir uns im Vortrag ansehen. Einen großen Einfluss gab es bei den GPIO Librarys. Sie scheinen fast alle nicht mehr aktiv unterstützt zu werden, denn libgpiod ist gekommen um sie alle abzulösen. Doch wie ist die Geschwindigkeit der universellen Library gegenüber der alten? Im zweiten Teil wird mittels debugging und profiling Tools die API und Performance von libgpiod ganz genau unter die Lupe genommen. about this event: https://pretalx.linuxtage.at/glt24/talk/YFYM3H/

What the f*** is up with Europe? A conversation about digital EU politics in the present and future (hoth2023)

Sat, 09 Sep 2023 21:00:00 +0200

A conversation about digital EU politics in the present and future A conversation about EU digital policy now and in the future. The event will be a structured AMA (ask me anything). So we need your questions! We will structure the questions to ensure a smooth conversation. Questions we touched on in conversation: - Can you briefly explain the difference between Europe and the EU? - Do you represent the "Danish people" or the whole EU? - What is your opinion about the EU "chat control"? What can we do to stop it? What are you going to do? - What is your personal utopia for Europe? What positive changes would you like to see in the next few years? "EU digital legislation in the 2020's: The Good, the Bad and the Ugly" https://media.ccc.de/v/bornhack2022-4200-eu-digital-legislation about this event: https://c3voc.de

Übergabe (podcast-muc)

Tue, 17 Mar 2020 20:00:00 +0100

Kurz bevor TJ München verlassen hat, haben Andi und Martin ihn sich geschnappt und die Übergabe des Münchner Podcast-Meetups durchgezogen. Kurz bevor TJ München verlassen hat, haben Andi und Martin ihn sich geschnappt und die Übergabe des Münchner Podcast-Meetups durchgezogen. Dabei haben wir unter anderem über die Entstehungsgeschichte gesprochen, überlegt, wie es weitergeht und wie wir die anderen Teilnehmer:innen besser mit einbeziehen können. Das Gespräch haben wir aufgenommen. Außerdem haben wir uns die Domain podcast-muc.de gesichert und überlegen, wie wir künftig möglichst einfach, viele auf den unterschiedlichen Kanälen erreichen. Ziel soll es sein, dass wir uns regelmäßig treffen, über Podcasts und Podcasting austauschen, uns gegenseitig helfen und voneinander lernen. Was sind eure Ideen für die Weiterentwicklung des Podcast Meetups München? Wir freuen uns auf eure Rückmeldungen, Anregungen und euer Engagement. about this event: https://c3voc.de

Mein N64 und PSX-Talk (chaos-inkl)

Wed, 27 Mar 2024 20:15:00 +0100

In diesem Vortrag, der sich aus einer ungeklärten Frage bei einem Retro-Aktiv-Treffen entwickelt hat, geht es um die Grafik der beiden großen 3D-Spielekonsolen der späten 90er Jahre, das Nintendo 64 und die Sony Playstation 1. Insesondere um die Einschränkungen der damaligen Technik: Warum 90er Jahre 3D Konsolengrafik so aussah, wie sie aussah. about this event: https://chaos-inkl.de

KI am Arbeitsplatz (dgna)

Thu, 21 Mar 2024 20:30:00 +0100

Algorithmische Systeme werden zunehmend am Arbeitsplatz eingesetzt. Die Geschäftsführung verspricht sich mehr Effizienz, bessere Transparenz, und Kontrolle. Gewerkschaften und Aktivist:innen stehen diesen Trends skeptischer gegenüber. Eine aktuelle Studie der Universität St. Gallen, die von AlgorithmWatchCH und der Gewerkschaft syndicom in Auftrag gegeben wurde, warnt nun auch vor neuen Risiken, die sich am Arbeitsplatz stellen. Wie können wir diese Risiken eindämmen? Inwiefern können algorithmische Systeme die menschliche Arbeit fördern ohne sie zu kontrollieren oder Schaden anzurichten? Daniel Hügli (syndicom) erklärt uns, welche Chancen und Risiken mit dem algorithmischen Wandel auf die Arbeitswelt zukommen, und welche Rolle die Mitarbeitenden dabei einnehmen können. Bei der Aufzeichnung gab es technische Probleme. Leider fehlt von 18:57 bis 22:25 und von 25:43 bis 26:12, sowie von 26:31 bis 27:39 der Ton. about this event: https://www.digitale-gesellschaft.ch/event/netzpolitischer-abend-zu-ki-am-arbeitsplatz/

Wie funktioniert ChatGPT? Gibt es das auch als Open Source? (clt24)

Sat, 16 Mar 2024 11:30:00 +0100

Der Vortrag zeigt zunächst in Form einer Zeitreise die Entwicklung von Neuronalen Netzen bis hin zu Transformern und der Architektur von ChatGPT und LLMs (Large Language Models). Weiterhin wird gezeigt dass man sehr leicht etwas ähnliches wie ChatGPT selber mit Open Source betreiben kann und dies sogar auf einem kleinsten Computer wie einem Raspberry Pi gelingt - in Form einer Live Demo. Im Kontext werden auch Techniken wie RAG (Retrieval Augmented Generation, Integration von semantischer Suchmaschinentechnik) und LLM-Agents (zusätzliche APIs, Speicher und Planung) erwähnt und erklärt. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/186

Och Menno - Senkrechtstarter und Flug-Flugzeugträger (eh21)

Mon, 01 Apr 2024 11:00:00 +0200

Manchmal denkt man ein Fluggerät ist aus Käptn Balu und seine tollkühne Crew, nein das Militär hat auch genug wilde Fluggeräte versucht zu produzieren. Von Flug-Flugzeugträgern .. oder heißen die Flugzeug-Flugzeugträger, über Senkrechtstarter die etwas schwer einzuparken sind bis hin zu Frachtmaschinen die im Fußballstadium landen sollten gibt es genug das in einem guten Disneycartoon mit einem OEEEHHH WTF ??? abgelehnt werden würden. Ein weiterer Teil der Reihe: Was zum Geier macht das Militär mit Steuergeldern ? Diesmal mit Luftpiraten und merkwürdigen Ideen wie man das fliegen im fliegen zum siegen ... Ohhheeehoooo about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/MXCEGU/

Closing Ceremony (eh21)

Mon, 01 Apr 2024 14:00:00 +0200

Closing Ceremony inklusive Infrastructure Review about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/ANBNAV/

Elektrosicherheit für Bastelhasies (eh21)

Mon, 01 Apr 2024 11:00:00 +0200

Ich werde in 45 Minuten laienverständlich erklären, welche Maßnahmen für den "Schutz gegen elektrischen Schlag" es gibt, und wie das Konzept dafür ist. Nein, danach seid Ihr keine Elektrofachkräfte. Nein, danach dürft Ihr offiziell immer noch nicht an Spannungen > 50 V AC bzw. > 120 V DC herumbasteln. Ja, mir ist lieber, daß jemand, die* sowieso an Dingen rumbastelt, wenigstens mal davon gehört hat, wie das mit dem Schutz gegen elektrischen Schlag vom Prinzip her funktioniert. Ich kann keine Elektrofachhäschen aus Euch machen. Aber wenn alle ein bißchen mehr wissen, wie das mit dem "Schutz gegen elektrischen Schlag funktioniert", dann wird die ganze Häschenwelt ein kleines bißchen sicherer sein. Niemand möchte, daß Osterhasie mit nem Stromschlag neben der frisch gebauten Zauberkiste (Drucker, Server, Leuchtdingens...) liegt. Deswegen werde ich auch für Normalhäschen verständlich erzählen, wie das Prinzip vom "Schutz gegen elektrischen Schlag" funktioniert. Ja, ich weiß, das darf mensch nicht, weil ja nur Fachhasies an die gefährliche Spannung dürfen. Aber das hilft ja den Nicht-Fachhasies nicht, das zu wissen daß sie nicht dürfen. Wissen wissen hilft! Inhalt: - Strom macht tot - Wo kommen die Vorgaben her? Was ist "die Norm", wieso könnte das wichtig werden? - Unterscheidung Vorgaben für Anlagen, für Geräte, und für die Benutzung von Anlagen & Geräten - Basisschutz, Fehlerschutz, zuätzlicher Schutz - Brandschutz etc. - Q&A about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/DPBSXB/

Rabbit Chaos Adventure: Closing (eh21)

Mon, 01 Apr 2024 12:30:00 +0200

Unser Rabbit Chaos Adventure auf dem Easterhegg geht zu Ende. Wir sprechen über die Vorgeschichte, berichten von der Entstehung, fachsimpeln über das hübsche Badge und lösen ein paar Rätsel. 2021 entstand auf einem kleinen Hackercamp mitten im Bayerischen Wald bei schlechtem Wetter ein Event im Event. Als Mischung aus Badge, Schnitzeljagd und CTF fand das „Enter the VVoid!“ statt. Es musste der Piratenschatz mit den Diamanten gefunden werden. Als Rabbit Chaos Adventure werden wir diese Idee erneut ins Spiel bringen. Das Event im Event ist zurück. Es gibt ein Badge und eine ganze Menge Challenges auf dem Campus, dem Laptop und dem Badge. Aber wir müssen reden. Von 0 auf RCA in nur 3 Monaten will gekonnt sein. Wir sprechen darüber, wie wir das gemacht haben. Natürlich sprechen wir auch über die Rätsel und all die ganzen anderen Dinge, die wir auf dem Easterhegg gesehen haben. Wenn ihr Hacker h0pz auf seinen Abenteuern durch Rainbow City begleitet habt, dann ist das hier eine Pflichtveranstaltung für euch! about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/RVV8LZ/

Howto eventphone (eh21)

Sun, 31 Mar 2024 14:45:00 +0200

Wie funktioniert die eventphone Telefonanlage? Während der letzten Jahre wurde das eventphone System kontinuierlich weiterentwickelt. In diesem Vortrag wollen wir die neuesten Features vorstellen. Der Talk baut inhaltlich auf den vorangegangen Talks vom [35C3](https://media.ccc.de/v/35c3oio-70-eventphone-frher-heute-morgen-) und [EH19](https://media.ccc.de/v/eh19-179-das-neue-eventphone-poc-telefonsystem) auf. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/HZLXXW/

How to bike to Camp - Solo quer durch Deutschland (eh21)

Sun, 31 Mar 2024 11:00:00 +0200

Eine kurze Einführung ins Camp-Radeln. Wie man als Normal-Nerd bei Regen allein zum Camp radelt, was das mit einem macht und warum man das vielleicht ausprobieren möchte. Im Sommer bin ich solo 600 km in 5 Tagen quer durch Deutschland zum Camp gefahren und habe dazu auf Mastodon getrötet. Auch wenn das Wetter grösstenteils nass bis stürmisch und gewittrig war, war das ein sehr erfüllendes Erlebnis, das mir ein ganz neues Gefühl von Weite, Zeit und Freiheit gegeben hat. Aber mir auch viel über unser Land und seine Gemeinsamkeiten und Unterschiede gelehrt hat. Anschliessend habe ich viele Fragen bekommen: - Wie organisiert und plant man so eine Tour? Was braucht man dafür? - Wie oft fährst du sonst Rad bzw wie fit muss man sein um das zu können? - Wie weit kommt man pro Tag? Wie plant man eine Strecke? Was ist mit Wetter? Wie Übernachten? - Wie funktioniert so eine lange Tour psychisch? - Was ist der Plan, wenn man nicht mehr kann? Bei Pannen? Wenn es zu viel wird? - Wie viel futtert man eigentlich wenn man tagelang nur Fahrrad fährt? - Machst du das nochmal? Und: - Kannst du dazu einen Talk geben, wie man als Normal-Mensch mit einem Normal-Fahrrad das macht? Frisch zum kommenden Frühling würde ich daher gerne darüber erzählen, wie man auch bei Regen und Wind Spass mit dem Gerät Fahrrad haben kann, ohne Extremsportler zu sein. Und anderen Mut und Hilfe geben, so etwas auch einmal zu probieren. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/78EWET/

Eine kleine Geschichte über Sicherheitslücken (eh21)

Sat, 30 Mar 2024 19:45:00 +0100

Ich habe aus Versehen eine schwerwiegende Sicherheitslücke gefunden und berichte von meinen Erfahrungen mit den Behörden und der betroffenen Firma. Das Melden einer Sicherheitslücke ist einfach, oder? Ich dachte das zumindest, als ich nach einem falschen Klick sehr viele Kunden- und Firmendaten auf meinem Monitor hatte. Naja falsch gedacht... Ich möchte hier von meinen Erfahrungen berichten und Tipps geben, wie man in einer ähnlichen Situation vielleicht besser und effizienter Handeln kann. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/AVR8VV/

Was PipeWire besser macht (eh21)

Sun, 31 Mar 2024 16:00:00 +0200

… und was man damit sonst noch machen kann. Ein Rückblick auf PulseAudio und Jack, warum es einen neuen Audio-Server brauchte und welche neuen Möglichkeiten PipeWire eröffnet hat. PipeWire hat mittlerweile die Audiolandschaft der meisten Linux Distributionen übernommen. Was es so gut macht und warum niemand PulseAudio vermisst, darum soll es hier gehen. Außerdem werden ein paar Interessante Anwendungszwecke der PipeWire Filterchain gezeigt, zum Beispiel wie damit ein verrücktes Heimkino-Setup ermöglicht wurde. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/NEGABQ/

Energiewende und Sektorenkopplung - Hands-on (eh21)

Sun, 31 Mar 2024 18:30:00 +0200

Ein Erfahrungsbericht rund um Photovoltaik (PV), Batteriespeicher, Hybridisierung einer Fossil-Heizung mit großem Kombi-Wasserpuffer und Heizschwertern bis hin zu dynamischen Stromtarifen, Elektromobilität und einem in Python selbst programmierten EnergieManagementSystem (EMS). Klares Ziel: Mehr Autarkie und weniger Abhängigkeiten. Netzdienlichkeit und Reduktion fossiler Energieträger. Ralf berichtet von seinen Planungen, Versuchen, Umbauten, Erfahrungen und Erkenntnissen. Der Umbau des Energiesystems Zuhause dauert nun schon mehr als vier Jahre und ist noch nicht beendet. In dieser Zeit gab es viele interessante Erkenntnisse für einen Ingenieur. Der Talk ist nicht nur für Eigenheimbesitzer interessant, sondern auch für Zuhörende, die z.B. ihr Balkonkraftwerk planen wollen. (Talk mit anschliessender Diskussion) about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/UG9HBY/

Brew it yourself - Minimalinvasiver Einstieg ins Hobbybrauen (eh21)

Sat, 30 Mar 2024 11:00:00 +0100

Einstieg ins Hobbybrauen mit minimalem Materialaufwand Eine Einführung in des Hobbybrauen zu Hause mit minimalem Materialaufwand. Nach einem kurzen Ausflug in die Theorie des Brauens geht es weiter wie man zu Hause sein eigenes Bier brauen kann, ohne sich in ausufernde Kosten stürzen zu müssen. Am Ende soll es einen kleinen Ausblick geben, wie es weitergehen kann, falls man dieses Hobby dauerhaft betreiben will, und wie man es mit anderen Nerdhobbies verbinden kann. 15min sollen als Q&A am Ende dazu dienen, aufgekommen Fragen zu beantworten. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/CRYYST/

CI-Bus, NDA, Oweh !, ein tiefer Einblick in den Caravan LIN Bus (eh21)

Sat, 30 Mar 2024 21:00:00 +0100

NDA und Kooperationsvereinbarung und teure Mitgliedschaft sichern ein doch nicht so tolles Protokoll. Eine ziemlich komplettes Reversengineering gibt ein Einblick in das LIN Bus Protokoll der Caravan Industrie. Lustige Details und die Schwierigkeit ein Heizung offiziell steuern zu dürfen und wie man das ins MQTT bringt. Seit über 10 Jahren promotet die Caravan Industrie ihr Protokoll, was man doch nirgends nach lesen kann. Teileweise wissen die Komponenten Hersteller selber nicht, wie es korrekt implementiert wird. Durch intensives revers Engineering ist das Protokoll gröstenteils verfügbar, der Vortrag gibt detailierten Einblick, wie man die Geräte verschiedenster Hersteller korrekt implementiert und gibt teils lustige Anekdoten, was sich da so an Wirren auftut. Auch gibt es eine letzten Stand zum Revers Engineering des Truma TIN (LIN) Protokolles. Etwas CI Bus Hardware zum Anfassen danach, ebenso den Truma /Alde Heizungsemulator, zum bespielen wärend des Easterheggs. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/GFSGGZ/

Maintainable Embedded Linux Solutions (eh21)

Sun, 31 Mar 2024 13:30:00 +0200

Today, two common approaches for building embedded Linux solutions are in use. Many hobby projects start from a distribution like Raspberry Pi OS, and implement the solution in a running system, resulting in a tightly coupled and not reusable implementation. Commercial development often starts from distribution build toolkits like Yocto or Buildroot. These tools allow to build an optimized solution from source, but do not provide good solutions for keeping the solution secure. Tools like elbe-rfs allow a third approach. They enable building a custom embedded solution from well maintained binary packages, while separating the solution form the base. This approach helps hobbyists and small teams to develop more optimized, reusable and long term maintainable embedded Linux solutions with limited effort. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/VNAD9N/

Cyber security afloat or securing (very) big iron (eh21)

Sun, 31 Mar 2024 19:45:00 +0200

Ships and offshore units are big [citation needed]. Cyber attacks have the potential to disrupt supply chains even more cheaply than drones, cause massive oil spills, and even kill people. I'll talk about the technology employed on ships and drilling rigs, how vulnerable they are, and what's being done about it. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/RJDZDT/

Textverarbeitung mit SIMD-Techniken (eh21)

Sun, 31 Mar 2024 12:15:00 +0200

Hier lernt man, wie man Text (Strings) in hoher Geschwindigkeit mit SIMD-Techniken verarbeitet. Text ist die Basis des Internets. Moderne Anwendungen verbringen einen immer größer werdenden Teil ihrer Laufzeit damit, Text in Form von Strings zu transkodieren, zu kopieren, zu zerschneiden und zusammenzufügen, zu sortieren, suchen, filtern, ... Nicht zuletzt liegt der hohe Zeitanteil daran, das der Computer Strings oft umständlich Zeichen für Zeichen verarbeiten muss. Doch es gibt Abhilfe. Schon seit vielen Jahren haben die meisten Computer SIMD-Befehle, mit denen sie mehrere Zahlen auf einmal verarbeiten können. Zeichen sind ja auch nur Zahlen, und mit kreativem Gebrauch dieser kann man viele dieser Aufgaben beschleunigen, oft auf bis zu 10% der vorherigen Rechenzeit. In diesem Vortrag werdet ihr sanft in die Welt der SIMD-Programmierung eingeführt, und ihr lernt, wie man SIMD-Techniken für die effiziente Ausführung von Aufgabenstellungen aus der Textverarbeitung nutzen kann. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/MHHYLZ/

Nachhaltige Eventorganisation - schwierig (eh21)

Sun, 31 Mar 2024 11:00:00 +0200

“Das nachhaltigste Event, ist kein Event”. “Das nachhaltigste Event, ist kein Event”. Wir haben als Verein versucht, 2023 unseren Hackathon unter nachhaltigen Gesichtspunkten zu organisieren. Wir haben versucht, das Thema in allen Bereichen mitzudenken und zu kommunizieren. Ein kleiner Erfahrungsbericht, was wir erreicht und woran wir gescheitert sind. Der Talk soll unsere Herangehensweise an das Thema erläutern und aufzeigen, warum es kein Event ohne C02-Fußabdruck geben kann. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/KWZB7T/

Lightning Talks (eh21)

Sun, 31 Mar 2024 16:00:00 +0200

Selbstorganisierte Lightningtalks in 5 Minuten Segmenten. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/TVJML8/

Elektronikschrott != Müll (eh21)

Sun, 31 Mar 2024 14:45:00 +0200

Elektronikschrott sinnvoll dem Recycling zuführen und damit Geld verdienen. Ich beobachte Häufig, insbesondere in Unternehmen, das viele bemüht sind ihren Elektroschrott los zu werden und froh sind wenn sie dafür am Wertstoffhof nichts dafür bezahlen müssen. Ich Zerlege stattdessen den Elektroschrott sortenrein und fahre das zum Schrotthändler und bekomme dort Geld dafür weil es halt Rohstoffe und kein Sondermüll ist. Ich gehe ein wenig auf die Klassifizierung der Schrottsorten ein und was es monetär und im Bezug auf die Umwelt bringt. Das sollen gerne mehr Leute so machen, um auch ein Gefühl für die Rohstoffe und dem Umweltschutz zu bekommen. Und sich als Konsument nicht mehr Veräppeln zu lassen - Erst für die Beschaffung bezahlen und wenn es obsolet ist nochmal für die Entsorgung erneut bezahlen - da passt etwas nicht. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/TBDNKT/

Och Menno - Prototypen (eh21)

Sun, 31 Mar 2024 19:45:00 +0200

Wer denkt das reguläre Militärtechnik merkwürdig ist hat noch nicht gesehen was das Militär so in der Fehlerschublade hat. Von Flugzeugen die so laut sind das dem Tower alle Scheiben platzen, fliegenden Ubooten und anderem Kram den Leute mit zu viel Geld und zu wenig Ahnung von Physik ausgedacht haben. Diesmal geht es gemäß des Mottos des Easterheggs um Prototypen. Es muß mindestens ein Exemplar erprobt worden sein. Und selbst hier ist die Liste noch lang genug. Bringt Popcorn mit. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/EVKFNH/

Functional correctness -- Haskell-ing your way to reliable code (eh21)

Sat, 30 Mar 2024 19:45:00 +0100

In the realm of modern software development, ensuring correctness and reliability of software systems is paramount. Functional programming langaunges like Haskell offer a unique approach to achieving these goals through strong type systems, immutable data structures, and pure functions. Despite its practical benefits, functional programming is not yet widely-used in mainstream development. Here, we'll take you on a gentle exploration of the fundamentals of functional programming, emphasizing concepts like referential transparency, purity, and correctness through verifiable specifications. Through practical examples and approachable explanations, we will illustrate how Haskell's paradigms can lead to a more robust and maintainable codebase. This talk serves as a friendly guide for beginners eager to dive into the world of functional programming and to harness its power to write verifiably correct, maintainable software about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/UC7GHL/

Vom Prototyp zur BNetzA – Neugestaltung AFu-Ausbildung (eh21)

Sun, 31 Mar 2024 13:30:00 +0200

Hintergründe, Erfahrungen und technische Umsetzung aus dem Team, dass die neuen Amateurfunk Fragenkataloge erarbeitet und schließlich erstellt hat. Reformen in Kombination mit Hürden aus Behördenprozessen sind oft schwierig. Trotzdem hat eine Gruppe im DARC das Problem angegangen und über eine Zeitraum von 3 Jahren einen Vorschlag für die Bundesnetzagentur zur Reformierung der Amateurfunkausbildung erarbeitet. In diesem Vortrag geht sowohl um Hürden wie auch Erfolge bei der Erarbeitung der Fragen, wie auch die technische Umsetzung über ein Redaktionssystem und die Möglichkeit möglichst viele Ausgabeformate durch eine Quelle zu bedienen. Dabei gab es Debatten über Ansprüche an Autor*innen, technische Möglichkeiten, erlaubte Komplexität von Syntax und Wartbarkeit. tl;dr; Markdown reicht nicht. Das Ergebnis findet such aktuell sowohl in der offiziellen Version bei der [Bundesnetzagentur](https://www.bundesnetzagentur.de/SharedDocs/Downloads/DE/Sachgebiete/Telekommunikation/Unternehmen_Institutionen/Frequenzen/Amateurfunk/Fragenkatalog/Pruefungsfragen.pdf) Wie auch auf der [Trainingswebsite](https://50ohm.de). about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/M9EQFX/

Flightgear: The world of open source flight simulation (eh21)

Fri, 29 Mar 2024 18:30:00 +0100

Wir bauen unsere eigene Cloud mit OpenStack (eh21)

Sat, 30 Mar 2024 14:45:00 +0100

Von einem der vom Hyperscaler auszog um auf FOSS Infrastruktur zu migrieren… ## Der Talk Wenn wir Software "[cloud native](https://arxiv.org/abs/2307.01045)" betreiben wollen, dann geht es oft direkt zum Hyperscaler (AWS, Azure, GCP,…). Und schon haben wir ein Fundament, was wir nicht selbst kontrollieren können, unter unserem Osternest. Geht das eigentlich auch ohne diese Abhängigkeit? Wie schwer ist es, der eigene Cloud Provider zu werden? Ausprobieren! Das [OpenStack Projekt](https://www.openstack.org/) bietet einen schönen Werkzeugkasten. Bevor wir die Tiefe dieses Osterhasenbaus erkunden, eine kurze Vorstellung, was da alles mit am Start ist. Welche wunderschönen Ostereier wir gar nicht erst suchen müssen. Und dann ab in den Kaninchenbau: * Wie ist das mit der API-Kompatibilität. * Welche Features einer Terraform basierten Cloudprovider Infrastruktur lassen sich nicht direkt übersetzen. * Wie handhaben von IAM & RBAC. * Wie ist das mit reproduzierbaren Deployments. ([Kolla Ansible](https://docs.openstack.org/kolla-ansible/latest/)) Ich berichte von meinen Erfahrungen bei einer größeren Migration vom Hyperscaler auf OpenSource Infrastruktur. Wo dann doch auch andere FOSS Projekte zum Einsatz kommen. Was in diesem Setup gut funktionierte, was nicht ganz so trivial war/ist. ## Disclaimer Mit begrenzten Ressourcen und ohne Skaleneffekte sind SLA wie bei Hyperscalern nicht erreichbar. OpenStack sind mehrere Projekte, die mehr oder weniger gut miteinander integriert sind. Nicht alle sind für jeden Anwendungsfall benötigt. Manchmal sind andere Lösungen einfacher. Ich bin "Anwender" des OpenStack Stacks, Entwickler einzelner Services könnten deutlich tiefer erklären wie die Details funktionieren. Auf die Logik innerhalb der Applikation werde ich nicht eingehen, dieser Vortrag bleibt bei der Infrastruktur. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/ZYHHRC/

Democratizing how we access networks through a universal Router (eh21)

Sat, 30 Mar 2024 16:00:00 +0100

VyOS is an open source network operating system based on Debian. VyOS provides a free routing platform that competes directly with other commercially available solutions from well-known network providers. Because VyOS is run on standard amd64 systems, it can be used as a router and firewall platform for cloud deployments. This network runs on VyOS about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/TX3HPS/

Hirne lüften fuer Hacker - eine Geocaching Einführung (eh21)

Sat, 30 Mar 2024 12:15:00 +0100

Geocaching kann mehr als nur Tupperdosen im Wald zum Kindergeburtstag suchen. Gelaende & Schwierigkeit erlauben Dinge, mit denen man sein aktuelles Programmierproblem vergessen machen kann (und hinterher wieder um so fokussierter ist). Achtung, contains Frischluft! Ja, Geocaching ist auch Tupperdosen im Wald suchen, mit GPS oder heute eher Handy. Aber es geht sehr viel mehr: 1) Kurze Intro was es dazu braucht (Account, App, Suchen, Finden, Loggen, Kleidung, Ausruestung). 2) Spannendes im Gelaende: Trails & Runden, Paddeln, Klettern, Lost Places. 3) Spannendes fuer's Hirn, indoor: Raetsel, von einfach bis schwer. Ein paar Beispiele. 4) Spannendes fuer's Hirn, outdoor: Lockpicking, Basteleien, Angeln. 5) Kombination - Nachtcaches, Multis, Lost Place, Escape-Room Style 6) Ausprobieren, anfangen -> Siehe Talk "Osterspaziergang" am Samstag Nachmittag about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/JJKBQK/

Komischen Code schreiben der schnellen Code schreibt (eh21)

Sat, 30 Mar 2024 14:45:00 +0100

Algorithmen-Varianten in High-Performance Anwendungen, Zero-Cost Abstractions und, wenn die Zeit reicht, ein unpopulärer Lösungsansatz. Oder auch: "C++ ist blöd ;)" Will man Varianten von performance-kritischem Code bewerten wird es schnell kompliziert. Jede Version muss vergleichbar gut "getuned" werden. Und am besten aufgehoben werden, so dass re-evaluiert werden kann. Dafür gibt es keine so richtig guten Lösungen. Wir zeiten ein paar Ansätze dafür und stellen dann unsere (so denken wir) nicht-ganz-so-nicht-ganz-so-gute Lösung vor :) Es wird (leider) nicht live programmiert, aber wir werden uns einiges an Code anschauen! (Session image CC-by "Sparkle Motion", https://www.flickr.com/photos/54125007@N08/15634745431) about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/APKXBF/

Rabbit Psychotyping (eh21)

Sat, 30 Mar 2024 12:15:00 +0100

In den vergangenen drei Jahren haben wir wissenschaftliche Studien im Bereich der Arbeits- und Organisationspsychologie durchgeführt. Zielgruppe war vor allem Mitarbeitende im IT-Bereich. Interessiert haben uns deren Wahrnehmung des eigenen Arbeitserlebens, der Teamarbeit oder der Führung. Zugleich arbeiten wir in der Praxis vor allem mit Teams und Führungskräften im IT-Bereich und lassen unsere Beobachtungen einfließen. Im folgenden Talk erklären wir die aus unserer Sicht wichtigsten Ergebnisse unsere letzten Studien auf der Meta-Ebene. Aus den Ergebnissen sind Ableitungen für Führungsaufgaben und nicht Führungsaufgaben möglich. Als Wirtschaftspsychologin und systemische Coach und Künstler, Informatiker und Physiker arbeiten wir interdisziplinär und versuchen Erkenntnisse zielgruppengerecht zu teilen. Folgende Themen werden in dem Vortrag besprochen: - Klima für Innovationen und das Erleben von Flow und Besorgnis von Teammitgliedern von Software-Produktentwicklungsteams während der Arbeit. Außerdem wurde untersucht, ob die Teamgröße einen Unterschied macht. - Wahrgenommene Führung und das Ausmaß der empfundenen psychologischen Sicherheit sowie das Klima der Initiative. Darüber hinaus wurde untersucht, ob positive Führung einen Unterschied macht. - Wahrnehmung von Führung, der Qualität der Teamarbeit, dem Arbeiten als High-Performing Team und individuellem Lernen. Zudem wurde untersucht, ob Teaminterventionen einen Unterschied machen. - Teamarbeit und Lernen (Mitglieder von Software-Produktentwicklungsteams in Deutschland) - Teamarbeit und Lernen (Mitglieder von nicht Software-Produktentwicklungsteams in Deutschland) - Alles hängt mit allem zusammen, wissenschaftliche und praktische Herangehensweisen, die (Arbeits-)Welt zu vereinfachen, werden der realen Komplexität nicht gerecht. - Backup: Der vermittelnde Effekt von Arbeitszufriedenheit auf die Beziehung zwischen Work-Life-Balance und affektivem Commitment von Beschäftigten. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/ZBHZHV/

Nix zu verstecken! Meine Software hat CVEs (eh21)

Sat, 30 Mar 2024 13:30:00 +0100

Als Open Source Softwareentwickler haben wir uns gefragt, wie wir unsere Nutzer über Sicherheitslücken am besten informieren können. Im Talk beschreiben wir unsere Erfahrungen und zeigen, wie man eigene CVEs erstellen kann. Wenn man selbst Software entwickelt, kann es schon mal passieren, dass dabei eine Sicherheitslücke auftaucht. Wenn die Software aber noch Open Source ist, dann kann man nur schwerlich wissen, wer sie einsetzt. Ein verantwortungsvoller Umgang mit Sicherheitslücken bedeutet also auch, dass man die Betroffenen möglichst gut informiert. Dazu eignet sich die Common Vulnerabilities and Exposures Datenbank CVE. Aber wie kommt man an einen CVE-Eintrag? Wir sind den Weg gegangen, selbst CVEs für unser Programm zu vergeben. Dazu wurden wir eine CVE Numbering Authority (CNA). Darüber wollen wir im Talk berichten und zeigen, wer und wie man das ebenfalls machen kann. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/WRTMTS/

FireFist: Innovation auf zwei Rädern – Die Fahrradgriffheizung (eh21)

Sat, 30 Mar 2024 18:30:00 +0100

Im Rahmen eines OTH-Projektes haben wir gemeinsam eine Griffheizung für Fahrräder gebaut. In zwei Semestern sind zwei Prototypen entstanden. Von einer sehr einfachen Variante mit externem Akku und einfacher Mikrocontrollersteuerung wurde bei der zweiten Version alles in den Griff integriert. Der Akku im Griff genauso wie die Steuerplatine. Wir möchten zeigen, wie die Idee entstanden ist. Welche Probleme es gab, was wir aus den ersten beiden Versionen gelernt haben und wie es in Zukunft weitergeht. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/PJVDPU/

IT in Waldbesetzungen - Und was wir da machen können (eh21)

Sat, 30 Mar 2024 13:30:00 +0100

Eine kleiner Einblick in eine Welt zwischen Security Nightmares und paranoider Verzweiflung. Digitale Infrastruktur ist für politische Projekte/Blockaden, hier am Beispiel einer (mittlerweile geräumten) Waldbesetzung in Frankfurt, wichtiger denn je. Halbwegs sichere Kommunikationskanäle und eine Anbindung in die "Außenwelt" für Öffentlichkeitsarbeit sind relevant für den Alltag an derartigen Orten - Doch oft mangelt es an Ressourcen und Know-How technische Infrastrukturen zu betreiben und zu nutzen. Lasst uns darüber reden, wie wir diesem Umstand begegnen können. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/9ANZAX/

Geplante Obsoleszenz und in einigen Fällen das einfache Vorgehen dagegen. (37c3-meta)

Fri, 29 Dec 2023 13:45:00 +0100

Viele Geräte für Zuhause gehen viel zu schnell kaputt. Wie mach ich diese wieder fit? Viele Geräte für Zuhause gehen viel zu schnell kaputt. Wie mach ich diese wieder fit? Bügeleisen, Soundbar (Bose!), Elektrogrills etc. haben zumindest ein eingbautes Teil das nach wenigen Jahren den kompletten Bebtrieb des Gerätes verhindert. Absolute Frechheit, gut dass sich der Entstörkondensator in Serie zum Netz für 2-3€ Materialkosten ersetzen lässt. Ein paar Fotos, woher Ersatzteile bekommen, welche, auf was achten? (Werte, Typen, Grösse.) Warum wird das so gemacht, kurze Erklärung dieses "Netzteil" Aufbaus von modernem Wahnsinn. about this event: https://pretalx.c3voc.de/37c3-lightningtalks/talk/ZP7EEP/

Opening Ceremony (eh21)

Fri, 29 Mar 2024 16:00:00 +0100

Opening Ceremony about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/YYWQ8N/

Proxmox: Einführung & Deepdive (eh21)

Fri, 29 Mar 2024 17:15:00 +0100

Einführung, Ausbaustufen, Redundanzkonzepte, Backupmöglichkeiten, Migration und Security Aspekte beim Einsatz von Proxmox Erfahrungen aus 10 Jahren Proxmox Betrieb: - Hochverfügbarkeit: Was genau kann Proxmox und was nicht. - Hochverfügbarkeit und updates: Failsafes bei updates, was kann schiefgehen - Storage Konzepte von günstig bis teuer (ZFS Konfigurationen, iSCSI, Ceph) - Backupkonzepte (PBS, Offsite replikation) - Was ich an Custom Tooling geschrieben habe, um mir das Leben leichter zu machen, und major release upgrades den Schrecken nimmt.- Migration von anderen Hypervisoren und deren Besonderheiten - Monitoring about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/XYLQZQ/

Veranschaulichung quantenmechanischer Verschränkung (eh21)

Fri, 29 Mar 2024 17:15:00 +0100

Ein "heroischer" Versuch, Verschränkung in der Quantenmechanik zu veranschaulichen. Der Schwerpunkt liegt nicht auf physikalisch-mathematischer Exaktheit, sondern auf Geschichten und Bildern, die eine Brücke zwischen der Welt, wie wir sie wahrnehmen und den spannenden Eigenheiten der Quantenphysik bauen sollen. Als Anwendung ein kleiner Seitenblick auf Quantencomputer. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/8DEFBJ/

Digital eWaste - Anatomie und Wiederbelebung eines GPS dingsis (eh21)

Fri, 29 Mar 2024 19:45:00 +0100

2016 drehte die Firma U-Blox den Betrieb ihrer back-end Server für den Geotate Dienst ab und machte damit die GPS photoReceiver für den Blitzschuh von Jobo und Bilora effektiv zu Elektroschrott. In einem Anfall von "so schwer kann das doch nicht sein" begaben wir uns auf das Abenteuer herauszufinden, wie die Geräte eigentlich funktionieren und was nötig wäre, sie wieder zum Leben zu erwecken, und wollen euch mitnehmen auf eine Reise durch Code und Werbebroschüren about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/GKPKD7/

La genèse de hadopi (eh21)

Fri, 29 Mar 2024 18:30:00 +0100

Die Entstehung von Hadopi You thought hopping on the other side of the fence like a bunny will get you greener grass ? You're wrong. We will look at one of the numerous fiascos of French politics funded by me, a French taxpayer. Why did we get this law, supposed to tackle down piracy ? How does it work ? Was the propaganda as bad as the law looks like ? Was it effective ? How did tribunals react ? Is it still in force ? Are we still laughing about it ? Let's look at that together ? about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/L3USGM/

What the Coffee-Hack! (eh21)

Fri, 29 Mar 2024 19:45:00 +0100

Irgendwas mit Kaffeemaschinen, Vendor-Lock-in und erzwungener Obsoleszenz »Die WLAN-Funktionalität wird nicht mehr unterstützt, deswegen gehen die neuen Kapseln mit Ihrer Maschine nicht mehr.« Ja, so haben wir auch geschaut. Kommt vorbei, wir erzählen Euch, wie es Tchibo geschafft hat, eine ganze Produktreihe völlig indiskutabel kaputt zu machen statt ein Softwareupdate zur Verfügung zu stellen und weitere Rätsel des Peak-Kapitalismus. Und wir zeigen Euch die Hacks, wie die Maschinen trotzdem weiter funktionieren. about this event: https://fahrplan.eh21.easterhegg.eu/eh/talk/YBVBX3/

Das Geld + die Politik: Mehr Finanztransparenz in der Schweizer Politik (dgwk2024)

Sat, 02 Mar 2024 17:30:00 +0100

In der Politik ist Geld oft matchentscheidend, und doch selten Thema. Bis jetzt. Neu müssen Kampagnen ab 50K und Spenden ab 15K offengelegt werden. Doch Daten allein machen keine Transparenz. Daher haben wir sie auf aufbereitet. Auf moneyinpolitics.ch können alle, wer mit wie viel (und wessen) Geld Politik macht. Doch die Regelungen sind löchrig. Wir stellen das Tool vor und diskutieren, ob und welcher Kontext(daten) die Grenzen der aktuellen Politiktransparenz aufzeigen können. «Das Geld + die Politik» ist ein Projekt des WAV Recherchekollektivs, Lobbywatch, investigativ.ch und opendata.ch. In der Politik ist Geld oft matchentscheidend, und doch selten Thema. Bis jetzt. Neu müssen Kampagnen ab 50K und Spenden ab 15K offengelegt werden. Doch Daten allein machen keine Transparenz. Daher haben wir sie auf aufbereitet. Auf moneyinpolitics.ch können alle, wer mit wie viel (und wessen) Geld Politik macht. Doch die Regelungen sind löchrig. Wir stellen das Tool vor und diskutieren, ob und welcher Kontext(daten) die Grenzen der aktuellen Politiktransparenz aufzeigen können. «Das Geld + die Politik» ist ein Projekt des WAV Recherchekollektivs, Lobbywatch, investigativ.ch und opendata.ch. about this event: https://winterkongress.ch/2024/talks/das_geld_die_politik_mehr_finanztransparenz_in_der_schweizer_politik/

Datenschutz-Konzept und -Initiative (dgwk2024)

Sat, 02 Mar 2024 16:30:00 +0100

Die Digitale Gesellschaft hat ein neues Datenschutz-Konzept erarbeitet. Das Konzept adressiert die Mängel im geltenden Datenschutzrecht, indem es sich auf die vielseitigen Folgen der Datennutzung konzentriert. Das Konzept geht als eigentliches Datengesetz jedoch über den Datenschutz hinaus. Es schafft auch einen Rechtsrahmen für den Umgang mit «Künstlicher Intelligenz» und bietet eine Lösung für die Sekundärnutzung von Daten. Dabei nimmt das neue Konzept die Datenbearbeiter:innen konkret in die Pflicht und ermöglicht eine vertrauensvolle Datennutzung. Ausgehend von der Kritik am zu wenig spezifischen Zweck des geltenden Datenschutzrechts und seinem unklaren Schutzbereich gibt das Datenschutz-Konzept sieben Schutzziele vor: Schutz vor Manipulation, Schutz vor Diskriminierung, Schutz vor Überwachung und Recht auf Anonymität, Schutz vor Beeinträchtigung der Gesundheit sowie der Lebens- und Entwicklungschancen, Recht auf Transparenz und Pflicht zur Sorgfalt, Recht auf Vergessenwerden, Schutz der offenen Gesellschaft und freien Demokratie Basierend auf diesen Schutzzielen ergibt sich ein Konzept für einen wirksamen und zielgerichteten Datenschutz, der Vertrauen schafft und Innovation fördert. Das Konzept stellt die Einhaltung und Durchsetzung der Schutzziele ins Zentrum und löst sich vom Prinzip der Einwilligung zur Datenbearbeitung und der Zweckbindung. Geregelt wird der Umgang mit Daten und nicht bloss mit Personendaten an sich. Das Konzept beinhaltet: Grundsätze zur Datenbearbeitung, wonach Private und staatliche Datenbearbeitungen die Schutzziele für die Individuen und die Gesellschaft wahren müssen. Ein absolutes Verbot für bestimmte Datenbearbeitungen, welche ein zu grosses Risiko für Individuen oder die Gesellschaft bergen und die Schutzziele nicht gewährleisten können (wie biometrische Massenüberwachung und Social Scoring). Eine substantielle Mitbestimmung der Betroffenen, wonach insbesondere eine Datenbearbeitung für diese erkennbar und eine Möglichkeit zu einem einfach wahrzunehmenden Widerspruchsrecht gegeben sein müssen. Bestimmungen zur Durchsetzung des Konzepts wie wirksame Sanktionen, wenn die Schutzziele nicht eingehalten werden. Unter Einhaltung der Schutzziele können Daten und insbesondere auch Personendaten unbeschränkt bearbeitet werden. Dabei werden die Datenbearbeiter:innen jedoch verstärkt in die Pflicht genommen, die Interessen der betroffenen Personen und der Gesellschaft zu wahren. Das Vertrauen in die Datennutzung und die Datenbearbeitung wird dadurch gestärkt. Parallel zum Datenschutz-Konzept arbeitet die Digitale Gesellschaft an einer Datenschutz-Initiative. Die geplante Volksinitiative hat das Ziel, das Konzept in der Bundesverfassung zu verankern. In unserem Vortrag werden wir das Datenschutz-Konzept vorstellen und den Stand der Datenschutz-Initiative erläutern. about this event: https://winterkongress.ch/2024/talks/datenschutz_konzept_und_initiative/

Surveillance Fédérale & Cryptowars – wie der Schweizer Staat uns überwacht (dgwk2024)

Sat, 02 Mar 2024 15:45:00 +0100

Seit den Snowden-Enthüllungen haben Tech-Konzerne die digitale Kommunikation verschlüsselt, zum Missfallen der Schweizer Überwachungsbehörden. Ich zeige basierend auf meinen Recherchen auf, wie der Dienst ÜPF, der Nachrichtendienst und das Bundesamt für Polizei/Fedpol versuchen gegen diese technischen Errungenschaften des Datenschutzes anzukämpfen. Durch den Einkauf von neuem Überwachungssystemen (FLICC), den Kampf gegen die 5G-Verschlüsselung, der Ausweitung gesetzeswidrigen Massen-Scanning (Kabelaufklärung) und dem vermehrten Einsatz von Staatstrojanern wie Pegasus und Predator. Der Vortrag ist strukturiert anhand des "Threat Models" für eine Investigativjournalistin: Anhand der 4 staatlichen Überwachungsformen (Vorratsdatenspeicherung, Echtzeitüberwachung, Kabelaufklärung und Staatstrojaner) möchte ich die Gefahren für den technischen Quellenschutz aufzeigen. about this event: https://winterkongress.ch/2024/talks/surveillance_federale_cryptowars_wie_der_schweizer_staat_uns_uberwacht/

Das Urheberrecht im Zeitalter der generativen KI (dgwk2024)

Sat, 02 Mar 2024 20:00:00 +0100

Mit dem Auftauchen der generativen KI werden auch verschiedene Fragen des Urheberrechts zur Diskussion gestellt. Dabei geht es einerseits darum, auf welcher Basis die KI-Modelle trainiert werden können und andererseits, ob Werke, die durch generative KI erstellt wurden, einen urheberrechtlichen Schutz geniessen sollten. Ich plädiere für weniger Kleingeist und mehr Offenheit in dieser Debatte und werde zeigen, warum wir gerade jetzt das Urheberrecht grundsätzlich infrage stellen und auf keinen Fall neue Rechte schaffen sollten. Mit dem Auftauchen der generativen KI werden auch verschiedene Fragen des Urheberrechts zur Diskussion gestellt. Dabei geht es einerseits darum, auf welcher Basis die KI-Modelle trainiert werden können und andererseits, ob Werke, die durch generative KI erstellt wurden, einen urheberrechtlichen Schutz geniessen sollten. Ich plädiere für weniger Kleingeist und mehr Offenheit in dieser Debatte und werde zeigen, warum wir gerade jetzt das Urheberrecht grundsätzlich infrage stellen und auf keinen Fall neue Rechte schaffen sollten. about this event: https://winterkongress.ch/2024/talks/das_urheberrecht_im_zeitalter_der_generativen_ki/

Den Planet einfach brennen lassen? (dgwk2024)

Sat, 02 Mar 2024 14:00:00 +0100

Wie wir die gamifizierten Ablenkungen abschütteln und nachhaltige Bewegungen aufbauen Während die letzten Ressourcen des Planeten leer geschlürft werden, befinden sich viele zwischen Wut, Panik & Verzweiflung. Ein Dilemma ist, dass wir in einer hyper-vernetzten Welt leben in der nicht nur Vorteile, sondern auch Nachteile vernetzt sind. Während manche Probleme durch Technologien lösbar sind, sind technologische Lösungen aber nicht universell einsetzbar. Manches, wie etwa Elektro-Autos, sind nur Lösung für Industrie, nicht für den Planeten oder es sind digitale Beruhigungsnuggis für Individuen. Dieser Vortrag begegnet der Klimakrise, indem der Zustand des Planeten in Zusammenhang mit der Wirtschaftsordnung, den politischen Systemen und den daraus resultierenden sozialen Problemen stellt. Es wird die Frage nach Macht und Verantwortlichkeiten gestellt und inwiefern Philosophie und Ethik mit Lösungen verbunden sind. Für eine mögliche Antwort wird aus den Erfahrungen internationaler sozialer Bewegungen geschöpft, um einen Blick auf eine mögliche und nachhaltige Zukunft zu werfen. Die Welt, in der wir leben ist sehr vernetzt auf der wirtschaftlichen Ebene, aber keinesfalls so gut auf der gesellschaftlichen. Verbindungen laufen vor allem über Kabel und Containerschifffe, nicht über die Interaktionen zwischen gesellschaftlichen Gruppen. Und ungeachtet allen Redens über Demokratie und Mitbestimmung fließen Macht und Geld immer noch in die Hände sehr weniger. Und diese wenigen lösen unsere Probleme nicht. Die Herausforderungen, vor denen wir stehen, sind gigantisch. Aber das muss nicht gleichbedeutend mit schrecklich sein – es bedeutet erst einmal, dass es nicht langweilig wird. Und es bedeutet auf gar keinen Fall, dass wir nun unseren Humor verlieren sollten! Dieser Vortrag zielt darauf, Wege aus furchtbar erscheinenden Situationen zu zeigen und euch zugleich zum Lachen zu bringen. Um eine gemeinsame Basis für Überlegungen zu haben, startet der Vortrag mit einer kurzen Analyse der Ursprünge unser jetzigen Situation, unter der Einbeziehung ihrer theoretischen und philosophischen Grundlagen. Dieses gemeinsame Wissen wird dazu genutzt, um im zweiten Schritt vier kurze Matches zu betrachten: Theorien sozialer Bewegungen treten gegen Aufstandsbekämpfungstheorien an, Ethik gegen die Kybernetik, Ideen der Entscheidungsfreiheit gegen Gamifizierung und Meinungsfreiheit gegen Überwachung. Die Ergebnisse werden im letzten Teil dazu genutzt, um sie mit Erfahrungen aus sozialen Bewegungen aus unterschiedlichen Teilen der Welt zu verbinden. In dem den Fäden der Macht gefolgt wird, wird die Frage nach Verantwortung gestellt, um Lösungswege herauszuarbeiten. Denn weder Panik noch Verzweiflung werden den Planeten retten. Aber mit einer guten Bewegung können das. about this event: https://winterkongress.ch/2024/talks/den_planet_einfach_brennen_lassen/

Live Netzpodcast (dgwk2024)

Sat, 02 Mar 2024 21:15:00 +0100

Wir nehmen live und mit Publikum eine Episode des Netzpodcasts auf. Mit dabei sind wie gewohnt Rahel Estermann, Jörg Mäder, Erik Schönenberger - und als Spezialgast Guido Berger (Leiter Digital-Redaktion, SRF). Wir nehmen live und mit Publikum eine Episode des Netzpodcasts auf. Mit dabei sind wie gewohnt Rahel Estermann, Jörg Mäder, Erik Schönenberger - und als Spezialgast Guido Berger (Leiter Digital-Redaktion, SRF). about this event: https://winterkongress.ch/2024/talks/live_netzpodcast/

Schlusswort (dgwk2024)

Sat, 02 Mar 2024 21:00:00 +0100

Dies ist das Schlusswort. Dies ist das Schlusswort. about this event: https://winterkongress.ch/2024/talks/schlusswort/

Radnetz-Qualität mit OpenStreetMap-Daten auswerten (fossgis2024)

Fri, 22 Mar 2024 09:35:00 +0100

Mit einem OSM-basierten Radverkehrs-Qualitätsindex möchten wir eine niedrigschwellige Methode zur Analyse von Radnetzen bereitstellen. Wir geben Einblicke in den Proof Of Concept aus Berlin, wo wir detaillierte OSM-Daten zur Bewertung der Radinfrastruktur erhoben und ausgewertet haben. Ein solcher Index macht Lücken im Netz und somit Handlungsbedarf für die Verkehrsplanung sichtbar und zeigt, wie klein der Bewegungsradius für vulnerable Gruppen wie Kinder auf dem Fahrrad zum Teil ist. Die Eignung von Straßen und Wegen für den Radverkehr rückt im Zuge der Verkehrswende immer weiter in den Fokus von Stadtentwicklung und Verkehrsplanung. Und auch in OpenStreetMap hat sich in den vergangenen Jahren in Punkto Radverkehr viel getan: Vielerorts werden immer mehr und zunehmend vollständige Daten zum Radverkehr erfasst und die Standardisierung entsprechender Tagging-Schemata ist spürbar vorangeschritten. In der Verkehrsplanung, der Wissenschaft und der GIS-Praxis finden sich eine Vielzahl von Fahrrad-Qualitäts-Indizes, die Daten zum Radverkehr mit unterschiedlichen methodischen Ansätzen analysieren. Für viele werden inzwischen OSM-Daten herangezogen: Entweder, um fahrradfreundliche Strukturen und Umweltfaktoren abzuleiten oder das Wegenetz hinsichtlich vorhandener Radinfrastruktur zu bewerten. Letzteres bietet jedoch meist nur ein eingeschränktes Bild: Denn was sagt es aus, ob es einen physisch separierten Radweg gibt, wenn man nicht einschätzen kann, wie schmal und holperig er vielleicht ist? OSM bietet jedoch eine optimale Datenbank, um auch detaillierte Radwegattribute systematisch und vergleichbar zu erfassen und damit weitergehende Infrastrukturanalysen zu ermöglichen. Während in der Vergangenheit vor allem die Existenz von Radwegen erfasst wurde, geraten zunehmend physische Details wie Breiten, Oberflächen oder Charakteristika der Trennung zu anderen Verkehrsarten in den Fokus. Ein gestiegenes Bewusstsein für den Mehrwert solcher Daten und neue Tools unterstützen diese Tendenz. Diese Fortschritte haben wir zum Anlass genommen, die Entwicklung eines detaillieren, OSM-basierten Radverkehrs-Qualitätsindex zu starten. Damit lassen sich Radnetze vergleichbar analysieren, Lücken im Radverkehrsnetz identifizieren oder anschaulich zeigen, wie klein der Bewegungsradius für vulnerable Gruppen wie Kinder oder ältere Menschen auf Fahrrädern vielerorts noch immer ist. Solche Daten verfügbar zu machen kann einen großen Mehrwert für Planungsprozesse bieten, um gezielte Planungsmaßnahmen mit einer Perspektive auf komplette Netze statt einer Aneinanderreihung von Einzelmaßnahmen zu unterstützen. In unserem Vortrag stellen wir unsere Überlegungen und ersten Ergebnisse für diesen Index vor, den wir in unserer Modellregion Berlin-Neukölln entwickelt, getestet und visualisiert haben. Dieser kann ein Aufschlag sein, um gemeinsam mit der Community einen offenen Index bereitstellen zu können, der sich – entsprechend gut gemappte OSM-Daten vorrausgesetzt – weltweit frei, niedrigschwellig und individuell anpassbar anwenden lässt. about this event: https://pretalx.com/fossgis2024/talk/QCMXBG/

Offline-First im Städtischen Licht: Die mobile Komponente BelIS-Online Wuppertal (fossgis2024)

Fri, 22 Mar 2024 12:20:00 +0100

Der Vortrag bietet einen praxisnahen Einblick in die Erstellung einer Progressive Web App (PWA) im Rahmen des Projektes BelIS (Beleuchtungs-Informations-System mit dem Schwerpunkt auf der Offline-Verfügbarkeit. Dieses Projekt, initiiert von der Stadt Wuppertal, stellt eine Antwort auf die Anforderungen an das Management städtischer Beleuchtung dar und wird gemeinsam von dem Ressort 104 der der Stadt Wuppertal, den Stadtwerken Wuppertal und dem momentanen Vertragspartner SPIE AG täglich genutzt. BelIS ist ein offenes Projekt, dessen Code auf GitHub unter OpenSource Lizenzen veröffentlicht ist. Es stellt eine umfassende Lösung zur Verwaltung und Bewertung der mit städtischer Beleuchtung verbundenen Daten bereit. Die mobile Komponente für Wartungsunternehmen wurde ursprünglich als native iOS-Anwendung konzipiert. Die App benötigte eine konstanten Internetverbindung und Diensteverfügbarkeit, was zu operationellen Herausforderungen führte. Im Zuge einer Neuentwicklung wurde eine Transition zur Progressive Web App durchgeführt (React Applikation mit Leaflet basierter Karte), wobei der Fokus auf einem Offline-First-Ansatz lag. Mein Vortrag konzentriert sich dabei auf die unterschiedlichen Arten und Anforderungen der Offline-Verfügbarkeit. Die Hauptaspekte meines Vortrags umfassen: * Vorstellung des mobilen Beleuchtungsmanagements Wuppertal. * Übersicht über die Transition von der nativen iOS-App zur Progressive Web App: Beweggründe, Herausforderungen und Systemarchitektur. * Tiefergehende Erörterung des Offline-First-Ansatzes und dessen Umsetzung in vier Kernbereichen der Applikation: a. Die Applikation selbst durch PWA-Mechanismen, b. Applikationsdaten im IndexedDB Cache (inkl. Geospatial Index), c. Offline-verfügbare Maplibre Vectorlayer, d. RxDB-basierte Datenmodifikation ("sync statt POST"). * Präsentation der erreichten Verbesserungen in Bezug auf Zuverlässigkeit, Effizienz und Benutzererfahrung und wie diese Veränderungen die täglichen Abläufe für die Wartungsunternehmen und die städtischen Stakeholder optimiert haben. Ich bin überzeugt, dass die FOSSGIS-Konferenz eine ideale Plattform darstellt, um die Erfahrungen und Erkenntnisse aus diesem Projekt mit einer breiten Community von GIS-Experten und Enthusiasten zu teilen. Der offene Charakter des Projekts und die aktive Beteiligung verschiedener städtischer Akteure und Vertragspartner spiegeln die kollektive Anstrengung wider, die Open Source GIS-Technologien in der Praxis effektiv einzusetzen. about this event: https://pretalx.com/fossgis2024/talk/8KKJUK/

SAR Simulation mit RaySAR - Perspektiven für die Katastrophenhilfe (fossgis2024)

Fri, 22 Mar 2024 11:45:00 +0100

RaySAR ist ein open source Simulationsprogramm für Synthetic Aperture Radar (SAR), eine hochauflösende Form von bildgebendem Radar. SAR Bilder sind von großem Wert in der Katastrophenhilfe um direkt nach einem Katastrophenfall eine Einschätzung des entstandenen Schadens zu gewinnen - sie können auch nachts und durch eine Wolkendecke aufgenommen werden. In diesem Vortrag wird RaySAR vorgestellt, sowie Ansätze, wie RaySAR bei der Detektion von Gebäudeschäden eingesetzt werden könnte. Im Katastrophenfall, zum Beispiel nach einem Erdbeben, Tsunami oder Sturm, müssen Entscheidungen getroffen werden, wie die Ressourcen der Katastrophenhilfe eingesetzt werden. Dafür ist es notwendig, dass Entscheidungsträger möglichst gut über den entstandenen Schaden und dessen räumliche Verteilung informiert werden. Fernerkundungsmethoden spielen eine wichtige Rolle in dieser Aufgabe, da sie großflächige Aufnahmen zur Verfügung stellen ohne dass sich Gutachter vor Ort in Gefahr bringen müssen. Besonders attraktiv sind Synthetic Aperture Radar (SAR) Aufnahmen, weil diese unabhängig von Lichtverhältnissen und Wetterbedingungen aufgenommen werden können und hochauflösende Daten liefern. Radardaten bringen aber auch einige Schwierigkeiten mit sich. Die Funktionsweise eines Radarsensors unterscheidet sich entscheidend von dem eines optischen Sensors, weshalb SAR Bilder schwieriger zu interpretieren sind als optische Bilder. Außerdem fehlen oft hochauflösende Aufnahmen, die kurze Zeit vor einer Katastrophe aufgenommen wurden, denn der Sensor muss für die Aufnahme von Bildern mit höchster Auflösung längere Zeit auf das Ziel ausgerichtet bleiben und eine dauerhafte, flächendeckende Aufnahme ist nicht möglich. Für sogenannte change detection Methoden, die Unterschiede zwischen Aufnahmen von vor der Katastrophe und nach der Katastrophe festellen, fehlen deshalb Referenzdaten, die im Fall optischer Bilder deutlich öfter vorhanden sind. Simulationsprogramme können eingesetzt werden um synthetische Daten zu generieren und so die fehlenden Daten künstlich zur Verfügung stellen. Simulationen ermöglichen es, change detection Methoden einzusetzen, auch wenn keine SAR Aufnahmen von vor der Katastrophe zum Vergleich vorliegen. Machine Learning basierte Methoden benötigen oft große Mengen Trainingsdaten. Hier können Simulationen nützlich sein, da simulierte Daten günstiger und besser kontrollierbar im Bezug auf nötige Parameter, verschiedene Ansichten des gleichen Objektes und weiterer Merkmale sind. In diesem Vortrag wird der Simulator RaySAR vorgestellt, welcher von Stefan Auer in seiner Dissertation [1] an der TU München entwickelt und später zusammen mit dem Quellcode frei veröffentlicht wurde. Damit ist RaySAR eine attraktive Alternative zu kommerziellen und anderen akademischen Simulatoren und erlaubt es den Nutzern den Quellcode zu lesen und zu bearbeiten. Es werden außerdem Ansätze betrachtet, wie RaySAR in der Detektion von Gebäudeschäden zum Einsatz kommen kann und wie der Simulator im Rahmen der Masterarbeit des Vortragenden weiterentwickelt wird. [1] Auer, Stefan Josef. 3D synthetic aperture radar simulation for interpreting complex urban reflection scenarios. Diss. Technische Universität München, 2011. about this event: https://pretalx.com/fossgis2024/talk/YGJKYH/

OpenLayers - mehr als nur Karten im Web (fossgis2024)

Fri, 22 Mar 2024 11:10:00 +0100

OpenLayers ist die erste Wahl für Karten im Web, wenn umfangreiche Interaktionen mit Karte und Daten gewünscht sind. Dieser Vortrag zeigt anhand von Beispielen, wie mit wenig Programmcode auf unterschiedlichste Arten Karte und Daten, egal ob Raster oder Vektor, vom Benutzer angepasst und modifiziert werden können. Die Veröffentlichung von Google Maps war 2005 eine Revolution. OpenLayers war bereits 2006 die erste Open Source Alternative dazu - mit dem Unterschied, dass man selbst bestimmen konnte, welche Grundkarte man verwenden möchte. OpenStreetMap war fast von Beginn an eine der Möglichkeiten. Seither hat sich viel getan. Leaflet hat mit seiner Einfachheit OpenLayers in der Popularität weit zurückgedrängt. Mapbox hat mit Vektorkacheln und einem WebGL basierten Kartenviewer die Darstellungs- und Verwendungsmöglichkeiten von Web-Karten auf einen neuen Level gehoben. Doch auch OpenLayers gewann wieder an Popularität, weil es umfangreiche Grundfunktionen bietet, die bei den Mitbewerbern nur über Plugins oder eigenen Code verfügbar sind. about this event: https://pretalx.com/fossgis2024/talk/BLTYE8/

QGIS Fachschale für Energie- & Linieninfrastruktur offline MoFa4Q (fossgis2024)

Fri, 22 Mar 2024 09:50:00 +0100

MoFa4Q soll helfen, QGIS einfach und zugänglich für Außendienstpersonal (z.B.: bei Stadtwerken) zugänglich zu machen: mit Fokus auf den Offline Einsatz und der Datensynchronisierung Veröffentlichung auf Github: https://github.com/WhereGroup/qgis_mofa4q_installer https://github.com/WhereGroup/qgis_mofa4q_profile Motivation: - Offline: Mobil und offline einsetzbar (Windows Surface Pro) & Integration und Darstellung von QGIS-Projekten - GeoDaten: kostengünstige und schnelle Aktualisierung + sehr gute Performance - QGIS Stärken nutzen: einfache und schnelle Bedienung für den Anwender & aufgeräumte und übersichtliche Oberfläche about this event: https://pretalx.com/fossgis2024/talk/PWKURF/

Neue Geoperspektiven nach 10 Jahren digital souveräne Softwareentwicklung am BfS (fossgis2024)

Fri, 22 Mar 2024 09:00:00 +0100

Seit nunmehr 10 Jahren entwickelt das Bundesamt für Strahlenschutz seine Notfallschutzsysteme gemäß einer Entwicklungsstrategie, die digitale Souveränität und Nachhaltigkeit sichert, zu verschiedenen Open Source GIS Projekten Beiträge leisten konnte oder solche selbst entwickelt und veröffentlicht hat. Der Vortrag soll die gemachten Erfahrungen, Erfolgs- und Irrwege, Ausschreibungsstrategien, bis hin zu Betriebskonzepten beleuchten und dabei anregen mehr digitale Souveränität zu wagen. Als das Bundesamt für Strahlenschutz (BfS) sich vor nunmehr 10 Jahren entschlossen hat seine Notfallschutzsysteme auf Grundlage einer Entwicklungsstrategie die digitale Souveränität und Nachhaltigkeit sichert neu zu entwickeln, war den Beteiligten kaum bewusst wie viele Hürden im Verwaltungshandeln, aber auch bei der Qualifikation der eigenen Mitarbeitenden und durch sich ändernde Rahmenbedingungen zu nehmen sein werden. Jetzt, nach 10 Jahren, befinden sich die Komponenten der Notfallschutzsysteme in einem georedundanten skalierbaren Containerbetrieb, informieren die Öffentlichkeit in Form eines Geoportals, stellen die Daten aber auch als OGC Dienste maschinenlesbar zur Verfügung und bieten dem Fachpersonal spezialisierte Werkzeuge zur effektiven Analyse einer radiologischen Lage zur Verfügung. Der Weg dorthin war sicherlich nicht straight forward, mit unter deprimierend, aber auch spannend. Von den gesammelten Erfahrungen und Anekdoten soll in diesem Vortrag berichtet und erzählt werden und dabei der Bogen von der einfachen ersten Mapserver-Anwendung zum komplexen orchestrierten Open Source Geo-stack gespannt werden. about this event: https://pretalx.com/fossgis2024/talk/QPUWES/

NSU-Watch: Aufklären & Einmischen. Der Jahresrückblick 2023. (37c3)

Thu, 28 Dec 2023 19:00:00 +0100

Wir blicken auf ein Jahr voller rechter, rassistischer und antisemitischer Kampagnen zurück. Der Diskurs um Migration und Flucht wird mit zunehmender Selbstverständlichkeit als ein Diskurs der Abwehr und des Ausschlusses der „Anderen“ geführt. Dies drückt sich in immer neuen Gesetzesverschärfungen bis hin zur Forderung nach einer vollständigen Abschaffung des Grundrechtes auf Asyl aus. Und auch in anderen Bereichen der Politik wird der Ruf nach autoritären „Lösungen“ für tatsächliche oder vermeintliche Probleme lauter. Nur vor diesem gesellschaftlichen Hintergrund sind die Wahlerfolge der AfD in Hessen und Bayern zu verstehen. Für uns ist klar: Unter solchen gesellschaftlichen Bedingungen wächst die Gefahr rechten Terrors. Die Zahl der antisemitischen, rassistischen und rechten Angriffe steigt weiterhin, denn Rechte Täter*innen können sich als diejenigen verstehen, die einen vermeintlichen „Volkswillen“ in die Tat umsetzen. Sie finden vermehrt die Ermöglichungsstrukturen, die sie für ihre Taten benötigen – in rechten Organisationen ebenso wie im Netz oder im direkten sozialen Umfeld. Wir wollen im Podcast auf das Jahr 2023 zurückschauen und ausloten, wo wir im Kampf gegen rechten Terror stehen. Was sind unsere Möglichkeiten, zu informieren und zu intervenieren? Wir müssen von Staat und Gesellschaft Aufklärung und Konsequenzen einfordern, die Arbeit von Polizei, Justiz und Parlamenten kritisch beobachten, Verharmlosung und Entpolitisierung entgegentreten, solidarisch sein und Betroffenen in ihren Kämpfen um Anerkennung und Gerechtigkeit beiseite stehen. Dafür scheinen die Räume enger und weniger zu werden. Was können wir 2024 gemeinsam erreichen? about this event: https://events.ccc.de/congress/2023/hub/event/nsu-watch-aufklren-einmischen-der-jahresrckblick-2023/

Das Zusammenspiel von Wikidata, Wikipedia und OpenStreetMap (fossgis2024)

Fri, 22 Mar 2024 11:45:00 +0100

Eine Vorstellung, welche Tags in OpenStreetMap vorhanden sind, die eine Verbindung zu Wikidata und Wikipedia herstellt. Zudem werden Tools und Beispiele gezeigt, wo diese Daten Anwendung finden. Der Vortrag wird Tags präsentieren, die in OpenStreetMap vorhanden sind, dazu zählen unter anderem `wikidata=*` und `wikipedia=*`, es gibt aber noch weitere Tags. Es werden auch Anwendungsbeispiele und Tools vorgestellt, die bei der Erfassung helfen und die vorhandenen Tags auswerten. Auch in Wikipedia und Wikidata gibt es Verweise auf OpenStreetMap, die vielleicht nicht jedem bekannt sind. about this event: https://pretalx.com/fossgis2024/talk/QKDVFB/

CartoHack Live: OSM-basierten Karte mit QGIS und PostGIS erstellen (fossgis2024)

Thu, 21 Mar 2024 17:20:00 +0100

Die Arbeitsschritte für die Herstellung einer typischen OSM-basierte Karte im Maßstab 1:10.000 bis 1:100.000 gleichen sich im Wesentlichen: Es müssen Daten von OpenStreetMap aufbereitet, generalisiert und signaturiert werden. Das Projekt "Graubrot" bietet hierfür eine Ausgangsbasis mit einer Konfiguration für osm2pgsql für den Datenimport, einem Datenschema in PostgreSQL/PostGIS und einer ersten Visualisierung in QGIS. Die Arbeitsschritte für die Herstellung einer typischen OSM-basierte Karte im Maßstab 1:10.000 bis 1:100.000 gleichen sich im Wesentlichen: Es müssen Daten von OpenStreetMap aufbereitet, generalisiert und signaturiert werden. Die typischen benötigten Ebenen wie Gewässer, Straßen, Gebäude und Verwaltungsgrenzen bleiben dabei Konstanten. Das Projekt "Graubrot" bietet hierfür eine Ausgangsbasis mit einer Konfiguration für osm2pgsql für den Datenimport, einem Datenschema in PostgreSQL/PostGIS und einer ersten Visualisierung in QGIS. Beispiele für Generalisierungen der Ebenen liegen bei und können bei Bedarf angepasst werden. Ebenfalls wird die Möglichkeit von Aktualisierungen und gleichzeitiger Anpassung von Objekte thematisiert. Der CartoHack ist eine Veranstaltungsreihe der Deutschen Gesellschaft für Kartographie. Weitere Infos und Veranstaltungen auf der [Webseite](https://visualisierung.dgfk.net/de/events/cartohack/). about this event: https://pretalx.com/fossgis2024/talk/79LWHT/

Road Network Contraction mit PostGIS (fossgis2024)

Fri, 22 Mar 2024 09:45:00 +0100

Bei der Berechnung des kürzesten Weges zwischen zwei Orten ist die Größe des Straßendatensatzes, bezogen auf die Performanz, oft der wichtigste Faktor. Die Open Source Erweiterung PostGIS bietet Tools an, um Datensätze mit Strassen-Netzwerken zu minimieren. Dieses Verfahren, auch bekannt als “Road Network Contraction”, wird in dieser Präsentation vorgestellt, sowie unterschiedliche Möglichkeiten dieses Verfahren zu verfeinern. PostGIS ist eine Extension für Geographische Daten des Open Source Datenbank Management System PostgreSQL. Die Erweiterung enthält Tools zur Berechnung des kürzesten Weges zwischen zwei Orten, sowie die Funktion “Road Network Contraction”. Darunter versteht man, dass der Datensatz, welcher zur Wegfindung benutzt wird, soweit wie möglich reduziert wird, um die Performanz zu erhöhen. Die Standardfunktion Road Network Contraction berücksichtigt leider nicht alle Attribute (z.B. Geschwindigkeit und Straßenart), die bei der Prozessierung herangezogen werden müssten. Dieser Vortrag stellt einige wichtige Verbesserrungen und Ideen vor, die dabei helfen, die Größe eines Straßendatensatzes bei der Wegfindung optimal zu reduzieren, ohne wichtige Informationen zu Attributen und Topologie zu verlieren. about this event: https://pretalx.com/fossgis2024/talk/ZTXWQY/

Datenverknüpfung von Befragungsdaten mit Geodaten - wie geht das? (fossgis2024)

Fri, 22 Mar 2024 10:10:00 +0100

Wie lassen sich Befragungs- und Geodaten für die Beforschung interdisziplinärer Forschungsfragen technisch verknüpfen? Im Forschungsprojekt "Aufbau der Sozial-Raumwissenschaftlichen Forschungsdateninfrastruktur SoRa: FAIR, intelligent, integrativ (SoRa+)" wird eine verteilte und modulare Infrastruktur entwickelt, welche die Datenverknüpfung durch Dienste unter Berücksichtigung von Datenschutz und FAIR-Prinzipien für die Wissenschaft erleichtern soll. Zur Bereitstellung von Forschungsdaten für die Nutzung durch Dritte etablieren sich zunehmend sogenannte Forschungsdatenzentren (FDZ). Eine besondere Herausforderung stellt die Verknüpfung von sozialwissenschaftlich erhobenen Befragungsdaten mit raumwissenschaftlich generierten Geodaten dar, um Fragestellungen aus den Sozialwissenschaften hinsichtlich der Verteilung im Raum untersuchen zu können. Im von der DFG geförderten Forschungsprojekt "Aufbau der Sozial-Raumwissenschaftlichen Forschungsdateninfrastruktur SoRa: FAIR, intelligent, integrativ (SoRa+)" wird eine geeignete verteilte und modulare Infrastruktur entwickelt, welche die Datenverknüpfung standardisieren und erleichtern soll. Durch weniger Zeitaufwand für die Forschenden sowie für die FDZs soll das Forschen an interdisziplinären Fragen vereinfacht werden. Berücksichtigt werden dabei die Anforderungen des Datenschutzes sowie die FAIR-Prinzipien. Der Talk soll Interesse an der Nutzung von Forschungsdaten wecken und aktuelle Fragen aus dem Projekt SoRa+ vorstellen. about this event: https://pretalx.com/fossgis2024/talk/ELVKXZ/

#switch2qgis: Komplettablösung proprietärer GI-Systeme mit QGIS - Langzeiterfahrungen (fossgis2024)

Fri, 22 Mar 2024 10:10:00 +0100

Der Vortrag beschreibt den kompletten Übergang der Ablösung von seit mehr als 20 Jahren etablierten proprietären GI-Systeme und der Geodatenbanken des Marktführers durch den vollständigen Ersatz durch OSS, insbesondere das freie QGIS in der Stadtverwaltung Halle (Saale) und die langjährigen Erfahrungen mit dieser Umstellung. Schwerpunkte bilden Vorbereitung, Einführung bei Testnutzern, Testszenarien, Produktivsetzung und Langzeiterfahrungen nach nunmehr fünf Jahren Produktiveinsatz. Einschätzungen zu potenziellen und realen Einsparungen sowie der Nutzerfeedback aus der Verwaltung mit ca. 3000 Mitarbeitern bei ca. 150 GIS-Powerusern ergänzen den Vortrag. about this event: https://pretalx.com/fossgis2024/talk/LASXMF/

Interaktive Dashboards zur Optimierung von Intelligence Prozessen (fossgis2024)

Fri, 22 Mar 2024 10:10:00 +0100

Durch stetig wachsende Mengen verfügbarer Daten, u.a. getrieben durch Open Data Policies, gewinnen Business Intelligence (BI) Tools zunehmend an Bedeutung. Nicht nur Unternehmen nutzen Dashboards zu Analyse und Visualisierung, ebenso können öffentliche Verwaltungen derlei Tools für demokratische Entscheidungsprozesse, sowie Bürgerpartizipation verwenden. Dieser Vortrag zeigt, wie private und öffentliche Akteure ihre Geodaten in BI-Prozessen mithilfe von Apache Superset einsetzen können. Durch stetig wachsende Mengen verfügbarer Daten, u.a. getrieben durch Open Data Policies, gewinnen Business Intelligence (BI) Tools zunehmend an Bedeutung. Nicht nur Unternehmen nutzen Dashboards zu Analyse und Visualisierung, ebenso können öffentliche Verwaltungen derlei Tools für demokratische Entscheidungsprozesse, sowie Bürgerpartizipation verwenden. Dieser Vortrag zeigt, wie private und öffentliche Akteure ihre Geodaten in BI-Prozessen mithilfe von Apache Superset einsetzen können. about this event: https://pretalx.com/fossgis2024/talk/H37SGW/

Leaflet – die Webmapping-Bibliothek, die fast alles kann (fossgis2024)

Fri, 22 Mar 2024 11:45:00 +0100

Dieser Vortrag zeigt, dass eine Vielzahl von Plugins für Leaflet existieren, die so gut wie alle gewünschten Funktionen möglich machen. Leaflet ist schnell, effizient und einfach zu benutzen, das hat sich mittlerweile herumgesprochen. Es gibt jedoch auch kritische Stimmen: Leaflet bietet angeblich nur begrenzte Funktionalitäten und für komplexere Anwendungen muss eine andere Bibliothek genutzt werden. Aber stimmt das denn? Dieser Vortrag zeigt, dass eine Vielzahl von Plugins für Leaflet existieren, die so gut wie alle gewünschten Funktionen möglich machen. Im Vortrag werden nicht nur Plugins für verschiedene Fragestellungen (z.B. Digitalisierung, Symbolisierung, Clustering) vorgestellt, sondern auch Tipps und Tricks gegeben, worauf bei der Verwendung von Plugins geachtet werden sollte und wie sie am besten eingesetzt werden. about this event: https://pretalx.com/fossgis2024/talk/CQT9AK/

Alles fit? - Praxiserfahrungen mit GeoHealthCheck (fossgis2024)

Fri, 22 Mar 2024 09:35:00 +0100

Die unabhängige Überwachung der bereitgestellten Geodatendienste ist für anbietende Stellen von großer Bedeutung. Hierfür bietet sich GeoHealthCheck an, das auf Python basiert und auch als Docker-Anwendung existiert. Praxiserfahrungen und Beispiele aus der täglichen Anwendung werden in diesem Vortrag vorgestellt. Sind meine Geodatendienste erreichbar und fehlerfrei? Diese Frage möchte man immer mit „Ja“ beantworten. Für das unabhängige Monitoring bietet sich GeoHealthCheck an, das auf Python basiert und auch als Docker-Container verfügbar ist. In diesem Vortrag werden die Vorteile und auch die noch bestehenden Probleme bei der Verwendung von GeoHealthCheck vorgestellt. Für den täglichen Einsatz gibt es einige Punkte zu beachten, auf die näher eingegangen wird. Durch eigene Anpassungen konnte GeoHealthCheck auf die eigenen Bedürfnisse angepasst werden. Darüber hinaus wird die Oberfläche anhand von Praxisbeispielen kurz erläutert. Zudem werden Empfehlungen zur Systemarchitektur gegeben, an welcher Stelle GeoHealthCheck untergebracht werden sollte und welche Serverkonfiguration notwendig ist. about this event: https://pretalx.com/fossgis2024/talk/GPBPLF/

Abschlussveranstaltung (fossgis2024)

Fri, 22 Mar 2024 15:45:00 +0100

Drei spannende Konferenztage gehen zu Ende. Ein gemeinsamer Abschluss soll erfolgen mit Rückblick auf die Konferenz und das Erlebte. Natürlich auch mit einem Ausblick auf kommende Veranstaltungen und die Konfernz im Jahr 2025. Drei spannende Konferenztage gehen zu Ende. Ein gemeinsamer Abschluss soll erfolgen mit Rückblick auf die Konferenz und das Erlebte. Natürlich auch mit einem Ausblick auf kommende Veranstaltungen und die Konfernz im Jahr 2025. about this event: https://pretalx.com/fossgis2024/talk/S7NNAN/

Jetzt Neu: Event Driven Enterprise Data Cloud API! (fossgis2024)

Fri, 22 Mar 2024 09:40:00 +0100

Jetzt Neu: Event Driven Enterprise Data Cloud API! Zu Risiken und Nebenwirkungen fragen Sie Ihren DevTestSecDingsOps oder Cloud Anbieter. Muss wirklich alles sofort in die Enterprise Cloud und als Event über API Listener konfiguriert werden? Virtualisierung, Containerisierung und Orchestrierung haben die Entwicklung von Software inklusive Testen, Sicherheit und Deployment, und sogar den Betrieb in der Produktion erheblich beschleunigt. Aber ist Beschleunigung immer das primäre Ziel? Ohne entsprechendes Entwicklungs-, Sicherheits-, Test-, Deployment- und Betriebsknow-How und Personal in Union wird der Schaden nämlich nur ungleich höher ausfallen, wenn wir voll beschleunigt gegen die Wand gefahren sind. Da hilft zwischen Dev und Ops auch kein Sec. about this event: https://pretalx.com/fossgis2024/talk/TD8UN8/

Jenseits des NDVI: Hyperspektrale Fernerkundung in QGIS mit der EnMAP-Box (fossgis2024)

Fri, 22 Mar 2024 12:20:00 +0100

Die EnMAP-Box ermöglicht eine effiziente Visualisierung und Verarbeitung von multi- und hyperspektralen Rasterdaten in QGIS. Sie bietet viele neue Werkzeuge zur Visualisierung von Rasterdaten und über 150 Algorithmen, mit denen sich umfangreiche Analyse-Workflows, etwa zur Abschätzung biophysikalischer Variablen, erstellen lassen. Wir stellen die EnMAP-Box vor, zeigen ihre neuesten Features und geben einen Ausblick auf die weiteren Entwicklungsschritte. Dank Erdbeobachtungsmissionen wie EnMAP und PRISMA sind hyperspektrale Rasterdaten inzwischen kostenfrei, für große Gebiete und verschiedene Aufnahmezeitpunkte verfügbar. Ihre Nutzung stellt allerdings viele Anwender*innen vor Herausforderungen: Herkömmliche GIS- und Fernerkundungssoftware ist oft wenig geeignet für einen effizienten Umgang mit Hyperspektraldaten, die oft über 200 Wellenlängen in teils hoch-korrelierten Kanälen abbilden. Zudem bieten sie meist auch keine Möglichkeit, die zu den Rasterdaten gehörigen Metadaten in Wert zu setzen. Dies ändert sich mit der EnMAP-Box. Sie ergänzt QGIS um essenzielle Fähigkeiten zur Analyse und Auswertung hyperspektraler Rasterdaten, etwa Nutzung beiliegender Wellenlängeninformationen zur schnellen Visualisierung geeigneter Kanalkombinationen, oder das Lesen, Erstellen und Schreiben von Spektralbibliotheken. Die EnMAP-Box ergänzt das QGIS Processing Framework um mehr als 150 Algorithmen, die einen einfachen Zugang zu state-of-the-art Methoden aus dem Bereich des Maschinellen Lernens bieten. Damit lassen sich umfangreiche Workflows zur automatisierten Prozessierung von Fernerkundungsdaten realisieren, etwa um Landnutzungsklassifizierungen oder Karten von biophysikalischen Variablen zu erhalten. Mittlerweile wird die EnMAP-Box in zahlreichen Forschungseinrichtungen wie auch in der Privatwirtschaft genutzt. Unser Vortrag zeigt, wie leicht sich mit der EnMAP-Box nicht nur EnMAP und PRISMA, sondern auch Landsat und Sentinel-2 Daten verwenden lassen. Wir stellen ihre neuesten Fähigkeiten vor, etwa aus dem Bereich „Deep-Learning“, und geben einen Überblick über die bis Ende 2026 geplante Entwicklung. about this event: https://pretalx.com/fossgis2024/talk/RPUBQR/

Und immer wieder Lizenz(in)kompatibilitäten (fossgis2024)

Fri, 22 Mar 2024 11:10:00 +0100

Der Vortrag beschäftigt sich mit der Frage von Lizenz(in)kompatibilitäten der Open Database License zur Lizenz Creative Commons Namensnennung (CC-BY 4.0) und zur Datenlizenz Deutschland Namensnennung 2.0 und legt noch einmal dar, worauf im Vorfeld einer Nutzung entsprechend lizenzierter Datensätze im OpenStreetMap Projekt zu achten ist. Die Open Database License (ODbL) ist die Lizenz, unter der OpenStreetMap seine Daten lizenziert. Als virale Lizenz enthält die ODbL Bedingungen. Unter anderem müssen Angaben zum Ursprung/Quelle der Daten gemacht werden und die Daten unterliegen einem copyleft. Beides führt zu potentiellen Lizenz(in)kompatibilitäten mit abweichend lizenzierten Datensätzen. Im Anschluss an den Vortrag aus dem Jahre 2022 wird noch einmal Rückschau auf die Kompatibilitätsfragen im Hinblick auf die Datenlizenz Deutschland Namensnennung 2.0 gehalten und ein Ausblick auf die Creative Commons Namensnennung (CC-BY 4.0) genommen. Die CC BY 4.0 zeichnet sich als künftige Lizenz für Verwaltungsdaten durch ihre Erwähnung in der in der "EU-Durchführungsverordnung zur Festlegung bestimmter hochwertiger Datensätze und der Modalitäten ihrer Veröffentlichung und Weiterverwendung" (HVD-VO) als künftige Lizenz ab. Damit stellt sich die Frage nach der Lösung von Lizenz(in)kompatibilitäten erneut. Der Vortrag gibt Antworten. about this event: https://pretalx.com/fossgis2024/talk/QHQQA9/

Transformationspotenziale großflächiger Parkplätze für den nachhaltigen Stadtumbau (fossgis2024)

Fri, 22 Mar 2024 09:00:00 +0100

Angesichts der Anforderungen an einen nachhaltigen zukunftsweisenden Stadtumbau werden im Rahmen des Forschungsprojekts Transformationspotenziale großflächiger Parkplätze untersucht. Dafür werden diese Flächen unter der Nutzung von Open Data und Open-Source-GIS-Software methodisch erfasst, klassifiziert und bewertet sowie Transformationspotenziale aufgezeigt. Zusätzlich verdeutlichen Best-Practice-Beispiele, wie die Transformation großflächiger Parkplätze gelingen kann. Der ruhende Verkehr beansprucht einen großen Teil der Flächen im städtischen, suburbanen, aber auch ländlichen Raum. Gleichzeitig besteht ein hoher Flächenbedarf für verschiedene städtische Funktionen und die Herausforderung, im Zuge der Klimaanpassung Flächen zu entsiegeln. Vor diesem Hintergrund sowie im Rahmen des nachhaltigen Stadtumbaus werden in einem Forschungsprojekt im Auftrag des Bundesministeriums für Wohnen, Stadtentwicklung und Bauen (BMWSB) und des Bundesinstituts für Bau-, Stadt- und Raumforschung (BBSR) Transformationspotenziale großflächiger Parkplätze untersucht. Dafür werden diese Flächen erstmalig systematisch erfasst, klassifiziert und bewertet. Die Entwicklung einer innovativen Methodik zur Ermittlung möglicher Transformationspotenziale großflächiger Parkplätze erfolgt anhand von drei Modellstädten und unter der Nutzung von Open Data. Für die Erfassung und Attribuierung der Parkplatzflächen werden Daten aus dem Amtlichen Liegenschaftskatasterinformationssystems (ALKIS), OpenStreetMap (OSM) und Digitalen Orthophotos (DOPs) zusammengeführt. Zusätzlich findet eine Klassifizierung der Oberfläche und die Erkennung von Bäumen durch Bildverarbeitungstechnologien und maschinelles Lernen mittels Open Source GIS Software statt. Dies ermöglicht die Ableitung weiterer Parkplatz-Eigenschaften, wie bspw. des Versiegelungsgrads oder der Unterscheidung von hoher und niedriger Vegetation auf Parkplatzflächen. Solche Eigenschaften spielen im Hinblick auf ökonomische und ökologische Determinanten einer Transformation eine wichtige Rolle. Neben der Erfassung und Klassifizierung großflächiger Parkplatzflächen wird eine Kategorisierung zur systematischen Einordnung und qualitativen Bewertung großflächiger Parkplätze in unterschiedlichen städtebaulichen Zusammenhängen angestrebt. Zeitgleich verdeutlichen Best-Practice-Beispiele, wie die Transformation solcher Flächen gelingen kann und unter welchen Bedingungen diese Transformationen auch andernorts umgesetzt werden können. Konkrete Beispiele von bereits umgesetzten Lösungsansätzen werden dafür veranschaulicht, eingeordnet und bewertet, um Akteuren aus Politik und Stadtentwicklung fundierte Unterstützung für mögliche Umsetzungen zu liefern. about this event: https://pretalx.com/fossgis2024/talk/SJRPCR/

Agiles Forschungsdatenmanagement mit LinkAhead (fossgis2024)

Fri, 22 Mar 2024 10:15:00 +0100

In diesem Lightning Talk stellen wir LinkAhead vor, eine unter AGPL lizensierte Datenmanagementsoftware. Sie verfolgt einen flexiblen Ansatz in Sachen Datenmodell und arbeitet im Baukastenprinzip - die Software lässt sich an jede gewachsene Datenumgebung im Nachhinein anpassen. Dabei bleiben bestehende Workflows bestehen - Nutzer:innen können weiter arbeiten wie bisher und machen ihre Daten dabei nachvoll- und reproduzierbar. Rechte-, User- und Versionsmanagement inklusive. Daten - Schlagwort in aller Munde. Viele Stellen in Verwaltung als auch Forschung erzeugen Daten - auf die unterschiedlichsten Art und Weisen, teilweise schon seit Jahrzehnten. Was, wenn Sie all diese Daten verknüpfen, reproduzieren, durchsuchbar machen, und vieles mehr könnten, und das automatisiert und auf einem auf Ihre Bedürfnisse zugeschnittenem Datenmodell? LinkAhead stammt aus der Forschung unserer Gründungsmitglieder am Max-Planck-Institut für Dynamik und Selbstorganisation in Göttingen. Auch hier stellte sich die Frage: Wie können wir all diese Daten, die am Institut schon vorliegen, für weitere Forschung nutzbar gemacht werden? Wie kann ich bessere Einblicke generieren, Daten besser suchen, Datenflüsse besser automatisieren? Das Resultat ist die Veröffentlichung der Software als Open Source Projekt, das heute an vielen Stellen in Deutschland genutzt wird. about this event: https://pretalx.com/fossgis2024/talk/AH7PWD/

Workflow zur Erstellung von Trainingsdaten für die KI-Gebäudeerkennung (fossgis2024)

Fri, 22 Mar 2024 11:45:00 +0100

Für die KI-Gebäudeerkennung in Luftbildern wird eine große Menge Trainingsdaten benötigt. In der Landesvermessung Niedersachsen (LGLN) wurde dafür ein Workflow unter Verwendung verschiedener Open Source Tools entwickelt. Damit soll der manuelle Aufwand bei der Erstellung der Trainingsdaten möglichst minimiert werden und ein qualitativ hochwertiger Datensatz mit hoher räumlicher Abdeckung entstehen, der die Variabilität der Gebäude in Niedersachsen ausreichend abbildet. Als DecSecOps-Team des Landesamtes für Geoinformation und Landesvermessung Niedersachsen (LGLN) entwickeln wir eine Anwendung zur „KI-Gebäudeerkennung“ in Luftbildern. Das Ziel dieser Anwendung ist es, Änderungen in den Gebäudedaten im Amtlichen Liegenschaftskataster-Informationssystem (ALKIS) mit Hilfe von KI-detektierten Hausumringen zu finden. Zum Trainieren der KI-Modelle werden Trainingsdaten aus Niedersachsen verwendet. Diese Trainingsdaten bestehen aus 4-Kanal-Orthophotos (DOP) und normalisierten Oberflächenmodellen (nDOM), sowie Hausumringen als sogenannte „Labels“. Eine manuelle Erstellung und Korrektur dieser Labels ist sehr aufwendig. Aus diesem Grund wurde ein Workflow entwickelt, der aus mehreren Schritten besteht und bereits vorhandene Daten nutzt. Er ermöglicht es Daten in ausgewählten, repräsentativen Bereichen passend zum jeweiligen Luftbild zu editieren. Als Grundlage für diese Labels werden dabei die Gebäude aus ALKIS verwendet. Dies beruht auf der Annahme, dass der Gebäudebestand in den ALKIS-Daten von Niedersachsen größtenteils korrekt ist. Durch eine interaktive Web-GIS-Anwendung in einem Jupyter-Notebook lassen sich mit wenigen Mausklicks Bereiche der Luftbilder anzeigen und mit den vorhandenen ALKIS-Daten überlagern. Somit können die Daten schnell gesichtet und Bereiche identifiziert werden, wo die Gebäude aus ALKIS und das jeweilige Luftbild bereits gut zusammen passen. Diese Bereiche sind 400×400 m bzw. 2000×2000 Pixel groß. Wir bezeichnen sie als „Trainings-Patches“. Die Metadaten dieser „Trainings-Patches“ werden in einer Datenbank gesammelt und bilden einen Pool von möglichen Trainingsdaten. Teilweise passen die ALKIS-Gebäude nicht zum Luftbild: Es kommt vor, dass Neubauten oder Abrisse noch nicht erfasst sind oder Gebäude bzw. Teile von Gebäuden durch Vegetation verdeckt sind. Damit für das KI-Training nur Labels zum Einsatz kommen, die zu den Luftbildern passen, ist es erforderlich, die vorhandenen Gebäudeumringe zu bearbeiten. Dazu nutzen wir QGIS und die darin vorhandenen Möglichkeiten zum Editieren von Polygonen. Diese Aufgabe ist der aufwendigste Teil des Workflows und wird von einem „Label-Team“ im LGLN durchgeführt. Die Herausforderung besteht hier darin, die Daten der „Trainings-Patches“, bestehend aus Bildausschnitt im Luftbild bzw. nDOM sowie den zu editierenden ALKIS-Polygonen in den QGIS-Client der bearbeitenden Person zu laden. Die visuelle Kontrolle der Daten und die Bearbeitung der Polygone kann auch offline erfolgen. Nach der manuellen Bearbeitung der Polygone müssen die Daten in eine Datenbank geschrieben werden. Dafür wurde ein auf FastAPI-basierender Microservice gebaut, der die Datenbereitstellung und Kommunikation zwischen QGIS-Client und Datenbank durchführt. In dieser Demo wird der beschriebene Workflow für die Trainingsdaten-Erstellung vorgestellt und die verwendeten Open Source Tools mit ihren interaktiven GIS-Funktionalitäten demonstriert. about this event: https://pretalx.com/fossgis2024/talk/7S3JKU/

Geodateninfrastruktur: Step by step von proprietärer zu offener Software (fossgis2024)

Fri, 22 Mar 2024 09:35:00 +0100

Das KRZN stellt den Kommunen am Niederrhein eine kommunale Geodateninfrastruktur (GDI) bereit und entwickelt diese kontinuierlich weiter. Seit einiger Zeit kommen vermehrt OpenSource-Verfahren zum Einsatz. Wenngleich diverse Hindernisse den Einsatz von (mehr) OpenSource aktuell noch erschweren oder gar verhindern, bestärken eine Reihe von Erfolgsgeschichten das KRZN, den Weg in Richtung OpenSource im GDI-Kontext in Zusammenarbeit mit kommunalen Akteuren:innen weiterzugehen. Das Kommunale Rechenzentrum Niederrhein (KRZN) stellt seit 2005 für 43 Kommunen und aktuell über 3.500 berechtigte Nutzer:innen in den Kommunalverwaltungen am Niederrhein eine kommunale Geodateninfrastruktur (GDI) bereit und entwickelt diese seitdem kontinuierlich weiter. Bestand die GDI zu Beginn aus einem DesktopGIS für die Datenerfassung und -analyse, einem WebGIS für die Beauskunftung, einer rechtsverbindlichen Liegenschaftskatasterauskunft (auf Basis von ALB und ALK) und einem zentralen GeoDataWarehouse für die Datenhaltung, kommen heute über 35 GIS-Verfahren zum Einsatz - von Fachverfahren für die Pflege von Kanal- und Baumkatastern, einer ALKIS-Verfahrenslösung in all ihren Facetten über ETL-Werkzeuge und Verfahren zur Bereitstellung von OGC-Geoservices bis hin zu Geoportalen und einem Geokatalog. Bis 2018 basierte die GDI ausschließlich auf proprietärer Software. Mit Einführung von deegree, einhergehend mit der Ablösung der bis dato eingesetzten Software für die Bereitstellung von Geoservices, sowie der Bereitstellung des Geoportal Niederrhein auf Basis des Masterportals wurde im Dezember 2019 der erste Meilenstein zur Nutzung von OpenSource-Software gesetzt. Mit der Vereinbarung in einem GDI-Verbandsgremium der nächste Meilenstein: Alle neuen GDI-Verfahren müssen OGC-Standards zwingend unterstützen, bestehende Verfahren müssen diesbezüglich ertüchtigt werden, insofern erforderlich. Es folgten weiteren OpenSource-Verfahren, beispielsweise zur Bereitstellung und Verwaltung von OGC-Geoservices, Werkzeuge zur Bereitstellung eines OpenStreetMap-WMS oder für Management und Bereitstellung von XPlanung-Daten sowie die Bereitstellung eines Geokataloges. Zudem wird PostgreSQL immer häufiger als Datenbanksystem eingesetzt. Alle Verfahren wurden vollständig in die GDI integriert, entweder als Erweiterung, Alternative oder Ersatz für proprietäre Software. Von zentraler Bedeutung ist die Kommunikation über Schnittstellen - i.d.R. Standards des OGC - mit den vorhandenen GDI-Bausteinen. Neben vielen Erfolgsgeschichten gab es jedoch auch Ernüchterung. So wird seit 2021 auch QGIS als DesktopGIS eingesetzt. Jedoch ohne Anbindung an das zentrale GeoDataWarehouse. Neben technischen Gründen ist das Fehlen eines zentralen Berechtigungsverfahrens (auf weit über 20.000 Objektklassen) ein Grund für die nicht erfolgte Anbindung. Die Praxis zeigt jedoch, im Zusammenspiel von QGIS und OGC-Geoservices kann dennoch viel erreicht werden. Neben der rein technischen Sicht ist die stetige Kommunikation aller betroffenen Akteure:innen für den Erfolg einer GDI unabdingbar. OpenSource kann sowohl Kommunikation als auch das GDI-Management unterstützen. Verfahren für Wikis, Dashboards und Kanban seien als Beispiele genannt. Der Vortrag soll aufzeigen, • wie das KRZN die vorhandene GDI Schritt für Schritt durch (mehr) OpenSource-Anwendungen „modernisiert“, • wo es Hindernisse für den Umstieg auf OpenSource-Verfahren gibt und • warum der große Wurf – Umstieg auf 100%-OpenSource – eine immense Herausforderung ist (und womöglich auch nicht umsetzbar sein wird). about this event: https://pretalx.com/fossgis2024/talk/LMFGWP/

OSM-Beratungsstelle beim FOSSGIS e.V. (fossgis2024)

Fri, 22 Mar 2024 14:15:00 +0100

Der FOSSGIS e.V. ist als Local Chapter der OpenStreetMap Foundation offizieller Ansprechpartner zu OSM-Fragen in Deutschland. Im November 2023 hat der FOSSGIS e.V. eine bezahlte Stelle für einen OSM-Berater eingerichtet, über deren Arbeit in diesem Vortrag berichtet werden soll. Der FOSSGIS e.V. ist als Local Chapter der OpenStreetMap Foundation offizieller Ansprechpartner zu OSM-Fragen in Deutschland. Im November 2023 hat der FOSSGIS e.V. eine bezahlte Stelle für einen OSM-Berater eingerichtet. Die Stelle soll dabei als Ansprechpartner sowohl für Nutzende als auch Beitragende fungieren. Sie soll wo nötig bei Außenstehenden die “OSM-Prinzipien” und die Funktionsweise der vielfältigen OSM-Community erklären, bei Nutzungskonflikten vermitteln und ggf. Kontakte zu lokal Beitragenden herstellen. Im Vortrag wird über die Arbeit der ersten Monate berichtet. about this event: https://pretalx.com/fossgis2024/talk/AYQ89S/

Flagstack: Ein OpenSource-Ansatz für internationale Geocaching Communities (fossgis2024)

Fri, 22 Mar 2024 10:25:00 +0100

FLAGSTACK ist ein internationales GPS-basiertes Handy- und Tabletspiel, das Schnitzeljagd und Geocaching vereint. Nun soll das for-profit Modell in ein offenes, von der Community getragenes Modell umgestellt werden. FLAGSTACK ist ein internationales GPS-basiertes Handy- und Tabletspiel, das Schnitzeljagd und Geocaching vereint. Dabei werden virtuelle Items auf der Landkarte über feste GPS-Koordinaten gesucht. Sobald sich Spielende diesen Koordinaten nähern, können die Items eingesammelt und virtuelle Punkte gutgeschrieben werden. Das Spiel wurde jahrelang durch eine GmbH betreut und vor Kurzem zur Open Education and Software Association e.V. (OESA) migriert, um die Software in ein quelloffenes Projekt zu transformieren, das aktiv von der engagierten Community mitgestaltet wird. Zukünftig sollen bestehende APIs schrittweise durch offene Alternativen ersetzt werden und eine vereinsgestützte Community-Arbeit etabliert werden. Wir freuen uns über Kontaktaufnahmen mit Ideen, Austauschmöglichkeiten und Kooperationen im Rahmen von FLAGSTACK unter info@flagstack.net! about this event: https://pretalx.com/fossgis2024/talk/89VYJF/

GeoMapFish: Neues aus dem vielseitigem Open-Source-WebGIS (fossgis2024)

Fri, 22 Mar 2024 12:20:00 +0100

In diesem Vortrag möchten wir die neuen Entwicklungen der Open Source WebGIS-Plattform GeoMapFish vorstellen. Zusätzlich geben wir spannende Einblicke in den operativen Betrieb von WebGIS in verschiedenen Kubernetes-basierten Infrastrukturen. GeoMapFish ist eine Open-Source Plattform für die Entwicklung von webbasierten geografischen Informationssystemen (WebGIS). Die Plattform ist reich an Funktionalitäten, hochgradig anpassbar und bietet mehrere Schnittstellen: Desktop, Mobile, Administration und eine API für die Integration von Karten in Drittanwendungen. Basierend auf den OGC-Standards (WMS, WFS) ermöglicht eine GeoMapFish-Anwendung die Übertragung von Geodaten in Form von Diensten für Desktop-Clients oder andere Web-Clients. GeoMapFish wurde zuletzt 2021 an der FOSSGIS vorgestellt, damals mit Schwerpunkt auf dem Release 2.6 sowie der Verwendung von QGIS als Baustein einer GeoMapFish-Plattform. An der FOSSGIS 2024 möchten wir die Neuigkeiten aus den Releases 2.7 und 2.8 vorstellen, sowie unsere Erfahrungen aus dem produktiven Betrieb von GeoMapFish-basierten Geoportalen in verschiedenen Kubernetes-Clustern teilen. about this event: https://pretalx.com/fossgis2024/talk/EFMWJG/

Ein Plugin mit direktem Zugang zu den Ressourcen aus dem QGIS Hub (fossgis2024)

Fri, 22 Mar 2024 09:35:00 +0100

Mit dem QGIS Hub Plugin stellen wir einen neuen Plugin vor, der es Nutzern ermöglicht, die stetig wachsenden Ressourcen aus dem Hub direkt aus QGIS heraus zu erkunden und in ihr jeweiliges Projekt einzubinden. In diesem Vortrag stellen wir das QGIS Hub Plugin vor, ein effektives Werkzeug, das das Teilen und die gemeinsame Nutzung von QGIS-Ressourcen erleichtert. Das Plugin bietet QGIS Nutzern einen direkten Zugang zur wachsenden Hub-Plattform (https://plugins.qgis.org/styles/), einer Plattform zum Suchen und Herunterladen einer Vielzahl von Ressourcen, wie z. B. Layer-Definitionen, Styles, Prozessierungs-Modellen, Projekten und 3D-Modellen. Das QGIS Hub Plugin ermöglicht mit Hilfe einer intuitiven Benutzeroberfläche die Ressourcen der Community noch direkter und schneller zu erkunden. Die Suche nach den benötigten Materialien wird durch das benutzerfreundliche Layout und diversen Filtermöglichkeiten erleichtert. Mit dem QGIS Hub Plugin wird das Ziel verfolgt, die wertvollen Ressourcen aus dem Hub möglichst vielen Nutzern zugänglich zu machen, deren Produktivität zu steigern, Kreativität zu fördern und letztendlich die Qualität individueller QGIS Projekte zu verbessern. about this event: https://pretalx.com/fossgis2024/talk/VBCRNY/

Wie vollständig sind die Daten bei OpenStreetMap? (fossgis2024)

Fri, 22 Mar 2024 11:10:00 +0100

Die Daten von OpenStreetMap gelten in Mitteleuropa als sehr vollständig und gut gepflegt – aber ist das auch wirklich so? Anhand von wie Beispielen Postleitzahlengebiete, Adressen und Kilometerangaben an Bahnstrecken wird genauer betrachtet, welche Daten von OpenStreetMap sich gut oder besser nicht in Projekten praktisch verwenden lassen. Die Daten von OpenStreetMap gelten in Mitteleuropa als sehr vollständig und gut gepflegt – aber ist das auch wirklich so? Anhand von wie Beispielen Postleitzahlengebiete, Adressen und Kilometerangaben an Bahnstrecken wird genauer betrachtet, welche Daten von OpenStreetMap sich gut oder besser nicht in Projekten praktisch verwenden lassen. Amtliche Geodaten lassen sich zum Vergleich heranziehen, können aber auch nicht als Referenzdatensatz betrachtet werden, da es dort ebenfalls Lücken und Fehler gibt. Dennoch gibt es hier auch Synergien, da OpenData auch merklich dazu beigetragen hat, Lücken in einigen Themen bei OpenStreetMap zu schließen. about this event: https://pretalx.com/fossgis2024/talk/JYS3PY/

Klicke hier... (Ausdrücke und) Aktionen in QGIS Eingabemasken (fossgis2024)

Fri, 22 Mar 2024 10:20:00 +0100

about this event: https://pretalx.com/fossgis2024/talk/TULK8X/

OSM Mapathon auf der Konferenz der GeodäsieStudierenden (fossgis2024)

Fri, 22 Mar 2024 09:05:00 +0100

Open Data und Open Source Software (z.B. Open Street Map und QGIS) gewinnt im Geodäsie-Studium stetig an Bedeutung. Zum Vergrößern dieses Datenspeichers werden immer öfter Mapathons veranstaltet, z.B. über “Missing Maps”. Dieser Lightning Talk gibt einen kurzen Einblick in die Mapathons der KonGeoS Karlsruhe und Oldenburg (beide 2023). Der Vortrag soll zudem zur Diskussion anregen, wie die OSM-Community und die KonGeoS zukünftig enger zusammenarbeiten können. Open Data und Open Source Software gewinnt im Geodäsie-Studium stetig an Bedeutung. Auch die öffentliche Verwaltung, wie z.B. das Bundesamt für Kartographie und Geodäsie (BKG), stellt seine Daten immer häufiger über das Internet als Open Data zur Verfügung. Open Street Map (OSM) und QGIS stellen hierbei bspw. ein großes Potential als kostenfreier Community-basierter Knowledge Bases und Datenspeicher bzw. in GIS-Analysetools dar. Zum Vergrößern dieses Wissens- und Datenspeichers werden immer öfter Mapathons veranstaltet, z.B. über “Missing Maps”, bei der sich Leute digital versammeln, um Daten zu OSM hinzuzufügen. Diese Daten werden unter anderem Hilfsorganisationen zur Verfügung gestellt um nach humanitären Katastrophen (z.B. Erdbeben) besser unterstützen zu können. Die KonGeoS ist die Konferenz der Geodäsiestudierenden von 22 deutschsprachigen Hochschulen (D-A-CH) und dient als Interessensvertretung der Geodäsie-Studierenden. Ziel der KonGeoS ist die Vernetzung der Studierenden, untereinander sowie mit wichtigen Unternehmen und Verbänden im Bereich der Geodäsie. Die Hauptwirkung der KonGeoS entfaltet sich auf ihren Treffen einmal im Semester, auf denen neben Fachexkursionen, Fachvorträgen, in unterschiedlichen Arbeitsgruppen aktuelle Themen behandelt werden. Eine dieser Arbeitsgruppen ist seit zwei Treffen ein OSM Mapathon. Dieser Lightning Talk gibt einen kurzen Einblick in die Mapathons der KonGeoS Karlsruhe und Oldenburg (beide 2023), insbesondere in Projekte mit den Nummern 14315 (Missing Maps - Earthquake Syria, Recovery Phase, Al-Atarib District (Rural)) und 15478 (Earthquake in Morocco (Project 5)). Insgesamt wurden ca. 1700 Gebäude und Straßen von 50 Teilnehmenden innerhalb von ca. 2 Stunden in Karlsruhe bzw. ca. 1600 Gebäude und Straßen von 30 Teilnehmenden während der KonGeoS Oldenburg digitalisiert. Der Vortrag soll zudem zur Diskussion anregen, wie die OSM Community und die KonGeoS zukünftig enger zusammenarbeiten können und somit auch der geodätische Nachwuchs an die Nutzung (sowie das Mapping) freier Geodaten - insbesondere OSM - herangeführt werden kann. about this event: https://pretalx.com/fossgis2024/talk/SGMSDZ/

EOC Geoservice - Datensätze und Services (fossgis2024)

Fri, 22 Mar 2024 11:10:00 +0100

In diesem Vortrag soll ein Überblick über den EOC Geoservice gegeben werden. Ein Schwerpunkt wird auf den zur Verfügung gestellten Datensätzen und den Services / Schnittstellen liegen. Bei den Schnittstellen wird verstärkt auf STAC ( Spatial Temporal Asset Catalog ) eingegangen, um Filter- und Analysemöglichkeiten (z.B. anhand eines JupyterNotebooks) aufzuzeigen. Der EOC Geoservice wird vom Earth Observation Center (EOC) des Deutschen Zentrums für Luft- und Raumfahrt (DLR) betrieben und bietet Dienste zur Entdeckung, Visualisierung und zum direkten Download einer Vielzahl von Erdbeobachtungsdaten (EO), welche von nationalen und internationalen EO-Missionen stammen. Der Zugriff auf die Daten ist über OGC konforme Schnittstellen möglich. In diesem Vortrag soll ein Überblick über den EOC Geoservice gegeben werden. Ein Schwerpunkt wird auf den zur Verfügung gestellten Datensätzen und den Services / Schnittstellen liegen. Bei den Schnittstellen wird verstärkt auf STAC ( Spatial Temporal Asset Catalog ) eingegangen, um Filter- und Analysemöglichkeiten (z.B. anhand eines JupyterNotebooks) aufzuzeigen. about this event: https://pretalx.com/fossgis2024/talk/FDCYRF/

osm2pgsql - OSM Daten mit PostGIS verarbeiten (fossgis2024)

Fri, 22 Mar 2024 10:10:00 +0100

Der Vortrag gibt einen Überblick über das Tool osm2pgsql, mit dem OpenStreetMap-Daten in eine PostgreSQL/PostGIS-Datenbank importiert werden können. Dabei werden verschiedene Einsatzgebiete wie Visualisierung, Analyse, Datenprozessierung und Export einsteigerfreundlich beleuchtet. In diesem Vortrag wird osm2pgsql - ein Tool zum Import von OpenStreetMap-Daten in eine PostgreSQL/PostGIS-Datenbank - vorgestellt. Es wird auf die Installation eingegangen und ein grober Überblick über die Datenbank PostgreSQL und deren räumlicher Erweiterung PostGIS gegeben. Im Anschluss werden einige Grundfunktionen von osm2pgsql erklärt: Wie man beispielsweise Geodaten ins gewünschte Koordinatensystem umwandelt, die Namen der erstellten Tabellen konfiguriert oder Metadaten der OSM-Objekte hinzufügt. Außerdem wird gezeigt, wie man mit Hilfe des Tools "osm2pgsql-replication" automatische Updates in die Datenbank integriert und so immer auf dem neuesten Stand bleibt. Die Nutzung von Lua für den Datenimport im Flex Output-Format wird detailliert erklärt. Dadurch kann der Datenimport entsprechend individueller Anforderungen gestaltet werden. Zum Abschluss werden diverse Beispielanwendungen aufgezeigt, wie z.B. Datenanalyse, -export und die Veröffentlichung von Geodaten im Internet. Dies eröffnet zahlreiche Möglichkeiten, um osm2pgsql zur Verarbeitung und Nutzung von OpenStreetMap-Daten zu verwenden. about this event: https://pretalx.com/fossgis2024/talk/9QUB7F/

Sea-Watch, CivilMRCC and Onefleet - How to map a European Disaster (fossgis2024)

Fri, 22 Mar 2024 09:00:00 +0100

Sea-Watch rettet seit 2015 Menschen im Mittelmeer. Onefleet is ein GIS, welches bei Sea-Watch entstanden ist und jetzt im Rahmen einer Zivilen Senootretungskoordination dabei Hilft, Rettungen zu dokumentieren und koordinieren. Sea-Watch rettet seit 2015 Menschen im Mittelmeer. Onefleet is ein GIS, welches bei Sea-Watch entstanden ist und jetzt im Rahmen einer Zivilen Senootretungskoordination dabei Hilft, Rettungen zu dokumentieren und koordinieren. onefleet repository: https://gitlab.com/civilmrcc/onefleet sea-watch.org civilmrcc.eu about this event: https://pretalx.com/fossgis2024/talk/LQSXGS/

ohsomeNow: OSM-Daten in Echtzeit analysieren (fossgis2024)

Fri, 22 Mar 2024 09:00:00 +0100

Wir wollen "ohsomeNow" vorstellen und zeigen wie wir den Datenstrom, den die OSM-User minütlich produzieren, effizient analysieren und visualisieren können. Wir wollen einen kurzen Einblick in unsere Echtzeit-Streaminganwendung "ohsomeNow" geben. Im Vergleich zu unseren vergangenen Arbeiten steht hier nicht die Historie der OpenStreetMap-Daten im Vordergrund, sondern liegt der Fokus vielmehr auf dem "Jetzt". Was passiert gerade in OSM und wie können wir den Datenstrom, den die OSM-User minütlich produzieren, effizient analysieren und darstellen? Wenn die Zeit es erlaubt, würden wir im Lightning-Talk auch einen kurzen Ausblick geben, für welche Anwendungsbereiche (z.B. Vandalismus-Detektion, Statistiken für Mapathons, Routinganwendungen) die Echzeitanalyse von OSM-Änderungen nützlich sein könnte. Teile des Projektes finden sich bereits auf GitHub: - https://github.com/GIScience/ohsome-now-stats-service - https://github.com/GIScience/ohsome-now-stats-frontend about this event: https://pretalx.com/fossgis2024/talk/HGCDEH/

FOSSGIS-Jeopardy (fossgis2024)

Fri, 22 Mar 2024 14:45:00 +0100

Das FOSSGIS-Jeopardy bietet wieder spannende Fragen zu (mehr oder weniger) wissenswerten Fakten und vor allem viel Spaß für jung und alt, alt und neu. Das FOSSGIS-Jeopardy bietet wieder spannende Fragen zu (mehr oder weniger) wissenswerten Fakten und vor allem viel Spaß für jung und alt, alt und neu. Wir spielen 1-2 Runden mit jeweils maximal vier Teilnehmer/-innen bzw. Teams. Alle anderen können sich nach einem Konferenztag zurücklehnen und den Tag mit etwas Entertainment ausklingen lassen. Diesmal nicht digital, sondern mit Menschen und Technik vor Ort. Informationen zum Ablauf, zu den Preisen und zur **Anmeldung** gibt es hier. Es wird garantiert lustig, chaotisch, lehrreich, amüsant und für alle Beteiligten ein Heidenspaß. Nur keine Hemmungen! Welche Kartenprojektion ist nochmal die, wo Grönland so groß wie Afrika dargestellt wird? Was macht dieses Icon in QGIS? Was für ein Datenformat ist {"type": "Point", "coordinates": [10, 20]}? Welches Logo ist das? Wir freuen uns über Einreichungen von Fragen/Aufgaben und Sponsoring von Preisen, bitte per Mail an fossgis-jeopardy ät johanneskroeger pünktchen de melden. Danke! about this event: https://pretalx.com/fossgis2024/talk/AZHLSL/

Keine Angst vor sperrigen Ausdrücken im QGIS! (fossgis2024)

Thu, 21 Mar 2024 09:35:00 +0100

Keine Angst vor Ausdrücken im QGIS! Live geht es um: -Case und if für Bedigungen. -Mit coalesce(), concat() etc. nie mehr über NULL-Werte stolpern. -Joins mit attribute() und get_feature() simulieren. -1:N-Beziehungen und räumliche Abfragen mit aggregate() und overlay() umsetzen. -Was hat es mit diesen Arrays auf sich?. -Mit with_variable() Ausdrücke lesbar gestalten. -Geometriefunktionen in Berechnungen integrieren. -Wie helfen diese merkwürdigen regulären Ausdrücke bei regexp_..() Für Abfragen und Berechnungen gibt es im QGIS den Ausdruckseditor, der in unterschiedlichen Gestalten an den verschiedensten Stellen den Nutzern zu Diensten ist. Wer vor 12 Jahren ins QGIS einstieg, dem begenete der Ausdruckseditor als ein übersichtliches Werkzeug, mit dem im Wesentlichen Vergleiche (< > =). Grundrechenarten und Verkettungen möglich waren. Mit like ließen sich schon Platzhalter verwenden und natürlich konnten Flächen und Strecken ermittelt werden. Viel mehr gab es zunächst nicht. Heute soll schon mancher Einsteiger nach dem ersten Anblick der Funktionsvielfalt laut schreiend davon gelaufen sein. Das ist schade, denn der Ausdruckseditor bringt aussergewöhnliche Möglichkeiten mit und ist inzwischen viel mehr als ein Abfrageeditor für den einzelnen Layer. Thema der Livedemo sind Funktionen, die sehr nützlich sind, deren Einsatzzweck sich aber vielen Anwender/innen nicht sofort erschließt bzw. deren Anwendung als sperrig gilt: Case und if für bedingte Fragestellungen einsetzen, um z.B. die Schriftgröße von Ortnamen nach der Einwohnerzahl steuern. Mit coalesce(), concat() etc. nie mehr über NULL-Werte stolpern. Auf externe Layer zugreifen: TabellenJoins mit attribute() und get_feature()simulieren sowie eins zu mehrfach-Beziehungen mit aggregate() auswerten. Dynamische räumliche Abfragen mit aggregate(...intersects($geometry,@parent(geometry) und overlay() verwirklichen. Damit lassen sich z.B. Anzahl und Leistung der Windanlagen aus einem Punktlayer in den Gemeinde-Polygonen dynamisch mitführen, ohne neue Layer über die Geoverarbeitung zu produzieren . Abfragen mit aggregate() und Overlay() ergeben Felder mit vielen Werten, die Listenfelder oder Arrays. Was hat es mit diesen Arrays auf sich? Der gezielte Zugriff auf einzelne Werte ist möglich. Mit den zugehörigen Funktionen lässt sich sortieren, auswerten und für jeden einzelnen Wert, wie in einer Schleife, Berechnungen und Abfragen durchführen. Werden die Ausdrücke zu kompliziert, lassen sich Komplexe Teilausdrücke mit with_variabel() als Variable widerverwenden,so dass auch komplexe Ausdrücke lesbar bleiben. Mit den Geometriefunktionen beschränkt sich QGIS nicht auf die Flächenberechnung. Pufferflächen, Verschneidungen und viele andere Geometrieoperationen lassen sich in Berechnungen integrieren. Die Suchen mit Platzhaltern über den like-Operator und die Auswahl von Teil-Zeichenketten mit substr(), strpos() ist vielen QGIS-Nutzern ein Begriff. Auch der Umgang mit replace() ist weit verbreitet. Aber was ist, wenn like, replace(), substr() und strpos() nicht ausreichten? Da helfen diese merkwürdigen regulären Ausdrücke, die bei regexp_substr() und regexp_replace() anzuwenden sind. Damit lassen sich z.B. Straße Hausnummer und Hausnummererweiterung einfach trennen und vieles andere in Textwerten suchen und ersetzen. about this event: https://pretalx.com/fossgis2024/talk/RPPD8V/

User-Analyse mit der Overpass API: Zwischen Vandalismus-Verfolgung und Stalking (fossgis2024)

Thu, 21 Mar 2024 16:45:00 +0100

Erstmals im Jahr 2023 haben große Zahlen neuer Userkonten haben große Mengen Daten in OpenStreetMap in Kriegsgebieten kaputt editiert. Vorher hatte es nur Streit zwischen einzelnen Mappern oder gut gemeinte missglückte Massendits gegeben. Bisher hat die Overpass API ihre Funktionalität daran orientiert, unbeherrschten Mappern keinesfalls Werkzeuge für Massenedits anzubieten. Exisiterende Möglichkeiten gegen Vandalismus werden gezeigt und zukünftige Features der Overpass API erwogen. Im Jahr 2023 ist die OpenStreetMap-Datenbank erstmals heimgesucht worden von organisiertem Vandalismus: sowohl am Rande des Ukraine-Krieges als auch der Gazastreifen-Kämpfe haben große Zahlen neuer Userkonten große Mengen Bestandsdaten kaputt editiert, und die Beseitigung des Vandalismus hat anschließend länger gedauert als deren Verursachung. Im Gegensatz dazu hat es bisher vor allem Konflikte zwischen einzelnen Mappern um Details gegeben sowie gelegentlich wohlmeinde missglückte Massenedits und Importe. Das stellt die bisherige Politik infrage, die Funktionalität der Overpass API daran zu orientieren, unbeherrschten Mappern keinesfalls Werkzeuge für Massenedits anzubieten. Es wird gezeigt, welche Möglichkeiten gegen Vandalismus es ohnehin schon gibt und abgewogen, wo zukünftige Features der Overpass API sinnvoll sein könnten. about this event: https://pretalx.com/fossgis2024/talk/Z9ES88/

QGIS Web Client 2 (QWC2) - Neues aus dem Projekt (fossgis2024)

Thu, 21 Mar 2024 17:20:00 +0100

Dieser Vortrag stellt den QWC2 vor und zeigt, wie einfach es ist, eigene QGIS-Projekte im Web zu veröffentlichen. Es wird ein Überblick über die QWC2-Architektur gegeben. Dabei ist es auch eine Gelegenheit, die letzten neuen Funktionen, die im letzten Jahr entwickelt wurden, und die Ideen für zukünftige Verbesserungen zu entdecken. QWC2 (QGIS Web Client 2) ist die offizielle Webanwendung des QGIS Projektes. Es ermöglicht Ihnen, dank des QGIS Server, ihre Projekte mit demselben Rendering wie QGIS Desktop im Internet zu veröffentlichen. Die Umgebung besteht aus einem modernen responsiven Frontend, das in JavaScript auf Basis von ReactJS und OpenLayers geschrieben wurde, und mehreren serverseitigen Python/Flask-Microservices, die die Grundfunktionalitäten von QWC2 und QGIS Server erweitern. QWC2 ist modular und erweiterbar und bietet sowohl eine Standard-Webanwendung als auch ein Entwicklungs-Framework. Sie können einfach und leicht mit der Demo-Anwendung beginnen und dann Ihre Anwendung nach Belieben anpassen, je nach Ihren Bedürfnissen und Entwicklungsfähigkeiten. about this event: https://pretalx.com/fossgis2024/talk/CZUHAB/

Masterportal 3.0 – Entdecke die Magie des neuen Major Release! (fossgis2024)

Thu, 21 Mar 2024 09:00:00 +0100

Der WebGIS Client Masterportal wurde umfassend modernisiert und ist jetzt in der neuen Major Version 3.0 verfügbar. Im Rahmen des Vortrags werden die Highlights der neuen Produkt-Generation vorgestellt. Der unter MIT Lizenz veröffentlichte WebGIS Client Masterportal stellt eine leistungsstarke, individuell anpassbare Open Source Lösung zur Visualisierung von Geodaten dar. Das Masterportal wird erfolgreich von vielen Institutionen der öffentlichen Verwaltung auf Bundes-, Landes- und kommunaler Ebene sowie von Rechenzentren und Stadtwerken deutschlandweit und im europäischen Ausland eingesetzt. Es wird durch eine Open-Source-Community und eine starke Allianz von Implementierungspartnern kontinuierlich weiterentwickelt und ist auf dem Weg, ein OSGeo Projekt zu werden. Mit dem Masterportal V. 3.0 steht nun eine aktualisierte Major-Version zur Verfügung, die zahlreiche Verbesserungen mit sich bringt, u. a. folgende Highlights: • neu gestaltete und intuitivere Benutzeroberfläche • verbessertes UI / UX auf mobilen Endgeräten • höhere Performance Im Rahmen des Vortrags werden der aktuelle Projektstatus und die Neuerungen erläutert. Darüber hinaus wird ein Ausblick auf die zukünftige Entwicklung und die geplante Long Term Support Version des Masterportals gegeben. about this event: https://pretalx.com/fossgis2024/talk/R8MYNT/

Monitoring von Waldgebieten mit Hilfe von Sentinel-2 abgeleiteten Vegetationsindizes (fossgis2024)

Wed, 20 Mar 2024 17:05:00 +0100

Innerhalb des Projektes werden Sentinel-2 L2A-Szenen über Irland ausgewählt. Für diese Szenen wurden zwei Vegetationsindizes berechnet, sowie mittels zonaler Statistiken der Median dieser Vegetationsindizes pro Waldgebiet. Für die automatische Waldüberwachung wurden die Veränderungen der Indizes berechnet, sowie starke Veränderungen (z.B. durch Waldrodungen) mittels eines Grenzwerts als solche gekennzeichnet. Die umfangreichen Sentinel-Archive bieten ein enormes Potenzial für die automatische Waldüberwachung. Dieses Potenzial werden innerhalb eines längerfristigen Projektes für das irische staatliche Forstwirtschaftsunternehmen Coillte analysiert. Für die Prozessierung werden Sentinel-2 (L2A) Szenen über Irland auf zunächst vierteljährlicher Basis (Zeitraum anpassbar) ausgewählt. Dabei wird die Wolkenbedeckung bei der Auswahl der Szenen berücksichtigt. Innerhalb der Machbarkeitsstudie war der Analyse-zeitraum auf Juli 2022 bis März 2023 beschränkt, im weiteren Projektverlauf wird dies auf weitere zurückliegende Jahre ausgedehnt sowie in der Zukunft quartalsweise betrachtet. Für die jeweiligen Szenen (eine pro Quartal) werden zwei Vegetationsindizes berechnet: der Normalized Difference Vegetation Index (NDVI) und der Enhanced Vegetation Index (EVI). Pro Waldgebiet wird dann mittels zonaler Statistiken der NDVI und EVI Median berechnet. Mit Hilfe der zonalen Statistiken kann dann eine Veränderungsdetektion ausgeführt werden. Dafür werden Differenzen von benachbarten Zeitpunkten gebildet. Wenn es keinen direkt benachbarten Zeitpunkt mit einer Messung (bzw. abgeleiteten Index Median) gibt, wird der nächst vorige verfügbare Zeitpunkt für die Veränderungsberechnung genutzt. Damit kann der Mangel an Daten durch die in Irland recht häufig auftretende Wolkenbedeckung reduziert werden. Um starke Veränderungen einzelner Waldgebiete automatisch zu Erkennen, werden die im vorigen Schritt berechneten Differenzen mit einem anpassbaren Schwellenwert verglichen. Wird dieser Schwellenwert überstiegen, wird das Waldpolygon als signifikant verändert gekennzeichnet. Dieses Ergebnis bildet die Basis für weitere waldwirtschaftliche Entscheidungen. about this event: https://pretalx.com/fossgis2024/talk/QJSTCF/

Open Data des BKG (fossgis2024)

Thu, 21 Mar 2024 11:45:00 +0100

Das Bundesamt für Kartographie und Geodäsie (BKG) ist der Geodatendienstleister des Bundes. Neben der Entwicklung von Geoprodukten für Bundesbehörden ist es jedoch auch bestrebt, Geodaten als Open Data allen interessierten Nutzern zur Verfügung zu stellen. Der Vortrag thematisiert kurz den lizenzrechtlichen Kontext, in dem Open Data-Produkte des BKG bereitgestellt werden. Er gibt einen Überblick über die Open Data-Produkte und stellt ein Produkt ausführlicher vor. Dabei handelt es sich um die POI-Open, Points of Interest mit inzwischen sechs Themen aus dem Verkehrssektor und darüber hinaus. Außerdem wird ein Ausblick auf die kommenden Themen der POI-Open gegeben. Das Produkt wird unter der Datenlizenz Deutschland - Namensnennung - Version 2.0 weitergegeben. Ein Ergänzungstext erlaubt auch die Verwendeung für OSM. about this event: https://pretalx.com/fossgis2024/talk/FP9ZVU/

OpenDRIVE-HD-Karten mittels GDAL ins GIS bringen (fossgis2024)

Thu, 21 Mar 2024 09:00:00 +0100

Ein neuer quelloffener GDAL-Treiber ermöglicht die Konvertierung detaillierter HD-Kartendaten vom komplexen OpenDRIVE-Format der Automobilindustrie in gängige Geodatenaustauschformate wie GeoPackage, Shapefile, GeoJSON, KML und räumliche Datenbanken. Dies macht OpenDRIVE endlich in herkömmlichen GIS-Werkzeugen nutzbar! In der Automobilindustrie und Verkehrssystemtechnik haben sich fahrstreifengenaue Straßendaten (HD-Karten) als wichtige Komponenten für die Funktionsentwicklung und -validierung und auch für den späteren Produktivbetrieb herauskristallisiert. Anwendungen des autonomen Fahrens, der Fahrsimulation und der Verkehrssimulation sind oft auf spezielle technische Straßenbeschreibungsformate angewiesen, von denen sich OpenDRIVE [1] als offener Industriestandard entwickelt hat. Das OpenDRIVE-Datenmodell bündelt die mathematische, kontinuierliche Modellierung der Straßen- und Fahrstreifengeometrie mit allen notwendigen topologischen Verknüpfungen und semantischen Informationen der verkehrsregelnden Infrastruktur (Schilder, Ampeln, usw.). Die Modellierungskomplexität und der Abbildungsumfang von OpenDRIVE machen die Datenerfassung und Objektannotation zu einer anspruchsvollen Aufgabe, die meistens von der Automobilindustrie finanziert und von Mobile-Mapping-Dienstleistern durchgeführt wird. In letzter Zeit zeigen auch öffentliche Einrichtungen erhöhtes Interesse an solchen Daten, insbesondere im Zusammenhang mit der Verkehrsplanung und der Instandhaltung der Straßeninfrastruktur. Allerdings sind solche OpenDRIVE-Daten für amtliche Einrichtungen oft „unerreichbar“ oder nur umständlich nutzbar, obwohl sie den eigenen urbanen Raum thematisieren. Die Werkzeugkompatibilität für OpenDRIVE beschränkt sich auf kommerzielle Software und es fehlt die Integration in gängige GIS-Werkzeuge. Unser Softwarebeitrag [2] erweitert die etablierte Geospatial Data Abstraction Library (GDAL) [3] und wandelt OpenDRIVE-Straßenelemente in OGC Simple Features [4] um, die von den meisten kostenlosen und kommerziellen GIS-Tools ad hoc verarbeitet werden können! So können OpenDRIVE-Datensätze beispielsweise auch direkt in QGIS geladen werden. Unser Ansatz ermöglicht eine leichtgewichtigere Interaktion mit OpenDRIVE-Daten als beispielsweise die intermediäre Konvertierung zu CityGML mit r:trån [5]. Indem wir die Automobil-Domäne näher an die GIS-Domäne heranbringen, möchten wir den interdisziplinären Wissenstransfer und die Schaffung einer vernetzten Forschungsgemeinschaft fördern. Mit unserer offenen Softwareerweiterung ermöglichen wir Behörden und Forschungseinrichtungen einen leichteren Zugang zu hochgenauen Straßendaten, die sonst oft nur der Industrie vorbehalten sind. Im Umkehrschluss profitiert die (Automobil-)Industrie von etablierten Werkzeugen und Datenbereitstellungsdiensten des Geodatenumfelds, mit dem sie normalerweise nicht verkehrt. Auf Grundlage unserer Erfahrungen mit der Erweiterung von GDAL können zukünftig auch andere spezifische Datenformate der Verkehrsdomäne wie railML, RoadXML oder das NDS Open Lane Model für GIS-Nutzer zugänglich gemacht werden. [1] ASAM OpenDRIVE: https://www.asam.net/standards/detail/opendrive/ [2] Git-Branch für OpenDRIVE-Treiber: https://github.com/DLR-TS/gdal/tree/libopendrive [3] GDAL: https://gdal.org/ [4] OGC Simple Feature Access: https://www.ogc.org/standard/sfa/ [5] r:trån: https://doi.org/10.5281/zenodo.7702313 about this event: https://pretalx.com/fossgis2024/talk/NE7UM7/

KI-Gebäudeerkennung – Deep-Learning-Modelle zur Aktualisierung der ALKIS-Gebäude (fossgis2024)

Thu, 21 Mar 2024 14:15:00 +0100

Beim Einsatz “Künstlicher Intelligenz” zur Erkennung von Gebäuden in Luftbildern setzt die Landesvermessung Niedersachsen (LGLN) auf Open Source Software und selbst trainierte Deep-Learning-Modelle. Ein eigenes DecSecOps-Team entwickelt und betreibt seit über 4 Jahren eine SaaS-Anwendung zur Unterstützung der Katasterämter. Diese “KI-Gebäudeerkennung” hilft beim Aktualisieren der ALKIS-Daten. Kann sie auch beim Aktualisieren der OSM-Gebäude helfen? Das Landesamt für Geoinformation und Landesvermessung Niedersachsen (LGLN) hat in den letzten Jahren über 10 eigene, agile DevSecOps-Teams aufgebaut. Eines der Teams entwickelt und betreibt “lernende GeoServices”. Diese SaaS-Anwendungen nutzen Fernerkundungsdaten und Machine-Learning-Modelle, um automatisiert Geoinformationen zu gewinnen. Die erste produktive Anwendung ist eine “KI-Gebäudeerkennung”. Diese ersetzt das visuelle Durchmustern der Digitalen Orthophotos (DOP) durch Bearbeitende in den Katasterämtern durch automatisiert erzeugte Hinweise auf neue Gebäude, bauliche Veränderungen oder Abrisse. Auch Niedersachsen muss die Hausumringe der ALKIS-Daten spätestens am 9.6.2024 mit einer Open-Data-Lizenz kostenlos zum Download und per API bereitstellen. Dadurch entstehen neue Nutzungsmöglichkeiten und die Anforderungen an die Aktualität der Daten werden weiter steigen. Durch den Einsatz KI-unterstützter Fachanwendungen möchten wir die hohen Ansprüche an unsere amtlichen Geodaten in Zukunft noch besser erfüllen. Dabei gilt, wie bei allen Eigenentwicklungen des LGLN, Open Source First. Neben den Ergebnissen der KI-Gebäudeerkennung werden daher in Zukunft auch Trainingsdaten, KI-Modelle und sämtlicher Source Code mit freier Lizenz veröffentlicht. Grundsätzlich möchten wir beim Einsatz von “Künstlicher Intelligenz” transparent sein und beleuchten im Vortrag auch die Herausforderungen und Erfolge bei der Entwicklung und dem Betrieb einer KI-Anwendung in der öffentlichen Verwaltung. about this event: https://pretalx.com/fossgis2024/talk/JAS9RR/

QGIS Plugin: What's the impact of my installed dam on the vegetation around it? (fossgis2024)

Wed, 20 Mar 2024 18:15:00 +0100

Woher weiß ich, dass die Vegetation sich regeneriert augrund von meines installierten Dammes? In diesem Vortrag werde ich den QGIS Plugin vorstellen, den wir im Rahmen eines Projektes in Äthiopien für die Gesellschaft für Internationale Zusammenarbeit (GIZ) entwickelt haben. Woher weiß ich, dass die Vegetation sich regeneriert augrund von meines installierten Dammes? In diesem Vortrag werde ich den QGIS Plugin vorstellen, den wir im Rahmen eines Projektes in Äthiopien für die Gesellschaft für Internationale Zusammenarbeit (GIZ) entwickelt haben. Mithilfe von Landsat und Sentinel wurden Trendanalysen an saemtlichen Satellitenbildern, die zu Verfuegung standen analysiert mithilfe des Mann-Kendall Tests. Das Projekt, wie auch die Methode wurde innerhalb eines QGIS Plugins aufbereitet und wird hier vorgestellt und demonstriert. about this event: https://pretalx.com/fossgis2024/talk/NKV7F8/

WKT2+PROJ: Benutzerdefinierte Koordinatensysteme am Beispiel von PIX4Dcatch (fossgis2024)

Thu, 21 Mar 2024 14:15:00 +0100

Mithilfe des offenen WKT2 (well-known text) Standards und der FOSS Bibliothek PROJ, zeigen wir wie benutzerdefinierte Koordinatenreferenzsysteme (CRS) definiert und Koordinaten zu und von anderen Referenzsystemen transformiert werden können. Als Anwendungsfall dient das Kalibrieren eines lokalen Koordinatenreferenzsystems am Beispiel von PIX4Dcatch. Agenda: - Einführung in den WKT-Standard für Koordinatenreferenzsysteme: Aufbau des WKT-Standards, Unterschiede zwischen den Versionen WKT1 und WKT2, Vorteile des WKT2-Standards - Koordinatentransformation mit PROJ: Transformieren von Koordinaten zwischen Referenzsystemen mithilfe von PROJ - Erstellen benutzerdefinierter Koordinatenreferenzsysteme: Verwendung der WKT2-Definitionen für “derived projected CRS”, “derived vertical CRS” und “bound CRS” zum Erstellen benutzerdefinierter Koordinatenreferenzsysteme - Anwendungsfall aus der Praxis: Kalibrieren eines lokalen Koordinatenreferenzsystems mit PIX4Dcatch about this event: https://pretalx.com/fossgis2024/talk/WWNSGY/

Das Beispiel Masterportal – ein OS Erfolgsmodell für die öffentliche Verwaltung? (fossgis2024)

Thu, 21 Mar 2024 09:35:00 +0100

Das Masterportal hat sich in den letzten Jahren innerhalb der deutschen Verwaltung als Geoviewer bzw. WebGIS etabliert. In diesem Vortrag werden die erfolgreichen Organisationsstrukturen und Prozesse hinter dem Masterportal vorgestellt und diskutiert, ob dieses Open-Source Modell als Blaupause weiterer Projekte der öffentlichen Verwaltung oder darüber hinaus dienen könnte. Hinter dem Masterportal steht die Implementierungspartner Masterportal mit aktuell 43 Partnern der öffentlichen Verwaltung aus Deutschland und Österreich. Die Partnerschaft verfolgt drei primäre Ziele: Die Weiterentwicklung des Open Source Geoviewers Masterportal anhand der Anforderungen der öffentlichen Verwaltung, die Schaffung eines sich gegenseitig unterstützenden Netzwerkes und somit die Stärkung der digitalen Souveränität. Die Community setzt dabei auf demokratische, solidarische und transparente Prozesse, technische und strategische Entscheidungen werden in regelmäßig stattfindenden Technischen und Strategischen Komitee Sitzungen getroffen. In diesem Vortrag werden die Erfolgsfaktoren des Masterportal vorgestellt, insbesondere die Erkenntnis, dass für den Erfolg eines Open Source Produktes verschiedene Aspekte harmonisieren müssen, dazu gehören der technische Aufbau der Software, die strategischen Entscheidungsprozesse, Verantwortungsverteilung und die monetäre Unterstützung. Zum Abschluss diskutieren wir unter welchen Rahmenbedingungen das Modell auch für andere Projekte der öffentlichen Verwaltung oder darüber hinaus dienen könnte. about this event: https://pretalx.com/fossgis2024/talk/SCXXDE/

Ein WanderwegeGIS für den Sauerländischen Gebirgs - und Wanderverein. (fossgis2024)

Thu, 21 Mar 2024 17:55:00 +0100

Der Sauerländischen Gebirgs - und Wanderverein betreut ein Wegenetz mit über 4000 Routen in NRW. Umgesetzt mit QGIS und PostGis, können Ehren- und Hauptamtliche jetzt gemeinsam auf den Datenbestand zugreifen, Wege editieren, umbennenn und als Tracks exportieren. Auf jedem Trassenabschnitt sind die Wegesysmbole der jeweiligen Routen zu sehen. Über ein Python-Plugin werden komplexe Prozesse einfach umsetzbar. Der Sauerländischen Gebirgs - und Wanderverein betreut ein Wegenetz mit über 4000 Routen. Umgesetzt mit QGIS und PostGis, können Ehren- und Hauptamtliche jetzt gemeinsam auf den Datenbestand zugreifen, Wege editieren, umbennenn, als Tracks exportieren sowie verschiedene Auswertungen und Kartenexporte umsetzen. Auf jedem Trassenabschnitt sind die Wegesysmbole der jeweiligen Routen zu sehen. Über ein Python-Plugin werden komplexe Prozesse einfach umsetzbar. Berichtet wird über den Projektaufbau und die Schwierigkeiten, aus tausenden von wirren GPX-Tracks ein gut wartbares Netz zu bauen, in dem die unterschiedlichen Routen auf einer Trassengeometrie attributiert sind. Eine Anforderung war, dass Routen mit wenigen Klicks neu angelegt und umbenannt werden können. Bei der Routen-Anlage wird ein grobes Polygon erstellt, um das Gebiet zu definieren, durch welches die Route verläuft. Nur in dem so deffinierten Gebiet, erscheint die jeweilige Route in der QGIS-Eingabemaske und kann Trassenabschnitten zugeordnet werden. Gespeichert wird die Routenzuordnung der Trassensegmente in einem Array. Die Wegezeichen werden als Punktlayer über ein Materalized View umgesetzt. Immer wieder mussten komplexe Abläufe, die über PostGis-SQL und die QGIS-Processing verwirklicht werden, für die einfache Anwendung in ein Plugin integriert werden. about this event: https://pretalx.com/fossgis2024/talk/BT8Z7P/

basemap.de Aktuelles und Ausblick (fossgis2024)

Thu, 21 Mar 2024 11:10:00 +0100

Im Vortrag wird der aktuelle Stand des Projekts basemap.de der amtlichen deutschen Vermessung (AdV) vorgestellt. Es handelt sich um mehrere kostenfrei nutzbare Dienste und zunehmend auch der entsprechenden Quelldaten, die in regelmäßigen, kurzen Abständen aktualisiert zur Verfügung stehen. basemap.de ist ein Ergebnis der Arbeitsgruppe SmartMapping der AdV. Entsprechend des ursprünglichen Auftrags ist basemap.de vor allem ein Kartographie-Produkt der amtlichen Vermessung. VectorTile-Technologie ermöglicht allerdings die flexible Anpassung des Kartenwerks an verschiedene kartographische Anforderungen und ist nicht mehr so festgelegt wie z.B. ein OGC WMS oder WMTS. Neue spannende Felder eröffnen sich aber vor allem durch die weitere Öffnung der Lizenzbedingungen und den langfristig offenen Zugriff auf die Daten selbst. Hier entstehen ganz neue Möglichkeiten und erhebliches Potential, da die Daten der Länder nicht mehr aufwändig manuell zusammen-gepuzzelt werden müssen, sondern schon flachgeklopft, zerlegt, korrigiert und wieder zusammengesetzt geliefert werden - unter Beibehaltung aller Attribute. Inklusive Technologie, da ausschließlich Open Source eingesetzt wird. about this event: https://pretalx.com/fossgis2024/talk/Q8NB89/

Symbolische Links, ein scheußliches Laster (clt24)

Sun, 17 Mar 2024 15:00:00 +0100

An manchen Stellen machen Symbolische Links – also Links, die die Hierarchie des Dateisystems aufbrechen – Sinn, doch nicht immer. Es kann verwirrend und besonders in gewachsenen Umgebungen ein Grund für plötzlich auftretende Probleme sein, wenn mehrere valide Pfade zu einer Datei existieren. In meinem Vortrag gehe ich darauf ein, wieso Symbolische Links so beliebt sind, wo mögliche Probleme lauern und welche Alternativen es gibt. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/281

Jede(r) sollte einen Spatial Datathon organisieren! (fossgis2024)

Thu, 21 Mar 2024 17:55:00 +0100

Spontan eingereichte Lightning Talks. Jeder kann einen Vortrag halten, Registrierung erfolgt an einer entsprechenden Pinnwand im Foyer. Spontan eingereichte Lightning Talks. Jeder kann einen Vortrag halten, Registrierung erfolgt an einer entsprechenden Pinnwand im Foyer. Liste der Vortragenden mit Titel folgt, sobald wir den vom Zettel ins Programm übertragen haben. about this event: https://pretalx.com/fossgis2024/talk/XVCPAW/

QKan - Kanalkataster und Planungssystem für QGIS (fossgis2024)

Thu, 21 Mar 2024 14:50:00 +0100

Das Planungssystem "QKan" wird seit nun bereits 7 Jahren entwickelt. Es dient der Datenaufbereitung für und der Ergebnisdarstellung von hydraulischen Simulationen zu kommunalen Entwässerungssystemen und beinhaltet zahlreiche Datenaustauschformate. Neu entwickelt werden aktuell die Zustandserfassung und -bewertung von Kanalnetzen sowie die 2D- und 3D-Ergebnisdarstellung von gekoppelten Kanalnetz- und Oberflächenabflusssimulationen. QKan besteht aus zahlreichen QGIS-Plugins sowie einer SpatiaLite-Datenbank. Mit QKan können kommunale Kanalnetze erfasst und neu geplant werden oder über eine der zahlreichen Schnittstellen importiert werden. Für den hydraulischen Nachweis mit mehreren der in Deutschland gängigen Simulationsprogramme besteht ein Workflow zur Datenaufbereitung, der auf der Nutzung von frei verfügbaren Geodaten (Flurstücke, Straßen, Gebäude) oder vergleichbarer Geodaten aus anderen Quellen basiert. Für das Simulationsprogramm "HYSTEM-EXTRAN" (ITWH, Hannover) ist eine Visualisierung und Animation der Ergebnisse integriert, die sich seit kurzem auch auf die 3D-Visualisierung und Animation von gekoppelten Simulationen erstreckt. Da ein QKan-Projekt lediglich aus Projektdatei und der SpatiaLite-Datenbank besteht, können die Projektdaten einfach weitergegeben werden. Zusammen mit den (meistens sehr umfangreichen) Ergebnisdaten kann der Empfänger der Daten selbständig die Simulationsergebnisse auswerten und in Längsschnitten und Animationen visualisieren. Ähnlich wie im TESKI-Modul Abwasserentsorgung (Projektname QGEP) der Schweizter QGIS-Anwendergruppe enthält QKan einen Funktionsbereich Kanalzustandsverwaltung. Dieser umfasst aktuell den Import von Untersuchungsdaten, eine Zustandbewertung sowie die Verwaltung und Betrachtung von Inspektionsbildern und -videos. Aktuell in der Entwicklung befinden sich die Erstellung von Zustandsberichten. QKan umfasst zusätzlich eine Vielzahl weiterer Funktionalitäten wie z. B. frei konfigurierbare Plausibilitätskontrollen. Eine Besonderheit stellt die erweiterte Clipboardfunktion dar, die vor der Datenübernahme aus der Zwischenablage die zutreffenden Attributbezeichnungen plausibel errät und dabei unabhängig von der Reihenfolge die richtige Zuordnung der Attribute vornimmt. Im Vortrag wird auch kurz auf die ersten Anwendungsfälle in der Praxis eingegangen. about this event: https://pretalx.com/fossgis2024/talk/XZDJVU/

INSPIRE2GPKG (fossgis2024)

Wed, 20 Mar 2024 18:15:00 +0100

Mit einer einfachen Python-Bibliothek lassen sich Raster- und Vektordaten automatisiert aus einer INSPIRE-kompatiblen GDI extrahieren und in einem Geopackage speichern. Im Vortrag werden die in der Software umgesetzten Prozesse und Prinzipien erläutert, und die Funktionsweise wird anhand praktischer Beispiele vorgestellt. Das Verfahren zeigt eindrucksvoll welches bisher noch ungenutzte Potential in den auf INSPIRE basierenden Infrastrukturen sowie im GPKG-Format steckt. Die in den letzten 20 Jahren entstandenen Geodateninfrastrukturen in Deutschland und Europa haben sehr viel zur Verbreitung offener Standards beigetragen. Der WebMapService hat sich dabei zum Standardinterface für den Zugriff auf Kartengraphiken entwickelt. Im Bereich der Vektordaten beschäftigen sich aktuell viele Institutionen mit der neuen OGC API Features Schnittstelle. Die Standardisierung des webbasierten Zugriffs auf Geodaten ist also weit fortgeschritten, und es gibt unzählige Geoportale, die Nutzern das Auffinden von geeigneten Webservices erleichtern. In vielen praktischen Anwendungsfällen reicht der direkte internetbasierte Zugriff jedoch nicht aus, z.B.: * Precision Farming, * Rettungsdienste, * Krisenmanagement, * Felderfassung, * Militärische Einsätze, * ... Hier werden weiterhin Kopien bzw. Caches der Daten benötigt. Es stellte sich also die Frage, ob die vorhandenen Geodateninfrastrukturen nicht auch geeignet sind die Erstellung und Aktualisierung solcher Datencaches zu ermöglichen. Derzeit werden die bestehenden Metadatenkatalogschnittstellen (CSWs) nur für den Austausch von ISO-Metadaten verwendet. Die Suchoberflächen der meisten Geoportale arbeiten auf eigenen, proprietären Interfaces, die den menschlichen Nutzern eine komfortable Suche ermöglichen. Der standardisierten CSW-Schnittstelle kommt praktisch also nur eine untergeordnete Bedeutung zu. Wenn man jedoch automatistert Datencaches erstellen will, kommt man um diese Schnittstelle nicht herum, sie ist das einzige maschinenlesbare Interface der europäischen Geodateninfrastrukturen. Neben der Schnittstelle für den Zugriff auf die Infrastrukturen, muss man sich auch damit auseinandersetzen, wie die Datencaches physikalisch abgelegt werden können. Hier bietet sich das Geopackage Format des OGC an. Es ist weltweit das einzige Format, das sowohl die kombinierte Ablage von Raster- und Vektordaten, als auch die ihrer zugehörigen Metadaten ermöglicht. In einem Proof of Concept wurde eine Python-Bibliothek erstellt, die Raster- und Vektordaten aus einer europäischen GDI extrahieren kann und diese in einem Geopackage speichert. Dabei werden nicht nur die Daten selbst, sondern auch die zugehörigen ISO-Metadaten abgelegt. Damit ist man theoretisch auch in der Lage die Informationen im Geopackage automatisch zu aktualisieren, wenn der Datenanbieter neue Metadaten bereitstellt. Voraussetzung für die Funktionsfähigkeit: * Eindeutige Ressourcenidentifikatoren für Datensätze * Einheitliche Umsetzung der ISO19119 und ISO19115 Metadaten (https://github.com/INSPIRE-MIF/technical-guidelines/tree/2022.2/metadata/metadata-iso19139) Unterstützte Diensttypen für automatisierten Download: * Rasterdaten * INSPIRE View Service based on WMS 1.1.1 (https://github.com/INSPIRE-MIF/technical-guidelines/blob/2022.2/services/view-wms/ViewServices.pdf) * INSPIRE ATOM Feeds (https://inspire.ec.europa.eu/file/1554/download?token=Y_538IH4) * Vektordaten * OGC API Features (https://docs.ogc.org/is/17-069r4/17-069r4.html) * INSPIRE ATOM Feeds (https://inspire.ec.europa.eu/file/1554/download?token=Y_538IH4) Die auf Github unter der MIT-Lizenz verfügbare Python-Bibliothek ist die Basis für das neue Geopackage-Export Modul der Länder Hessen, Rheinland-Pfalz und Saarland. Im Vortrag werden die in der Software umgesetzten Prozesse und Prinzipien erläutert, und die Funktionsweise des Geopackage-Export Moduls wird an einem praktischen Beispiel vorgeführt. Für die Nutzung von Geopackages in Webanwendungen oder auf mobilen Endgeräten können Freie Open Source Bibliotheken der National Geospatial-Intelligence Agency (NGA) verwendet werden. Weitere Informationen https://inspire-gpkg-cache.readthedocs.io/en/latest/introduction.html https://www.geoportal.rlp.de/article/Download_von_Daten_zur_Offline-Nutzung/ http://ngageoint.github.io/GeoPackage/ about this event: https://pretalx.com/fossgis2024/talk/UFWP3Y/

Projekt Geodigitalisierungskomponente (GDIK) (fossgis2024)

Thu, 21 Mar 2024 11:10:00 +0100

50 % aller Daten haben einen Raumbezug. Daraus folgt, dass mindestens 50 % aller Formulare einen Raumbezug haben, aber im HTML Standard existiert kein Formular-Element für die Eingabe von Geodaten. Im Rahmen des OZG Projektes Geodigitalisierungskomponente haben wir uns dieser Thematik angenommen, in Online-Formularen Geometrien angeb- und auswählbar zu machen. Das Projekt GDIK setzt auf Web-Components und der MasterportalAPI als technischen Unterbau. Geodaten medienbruchfrei in Anträgen zu übermitteln, vor dieser Herausforderung stehen viele Behörden, spätestens seit dem Onlinezugangsgesetz und den damit verbundenen neuen digitalen Möglichkeiten. Um zu verdeutlichen, wo z.B. ein Brunnen gebohrt, ein Baum gefällt oder ein Flurstück geteilt werden soll, können natürlich Screenshots von OSM-Ausschnitten, die in Gimp o.Ä. bearbeiteten wurden, einem Antrag beigefügt werden, aber praktisch in der Weiterverarbeitung ist das nicht! Genau hier setzt das Projekt GDIK an. Es gibt Designern von Online-Formularen ein Werkzeug an die Hand, um direkt georeferenzierte Daten in einem HTML-Formular erheben zu können. Der Fokus des Projekts GDIK liegt zum einen auf der einfachen und übersichtlichen Bedienung für Endnutzer, also der Menschen, die ein Formular ausfüllen müssen, sowie auf Formulardesignern, die ohne Geoinformatikkentnisse Geodaten in Formularen erheben wollen. Durch einfaches Hinzufügen einer Javascript-Datei wird das Standard-HTML um die Elemente \ für die Eingabe von Geodaten und \ für die Auswahl definierter Geometrien erweitert. Hinter den Kulissen kommen Web-Components zum Einsatz, so dass die Elemente unabhängig vom eingesetzten Framework verwendet werden können. Den technischen Unterbau liefert die MasterportalAPI, wodurch bestehende Infrastrukturen des Masterportals wiederverwendet werden können. about this event: https://pretalx.com/fossgis2024/talk/SML33E/

Ableitung von korrekten OSM-Räumen, -Wänden und -Türen aus IFC-Gebäudemodellen (fossgis2024)

Thu, 21 Mar 2024 11:45:00 +0100

In diesem Paper diskutieren wir die Ableitung von Inneraumdaten im Format OSM-SIT aus digitalen Gebäubemodellen im Format IFC. Dabei zeigen wir insbesondere Probleme und Lösungsansätze hinsichtlich der Topologie und Geometrie von Räumen, Raumgrenzen und -verbindungen zwischen Räumen innerhalb eines Geschosses. Typische Funktionen, die GIS für urbane Außenräume erfüllt, wie die Lokalisierung von Zielen und Barrieren sowie die Navigation dahin oder darum herum, sind auch im Inneren von Gebäuden relevant. Darum werden georäumliche Datenbanken, Karten- und Routingservices für Innenraumanwendungen angereichert und erweitert, z.B. in OpenStreetMap mit SIT. Um den damit verbundenen Aufwand zu reduzieren und Daten mit höherer Qualität zu erzeugen, untersuchen wir, wie Innenraumdaten u.a. für OSM automatisiert aus digitalen Gebäudemodellen im Format IFC abgeleitet werden können. Diese Gebäudemodelle liegen im Rahmen der Planung von Neubauten regelmäßig vor und werden zunehmend auch im Zuge von Umbaumaßnahmen für Bestandsgebäude angefertigt. Dafür implementieren wir quelloffene Konvertierungsroutinen (https://bauinformatik.github.io/levelout). Unsere bisherigen Ergebnisse beschränken sich auf grundlegende Elemente und unterliegen gezielten Einschränkungen. Beispielsweise betrachten wir keine vertikalen Verbindungen zwischen Geschossen, sogenannte vertikale Erschließung, wie Treppenhäuser und Aufzüge. Innerhalb eines einzelnen Geschosses extrahieren wir eine topologische Struktur aus Räumen, raumbegrenzenden Elementen und den die Raumbegrenzungen durchbrechenden Verbindungen zwischen den Räumen - das heißt Räume, Wände und Türen bzw. Öffnungen - sowie die zugehörigen Geometrien. Sowohl die Topologie wie auch die Geometrie können in IFC in verschiedenen Formen vorliegen. Wir setzen für unsere aktuelle Implementierung eine explizite Topologie in den IFC-Daten voraus, beziehen die Geometrie der Raumbegrenzungen jedoch aus den regelmäßig enthaltenen 3D-Festkörpergeometrien für Räume, Wände und Öffnungen. Damit erhalten wir ein "dickwandiges" Geometriemodell, bei dem aus dem Volumen der Wände zwei Segmente der Raumbegrenzungen mit dem Abstand der Wanddicke resultieren, die nicht mehr topologisch Verbunden sind. Die in OSM übliche implizite Repräsentation der Topologie über die Geometrie (durch gemeinsame Polygonsegmente) ist auf dieser Basis nicht möglich und somit auch keine Ableitung von Routinggraph en. In diesem Paper stellen wir verschiedene geometrische und topologische Repräsentationsmöglichkeiten in IFC vor, stellen sie den Modellierungsprinzipien von OSM gegenüber und diskutieren ihr Potential der für die automatische Ableitung. Wir zeigen eine gegenüber der ersten Proof-of-Concept-Implementierung deutlich verbesserten Algorithmus und die damit erzeugte OSM-Struktur, die weiterhin auf den "dickwandigen" Modell beruht, aber die Oberflächen in den Öffnungsbereichen zu einer "dünnwandigen" Raumgrenze verschmilzt und damit die Voraussetzungen erfüllt, OSM-Routinggraphen abzuleiten. Weiterhin stellen wir eine alternative Konvertierungsmöglichkeit vor, die auf der 2D-Achsenrepräsentation von Wänden basiert und demonstrieren ihre Vor- und Nachteile. Wir fassen auch den Stand der Wissenschaft und Technik, insbesondere zu Raumgeometrie und -topologie sowie Space Boundaries in digitalen Gebäudemodellen im IFC-Format und in anderen Formaten wie IndoorGML zusammen. about this event: https://pretalx.com/fossgis2024/talk/LXGXQJ/

QField 3 - Feldarbeit neu definiert (fossgis2024)

Thu, 21 Mar 2024 14:15:00 +0100

Die wichtigsten zwischen März 2023 und 2024 entwickelten Features für die Feldapplikation QField werden vorgestellt. Dazu gehören die auf QT6 basierend 3.0 Release mit der Möglichkeit NFC einzulesen, Point Cloud Profile, erweiterte Suche, erweiterte Tracking- und Snapping- Kontrolle und vieles mehr Die mobile Anwendung QField basiert auf QGIS und erlaubt es, basierend auf QGIS-Projekten, offline oder online, Feldarbeit effizient durchzuführen. Die in den letzten Monaten erfolgten Weiterentwicklungen haben der Anwendung zusätzliche für die Feldarbeit nützliche Funktionen hinzugefügt. Anhand von Beispielen werden die wichtigsten neuen Features vorgestellt. Dazu gehören die auf QT6 basierend 3.0 Release mit der Möglichkeit NFC einzulesen, Point Cloud Profile, erweiterte Suche, erweiterte Tracking- und Snapping- Kontrolle und vieles mehr about this event: https://pretalx.com/fossgis2024/talk/JS3PBM/

QGIS Server Plugins (fossgis2024)

Thu, 21 Mar 2024 11:45:00 +0100

Die Erweiterung von QGIS mit Python-Plugins bietet eine Vielzahl von Möglichkeiten, die Software auf den eigenen Anwendungsfall anzupassen und ist dementsprechend populär. Im Gegensatz zu den Plugins für QGIS Desktop sind die Plugins für QGIS Server weniger bekannt. Dieser Vortrag soll das ändern. Zuerst wird auf die Technik eingegangen und erläutert, wie ein Plugin mit dem Server interagiert. Dann werden einige Anwendungsfälle und Plugins vorgestellt, die für den Serverbetrieb nützlich sind. Die Erweiterung von QGIS mit Python-Plugins bietet eine Vielzahl von Möglichkeiten, die Software auf den eigenen Anwendungsfall anzupassen und ist dementsprechend populär. Im Gegensatz zu den Plugins für QGIS Desktop sind die Plugins für QGIS Server weniger bekannt. Dieser Vortrag soll das ändern. Zuerst wird auf die Technik eingegangen und erläutert, wie ein Plugin mit dem Server interagiert. Dann werden einige Anwendungsfälle und Plugins vorgestellt, die für den Serverbetrieb nützlich sind. about this event: https://pretalx.com/fossgis2024/talk/TZ9MJ8/

Verarbeitung hochaufgelöster Umweltdaten auf Basis von OGC API Processes (fossgis2024)

Thu, 21 Mar 2024 10:10:00 +0100

Das Forschungsprojekt KLIPS hat zum Ziel hochaufgelöste Umweltdaten in nutzbarer Form zur Verfügung zu stellen, um eine inhaltliche Interpretation für Gemeinden und Städte zu ermöglichen. Hier kommt eine umfangreiche Geodateninfrastruktur zum Einsatz, welche Temperaturdaten empfängt, prozessiert, analysiert, und anschließend in Form von browserbasierten Demonstratoren darstellt. Der Vortrag stellt die Verarbeitung solcher Daten u.a. mit Hilfe von OGC API Processes und pygeoapi vor. Innerstädtische Hitzeinseln gehören zu den großen Herausforderungen, denen Städte in Folge des Klimawandels gegenüberstehen. Im Forschungsprojekt KLIPS (gefördert vom Deutschen Bundesministerium für Digitales und Verkehr (BMDV)) wird mit Hilfe eines ausgedehnten Sensornetzwerks in zwei Pilotstädten, sowie KI-basierten Methoden zur Lokalisierung von Hitzeinseln, eine große Menge hochaufgelöster Umweltdaten generiert. Um solche Daten effektiv nutzen zu können, müssen sie den Entscheidungsträgern und der Öffentlichkeit in aufbereiteter und praktisch nutzbarer Form zur Verfügung gestellt werden. terrestris und meggsimum haben in diesem Kontext eine Geodateninfrastruktur (GDI) entworfen, welche die Daten empfängt, aufbereitet, und auf Basis von OGC-Standards (WMS, WFS) publiziert. Hier kommen OGC API Processes und die Server-Software pygeoapi für die Prozessierung zum Einsatz. Die einzelnen Komponenten wurden mittels Docker als Microservices erstellt. Ziel des Projekts ist die flexible und anwenderfreundliche Darstellung in browserbasierten Demonstratoren. Im Rahmen des Vortrags wird die Architektur anhand dieser Demonstratoren dargestellt und erläutert. Folien zum Vortrag: https://klips-project.github.io/fossgis2024/1 about this event: https://pretalx.com/fossgis2024/talk/P93DKL/

Zerstörte Städte: Historische Karten des Zweiten Weltkriegs in QGIS analysieren (fossgis2024)

Thu, 21 Mar 2024 15:25:00 +0100

Historische thematische Karten auf Basis der gleichen Stadtgrundkarte bilden eine Multi-Layer-Geodatenbank auf Papier. Wir zeigen, wie wir diese Kartensätze in QGIS als Thick/Deep Map erfassen und für die denkmalwissenschaftliche Forschung aufbereiten und nutzen. Im Zweiten Weltkrieg haben die Stadtplanungsämter auf Stadtplänen die Schäden von Luftangriffen kartiert, um Aufräumarbeiten, nutzbaren Wohnraum, aber auch zukünftigen Neubau zu planen. Für die Stadt Nürnberg liegen uns eine Reihe von Schadensplänen und andere thematische Karten auf Grundlage der gleichen Stadtgrundkarte vor, die unter anderem die Zunahme der Schäden nach aufeinanderfolgenden Luftschlägen dokumentieren. Im Rahmen des UrbanMetaMapping-Projekts¹ zu Kriegsschadenskartierungen des Zweiten Weltkriegs und der Nachkriegszeit am Kompetenzzentrum für Denkmalwissenschaften und –technologien (KDWT)² kartieren wir die Altstadt Nürnbergs hausgenau in QGIS und erstellen durch Überlagerung und Annotierung der unterschiedlichen thematischen (Schadens-)Karten eine Thick Map / Deep Map als Arbeitsgrundlage für weitere Forschungsfragen. Die Überführung der Papierkarten in GIS bietet uns zahlreiche Vorteile: GIS bietet einfache Möglichkeiten für Bemaßung/Quantifizierung, z.B. um das Ausmaß von Zerstörungen quantitativ zu erfassen. Die Überlagerung der unterschiedlichen thematischen und Schadens-Karten erlaubt die Darstellung zeitlicher Abläufe wie auch die Abfrage von Querbeziehungen zur Verknüpfung unterschiedlicher Kartenthematiken. Damit lassen sich qualitative Aussagen sowohl über den Inhalt der Karten als auch die Kartierung selbst treffen. Unser Vortrag soll einen Einblick in die Nutzung von QGIS für Fragestellungen in der Denkmalwissenschaft bieten. So haben wir durch die Analyse in QGIS in einer Abfolge von Schadenskarten Ungenauigkeiten entdeckt: zuvor kartierte Schäden tauchen in einer späteren Karte nicht auf, was Fragen zur Kartierungsqualität aufwirft. Die Verknüpfung unterschiedlicher thematischer Karten ermöglicht die Überprüfung verschiedener Hypothesen aus dem Bereich Denkmaltheorie: Welche zuvor als historisch wertvoll verzeichneten Gebäude wurden beispielsweise mit welcher Schadenskategorie belegt und wurden diese Gebäude möglicherweise bevorzugt wiederaufgebaut? Wurden Gebäude als total zerstört klassifiziert, wenn sie möglichen Stadtneuplanungen im Weg standen? Die Datenerfassung stellt uns aber auch vor neue Herausforderungen: So wurden auf manchen Karten Gebäudeteile (z.B. Fassaden) getrennt als (un-)zerstört markiert. Wie sollen wir diese erfassen? Ist eine Erhöhung der Granularität auf Gebäudeteile bei vertretbarem Aufwand sinnvoll? Wie gehen wir mit zerstörten und wieder aufgebauten Gebäuden um, vor allem wenn das neue Gebäude das alte nicht exakt ersetzt? Wie ordnen wir hier den zeitlichen Ablauf zu, welche Möglichkeiten bietet QGIS für die Abbildung dieser zeitlichen Verläufe? Die Erfassung der Pläne als GIS-Karte hat zudem Vorteile für die Publikation: Die Copyright-Situation dieser alten Pläne ist sehr unübersichtlich, eine Veröffentlichung häufig nicht möglich. Die GIS-Daten können wir frei nutzen und sowohl als Datensatz als auch als Bild verbreiten und zur Verfügung stellen. __ ¹ https://urbanmetamapping.uni-bamberg.de/ ² https://www.uni-bamberg.de/kdwt/ about this event: https://pretalx.com/fossgis2024/talk/LAFWWV/

GeographyForFuture: Mit Geodaten Politik machen (fossgis2024)

Thu, 21 Mar 2024 17:55:00 +0100

Geodaten und Karten sind die Basis für politische und gesellschaftliche Entscheidungen. Sie produzieren und reproduzieren soziale Wirklichkeiten und lenken unser alltägliches Handeln. Aber wir können Geodaten auch für den Kampf für eine bessere Welt nutzen. Woher die Macht von Geodaten kommt und wie wir Geodaten politisch nutzen können, sind die Themen des Talks. Geodaten und (digitale) Karten haben in den letzten Jahrzehnten eine Schlüsselstellung in der Entwicklung unserer Gesellschaft eingenommen. Geodaten sind wichtiger Bestandteil bspw. in der Umweltüberwachung, der Nutzung natürlicher Ressourcen, der Verkehrsplanung, der Raumplanung u.v.m. und sind damit Basis politischer und gesellschaftlicher Entscheidungsprozesse. Kommerzielle Anwendungen, die auf Geodaten aufbauen, wie Google oder Apple Maps, sind mittlerweile selbstverständliche Teile unseres Lebens geworden und lenken unser alltägliches Handeln. Damit sind Geodaten auch wichtige Bestandteile datengetriebener Geschäftsmodelle geworden. Sie werden aber auch für rassistische Praktiken, staatliche und private Repressionen und Überwachung genutzt. Wer also die Hoheit über Geodaten besitzt oder über die Kenntnisse verfügt, Geodaten zu sammeln und zu generieren, hat die Macht, politische Entscheidungen zu beeinflussen, Weltbilder zu produzieren und unser alltägliches Leben zu lenken. Doch warum ist das so? Wie können wir uns Geodaten - aus den Bereichen OpenData, Informationsfreiheit und Citizen Science - zu Nutze machen als Werkzeug im Kampf für eine bessere Welt? Dafür möchte der Vortrag einige Antworten geben und zeigen, wie wir Geodaten und Karten für den Kampf für eine bessere Welt nutzen können. about this event: https://pretalx.com/fossgis2024/talk/BFPLZH/

Räumliche Fragmentierung im ÖV-Angebot sichtbar machen - dank offenen Fahrplandaten (fossgis2024)

Thu, 21 Mar 2024 10:10:00 +0100

Basierend auf offenen Fahrplandaten im GTFS-Format wird der angebotene Fahrplan des öffentlichen Verkehrs hinsichtlich der Vernetzung über Zuständigkeitsgrenzen (wie Landkreise, Verkehrsverbünde, Bundesländer) hinweg analysiert. Zentrale Frage dabei ist, ob solche Grenzen als räumliche Barriere im angebotenen Fahrplan wirken. So soll ein Beitrag zur aktuellen Debatte um die Verkehrswende geleistet werden. Die Notwendigkeit einer Verkehrswende hin zur Nutzung Ressourcen-schonender und Emissions-armer Verkehrsmittel ist in Gesellschaft und Wissenschaft allgemein anerkannt. Dem öffentlichen Verkehr (ÖV) kommt dabei eine herausragende Rolle zu. Der Diskurs in Deutschland ist u.a. geprägt von neuen Impulsen wie dem „Deutschland-Takt“. Dahinter stehen Bestrebungen, den öffentlichen Verkehr auszubauen und für die Fahrgäste zu vereinfachen. Die Planung von Fahrplänen sowie die Bestellung konkreter Leistungen obliegen in Deutschland unterschiedlichen Akteuren (wie Landkreisen, Verkehrsverbünden, Bundesländern). Räumlich betrachtet, weisen diese Akteure jeweils ihre eigenen Gebiete der Zuständigkeit aus. Es stellt sich die Frage, wie gut das angebotene Fahrplanangebot über Zuständigkeitsgrenzen hinweg mit benachbarten Gebieten vernetzt ist? Anders gefragt: Wirken Zuständigkeitsgrenzen in der ÖV-Planung als räumliche Barrieren im ÖV-Angebot und führen abseits von topographischen Barrieren (Gebirge, Flüsse) zu einem räumlich fragmentierten Angebot? Wie können offene Fahrplandaten solche Analysen unterstützen und welche Form der kartographischen Visualisierung bietet sich hier an? Die Analyse basiert auf Fahrplandaten im GTFS-Format und soll den Stand der Analysen anhand von zwei Fallbeispielen innerhalb Deutschlands zeigen. Für die Untersuchung des ÖV sind auch die Art des Verkehrsmittels sowie der Takt wichtig. Die durch die Analysen ermöglichte Perspektive soll ein Beitrag zur aktuellen Debatte um die Verkehrswende leisten und Denkanstöße für die zukünftige Entwicklung bieten. about this event: https://pretalx.com/fossgis2024/talk/RWVQEB/

Evaluierung von Hausumringen: ALKIS, OSM, Microsoft und unsere KI im Vergleich (fossgis2024)

Thu, 21 Mar 2024 14:50:00 +0100

Um automatisiert Hinweise zur Aktualisierung der ALKIS-Daten zu erhalten, werden bei der Landesvermessung Niedersachsen (LGLN) die Ergebnisse einer „KI-Gebäudeerkennung“ mit den amtlichen Hausumringen verglichen. Dazu wurde eine Reihe von Metriken entwickelt. Mit denselben Metriken haben wir auch andere frei verfügbare Datensätze (z.B.: OSM) ausgewertet, bestehende Differenzen analysiert und daraus Aussagen über Vollständigkeit, Aktualität und Genauigkeit der jeweiligen Hausumringe abgeleitet. Im Landesamt für Geoinformation und Landesvermessung Niedersachsen (LGLN) wird eine „KI-Gebäudeerkennung“ entwickelt, um auf Grundlage von digitalen Orthophotos (DOP) den Gebäudebestand im Amtlichen Liegenschaftskataster-Informationssystem (ALKIS) zu aktualisieren. Dabei müssen systematisch die Differenzen zwischen den von der KI erkannten Gebäuden und den Hausumringen aus ALKIS berechnet werden. Diese Differenzen liefern Hinweise auf Unstimmigkeiten in den ALKIS-Daten. Verwendet man manuell erzeugte Referenz-Daten, erlauben die Differenzen dagegen eine Beurteilung der Qualität der KI-Modelle. Um die Differenzen zwischen den beiden Datensätzen quantifizieren zu können, nutzen wir eine Reihe von Metriken: Darunter Standards wie Intersection over Union (IoU), Mean Average Precision und F1-Score, sowie Ähnlichkeiten der geometrischen Eigenschaften der Hausumringe. Für die Berechnung dieser Metriken haben wir auf Grundlage von GeoPandas und weiterer Open Source Software ein Python-Package entwickelt, welches wir bereits produktiv einsetzen. Dieses Tool erlaubt uns auch einen Vergleich mit anderen frei verfügbaren Datensätzen (wie z.B. den Gebäuden aus OSM oder Microsofts Building Footprints). Es ist damit möglich, gezielt für ein Gebiet die Übereinstimmung der Hausumringe zwischen den jeweiligen Datensätzen zu messen. Im Vortrag vergleichen wir die Qualitiät bzw. die Übereinstimmung der Hausumringe der jeweiligen Datensätze anhand von Daten aus Niedersachsen. about this event: https://pretalx.com/fossgis2024/talk/TJQQ8L/

Das Masterportal als Bestandteil der Open SmartCity Solingen (fossgis2024)

Thu, 21 Mar 2024 10:10:00 +0100

Die Klingenstadt Solingen ist im Rahmen einer Förderung des Bundesinnenministeriums seit Januar 2020 eines der SmartCity Modellprojekte. Die Förderung endet im Herbst 2024. Im Zuge des Modellprojektes wird das GEOportal der Klingenstadt auf das Masterportal umgestellt. Vorgestellt werden sollen insbesondere das Deployment des Masterportals über eine CI/CD-Pipeline über einen eigenen gitlab-Server und die Einbindung der Sensordaten aus dem FROST-Server, der ebenfalls ein Teil des Projekts ist. Die Klingenstadt Solingen ist im Rahmen einer Förderung des Bundesinnenministeriums seit Januar 2020 eines der SmartCity Modellprojekte. Die Förderung endet im Herbst 2024. Im Zuge des Modellprojektes ist die Klingenstadt Solingen der Implementierungspartnerschaft Masterportal beigetreten. Vorgestellt werden sollen insbesondere das Deployment der Masterportal-Instanzen über eine CI/CD-Pipeline auf dem eigenen gitlab-Server und die Einbindung von Sensordaten aus dem FROST-Server. Der Aufbau der Sensordateninfrastruktur ist einer der Hauptbestandteile des Förderprojekts. Im Masterportal können die Sensoren visualisiert werden. about this event: https://pretalx.com/fossgis2024/talk/MSVX99/

Gemeinsam Gebäudeinformationen erfassen im Citizen-Science-Projekt Colouring Dresden (fossgis2024)

Thu, 21 Mar 2024 11:10:00 +0100

Um fehlende Daten zu Gebäuden wie Alter, Baumaterial oder Nutzung insbesondere für Wissenschaft und Planung erfassen und als offene Daten bereitstellen zu können, wurde in einem Citizen-Science-Projekt die Plattform "Colouring Dresden" erprobt und weiterentwickelt. In einer interaktiven Karte können derzeit 40 Gebäudemerkmale in sieben Kategorien gemeinschaftlich erfasst werden. Der Vortrag geht auf die Erfahrungen aus dem Projekt ein und stellt die verwendeten technischen Komponenten vor. Gebäude sind von großer Bedeutung für die Menschen, da sie einen überwiegenden Teil ihres Lebens darin verbringen, große finanzielle Investitionen erfordern oder von ihnen auch ein beträchtlicher Ressourcenverbrauch ausgeht. Allerdings mangelt es an grundlegenden frei verfügbaren Informationen über Gebäude, wie Alter, Baumaterialien und Nutzung. Um diese Informationen gemeinschaftlich in einer interaktiven Karte zu erfassen und als offene Daten für Wissenschaft, Planung und interessierte Bürger*innen bereitzustellen, wurde im Frühjahr 2023 in Dresden die Plattform "Colouring Dresden" gestartet. Derzeit können 40 Gebäudemerkmale in sieben verschiedenen Kategorien erfasst und kartographisch visualisiert werden. Betrieben durch das "Leibniz-Institut für ökologische Raumentwicklung Dresden" ist sie eingebettet in das internationale Forschungsnetzwerk "Colouring Cities Research Programme", welches in London beginnend kontinuierlich weltweit um neue Orte wächst. Im Mitteplunkt des Vortrages steht die Plattform mit ihren technischen Möglichkeiten. Diskutiert werden die genutzten Komponenten (u.a. Frontend, Schnittstelle, Backend, Dashboard) sowie die Bedeutung von Open Source, Open Data und Linked Data für das Projekt. Neben einer Vorstellung von Erfahrungen aus der Projektlaufzeit und ersten Ergebnissen sollen auch mögliche zukünftige Entwicklungen beschrieben werden. about this event: https://pretalx.com/fossgis2024/talk/FFCEVY/

OGC API: Features mit MapServer (fossgis2024)

Thu, 21 Mar 2024 14:50:00 +0100

Seit Version 8 unterstützt MapServer auch die OGC API: Features, weitere Standards werden sicher folgen. In der Demo-Session wird gezeigt, wie man MapServer 8 so konfiguriert, dass die eigenen Daten auch über die OGC Api bereit gestellt werden können und wie man die Landing Page individuell gestalten kann. OGC API: Features ist der Nachfolger des WebFeatureService und man muss gar nicht viel tun, um seine MapServer-Dienste als OGC API: Features Server bereit zu stellen. Vor allem, wenn man bereits MapServer-basierte Dienste betreibt, sind nur kleine Änderungen bzw. Erweiterungen der Konfiguration notwendig. Die OGC API Familie weicht technisch stark von den alten Diensten wie WFS und WMS ab, keine Get- oder Post-Parameter, keine XML-Dokumente, die hin und her geschickt werden. Wie immer merken die EndanwenderInnen von diesen technischen Hintergründen nicht viel solange alles funktioniert. Aufmerksame QGIS-NutzerInnen werden bereits gesehen haben, dass der Menü-Eintrag zum Laden von WFS seit einiger Zeit 'WFS / OGC API - Features' heißt. Als GIS-ExpertInnen sollten wir auch etwas tiefer in die Thematik eintauchen und Kenntnisse der Hintergründe haben, um bei auftretenden Problemen eine Lösung zu finden. In der Demo-Session wird daher nicht nur die Konfiguration des MapServers gezeigt sondern auch die Unterschiede zw. WFS und OGC API: Features aufgezeigt https://www.mapserver.org/ogc/ogc_api.html https://schulung.foss.academy/cgi-bin/mapserv/freiburg/ogcapi about this event: https://pretalx.com/fossgis2024/talk/R9KVZ8/

Offene Verwaltungsdaten in Europa: Was Deutschland von anderen Ländern lernen kann (fossgis2024)

Thu, 21 Mar 2024 12:20:00 +0100

Der Beitrag des Wissenschaftlichen Instituts für Infrastruktur und Kommunikationsdienste (WIK) untersucht das Angebot von offenen Verwaltungsdaten in Europa und welche Rolle zentrale Open-Data-Institutionen dabei spielen. Die Ergebnisse zeigen, dass andere Länder schneller als Deutschland voranschreiten. Sie stellen u. a. weniger Bedingungen an die Datennutzung und bieten deutlich mehr Geo-, Tabellen- und Textformate anstatt Bilddaten an. Das WIK identifiziert in einem gemeinnützigen Forschungsprogramm, das mit der Bundesnetzagentur vereinbart ist, gute Beispiele und zentrale Erkenntnisse von relevanten Open-Data-Stakeholdern in Europa. Der Vortrag basiert auf den Ergebnissen der im Dezember 2023 veröffentlichten Studie. Die Autorinnen zeigen, was Deutschland von anderen Ländern in der Datenbereitstellung und -nutzung lernen kann. about this event: https://pretalx.com/fossgis2024/talk/3Q3G7D/

Analyse und Visualisierung von Polizeimeldungen: Eine Fallstudie für Frankfurt a. M. (fossgis2024)

Thu, 21 Mar 2024 09:00:00 +0100

Polizeimeldungen von Polizeibehörden informieren unter anderem über Straftaten ohne genaue Ortsangaben. Ein Prozessablauf kombiniert Open Source Software und OpenStreetMap-Daten, um die Meldungen räumlich darzustellen. Offene Standards ermöglichen die einfache Nutzung der Geodaten. Der Vortrag zeigt Ergebnisse für Frankfurt am Main und diskutiert Herausforderungen sowie mögliche Verbesserungen. Pressemitteilungen spielen eine wichtige Rolle bei der Verbreitung von Informationen von staatlichen Institutionen. Auch Polizeibehörden veröffentlichen sogenannte Polizeimeldungen. Hierbei berichtet die jeweils zuständige Polizeibehörde unter anderem von begangenen Straftaten in einer Region. Durch die fortschreitende Digitalisierung können diese Pressemitteilungen auf Presseportalen strukturiert angezeigt und nachverfolgt werden. Auch das Polizeipräsidium Frankfurt am Main veröffentlicht diese Pressemitteilungen. Allerdings enthalten Polizeimeldungen normalerweise keine genauen räumlichen Daten, sondern liefern textbasierte Informationen über die begangenen Straftaten. Dadurch sind räumliche Analysen oder Visualisierungen der in den Texten enthaltenen Informationen nur mit viel Aufwand umsetzbar. Durch den Einsatz von Open Source Software und dem Einbinden von freien OpenStreetMap Daten können die Polizeimeldung räumlich verortet und thematisch kategorisiert werden. Der Vortrag stellt den entstandenen prototypischen Prozessablauf vor, welcher verschiedene digitale Verarbeitungsschritte miteinander kombiniert, um textbasierte Polizeimeldungen räumlich zu visualisieren. Durch das Verwenden von offenen Standards und Schnittstellen, wird eine einfache Weiterverarbeitung oder Einbindung der gewonnenen Geodaten gewährleistet. Die für Frankfurt am Main entstandenen Ergebnisse werden vorgestellt und die Schwierigkeiten einer automatisierten Verarbeitungskette aufgezeigt. Der Vortrag schließt mit einem Ausblick auf mögliche Optimierungen und Überarbeitungen ab. about this event: https://pretalx.com/fossgis2024/talk/NPYHFS/

comaps - die Planungssuite für das Masterportal (fossgis2024)

Thu, 21 Mar 2024 11:45:00 +0100

comaps ist ein umfangreiches Addon-Paket für das OpenSource Masterportal, das Visualisierung und Analyse städtischer Statistik- und Strukturdaten vereinfacht, um transparente und fundierte Entscheidungen in der Planung zu unterstützen. Es verknüpft Daten verschiedener Quellen wie Fachbehörden und Unternehmen und integriert räumliche und zeitliche Analysen, sowie Szenarioplanung. Mit interaktiven Karten und benutzerfreundlichen Tools unterstützt comaps eine vernetzte und datengesteuerte Planung. Aus einem Forschungsprojekt hervorgegangen, erleichtert comaps als umfassendes Erweiterungspaket für das OpenSource Web-GIS "Masterportal" nicht nur die Visualisierung und Analyse städtischer Daten, sondern transformiert mit Hilfe seiner vielen Werkzeuge auch die Entscheidungsfindung in einen transparenten, datenbasierten Prozess für nicht GIS-geschulte Planer- und Entscheider:innen. So können Nutzer über diverse Schnittstellen integrierte komplexe Statistik- und Strukturdaten ohne Aufwand aus diversen Quellen wie Fachbehörden, Unternehmen und Online-Partizipation zusammenführen und nutzbar machen. Die Plattform macht es möglich, durch die Nutzung von interaktiven Karten und benutzerfreundlichen Tools, raumplanerische Szenarien zu simulieren und prognostische Bewertungen städtischer Projekte vorzunehmen. Diese innovativen Features sind essenziell, um nicht nur die Gegenwart zu verstehen, sondern auch die Zukunft urbaner Landschaften vorausschauend zu gestalten. comaps dient als zentrale Plattform für eine kollaborative Stadtentwicklungsarbeit, die verschiedene Stakeholder miteinander verbindet und die Verknüpfungen zwischen Partizipierenden verstärkt. Es bietet eine visuelle Sprache, die Zusammenarbeit und Kommunikation über Disziplinen hinweg fördert und so maßgeblich zu einer transparenteren und partizipativen Planung beiträgt. Es adressiert die Notwendigkeit einer agilen und informierten Entscheidungsfindung, um nachhaltige und lebenswerte urbane Räume zu gestalten. Insgesamt bietet comaps eine skalierbare Lösung für die Herausforderungen moderner Stadtplanung. Auf der FOSSGIS würde comaps sein Potenzial als leistungsfähiges Instrument zur Förderung smarter, effizienter und inklusiver urbaner Entwicklung, Smart Governance und digitaler Verwaltung demonstrieren. about this event: https://pretalx.com/fossgis2024/talk/THS7FU/

qgis-js - QGIS im Browser dank WebAssembly (fossgis2024)

Thu, 21 Mar 2024 16:45:00 +0100

qgis-js ist eine Portierung von QGIS Core zu WebAssembly um es in modernen Browsern auszuführen. Dieses Setup ermöglicht die Integration von praktisch allen denkbaren Geo-Formaten und dynamische kartografische Darstellungen auf höchsten Niveau ganz ohne (QGIS-)Server. Im Rahmen des Vortrags werden die verwendeten Technologien sowie die Architektur kurz vorgestellt, um anschliessend die neuen Möglichkeiten und Integration anhand interaktiven Beispielen aufzuzeigen. Das Projekt wurde an der QGIS User Conference in 's-Hertogenbosch (NL) im April 2023 von Martin Dobias, Andreas Neumann und Michael Schmuki initiert und konnte im Rahmen einer Machbarkeitsstudie für das Institut für Kartografie und Geoinformation der ETH Zürich über den Sommer zu einem funktionalen Prototypen ausgebaut werden. qgis-js wurde mittlerweile über die QGIS Organisation auf GitHub publiziert und steht zur freien Verwendung als JavaScript/TypeScript Bibliothek auf npm zur Verfügung: qgis-js Website: https://qgis.github.io/qgis-js/ qgis-js Repository: https://github.com/qgis/qgis-js Ziel des Vortrages ist das Projekt der FOSSGIS Community vorzustellen um neue Nutzer und potentielle Contributer zu begeistern. Als erstes werden das Projekt, sowie die verwendeten Technologien und Architektur vorgestellt (Emscripten, vcpkg, pnpm, Vite). Zahlreiche interaktive Demos zeigen wie das Projekt in eine bestehende Web-Applikation integriert werden kann, wie die QGIS API mit JavaScript/TypeScript verwendet werden kann und welche Möglichkeiten sich dadurch ergeben. Nachdem auf die bereits funktionierenden Features eingegangen wurde, schliesst der Vortrag mit einem Ausblick auf noch offene Punkte und die weitere Roadmap des Projekts. about this event: https://pretalx.com/fossgis2024/talk/NTFVWQ/

Gefälschte Papiere - Daten verfälschen, um eine richtige Print-Karte zu erzeugen (fossgis2024)

Thu, 21 Mar 2024 16:45:00 +0100

Eine gedruckte Karte unterscheidet sich in sehr vielen Punkten, die nicht immer offensichtlich sind, von einer Online-Karte. Häufig müssen dafür die Daten manipuliert werden, und nicht immer ist das automatisch möglich. Der Vortrag befasst sich mit den Unterschieden zwischen beiden Kartendarstellungen, die unabhängig von der eingesetzten Software insbesondere darin bestehen, dass die Paper-Karte einen festen Maßstab hat und einem bestimmten Zweck dient, sie kann nicht vom Betrachter gefiltert oder gezoomt werden. Darüber hinaus ergibt sich noch eine Vielzahl von Fallstricken, wenn man OSM-Daten in einem ansprechenden Design drucken will. Aus Maßstab und Zweckbestimmung ergibt sich zunächst einmal eine Vorauswahl des Koordinatenbezugssystems und der darzustellenden Objekte, wobei letztere Auswahl auch abhängig vom darzustellenden Gebiet und der Objektdichte ist. In Abhängigkeit vom Maßstab können oder müssen Objekte generalisiert werden. Weitere Tücken bestehen in der Darstellung von Brücken, deren Breite nicht zu den Symbolen darunter passt, maßstäblich zu enger Dichte von darzustellenden Objekten, insbesondere parallelen Verkehrswegen, der Zuordnung separat gemappter Wege zueinander (mehrere Fahrbahnen, Radwege, Fußwege), Aufeinander folgende Einmündungen (15 m hinter der Abzweigung nach rechts geht links die Straße ab) müssen so dargestellt werden, wie sie in der Praxis erlebt werden, auch wenn das maßstäblich falsch ist. Symbole müssen, falls erforderlich, abhängig von ihrer Funktion und der Objektdichte so verschoben werden, dass dem Betrachter ihr Zweck und ihre Funktion möglichst sofort erkennbar ist. Eine Aufgabe für sich ist die Beschriftung, die nicht nur aus Platzgründen nicht immer automatisch erzeugt wird und außerdem so platziert werden sollte, dass keine wichtigen Objekte verdeckt werden. Zum Abschluss sollte eine Print-Karte noch ein Finish (Randbeschriftung, Titel, Legende, Sonder-Ausschnitte, Rückseite etc.) erhalten. about this event: https://pretalx.com/fossgis2024/talk/DX7YSZ/

Mit openrouteservice zu RoutingPlus – Einblicke in einen globalen Routing-Cluster (fossgis2024)

Thu, 21 Mar 2024 14:15:00 +0100

Mit openrouteservice zu RoutingPlus. Die langjährige Zusammenarbeit des Heidelberg Institute for Geoinformation Technology (HeiGIT) mit dem Bundesamt für Kartographie und Geodäsie (BKG) zum Thema Routing hat bereits viele technische Neuerungen hervorgebracht. Mit fortschreitender Zeit stehen nun Herausforderungen bei Modernisierung und Anpassungen an, um die Anforderungen eines modernen Softwarebetriebs zu erfüllen. In unserem Vortrag möchten wir euch auf unseren Weg dorthin mitnehmen. Mit openrouteservice zu RoutingPlus nach Bahnhof Buxtehude? Zwei Projekte, zwei Institutionen – ein Amt, ein Forschungsinstitut unter einem Hut –beide machen das Gleiche, aber nicht dasselbe. Wie kann das gehen? Aber der Reihe nach und vorab ein paar Worte zu openrouteservice und RoutingPlus. Der openrouteservice (ORS) des Heidelberg Institute für Geoinformation Technology (HeiGIT) bietet umfangreiche Routing-Dienste, die auf OpenStreetMap-Daten basieren. Er ist aber mehr als nur Routing, denn der ORS bietet auch Erreichbarkeitsanalysen mit Isochronen, Entfernungsmatrizen, Berechnung von ÖPV, spezifische Suchmöglichkeiten bezüglich POIs, und andere Einstellungen, z. B. Strecken mit vermindertem Hitzestress und Geräuschbelastung zu wählen. Basierend auf ORS und betrieben durch das Bundesamt für Kartographie und Geodäsie (BKG) stellt das Projekt RoutingPlus seit mehreren Jahren einen etablierten Routing-Dienst des Bundes dar. Dabei werden gemeinsam verschiedene Erweiterungen des ORS entwickelt, wie die Berechnung europaweiter Isochronen in Sekundenbruchteilen oder mit statistischen Verkehrsdaten angereichertes Routing. Bei RoutingPlus zeichnet sich der ORS zudem primär durch eine herausragende und leistungsstarke Performance mit zuverlässigen Ergebnissen aus. Im Zuge der kontinuierlichen, gemeinsamen Entwicklung stehen neben den Verbesserungen in Infrastruktur, Funktionen und Oberflächen erhebliche Herausforderungen an. Durch die Modernisierung und Anpassung von Infrastruktur, Funktionen und Oberflächen wird der Betrieb von RoutingPlus dabei den modernen Anforderungen eines Softwarebetriebs angepasst. Die Anforderungen reichen von der Einhaltung des BSI-Grundschutzes, über die Berechnung der CO₂-Emission pro Route und anderen Kundenanforderungen bis hin zur hohen Bedienbarkeit graphischer Benutzeroberflächen auf verschiedensten Endgeräten. Welche Entwicklungen dabei entstehen, wie die dazu nötige, agile Zusammenarbeit zwischen HeiGIT und BKG funktioniert, was für eine Rolle das OpenSource Geoportal Masterportal spielt und ob wir uns dabei immer vertragen – all das erfahrt ihr in unserem Vortrag. about this event: https://pretalx.com/fossgis2024/talk/BXXEMG/

Die Berechung der Welt, Generierung von Pseudo-Tags für den BRouter (fossgis2024)

Thu, 21 Mar 2024 18:00:00 +0100

Altkartenanalyse für einen nachhaltigen Klimaschutz – Entwicklung eines QGIS-Plugins (fossgis2024)

Thu, 21 Mar 2024 16:45:00 +0100

In einem neuen Gemeinschaftsprojekt zwischen IÖR und BKG wird untersucht, in welchem Maße sich die Landbedeckung in Deutschland vom Anfang des 19. Jahrhunderts bis heute verändert hat. Dazu werden Methoden erarbeitet, um Karteninhalte aus digitalisierten Altkartenbeständen automatisiert zu extrahieren.Die im Projekt entstehenden Ergebnisse werden als offene Geodaten, die Methoden in einem QGIS Plug-In bereitgestellt. Die Klimaforschung benötigt, wie auch andere Disziplinen der Erdsystemforschung, Zeitreihendaten über lange Zeiträume. Der Klimaforschung fehlen derzeit flächendeckende, hochaufgelöste Daten zur Landnutzung bzw. Landbedeckung der letzten Jahrhunderte für die Verbesserung der Erdsystemmodellierung. Der Landnutzungskomponente und speziell dem anthropogenen Landwandel kommt eine bedeutende Rolle zu, insbesondere seit dem Beginn der Industriellen Revolution. Eine wichtige Datenquelle für die Zeit vor den siebziger Jahren des 20. Jahrhunderts sind kartographische Abbildungen der Erdoberfläche in Form archivierter topographischer Kartenwerke. Die Georeferenzierung topographischer Karten, das Extrahieren der Landbedeckungsformen verschiedener Zeitabschnitte und deren Klassifizierung bilden die Grundlage für diese vergleichenden Analysen. Der Analyseprozess ist aufgrund der großen Datenmengen nur automatisiert durchführbar. Die räumliche und zeitliche Analyse des sehr unterschiedlichen Kartenmaterials, stellt eine große Herausforderung dar. Diese reicht von der Beschaffung der Karten, über den semantischen Abgleich, bis hin zu nicht immer geklärten Lizenzrechten. Besonderes Augenmerk ist auf die Darstellung der Validität der Ergebnisse zu legen. Da es sich um ein relativ junges Fachgebiet handelt, gibt es noch keine automatisierten Lösungen. In einem neuen Gemeinschaftsprojekt zwischen dem Bundesamt für Kartographie und Geodäsie (BKG) und dem Leibniz-Institut für ökologische Raumentwicklung e.V. (IÖR) werden nun Methoden entwickelt und aus analogen Karten abgeleitete Daten bereitgestellt. Ziel des Projektes ist, zu ermitteln, in welchem Maße sich die Landbedeckung in Deutschland vom Anfang des 19. Jahrhundert bis heute verändert hat. Das Projekt greift auf die ältesten verfügbaren Landesaufnahmen zurück und ergänzt die Zeitreihen des IÖR-Monitors durch Daten, die aus historischen Kartenwerken zu entnehmen sind. Das Projekt wird mit Open Source Software durchgeführt. Die Ergebnisse werden im IÖR-Monitor als Open Data, die Analysealgorithmen auf GitHub als Open Source bereitgestellt. Zu Erweiterung der Methodenforschung mit KI-Technologien, hat das BKG auch ein Forschungsprojekt unter Beteiligung der Leibniz Universität Hannover und der Jade Hochschule gestartet. Da die Dekarbonisierung ein unverzichtbares Element eines nachhaltigen Ökosystems ist, wird besondere Aufmerksamkeit auf Daten gelegt, die für den Dekarbonisierungsprozess genutzt werden können. Die Kohlendioxid-Speicherkapazität der Wälder ist unter anderem vom Alter eines Waldes abhängig. Aus diesem Grund ist die Darstellung der Entwicklung von Waldgebieten im Fokus unserer Studie. Um die Renaturierung vor Mooren als bedeutende CO2-Speicher zu fördern, werden verlässliche Informationen über ehemalige Moorflächen geliefert. Das Projekt befindet sich derzeit in der Phase der Machbarkeitsstudie, in der die vier Bundesländer Sachsen, Bayern, Hessen und Nordrhein-Westfalen untersucht werden. about this event: https://pretalx.com/fossgis2024/talk/KPLVSC/

Malen nach Zahlen – Landnutzungserfassung in OpenStreetMap in Deutschland (fossgis2024)

Thu, 21 Mar 2024 17:20:00 +0100

Der Vortrag widmet sich einer Bestandsaufnahme der Landnutzungs-Erfassung in OpenStreetMap in Deutschland mit Schwerpunkt auf den verschiedenen Erfassungsmethoden. Er beantwortet folgende Fragen: Welcher Erfassungsstil (Trennen, Kleben, intensiver Multipolygon-Gebrauch) in dominiert? Gibt es regionale Unterschiede? Wie alt sind die Landnutzungsflächen? Wie viel Fläche ist doppelt erfasst, wie fragmentiert sind die Flächen? Mit vielen verschiedenen Farbtönen stellen manche Kartenstile die Landnutzungserfassung in OpenStreetMap da und motivieren Mapper zur flächendeckenden Erfassung der Landnutzung bzw. Landbedeckung. Aber wie wird die Landnutzung in OpenStreetMap erfasst? Zwar erfolgt die Landnutzungserfassung fast immer mit Polygonen und die Liste an Tags ist recht übersichtlich. Danach beginnt jedoch die Vielfalt. Die einen Mapper lassen Landnutzungsflächen am Straßenrand enden, andere zeichnen die Polygone bis fast zur Straßenmitte und dritte verbinden die Polygone mit den als Ways erfassten Straßen(achsen). Der Vortrag widmet sich einer Bestandsaufnahme der Landnutzungs-Erfassung in OpenStreetMap in Deutschland mit Schwerpunkt auf den verschiedenen Erfassungsmethoden. Welcher Erfassungsstil (Trennen, Kleben, intensiver Multipolygon-Gebrauch) dominiert? Gibt es regionale Unterschiede? Wie alt sind die Landnutzungsflächen in OpenStreetMap? Wie viel Überlappung gibt es und kann man das überhaupt so genau sagen? Wie fragmentiert wird erfasst und wie präzise wird gezeichnet? Wie viele Einbaum-Wälder gibt es? Neben der Analyse des Status quo wird der Vortrag auch einen Blick auf die historische Entwicklung der Erfassungsstile bieten. Eine qualitative Analyse (z.B. Genauigkeit der Klassifikation) ist nicht Gegenstand des Vortrags. about this event: https://pretalx.com/fossgis2024/talk/B33EX8/

QGIS Server - Einsatz im Unternehmen (fossgis2024)

Thu, 21 Mar 2024 11:10:00 +0100

Um Geodaten über das Web verfügbar zu machen, nutzen wir bei siticom unter anderem QGIS Server. Der Vortrag beleuchtet das verwendete Setup um eine Vielzahl von verschiedenen Projekten zu veröffentlichen und erläutert Vor- und Nachteile im Vergleich zu anderen gängigen Lösungen wie GeoServer. Dieser Vortrag stellt die Funktionalitäten und die Integration des QGIS Servers dar. Eine besondere Stärke des QGIS Servers liegt in seiner Fähigkeit, Geodaten im Web so darzustellen, wie sie auch im QGIS Desktop sichtbar sind. Dies ist vor allem relevant, wenn eine umfangreiche Auswahl an verschiedenen Kartenstilen auf Basis von QGIS vorhanden ist. Die Konfiguration des QGIS Servers erfolgt ausschließlich über ein QGIS-Projekt, was die Einrichtung recht komfortabel gestaltet. Zu beachten ist jedoch, dass derzeit keine automatisierten Einstellungen beispielsweise per API möglich sind. Der QGIS Server unterstützt verschiedene OGC-Standards, darunter WMS (Web Map Service), WFS (Web Feature Service), WCS (Web Coverage Service) und WMTS (Web Map Tile Service). Darüber hinaus bietet er eine prototypische Implementierung von OAF (OGC API - Features) an und integriert viele Funktionen von QGIS, einschließlich des Exports von im Desktop vorbereiteten Karten. Im Rahmen dieses Vortrags wird auch die Installation des QGIS Servers mithilfe von Docker behandelt. Des Weiteren wird die Integration des QGIS Servers in Middleware-Lösungen erörtert, um die Nutzung in komplexen GIS-Umgebungen zu ermöglichen. Ein weiterer Schwerpunkt wird auf die Konfiguration von veröffentlichten Layern und der Auswahl der veröffentlichten Attribute gelegt. Wir werden auch besprechen, wie Projekte in einer Datenbank gespeichert und eine Verbindung zur Datenbank mittels PG_SERVICE Dateien hergestellt werden kann. about this event: https://pretalx.com/fossgis2024/talk/HEED8U/

Virtuelle Erreichbarkeitsanalysen in KomMonitor zur sozialräumlichen Bedarfsplanung (fossgis2024)

Thu, 21 Mar 2024 09:35:00 +0100

Die Open-Source Software KomMonitor bietet Möglichkeiten zur Durchführung von Erreichbarkeitsanalysen auf Basis eines OSM-Netzwerks. Das integrierte Tool zur Berechnung von Erreichbarkeitsisochronen wurde nun um eine virtuelle Szenarienfunktion ergänzt. Diese unterstützt kommunale Fach- und Sozialplaner:innen bei der quantifizierten Analyse der Nahversorgung durch Infrastruktureinrichtungen in kleinräumigen Gebieten. Die webbasierte Open-Source Software KomMonitor ermöglicht ein integriertes GIS-basiertes, raum-zeitliches Monitoring von Geodaten und Statistiken. Im Rahmen kommunaler Fachaufgaben trägt KomMonitor sowohl zur Beantwortung kleinräumlicher Fragestellungen in der Sozialplanung, als auch zur Entscheidungsunterstützung in der Stadtplanung und -entwicklung bei. Ein wesentlicher Bestandteil von KomMonitor sind interaktive Tools zur gemeinsamen interaktiven Analyse und Visualisierung von Geodaten und zeitreihenbasierter Indikatoren. In einer Kartendarstellung sowie verschiedenen statistischen Diagrammen können Zeitreihenanalysen sowie räumliche und inhaltliche Vergleiche durchgeführt werden. Ergänzt wird das Portfolio um Möglichkeiten zur Durchführung von Erreichbarkeitsanalysen. Basierend auf OpenStreetMap-Wegenetzen und der vom Heidelberg Institute for Geoinformation Technology entwickelten Open-Source Software openrouteservice können für selbst gezeichnete Punkte oder systemseitig integrierte Punktdatensätze on-the-fly Erreichbarkeitsisochronen berechnet werden. Für Planungsaufgaben lässt sich so z.B. visuell die Abdeckung des Stadtgebiets durch Infrastruktureinrichtungen innerhalb gewisser Schwellenwerte wie 15-minütiger fußläufiger Erreichbarkeit bestimmen. Insbesondere die integrierte Sozialplanung hat ein besonderes Interesse daran, einen detaillierten Einblick in die Lebenslagen in Sozialräumen zu erhalten, um Angebote zur Steuerung von zielgerichteten, sozialräumlich angepassten und an Lebenslagen und Bedarfen orientierten Maßnahmen zu schaffen. Hierzu gehört zum Einen die Möglichkeit zur quantifizierten Analyse der Bedarfsdeckung in Sozialräumen hinsichtlich bestimmter sozialer Infrastruktureinrichtungen. Zum Anderen ist es notwendig, unterschiedliche Szenarien zur Standortplanung sozialer Einrichtungen hinsichtlich der Auswirkungen auf die soziale Versorgung der Bevölkerung miteinander vergleichen zu können. Um diese Anforderungen zu adressieren, erfolgte eine umfassende Erweiterung der Erreichbarkeitsanalyse in KomMonitor: * Die Ergebnisse aus einer Erreichbarkeitsanalyse können genutzt werden, um quantifizierte Aussagen über die Versorgung der Bevölkerung in räumlichen Gebieten unter Berücksichtigung verschiedener Indikatoren treffen zu können (z. B. Anzahl der im Einzugsbereich lebenden Menschen eines POIs). * Die Erreichbarkeitsanalyse wurde um Funktionen ergänzt, die es erlauben, POIs interaktiv zu planen und für die Analyse von Erreichbarkeiten zu nutzen. * Erreichbarkeitsanalysen lassen sich als “Virtuelle Szenarien” anlegen und untereinander für verschiedene Planungsgrundlagen vergleichen. * Ergebnisse virtueller Planungsszenarien können in Template-basierte Reports eingebunden werden, um diese über PDF-Exports für Präsentationszwecke verfügbar zu machen. Der vorliegende Beitrag möchte das Konzept der virtuellen Szenarienfunktion in KomMonitor anhand praktischer Beispiele vorstellen. Hierzu werden die Funktionsweise des Tools sowie Praxisbezogene Anwendungsfälle aus der integrierten Sozialplanung präsentiert. about this event: https://pretalx.com/fossgis2024/talk/BKXEEG/

Geografische PostgreSQL Erweiterungen: pgRouting und PostGIS (fossgis2024)

Thu, 21 Mar 2024 14:50:00 +0100

In diesem Vortrag werden wir einen zielführenden Einblick in pgRouting und PostGIS geben und anhand von Beispielen aus der Praxis einen kurzen Weg durch mögliche Einsatzgebiete von pgRouting finden. In modernen Applikationen werden geographische und räumliche Daten immer wichtiger, welche effizient in einer Datenbank gespeichert und verarbeitet werden müssen. PostGIS, als Erweiterung von PostgreSQL für geographische und räumliche Daten, bietet diese Möglichkeit. In Kombination mit pgRouting wird eine Routing-Funktionalität innerhalb einer PostgreSQL Datenbank ermöglicht. Mit den oben genannten Möglichkeiten für die Verarbeitung und Auswertungen können z.B. räumliche Daten aggregiert werden oder die Fragen "Welches ist der kürzeste Weg von Punkt A nach Punkt B?” beantwortet werden. PostGIS und pgRouting sind Open-Source und werden unter der GNU General Public License veröffentlicht. Der Unterhalt und die Weiterentwicklung werden durch eine grosse Community seit 23 Jahren gewährleistet. Als Extensions lassen sich beide in PostgreSQL integrieren und können dann von einer Vielzahl an Software Produkten weiter verwendet werden. In diesem Vortrag werden wir einen zielführenden Einblick in pgRouting und PostGIS geben und anhand von Beispielen aus der Praxis einen kurzen Weg durch mögliche Einsatzgebiete von pgRouting finden. about this event: https://pretalx.com/fossgis2024/talk/S3DX3P/

Gewässerunterhaltung managen mit QGIS, PostGIS und QField (fossgis2024)

Thu, 21 Mar 2024 15:25:00 +0100

Der Unterhaltungsverband „Mittlere Hase“ betreut im Verbandsgebiet 689 Gewässerkilometer. Für die Planung und die Erfassung von Arbeitsständen und -zeiten werden neben QGIS eine PostGIS Datenbank und mobile Endgeräte mit der Software QField eingesetzt. Da im Gelände offline gearbeitet wird werden erfasste Daten über eine eigens entwickelten App und Funktionen der GBD Websuite täglich synchronisiert. Die so gesammelten Daten dienen dem Management sowie der Abrechnung durch die Buchhaltung. In Niedersachsen werden auf Basis des § 63 des Niedersächsischen Wassergesetzes die Gewässer von aktuell 109 Unterhaltungsverbänden unterhalten. Zu den Aufgaben gehört die Gewässerpflege und Entwicklung sowie die Abflusssicherung. Dabei sind Vorgaben des Natur- und Landschaftsschutzes zu berücksichtigen. Der Unterhaltungsverband 97 „Mittlere Hase“ betreut in dem 77.750 ha großen Verbandsgebiet an 1.942 Gewässern. Um die zahlreichen maschinengestützten Aufgaben im Gelände zu planen und zu überwachen setzt der Verband seit Jahren QGIS ein. Zur Optimierung und Vereinfachung der Arbeiten werden die Daten in einer PostGIS Datenbank verwaltet. Hier werden Maßnahmen zur Gewässerpflege erfasst und über QGIS visualisiert. Die Daten werden für die Feldarbeit an mobile Endgeräte mit der Software QField übertragen um die Informationen für durchzuführende Maßnahmen an Mitarbeiter zu übergeben. Im Gelände wird der Arbeitsstand am Gewässer sowie die Arbeits- und Maschinenzeiten durch die Mitarbeiter erfasst. Auch neue Geoinformationen und Sachdaten können für den Informationsaustausch gesammelt und hochgeladen werden. Da im Gelände offline gearbeitet werden muss, werden diese Daten täglich synchronisiert. Technisch möglich ist dies durch die Entwicklung einer App zum Datentransfer und Funktionen der GBD Websuite. Die so gesammelten Daten dienen der Planung und dem Management der Arbeiten sowie der Abrechnung der Arbeiten über die Buchhaltung und stellen so einen zentralen Baustein im Verband dar. about this event: https://pretalx.com/fossgis2024/talk/UYCYUV/

Barrierefreie Indoor-Navigation auf Basis von OSM-Daten (fossgis2024)

Thu, 21 Mar 2024 12:20:00 +0100

In diesem Vortrag wird auf die Entwicklung und die damit verbundenen Herausforderungen einer barrierefreien Indoor-Navigations-App eingegangen. Grundlage für diese App sind OSM-Daten zu Barrieren und Eigenschaften von Haltestellen im Öffentlichen Personenverkehr. Dieser Vortrag ist eine Fortführung zu unserem Beitrag von der FOSSGIS 2022 [1], in dem präsentiert wurde, wie im Projekt OPENER next mit Hilfe der App OpenStop jene Daten er-fasst werden. Solange der Öffentliche Personenverkehr noch nicht komplett barrierefrei ausgebaut oder zumindest beschildert ist, ist Indoor-Navigation ein wichtiger Bestandteil einer barrierefreien Reisekette. Bahnhofsgebäude können mitunter komplex sein und vor allem bei weiter entfernten Reisen auch unbekannt. Gerade Menschen mit Mobilitätseinschränkungen stellt dies vor Herausforderungen. Der Vortrag präsentiert, wie auf Basis von in OSM hinterlegten Daten zu Eigenschaften und Barrieren von Haltestellen des Öffentlichen Personenverkehr eine Indoor-Navigations-App realisiert wird. Die App selbst sowie die ausgegebenen Routen sollen dabei barrierefrei sein. Ein wichtiger Aspekt des Vortrages ist daher die visuelle, akustische und haptische Ausgabe des Routings abhängig von verschiedenen Einschränkungen der Nutzer. Des Weiteren wird darauf eingegangen, wie MOTIS bzw. Per Pedes [2] von der TU Darmstadt dazu verwendet wird, ein barrierefreies Routing für verschiedene Nutzergruppen zu generieren. Zusätzlich wird im Vortrag noch kurz auf das Projekt OPENER next und die darin stattfindende OSM-Datenstandardisierung und -erfassung (mit OpenStop) eingegangen. [1] [OPENER next - Per Crowd-Sourcing zu Barrieredaten im ÖPNV](https://pretalx.com/fossgis2022/talk/A3P3MB/) [2] [Per Pedes](https://github.com/motis-project/ppr) https://openstop.app https://openernext.de https://github.com/OPENER-next about this event: https://pretalx.com/fossgis2024/talk/SBKZFZ/

Skalierbare Geodatenverarbeitung in der Cloud mit Argo Workflows (fossgis2024)

Thu, 21 Mar 2024 09:35:00 +0100

Auch von amtlichen Geodaten wird heutzutage eine hohe Aktualität erwartet. Aus diesem Grund setzt die Landesvermessung Niedersachsen (LGLN) bei der Verarbeitung ihrer Geodaten vermehrt auf vollständig automatisierte Prozesse. Um trotz wachsender Datenmengen in Zukunft möglichst schnell aktuelle Geodaten für ganz Niedersachsen liefern zu können, muss die Verarbeitung in skalierbaren Cloud-Umgebungen erfolgen. Zur Orchestrierung setzen wir Kubernetes und die Workflow-Engine Argo Workflows ein. Für die Geodaten-Dienstleistungen und auch für zukünftige KI-Anwendungen des Landesamtes für Geoinformation und Landesvermessung Niedersachsen (LGLN) sind große Mengen an Geodaten eine wesentliche Grundlage. Im zweitgrößten Bundesland müssen schon immer große Mengen an Daten verarbeitet werden. Diese Datenmengen steigen, auch durch neue Fernerkundungssensoren - auf Drohnen, Flugzeugen und Satelliten - nun deutlich an. Im Vortrag zeigen wir, wie wir mit Argo Workflows und Kubernetes die Verarbeitung unserer Geodaten in der Cloud skalierbar umgesetzt haben. Wir zeigen Workflows zur Verarbeitung von Punktwolken, Höhenmodellen, und den Ergebnissen unserer „KI-Gebäudeerkennung“, aber auch, wie wir eine CI/CD-Pipeline mit Argo Workflows aufgesetzt haben. about this event: https://pretalx.com/fossgis2024/talk/WMFUGA/

Klimatische Zeitreihenanalyse zur Modellierung von Ökoregionen (fossgis2024)

Thu, 21 Mar 2024 17:20:00 +0100

Das Ziel dieser Studie war die Identifikation von Gebieten in Nordafrika, die in Bezug auf Überträger neuartiger Krankheiten besonders überwacht werden sollten. Dazu wurden Zeitreihen verschiedener Fernerkundungsdaten zu Umwelt und Klima aufbereitet, mit deren Hilfe Ökoregionen klassifiziert und identifiziert werden können. Mit einer vergleichenden Risikoanalyse konnten anschließend entomologische Überwachungsprogramme angepasst und optimiert werden. Im Rahmen des WOAH Projektes "Defining Ecoregions and Prototyping an EO-based Vector-borne Disease Surveillance System for North Africa (PROVNA)" hat das italienische Istituto Zooprofilattico Sperimentale of Abruzzo and Molise “G. Caporale” (IZS-Teramo) Ökoregionen in Nord-Afrika klassifiziert. Mit einer Risikoanalyse, die ähnliche Umwelt- und Klima-Bedingungen berücksichtigt, konnten entomologische Überwachungsprogramme für Krankheitsüberträger angepasst und optimiert werden. Für die Bestimmung dieser Umwelt- und Klima-Bedingungen wurden Zeitreihen von Fernerkundungsdaten für die Jahre 2018 bis 2022 erstellt. Konkret wurden Bodentemperatur für Tage und Nächte, ein normierter differenzierter Vegetationsindex (NDVI), Bodenfeuchte, ein normierter differenzierter Wasserindex (NDWI) sowie Niederschlagsmenge erfasst und auf 250 Meter räumliche Auflösung bzw. 16 Tage zeitliche Auflösung harmonisiert. Der Schwerpunkt dieses Vortrags liegt auf den unterschiedlichen Methoden zur Harmonisierung der verschiedenen Datensätze. about this event: https://pretalx.com/fossgis2024/talk/LYJTB9/

Geodaten mit DuckDB verarbeiten (fossgis2024)

Wed, 20 Mar 2024 17:05:00 +0100

DuckDB hat sich als leichtgewichtiges Werkzeug für Datananalysen aller Art in der Data Science Community etabliert. Mittlerweile gibt es auch eine offizielle Erweiterung die mit Geodaten arbeiten kann. In diesem Vortrag stellen wir die grundlegenden Funktionen vor. DuckDB kann Daten aus verschiedenen Quellen wie Dateien (CSV, JSON, ...), über das Internet oder aus anderen Datenbanken einlesen. Mittels SQL können die eingelesenen Daten miteinander kombiniert und verarbeitet werden. Durch die "spatial" Erweiterung von DuckDB werden nun auch räumliche Datentypen wie Punkte, Linien oder Polygone unterstützt. Außerdem werden durch die im Hintergrund eingebundene GEOS Bibliothek geographische Analyse Funktionen bereitgestellt, Beispiele hierfür sind Flächenberechnung, Überschneidungen oder Buffer-Berechnung. Im Hintergrund wird außerdem GDAL eingebunden womit weitere zahlreiche Formate aus der Geo-Welt gelesen und geschrieben werden können. about this event: https://pretalx.com/fossgis2024/talk/MQDUEW/

Ermittlung von Solarpotentialflächen auf Gebäuden (fossgis2024)

Thu, 21 Mar 2024 09:00:00 +0100

Im Vortrag wird gezeigt, wie eine Analyse der aktuellen und potentiellen Situation der Solarenergienutzung eine mögliche Grundlage für den Ausbau erneuerbaren Energien sein kann. Bei dem vorgestellten Vorgehen werden dabei nur Open Data und Open Source Tools verwendet. In Deutschland ist die Zielsetzung formuliert worden, den Anteil des Bruttostromverbrauchs, der aus erneuerbaren Energien gewonnen wird, bis zum Jahr 2030 im Vergleich zu heute zu verdoppeln. Die Nutzung von Solarenergie, insbesondere auf Gebäuden und Freiflächen, spielt dabei eine entscheidende Rolle bei der Erreichung dieser Ziele. Eine zentrale Voraussetzung für den erfolgreichen Ausbau der Solarenergie, ist die genaue Ermittlung der Solarpotentialflächen auf Gebäuden. Hierzu wurde eine prototypische Untersuchung durchgeführt, in der verschiedene Faktoren berücksichtigt wurden. Im vorgestellten Beitrag wird die Methodik vorgestellt, den Anteil des ausgeschöpften Solarpotentials und der wertvollen Freiflächen auf Dächern in einem Testgebiet zu identifizieren. Der Workflow arbeitet auf Open Data mit Open Source Tools zur Analyse und Berücksichtigung wichtiger Faktoren, die für die zukünftige Solaranlageninstallation genutzt werden könnten. Dieses Ergebnis eröffnet die Möglichkeit, konkrete Handlungsempfehlungen zu erarbeiten. Die Identifizierung und Nutzung von Solarpotentialflächen auf Gebäuden ist von entscheidender Bedeutung für die Transformation des deutschen Energiesystems hin zu mehr Nachhaltigkeit und Umweltfreundlichkeit. Dieser Beitrag verdeutlicht die Notwendigkeit und die Möglichkeiten, die sich durch eine Analyse der Solarpotentiale bieten, und unterstreicht die Bedeutung der Solarenergie als treibende Kraft in der Energiewende Deutschlands. about this event: https://pretalx.com/fossgis2024/talk/HV8P83/

KI, GIS, EO & FOSS: Erfahrungen & offene Fragen rund um artifizielle Intelligenz (fossgis2024)

Thu, 21 Mar 2024 15:25:00 +0100

Im Vortrag wollen wir die faszinierende Welt der künstlichen Intelligenz (KI) im Kontext von Geoinformationssystemen (GIS) & Earth Observation (EO) betrachten. Gemeinsam wollen wir (keine KI-Experten, aber reichlich Praxiserfahrung) Begriffe klären, konkrete Anwendungsbeispiele vorstellen und dabei auch wichtige offene Fragen zur Diskussion stellen. Dieser Vortrag nimmt Sie mit auf eine Reise durch die spannende Umbruchszeit, in der sich auch unsere Branche befindet und soll Diskurs anregen. Unser Vortrag "KI, GIS, EO & FOSS: Erfahrungen & offene Fragen rund um artifizielle Intelligenz" wirft einen Blick auf die aufregenden Entwicklungen im Bereich künstliche Intelligenz und deren Anwendung in Geoinformationssystemen und Earth Observation. Wir möchten klarstellen, dass die Vortragenden Praktiker und Entwickler sind, nicht aber ausgewiesene KI-Experten. Unsere Betrachtung der Branche, langjährige Erfahrung sowie unser Streben nach Innovation haben uns jedoch dazu motiviert, dieses spannende Thema zu erkunden und unsere Erfahrungen zu teilen. Unsere Präsentation beginnt mit einer Klärung von Begriffen wie KI, Machine Learning und Deep Learning, um ein gemeinsames Verständnis zu schaffen. Wir werden auch einige prominente KI-Produkte/Software (z.b. ChatGPT, Dall-E 2, Midjourney usw.) kurz erläutern. Anschließend werden wir eigene konkrete Beispiele für KI-Anwendungen in GIS und EO präsentieren, darunter die Generierung von Trainingsdaten für Bildklassifikationen und die Nutzung von textbasierter KI zur Unterstützung bei der Programmierung. Darüber hinaus möchten wir wichtige offene Fragen diskutieren und Feedback von der Community sammeln. Themen wie Lizenzierung von KI-generiertem Code, Überprüfbarkeit von KI-Entscheidungen (deshalb mögen wir doch FOSS auch so sehr), ethische Aspekte und vielleicht auch die Zukunft unserer Branche stehen im Mittelpunkt. Unsere Präsentation soll zum Nachdenken anregen und den Dialog über die Chancen und Herausforderungen der KI in unserem Umfeld fördern. Wir freuen uns darauf, weitere Aspekten in sich hoffentlich anschließenden Folgediskussionen zu ergründen. Hinweis: Diese Einreichung wurde mithilfe von ChatGPT erstellt. Zu den [Slides](https://terrestris.github.io/fossgis2024/talks/2024-03-21-tawalika-jansen-ki-gis-eo-foss-erfahrungen-fragen.html) about this event: https://pretalx.com/fossgis2024/talk/W3T8WA/

Host your own QGIS Plugin Repository (fossgis2024)

Thu, 21 Mar 2024 12:20:00 +0100

In diesem Vortrag zeige ich euch wie das QGIS Plugin Repository funktioniert und wie ihr euer eigenes. QGIS Plugin Repository hosten könnt. Ein eigenes QGIS Plugin Repository bietet euch als Unternehmen oder Behörde die volle Kontrolle über die bereitgestellten Plugins. In diesem Vortrag will ich zeigen wie unser Weg zum eigenen Plugin Repository war. Angefangen mit einer einfachen XML Datei bis hin zur Web Anwendung inklusive Benutzerverwaltung. Ihr könnt das ganze gerne selber ausprobieren basierend auf unserem Open Source Projekt: https://github.com/gbd-consult/gbd-plugin-repo about this event: https://pretalx.com/fossgis2024/talk/AHATLE/

Nachhaltige Beschaffung mit Blick auf Open Source (fossgis2024)

Wed, 20 Mar 2024 17:40:00 +0100

Seit Juni 2021 beschäftigt sich die Arbeitsgruppe ["Öffentliche Ausschreibungen mit FOSS" des FOSSGIS e.V.](https://www.fossgis.de/wiki/AG_oeffentl_Ausschreibungen_FOSS) mit dem Thema der Beschaffung und Vergabe von IT-Lösungen auf Basis von FOSS. In dieser Dialogrunde wollen wir mit Vertreter:innen aus den verschiedenen Bereichen der digitalen Community Fragen zur nachhaltigen Beschaffung mit Blick auf Open Source und Digitalisierung diskutieren. Open Source Software erfährt bei Ausschreibungsverfahren zur Umsetzung von Software-Entwicklungsprojekten immer mehr Zuspruch. Doch wie verhält es sich mit der Nachhaltigkeit solcher Projekte? Kann Open Source Software nicht nur auf der technischen Ebene überzeugen, sondern auch bei ökologischen, ökonomischen und sozialen Kriterien punkten? Wo die Herausforderungen bei der Beschaffung von Software nicht nur bei technischen und wirtschaftlichen Aspekten, sondern auch im Bereich der sozialen und ökologischen Nachhaltigkeit liegen, dass wollen wir wieder mit interessanten Gästen auf dem Podium diskutieren. Angefragt für das Podium sind Vertreter:innen der digitalen Zivilgesellschaft mit Bezug zu Nachhaltigkeit und Open Source. ### Podium - Miriam Seyffarth - Open Source Business Alliance, Politische Kommunikation - Pierre Golz - Stadt Herne, FB Digitalisierung, - Anna Zagorski - Umweltbundesamt, Referat Digitaisierung und Nachhaltigkeit - Alexander Smolianitski - ZenDIS, Abteilungsleitung Open Source Projects - Niklas Alt - FOSSGIS e.V., Moderation ### Mögliche Fragestellungen an die Teilnehmenden: - Wie kann Open Source Software dabei helfen einen Beitrag zur Nachhaltigkeit zu leisten? - Wie messe ich Nachhaltigkeit von Software und deren Entwicklung? - Ist Stromverbrauch von Software der einzige relevante Faktor? - Wie kann man bestehende Richtlinen zur Nachhaltigkeit mit Leben füllen? - Wie kann man soziale Kriterien bei der Softwarebeschaffung beachten? - Wie kann es langfristig gewährleistet werden, wie kann sichergestellt werden, dass es auch funktioniert? about this event: https://pretalx.com/fossgis2024/talk/YNPBM9/

Der Weg eines Schlaglochs von der Straße auf die Karte (fossgis2024)

Wed, 20 Mar 2024 12:20:00 +0100

Jeder und jede von uns hat sich sicher schon einmal darüber geärgert: nichts Böses ahnend bleibt der Fuß oder das Rad in einem Schlagloch hängen, dass so tief ist, dass es fast auf die andere Seite der Erde reicht. Doch welchen Weg durch die GIS-Welt geht ein Schlagloch bis es auf einer Karte in der zuständigen Verwaltung landet? Und welche Rolle spielen hier Freie und Open-Source Software? Ein Schlagloch ist ein geographisches Objekt, es hat Koordinaten und passt damit wunderbar zu einem GIS. Doch wie kommt es dahin? Um die Koordinaten eines einzelnen Schlaglochs aufzunehmen, kann man selber rausgehen und sich mit einem GPS dazu stellen. Wenn man aber alle Schlaglöcher einer Gemeinde mit vielleicht mehreren hundert Kilometer an Wegenetz hat, dann ist dies nicht mehr wirklich praktikabel. Auch gibt es genug Autofahrende die wenig entspannt reagieren, wenn man auf der Straße rumläuft, selbst wenn man eine Warnweste trägt und eine GPS-Antenne in der Hand hält. Deswegen gibt es die Möglichkeit, ein mit Kameras und Scanner ausgestattetes Fahrzeug in den fließenden Verkehr zu schicken. Doch wo bleibt das GIS? Damit das Fahrzeug weiß, auf welchen Straßen und Wegen es unterwegs sein soll, werden im Vorfeld Daten gesammelt. Einige Bundesländer stellen Daten wie DOP und ALKIS als OpenData zur Verfügung, daneben gibt es in den für die Unterhaltung der Straßen zuständigen Straßenbauverwaltungen bereits existierende (GIS-)Daten und natürlich die reichhaltigen Datenbestände aus OSM. Damit haben wir Daten aus verschiedensten Datenquellen, die in einem QGIS-Projekt zusammengefasst werden können und in dem dann die Wege markiert werden, die erfasst werden sollen. Dieses QGIS geht dann mit raus auf den Rechner im Fahrzeug. Der Fahrer (wir haben leider nur Männer im Außendienst) weiß damit wo er lang muss und durch die Verbindung mit dem GPS weiß das QGIS wo gefahren wird, markiert die Straßen gleich ab womit der Fahrer gleich weiß wo er schon war. Und wie kommt jetzt das Schlagloch ins GIS rein? Durch die Kalibrierten Kameras auf den Fahrzeugen lässt sich in den Bildern Messen, ein Klick im Bild gibt eine Koordinate die im QGIS erscheint und dort mit Attribut versehen als Objekt in einer Tabelle in einer PostGIS-Datenbank landet. Einmal ein GIS-Objekt in der Datenbank, steht der kartographischen Aufbereitung nichts mehr im Weg. Was hier am Beispiel des Weges eines Schlaglochs von der Straße ins GIS beschrieben wurde, lässt sich nun natürlich auch auf anderes anwenden, z.B. auf andere Merkmale des Straßenzustands wie Risse, Flickstellen, etc. aber auch auf sämtliche anderen Objekte die von den Kameras erfasst werden. Wenn diese Merkmale des Straßenzustands erst einmal als Objekte im GIS sind, dann wird es erst richtig spannend, jedenfalls aus der Sicht eines GIS-Menschen mit Freude am Ausprobieren und Anwenden von Verarbeitungswerkzeugen im QGIS und an PostGIS-Funktionen: - In welcher Straße sind die meisten Risse aber die wenigsten Flickstellen? - Wieviel Prozent einer Straße haben Schlaglöchern oder anderen Schäden? Also welcher Anteil der Straßenfläche ist geschädigt? - An welcher Position entlang der Straße befindet sich ein Schlagloch? - Wenn es zusätzliche Angaben zu Baukosten und Alter einer Straße gibt, dann können zusammen mit den Infos zu den Schäden auch Berechnungen zum Wert einer Straße generiert werden. Vereinfacht: Je älter und je mehr Schäden umso geringer der Wert. Die komplette Bearbeitung der GIS-Daten, von der Planung am Anfang und der Befahrung im Fahrzeug, über die vielfältigen Berechnungen, Verschneidungen und Analysen bis hin zur kartografischen Ausgabe erfolgt komplett in QGIS und in einer PostgreSQL/PostGIS Datenbank. In dem vielfältigen Zusammenspiel in der GIS-Welt zwischen Punkt-, Linien und Flächenobjekten, zeigen wir einige Beispiele aus dem Bereich der Straßenzustandserfassung auf. about this event: https://pretalx.com/fossgis2024/talk/3Z9VLD/

Ein WebGIS zur Öffentlichkeitsbeteiligung in Planungsverfahren des Netzausbaus (fossgis2024)

Wed, 20 Mar 2024 17:40:00 +0100

Zur Partizipation von Trägern öffentlicher Belange, Interessenverbänden und Bürger:innen wurde im Rahmen des Netzverstärkungsprojekts Höchstspannungsleitung Elsfleth/West – Ganderkesee – Umspannwerk HUCH (Berne/Lemwerder/Ganderkesee), getragen durch die TenneT TSO GmbH, ein Open Source WebGIS basierend auf OpenLayers und GeoServer entwickelt, mithilfe dessen die beteiligten Akteur:innen aktuelle Planungsinformationen erlangen sowie ihr lokales Wissen mit der Projektträgerin teilen können. Planungs- und Genehmigungsverfahren, wie bspw. das Raumordnungs- oder Planfest-stellungsverfahren, die im Rahmen von Netzausbauprojekten durchzuführen sind, erfordern Planungsbeteiligung. Um die Partizipation von Trägern öffentlicher Belange, Interessen-verbänden und Bürger:innen niedrigschwellig zu gestalten, wurde ein Open Source WebGIS entwickelt, welches als Ergänzung zu den vorgeschriebenen Beteiligungsverfahren eingesetzt wird. Diese Art der digitalen Partizipation findet bereits umfassend Anwendung in Planungsprozessen und ermöglicht es, über politische Entscheidungsprozesse zu informieren und seitens der Akteur:innen lokales Wissen zu erfassen, das im weiteren Planungsprozess Berücksichtigung finden kann. Beteiligten Akteur:innen wird eine niedrigschwellige und digitale Möglichkeit geboten, sich aktuelle Planungs(geo)daten anzusehen, Messungen vorzunehmen und Kommentare an die Netzbetreiberin zu richten. Ergänzt wird das WebGIS um die Funktionalitäten eines PDF-Exports und einer Adresssuche. Im Fokus der Entwicklung steht eine hohe Anwender:innenfreundlichkeit, die sich durch detaillierte Toolbeschreibungen im WebGIS widerspiegelt. Die Verwaltung der Geodaten erfolgt mittels QGIS v3.28.4 als Schnittstelle zu einer PostGreSQL/PostGIS-Geodatenbank sowie GeoServer v2.22.3 zur Publizierung der Geodaten. Das WebGIS Frontend basiert auf OpenLayers v7.3.0, erweitert um die Module ol-layerswitcher v4.1.1, ol-mapbox-style v9 und ol-sidebar v2. Gehostet wird das WebGIS auf einem Apache HTTP Server v2.4. Neben den Planungsgeodaten, die z.T. aus amtlichen Geodaten bestehen, wie bspw. EU-Vogelschutzgebiete, werden sowohl basemap.de Web Vektor Karten als auch Orthophotos aus WMS-Diensten der Bundesländer Niedersachsen und Bremen als Hintergrundkarten verwendet. about this event: https://pretalx.com/fossgis2024/talk/GDEAYP/

3DProjektplaner – Stadtentwicklung mit Perspektive (fossgis2024)

Wed, 20 Mar 2024 16:45:00 +0100

Der 3DProjektplaner ist eine auf dem Open Source Masterportal basierende Webanwendung, die es planenden Dienststellen in der Verwaltung ermöglicht, Bauvorhaben im 3D-Stadtkontext geodatenbasiert zu analysieren sowie eigene städtebauliche Entwicklungsideen schnell und einfach zu skizzieren. Im Lightning Talk sollen die wesentlichen Funktionen des 3DProjektplaners sowie mögliche Anwendungsfälle des Tools aufgezeigt werden. Der 3DProjektplaner ist eine digitale Webanwendung, die es planenden Dienststellen in der Verwaltung ermöglicht, Bauvorhaben im Stadtkontext geodatenbasiert zu analysieren sowie eigene städtebauliche Entwicklungsideen schnell und einfach zu skizzieren. Aktuell stehen Fachämtern zur Prüfung von Bauvorhaben in frühen Planungsphasen oftmals nur gedruckte Pläne und Renderings zur Verfügung und beim Entwickeln neuer städtebaulicher Ideen wird in der Amtsstube zumeist zum gedruckten Luftbild und Zeichenpapier gegriffen. Das Problem: papiergebundene Entwurfsprozesse kosten Zeit und vor allem fehlt oft die Möglichkeit, das Vorhaben in frühen Planungsphasen mit dem Kontext der gebauten Stadt fundiert und datenbasiert in Abgleich zu bringen. Mit dem 3DProjektplaner kann ein Bauvorhaben im 3D-Stadtmodell digital platziert werden, um es bspw. im baulichen Umfeld zu analysieren, mit weiteren Geodaten wie z. B. digitalen Bebauungsplänen zu verschneiden oder Schattenwurfsimulationen durchzuführen. Außerdem können mithilfe leicht zu bedienender Zeichenwerkzeuge Bestandsgebäude ausgeblendet, einfache städtebauliche Skizzen in wenigen Minuten hergestellt und diese für die weitere Verwendung als PDF gespeichert oder ausgedruckt werden. Auf diese Weise schafft der 3DProjektplaner besonders in frühen Planungsphasen mithilfe von Geodaten und innovativen 3D-Technologien neue Perspektiven für die Stadtentwicklung. Der 3DProjektplaner wurde als Werkzeug für planende Dienststellen der Verwaltung entwickelt und unterstützt diese in den vielfältigen Fragestellungen und Abstimmungsprozessen sowohl verwaltungsintern als auch mit Privaten. Da es sich um eine Webanwendung handelt, die im Browser aufgerufen werden kann, wird für die Nutzung keine spezielle Hardware benötigt. Technische Grundlage des 3DProjektplaners ist das Masterportal, das hierfür im Rahmen des Projektes Connected Urban Twins (CUT) auf Grundlage intensiver Anforderungserhebungsprozesse von der Behörde für Stadtentwicklung und Wohnen in Zusammenarbeit mit Dataport im Bereich 3D weiterentwickelt wurde. Zu den neu entwickelten Funktionen gehören: - 3D Importer - 3D Draw - Sichtperspektiven - Ausblenden von Objekten des 3D-Stadtmodells Die Funktionen werden in der Masterportal-Toolbox „3D Modeller“ gebündelt und sind Teil des Masterportal-Cores. Alle Entwicklungen sind OGC-konform und wurden explizit als Open Source Software entwickelt. Der 3DProjketplaner ist ein Fachportal, das auf Basis des Masterportals (^V 2.37) konfiguriert wurde. about this event: https://pretalx.com/fossgis2024/talk/93LW77/

Einsatz von Open Data und Open Source in HH - Eine erfolgsversprechende Strategie! (fossgis2024)

Wed, 20 Mar 2024 10:50:00 +0100

Der Geschäftsführer des Landesbetrieb Geoinformation und Vermessung in Hamburg, Thomas Eichhorn, gibt einen Einblick wie Open Data und Open Source in Hamburg im Bereich der Geoinformationen eingesetzt wird. Bereits seit rund 20 Jahren setzt Hamburg im Bereich der Geoinformationen auf den Einsatz von Open Source Software. Ob als Software-as-a-Service oder in eigenverantwortlicher Entwicklung, das Portfolio des LGV im Bereich Open Source ist breit gefächert und hat sich in den Jahren neben proprietärer Software bewährt. Der Geschäftsführer des Landesbetriebes Geoinformation und Vermessung gibt einen Einblick, wie Open Data und Open Source in Hamburg eingesetzt werden und welche Erfolgsstory sich dahinter verbirgt. about this event: https://pretalx.com/fossgis2024/talk/PH83EQ/

STAC - Einführung und Neuigkeiten (fossgis2024)

Wed, 20 Mar 2024 11:45:00 +0100

Die STAC-Spezifikationen (SpatioTemporal Asset Catalog) sind eine flexible Sprache zur Beschreibung von Geodaten in verschiedenen Bereichen und für eine Vielzahl von Anwendungsfällen. In diesem Vortrag wird der aktuelle Stand der Spezifikationen vorgestellt, zu denen die STAC-Spezifikation für statische Kataloge und die auf OGC-APIs aufbauende API-Spezifikation gehören. Hierbei wird ein Fokus darauf liegem, was neu in STAC Version 1.1 enthalten ist. Zudem gibt es Informationen zu den Änderungen Die STAC-Spezifikationen (SpatioTemporal Asset Catalog) sind eine flexible Sprache zur Beschreibung von Geodaten in verschiedenen Bereichen und für eine Vielzahl von Anwendungsfällen. In diesem Vortrag wird der aktuelle Stand der Spezifikationen vorgestellt, zu denen die STAC-Spezifikation für statische Kataloge und die auf OGC-APIs aufbauende API-Spezifikation gehören. Hierbei wird ein Fokus darauf liegem, was neu in STAC Version 1.1 enthalten ist. Zudem gibt es Informationen zu den Änderungen bei den STAC API-Erweiterungen. Schlussendlich wird noch ein Blick auf das Open-Source-Ökosystem von STAC geworfen. about this event: https://pretalx.com/fossgis2024/talk/LTQY9U/

DIPAS - Digitale Bürgerbeteiligung mit Open Source & Open Data (fossgis2024)

Wed, 20 Mar 2024 17:05:00 +0100

Das Digitale Partizipationssystem DIPAS schlägt eine Brücke zwischen Bürgerbeteiligung Online und vor Ort und setzt dabei mithilfe interaktiver Touchtables auf offene Geodaten und Open-Source Technologien. Im Vortrag werden das Tool sowie die DIPAS Anwender Community vorgestellt. Das Digitale Partizipationssystem DIPAS schlägt eine Brücke zwischen Bürgerbeteiligung Online und vor Ort und setzt dabei mithilfe interaktiver Touchtables auf offene Geodaten und Open-Source Technologien. Im Vortrag werden das Tool sowie die DIPAS Anwender Community vorgestellt. Das Publikum kann sich auf Einblicke & Erfahrungsberichte aus bereits über 100 durchgeführten DIPAS-Verfahren sowie der im Juli 2023 gegründeten Anwender Community freuen, in der DIPAS verwaltungsübergreifend weiterentwickelt wird. Mit DIPAS (https://dipas.org/) können Bürgerinnen und Bürger von zu Hause aus, mobil oder in Veranstaltungen digitale Karten, Luftbilder, Pläne, 3D Modelle und Geodaten abrufen und ein genau lokalisiertes Feedback zu Planungsvorhaben geben. Die unter GNU GPL Lizenz auf Open CoDE (https://gitlab.opencode.de/dipas) veröffentlichte Open Source Software wurde von der Behörde für Stadtentwicklung und Wohnen (BSW) und dem Landesbetrieb Geoinformation und Vermessung (LGV) entwickelt. Über die im Sommer 2023 gegründete DIPAS Anwender Community (https://dipas.org/community) beraten sich die Mitglieder zu Weiterentwicklungsbedarfen, koordinieren deren Umsetzung und tauschen Erfahrungen aus. DIPAS integriert das Masterportal (https://www.masterportal.org/) und dessen Tools, wodurch die Einbindung von OGC-konformen Geodaten ermöglich ist. Alle Komponenten, die in DIPAS verwendet werden basieren auf Open-Source-Software. Die Administration wird beispielsweise durch das Content-Management-System Drupal vorgenommen. Dem Grundsatz Public Money – Public Code entsprechend werden alle Weiterentwicklungen nach der Erprobung Open Source gestellt. about this event: https://pretalx.com/fossgis2024/talk/9ZQEWP/

Automatisierte Bestimmung der Straßenbeschaffenheit mit Machine Learning (fossgis2024)

Wed, 20 Mar 2024 11:45:00 +0100

Flächendeckende Daten zu Straßenbeschaffenheit in einem einheitlichen Format wären für Routing oder Stadtplanung eine hilfreiche Information. Das mFund Projekt „SurfaceAI“ hat sich zum Ziel gesetzt, auf offenen Daten ein Machine Learning Modell zu trainieren, das den Belag und die Qualität der Straßenoberfläche anhand eines Fotos mit hoher Genauigkeit erkennt. Das Modell bildet die Grundlage, um Straßenbilder mit georeferenzierten Datensätzen auf Straßenebene zu verknüpfen. Flächendeckende Daten zu Straßenbelag und -qualität in einem einheitlichen Format, insbesondere von Rad- und Gehwegen, sind aktuell nicht vorhanden, jedoch wären sie für Routinganwendungen oder Stadtplanungsprojekte eine hilfreiche Information. Das aktuell laufende mFund Projekt „SurfaceAI“ hat sich zum Ziel gesetzt, auf bestehenden offen verfügbaren Daten ein Machine Learning Modell zu trainieren, das den Belag und die Qualität der Straßenoberfläche anhand eines entsprechenden Fotos mit hoher Genauigkeit erkennt. Das Modell bildet die Grundlage, um Straßenbilder, insbesondere bestehende umfassende Bildbestände in der Plattform für Straßenbilder Mapillary mit entsprechenden Informationen anzureichern. Werden diese mit dem OpenStreetMap Straßennetz verschnitten, so lassen sich daraus neue offene Daten zu Straßenbeschaffenheit für verschiedene Städte und Kommunen generieren. Zusätzlich zu den berechneten Daten ist ein weiteres Ziel des Projektes, das Modell zur Auswertung sowie Verknüpfung neuer oder aktualisierter Bilddatensätze frei zur Verfügung zu stellen. Es werden im Rahmen des Vortrags bisherige Erkenntnisse und Fortschritte des Projekts geteilt – dieses läuft von November 2023 bis Dezember 2024. about this event: https://pretalx.com/fossgis2024/talk/MHTEAN/

Beyond WebGIS: Empowering Scrollytelling with Maps and Data (fossgis2024)

Wed, 20 Mar 2024 16:40:00 +0100

Nicht nur journalistische Formate profitieren von dynamischen multimedialen Scrollytelling – ob Stadt- oder Windparkplanung, fast jede Geschichte mit einem geographischen Bezug lässt sich durch interaktive Karten, Charts oder Tabellen ausgestalten und Leser:innen zu neuen Gedanken inspirieren. Wir demonstrieren exemplarisch u.a. mit dem Business Intelligence Tool Apache Superset, wie man die zahlreichen Visualisierungsmöglichkeiten des Scollytellings vollends ausschöpfen kann. Nicht nur journalistische Formate profitieren von dynamischen multimedialen Scrollytelling – ob Stadt- oder Windparkplanung, fast jede Geschichte mit einem geographischen Bezug lässt sich durch interaktive Karten, Charts oder Tabellen ausgestalten und Leser:innen zu neuen Gedanken inspirieren. Wir demonstrieren exemplarisch u.a. mit dem Business Intelligence Tool Apache Superset, wie man die zahlreichen Visualisierungsmöglichkeiten des Scollytellings vollends ausschöpfen kann. about this event: https://pretalx.com/fossgis2024/talk/XKM88N/

GeoStyler - Ein visueller Vergleich (fossgis2024)

Wed, 20 Mar 2024 16:35:00 +0100

In diesem Talk führen wir einen visuellen Vergleich der von GeoStyler unterstützten Stilformate anhand einiger Beispielkarten durch. GeoStyler besetzt durch seine Stilkonverter eine Nische in der Webkartographie und konnte sich so in den letzten Jahren in der Open Source Community etablieren. Um User bei der Entscheidung zu unterstützen, ob und wie GeoStyler für sie von Nutzen sein kann, führen wir in diesem Talk einen visuellen Vergleich der unterstützten Stilformate anhand einiger Beispielkarten durch. Gleichzeitig zeigen wir damit auf, wo es noch Verbesserungsbedarf gibt. Dieser Talk ist ein Call for Participation. about this event: https://pretalx.com/fossgis2024/talk/ETCVAE/

Open Data @Greenpeace e.V. (fossgis2024)

Wed, 20 Mar 2024 14:15:00 +0100

Es wird über die Einführung eines offenen Datenportals von Greenpeace Deutschland berichtet (https://daten.greenpeace.de/). Dabei wird aus der Praxis berichtet : welche Software wurde warum ausgewählt , welche (un)erwarteten Hürden gab es bei der Einführung/Entwicklung Greenpeace Deutschland erhebt häufig verschiedenste Umweltdaten mit Geo-Bezug. Von Schadstoffmessungen nach Industrieunfällen, Verunreinigungen von Gewässern bis hin zu Waldzustandsberichten. Bisher wurden diese Daten nur in Reports veröffentlicht - wobei meist nur Grafiken und nicht die Rohdaten gezeigt/veröffentlicht wurden. Greenpeace will nun möglichst alle Daten veröffentlichen und dabei die freie Software CKAN nutzen. Im Vortrag wird unter anderem von der Softwareauswahl, dem Bereitstellen und Säubern der Daten und der NutzerInnen Schulung berichtet. about this event: https://pretalx.com/fossgis2024/talk/PGJNAF/

Sovereign Cloud Stack (SCS): Offene, föderierbare Cloud-Technologie für jeden Sektor (fossgis2024)

Wed, 20 Mar 2024 11:15:00 +0100

Die zertifizierbaren offenen Standards und eine OS-Referenzimplementierung für einen vollständigen, modularen Cloud- und Container Stack der Sovereign Cloud Stack (SCS) Community ermöglichen auch kleineren und mittleren Providern sowie internen IT-Dienstleistern State-of-the-art-Technologie einzusetzen. Die Standards ermöglichen außerdem, Cloud-Ressourcen organisationsübergreifend zu föderieren und somit gemeinschaftlich und dezentral ein leistungsstarkes „Sovereign Cloud Grid“ zu bilden. Leistungsfähige, externe Cloud-Dienste (Public Cloud) bergen vielfach die Gefahr großer Abhängigkeiten, mangelnder Kontrolle und geringer Einflussmöglichkeiten auf die Technik. Eigene leistungsfähige Infrastrukturen (Private Cloud) aufzubauen und zu betreiben, ist für viele Unternehmen und Organisationen jedoch eine große Herausforderung. Sovereign Cloud Stack (SCS) bringt Entwickler und Betreiber vollständig offener Cloud-Technologie sektorübergreifend zusammen, um gemeinschaftlich einen standardisierten OS-Cloud- und Container-Stack inklusive Betriebswerkzeuge zu entwickeln sowie Betriebswissen auszutauschen, systematisch zu erfassen, zu dokumentieren und öffentlich nutzbar zu machen. Auf diese Weise können Abhängigkeiten von großen Cloud-Anbietern reduziert und echte digitale Souveränität gefördert werden. about this event: https://pretalx.com/fossgis2024/talk/FHTKUF/

The SPARQL Unicorn Ontology documentation: Exposing RDF geodata using static GeoAPIs (fossgis2024)

Wed, 20 Mar 2024 17:40:00 +0100

We introduce the ontology documentation feature of the SPARQLing Unicorn QGIS Plugin, allowing the conversion of RDF data dumps to static HTML deployments with static versions of well-known APIs such as OGC API Features. Contents of RDF data are deployed interoperably accessible for many research communities. Our talk shows the tool's motivation, conversion process with test datasets, discusses limitations, standardization issues and future developments of this approach in general. A pertaining problem for linked open (geo-)datasets hosted on the web is the difficulty of their accessibility for people who do not have a previous knowledge about the datastructures and the software to process [RDF](https://www.w3.org/TR/rdf11-concepts/). Often, researchers are only interested in the question if a dataset is suitable for their needs, which warrants an easy discovery of linked open data content with common tools used by the research community they are familiar with. For example: A GIS researcher expects data to be served using e.g. [OGC API Features APIs](http://features.developer.ogc.org/) in formats such as [GeoJSON](https://datatracker.ietf.org/doc/rfc7946/) or [GML](https://www.ogc.org/standard/gml/), to be processed in tools such as [QGIS](https://www.qgis.org) to allow for an easy accessibility. The GIS researcher is not necessarily proficient in the [SPARQL query language](https://www.w3.org/TR/sparql11-query/) and in RDF-to- Geodata-conversion. This is currently not the case for RDF data dumps, e.g. hosted on [Zenodo](https://zenodo.org) or [Github](https://github.com), since special kinds of data need to be manually extracted and converted to be of use to other communities first. To mitigate this gap in data provision, we present the newly-developed SPARQL Unicorn ontology documentation feature, available as [QGIS plugin](10.5281/zenodo.3786814), a [standalone script](https://github.com/sparqlunicorn/sparqlunicornGoesGIS-ontdoc) and as a [Github Action](https://github.com/sparqlunicorn/sparqlunicornGoesGIS-ontdoc), which allows to create readily-hostable data dumps from RDF data, which can be served using static webspaces such as Github Pages. RDF resources are represented by one HTML and RDF resource each, which are identified by their URI and for dereferencability, ideally hosted at this particular place on the web. In addition to an HTML navigation and search function and a variety of graph analysis formats (e.g. [GraphML](http://graphml.graphdrawing.org), [GEXF](https://gexf.net)), the script is able to generate static API versions e.g. OGC API Features for geospatial data or the IIIF Presentation API for accessing media data. This allows to access geodata encoded in RDF as pre-generated FeatureCollections in e.g. QGIS therefore making geospatial data in RDF directly accessible to the GIS community. In our paper we describe the publication process of several semantically enriched and publicly available geospatial datasets in RDF and how they can be reused in QGIS as FeatureCollections and as RDF using the SPARQLing Unicorn QGIS plugin. The [SPP Dataset](https://github.com/archaeolink/SPP1630Harbours-RDF), the [AncientPorts Dataset](https://github.com/archaeolink/AncientPorts_RDF) and the [CIGS Datatset](https://github.com/archaeolink/CIGS_RDF) highlight the representation of (spatio-)temporal research data referenced by scientific literature and serve as examples for the OGC API features integration. In addition, we highlight the publication of [IIIF](https://iiif.io/api/presentation/3.0/) content (e.g. as complementary data to geodata) using the example of [ARS-LOD](https://github.com/RGZM/ars-lod/). Finally, we discuss further extensions of the plugin for other statically generated content, limitations of the current approach and highlight the importance of this way of publishing for the general public and in a research software engineering setup. about this event: https://pretalx.com/fossgis2024/talk/GKTTQH/

ol-describe-map: Mehr Web-Accessibility für OpenLayers Karten (fossgis2024)

Wed, 20 Mar 2024 18:15:00 +0100

In diesem Lightning Talk möchte ich die ol-describe-map-Bibliothek vorstellen und erläutern, wie sie zur Verbesserung der Accessibility in Webkarten beitragen kann. Die Bibliothek ist zwar noch jung & sicher auch fern von feature-complete, aber sie hat das Potenzial, den Zugang zu Webkarten für alle Nutzer:innen zu erleichtern. Ich werde die Grundfunktionalitäten vorstellen, zeigen wie man speziellere Anforderungen umsetzen kann und einen kleinen Ausblick geben. Der Lightning Talk widmet sich der ol-describe-map-Bibliothek, die dazu beitragen kann, OpenLayers-basierte Webkarten für alle Nutzer:innen zugänglicher zu gestalten. Diese Bibliothek ist noch in einem frühen Entwicklungsstadium und ich möchte zeigen, was man damit jetzt bereits machen kann. Die ol-describe-map-Bibliothek bietet die Möglichkeit, OpenLayers-Karten textuell zu beschreiben und somit die Accessibility zu verbessern. Gerade JavaScript basierte interaktive Webkarten sind traditionell kaum bis gar nicht im barrierearm. Sie stellen viele Nutzer vor große Herausforderungen, die kartograpisch dargestellten Inhalte zu erkennen, bzw. zu begreifen. Der Ansatz von ol-describe-map ist, das jeweils aktuelle Kartenbild textuell zu beschreiben (Worauf ist die Karte zentriert, in welchem ungefähren Maßstab sind die Daten angezeigt, usw.) und zudem jede Kartenebene zu verschriftlichen. Der finale Beschreibungstext wird per default dem aria-description-Attribut des Kartenelements hinzugefügt. Dieses Vorgehen erfüllt grundsätzliche Empfehlungen etwa der Web Accessibility Initiative – Accessible Rich Internet Applications (WAI-ARIA). Die Konfigurierbarkeit der durch ol-describe-map generierten Beschreibung ist vielfältig gegeben, um auch Anforderungen von spezifischen Kartenapplikationen zu erfüllen. about this event: https://pretalx.com/fossgis2024/talk/GNFQUA/

Open Source and Web-Based GeoAI tool for Transparent Forest Fire Prediction (fossgis2024)

Wed, 20 Mar 2024 17:40:00 +0100

Utilizing open geospatial data and AI, we are trying to predict forest fire susceptibility in Brandenburg. This case study showcases full-stack web-GIS, emphasizing user interaction and transparent AI through open-source tools like GEE, GDAL, Python, Maplibre, and TiTiler. The advancement of AI algorithms has led to their widespread adoption in Geographic Information Science (GIS) applications, encompassing areas such as natural and humanitarian crises, location-based services, and urban planning, collectively referred to as GeoAI. Given the inherent opacity of AI systems, their integration in decision-making processes necessitates a degree of transparency and explainability. We address the imperative of eXplainable AI (XAI) within web-based GIS applications. To this end, we present a case study focused on forest fire susceptibility in the state of Brandenburg, Germany. Leveraging open remote-sensing data, alongside established open-source geospatial tools like Google Earth Engine (GEE) and GDAL, we undertook the aggregation and preprocessing of satellite imagery. This process was complemented by Python for model training, TiTiler for raster tile service, and a frontend application developed with Vue.js and Maplibre GL JS for user interaction and map rendering. For the vital aspect of explainability, we employed the SHAP (SHapley Additive exPlanations) Python library to quantify the influence and contribution of each predictor at user-specified locations to provide an explanation of why the AI model made a certain prediction at a specific geographical location. In this pursuit, we considered three primary categories of factors: topographic attributes (Elevation, Aspect, and Slope), meteorological variables (Global Radiation, Land Surface Temperature, Precipitation, and Drought Index), and vegetation indices (NDVI, NDMI, GNDMI, and Land Cover). Historical wildfire incident data spanning from 2013 to 2023 served as the inventory dataset derived from MODIS. NDVI, NDMI, and GNDMI metrics were derived from Sentinel-2 imagery utilizing GEE, while GDAL was employed for necessary calculations based on relevant bands. Topographic and meteorological data sets were sourced from OpenDEM and Deutscher Wetterdienst (DWD), respectively, and underwent preprocessing via GDAL and associated utility tools. This encompassed image format conversion, re-projection, mosaicking, and image classification using gdal_translate, gdalwrap, and gdal_calc.py. The combination of these processed inputs, using Python's Geopandas, resulted in distinct training and testing datasets. The Random Forest algorithm was selected to train the prediction model. Subsequently, the resulting fire susceptibility map underwent processing in TiTiler to create map tiles and a Cloud Optimized GeoTIFF (COG) file. The generated map was seamlessly integrated into the frontend application, enhancing user interaction. For enhanced interpretability and interaction with the AI model, an API was developed. It accepts pixel coordinates of selected fire susceptibility values from the front-end leveraging the SHAP Python package to quantify the significance and contribution of each predictor. These insights are then presented in the frontend interface, ensuring a comprehensive and accessible user experience. about this event: https://pretalx.com/fossgis2024/talk/TCVX3C/

Remote Plugin Installer (fossgis2024)

Wed, 20 Mar 2024 18:30:00 +0100

QGIS Plugins via POST Request installieren und damit den Entwicklungsworkflow beschleunigen. Quasi Remote Code Execution für QGIS. In diesem Lightning Talk stelle ich euch ein Plugin vor, was ich entwickelt habe um meine Arbeitsabläufe beim Entwickeln von QGIS Plugins zu beschleunigen. Das Ziel war es in meiner IDE mit einem Tastendruck das Plugin in QGIS zu installieren und dort direkt die Änderungen testen zu können. Da das ganze über das Netzwerk läuft kann, ermöglicht es mir das Plugin auch in einer Virtuellen Maschine, auf einem anderen Rechner oder direkt beim Kunden zu testen (nicht empfohlen). about this event: https://pretalx.com/fossgis2024/talk/3SJZEG/

Eröffnung (fossgis2024)

Wed, 20 Mar 2024 10:00:00 +0100

Feierliche Eröffnung der Konferenz durch Vertreter des FOSSGIS e.V. mit wertvollen Hinweisen zum Ablauf und der Organisation. - Jörg Thomsen - Eröffnung der Konferenz 2024 in Hamburg-Harburg durch den Vorsitzenden des FOSSGIS e.V. - Grußworte und Organisatorisches von der Technische Universität Hamburg (TU Hamburg) - Ankündigung der Keynotes about this event: https://pretalx.com/fossgis2024/talk/YRY3GB/

xPlanBox: kommunale Datendrehscheibe für die Bauleit- und Landschaftsplanung (fossgis2024)

Wed, 20 Mar 2024 14:15:00 +0100

XPlanung ist der verbindliche Standard für die Bauleit- und Landschaftsplanung auf kommunaler Ebene. Die OpenSource-Anwendung xPlanBox unterstützt die Kommunen als zentrales Managementverfahren für sämtliche Planwerke sowie als Bereitstellungsplattform von XPlanung-Daten. Durch Containerlösungen ist der Betrieb für mehrere Mandanten einfach möglich, ebenso der Zugriff auf die Daten durch die Integration im Masterportal. Die Anwendung xPlanBox der Firma lat/lon steht unter opencode.de als OpenSource-Verfahren allen Interessierten zur Verfügung. Die Anwendung dient auf kommunaler Ebene der Abbildung der Bauleit- und der Landschaftsplanung auf Basis des verbindlichen Standards XPlanung. Das Kommunale Rechenzentrum Niederrhein (KRZN) stellt seit 2022 für über 40 Kommunen am linken Niederrhein die xPlanBox als zentrales Managementverfahren für sämtliche Planwerke der Kommunen sowie als Bereitstellungsplattform von XPlanung-Daten bereit. Auf dieser Basis werden die von den Kommunen bereitgestellten Planwerke nach erfolgreicher Validierung über OGC-Geoservices in die Geodateninfrastruktur des KRZN integriert, sodass die Daten allen Mitarbeiter:innen der Kommunen, aber auch der Zivilgesellschaft (Planungsbüros, Wirtschaft, …) über Geoportale – im KRZN auf Basis des Masterportals - zur Verfügung stehen. Die betroffenen Planarten – aktuell Bebauungs- und Flächennutzungspläne, zukünftig auch Landschaftspläne – werden für alle Kommunen in einer im Verbandsgebiet des KRZN abgestimmten einheitlichen Darstellung über WebMapServices bereitgestellt, zum Beispiel für die Auskunft in einem Geoportal. Auswertungen und Analysen können über WebFeatureServices beispielsweise in QGIS durchgeführt werden. Vorhandene APIs bieten als Schnittstellen weitere Nutzungsmöglichkeiten. Daneben ermöglicht der Einsatz von Containerlösungen einen stabilen und flexiblen Betrieb. Zudem kann so der Aufbau einer Umgebung für mehrere Mandanten einfach realisiert werden. Der Vortrag soll u.a. aufzeigen, • wie die xPlanBox in einer Mehrmandantenumgebung betrieben werden kann, • welche Möglichkeiten die xPlanBox den Kommunen in der täglichen Praxis bietet und • wie sich die Datenintegration in Masterportal, QGIS und in 3D-Portalen gestaltet. about this event: https://pretalx.com/fossgis2024/talk/SVQLL3/

Einsatz von Machine Learning zur Erstellung von XPlanGML (fossgis2024)

Wed, 20 Mar 2024 15:25:00 +0100

Der Vortrag präsentiert einen methodischen Ansatz zur automatisierten Erstellung von XPlanGML im Raster-Umring-Szenario mithilfe von Machine Learning. Es werden die einzelnen Schritte des Workflows sowie die Einsatzmöglichkeiten von Machine Learning im Detail erläutert. Der Standard XPlanung sieht eine Umsetzung aller in Deutschland erstellten Planwerke in das Datenaustauschformat XPlanGML vor. Die Frist zur Umsetzung bestehender Planwerke endete im Februar 2023, trotzdem liegen viele Planwerke noch immer nicht als XPlanGML vor. Die einfachste Bereitstellung von XPlanGML ist das sog. Raster-Umring-Szenario, bei dem das Planwerk als Rasterdatei vorliegt und der Geltungsbereich durch einen Vektorumring dargestellt werden muss. In diesem Vortrag wird ein methodischer Ansatz mit Machine Learning zur automatisierten Erstellung von XPlanGML im Raster-Umring-Szenario vorgestellt. Im Vordergrund steht dabei die Erstellung einer georeferenzierten und zugeschnittenen Rasterdatei, welche aus einem einfachen Scan mittels Machine Learning erstellt wird. Die einzelnen Schritte zur Erstellung einer XPlanGML im Raster-Umring-Szenario werden demnach im Detail vorgestellt und gezeigt, wo die Nutzung von Machine Learning möglich ist. Die Arbeiten zu diesem Thema sind noch nicht abgeschlossen und werden aktuell im Rahmen einer Masterarbeit durchgeführt. Die Fragestellung soll dabei mit verschiedenen Open-Source Software-Anwendungen gelöst werden und befasst sich ausschließlich mit Bebauungsplänen. about this event: https://pretalx.com/fossgis2024/talk/KLCZXW/

pg_featureserv - Veröffentlichung von Vektordaten mit OGC API Features (fossgis2024)

Wed, 20 Mar 2024 15:25:00 +0100

Im Vortrag wird pg_featureserv vorgestellt, ein leichtgewichtiges Programm zur Veröffentlichung von Vektordaten aus einer PostGIS Datenbank über den OGC API Features Standard. Es wird die Installation erklärt, die verschiedenen Filtermöglichkeiten der Daten besprochen und es wird genauer auf die Eigenschaften des OGC API Features Standards als Nachfolger des WFS (Web Feature Service) eingegangen. In diesem Vortrag wird das Programm pg_featureserv vorgestellt. Es ist schlank, in der Programmiersprache Go geschrieben und dient der Veröffentlichung von Vektordaten aus PostGIS-Datenbanken mittels dem OGC API Features-Standard. Zunächst werden die wichtigsten Funktionen von pg_featureserv inklusive Installation und Einrichtung vorgestellt. Ein besonderes Augenmerk liegt auf den zahlreichen Filterfunktionen des Tools, die genaues und effizientes Abfragen von räumlichen Daten ermöglichen. Die Anwendung dieser Funktionen wird anhand von Beispielen erklärt. Außerdem wird der OGC API Features-Standard vorgestellt, als fortschrittliche Methode zur Veröffentlichung von Geodaten im Vergleich zum traditionellen WFS. Die Unterschiede zwischen beiden Ansätzen werden erläutert und die Vorteile des neuen Standards werden hervorgehoben. about this event: https://pretalx.com/fossgis2024/talk/VKNTPT/

XPlanung für die Cloud (fossgis2024)

Wed, 20 Mar 2024 14:50:00 +0100

Im April 2022 wurde der Quellcode der Software xPlanBox der Firma lat/lon im Rahmen eines Pilotprojekts auf der OpenCoDE-Plattform des BMI veröffentlicht. Seitdem wird die Software kontinuierlich weiterentwickelt und kommt im Rahmen des Onlinezugangsgesetz (OZG) und des "Einer-für-Alle"-Prinzips (EfA) zum Einsatz. Der Vortrag stellt kurz die wichtigsten Erweiterung der Software für den Betrieb in der Cloud vor. Im Oktober 2017 hat der IT-Planungsrat die verbindliche Einführung der Standards XPlanung und XBau beschlossen. Daraus folgt, dass IT-Verfahren die neuen Standards zur Raum- und Bauleitplanung unterstützen sollen. Mit der Veröffentlichung der Software xPlanBox im Rahmen eines Pilotprojekts auf der OpenCoDE-Plattform des Bundesministeriums des Innern und für Heimat (BMI) steht nun eine umfassende Lösung zum Austausch des objektorientierten Datenaustauschformat XPlanGML (XPlanung) bereit. Im Rahmen des OZG-Umsetzungsprojekts "Bürgerbeteiligung und Information" aus dem Themenfeld "Bauen & Wohnen" werden die Komponenten der xPlanBox für die Bereitstellung von räumlichen Planwerken im Internet verwendet. Auf den vergangenen FOSSGIS-Konferenzen wurde das Projekt und die Einsatzmöglichkeiten der Software bereits präsentiert. In diesem Jahr sollen die Neuerungen der Open Source Version insbesondere die Erweiterung für den Betrieb im Container-basierten Kubernetes-Umfeld präsentiert werden. Außerdem wird es einen Überblick über zukünftige Entwicklungen im Projekt gegeben. about this event: https://pretalx.com/fossgis2024/talk/PH8HBR/

actinia wachsen Blätter: Geoprozessierung und Visualisierung mit Leafmap in Jupyter (fossgis2024)

Wed, 20 Mar 2024 18:25:00 +0100

[Leafmap](https://leafmap.org/) ist ein freies und quelloffenes Python-Paket für interaktives Mapping und räumliche Analyse von Geodaten in einer Jupyter-Umgebung. Leafmap bietet interaktive Werkzeuge, mit denen Geodaten einfach in eine Karte geladen werden können. Wir haben die Cloud-Plattform für Geoverarbeitung [actinia](https://actinia-org.github.io/) mit Leafmap gekoppelt, um Berechnungen aus actinia direkt anzeigen zu können. Im Lightning Talk wird dies an einem Beispiel demonstriert. [Leafmap](https://leafmap.org/) ist ein freies und quelloffenes Python-Paket für interaktives Mapping und räumliche Analysen von Geodaten. Es ermöglicht die Visualisierung von Geodaten auf einer Karte mit minimalem Programmieraufwand in einer Jupyter-Umgebung wie Google Colab, Jupyter Notebook und JupyterLab. Leafmap basiert auf verschiedenen Open Source Paketen wie Folium, ipyleaflet und anderen Komponenten. Leafmap bietet eine Reihe von interaktiven Werkzeugen, mit denen Vektor- und Rasterdaten ohne Programmierung in eine Karte geladen werden können. Wir haben [actinia](https://actinia-org.github.io/), eine Open-Source-Cloud-Plattform für Geoverarbeitung, mit Leafmap gekoppelt, um Berechnungsergebnisse aus actinia direkt anzeigen zu können. Die Schnittstelle ist hier der [actinia-python-client](https://github.com/actinia-org/actinia-python-client/), der die Geoanalyse mit actinia auf einem Jupyter Notebook sehr einfach macht. Im Lightning Talk wird dies an einem Beispiel demonstriert. Zu den [Slides](https://mundialis.github.io/fossgis2024/actinia-wachsen-blaetter-mit-leafmap/index.html) about this event: https://pretalx.com/fossgis2024/talk/RSGLAH/

Stand des GRASS GIS Projekts: Nicht was Sie denken! (fossgis2024)

Wed, 20 Mar 2024 11:45:00 +0100

In unserem Vortrag geben wir einen Überblick über die neuesten Entwicklungen und Fortschritte des GRASS GIS Projekts, das im Sommer 2023 sein 40-jähriges Jubiläum feierte. Der Fokus liegt darauf, Missverständnisse rund um das Projekt aufzuklären und die tatsächliche Vielseitigkeit und Modernität der aktuellen GRASS GIS Version zu verdeutlichen. Der Vortrag wird einige häufige Missverständnisse ausräumen, wie z.B. "es ist nur eine Kommandozeile", "es ist nur ein Desktop GIS" und mehr. In unserem Vortrag geben wir einen umfassenden Überblick über die neuesten Entwicklungen und Fortschritte des [GRASS GIS Projekts](https://grass.osgeo.org/), das im Sommer 2023 sein 40-jähriges Jubiläum feierte. Der Fokus liegt darauf, Missverständnisse rund um das Projekt aufzuklären und die tatsächliche Vielseitigkeit und Modernität der aktuellen GRASS GIS Version zu verdeutlichen. Der Vortrag wird versuchen, einige häufige Missverständnisse über das Projekt auszuräumen, wie z.B. "es ist nur eine Kommandozeile", "es ist nur ein Desktop GIS" und "es gibt es schon lange, also muss es gut finanziert sein". Die wichtigen Verbesserungen der Benutzeroberfläche mit dem neuen Ein-Fenster-Layout erhöhen die Benutzerfreundlichkeit und optimieren das Datenmanagement. Die Parallelisierung vieler Module mit OpenMP ermöglicht eine beschleunigte Verarbeitung großer Datensätze. Die Codequalität sowohl in C, C++ als auch in Python wurde durch strengere Compiler-Konfigurationen massiv verbessert. Der Vortrag geht auch auf die Integration von GRASS GIS in verschiedene Workflows ein und zeigt Anwendungsmöglichkeiten in Python, R, QGIS, auf der Kommandozeile und in der Cloud. Abschließend werden neue Community-Aktivitäten und Finanzierungsmöglichkeiten über [OpenCollective.com](https://opencollective.com/osgeo/projects/grass) vorgestellt. Zu den [Slides](https://htmlpreview.github.io/?https://github.com/neteler/grass-gis-talks-markus/blob/main/fossgis2024.html#/) about this event: https://pretalx.com/fossgis2024/talk/SYY9NM/

Wie schreibe ich ein GRASS GIS Addon? (fossgis2024)

Wed, 20 Mar 2024 12:20:00 +0100

In diesem Vortrag werden bewährte Praktiken beim Entwickeln von GRASS GIS Addons vorgestellt. Neben der Bibliothek "grass-gis-helpers", die Werkzeuge und Hilfsmittel bereitstellt, wird auch die Nutzung wiederverwendbarer Workflows gezeigt, um durch automatisiertes Linten und Testen die Qualität des Codes sicherzustellen. Abschließend werden einige von uns entwickelte GRASS GIS Addons vorgestellt. Lassen Sie sich inspirieren, um danach vielleicht ein eigenes GRASS GIS Addon zu entwickeln! In diesem Vortrag werden bewährte Methoden und Werkzeuge beleuchtet, die die Entwicklung von GRASS GIS Addons effizienter und zugänglicher gestalten. Der Fokus liegt auf erprobten Praktiken beim Schreiben von GRASS GIS Addons, die es ermöglichen, hochwertige Erweiterungen zu erstellen und in die GRASS GIS Umgebung zu integrieren. Außerdem wird die Bibliothek ["grass-gis-helpers"](https://github.com/mundialis/grass-gis-helpers) vorgestellt, die die Entwicklung von GRASS GIS Addons erleichtert und wertvolle Werkzeuge und Hilfsmittel bereitstellt. Ein weiterer Aspekt des Vortrags wird die Nutzung [wiederverwendbarer Workflows](https://github.com/mundialis/github-workflows) sein. Hier wird erklärt, wie man Workflows zum Linten und Testen in die GRASS GIS Addon Entwicklung integrieren kann, um die Qualität der Erweiterungen sicherzustellen. Abschließend werden einige von uns entwickelte [GRASS GIS Addons](https://mundialis.github.io/grass-addons/) vorgestellt. Dieser Vortrag bietet einen umfassenden Einblick in bewährte Praktiken, innovative Addons und nützliche Tools, die die GRASS GIS Addon Entwicklung erleichtern. Kommen Sie vorbei und lassen Sie sich inspirieren, um danach vielleicht selbst ein eigenes GRASS GIS Addon zu entwickeln! Zu den [Slides](https://mundialis.github.io/fossgis2024/grass-gis-addon/index.html) about this event: https://pretalx.com/fossgis2024/talk/BKCPV8/

Es ist doch nur Software - Zusammenfassung der AG-Aktivitäten (fossgis2024)

Wed, 20 Mar 2024 17:05:00 +0100

POLAR - Vollkonfigurierbare, pluginbasierte Kartenklienten für bürgernahe Anwendungen (fossgis2024)

Wed, 20 Mar 2024 16:30:00 +0100

Die Paketbibliothek POLAR wurde Ende 2023 als Open-Source-Projekt auf GitHub veröffentlicht. Basierend auf OpenLayers und unter Verwendung von Vue werden verschiedenste wiederverwendbare Funktionalitäten publiziert, welche gemeinsam als Kartenklient für zahlreiche Anwendungsgebiete im Einsatz sind. So verwenden Bürger bereits heute POLAR, u. a. im Meldemichel Hamburg, im Denkmalinformationssystem SH, und in einer Vielzahl von Antragssystemen deutscher Behörden. Die Paketbibliothek [POLAR](https://github.com/Dataport/polar) ist darauf ausgelegt, dass aus einem Core- und diversen Plugin-Paketen ein Kartenklient zusammengesteckt wird, der bereits einen Großteil der Anforderungen abdeckt. Für generische Anwendungsfälle kann auch ein generischer Klient genutzt werden, der dann nur noch über Konfiguration auf die Situation angepasst wird. Der Fokus liegt allerdings auf Erweiterbarkeit: Da Klienten oft noch einsatzspezifische "kleine Details" benötigen, können sowohl eigene Plugins ergänzt, als auch spezifischer Klientencode geschrieben werden, um diese Lücken zu füllen. So sind wiederkehrende Anforderungen wie Zeichenfunktion, Geolokalisierung, Addresssuche, Pin-Funktion, uvw. bereits erledigt – sowie weitere einsatzspezifische Details schnell ergänzt. Der Klient kann als Ganzseitenapplikation verwendet werden, ist aber als Komponente konzipiert. Hierzu wird er stets in einem ShadowDOM gerendert, um Style-Konflikte mit einer umliegenden Applikation zu vermeiden. Zugleich wird eine Datenschnittstelle angeboten, um Daten leicht ein- und ausgeben zu können. Die Kartenapplikation funktioniert dann "wie ein Input-Element" für ein umgreifendes Formular. Dazu gehören Verwendbarkeit auf mobilen Geräten wie auch ein möglichst hoher Grad an Barrierearmut zu den Grundsätzen. Im Falle des [Denkmalinformationssystems SH](https://efi2.schleswig-holstein.de/dish/dish_client/index.html) kann der Kartenklient benutzt werden, um die in SH dokumentierten Denkmäler einzusehen und weitere Informationen zu ihnen zu erhalten. Im [Hamburger Meldemichel](https://static.hamburg.de/kartenclient/prod/) wiederum können Bürger Schäden an öffentlicher Infrastruktur sowohl einsehen als auch melden. Nachgelagerte Antragsprozesse ermöglichen so eine effiziente Bearbeitung der Schäden im öffentlichen Raum. about this event: https://pretalx.com/fossgis2024/talk/8JMQSJ/

Bereitstellung von freien Geodaten (OpenData) mit STAC beim LGLN (fossgis2024)

Wed, 20 Mar 2024 12:20:00 +0100

Es wird der Einsatz von STAC (SpatioTemporal Asset Catalog) zur Katalogisierung von freien Geodaten (OpenData) beim Landesamt für Geoinformation und Landesvermessung Niedersachsen (LGLN) auf Basis von OSS vorgestellt. Das LGLN sitzt auf einem riesigen Geodatenschatz und ein Großteil dieser Daten wird zukünftig den Bürgern als OpenData und gemäß der “Durchführungsverordnung (EU) 2023/138 zur Festlegung bestimmter hochwertiger Datensätze” (HVD) kostenfrei zur Verfügung gestellt werden. Diese Geodaten werden unter Verwendung des offenen Standards STAC katalogisiert. Die Kataloge können dann über die STAC-API gezielt abgerufen und durchsucht werden. Mit Hilfe von verschiedenen Tools (STAC-Browser, QGIS, …) gibt es die Möglichkeit, komfortabel auf die Daten zuzugreifen und sie zu visualisieren. about this event: https://pretalx.com/fossgis2024/talk/HPLTPQ/

Starkregengefahrenhinweiskarten für Niedersachsen/Schleswig-Holstein/HB und Hamburg (fossgis2024)

Wed, 20 Mar 2024 15:25:00 +0100

Die Wissenschaft ist sich einig, dass er fortschreitende Klimawandel zu einer Zunahme von Extremwetterereignissen (u.a. Starkregen) führt. Das Bundesamt für Kartografie und Geodäsie hat das Ziel, eine bundesweit einheitliche Starkregengefahrenhinweiskarte zu erstellen. Die Arbeitsgemeinschaft (Fischer Teamplan und Weber–Ingenieure) erstellt derzeit mit OpenSource-Software (HiPIMS und QGIS) und überwiegend mit OpenData diese Karten für Niedersachsen/Schleswig-Holstein/Bremen und Hamburg. Bereits 2019 haben wir im Auftrag des Bundesamts für Kartographie und Geodäsie das Pilotprojekt Starkregengefahrenhinweiskarte NRW bearbeitet. Das Ziel ist eine bundesweit einheitliche Erstellung einer Starkregengefahrenhinweiskarte zur Informationsvorsorge und als Grundlage für weiterführende Schutzmaßnahmen und Risikoanalysen. Seit Anfang 2023 werden für 10 Bundesländer weitere Karten erstellt. Von uns werden derzeit die Bundesländer Niedersachsen/Schleswig-Holstein/Bremen und Hamburg auf ihre Starkregengefahr hin untersucht. Dazu wurden als Eingangsdaten überwiegend OpenData (beispielsweise von der Bundesanstalt für Gewässerkunde, dem Deutschen Wetterdienst und länderspezifische Daten) verwendet. Hinzu kamen jedoch auch nutzungseingeschränkte Daten (Deutsche Bahn, Bundesanstalt für Straßenwesen, länderspezifische Daten, Unterhaltungsverbände). Die Berechnung (2D-Oberflächenabflusssimulation) haben wir mit der OpenSource Software HiPIMS (high-performance integrated hydraulic and hydrological modelling software (https://github.com/lukeshope/hipims-ocl)) durchgeführt. Wir haben ein Modell mit einer Auflösung von 1x1m für eine Gesamtfläche von rund 69.000 km² aufgestellt und die rund 175.000 wasserwirtschaftlich relevanten Sonderbauwerke (Brücken/Durchlässe/Schöpfwerke) hydraulisch abgebildet. Die Datenaufbereitung erfolgte mit QGIS und Nutzung von QGIS Model Builder sowie automatisierten Abfragen und Routinen. In unserem Vortrag gehen wir auf die technische Umsetzung mithilfe diverser OpenSource-Werkzeuge ein: - Die manuelle Datenverarbeitung von Massendaten im GIS - Die geskriptete Anwendung von GIS Tools im Cluster - Die Einbindung von KI in Prozesse der Geodatenverarbeitung Derzeit liegt eine Vorsimulation für das Gesamtgebiet vor und es erfolgt eine digitale Überprüfung der Ergebnisse bezüglich der Wassertiefe und Ausdehnung der Überflutungsflächen. Im Frühjahr 2024 liegen die plausibilisierten Starkregengefahrenhinweiskarten vor. Das BKG plant, die Ergebnisse wie bereits die NRW Karten als OpenData zu veröffentlichen. about this event: https://pretalx.com/fossgis2024/talk/QBPHWV/

Mapbender - die neue Version 4 stellt sich vor (fossgis2024)

Wed, 20 Mar 2024 11:45:00 +0100

In diesem Vortrag soll der Umgang mit dem WebGIS Client Mapbender demonstriert werden. Mapbender bietet die Möglichkeit eine unbegrenzte Anzahl von Anwendungen zu erzeugen. Die Anwendungen können nach Belieben aufgebaut und mit Kartendiensten ausgestattet werden. Es können leicht individuelle Suchen und Datenerfassung aufgebaut werden. Dies erfolgt alles ohne Code schreiben zu müssen. Es wird der Blick in die Administration gerichtet und die Konfiguration von Anwendungen praktisch demonstriert. Dabei wird der Fokus auf die Version 4.0 gesetzt und die Neuerungen und Änderungen werden vorgestellt. **Was ist Mapbender?** Ist eine Software zur Erstellung von webbasierten Kartenanwendungen. Mapbender bietet mächtige Werkzeuge zur Erfassung, Anzeige, Bearbeitung und Verwaltung von Geodaten. Wie ein Content-Management-System (CMS) für Geodaten und Geodienste verfügt Mapbender über eine komfortable webbasierte Oberfläche, um individuelle Anwendungen zu erstellen. Mit nur einer Installation können beliebig viele Anwendungen angelegt und individuell gestaltet werden. Darüber hinaus verfügt Mapbender über eine Benutzerverwaltung und ein Rechtemanagement, um den Zugriff auf Anwendungen zu steuern. Das flexible Rechtemanagement, die Verwaltung von Datenquellen und Kartendiensten, sowie Designanpassung der Oberfläche bieten bieten eine große Gestaltungsfreiheit beim Aufbau von Anwendungen. Anhand einer praktischen Vorstellung lernen Sie Mapbender kennen. Dabei werden folgende Themen vorgestellt - Erstellung einer eigenen Anwendung & Vorstellung der Mapbender Funktionalität - Verwaltung von WMS in Mapbender - Rollen und Rechte in Mapbender - Drucken & Anpassung des Drucklayouts - Erstellung individueller Suchen - Datenerfassung mit dem Digitizer - Designanpassungen about this event: https://pretalx.com/fossgis2024/talk/G7QA3W/

GeoNetwork-UI: Ein anwenderfreundliches Frontend für den Datenkatalog GeoNetwork (fossgis2024)

Wed, 20 Mar 2024 14:50:00 +0100

Das Open-Source Projekt GeoNetwork-UI steht in enger Verbindung zur klassischen Metadatenkatalog-Anwendung GeoNetwork. In dieser Präsentation werden wir sowohl den aktuellen Stand des Projekts GeoNetwork-UI, das innovative Design des neuen Metadaten-Editors, als auch die bevorstehenden Entwicklungen vorstellen. Der Vortrag stellt die neuesten Entwicklungen im Open Source Projekt GeoNetwork-UI vor. Zentrales Ziel von GeoNetwork-UI ist es, eine Alternative zum veralteten Frontend von GeoNetwork zu liefern. Neben der Modernisierung der Benutzeroberfläche von GeoNetwork, entstand GeoNetwork-UI aus der Notwendigkeit, neue Anwendungsfälle beim Arbeiten mit Metadaten anzugehen und eine erheblich verbesserte Benutzererfahrung zu bieten. Beispielsweise wird durch das Geonetwork-UI eine einfachere Datenaufnahme mit automatischer Befüllung der Metadaten geboten. Außerdem bietet es Formulare passend zu jeder Organisation und eine automatische Speicherung der Daten im Entwurf-Modus. Einer der Hauptkritikpunkte der ursprünglichen GeoNetwork-Anwendung war die komplizierte Eingabe über den Metadaten-Editor, der zwar viele Standards unterstützt, als Konsequenz aber sehr umfangreiche und komplexe Eingabemasken für den Benutzer bereitstellt. Ein bekanntes Beispiel sind die XML-Schemas der ISO19139, die aufgrund ihrer Komplexität viele Nutzer:innen überfordern. Dieses Problem soll mit Hilfe des neu erstellten Metadaten-Editors angegangen und verbessert werden. Die Zusammenarbeit zwischen den Mitgliedern innerhalb einer Organisation wird ebenfalls erleichtert, z.B. können Nutzer:innen gegenseitig um Feedback und Reviews bitten. In diesem Vortrag werden wir daher einige typische Use Cases vorstellen, die dies veranschaulichen. Außerdem werden cutting-edge Technologien wie z.B. “Web-Components” und fortschrittliches Theming mit CSS-Variablen vorgestellt. Es wird auf die einfache Konfiguration und Deployment eingegangen. Zudem wird auf die Kompatibilität von Geonetwork-UI mit Geonetwork 4.2 hingewiesen. GeoNetwork-UI ist ein vielversprechendes Projekt mit einer wachsenden Gemeinschaft, und wir freuen uns darauf, die Anwendung und deren potentielle Einsatzbereiche im Detail vorzustellen. about this event: https://pretalx.com/fossgis2024/talk/7XRXPS/

Aufbau einer Agrar-Forschungsdateninfrastruktur mit GeoNode und Kubernetes (fossgis2024)

Wed, 20 Mar 2024 14:15:00 +0100

In diesem Vortrag werde ich das zukünftige Daten Repositorium unserer Arbeitsgruppe für Forschungsdatenmanagement am ZALF vorstellen. Ich werde das Paradigma "Infrastructure-as-Code" praktisch erläutern. Darauf aufbauend die Bedeutung unserer Kubernetes Cluster erklären sowie Tools wie ArgoCD vorstellen. Anschließend werde ich auf unsere GeoNode Installation auf Kubernetes eingehen. - https://github.com/zalf-rdm/geonode - https://github.com/zalf-rdm/geonode-k8s In unserer Forschungsgruppe betreiben wir das renommierte „BonaRes“ Repositorium (https://www.bonares.de/) der Agrarwissenschaften. „BonaRes“ steht für „Boden als nachhaltige Ressource für die Bioökonomie“. Unser aktuelles Repositorium basiert auf Map-Apps und ArcGIS Software. Im Rahmen der Verstetigung des Repositories nach Abschluss der DFG Förderung im Jahr 2025 haben wir uns dazu entschieden, unser Repositorium auf freie Software und Kubernetes umzustellen. In diesem Vortrag werde ich einen Einblick in den zukünftigen Software-Stack des Daten Repositoriums unserer Arbeitsgruppe für Forschungsdatenmanagement am Leibniz-Zentrum für Agrarlandschaftsforschung (ZALF) e. V. geben. Um unsere Motivation in der Arbeit mit Kubernetes darzulegen, werde ich das Paradigma "Infrastructure-as-Code" praktisch erläutern. Darauf aufbauend die Bedeutung unserer verschiedenen Cluster sowie einzelne Tools, wie z.B. ArgoCD (https://argoproj.github.io/), für die kontinuierliche Integration (CI) vorstellen. Anschließend werde ich auf unsere GeoNode Installation auf Kubernetes eingehen, die einzelnen Komponenten beschreiben und zeigen, welche Interaktion wir mit weiteren FOSS Komponenten für die Erweiterung unserer Forschungsdaten Plattform planen. Abschließend werde ich auf die technischen Herausforderungen eingehen, die bei der Umsetzung eines Kubernetes-Workflows in einer öffentlichen Einrichtung aufgetreten sind. Weitere Links: - https://github.com/zalf-rdm/geonode-k8s/ about this event: https://pretalx.com/fossgis2024/talk/YQQMKV/

pygeoapi - eine Python Server Software für OGC API Standards (fossgis2024)

Wed, 20 Mar 2024 14:50:00 +0100

Lernen Sie die Python Server Implementation der OGC API suite of standards kennen. Anhand von einfachen Beispielen wird vorgeführt wie mit pygeoapi OGC API Dienste erstellt werden können. Diverse Standards wurden bereits von pygeoapi implementiert und können leicht bereitgestellt werden. Die Konfiguration erfolgt dabei via YAML in Textdateien. **pygeoapi unterstützt folgende Standards** - OGC API - Features (OGC Reference Implementation) - OGC API - Coverages - OGC API - Tiles - OGC API - Records - OGC API - Processes - OGC API - Environmental Data Retrieval - SpatioTemporal Asset Catalog pygeoapi ist eine Python Serverentwicklung der OGC API Suite of Standards. Das Projekt entstand im Umfeld der OGC API-Bestrebungen, die das Ziel haben eine neue Generation an OGC Diensten zu entwickeln. pygeoapi bietet dabei eine einfache Möglichkeit einen RESTful OGC API Endpunkt unter der Verwendung von OpenAPI, GeoJSON, und HTML zu erstellen. Das pygeoapi-team arbeitet dabei eng mit dem OGC zusammen, ist auf den gemeinsamen Entwicklertreffen vertreten und setzt die Anforderungen der neuen Standards direkt um. https://pygeoapi.io/ about this event: https://pretalx.com/fossgis2024/talk/GTNXSB/

Prozedurale Kunst mit QGIS (fossgis2024)

Wed, 20 Mar 2024 16:30:00 +0100

Mit QGIS als Leinwand, dem Geometrie-Generator als Pinsel und datendefinierter Übersteuerung als Palette wird gemalt und animiert bis die CPU bricht. In 5 Minuten zu einem prozeduralen Kunstwerk, was jeden NFT-~~Verkäufer~~Trickbetrüger in Neid erblassen lässt! Mit QGIS als Leinwand, dem Geometrie-Generator als Pinsel und datendefinierter Übersteuerung als Palette wird gemalt und animiert bis die CPU bricht. about this event: https://pretalx.com/fossgis2024/talk/EEFWZP/

Weltwärmestrom Datenbank Projekt: webbasierte Explorationswerkzeuge für Punktdaten (fossgis2024)

Wed, 20 Mar 2024 16:30:00 +0100

Im Weltwärmestrom-Datenbank Projekt wird eine neue Forschungsdateninfrastruktur für terrestrische Wärmestromdaten aufgebaut. Zentraler Aspekt ist die Einhaltung der FAIR und OPEN Datenpolitik. Unter anderem werden webbasierte fachbezogene Explorations- und Analysewerkzeuge angeboten, womit sich Nutzende bereits im Browser einen ersten Überblick über die Daten verschaffen können. Fokus dieser Präsentation ist die technische Umsetzung dieser Explorationswerkzeuge. Das Weltwärmestrom Datenbank Projekt setzt sich als Ziel eine neue Forschungsdateninfrastruktur (Web Portal) für terrestrische Wärmestromdaten zu entwickeln. Über die letzten Jahrzehnte ist eine umfangreiche, globale Datensammlung zum Thema Wärmestrom entstanden, welche über eine zentrale Anlaufstelle im Internet durch Einhaltung der FAIR und OPEN Datenpolitik zur Verfügung gestellt werden soll. Neben den Daten selbst, bietet die Anwendung eine integrierte Literaturdatenbank, einen internen Bereich für registrierte Nutzende, eine API und fachbezogene Explorationswerkzeuge, welche hier detaillierter beschrieben werden. Das Paper beschäftigt sich mit den Funktionalitäten des Web Portals, welche durch eine Anforderungsanalyse erfasst wurden, und beschreibt die für die Umsetzung verwendeten Komponenten. Die Explorationswerkzeuge sind hierbei ein separates Modul, welche in VueJS implementiert wurden und über npm in die Projekthomepage eingebunden werden. Als Input benötigt die Anwendung Punktdaten und eine Schema Datei für die Datenbeschreibung. Zentral für die Datenexploration ist ein auf MapLibre basierender Kartenviewer, der die georeferenzierten Punktdaten auf einer Weltkarte darstellt. Damit soll Nutzen-den bereits im Browser die Möglichkeit geboten werden, sich einen ersten Überblick über die Daten zu verschaffen. about this event: https://pretalx.com/fossgis2024/talk/CBWGLM/

Modellierung von Fuzzyness / Wobbliness in Geodaten (fossgis2024)

Wed, 20 Mar 2024 16:30:00 +0100

Insbesondere bei der Bereitstellung von Open Data nach den FAIR-Prinzipien zur bestmöglichen Offenheit und Transparenz ist die Angabe von Unsicherheiten und Zweifeln für den Nachnutzenden von enormer Bedeutung. Bei interdisziplinärer Zusammenarbeit ist dieser Aspekt umso wichtiger. In diesem Paper werden fünf data-driven interdisziplinäre Use-Cases für den Umgang mit und die Modellierung von vagen und unsicheren Georeferenzen aus dem Bereich der Archäologie und Geowissenschaften vorgestellt. # Einleitung Geodätinnen und Geodäten wissen, dass jede Bestimmung einer Länge, Winkel, bzw. eine Koordinate mit Unsicherheiten und/oder statistischen Kenngrößen wie Standardabweichungen, 3-Sigma-Regel etc. belegt ist. Insbesondere bei der Bereitstellung von Open Data nach den FAIR-Prinzipien [1] (Findable, Accessible, Interoperable und Reusable) zur bestmöglichen Offenheit und Transparenz ist die Angabe von Unsicherheiten und Zweifeln für den Nachnutzenden von enormer Bedeutung. Bei interdisziplinärer Zusammenarbeit ist dieser Aspekt umso wichtiger. Insbesondere in den Geistes- und Kulturwissenschaften (Humanities / Cultural Heritage) und auch Geowissenschaften (wie z.B. Geologie) spielen Geodaten eine große Rolle. Georeferenzierungen sind Teil der täglichen Arbeit und stellen ein Herausforderung bei der Bereitstellung von Open Geodata nach den FAIR-Prinzipien dar. Archäologische und geowissenschaftliche Forschung muss bei der Datenmodellierung mit Zweifeln wie Fuzzyness und Mehrdeutigkeiten umgehen. Dies geschieht insbesondere bei der Georeferenzierung [2;3]. Um jedoch reproduzierbare und verständliche Daten für die Wiederverwendung zu schaffen und gleichzeitig die Datenqualität archäologischer Daten zu gewährleisten, müssen diese Zweifel und Unklarheiten offengelegt werden [4]. Dies ist auch für die FAIRifizierung von Daten wichtig, die ein großer Teil der Nationalen Forschungsdateninfrastruktur (NFDI) ist [5;6]. In diesem Kontext müssen insbesondere Vagheiten und Unsicherheiten für die Arbeit mit und Bereitstellung von Geodaten modelliert werden [7-9]. Für die Verknüpfung von Daten und die FAIRifizierung ist jedoch die von Berners-Lee [10] vorgeschlagene graphbasierte Modellierung als Linked Open Data (LOD) die Methode und Technik der Wahl. Aufgrund der großen Vielfalt der Forschungsbereiche ist eine interdisziplinäre, allgemein verständliche Modellierung von Unsicherheiten und Vagheiten in Geodaten eine große Herausforderung. In diesem Paper werden fünf data-driven interdisziplinäre Use-Cases für den Umgang mit und die Modellierung von vagen und unsicheren Georeferenzen (am Beispiel von Fundstellen) auf der Grundlage von Literatur als LOD aus dem Bereich der Archäologie und Geowissenschaften vorgestellt. Die Anwendungsfälle implementieren drei Modellierungsstrategien [11] unter Verwendung von Wikidata, Linked Open Data sowie einer Ontologie, modelliert in OWL [12] und Wikibase [13] und nehmen zudem Möglichkeiten in Open Street Map unter die Lupe. # Use Cases ## Use Case A Ogham-Steine sind Monolithen mit der frühmittelalterlichen irischen Ogham-Primitivschrift, die vor allem auf der Insel Irland und im westlichen Teil Großbritanniens zwischen dem 4. und 9 Jhd. n. Chr. errichtet wurden. Die meisten Steine befinden sich nicht mehr an ihrem ursprünglichen Standort, was für die kartografische Erfassung wichtig ist und die Bestimmung ihrer ursprünglichen Funktion erschwert [14]. Ogham-Steinfunde werden in verschiedenen Katalogen wie Büchern (z. B. 14-16), Online-Datenbanken (z. B. das CISP-Projekt) oder Online-Repositorien (z. B. Ogham in 3D) erwähnt. Diese Quellen liefern Informationen in unterschiedlicher Granularität: Townlands, Beschreibungen und Koordinaten in WGS84/GPS oder irischen GRID-Referenzen. Zudem werden ganze Biographien von Geo-Locations dort erfasst. Wie könnten diese Ungenauigkeiten und Unsicherheiten in Community-Hubs wie Wikidata oder Open Street Map abgebildet werden? Ein Beispiel hierfür ist CIIC 81, der im Stone Corridor des University College Cork (UCC) steht und mit Hilfe von WIkidata [17] und Open Street Map modelliert wurde, vgl. auch Wikidata Q106680733 [18] und OSM Node 11071361392 [19]. ## Use Case B Die Dissertation von S. Baars beschäftigt sich mit der Silbermünzprägung von Kroton, einer achäischen Kolonie in Süditalien, vom 6. bis 3. Jh. v. Chr. Dabei kommen verschiedene numismatische Methoden zum Einsatz, darunter auch die der Hortfundanalyse. Sämtliche Fundorte der untersuchten Horte sind nicht exakt georeferenziert (z. B. anhand der Dokumentation von Grabungsberichten). Die ermittelten Fundorte sind aus der Literatur abgeleitet und weisen unterschiedliche Präzisionsgrade hinsichtlich der geografischen Lage auf. Eine recht genaue Angabe bietet z. B. der Hortfund von "Tarent 1938" (IGCH 1902) in der "via Oberdan" in Tarent. Hinweise auf eine Verortung des Fundes im modernen und/oder antiken Stadtkerne liefern z. B. "Paestum 1937" (IGCH 1925) oder "Strongoli 1955" (IGCH 1885; in der Gegend der antiken Stadt Petelia). Teils sind lediglich Hinweise auf größere Regionen vorhanden, z. B. wurden Hortfunde im Jahr 1864 in "Kalabrien" (IGCH 1873) oder 1964 in "Süditalien" (IGCH 1894) gefunden oder stammen von der "Ionischen Küste” (IGCH 1916). Die Modellierung dieser Fundorte wurde mittels RDF und Wikibase durchgeführt. Ein Beispiel hierfür ist der Fundort “Fiume Esaro 1967 (gennaio)”, der die fuzzy-sl Wikibase ID Q67 [20] und URI site_3003 [21] führt. ## Use Case C Ein Teil der Dissertation von F. Schenk befasst sich mit den Nachweisen des Ascheregens des Campanian Ignimbrite (CI) in Mitteleuropa; ein trachytischer Tuff aus einem spätpleistozänen vulkanischen Ereignis [22;23], der aus der Region Kampanien (Italien) stammt. Vor etwa 40.000 Jahren fand der größte Ausbruch des CI in den Phlegräischen Feldern statt. In diesen Tagen ist dies wieder von erhöhtem Interesse, da ein weiterer Ausbruch des Supervulkans bevorstehen könnte [24]. Nach dem Ausbruch bedeckten massive Glasablagerungen aus dem CI-Ausbruch große Teile des osteuropäischen Kontinents; vulkanisches Material des CI findet sich häufig in isolierten Wasserscheiden und Tälern. Diese Fundorte sind in mehreren Papern festgehalten, z.B. (a) genaue Koordinaten, z.B. "[...] Lago Grande di Monticchio in Süditalien (40°56N, 15°35′E)" [25], (b) Verweise auf Städte, z. B. Neapel [26] (c) Verweise auf Regionen, z. B. Altopiano delle Murge [27] oder (d) Verweise auf Höhlen und archäologische Stätten, z.B. die Crvena Stiljena-Höhle in Montenegro [28]. Dabei stellt sich die Frage wie diese verschiedenen Granularitäten von Fundorten modelliert und auf einen WKT-Punkt vereinfacht werden? Ist die Verwendung von “Google Maps” oder “geohack by toolforge” ausreichend? Diese Modellierungen wurden mittels RDF und Wikibase durchgeführt. Ein Beispiel hierfür ist der Fundort in der “Crvena Stiljena-Höhle”, der die URI cisite_51 [29] führt. ## Use Case D Insbesondere in Münzfund-Datenbanken wie z.B. Antike Fundmünzen in Europa (AFE) werden Fund-Koordinaten hinterlegt. Zu diesem Fundort kann angegeben werden, ob die Koordinaten präzise sind oder auch nicht. Ein Fundort kann hier z.B. ein Gräberfeld, eine Grabungsstelle oder ein Einzelfund eines Sondengängers sein. Alle Fundmünzen mit allen Details wie bei einer Grabung einzugeben ist weder umsetzbar (da die Details oft fehlen) noch zielführend, da die Eingabe zu viel Zeit und die Oberfläche zu unübersichtlich werden würde. Um die Fundorte vor privaten Sondengängern zu schützen, werden Fund-Koordinaten jedoch durch AFE nur auf einer höheren Ebene (Place) veröffentlicht. Hierbei wird möglichst mit dem einem Ortsverzeichnis, hier: iDAI.gazetteer [30], verbunden. Dies kann jedoch zu Problemen führen, wenn Fundmünzen in verschiedenen Systemen eingetragen sind. Da aber das Vorgehen zum Verschleiern der Fund-Koordinaten über die Systeme nicht vereinheitlicht wurde, können diese nur bedingt genutzt werden, um Duplikate zu identifizieren. Werden diese Duplikate nicht erkannt, kann dies zu fehlerhaften Auswertungen von Daten aus verschiedenen Quellen führen. ## Use Case E Die Münzstätte einer Münze ist nicht immer eindeutig, man hat nicht immer einen Namen dazu und weiß auch nicht, wo diese lag. Wenn man jedoch Münzen einheitlich einer soche Münzstätte zuordnen möchte, wird dies in nomisma.org durch sogenannte "uncertain mints" verwirklicht. Man weiß also nicht, wo die Mints waren und ob diese nicht vielleicht auch eine andere benannte Mint sein könnten. Nomisma listet bei der Suche nach “uncertain” für Münzstätten immerhin 232 Treffer auf, z.B. [Uncertain Mint 129](http://nomisma.org/id/uncertain_129_sco). In der RDF-Modellierung zu dieser wird die Unsicherheit noch nicht mit modelliert. Daher wurden in zwei Masterarbeiten [31;32] acht Möglichkeiten untersucht, wie Unsicherheiten in RDF modelliert werden können. # Referenzen [1] https://doi.org/10.1038/sdata.2016.18 [2] https://www.adwmainz.de/fileadmin/user_upload/digitale-akademie/graphentechnologien/Bruhn-Unold-Unsicherheit_Graphdatenbanken.pdf [3] https://doi.org/10.5281/zenodo.6380914 [4] http://dx.doi.org/10.15496/publikation-87762 [5] https://doi.org/10.5281/zenodo.5654897 [6] https://doi.org/10.5281/zenodo.5849841 [7] https://zfdg.de/sb004_004 [8] https://doi.org/10.1023/A:1016740830286 [9] https://doi.org/10.5281/zenodo.3252392 [10] https://www.w3.org/DesignIssues/LinkedData.html [11] https://codeberg.org/ResearchSquirrels/fuzzy-sl [12] https://github.com/research-Squirrel-Engineers/fuzzy-sl-ontology [13] https://fuzzy-sl.wikibase.cloud/ [14] Macalister, RAS. (1945): Corpus Inscriptionum Insularum Celticarum. Vol. I. Dublin: Stationery Office. [15] MacManus, D. (1997): A Guide to Ogam. Maynooth Monographs 4. Maynooth: An Sagart. [16] Ziegler, S. (1994): Die Sprache Der Altirischen Ogam-Inschriften. Göttingen: Vandenhoeck and Ruprecht. [17] https://codeberg.org/ResearchSquirrels/fuzzy-sl/src/branch/main/wikidata/fsl_wikidata_ogham_stone_exsitu_onsitesurvey.png [18] http://www.wikidata.org/entity/Q106680733 [19] https://openstreetmap.org/node/11071361392 [20] https://fuzzy-sl.wikibase.cloud/wiki/Item:Q67 [21] https://research-squirrel-engineers.github.io/croton-geo/site_3003/ [22] https://doi.org/10.1007/s007100170010 [23] https://doi.org/10.1007/bf02597680 [24] https://t1p.de/vtxub [25] https://doi.org/10.1016/s1040-6182(00)00066-5 [26] https://doi.org/10.1016/s0377-0273(96)00063-7 [27] https://doi.org/10.1016/j.jvolgeores.2007.10.007 [28] https://doi.org/10.1016/j.yqres.2011.02.005 [29] https://research-squirrel-engineers.github.io/campanian-ignimbrite-geo/cisite_51/index.html [30] https://gazetteer.dainst.org [31] https://t1p.de/fsk91 [32] https://t1p.de/yh6us about this event: https://pretalx.com/fossgis2024/talk/VTYCM7/

GeoServer Cloud mit Kubernetes (fossgis2024)

Wed, 20 Mar 2024 15:25:00 +0100

"GeoServer Cloud" ist ein Projekt, welches das Ziel verfolgt die vom klassischen GeoServer implementierten OGC-Standards und weitere Schnittstellen als individuell skalierbare Microservices "cloud native" in einer Container-basierten Umgebung bereitzustellen. Der Vortrag stellt die Möglichkeiten der (OGC-)Dienst-Orchestrierung am Beispiel von Kubernetes vor und beleuchtet die Vor- und Nachteile dieser Entwicklungen. Der klassische GeoServer als monolithische Serverlösung stößt im Umfeld moderner Microservice-Architekturen schnell an technische Grenzen. Diesen Problemen tritt das "GeoServer Cloud" Projekt (https://github.com/geoserver/geoserver-cloud) entgegen, indem bestehende GeoServer-Implementierungen durch Erweiterung und Anpassung in individuell einsetzbare Einzelkomponenten transformiert werden. Diese können dann im Rahmen einer Microservice-Architektur in Container-basierten Verwaltungsumgebungen wie beispielsweise Kubernetes eingesetzt und beliebig skaliert werden. Der Vortrag beleuchtet die technischen Konzepte (dynamic service discovery, externalized configuration, distributed events, API gateway) und diskutiert Vor- und Nachteile dieser Entwicklungen. Am Beispiel eines lokalen KIND-Setups (Kubernetes in Docker) werden die Möglichkeiten in aller Kürze veranschaulicht. about this event: https://pretalx.com/fossgis2024/talk/FPU77T/

Hinweiskarten Starkregengefahren: OpenData für die bundesweite Klimawandelanpassung (fossgis2024)

Wed, 20 Mar 2024 14:50:00 +0100

Infolge des Klimawandels treten Starkregenereignisse häufiger und intensiver auf; sie verursachen jährlich erhebliche Schäden. Als Beitrag zu einer optimalen staatlichen Vorsorge erstellt das Bundesamt für Kartographie und Geodäsie (BKG) eine bundesweite und einheitliche Hinweiskarte zu Starkregengefahren. Diese wird bis Ende 2025 sukzessive erstellt und Entscheidungsträgern, dem Katastrophenschutz sowie der gesamten Öffentlichkeit als OpenData frei zugänglich gemacht. Die bei Starkregenereignissen auftretenden Niederschlagsmengen können in kürzester Zeit so hoch ausfallen, dass es auch abseits von Gewässern zu katastrophalen Überflutungen und in der Folge zu erheblichen Personen- und Sachschäden kommt. Zum bestmöglichen Schutz müssen relevante Informationen für präventive Maßnahmen und für ein wirksames Katastrophenmanagement frei verfügbar mit einfacher Zugriffsmöglichkeit vorliegen. Unerlässlich sind dabei Informationen zur Lage und zur potentiellen Intensität der Gefahren. Hierbei haben Geodaten, wie etwa Digitale Geländemodelle, Bebauungsdaten oder hydrologische Bauwerksinformationen, eine entscheidende Bedeutung. Mittels einer hydrodynamischen Abflusssimulation lassen sich daraus Überflutungsszenarien für verschiedene Niederschlagsereignisse erstellen, die Hinweise über Risiken von Starkregenereignissen liefern. Für die Gebiete einiger Städte und Kommunen liegen bereits unterschiedliche Starkregenkarten vor, die jedoch nicht flächendeckend verfügbar sind. Sie unterscheiden sich oft in den zugrundeliegenden Daten, Annahmen und Kartendarstellungen. Um in einer Katastrophenlage grenzübergreifende Maßnahmen durchzuführen ist eine bundesweite, nach einheitlichen Grundsätzen erarbeitete Karte erforderlich. Als Pilot einer bundesweit einheitlichen Simulation hat das BKG im Herbst 2021 eine Hinweiskarte für Nordrhein-Westfalen veröffentlicht und bietet sie als OpenData der Öffentlichkeit als interaktive Webkarte, als WMS und zum Download an. Insbesondere durch das Angebot als freiem Download steigen die Möglichkeiten der Nachnutzung deutlich. Die berechneten Ergebnisdatensätze zu Überflutungstiefen, Fließgeschwindigkeiten und Fließrichtungen, die nicht in Klassen eingeteilt sind, lassen sich damit in ein eigenes Geoinformationssystem einbinden. Neben einer individuellen, nutzungsorientierten Darstellung werden Verschneidungen mit eigenen Fachdaten sowie weiterführende Auswertungen möglich. Die Hinweiskarte aus Nordrhein-Westfalen wird bereits im Katastrophenschutz zu Planungszwecken eingesetzt. Innerhalb eines großen Kooperationsprojekts mit den zuständigen Fachbehörden der Bundesländer Berlin, Bremen, Brandenburg, Hamburg, Mecklenburg-Vorpommern, Niedersachsen, Sachsen, Sachsen-Anhalt, Schleswig-Holstein und Thüringen wird die Hinweiskarte derzeit erweitert. Die freie Veröffentlichung der Ergebnisse ist für die erste Jahreshälfte 2024 geplant. Mit den verbleibenden Bundesländern steht das BKG im Austausch und plant eine sukzessive Veröffentlichung der Karten bis Ende 2025. Bildbeschreibung: Überflutungstiefen für ein außergewöhnliches (links) und extremes (rechts) Starkregenereignis. about this event: https://pretalx.com/fossgis2024/talk/F9Q3RK/

PyQGIS Schnuppervortrag – Mein erstes Plugin für QGIS (fossgis2024)

Wed, 20 Mar 2024 12:20:00 +0100

Wie erstelle ich mein erstes QGIS-Plugin? Eine Live-Demo für alle, die schon immer wissen wollten, wie es geht. Es gibt in jedem Jahr Beiträge zu Python, PyQGIS und neuen QGIS-Plugins. Ein spannendes Themenfeld, aber wie funktioniert das alles eigentlich und womit fängt man an? Dieser Vortrag gibt einen kurzen und verständlichen Überblick über ein sehr umfangreiches Thema - auch für alle ohne Programmier-Vorkenntnisse. Sei dabei, wie in einfach nachvollziehbaren Schritten live ein Plugin entwickelt wird, und leg gleich danach selbst los! about this event: https://pretalx.com/fossgis2024/talk/7BLNEG/

BBOX: Kompakter OGC API Server für Features, Tiles und mehr (fossgis2024)

Wed, 20 Mar 2024 14:15:00 +0100

[BBOX](https://www.bbox.earth/) ist eine Open Source Implementation der neuen OGC API Standards mit Rückwärtskompatiblität zu WMS und WFS. Rasterkarten werden mit UMN MapServer oder QGIS Server gerendert, Vektorkacheln können direkt aus PostGIS-Daten erzeugt werden. BBOX ist in der Programmiersprache Rust implementiert und enthält einen hochperformanten Web-Server. Unterstützte OGC API Services: * OGC API - Features * OGC API - Maps, mit Unterstützung von OGC WMS 1.3 * OGC API - Tiles, mit WMTS and XYZ Endpunkten * OGC API - Processes, mit externer Processing Engine als Backend Enterprise-Funktionen: * Authentication / Authorization * Instrumentation und Monitoring * Docker support Einfache Bedienung: * `bbox-server serve –map alaska.qgz` Links: * Quellcode: https://github.com/bbox-services/bbox/ about this event: https://pretalx.com/fossgis2024/talk/CVTHAL/

GIS mit Go (fossgis2024)

Wed, 20 Mar 2024 18:20:00 +0100

Die Programmiersprache Go hat sich in verschiedenen IT-Bereichen etabliert. Dieser Lightning Talk bietet einen kurzen Überblick über Go mit einem Fokus auf das bestehende Ökosystem um Geodaten zu verarbeiten. Go ist bekannt für Geschwindigkeit und Zugänglichkeit. Zahlreiche GIS-Projekte wie pg_featureserv, pg_tileserv und tegola nutzen bereits Go. Dieser Vortrag präsentiert weitere Tools und Bibliotheken in dieser Sprache. Die Programmiersprache Go hat sich in verschiedenen IT-Bereichen etabliert. Dieser Lightning Talk bietet einen kurzen Überblick über Go mit einem Fokus auf das bestehende Ökosystem um Geodaten zu verarbeiten. Go ist bekannt für Geschwindigkeit und Zugänglichkeit. Zahlreiche GIS-Projekte wie pg_featureserv, pg_tileserv und tegola nutzen bereits Go. Dieser Vortrag präsentiert weitere Tools und Bibliotheken in dieser Sprache. about this event: https://pretalx.com/fossgis2024/talk/NUQXXH/

gnuplot – Ein Bild sagt mehr als 1000 Zahlen … (clt24)

Sun, 17 Mar 2024 16:00:00 +0100

gnuplot in meiner UNIX-Werkzeugkiste seit mehr als einem Jahrzehnt nicht wegzudenken! gnuplot kann viel mehr, als nur mathematische Funktionen (schön) zu plotten. Wann immer man ein paar Zahlen antrifft, die irgendwie in zusammen gehören (ob Spritpreise, das Wetter, vielleicht ja sogar die Lottozahlen) – eine Grafik zeigt Zusammenhänge und Entwicklungen. Und das geht super einfach mit nur wenigen, intuitiven Befehlen. Im Vortrag wird an verschiedenen Beispielen erklärt, wie man Zahlen in informative und skalierbare Grafiken vewandeln kann, und wie man mit gnuplot Daten auswerten und Kurven-Fits an Ausgleichsfunktionen in Sekundenschnelle erstellen kann. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/285

How to Slides (clt24)

Sun, 17 Mar 2024 17:30:00 +0100

von LaTeX Beamer zu Markdown Marp Ich durfte in verschiedenen Kontexten Erkenntnisse in Vorträgen präsentieren. Von Leistungstests für Software im akademischen Umfeld über Verprobungen in Unternehmen als auch ein paar Lightning Talks. Und während manche Vorträge gut ohne Begleitmaterial funktionieren, braucht es für viele doch Folien. Doch woher kommen die Folien? Und wie lassen sie sich reproduzierbar generieren, bestenfalls mit Versionskontrolle? Ich möchte zeigen wie sich für verschiedene Anwendungsszenarien verschiedene Präsentationstools eignen. Warum ich früher mehr mit LaTeX Beamer und heute oft mehr mit Markdown arbeite. (Spoiler: die Anforderungen haben sich geändert). Wie sich beide im Bedarfsfall zusammenbringen lassen. Und natürlich zeigen, wie auch ihr damit schnell Folien bauen könnt. Denn in 5min für einen Lightning Talk in 5min eine Präsentation bauen hat andere Anforderungen als um Graphen zu annotieren. Ich beschränke mich dabei auf WYSIWYM Tools, bei denen PDF oder Webseiten als Resultat herausfallen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/321

Computertruhe: Zeichen setzen durch Open Source. (clt24)

Sun, 17 Mar 2024 14:00:00 +0100

Computer sind Mittel der Kommunikation, Bildung, Unterhaltung und des sozialen Engagements. Doch nicht jeder hat Zugang zu diesen Technologien. Der rasche technische Fortschritt verkürzt die Nutzungsdauer von Computern, was zu einem Überschuss an ausgemusterten, aber noch funktionsfähigen Geräten führt. Wir, die Mitglieder des Vereins Computertruhe e. V., greifen hier ein. In unserer Freizeit bringen wir gespendete Computer und andere Hardware wieder in Stand, löschen alle persönlichen Daten und geben die Geräte kostenlos an Bedürftige und gemeinnützige Organisationen weiter. Unser Handeln schafft eine Verbindung zwischen dem Überschuss an Computern und der Möglichkeit digitaler Teilhabe für Menschen, die sich sonst keine eigene Technik leisten könnten. Dabei schonen wir die Umwelt durch die Wiederverwendung funktionsfähiger Geräte und den Einsatz von Open-Source-Lösungen. In unserem Vortrag auf den Linux-Tagen erläutern wir, wie wir durch Open-Source-Software wie Linux und LibreOffice sowie einer digitalen und papierlosen Organisation effizient und ortsunabhängig arbeiten. Wir teilen unsere dreijährigen Erfahrungen aus den Standorten Chemnitz und Zwickau, diskutieren, wie man sich uns anschließen oder eigene Standorte gründen kann. Wir demonstrieren den vollständigen Prozess – von der Entgegennahme eines Spendenangebots über die Reparatur bis zur Ausgabe der Geräte. Unser Vortrag ist eine Aufforderung zum Handeln, zur Teilnahme und setzt ein Zeichen für Nachhaltigkeit und digitale Teilhabe durch den Einsatz von Open-Source-Lösungen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/250

hochwertige Bioakustik-Aufnahmen mit Raspberry Pi (clt24)

Sun, 17 Mar 2024 14:00:00 +0100

Das „Raspberry Pi Bat Projekt“ hat sich zum Ziel gesetzt, in der Fledermausforschung eine möglichst kostengünstige Lösung für hochwertige Rufaufnahme zu realisieren. Der Anspruch ist die Bereitstellung von Rufaufnahmen, deren Bestimmung, wenn es die Aufnahmesituation erlaubt, bis auf Artniveau ermöglicht. In dem Vortrag geht es schwerpunktmäßig um Audioaufnahmen mit ihren verschiedenen Herausforderungen und den Ansprüchen durch den Anwender und die Umsetzung einer Mithörfunktion auf Basis der Frequenzteiler-Technik. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/159

DD-IX: Keep Local Traffic Local (clt24)

Sun, 17 Mar 2024 15:00:00 +0100

Für das Internet sind Internet eXchanges (IX) wichtige Knotenpunkte, um Netzwerkverkehr zwischen Providern, Inhaltsanbietern und Konsumenten robust und mit geringen Verzögerungen auszutauschen. Der DD-IX Dresden Internet Exchange e. V. wurde Ende 2023 mit dem Ziel gegründet, einen Community IX für Dresden und die Region Sachsen zu betreiben. In diesem Vortrag geben wir einen kurzen Abriss der Internet-Architektur und zeigen die Relevanz und die technischen Herausforderungen beim Betrieb von IXen auf. Danach stellen wir den DD-IX im Detail vor. Dabei gehen wir auf die Gründung, die Community und die Unterstützung durch erfahrene Dritte ein. Schließlich stellen wir unser technisches Setup für den IX-Betrieb und die Vereinstechnik vor. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/245

Sichere automatisierte Ver-/Entschlüsselung für DevSecOps (clt24)

Sun, 17 Mar 2024 17:00:00 +0100

Sichere Verschlüsselung erfordert in irgendeiner Art und Weise einen Schlüssel, z.B. ein Passwort oder ein Hardware-Token. Dies funktioniert recht gut mit einem Gerät, skaliert aber nicht besonders gut. Insbesondere im Cloud-Umfeld oder bei DevSecOps-Containern funktionieren Passwörter nur bedingt. Hier kommt automatisierte Ver-/Entschlüsselung ins Spiel. Mit Clevis/Tang lässt sich Policy-basierte Verschlüsselung umsetzen. So kann man z.B. in der Network Based Disk Encryption Volumes mittels LUKS verschlüsseln und den Schlüssel zur Entschlüsselung beim booten von einem Server abholen. Damit lassen sich tausende von Volumes in einem RZ automatisiert booten, obwohl die Festplatten verschlüsselt sind. Aber auch andere Szenarien im Secrets Management für DevSecSop sind denkbar. Der Vortrag stellt die Kryptographie in diesem System vor und zeigt Einsatzszenarien dafür auf. Ein besonderes Augenmerk liegt hierbei auf der Sicherheitsarchitektur der Kryptographie. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/212

Normalisiert informationelle Selbstbestimmung! (clt24)

Sun, 17 Mar 2024 17:00:00 +0100

Building an open managed PostgreSQL service (clt24)

Sun, 17 Mar 2024 15:00:00 +0100

Managed PostgreSQL services are becoming increasingly popular as businesses look for ways to simplify and streamline their database operations. But what does it take to build and operate a managed PostgreSQL service? In this talk, we will take a behind-the-scenes look at the key components of an open and portable managed PostgreSQL service. We will discuss topics such as: - How to provision and manage PostgreSQL instances at scale - How to ensure point-in-time restore, high availability, and performance - How to implement security and compliance measures - Demo of managed PostgreSQL running on Hetzner We will also share our experience building and operating the Ubicloud managed PostgreSQL service. We will discuss the challenges we faced and the lessons we learned along the way. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/268

(Fast) alles was man an der Uni nicht lernt (clt24)

Sun, 17 Mar 2024 16:00:00 +0100

Im Rahmen eines Informatikstudiums lernt man viele verschiedene Fähigkeiten und studiert eine Vielzahl von Themen. Aber wie viel davon ist tatsächlich bei der Arbeit als Software Entwickler nützlich? Ist das meiste der erworbenen Kenntnisse relevant für die tägliche Entwicklungsarbeit, insbesondere wenn es um Open-Source-Projekte geht? Der Vortrag beleuchtet, welche Fähigkeiten benötigt werden, um ein erfolgreicher Contributor und Maintainer eines Open-Source-Projektes zu sein. Fähigkeiten, die normalerweise nicht an der Universität gelehrt werden. Dazu gehören insbesondere Soft Skills, Community & People Management und sich selber vor einem Burnout bewahren, denn schließlich gilt »writing code – that's the easy part«. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/322

Eine Matrix aus 7-Segment-Anzeigen? (clt24)

Sun, 17 Mar 2024 16:00:00 +0100

Kann man auf einer Matrix aus 7-Segment-Anzeigen Bilder zeichnen oder gar Videostreams live ausgeben? Ja, man kann! Im Rahmen dieses Vortrages wird erklärt, wie so etwas aussieht und welche Probleme dabei gelöst werden müssen. Da, auf den ersten Blick, eine Analogie zu „ASCII-Art“ bestehen könnte, wird auch diese Kunstform kurz beleuchtet und vor allem die Frage geklärt, ob es Gemeinsamkeiten mit dem hier vorgestellten Projekt gibt. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/141

make CLT (clt24)

Sun, 17 Mar 2024 17:00:00 +0100

Viele Hände und Arbeit ohne Ende - das sind die Chemnitzer Linux-Tage. Wir schauen uns einmal das Makefile an. Statt Tabs und Spaces spielen hier Gespräche, Notizen, Zeit und Süßigkeiten eine Rolle. Wir wollen hinter die Kulissen blicken und zeigen, was notwendig ist, um die CLT zu der Veranstaltung zu machen, die sie ist. Wir gehen unter anderem auf die einzelnen Gewerke ein, welche Tools genutzt werden und erzählen ein paar Anekdoten aus früheren Jahren. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/329

Elektromagnetische Verträglichkeit für den Hobbyisten (clt24)

Sun, 17 Mar 2024 15:00:00 +0100

Elektromagnetische Verträglichkeit (EMV) und Elektrostatische Entladung (ESD) sind zwei Schlagworte, die einem in der Elektronik auch als Hobbyist begegnen können. Der Monitor geht kurz aus, wenn man sich auf den Schreibtischstuhl setzt? Oberflächlich betrachtet, grenzen solche Effekte an Schwarze Magie. Dieser Vortrag versucht, mit praktischen Beispielen und einfachen Analogien etwas Licht ins Dunkel zu bringen. Ziel ist es, dem Maker Empfehlungen für den Alltag mit Elektronik an die Hand zu geben. Zunächst beginnt der Vortrag mit einer kurzen Einführung, was es mit EMV und ESD eigentlich auf sich hat. Danach wird anhand von Beispielen gezeigt, wo ein Maker beim Umgang mit Raspberry Pi, Arduino oder auch dem normalen USB-Hub am PC mit diesen Themen in Kontakt kommt. Damit das nicht zu theoretisch bleibt, sehe wir uns reale Probleme und – wo möglich – Lösungen an. Zum Schluss werden noch EMV- und ESD-Maßnahmen aus realen Produkten gezeigt. Zum einen kann man daran lernen, wie die Profis mit EMV und ESD umgehen. Zum anderen hilft es, diese Maßnahmen zu erkennen, um sie nach einer Reparatur auch wieder korrekt einbauen zu können. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/290

FPGA Entwicklung und Verifikation mit freier Software (clt24)

Sun, 17 Mar 2024 17:00:00 +0100

FPGAs (Field Programmable Gate Arrays) sind nun schon länger verfügbar und haben sich für viele Anwendungszwecke (digitale Signalverarbeitung, Netzwerk, Kryptobeschleuniger etc.) etabliert. Seit geraumer Zeit gibt es auch Evaluierungsboards, die für Hobbyzwecke bezahlbar und brauchbar sind. Die Herausforderung waren bisher die Entwicklungswerkzeuge. Man war dafür auf proprietäre Software der FPGA-Hersteller angewiesen, mit allen ihren Macken (Lizenzmanager etc.) oder Fehlern. Zum Glück hat sich das in den letzten Jahren geändert. Dieser Vortrag gibt einen Überblick über den Prozess zur Entwicklung und Verifikation von FPGA-Firmware, und wie dieser Prozess mit Tools auf Basis freier Software teilweise oder komplett abgebildet werden kann. Er geht kurz auf den allgemeinen Prozess ein und gibt für die verschiedenen Teile Beispiele für die Anwendung freier Tools. Außerdem stellt er einige interessante FPGA-Projekte vor, die auf Basis freier Software realisiert worden. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/194

Dateisysteme sicher freigeben mit gssproxy (clt24)

Sun, 17 Mar 2024 16:00:00 +0100

Vom Webdienst bis zum Netzwerk-Login gehört die Transportverschlüsselung der übertragenen Daten längst zu den selbstverständlichen Eigenschaften der dafür eingesetzten Protokolle. Kurioserweise gilt das aber nicht, wenn komplette Dateisysteme über das Netzwerk exportiert werden. Die dabei gebräuchlichen Verfahren NFS und SMB bieten zwar sichere Varianten an, doch allzu oft wählen Admins hier in der Praxis noch den einfachen Weg und vertrauen auf die Integrität des Netzwerks. Tatsächlich knüpfen SMB wie NFS in den gängigen Versionen Transportverschlüsselung an starke User-Authentisierung und schaffen dadurch zusätzliche Hürden vor allem für nicht-interaktive Zugriffe auf Multi-User-Umgebungen. Die Komplexität der dafür vorhandenen Lösungswege hat so manches Admin-Team kapitulieren und auf die althergebrachten unverschlüsselten Verfahren zurückfallen lassen. Dabei gibt es als Abhilfe seit einigen Jahren den Dienst gssproxy, der die anfallenden Aufgaben mit minimalem Konfigurationsaufwand erledigt. Der Vortrag zeigt an praxisnahen Beispielen das Zusammenspiel von gssproxy mit NFS- und SMB-Clients auf aktuellen Linux-Systemen und erläutert die passenden Einstellungen für typische Einsatzzwecke. Auf der theoretischen Seite gibt es zudem noch Hintergrundwissen zur technischen Basis um Kerberos und dessen Erweiterungen für Delegation und Impersonifizierung. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/280

Administration und Moderation auf Mastodon (clt24)

Sun, 17 Mar 2024 16:00:00 +0100

Neue Software zu testen, ist toll, und im Fediverse gibt es so viele Dienste zum Ausprobieren und Lernen. Doch was kommt nach dem Aufsetzen eines Servers? Wie viel Aufwand sind Administration und Moderation auf einer öffentlichen Mastodon-Instanz? Welche Aufgaben fallen an, welche Regeln gibt es und wie kann mit Problemen umgegangen werden? Ich möchte einen Einblick in meiner Arbeit auf dresden.network geben und Erfahrungen aus den Fediverse-Moderationstreffen teilen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/238

Sieve (clt24)

Sun, 17 Mar 2024 17:00:00 +0100

Sieve – einfach, steinalt, funktionell, lesbar. Sortiert deine E-Mails. Via Sieve werden Filterregeln und Abwesenheitsnotizen auf Mail-Servern verwaltet. Über einen geeigneten Client (oder per Texteditor :-) ) erstellte Scripte sorgen auf dem Mail-Server für verschiedenste Aktionen: * Automatische Antwort * Weiterleitung * Verschieben * Ablehnung * Löschen * Flags setzen * ... Der Vortrag gibt einen Überblick über * die Historie * Nutzen * Möglichkeiten * Server und Clients * Technik * ... about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/293

Hinter den Kulissen von learning.lpi.org (clt24)

Sun, 17 Mar 2024 13:00:00 +0100

Multilinguales Single-Source-Publishing für Web und Print Unter learning.lpi.org bietet das LPI Lernmaterialien mit derzeit über 800 Lektionen in 14 Sprachen als Website und als PDF an. An dem Projekt arbeiten mehr als 65 Personen aus allen Teilen der Welt mit. Der dahinterliegende Workflow basiert auf einer Reihe von Werkzeugen, die ausnahmslos freie Software sind. Zentrale Komponenten sind dabei Git, OmegaT, AsciiDoctor, GitLab, Hugo und Docker. In unserem Vortrag erklären wir die Organisation des Projekts, Bedeutung und Funktion der einzelnen Komponenten und vollziehen in einer Live-Demo den Weg einer Fehlerkorrektur vom Feedback bis zur Veröffentlichung gemeinsam nach. Schließlich geben wir Einblick in die aktuell in Entwicklung befindlichen Materialien und zeigen, wie eine Mitarbeit an dem Projekt abläuft. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/230

Neues von Shotcut (clt24)

Sat, 16 Mar 2024 17:00:00 +0100

Shotcut hat sich zu einem zuverlässigen Arbeitstier unter den Videoeditoren entwickelt. Im Vortrag wird vermittelt, wie man eigenes Videomaterial aus einer oder mehreren Quellen zusammenschneiden und mit Audioquellen synchronisieren kann. Hierbei wird auch auf die Nutzung von Keyframes für die Gestaltung eigener Übergänge oder der Verfolgung von Bewegungen eingegangen. Keyframes sind Momente, in denen für Video- und Audiofilter Parameter festgelegt werden, die dann zwischen den entsprechenden Momenten kontinuierlich verändert werden. Die Generierung von Keyframes kann in gewissem Maße durch Verwendung eines "Motion Trackers" automatisiert werden; das manuelle Setzen entsprechender Keyframes für Sequenzen ist aber die universellere Lösung und mit etwas Übung zügig durchführbar (Beispielvideo ). about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/315

Open-source Entwicklung und die "Zeitenwende" (clt24)

Sun, 17 Mar 2024 11:00:00 +0100

Open-source Entwicklung beruht auf Kooperation, und dem freien Austausch von Ideen. Wie kann man diese Ideen weiterverfolgen, wenn politische Führungen Kooperationen unterbinden wollen? Dieser Vortrag ist ein Erfahrungsbericht von Open-source Entwicklung vor dem Hintergrund der zunehmenden Antagonie zwischen USA und China, und die Auswirkungen des Ukrainekrieges auf die Linux-kernel community. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/156

Softwarepaketierung unter FreeBSD (clt24)

Sun, 17 Mar 2024 11:00:00 +0100

Die FreeBSD Ports sind mit über 30.000 Softwarepaketen eine der größten Sammlungen quelloffener Software. Für jeden Port einer Software werden Build-Skripte und Patches bereitgestellt, mit denen der Quelltext der Software automatisch heruntergeladen, gebaut, und installiert werden kann. Auch ist es möglich, Binärpakete zu bauen und in Paketquellen zum Download bereitzustellen. All das geschieht auf Basis eines einfachen Makefiles und weniger Metadaten, die vom Paketierer bereitgestellt werden. In diesem Vortrag werde ich Sie in die technischen Hintergründe der Ports einführen. Wir gehen gemeinsam den Weg von der Erstellung eines neuen Ports für ein einfaches Softwarepaket und zeigen, wie dieses zu dem Ports beigetragen werden kann. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/189

Rust lernen, aber wie? (clt24)

Sat, 16 Mar 2024 17:30:00 +0100

Dieser Vortrag ist ein Erfahrungsbericht über die Erfahrung Rust zu Lernen aus der Perspektive eines Einsteigers mit hauptsächlicher Erfahrung in Python. Besondere Aufmerksamkeit soll dabei nicht nur auf der Sprache selbst, sondern auch auf das sie umgebene Ökosystem aus Tooling und Dokumentation gelegt werden. Welche neuen Konzepte in Rust von anderen Programmiersprachen, mit denen man vielleicht durch Studium und Schule vertraut ist, abweichen, wie Rust beim Lernen hilft, und welche Schwierigkeiten dennoch bleiben. Zum Schluss möchte ich Tipps geben und Resourcen aufzeigen, welche mir bei meinem anhaltenden Lernprozess helfen, beziehungsweise geholfen haben. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/209

Moderne RZ - warum Wasserkühlung Zukunft & Multimode out ist (clt24)

Sun, 17 Mar 2024 12:30:00 +0100

Luft ist ein ziemlich guter thermischer Isolator, er leitet Wärme also ziemlich schlecht. Und dennoch kühlen wir seit jeher Server mit Luft. Das ist ineffizient, teuer und absolut nicht nachhaltig. Und eigentlich wäre das auch gar nicht nötig - denn mit Wasserkühlung gibt es ja durchaus valide Alternativen für moderne Rechenzentren, die erprobt sind, ziemlich viel Geld und CO2 einsparen und außerdem den Vorgaben des EnEfG mit Leichtigkeit entsprechen. Und apropos moderne Rechenzentren: Die haben einen ziemlichen Bandbreitenbedarf beim Netzwerk - bis zu 800G ist da heute üblich. Und damit einher gehen nicht nur teure Optiken, sondern auch neue Konzepte bei der passiven Verkabelung. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/305

schnell und kosteneffizient IoT-Lösungen entwickeln (clt24)

Sun, 17 Mar 2024 12:30:00 +0100

IoT (Internet of Things) spielt für die Deutsche Bahn eine immer wichtigere Rolle. Sei es, um bestehende Infrastruktursysteme zu überwachen und mit vorausschauender Wartung fit für die Zukunft zu machen oder um Informationen zu gewinnen, um darauf basierend bessere Entscheidungen treffen zu können. Für die Deutsche Bahn ist es wichtig, dass Prototypen sehr schnell und kosteneffizient gebaut und getestet werden können. Der Vortrag gibt einen Einblick in die Open-Source-Software ThingsBoard und den IoT-Baukasten Tinkerforge. Anschließend werden wir eine Live-Demo durchführen und ein IoT-System zur Überwachung der Luftqualität im Konferenzraum aufbauen. Damit erhalten Sie einen sehr einfachen Einstieg in die Welt des IoT. Abschließend möchten wir unsere Erfahrungen bei der Durchführung von IoT-Hackathons zur Lösungsfindung oder Nachwuchsgewinnung teilen und drei ungewöhnliche IoT-Anwendungsfälle bei der Deutschen Bahn vorstellen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/191

Der Kuckuck im Bieterverfahren: Wenn der Hersteller gegen sich selber verliert (clt24)

Sat, 16 Mar 2024 10:00:00 +0100

Open Source bedeutet nicht nur »freier und einsehbarer Quellcode«, sondern i. d. R. auch Lizenzmodelle zur freien unentgeltlichen Nutzung. Und trotzdem gibt es Unternehmen, die mit hohem finanziellen Aufwand und einem fest angestellten Entwickler-Team kommerziell erfolgreich und qualitativ hochwertig Software entwickeln. Geld fließt über »Service und Support«-Verträge, die qualitätsgetestete Releases, Troubleshooting mit SLAs oder Betriebsunterstützung bieten. Und es basiert auch auf dem allgemeinen Verständnis, dass Hersteller für den Einsatz ihrer Software vergütet werden müssen, selbst wenn diese als FOSS zur Verfügung steht. Die öffentlichen Verwaltung schreibt oft auch OSS-Beschaffungsprojekte alleine über den Preis aus. Das ruft Bieter auf den Plan, die die Idee und den Prinzipien von freier Software weder verinnerlicht haben, noch teilen: Also schmarotzender Trittbrettfahrer bieten Fremde Software zu reinen Betriebskonditionen und ohne jegliche Herstellervergütung an und schlagen so stets den ebenso anbietenden Hersteller oder dessen Partner. Gleich einem Kuckuck, der seine Aufzucht-Arbeit Anderen unterschiebt und dabei sogar noch deren Nachwuchs und Artgenossen tötet. Die Folgen sind ruinös und entziehen jeder weiteren Entwicklung einer OSS in sehr kurzer Zeit die finanzielle Grundlage. Das OSS-Ökosystem wird durch Trittbrettfahrer, die gegen die Spielregeln spielen, rücksichtslos zerstört. Verbände und Anbieter starten derzeit Initativen, die für eine faire und nachhaltige Beschaffung von Open-Source-Software sorgen soll. Ein „Code of Conduct“ könnte für ein gemeinsames Verständnis sorgen. Am Ende müssen ausschreibende Stellen und Beschaffer davon überzeugt werden, dass die Suche allein nach dem billigsten Anbieter die eigenen Wahlmöglichkeiten in der Zukunft zerstört. Und auch rechtlich gibt es Hausaufgaben zu erledigen: Wie können juristisch belastbare »Fair Use«-Klauseln aussehen, die Bestandteil von zwingenden Ausschreibungskriterien werden können? about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/312

Etwas weniger Kaffee bitte - Gründe Ansible zu optimieren (clt24)

Sun, 17 Mar 2024 11:00:00 +0100

Einige kennen es, mit Ansible wurden einige Sachen schön automatisiert, doch die Wartezeiten sind teilweise Lang und der Kaffeekonsum in den Wartezeiten höher als er sein müsste. Allen die etwa aus gesundheitlichen Gründen gern die Wartezeiten reduzieren wollen, um dadurch ihren Kaffeekonsum zu reduzieren, oder auch an diejenigen die ihr Ansibleläufe einfach gern so etwas optimieren wollen richtet sich der Vortrag. Aber auch an Personen die Überlegen ob sie Ansible für sich einsetzen wollen es wird kurz gezeigt wie man die Laufzeiten herrausfinden auch einzelner Tasks. es wird gezeigt welche einfachen/"Standard" Optimierungen zur Verfügung stehen. Es wird an Beispiel gezeigt was die Optimierungsoption im einzelnen gebracht hat, die Ergebnisse werden präsentiert, da ein Echtzeitlauf den Zeitrahmen sprengen kann about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/224

Of Heroes & Hypervisors: Proxmox VE & Proxmox Backup Server (clt24)

Sat, 16 Mar 2024 16:30:00 +0100

Wir erkunden die faszinierende Welt von Proxmox VE und dem Proxmox Backup Server. Diese Produkte sind mehr als nur Werkzeuge; sie sind die Superhelden Ihrer IT-Infrastruktur. Lasst uns gemeinsam eintauchen in: "Of Heroes and Hypervisors: Proxmox VE & Proxmox Backup Server unleashed" Wir beginnen mit einer aufregenden Tour durch die beeindruckenden Features von Proxmox VE und Proxmox Backup Server. Dann erkunden wir verschiedene Ausbauvarianten, beginnend mit einem Single-Node-Setup und arbeiten uns zu Clustering-Optionen mit ihren vielfältigen Vorteilen vor. Ein besonderer Schwerpunkt liegt auf der Hochverfügbarkeit, wir zeigen euch, wie diese Technologien eure IT-Infrastruktur stärken können. Wir präsentieren euch Ceph und enthüllen seine Superkräfte, begleitet von einer Live-Demo eines 3 Node Proxmox VE & Ceph Clusters. Für diejenigen, die noch tiefer in die Welt von Ceph eintauchen möchten, bieten wir Informationen zu Deployment-Varianten und Benchmarks. Schließlich erfahrt ihr mehr über unseren Service und Support und wie Proxmox VE bei der Thomas-Krenn.AG für unsere Kunden zum Einsatz kommt. Bereiten euch darauf vor, von den Superhelden der IT-Welt inspiriert zu werden und nutzt dieses Wissen, um Ihre IT-Infrastruktur auf das nächste Level zu heben. Wir freuen uns auf euch! about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/173

massive parallel ssh (clt24)

Sat, 16 Mar 2024 17:00:00 +0100

Dieser Talk möchte dem Linux-Administrator Techniken zeigen, die weniger bekannt sind und im Kern auf SSH basieren. Dies ist kein Talk über ssh_config(5), vi, netrw, vimdiff, emacs, ssh-copy-id oder ClusterShell; aber er zeigt ausgewählte Beispiele die die vorgenannten Werkzeuge benutzen und die täglichen administrativen Aufgaben erheblich beschleunigen. Mit anderen Worten eine Einführung in fortgeschrittene administrative Techniken, im Sinne von: "Moving Around in a Hurry" aus dem Buch UNIX POWER TOOLS. Als Beispiel wird versucht folgende Aufgaben möglichst elegant zu lösen: * Aufgabe 1) Editieren und vergleichen zweier remote root Dateien (live) * Aufgabe 2) Beliebige Befehle auf 100+ nodes ausführen. (Aufzeichnung) Level: intermediate => advanced about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/184

Mit Ansible Collections & Workflows gegen das Playbook-Chaos (clt24)

Sun, 17 Mar 2024 10:00:00 +0100

Ganz gleich, ob es um Installationen, Konfigurations- oder Patchmanagement geht - Ansible bietet umfassende Unterstützung bei der Automatisierung verschiedener IT Aufgaben. Dadurch können z.B. Prozesse beim Aufbau, Betrieb und der Wartung von IT-Systemen erheblich effizienter gestaltet werden. Aber wie genau kann der produktive Einsatz von Ansible zum Aufbau innovativer IT-Infrastrukturlösungen nun aussehen? Inwieweit ist das eine signifikante Veränderung zu bisherigen Arbeitsprozessen? Wo liegen die Herausforderungen bei der Implementierung und welche Lösungsansätze gibt es hierfür? In unserem Vortrag gehen wir auf diese Fragen ein und teilen wertvolle Praxistipps aus unserem Alltag mit euch! Dabei erfahrt ihr mehr zum produktiven Einsatz von Ansible im Datenbankumfeld und wie ihr mit Ansible Content Collections und Workflows Herr über das Playbook-Chaos werdet. Zusätzlich gewährt Götz Rieger, Subject Matter Expert für Ansible bei Red Hat, aus erster Hand Insights in die neuesten Entwicklungen der Red Hat Ansible Automation Platform. Neben spannenden Details zum letzten Release, wird hier der aktuelle Stand zu den Fortschritten im Bereich Künstliche Intelligenz (KI) beleuchtet! about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/178

Sovereign Cloud Stack - Hintergründe & Zukunft (clt24)

Sun, 17 Mar 2024 12:30:00 +0100

Das Open-Source-Projekt „Sovereign Cloud Stack“ hat sich zum Ziel gesetzt, ein offenes Netzwerk für die gemeinsame Entwicklung von standardisierten und interoperablen Cloud-Technologien zu werden. Hierzu werden einerseits Standards für den Cloud-Stack definiert. So können bestehende Lösungen den Standards angepasst werden und kompatibel sein. Andererseits wird im Rahmen des Projekts eine Referenzimplementierung entwickelt, die aus existierenden Open-Source-Softwaremodulen besteht und die SCS-Standards in der Praxis umsetzt. Durch die Verbindungen zu Linux Foundation, CNCF und der OIF wird darüber hinaus ein aktiver Beitrag zu den jeweiligen Upstreams geleistet. Der starke Fokus auf Standards und freie Lizenzen soll aktiv einem Vendor-Lock-In entgegen wirken. Ein Wechsel des Anbieters kann ohne aufwendige Migrationsinvestitionen durchgeführt werden. Für Anbieter bedeutet die Standardisierung auch, dass für spezialisierte Services in ihrer Cloud auf einen verlässlichen Unterbau zurückgegriffen werden kann. Im aktuellen Stand ist die seit 2020 in Entwicklung befindliche Plattform bereits am Markt, Instanzen des SCS werden von großen deutschen CSPs an Kunden offeriert. Andere Anbieter schließen ihre Cloud-Angebote über die SCS-Standards an den Verbund an. Dadurch wächst sozusagen ein föderierter, offener Hyperscaler. Finanziert wird das Vorhaben als Projekt des Open Source Business Alliance - Bundesverband für digitale Souveränität e.V. von Fördergeldern des BMWK. In Zukunft soll das Projekt sich selbst tragen, die Ergebnisse als marktreifes Produkt in der Breite verwendet und weiterentwickelt werden. In diesem Vortrag stellen wir euch die Hintergründe des SCS vor, zeigen auf, wo das Projekt gerade steht und wie die Zukunft aussehen könnte. Darüber hinaus geben wir euch Einblicke in die Erfahrungen mit der Community und wo für Interessierte die besten Einstiegspunkte sind. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/304

Wie man eine Open Source Community aufbaut und lebendig hält (clt24)

Sun, 17 Mar 2024 10:00:00 +0100

Uni-Institut mit Linux? Läuft bei uns. (clt24)

Sun, 17 Mar 2024 12:00:00 +0100

Wie baue ich eine IT-Infrastruktur für ein Universitätsinstitut auf? Mit Arbeitsplatzrechnern, Account-Verwaltung, zentralem Fileserver und am besten noch mit Monitoring und Ausfallsicherheit? …und das alles mit freier und kostenloser Software? Wir zeigen in diesem Vortrag wie wir für ein Institut mit etwa 30 Mitarbeitenden und 60 Studierenden ein Linux-basiertes System aufgebaut haben. Dabei geben wir Einblicke in unsere Arbeit als Admins und zeigen was für uns in den genannten Bereichen gut funktioniert. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/154

Einführung in NetBSD (clt24)

Sun, 17 Mar 2024 10:00:00 +0100

Diese Präsentation soll euch einen Einblick in NetBSD, ein Betriebssystem der BSD-Familie, liefern. 1993 ist NetBSD basierend auf FreeBSD und 386BSD entstanden. Bis heute wird es aktiv entwickelt und ist aufgrund seiner guten Portierbarkeit auf nahezu jedem Computer einsetzbar. Agenda: Geschichte & Relevanz, Warum NetBSD? Retro und Moderne Hardware, Packet Management (pkgsrc), Community und Unterstützung about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/196

InnerSource - Open Source Arbeitsweisen im Unternehmen (clt24)

Sun, 17 Mar 2024 12:00:00 +0100

"gaining by sharing" - so beschrieb Niels Basjes den Kern des "Apache Way" of Open Source. Open Source Projekte bringen Teams aus unterschiedlichsten Ländern zusammen, die über die Grenzen von Unternehmen hinweg gemeinsam Software entwickeln und so die Basis für Innovationen für alle schaffen. Global verteilt, volle Transparenz, und mit hoher Motivation und Eigeninitiative - kann man die Patterns, die diese Arbeit ermöglichen, auch auf die Arbeit im Unternehmen übertragen? InnerSource zeigt, man kann. Und lernt dabei ganz nebenbei, wieviel man beim eigenen Einsatz von Open Source noch verbessern kann. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/117

Fluxbox - Der Wandlungsfähige und flexible underdog (clt24)

Sun, 17 Mar 2024 11:00:00 +0100

Fluxbox ist ein sehr flexibler und anpassbarer Windowmanager, der auch ohne Desktop Environment genutzt werden kann, da er alles zusätzlich benötigte mitbringt. Dass die Nutzung eigentlich einfach ist, wenn man ein paar Informationen hat, wird in diesem Vortrag gezeigt. Die Flexibilität, die Fluxbox hinter der vordergründigen Einfachheit an den Tag legt, ist unvorhersehbar und wird nur durch die eigene Kreativität begrenzt. In diesem Vortrag wird Fluxbox vorgestellt und von der Installation, der Konfiguration und der Benutzung berichtet. Auch werden ein paar Denkanstöße zur Philosophie der Arbeit mit Programmen gegeben, die leicht auf andere Programmpakete übertragen werden können. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/198

Einstieg in Electronic Data Capture mit REDCap (clt24)

Sat, 16 Mar 2024 17:00:00 +0100

REDCap (Research Electronic Data CAPture) ist eine anwenderfreundliche Webapplikation zur Erstellung und Verwaltung von Online-Umfragen und Datenerfassungsbögen, insbesondere für medizinische und translationale Forschungsprojekte. REDCap wird an der Vanderbilt University (USA) entwickelt und über das internationale REDCap-Konsortium bereitgestellt. Die Software wird kostenfrei an non-profit Organisationen abgegeben – hierzu muss man dem Konsortium beitreten. Die Software bekommen man im Quelltext (PHP), sie ist aber kein Open Source! The REDCap Consortium has 6.909 active partners in 155 countries. REDCap software has generated over 1.899.000 projects from over 2.950.000 users. 35.468 journal articles cite REDCap (https://projectredcap.org/). An der Charité Universitätsmedizin Berlin nutzen über 300 Studien REDCap zur Datenerfassung. Es gibt eine REDCap German User Group zum Austausch im deutschsprachigem Raum. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/104

Crypto-Policies – Was ist das? (clt24)

Sun, 17 Mar 2024 14:00:00 +0100

Crypto-Policies sind ganz einfache vereinfachte systemweite kryptographische Einstellungen. Da kann mensch, als nicht kryptographisch besonders erfahren, eigentlich nicht so viel falsch machen … Diese sytemweiten kryptographischen Einstellungen halten in immer mehr Linux-Distributionen Einzug. Daher hier ein kleines »How-(not)-to-Do« anhand von SSH-Versuchen in AlmaLinux (war mal binär kompatibel zu RHEL) dazu. Ich werde erklären, wie ich auf die Crypto-Policies aufmerksam geworden bin, wie meine ersten Versuche mit Crypto-Polices waren, wie sie eigentlich funktionieren und wie sie angepasst werden können, aber auch, auf welche unerwarteten Entdeckungen ich gestoßen bin. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/138

Single Sign-on für Web-Anwendungen (clt24)

Sun, 17 Mar 2024 10:00:00 +0100

Keycloak ist seit Jahren in aller Munde und erfreut sich unter Systemadministrator*innen besonderer Beliebtheit. Keycloak ist eine freie Identity Provider-Software, mit der Single Sign-on für Webanwendungen umgesetzt werden kann: Einmal angemeldet, können die Nutzer*innen mit ihrem Browser auf alle angeschlossenen Anwendungen zugreifen. Im Vortrag wird ein Überblick über das Thema Web Single Sign-on mit Fokus auf die Identity Provider-Seite gegeben: * Use Cases * kurzer Vergleich der Protokolle SAML 2.0 und OIDC 1.0 * Wie funktioniert Single Sign-on grundsätzlich? Welche Komponenten sind beteiligt? * Features freier Identity Provider-Software: Keycloak und Alternativen * Was müssen die anzubindenden Anwendungen mitbringen? * Was ist zu bedenken bei der Umstellung von LDAP- auf IdP-Login? (Unique Identifier, attributbasierte Autorisierung) * Demo: Single Sign-on mit Keycloak about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/213

Hexenmeister oder Zauberlehrling? -- KI und das Urheberrecht (clt24)

Sun, 17 Mar 2024 12:00:00 +0100

Im Internetzeitalter war lange das Urheberrechtsgesetz das Zauberbuch der Hexenmeister (Contentindustrie). Aktuell scheint es möglich, dass mit dem breiten Einsatz von generativer KI der Hexenmeister zum Zauberlehrling wird. Der Vortrag blättert ein wenig im Zauberbuch der Hexenmeister und schaut sich ein paar Zaubersprüche mit Blick auf die Wirksamkeit bei generative KI genauer an. Der Einsatz von generativer KI bringt im Urheberrecht ganz neue Fragen mit sich. Das beginnt mit den Rechten an den Trainingsdaten. Geht über in die rechtliche Beurteilung, ob die über Prompts gesteuerte generative KI das Werkzeug einer kreativen Person ist oder nur eine Maschine, die Dinge erzeugt. Dies ist ganz entscheidend für die Beurteilung, wer welche (Schutz-)Rechte geltend machen kann oder eben nicht geltend machen kann. Schließlich ist auch interessant, was passiert, wenn Inhalte aus den Trainingsdaten im generierten Produkt (wieder-)erkennbar auftauchen. Hier ist dann auch ein Seitenblick auf Schutzrechte außerhalb des Urheberrechts, wie beispielsweise das Recht am eigenen Bild von Interesse. Schaut man zum rechtspolitischen Horizont, so lohnt es sich, darüber nachzudenken, ob es künftig auch ein "Recht an der eigenen Stimme" oder "am eigenen Stil" geben kann oder sollte. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/239

Automatisierte EVPN-VXLAN-Fabric mit Cumulus Ansible Netbox (clt24)

Sun, 17 Mar 2024 13:30:00 +0100

L2-Domänen und Switching sind schon immer ein Problem gewesen. Daher wird in modernen Rechenzentren am besten nur noch Netzwerkverkehr über Routing (L3) verteilt. Leider ist das nicht immer möglich, weil Applikationen z. ,T. damit nicht umgehen können oder es aus anderen Gründen nicht umgesetzt werden kann. Hier kann eine Technologie wie VXLAN mit der EVPN-Adress-Family helfen, eine moderne Architektur im Rechenzentrum einzuführen. Unterstützt wird dies von dem Motto: »Was nicht automatisiert ist gibt es nicht«. Wir nehmen Ansible, Cumulus-Linux. Netbox und Python zur Hand, um die aufwendige Konfiguration einer EVPN-VXLAN-Fabric zu automatisieren. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/210

Warum NIS2 und Cyber-Resiliance-Act uns alle betreffen (clt24)

Sun, 17 Mar 2024 14:00:00 +0100

Die kommende NIS-2-Richtlinie wird den Kreis der Unternehmen der kritischen Infrastruktur deutlich erweitern: Statt bislang nur 3700 Unternehmen werden zukünftig fast 30.000 Unternehmen durch die Vorgaben von NIS2 betroffen sein. Neu dabei sind allerdings auch Branchen wie die Lebensmittelversorgung ("Spreewald Gurken") und ab einer Größe von 100 Mitarbeitern. Doch Vorsicht: Professionelle Dienstleister für diese Unternehmen sind bereits ab 50 Mitarbeitern von NIS2 erfasst und das ist schnell erreicht. Und sind wir nicht alle ein bißchen Dienstleister? Und auch der Cyber-Resiliance-Act (CRA) wirft viele Fragen und Änderungen für die Arbeit mit Open Source Software auf, sieht er doch umfassende Produkt-Haftungsfragen für Lieferanten vor. Doch wie verhält sich das bei kostenlos bereitgestellter Open Source Software? Bei Community-Projekten, die hier und dort auch professionell eingesetzt werden? Müssen sich Hobby-Coder plötzlich vor Durchgriffshaftungen schützen oder ihre Arbeit gar einstellen, selbst wenn sie unentgeltlich tätig waren? Cyber-Sicherheit und Resilienz wird zunemend wichtiger. Für alle. Aber auch unbequemer. Auch für alle. Kurzum: Wir müssen uns das dringend anschauen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/328

Static Website am Beispiel Hugo (clt24)

Sat, 16 Mar 2024 17:00:00 +0100

Muss immer eine dynamische Website mit php und Datenbank sein? Static Websites bieten zwar nicht alles Features der bekannten Content Management Systeme, wie beispielweise Wordpress, haben aber auch Vorteile. Der Vortrag wird am Beispiel der Anwendung Hugo auf die Vor- und Nachteile von Static Websites zeigen und anhand einer einfachen (fiktiven) Vereinswebsites die Features von Hugo zeigen. Insbesondere, auch aufgrund der Ausrichtung des Linuxtages 2024, das Multilingual-Feature und die Unterstützung der verteilten Zusammenarbeit durch den Support von git. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/249

Dokumentation als Code mit Ansible und Asciidoctor (clt24)

Sun, 17 Mar 2024 10:00:00 +0100

Die Dokumentation von Software und Umgebungen ist wichtig und erfordert viel Zeit und ständige Anpassungen, wenn sich etwas ändert. In dieser Session lernen Sie, wie Sie Ansible, Jinja2-Templates und Asciidoctor nutzen können, um den Dokumentationsprozess zu automatisieren und trotzdem ansprechende Ergebnisse erzielen zu können. Mittels Asciidoctor und Pandoc ist auch die Verwendung von Vorlagen und Corporate Identity möglich, und Copy-and-paste in ein Office-Produkt kann umgangen werden. Diese Session richtet sich an alle, die ihre Dokumentation verbessern möchten. Nach Abschluss dieser Session werden Sie in der Lage sein, • die Vorteile der Automatisierung der Dokumentation zu verstehen • Ansible, Jinja2-Templates und Asciidoctor zu verwenden, um Dokumentation zu erstellen • Ihre Dokumentation mit diesen Tools und Techniken zu verbessern und zu automatisieren. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/214

Aufwände schätzen (clt24)

Sun, 17 Mar 2024 15:30:00 +0100

Wer wurde nicht schon einmal gefragt, wie lange etwas oder wie viel Material für jenes Projekt benötigt wird? Manch einer liegt mit seinen Schätzungen erstaunlich richtig, andere eklatant daneben. Dies kann recht teuer und aufwendig werden, wenn der Zeitplan gesprengt wird. In dem Vortrag möchte ich euch daher ein paar unkomplizierte Methoden vorstellen, wie man einfach zu relativ guten Werten kommen kann – ganz ohne Magie oder höhere Mathematik. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/318

Cash Cash Cash – Prototype Fund Runde 16! (clt24)

Sun, 17 Mar 2024 13:00:00 +0100

Der Prototype Fund fördert seit acht Jahren Open Source Software. Und wir legen nochmal nach und laden ein, sich für die 16. Runde zu bewerben: Es winken 47.500 € über sechs Monate Förderung durch das Bundesministerium für Bildung und Forschung. Aber nicht nur finanziell werden die Entwickler*innen und Teams gefördert, wir bieten auch Zugang zu Coachings, Netzwerken und Weiterbildungen. Das alles gibt es zum unschlagbaren Preis einer möglichst unbürokratischen Bewerbung. Wir stellen in diesem Vortrag kurz vor, was den Prototype Fund ausmacht ist, bringen ein paar Beispielprojekte mit, geben ein paar Tipps zur Bewerbung und sprechen darüber, wie nachhaltige Projektentwicklung klappen kann. Anschließend wird es Zeit für eure Fragen geben. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/183

Xorg ist tot, nutzen Sie Wayland (clt24)

Sun, 17 Mar 2024 10:00:00 +0100

Die Entwicklung des Xorg-Servers ist kaum noch aktiv. Über kurz oder lang führt dies dazu, dass die Software nur noch schwer mir aktuellen Bibliotheken und Compilern zusammenarbeitet. Wayland als Alternative ist mittlerweile ausgereift genug, um für die meisten Nutzer eine benutzbare Desktop-Umgebung zu bieten. Der Vortrag gibt einen Einblick in Wayland, führt aus welche Alternativen es für Nutzer von z.B. Tiling-Window-Managern gibt und zeigt einige modernere Entwicklungen im Linux-Desktop-Bereich auf, welche für aktuelle Applikations-Paketierungen (Flatpak, Appimage) genutzt werden. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/284

SSH-Login mit FIDO-Tokens statt Keyfiles (clt24)

Sun, 17 Mar 2024 13:00:00 +0100

Seit Anfang 2020 unterstützt SSH nun auch private Schlüssel auf FIDO-Tokens, etwa den verbreiteten Yubikeys. In diesem Vortrag sehen wir uns die technischen Hintergründe an und führen das ganze praktisch vor, inklusive der gängigen Konfigurationsmöglichkeiten. Damit steht der Umsetzung im eigenen Alltag dann nichts mehr im Wege. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/199

Was ist eigentlich mit plain/text in einer DevOps Welt? (clt24)

Sat, 16 Mar 2024 10:00:00 +0100

Daten können wir heute in komplizierten Datenbanken, Binärformaten und verschiedensten Abstraktionen speichern. Doch, wie weit kommen wir in einem DevOps Prozess überhaupt mit plain/text? Die kurze Antwort: "Seeeehr weit!". Die lange Antwort gibt es dann gern im Vortrag. Gemeinsam schauen wir uns einige plain/text Formate in der Entwicklung von Software an. Vom Schreiben einer Dokumentation, über CI/CD Pipelines, hin zu Diagrammen oder Aufgabenlisten gibt es einige plain/text Formate, die es einfach machen in Projekten zu arbeiten und quasi niemals die IDE zu verlassen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/217

AI und ChatGPT rechtlich betrachtet (clt24)

Sat, 16 Mar 2024 14:00:00 +0100

Der Vortrag betrachtet die rechtlichen Fragen, die sich aus der Nutzung der Software ChatGPT und anderer Large Language Models ergeben. Es werden Fragen diskutiert wie wer hat eigentlich die Urheberrechte, wenn Code, Bild oder Text von einer Ai generiert wurde. Darf man AI generierten Code in seiner Software verwenden? Und was sagen die verschiedenen im Open Source Bereich gängigen Lizenzen eigentlich zu dieser Problematik? Und darf ich als Privatnutzer die Ergebnisse meiner Nutzung von Ai eigentlich in Foren und auf Internetseiten veröffentlichen? about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/331

Rechtshilfe für Geflüchtete mithilfe von Legal Tech Tools (dgwk2024)

Sat, 02 Mar 2024 19:00:00 +0100

AsyLex bietet seit 2017 unentgeltliche online Rechtsberatung und Rechtsvertretung für geflüchtete Menschen an. Ein grosser Teil der Arbeit wird von ca. 150 freiwillig engagierten Personen geleistet, welche sich in verschiedenen Regionen der Schweiz sowie in Italien, Libanon und Griechenland befinden. Zentral für die Arbeit von AsyLex ist dabei der Einsatz von Legal Tech Tools, welche Unterstützung beim Verfassen von Rechtsschriften bieten, interne Prozessen vereinfachen sowie einen niederschwelligen Zugang zu rechtlichen Informationen für Geflüchtete ermöglichen. AsyLex bietet seit 2017 unentgeltliche online Rechtsberatung und Rechtsvertretung für geflüchtete Menschen an. Ein grosser Teil der Arbeit wird von ca. 150 freiwillig engagierten Personen geleistet, welche sich in verschiedenen Regionen der Schweiz sowie in Italien, Libanon und Griechenland befinden. Zentral für die Arbeit von AsyLex ist dabei der Einsatz von Legal Tech Tools, welche Unterstützung beim Verfassen von Rechtsschriften bieten, interne Prozessen vereinfachen sowie einen niederschwelligen Zugang zu rechtlichen Informationen für Geflüchtete ermöglichen. about this event: https://winterkongress.ch/2024/talks/rechtshilfe_fur_gefluchtete_mithilfe_von_legal_tech_tools/

Never ever break userspace - was das in der Praxis bedeutet (clt24)

Sat, 16 Mar 2024 14:00:00 +0100

Es ist eine goldene Regel, dass der Linux Kernel nicht den Userspace kaputt machen soll. Was auf eine bestimmte Art einmal funktioniert hat, soll auch in der Zukunft genau so funktionieren. Klingt logisch. Klingt einfach. Was das aber in der Praxis heißen kann, wenn eine Hardware-Spezifikation (hier SMBus) ein kleines Update erfährt, davon handelt dieser Vortrag des I2C-Maintainers Wolfram Sang. Es ist eben nicht möglich, einfach ein Array zu vergrößern, weil jetzt mehr Daten gesendet werden dürfen. Warum das so ist, und wie man das Update trotzdem hinbekommen kann, das soll hier gezeigt werden. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/252

Ransomware-Angriffe abwehren mit Linux und Open Source (clt24)

Sat, 16 Mar 2024 13:30:00 +0100

Durch die Komplexität umfangreicher IT-Systeme sowohl in Unternehmen und Behörden, als auch im privaten Bereich, ist es fast nur eine Frage der Zeit und Beharrlichkeit von Kriminellen, bis ein Cyber-Angriff durchschlägt, Daten kompromittiert und oft auch unternehmenskritische Daten im Darknet veröffentlicht werden und durch die abschließende Zertstörung immense Schäden für die digitale Aktionsfähigkeit und das Ansehen der Betreiber anrichtet. Im Vortrag werden die Hintergründe von Ransomware-Angriffen beleuchtet, konkrete Schutzmaßnahmen und auch das eine oder andere bekanntere Tool aus dem Linux / Open Source Werkzeugkasten vorgestellt, um die Wahrscheinlichkeit eines erfolgreichen Cyber-Angriffs und die Folgen zu minimieren – präventiv wie post mortem. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/279

Flexible Firewall mit NetworkManager und firewalld (clt24)

Sat, 16 Mar 2024 12:30:00 +0100

Laptops, früher noch teuer und leistungsschwach, haben heute oft den klassischen PC abgelöst. Ob für Gaming, als mobile Workstation oder primärer Rechner – es gibt kaum noch einen Haushalt, in dem kein Laptop genutzt wird. Mit der Mobilität ergeben sich aber nicht nur Vorteile, auch die Risiken sind im Vergleich zum stationären PC mehr geworden. Schutzmechanismen wie Kensington-Schlösser, Blickschutzfilter und Datenverschlüsselung können helfen, Risiken zu minimieren. Laufende Dienste, zum Beispiel für ssh- oder VNC-Zugang, werden dadurch jedoch nicht geschützt. Hier kann mithilfe einer Kombination aus NetworkManager und firewalld eine flexible Konfiguration geschaffen werden, die mir je nach Ort den Zugriff auf Dienste erlaubt beziehungsweise verweigert. Der NetworkManager erstellt für jedes Netzwerk eine eigene Verbindung. Diese lässt sich an eine firewalld-Zone binden. Diese Zonen bestehen aus Firewallregeln und lassen sich einfach auf die eigenen Bedürfnisse anpassen. In diesem Vortrag werden nicht nur die technischen Hintergründe verständlich erklärt, sondern auch gezeigt, wie je nach Netzwerkverbindung die jeweils passenden Firewallregeln automatisch aktiviert werden. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/152

Raus aus dem Lock-in-Effekt in der Bildung, aber wie? (clt24)

Sat, 16 Mar 2024 09:00:00 +0100

Die Pandemie war ein Motor für Digitalisierung in der Bildung. Jedoch haben sich viele Bildungseinrichtungen dabei in Abhängigkeiten von GAMAM (sog. Big Tech) begeben. Mit Verträgen über eine lange Laufzeit sicherten diese sich ihren Platz am Bildungsmarkt. Jetzt noch Open Source Produkte und Anbieter mit deutschem Standort an die Schulen und weitere Bildungseirichtungen zu binden, erscheint wie eine Sisyphos-Aufgabe. * Wie bekommen wir es trotzdem hin, den Lock-in-Effekt zu verhindern und Lernenden ein breites Spektrum an Möglichkeiten anzubieten? * Wie kann man einen Weg daraus finden, um den Anforderungen an BNE, Datenschutz und digitaler Souveränität gerecht zu werden? * Was können Anbieter, Lehrende, Schulleitungen, Eltern - oder auch Ländervertretungen dazu beitragen? Darüber möchten wir mit euch sprechen und auch von euren positiven Beispielen erfahren. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/246

Einführung in Mail-Verschlüsselung für Rookies (clt24)

Sat, 16 Mar 2024 12:00:00 +0100

Wie privat sind E-Mails? Die Realität ist, dass nicht nur staatliche Akteure Interesse am Inhalt von Mails haben. Haben Sie sich jemals gefragt, ob ein Mailserver-Administrator Ihre Mails liest, möglicherweise sogar auf Anweisung? Oder ob Ihr Mailprovider oder der Ihres Kommunikationspartners Einblick in Ihre Nachrichten nimmt? Manche Freemail-Anbieter geben das explizit in ihren AGBs an! Können Sie wirklich jedem Ihrer Endgeräte gleichermaßen vertrauen, wenn es um den Versand und Empfang sensibler Nachrichten geht? Eine Lösung bietet die Verschlüsselung von E-Mails. In den letzten Jahren ist dies insbesondere dank Anwendungen wie Thunderbird auch für weniger erfahrene Nutzer beinahe spielend einfach geworden. Der Vortrag beginnt mit einer Demonstration, wie mühelos E-Mail-Verschlüsselung sein kann. Von dort aus werden verschiedene Aspekte rund um dieses Thema beleuchtet. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/292

Linux-Assistant – Ein Begleiter für den Alltag auf Linux (clt24)

Sat, 16 Mar 2024 14:00:00 +0100

Linux-Assistant hat das Ziel, Linux-Anwender bei der täglichen Arbeit und bei administrativen Aufgaben zu unterstützen - langfristig auf den meisten Linux-Distributionen und Desktops. Neben einer schnellen Alltags-Suche durch die eigenen Browser-Lesezeichen, Anwendungen sowie häufig verwendeten Dateien und Ordner wird der Nutzer in der einfachen Administration unterstützt. Diese fängt bei der einfachen Einrichtung von Systemwiederherstellungspunkten an und endet bei Sicherheitsüberprüfungen am eigenen Desktop-Rechner. Das Open-Source-Projekt ist in Flutter mit Python-Elementen geschrieben. Im Vortrag stelle ich erst die Funktionen des Programms, im zweiten Teil Details zur Umsetzung. Webseite (Beitrag): https://www.linux-assistant.org about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/314

IPv6 Grundlagen in Zusammenhang mit IPoAC (clt24)

Sat, 16 Mar 2024 11:00:00 +0100

Du wolltest schon immer wissen: - was Brieftauben mit IPv6 zu tun haben? - wie IPv6-Adressen aussehen und gebildet werden? - warum EUI-64 veraltet ist und welche Alternativen es gibt? - warum ICMP für IPv6 so wichtig ist? - was NDP, NUD, DAD, RS, RA und SLAAC ist? - welche Einstellungen es zu IPv6 unter Linux gibt? - welche Möglichkeiten es zur Umsetzung von IPv6 mit Brieftauben gibt? Auf all diese Fragen möchte ich in diesem Vortrag Antworten geben. Dabei halte ich mich an die RFCs zu IPv6. Ich werde auch einige praktische IPv6 Linux Befehle zeigen, zBsp ssh mit IPv6. Ich bitte auf das Mitbringen von Brieftauben, Flugtieren und -geräten zu verzichten. Vielen Dank. Folien sind unter: http://git.tuxteam.de/gitweb/?p=susannes-git/Ipv6-Vortrag.git;a=tree about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/120

Analoge Fotos mit freier Software digitalisieren (clt24)

Sat, 16 Mar 2024 09:00:00 +0100

Film-Negative finden sich oft in Schuhkartons oder werden im aktuellen kleinen Film-Revival auch wieder neu produziert. Heutzutage ist aber eigentlich immer eine digitale Weiterverwertung das Ziel. Sei es, um alte Familienerinnerungen zu retten oder auch die neuesten Schnappschüsse zu präsentieren. Die notwendige Digitalisierung kann entweder durch spezialisierte Firmen erfolgen, oder man macht es selbst. Und es ist inzwischen sogar möglich, dies komplett mit freier Software zu erledigen. Gezeigt werden soll also der Weg zum Negativ (und was seinen Reiz ausmacht) und wie der nächste Schritt zum digitalen Bild mit freier Software (Darktable), einer DSLR und ein paar Teilen aus dem 3D-Drucker gelöst werden kann. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/223

Zahlen, Daten, Fakten zur Nutzung von OSS in Deutschland (clt24)

Sat, 16 Mar 2024 11:30:00 +0100

Bereits zum dritten Mal wurde 2023 der Bitkom Open Source Monitor, ein umfassende Studie zur Nutzung von Open Source Software in Deutschland, durchgeführt. Er gibt aufschlussreiche Antworten auf Fragen rund um den Status Quo, die Einsatzmöglichkeiten und die Herausforderungen von Open-Source-Software in Deutschland. Wie in den Vorgängerstudien aus 2019 und 2021 lag der Fokus auch im Jahr 2023 wieder auf der deutschen Wirtschaft. Gleichzeitig wird aber auch ein Blick auf den Public Sector geworfen. Im Talk wird der Monitor vorgestellt und interessante Zahlen, Daten und Fakten präsentiert und die Entwicklung über die letzten Jahre aufgezeigt. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/200

Optimierung mit Evolutionären Algorithmen (clt24)

Sat, 16 Mar 2024 13:00:00 +0100

Evolutionäre Algorithmen sind ein Oberbegriff für Genetische Algorithmen und Verwandte. Zur Optimierung von Fließkomma-Problemen mit Evolutionären Algorithmen bietet sich Differential Evolution [1, 2, 3] an. Der Vortrag gibt eine Einführung in die Optimierung von Fließkomma Problemen anhand von Beispielen aus der Elektrotechnik sowie der Optimierung von Kurvenformen zur Ansteuerung von piezoelektrischen Inkjet Druckern. Bei diesen Druckern hängt die Form des gejetteten Tropfens stark von der zur Ansteuerung verwendeten Kurvenform ab. Für die Software verwende ich die Python Bindings PGAPy [4] für das ursprünglich an den Argonne National Laboratories entwickelte "Parallel Genetic Algorithm Package" PGAPack [5]. Beide Open Source Pakete maintaine ich seit einigen Jahren. Unter anderen wurde diverse Algorithmen wie Differential Evolution und Strategien zur Optimierung von Multi-Objective Optimization (also Problemen mit mehreren Zielfunktionen) [6] neu implementiert. Literatur: https://blog.runtux.com/de/posts/2024/01/07/ about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/237

::1 (clt24)

Sat, 16 Mar 2024 10:00:00 +0100

Bei ::1 ist noch alles in Ordnung. Am eigenen Link ist meist auch noch alles OK. Darüber hinaus erwarten den motivierten und IPv6-begeisterten Admin schnell die ersten Hürden. Dieser Vortrag gibt einen kleinen Überblick über Seiten, die (überraschenderweise) noch nicht per IPv6 erreichbar sind, zeigt ein paar Statistiken zur Verbreitung von IPv6 im Internet und zeigt Möglichkeiten auf, wie sich die IP-Welten miteinander verbinden lassen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/243

Some things can't be XPLAINed (dgwk2024)

Sat, 02 Mar 2024 17:30:00 +0100

Fast täglich erreichen uns Berichte über Sicherheitslücken, Angriffe und Ransomware. Nach den «Nationalen Cyberwochen» vom Winterkongress 2022 werden in diesem Vortrag die Ereignisse des bedeutendsten Cybervorfalls im Jahr 2023 in der Schweiz beleuchtet. Wie wurde kommuniziert? Wer hat Fehler gemacht und wie schlimm ist dieser Cyberangriff wirklich? Fast täglich erreichen uns Berichte über Sicherheitslücken, Angriffe und Ransomware. Nach den «Nationalen Cyberwochen» vom Winterkongress 2022 werden in diesem Vortrag die Ereignisse des bedeutendsten Cybervorfalls im Jahr 2023 in der Schweiz beleuchtet. Wie wurde kommuniziert? Wer hat Fehler gemacht und wie schlimm ist dieser Cyberangriff wirklich? about this event: https://winterkongress.ch/2024/talks/some_things_cant_be_xplained/

»KI-Hype«, oder: Was sind eigentlich »Transformer«? (clt24)

Sat, 16 Mar 2024 15:00:00 +0100

Von Begriffen wie »Chatbots«, »GPT« und »KI«/»KI-Modellen« spricht heute irgendwie fast jeder. Dabei existiert für viele von uns, wenn wir ehrlich sind, jenseits ihrer offensichtlichen Fähigkeiten sicher nur eine äußerst vage Vorstellung, worum es dabei aus technischer Sicht eigentlich genau geht. »Transformer« sind eine Methode des maschinellen Lernens, die nahezu all diesen Technologien zu Grunde liegt. Aber was ist maschinelles Lernen und, noch viel wichtiger, was sind Transformer? Wir gehen auf eine kleine Reise durch einige der Grundlagen dieser Begriffe, von den blutigen Grundlagen bis hin zu der Frage, ob Transformer auch andere (sinnvollere) Dinge außer Wörter aneinander reihen können. Spoiler: Ja, das können sie. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/266

Sichere Datenhaltung und Backup in der Cloud (clt24)

Sat, 16 Mar 2024 15:00:00 +0100

Die Cloud ist anderer Leute Computer, d.h. Datenhaltung in der Cloud erfordert bestimmte Sicherheitsvorkehrungen. Schließlich kann der Betreiber der Cloud mit meinen Daten machen was er will. Daher stelle ich in diesem Vortrag einige Werkzeuge vor, um Datenhaltung in der Cloud, insbesondere automatisierte Backups, unter Linux einzurichten. Dazu zählen u.a. die verschlüsselnden Dateisysteme gocryptfs und cryfs, das Backuptool duplicity sowie rclone - das rsync für Cloud-Storage. Ich zeige, wie man sich mit diesen Werkzeugen eine einfache und sichere Datensicherungsstrategie einrichtet und dazu kostenlos verfügbaren Speicherplatz z.B. via Google, Dropbox oder Magenta nutzt. Selbstgehostete Server mit SSH/FTP/SFTP-Zugang o.ä. können natürlich auch genutzt werden. Mit rclone können Daten nicht nur synchronisiert werden, sondern es kann auch Cloud-Storage wie eine Festplatte eingemountet werden. Darüber lassen sich auf Wunsch auch bequem Daten mit mehreren Bearbeitern teilen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/211

Grundlagen von Netzwerkverwaltung in Linux (clt24)

Sat, 16 Mar 2024 09:00:00 +0100

In diesem Talk erhalten Einsteiger:innen einen Überblick über das Management von Netzwerken auf GNU/Linux. Die Präsentation beginnt mit einer Einführung in verschiedene Netzwerkinterface-Typen, Firewalls und Routing-Konzepte. Anschließend werden Tools vorgestellt, die auf Linux verfügbar sind und zur Konfiguration von Netzwerken genutzt werden können. Abgeschlossen wird mit einem kurzen Überblick über Ansätze zum Debuggen von nicht funktionierenden Netzwerkkonfigurationen. Obwohl der Fokus auf Netzwerken in Serverumgebungen liegt, sind die meisten Informationen auch auf Desktopsysteme übertragbar. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/276

Künstliche Intelligenz: Von der Theorie zur Praxis (dgwk2024)

Sat, 02 Mar 2024 12:15:00 +0100

Seit der allgemeinen Verfügbarkeit von ChatGPT ist KI in aller Munde. Doch was ist «Künstliche Intelligenz» überhaupt? Welche Verwendungszwecke gibt es? Was muss beachtet werden bei der Erstellung und Verwendung solcher Systeme? Und was sind die Risiken? Ein beachtlicher Teil der Vorträge am Winterkongress beschäftigt sich mit KI. Die Keynote führt uns in das Thema ein und erklärt, was wir haben möchten: Eine nutzbringende Anwendung der Technik. KI als Tool, welches den Menschen unterstützt, anstatt ihn zu ersetzen (Augmented Intelligence statt Artificial Intelligence). about this event: https://winterkongress.ch/2024/talks/kunstliche_intelligenz_von_der_theorie_zur_praxis/

Erika setzt jetzt selber Zeichen. (clt24)

Sat, 16 Mar 2024 13:00:00 +0100

Die Erika ist eine Schreibmaschine des VEB Robotron aus einem Land vor meiner Zeit. Sie hat weder “€” noch “@”, kann aber die Zeichen der heutigen globalisierten Welt schreiben: Sie kann ChatGPT. Das heißt, an die damals schon eingebaute Druckerschnittstelle (ja, Schreibmaschinen wurden zum Drucken verwendet) wurde ein ESP32 gehängt, der mit Hilfe der darauf installierten Software per Hand und mit schönen alten Tippgeräuschen eine Anfrage an Chat GPT schickt. Soweit ein Maker-Projekt, das auch im gleichnamigen Magazin abgedruckt und von uns nachgebaut wurde: Die Kombination einer Retro-Schreibmaschine mit moderner KI ist ein verblüffender Effekt und wirkt wie aus einem alten Science-Fiction-Film. In meinem Vortrag werde ich über die Beobachtungen und die daraus resultierende Diskussion sprechen, über das “Reden über KI” und über die Fragen, was die Jobs der Zukunft sein werden, wenn “KI” alles kann: Wo können wir solche Maschinen einsetzen, um über KI nachzudenken? Wo setzen wir Zeichen, wo die Maschine? about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/168

Was'n das fürn Programm? Manpage-Lesungen für Neugierige (clt24)

Sat, 16 Mar 2024 16:00:00 +0100

Der Vortrag reist einmal durch $PATH und stellt einige Programme vor, die in (fast) jedem Linux enthalten sind. Alleine in einem minimalen Debian sind es über 500. Warum sind sie da und was tun sie? Marie und Björn werden viele Manpages aufmachen und deren Anwenderinnen im Publikum suchen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/264

RocketLang - Mein eigener kleiner BER (clt24)

Sat, 16 Mar 2024 14:00:00 +0100

Mit dem Buch `Writing An Interpreter In Go` habe ich nicht nur angefangen Go zu lernen, sondern auch wie man einen eigenen Interpreter schreibt. Dabei sind viele Ideen übrig geblieben, die ich in den letzten 3 Jahren mal mehr, mal weniger abgearbeitet habe. Ich möchte euch auf eine kurze Reise durch die Entstehung von RocketLang mitnehmen und erzählen, was ich dabei über Interpreter, persönliches Projektmanagement, Flüche und Freundschaften gelernt habe. Bitte anschnallen, es geht steil bergab! about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/112

VirtualBox Meets KVM (clt24)

Sat, 16 Mar 2024 16:00:00 +0100

VirtualBox ist ein weit verbreitetes Tool für die Desktop-Virtualisierung unter Linux. Es ist für seinen breiten Funktionsumfang und seine Performance bekannt, insbesondere für die Ausführung von Windows-VMs. Allerdings führt VirtualBox’ Abhängigkeit von einem Out-of-Tree-Kernelmodul (vboxdrv) häufig zu Kompatibilitätsproblemen mit den neuesten Linux-Kerneln und erweiterten Sicherheitsmaßnahmen wie grsecurity/PAX und schließt die gleichzeitige Nutzung von KVM aus. In diesem Vortrag stellen wir ein KVM-Backend für VirtualBox vor, das diese Probleme behebt. Durch die Integration von VirtualBox und KVM können Benutzer KVM und VirtualBox gleichzeitig nutzen, ohne auf die umfangreichen Funktionen von VirtualBox verzichten zu müssen. Das dafür notwendige VirtualBox Patchset ist unter einer Open-Source-Lizenz verfügbar. Wir werden die Implementierung dieses KVM-Backends und seine Vorteile besprechen und Anleitungen zur Verwendung unseres Patchsets geben. Darüber hinaus wird der Vortrag unseren Ansatz zum Testen von Low-Level-Software behandeln und dabei die technischen Details und Methoden hervorheben. Diese Sitzung richtet sich an Benutzer und Entwickler, die ihr Virtualisierungssetup unter Linux verbessern möchten. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/148

Improvements in LibreOffice security (clt24)

Sat, 16 Mar 2024 09:00:00 +0100

This talk provides an update on recent & upcoming improvements in LibreOffice, for an even safer operation. As an office suite with a lot of functionality, as well as lots of ways to throw 'active content' aka macros at it, LibreOffice, just like its commercial brethren, provides a rather large attack surface. To mitigate that, the German Federal Agency for Computer Security (BSI) has published a best practice handbook for secure deployments of LibreOffice, as well as funded a number of additional improvements. This talk will showcase the most important ones, as well as provide suggestions for further development and security-hardened deployments: * fully automatic background updates under Windows * bulk disabling of active content * non-overridable admin configurations for all of LibreOffice * better password security, including much-improved ODF document encryption * disabling and removal of unsafe network protocols Alongside of the above, the talk will suggest a number of additional best practices - for deploying LibreOffice configured as securely as possible. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/311

Ich weiß, was du letzten Sommer bestellt hast (dgwk2024)

Sat, 02 Mar 2024 14:00:00 +0100

Dieser Vortrag beschreibt, wie wir fehlerhafte Prozesse in der Paketverfolgung der meisten deutschen Paketzustelldienste entdeckt haben, wie diese auf unsere Erkenntnisse reagiert haben und warum dies sehr wahrscheinlich auch deine Privatsphäre betrifft. In Zeiten des Online-Shoppings sind die Menschen besorgt, ob Online-Shops ihre Daten vernünftig behandeln und sichern. Online-Shops können über gängige Web-Schwachstellen wie SQL-Injections, XSS usw. angegriffen werden. Dadurch könnten Angreifer persönliche Informationen wie Name, Adresse und Bankdaten kopieren. Wir haben jedoch eine noch einfachere - und bisher unbeachtete - Möglichkeit gefunden, an die persönlichen Daten der Kunden von Online-Shops zu gelangen - ohne irgendwelche Schwachstellen auszunutzen. Da fast alle online bestellten physischen Waren von Paketdiensten ausgeliefert werden, haben wir das Tracking der wichtigsten Akteure im deutschen Paketmarkt analysiert. Durch die Verwendung öffentlich zugänglicher Daten und trivialer Statistik konnten wir Empfängerinformationen (Name, Adresse) schnell und in großer Zahl ermitteln. Dabei war es bei einigen Diensten sogar möglich, die Zustellung von Paketen zu beeinflussen. Gezielte Angriffe könnten dazu führen, dass Adressen und Einkaufsverhalten von Politikern und anderen Personen des öffentlichen Lebens aufgedeckt werden. Auch die Identifizierung von Kunden bestimmter Geschäfte ist denkbar. Die Art und Weise, wie die Sendungsnummern generiert werden, ermöglicht es uns nämlich, gezielt bestimmte Online-Shops anzugreifen. Während unserer Recherche haben wir mehrere Paketdienste kontaktiert (Responsible Disclosure), was zu einigen Verbesserungen führte. Einige Disclosure-Prozesse hatten schnelle und effektive Maßnahmen zur Folge und können als gute Beispiele dienen, während andere noch Raum für Optimierungen bieten. Wir werden auch darüber reden, wie Disclosure-Prozesse besser ablaufen können, und werden ein paar unterhaltsame Ereignisse darstellen. Wir kommen zu dem Schluss, dass Paketdienste eine - vielleicht - unterschätzte Gefahr für die Privatsphäre darstellen. Anstatt zahllose Online-Shops anzugreifen, ist der Missbrauch fehlerhafter Prozesse bei den wenigen marktbeherrschenden Paketzustelldiensten, die von fast allen Shops genutzt werden, ein ziemlich effizienter Weg, um an Adressen und in einigen Fällen an die Möglichkeit zu gelangen, in den Zustellprozess einzugreifen. In unserem Vortrag werden wir den statistischen Ansatz zum Brechen der Authentifizierung für die Paketverfolgung, die zugrundeliegenden Probleme, (negative und positive) Highlights aus den Disclosure-Prozessen und natürlich die Auswirkungen auf die Privatsphäre aufzeigen, die dies gehabt haben könnte und noch haben kann. about this event: https://winterkongress.ch/2024/talks/ich_wei_was_du_letzten_sommer_bestellt_hast/

DIY Verified Boot in 2024 (clt24)

Sat, 16 Mar 2024 15:00:00 +0100

In einer Welt, die immer mehr von verbundenen Geräten dominiert wird und in der immer mehr Business-Logik in die Cloud wandert, ist es wichtig sicherzustellen, dass auch nur echte Geräte mit verifizierter Software mit der Wolke kommunizieren. Das klingt logisch, aber die damit verbundenen Konsequenzen sind nicht immer auf den ersten Blick ersichtlich. Denn in den meisten Fällen reicht es eben nicht aus, einfach nur ein TPM per SPI/I2C anzuschließen. Der Vortrag soll darstellen, wie ein System entworfen werden kann, das schützenswerte Informationen gesichert ablegt. Als Beispiel dient ein moderner NXP i.MX8M ARMv8a SoC, anhand dessen der Verified-Boot Ablauf erklärt wird. Ebenfalls wird darauf eingegangen, wie sich mit Hilfe eines Yocto-basierten OS ein solches System erstellen lässt und wie man das Wissen auf andere Plattformen wiederverwenden kann. Stichworte die dem Hörer während des Vortrags begegnen können: HAB, barebox, TF-A, OP-TEE, dm-verity, Yocto. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/288

Flatpaks: Bleeding Edge Software für unterwegs und Zuhause! (clt24)

Sat, 16 Mar 2024 11:00:00 +0100

Du möchtest gerne mehr über das freie und quelloffene Paketverwaltungs-Framework "Flatpak" erfahren? Dann kommst Du an diesem Vortrag nicht vorbei! Denn ich werde Dir bei dieser Präsentation zum Beispiel zeigen ... - was an diesem Paketverwaltungs-Framework so besonders ist. - wie die Anwendungen auf externen Geräten installiert und verwendet werden können. - welche Kommandozeilenbefehle es gibt. (für Fortgeschrittene bis Experten!) - wie die Desktop Integration & "Client Side Decorations" angepasst werden kann. - welche Lösungsmöglichkeiten es bei Problemen mit Flatpak gibt. Des Weiteren gehe ich bei diesem Vortrag auch auf bestimmte Themenschwerpunkte näher ein, damit Du am Ende "Flatpak" auf deinem System ganz einfach verwenden kannst! about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/111

Füge Geokoordinaten zu deinen Adressen in PostgreSQL hinzu (clt24)

Sat, 16 Mar 2024 12:30:00 +0100

Geolokalisierungsdaten sind ein heißes Thema. Zu vielen Daten gehört eine Adresse, ein Straßenname, eine Postleitzahl und ein Land. Aber wo genau ist diese Adresse? Und was befindet sich in der Nähe dieser Adresse? Um diese Fragen zu lösen, müssen Adressen in Geokoordinaten aufgelöst werden. Je besser und genauer die Adressdaten sind, desto größer ist die Chance, die richtigen Koordinaten zu finden. Dieser Vortrag zeigt, wie Adressen mithilfe von OpenSteetMap-Daten aus der Datenbank heraus mithilfe von Python-Funktionen aufgelöst werden können. Wir sprechen auch über die Genauigkeit der Daten, indem wir die Ergebnisse verschiedener Adressformate mit bekannten Koordinaten vergleichen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/126

Die Python-Bibliothek SymPy (clt24)

Sat, 16 Mar 2024 16:00:00 +0100

SymPy ist ein Computeralgebrasystem, das unter Python nutzbar ist. Mit SymPy können Gleichungen gelöst werden, differenziert und integriert werden und vieles mehr. Dieser Vortrag führt in die Verwendung von SymPy mit Python ein und zeigt einige Beispiele zur Benutzung. Python-Grundkenntnisse sind zum Verständnis hilfreich. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/265

Alles kann, nichts muss? KI im Spannungsfeld von Recht und Gesetz. Mit KI-Quiz. (dgwk2024)

Sat, 02 Mar 2024 20:00:00 +0100

Jeden Tag schiessen neue KI-Tools wie Pilze aus dem Boden. Seit dem Launch von ChatGPT ist KI in aller Munde und auf vielen Handys und Laptops. Aber wie verträgt sich das mit den Schweizer und Europäischen Gesetzen und ist jetzt alles erlaubt? Neben einer rechtlichen und politischen Einordnung wird es ein KI-Quiz mit den Teilnehmenden geben. Referent Sven Kohlmeier, Fachanwalt für IT-Recht und Rechtsanwalt in Zürich wird auf verschiedene rechtliche Aspekt bei dem Einsatz von KI eingehen: Urheberrecht, Berufsrecht, Datenschutzrecht wie auch dem Verwaltungsrecht und Zivilrecht. Neben einem Ausblick auf europäische Regulierung wird wird er Empfehlungen für rechtliche und ethische Rahmenbedingungen für die Beschaffung und den Einsatz von KI-Anwendungen geben. Zum Abschluss wird es ein Quiz mit den Teilnehmenden zum Thema geben – mit einem garantiert nicht KI generiertem Gewinn … about this event: https://winterkongress.ch/2024/talks/alles_kann_nichts_muss_ki_im_spannungsfeld_von_recht_und_gesetz_mit_ki_quiz/

Google, der Meta-Monopolist (dgwk2024)

Sat, 02 Mar 2024 19:00:00 +0100

Google ist der heimliche Herrscher des Internets: Es kontrolliert den marktführenden Browser, das verbreitetste Mobile-OS, die damit verknüpfte Google Cloud, die dominanten Suchmaschinen und Videoplattformen sowie die Werbeplattform, um die man nicht herumkommt. In diesem Vortrag zeigen wir auf, wie Google mit AMP, Privacy Sandbox, Web Environment Integrity und anderen Entwicklungen daran arbeiten, seinen Einfluss und seine Kontrolle über das Web auszubauen, und gehen auf Alternativen ein, mit welchen sich NutzerInnen diesem Einfluss entziehen können. Google ist der heimliche Herrscher des Internets: Es kontrolliert den marktführenden Browser, das verbreitetste Mobile-OS, die damit verknüpfte Google Cloud, die dominanten Suchmaschinen und Videoplattformen sowie die Werbeplattform, um die man nicht herumkommt. In diesem Vortrag zeigen wir auf, wie Google mit AMP, Privacy Sandbox, Web Environment Integrity und anderen Entwicklungen daran arbeiten, seinen Einfluss und seine Kontrolle über das Web auszubauen, und gehen auf Alternativen ein, mit welchen sich NutzerInnen diesem Einfluss entziehen können. about this event: https://winterkongress.ch/2024/talks/google_der_meta_monopolist/

Youth Hacking 4 Freedom: Der Wettbewerb für Jugendliche! (clt24)

Sat, 16 Mar 2024 09:30:00 +0100

Du programmierst und tüftelst gerne an Software oder Hardware? Und du bist bereit für eine Herausforderung? Dann ist "Youth Hacking 4 Freedom" (YH4F) der perfekte Wettbewerb, um deine Fähigkeiten zu testen. Die Free Software Foundation Europe (FSFE) organisiert jährlich diesen Programmierwettbewerb für junge Menschen in Europa. Jugendliche im Alter von 14-18 Jahren haben die Möglichkeit, unter der Anleitung von Experten aus dem Freien-Software-Universum an ihrer eigenen Projektidee zu arbeiten. Es gibt keine Einschränkungen für die Projekte, solange sie unter einer Freien-Software-Lizenz veröffentlicht werden. In diesem Wettbewerb können junge Leute allein oder im Team ihre Coding-Skills ausprobieren und Projektarbeit lernen, während sie neue Freundschaften quer durch Europa schließen. Im Vortrag erfährst du alles über die Erfahrungen und Projekte früherer YH4F-Teilnehmender und findest heraus, wie du dich für die nächste Runde bewerben kannst. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/259

Software-defined Vehicles - Alles nur Marketing? (clt24)

Sat, 16 Mar 2024 12:00:00 +0100

Das Konzept des Software-definierten Fahrzeugs krempelt bereits jetzt die Automobilbranche um und hat das Potential unseren Umgang mit Autos grundlegend zu ändern. Es verspricht beispielsweise hochgradige Personalisierung, Anbindung an Infrastruktur sowie kontinuierliche Updates und das Nachrüsten neuer Funktionen ohne einmal in die Werkstatt zu müssen. Aber auch aus technischer Sicht sind SDVs unheimlich spannend. Sie verbinden embedded Systeme mit der Cloud und klassischen Maschinenbau mit moderner Softwareentwicklung. Open-Source-Initiativen zu SDVs wie von der Eclipse Foundation und Canonical festigen hierbei den Status von Linux als Betriebssystem der Wahl entlang des gesamten Techstacks. Genug Gründe also, sich Software-defined Vehicles einmal näher anzusehen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/220

Mini-LLM selbstgemacht (clt24)

Sat, 16 Mar 2024 16:00:00 +0100

Eine Vorführung, wie ein vorliegender Rohtext als Sprachmodell benutzt werden kann, um daraus endlos lange Texte zu generieren. Dabei entwickeln wir live den Programm-Code, der am Textende ein weiteres Zeichen setzt, und noch ein Zeichen setzt, und noch ein Zeichen setzt... Obwohl unser Phrasendrescher dumm wie Stroh ist, wirken die Resultate überraschend gut. Für die Vorführung nehmen wir die interaktive Programmiersprache "J". Wer dabei auf den Geschmack gekommen ist, kann in einem Workshop mehr dazu lernen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/287

FLOSS als Basis der IT einer Beruflichen Schule (clt24)

Sat, 16 Mar 2024 10:00:00 +0100

Mit Beginn des laufenden Schuljahres hat ein kleines Team damit begonnen, Freie Software als Grundpfeiler der IT einer Beruflichen Schule zu etablieren. Kern des Konzepts ist der linuxmuster.net-Schulserver, dessen Imaging-Lösung allerdings durch Debian KDE-Clients, die über Ansible während der Installation komplett konfiguriert werden, ersetzt wurde. Für Benutzer proprietärer Branchensoftware wurde ein System zur Verteilung virtueller Maschinen (über bittorrent) entwickelt. Diese VMs können von Lehrpersonen/Abteilungen individuell für ihre Anforderungen eingerichtet werden. Der Vortrag stellt das technische Konzept, Probleme und Lösungen vor dem Hintergrund der Frage, wie das IT-Umfeld der schulischen (Aus-)Bildung im Idealfall heute aussehen sollte, vor. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/221

Der Compiler: Eine Einführung für Anfänger (clt24)

Sat, 16 Mar 2024 15:00:00 +0100

Compiler sind magische Programme, mit denen fast jeder zu tun hat, aber niemand weiß, wie sie funktionieren. Aber was tun sie eigentlich? In diesem Vortrag schauen wir uns grob an, wie ein Compiler funktioniert. Außerdem erhält der Zuhörer das nötige Grundwissen, um mit dem Compilerbau anzufangen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/231

Was ist eigentlich Bareos? (clt24)

Sat, 16 Mar 2024 16:00:00 +0100

Bareos ist eine platformübergreifrende und netzwerkbasierte Software-Suite zur Erstellung und Verwaltung von Datensicherungen. Wir stellen die diversen Funktionen vor, die unsere Software von vielen anderen Produkten unterscheidet und geben einen Einblick in aktuelle Neuerungen. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/205

Elektronisches Patientendossier: Raus aus der Sackgasse (dgwk2024)

Sat, 02 Mar 2024 16:30:00 +0100

Seit 2017 gibt es das Gesetz über das elektronische Patientendossier – doch das Projekt kommt nicht zum fliegen. Der Bund hat den Handlungsbedarf erkannt und eine umfassende Gesetzesrevision vorgelegt. Wir bereiten uns gemeinsam auf die parlamentarische Phase vor und beantworten folgende Fragen: was sind die grössten Hürden für ein funktionierendes EPD? Was sind die aktuellen Machtverhältnisse zwischen den wichtigsten Stakeholder? Und was sind die wünschenswerten Zukunftsszenarien für Gesundheitsdaten in der Schweiz? Seit 2017 gibt es das Gesetz über das elektronische Patientendossier – doch das Projekt kommt nicht zum fliegen. Der Bund hat den Handlungsbedarf erkannt und eine umfassende Gesetzesrevision vorgelegt. Wir bereiten uns gemeinsam auf die parlamentarische Phase vor und beantworten folgende Fragen: was sind die grössten Hürden für ein funktionierendes EPD? Was sind die aktuellen Machtverhältnisse zwischen den wichtigsten Stakeholder? Und was sind die wünschenswerten Zukunftsszenarien für Gesundheitsdaten in der Schweiz? about this event: https://winterkongress.ch/2024/talks/elektronisches_patientendossier_raus_aus_der_sackgasse/

Wie funktioniert das Internet? (clt24)

Sat, 16 Mar 2024 11:00:00 +0100

Der Vortrag versucht, die Frage zu beantworten, wie das Internet funktioniert. Das IP-Protokoll wird erklärt. Es wird gezeigt, wie Daten im Internet ausgetauscht werden und woher das Internet weiß, wie es ein Ziel findet. Dazu werden Routing-Protokolle wie BGP erläutert. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/139

Schwarze Kunst. Wege zum druckfertigen Werk (clt24)

Sat, 16 Mar 2024 16:00:00 +0100

Geschafft: Der Inhalt und der Umschlag Ihres Buchs liegen fertig da. Jetzt gilt es, aus den einzelnen Komponenten ein druckfähiges Werk zu machen. Wir zeigen, wie Sie die Einzelteile vereinen und berichten über Stolperstellen beim Veröffentlichen für Print-on-demand. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/115

Open Source Schul-IT im Großformat (clt24)

Sat, 16 Mar 2024 11:00:00 +0100

Mehrere hundert Schulen in Finnland und bereits ca. 50 Schulen in Deutschland nutzen Puavo, eine Linux- und Open Source -basierte Schul-IT-Lösung. Mit 20 Jahren Erfahrung in Linux-Systeme im schulischen Umfeld präsentieren wir einen Einblick wie die Nutzung der IT in Schulen sich entwickelt hat und zeigen wie man ein zuverlässiges System einsetzt und verwaltet. Auswahl der präsentierten Themen: - Vorteile der Open Source Software in der schulischen Umgebung - Geräteverwaltung und Fernwartung - Verwaltung der Benutzerkonten in einer Organisation mit mehrere Dutzend Schulen - Einheitliche Benutzeroberfläche für alle trotz großer Flexibilität auf der Hardware-Ebene - Erweiterung der lokalen Umgebung mit Cloud-Dienste auf Open Source -Basis - Schul-IT in Finnland und Deutschland – Unterschiede und Gemeinsamkeiten - Abitti, die finnische Linux-basierte Umgebung für Abschlussprüfungen about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/283

Corporate Publishing mit Markdown, Pandoc und ConTeXt (clt24)

Sat, 16 Mar 2024 14:00:00 +0100

Die Hostsharing eG nutzt eine Publishing-Umgebung auf Basis von Markdown, Pandoc, ConTeXt und Git. Das System gewährleistet die Handhabung des Corporate Designs, beschleunigt die Erstellung von Printprodukten und ermöglicht ihre Versionierung mit Git. Printprodukte werden als Markdown-Datei erstellt und anschließend skriptgesteuert von Pandoc und dem TeX-Macropaket ConTeXt in PDF-Dokumente umgewandelt. ConTeXt wurde gewählt, weil es besonders gut für individuelle Layouts geeignet ist. Der Vortrag schildert Erfahrungen bei der Entwicklung und Nutzung des Systems sowie die Erweiterungspläne. about this event: https://chemnitzer.linux-tage.de/2024/de/programm/beitrag/188

Pimmelgate Süd (openlab)

Sat, 28 Oct 2023 20:20:00 +0200

Alex und Ingo vom KlimaCamp Augsburg erzählen von ihren Erfahrungen mit der Staatsgewalt. Wir fühlen uns nur all zu gut erinnert. about this event: https://c3voc.de

Die Botschaft und der Gesetzesentwurf zur eID (dgwk2024)

Sat, 02 Mar 2024 14:00:00 +0100

Am 22. November 2023 – rund ein halbes Jahr später als zuvor in Aussicht gestellt – verabschiedete der Bundesrat die Botschaft zum Bundesgesetz über den elektronischen Identitätsnachweis und andere elektronische Nachweise (E-ID-Gesetz, BGEID). Die Verzögerung wurde auch damit begründet, dass Bedenken gegenüber dem Vorentwurf berücksichtigt werden sollen. Verspricht der Entwurf nun, was wir uns erhofft haben? Am 22. November 2023 – rund ein halbes Jahr später als zuvor in Aussicht gestellt – verabschiedete der Bundesrat die Botschaft zum Bundesgesetz über den elektronischen Identitätsnachweis und andere elektronische Nachweise (E-ID-Gesetz, BGEID). Die Verzögerung wurde auch damit begründet, dass Bedenken gegenüber dem Vorentwurf berücksichtigt werden sollen. Verspricht der Entwurf nun, was wir uns erhofft haben? about this event: https://winterkongress.ch/2024/talks/die_botschaft_und_der_gesetzesentwurf_zur_eid/

Die Bevölkerung und die Internetsicherheit – Paradox und unbewusste Inkompetenz (dgwk2024)

Sat, 02 Mar 2024 17:30:00 +0100

Vom 7. August bis 4. September 2023 führte das Markt- und Sozialforschungsinstitut gfs-zürich im Auftrag von digitalswitzerland, der Mobiliar, SATW, FHNW und SISA eine Bevölkerungsumfrage in allen drei Landesteilen der Schweiz durch. Ziel war es, die Einstellung Schweizer Internetznutzenden zu Cyberrisiken, die Betroffenheit von Angriffen sowie die Umsetzung von Sicherheitsmassnahmen zu ermitteln. Zusätzlich wurden Fragen zum Verhalten und Sicherheitsgefühl beim Onlineshopping gestellt. Im Vortrag sollen die Ergebnisse zusammenfassend dargestellt und in Kontext gesetzt werden. Vom 7. August bis 4. September 2023 führte das Markt- und Sozialforschungsinstitut gfs-zürich im Auftrag von digitalswitzerland, der Mobiliar, SATW, FHNW und SISA eine Bevölkerungsumfrage in allen drei Landesteilen der Schweiz durch. Ziel war es, die Einstellung Schweizer Internetznutzenden zu Cyberrisiken, die Betroffenheit von Angriffen sowie die Umsetzung von Sicherheitsmassnahmen zu ermitteln. Zusätzlich wurden Fragen zum Verhalten und Sicherheitsgefühl beim Onlineshopping gestellt. Im Vortrag sollen die Ergebnisse zusammenfassend dargestellt und in Kontext gesetzt werden. about this event: https://winterkongress.ch/2024/talks/die_bevolkerung_und_die_internetsicherheit_paradox_und_unbewusste_inkompetenz/

Sexroboter zwischen Recht, Ethik und IT Security (dgwk2024)

Sat, 02 Mar 2024 13:00:00 +0100

Rechtliche und ethische Implikationen Künstlicher Intelligenz erläutert am Beispiel des Sexroboters. Dieser Social Robot der besonderen Art dient in diesem Vortrag nicht nur als erheiternder Zugang zum Thema Künstliche Intelligenz und Daten, sondern gibt einen ersten Einblick in die Komplexität, die diese Thematik mit sich bringt. Dabei werden nicht nur bereits bestehende Gesetzesgrundlagen betrachtet und die damit einhergehenden Rechtsprobleme, sondern auch weitreichende ethische Implikationen auf die Gesellschaft. Rechtliche und ethische Implikationen Künstlicher Intelligenz erläutert am Beispiel des Sexroboters. Dieser Social Robot der besonderen Art dient in diesem Vortrag nicht nur als erheiternder Zugang zum Thema Künstliche Intelligenz und Daten, sondern gibt einen ersten Einblick in die Komplexität, die diese Thematik mit sich bringt. Dabei werden nicht nur bereits bestehende Gesetzesgrundlagen betrachtet und die damit einhergehenden Rechtsprobleme, sondern auch weitreichende ethische Implikationen auf die Gesellschaft. about this event: https://winterkongress.ch/2024/talks/sexroboter_zwischen_recht_ethik_und_it_security/

Dark Corners – eine Bias Testing Station (dgwk2024)

Sat, 02 Mar 2024 13:00:00 +0100

Dark Corners ist eine von der Turing Agency gebaute Teststation. Mit dieser können die diskriminierenden Abgründe, die «dunklen Ecken» von GPT und Konsorten erkundet werden. Um den Einstieg ins Testen zu erleichtern, schlagen wir ein paar entlarvende Prompts vor, die man einfach anklicken kann. Die Nutzer:innen können dann selber ausprobieren, ob sie damit sexistische oder rassistische Texte und Bilder provozieren können. Der Bias-Tester soll sich noch weiterentwickeln – in Zukunft soll er auch Vergleiche zwischen verschiedenen Modellen erlauben. Dark Corners: Willkommen zum Vorurteile-Tester KI hat Vorurteile In den aktuellen generativen KI-Modellen (beispielsweise ChatGPT oder DALL·E) stecken nicht nur riesige Mengen an Daten, in ihnen stecken auch unsere eigenen Vorurteile und unsere diskriminierenden Strukturen. Man könnte auch sagen: die KI hat die Machtverhältnisse der – westlichen – Gesellschaft souverän übernommen, sie hat sie gelernt. Und reproduziert sie nun dementsprechend. Für die Ausstellung «Macht» im Vögele Kultur Zentrum in Pfäffikon SZ hat die Turing Agecny eine Teststation gebaut, mit der die diskriminierenden Abgründe, die «dunklen Ecken» von GPT und Konsorten erkundet werden können. Um den Einstieg ins Testen zu erleichtern, schlagen wir ein paar entlarvende Prompts vor, die man einfach anklicken kann. Die Besuchenden können dann selber ausprobieren, ob sie damit sexistische oder rassistische Texte und Bilder provozieren können. Sie dürfen auch selber kreativ werden! Vielleicht kommen Ihnen weitere Szenerien in den Sinn, um dunkle Ecken in den Sprach- und Bildmodellen auszuleuchten. AI Bias – was ist das? Künstliche Intelligenz kann all die Dinge die sie kann nur weil sie auf die jeweilige Funktion hin "trainiert" worden ist, wie das im Fachjargon heisst. Dieses Training ist eine mathematisch komplexe Sache, aber entscheidend dabei ist: Grundlage des Trainings sind Unmengen an Daten. Und diese sind zumeist menschgemacht. Bei grossen Text-KIs also: Terabytes und Terabytes an Texten, die überall da gesammelt werden, wo sie frei verfügbar sind. Manche sagen auch: für das Training hätten sich ChatGPT und Konsorten "das komplette Internet" einverleibt. In diesen Daten steckt viel menschliches Wissen, aber was auch drin steckt: viele Vorurteile, viel gesellschaftliche Ungleichheit. Diese sogenannten "Biases" tauchen in den Sprachausgaben der KI dann wieder auf, manchmal versteckt, manchmal auch offensiv offen. Da ist die KI nicht besser, nicht klüger, nicht fairer als wir. Ausserdem drängt sich die Frage auf: welcher Teil der Welt ist dominant im Internet vertreten – und wofür ist das Internet blind? Funktionieren und urteilen Maschinen objektiver und unvoreingenommener als Menschen, können sie "neutral" sein? Das hätten wir gern. Und es mag vielleicht bei einem Kamera-Bild noch halbwegs stimmen, das eine Szenerie zeigt "wie sie ist", im Gegensatz zur unverlässlichen Erinnerung eines Zeugen. Aber bei KI läuft diese Hoffnung ins Leere. Die KI trifft ihre Entscheidungen nicht nach einem maschinell-logischen Raster, sondern nach Wahrscheinlichkeit. Und was sie als mehr oder weniger wahrscheinlich erachtet hat sie allein anhand menschlicher Beispiele gelernt. Es gibt zwar Versuche, KIs die menschlichen Vorurteile ganz gezielt abzugewöhnen oder sie mit Filtern zu neutralisieren. Zum Beispiel bei automatisierten Bewerbungsverfahren: Können Kandidatinnen von einer KI womöglich fairer ausgewählt werden? Nämlich anhand tatsächlicher Qualitäten und nicht aufgrund von Geschlecht oder ausländisch klingendem Nachnamen? So etwas wird gerade intensiv erforscht. Leider zeigt sich: Die Macht der Trainingsdaten ist gross, die "perfekt vorurteilsfreie" Maschine wird wohl eine Illusion bleiben. Denn am Schluss sind alle Flick-Versuche auch wieder subjektiv, jeder Filter zeigt auch wieder ein Wertsystem auf. Welche Ismen hat die KI von uns gelernt? Und wie offensichtlich reproduziert sie sie? about this event: https://winterkongress.ch/2024/talks/dark_corners_eine_bias_testing_station/

Lightning Talks (dgwk2024)

Sat, 02 Mar 2024 16:30:00 +0100

Lightning Talks – Deine zehn Minuten Berühmtheit! Bringe Deinen ansteckenden Enthusiasmus an ein Publikum mit kurzer Aufmerksamkeitsspanne! Diskutieren ein Programm, ein System oder eine Technik! Stelle Deine Projekte und Ideen vor oder versuche, eine Gruppe von Menschen für Deine Veranstaltung oder Versammlung zu gewinnen! Was auch immer Du mitbringst, machen es kurz! Wir haben vier Slots mit jeweils 10 Minuten zu vergeben. about this event: https://winterkongress.ch/2024/talks/lightning_talks/

Demo: Back to the PET (basel)

Sun, 10 Mar 2024 01:30:00 +0100

Die Demo "Back to the PET" auf unserem Commodore PET Wir haben unserem Commodore PET/CBM 3016 ein RAM- und ROM-Upgrade verpasst, sodass dieser nun quasi baugleich zum PET 4032 ist. Zum Feiern unseres Erfolgs haben wir die Demo "Back to the PET" von shiru8bit ausgeführt und aufgezeichnet. about this event: https://c3voc.de

Von Algorithmen diskriminiert: Wie kann der Schutz verstärkt werden? (dgwk2024)

Sat, 02 Mar 2024 15:45:00 +0100

Automatisierte Entscheidungen dringen zunehmend in unser tägliches Leben ein – zum Beispiel, wenn Algorithmen unsere Stellenbewerbungen aussortieren, Steuererklärungen automatisch bearbeiten, Krankheiten mittels sogenannter KI diagnostizieren, Verbrechen vorhersagen oder die Arbeitsmarktintegrationschancen von Geflüchteten vorhersagen sollen. Werden algorithmische Systeme eingesetzt, kann das allerdings zu Diskriminierungen führen. Was steht auf dem Spiel und wie kann der Schutz vor Diskriminierung in der Schweiz gestärkt werden? Auf diese Fragen werden wir in dieser Präsentation eingehen. Automatisierte Entscheidungen dringen zunehmend in unser tägliches Leben ein – zum Beispiel, wenn Algorithmen unsere Stellenbewerbungen aussortieren, Steuererklärungen automatisch bearbeiten, Krankheiten mittels sogenannter KI diagnostizieren, Verbrechen vorhersagen oder die Arbeitsmarktintegrationschancen von Geflüchteten vorhersagen sollen. Werden algorithmische Systeme eingesetzt, kann das allerdings zu Diskriminierungen führen. Was steht auf dem Spiel und wie kann der Schutz vor Diskriminierung in der Schweiz gestärkt werden? Auf diese Fragen werden wir in dieser Präsentation eingehen. about this event: https://winterkongress.ch/2024/talks/von_algorithmen_diskriminiert_wie_kann_der_schutz_verstarkt_werden/

Automatisierte Ungleichheit (dgwk2024)

Fri, 01 Mar 2024 21:15:00 +0100

Bereits benachteiligte gesellschaftliche Gruppen (Migrierende, Erwerbslose, etc) sind automatisierten Entscheidungssystemen, Scoring und Profiling und generell der digitalen Überwachung durchgängig viel stärker ausgesetzt als nicht-benachteiligte Gruppen. Gleichzeitig haben sie weniger Möglichkeiten, sich dagegen zu wehren. In unserem Vortrag geben wir Beispiele für dieses stärkere Ausgesetztsein. Weiterhin diskutieren wir mögliche Implikationen für netzpolitische NGOs. Bereits benachteiligte gesellschaftliche Gruppen (Migrierende, Erwerbslose, etc) sind automatisierten Entscheidungssystemen, Scoring und Profiling und generell der digitalen Überwachung durchgängig viel stärker ausgesetzt als nicht-benachteiligte Gruppen. Gleichzeitig haben sie weniger Möglichkeiten, sich dagegen zu wehren. In unserem Vortrag geben wir Beispiele für dieses stärkere Ausgesetztsein. Weiterhin diskutieren wir mögliche Implikationen für netzpolitische NGOs. about this event: https://winterkongress.ch/2024/talks/automatisierte_ungleichheit/