Dear viewer, these subtitles were generated by a machine via the service YouTube and therefore are (very) buggy. If you are capable, please help us to create good quality subtitles: https://c3subtitles.de/talk/841 Thanks!
[Music]
thank you
um so I already said welcome
so just let me uh briefly tell you how
this works
for those of you who have never listened
to any lightning talks and who never
gave a lightning talk how to talk
lightning
it's pretty easy actually just sit in
one of the front rows if you submitted
the lightning talk and would like to say
something here
and get on stage quickly once your tour
comes up
I will announce the talks
right before they start
and then talk into the microphone like
me right now do not turn around to see
your slides
because you see what happens you can't
hear me anymore if I turn around you
have a monitor down down there so just
look there for your slides if you need
to look at them like me right now
then use the clicker which always has to
remain on this podium
to advance your slides just right and
left here and stay calm like me right
now
and deliver your talk
it's good if you finish on time that's
what lightning talks are all about we
have a fast-paced session here with five
minutes for each talk so please finish
before the five minutes are over receive
your applause
profit
how to listen to lightning talks for
those of you in the audience it's pretty
easy just be excellent to each other
and watch the timekeeper the timekeeper
is this thing here in front of me can
you see it from
from down there can you see it yeah okay
so watch the timekeeper because this one
helps us to check if the five minutes
are over or not Alex would you like to
say something about it yes just a few
words that's very easy to use it
visualizes the remaining talking time or
gatsik now has two and a half minutes
left and uh it starts in Queen when you
have five minutes left and I will do now
fast forward so don't panic if the queen
runs out if this is like this you still
have two minutes after yellow signal
shows you that you have one minute left
and now when the red turns up you have
30 seconds left and when we are dressed
like this
the device begins to Blink in this you
know you have been to lightning talks
it's your task five
four three two one uh we have to try
this again let's practice again yeah you
are not awakened here
one more try five four three two one uh
very nice thank you
all right
so basically don't panic if you see all
yellow then you still have one minute
there are translations available for the
lightning talks we have English to
German translations English to French
and I think we have a German talk or two
so German to English I don't know about
German to French right now but we'll see
you can't access the translations via
decked phones right now so please check
the wiki with the translations topic or
check
streaming.c3lingo.org for information on
how to listen to the streams and the
translations
that's it let us do that and begin with
the talks
yeah the clicker please yeah one more
thing please let the keeper let
the clicker on this podium
good morning Congress hello lightning
talk fans
hopefully we will get the slide
somewhere soon
no hurries early morning still
good morning so earlier this year sir
Tim berners-lee did a call for action
with quite some urgency because he
thought the internet as we know it is in
danger it is in danger because it is
centralizing more and more and becoming
the playground of a few huge
multinational
companies
one of the concerns was that we are
losing control over our data
so I
would like to join this call for action
and help doing something again
against it
and
I want to introduce a software for
self-hosting
blog microblogging engines or a micro
blogging engine and I want to talk about
microblogging very briefly my narrow use
case and then a little bit more in
detail about
um
about self-hosting actually and finally
about the the software I did my two what
so microblogging I use it mostly for
um
for tagging links I find it on the
internet and storing and building some
knowledge archive
a little bit like delicious was back
then and I was using the software of a
great French PHP developer which is very
simple and does almost what I want but
it's not not that easy to self-host no
more so why do I want to self-host it
gives me the freedom of choice the
software that runs is my choice
it gives me the freedom which data do I
want to publish and what do I not want
to publish
it gives me the sovereignty over which
features are available and which
features are not dependent on the
software I use
it's free of legalese I do not have to
accept any terms of conditions because I
am the provider of the software
and
I do not have to give up rights so I do
not have
a small print I do not hand over usage
rights of what I post to anybody else
just because I post
and it is very much do it yourself
and
however it can be scary
there is some some entry barrier if you
know nothing about it
you have to install things there may be
dependencies you have to choose
platforms there is security issues
[Music]
it is there is an operational red tail
so if things go wrong you have to you
have to take action yourself
and there may be several
issues to choose servers or to pay
service so what can be done about it
my Approach is to keep things simple and
to do few things that you can take
responsibility for because you know
what's going on
and I think to that Avail it is useful
and important to leverage experiences
that are there use well-known
rather old technologies that are pair of
surprises
use small code bases and have a good
usability for the housekeeping tasks so
keep things up and running should be
nice and easy to do
and now I'm seeing I'm a little bit fast
actually
now the software I'm I'm about to do
which is pretty much a work in progress
and will always be an a do-it-yourself
manner
it is one file and one step install
visitors of the microblog just see
static files there is no server code
running except the web server itself
which delivers flat files
the editor that posts something to his
or her own microblog
uses a CGI for that so the one file one
install actually is a CGI
I did that in go for a good portability
to various platforms so you can easily
run this on your own Hardware on a
Raspberry Pi or in a in a cloud computer
in a in a
shared hosting environment as well
and it delivers atom feeds five uses
Atomic storage tree and flat file
readable
thank you thank you
[Applause]
next up is digital information for
refugees newcomers
[Music]
hi
um my name is luvika and I work for the
non-profit Association I write if I'll
we care a lot about consumer rights in
the digital age and one of my projects
I'm currently working in is dealing with
a question on researching how refugees
can find digital information on consumer
protection more easily than it is
nowadays so basically we're asking
ourselves the question how should
digital information for refugees and
newcomers people new in Germany but also
in other countries
should look like
life is important well refugees
newcomers are also using digitive media
such as
like like everyone else nowadays and um
when they arrive in a foreign country
they have a certain certain information
leads like finding a place to stay
finding a doctor
um where to get Asylum and residential
rights and so on but they also have
questions on consumer right we might not
know whether it's called consumer
protection but what about buying
yourself a SIM card getting a mobile
contract and what about the guarantee
what is a guarantee what are insurance
is What insurances I need and so we're
researching how we can get more
information on these topics out to the
people arriving you in our country
um this might be important for you as
more and more people coming in we have
via migration society and and so you
might also deal with the question how to
get information whatever kind of
consumer protection or any other
information to people like that and
let's start with the research I'm going
to give a few examples of a user
research we did this is one of our focus
groups with the Syrian refugees on this
photo we are currently using Apple
devices well Apple devices are not
mainly distributed in this focus group
or in in this with certain Target groups
so
um if you wanna if you really think you
want to program an app
um you might focus on Android first
a second thing where are we where are
people using the internet well mainly
it's social networks for many refugees I
talk to many of you climbers
Facebook is basically the internet well
it's not the internet for myself I have
a different standpoint on it but if I
want to inform this group of people I
really need to go to the social networks
otherwise my information will not have
the impact as it should like so if you
want to distribute information you also
have to have a standpoint standpoint on
that but you can't totally deny that
people are using Facebook or other
social media
then please use plain language
especially in German language we're very
used to having long phrases explaining
stuff very well this is not very helpful
for people arriving here in the country
with some basic German knowledge also
think about Erasmus students so you
don't always have to think about
refugees and newcomers but other other
groups like Erasmus students tourists
and so on can profit from plain German
language as well
um first part a third Point
um if you if you're providing
information use videos and pictures this
is very helpful for someone to catch
someone's attention
um especially videos are very well
consumed and as I talked about social
networks videos and pictures are also
um you have promoted by social networks
and as content in a better way than just
playing tags when it comes to videos you
can also use subtitles and this is not
only accounting for the mother tongue
but also for German language we found
out that many people really like to
practice their German
and practicing it by German videos and
if they can find a German text
underneath they can check well did I
understand it right or wrong and may
have a success story for themselves
while consuming information and last but
not least
if you give out information digital
information please use examples and show
very clear consequences don't use them
maybe be very clear on consequences
thanks
goes out to everyone who participated in
the research I can be found at the code
for Germany example of anyone wants to
talk to me afterwards thank you on time
foreign
so next up is a meter container
let me just pull this over to me
all right
okay
so hello I would I would like to talk
about my project meta container that
I've made to make sharing resources like
USB devices
networks file system easier
so I was frustrated with the amount of
configuration to for example share USB
device with other computer while doing
instacularity and then centralized way
[Music]
so let's see how you could do that with
metacontainer
so basically I wanted to make it as easy
as possible so we will use one command
to export a resource in this example
let's say I want to share a file with my
friend from our director from my laptop
so I just used one command to export the
directory get a string called reference
and let's say my friend uses another
command to mount the directory on his
computer and there and the reference as
you can see on the slide is the long
string and it contains uh all that is
needed to identify uh where the resource
is and to securely mount it for example
it contains a hash of public of my
public of my public key so
my friend can be sure that he is really
accessing what he what he should be
accessing
um
okay So Meta container currently has
also for free other types of resources
implemented remote desktops where you
can
use
when you can connect to a computer
computer of another another person on
your computer with a remote desktop
alternate networks so we can for example
bridge
to attorney networks from two buildings
or speaker and microphone support where
you can like use the speaker from your
Raspberry Pi to play music from your
laptop for example and I have other
ideas like showing USB devices or a
video or seller parts and whatever
um so basically my project is an
abstraction layer over open source
project which are used to share
resources like SS HFS both audio tiger
VNC USB IP and other other projects so
it adds a layer which
makes the process secure and let's say
easy
and also by using an encrypted overlay
Network it makes
it makes easy to connect to
computers even behind nut so it uses a
net password and it can bypass firewalls
to Sarah
and I also have initial support for
creating virtual machines and other
compute resources that can
use the resources which are shared using
that functionality I described
previously like for example you can
create a virtual machine that uses a
file on another host with all without
any configuration except for exporting
and starting the virtual machine or for
example you can start a container on a
server that uses a network that is
running on your uh that is in your home
for example
um
and that's another example of why this
could be useful let's say you have a
small laptop that you want to uh
develop a project that uses for example
neural networks and you have a fast
server of a computer in your in another
place so you can easily create
run the training session uh with when
when while sharing only the director
with your project and nothing else with
the computer that is trending that's
training the
neural network
um so basically I used a lot of Open
Source Technologies in metacontainer
like ideas NYX which is really a nice
package manager when you were building
that many
dependencies you want to use something
that can do it easily I used a cap and
Proto which is also a really nice RPC
protocol
like it is something similar to a Proto
buffers if you know that
um okay so thanks for your attention if
you are interested in it you can visit
the website or see Cloud on GitHub
thank you
[Applause]
so the next talk is going to be a video
introduction into Arduino
let me see I have put it on the other
screen and
let's go okay
okay so I'm teaching a class every day
during the Congress on how to solder and
then how to program an Arduino and this
is actually a video that's much more
sped up than it is in real life just so
it would fit in the five minutes of the
soldering that we do in this class and
the soldering part takes about an hour
and then when I'm done
with soldering and we've checked that
everybody's works then I go through and
I explain what digital input is and
digital output is and analog input and
analog output and if there's time I
explain non-blocking State machines
um
I also am selling kits and when you're
done with this Workshop you should be
able to program all of the kits on your
own with the exception of one that isn't
Arduino compatible
so the target audience is really someone
who's never soldered before someone
who's never programmed before
and there's also two other classes that
are being taught every day over well not
every day there's one more session of
the intro to Arduino kit that Mitch
Altman teaches and in that you spend
about three hours soldering together a
Arduino clone if you do his Workshop you
can use that Arduino in my workshop if
you don't do that Workshop I have
arduinos you can buy from me as well
and then there's another power supply
surface mount Workshop where you learn
how to use a solder mask and solder
paste and place all of the components
and then heat all of the solder so
Reflow the solder so that it looks like
you know when you open your cell phone
those tiny components when you're done
with that class you'll understand how
those are all assembled only and in
Industry you use a pick and place
machine for that
so yeah that's more or less what we're
doing over there and you should come by
if you want to learn how to solder or
you don't know how to program you want
to learn how to program
so
yep so we can watch the end of the video
and you'll see when it's done this is
actually me um
uh the hardware hacking area is walk out
this room and then the next Hall it's
the first group of tables on the left it
was a big projector it says Hardware
hacking area right now or in a couple of
minutes probably Mitch Altman will be
starting his course actually I think
it's in an hour he starts his course my
course is at 5 30 every day except the
last day it's at one o'clock
any other questions
yeah so basically I also teach you how
to unsolder things because in in general
and also Mitch will teach you that too
because
invariably someone puts on a component
backward or fills in a hole
yeah
and then we test it and the end video is
testing it
in the end of the video is testing it
yeah
all right so if there are no other
questions would you like the video to
run to the end or is it yeah I mean it's
cool to see how it's tested because a
lot of people don't realize that it does
stuff
but
yeah my talk part is not really that
long
yeah no problem
yeah and so this is actually an ldr
which is a light dependent resistor so
it can detect what the current light
state is
and that's the analog sensor plug it
into your Arduino
and then
when it's done this is going to be the
test program where it works as a night
light and you can change it into all
these different colors because it's a
RGB LED
so yeah you can stop it if you want it
just goes through a bunch of different
colors at this point thanks
thanks a lot
[Applause]
next up is child growth monitor
[Music]
hi my name is Marcus and I want to
introduce you to a global problem which
is UNICEF study from 2017 says there are
three million children dying of because
of hunger every year so malnutrition
prevents the development of brain and
body of over 200 million children in
affects generations to come but Hagar is
not simply a lack of food it's usually a
more complex problem and at the root of
it is a lack of information
so is this child malnourished that's not
that easy to answer the question
parents and governmental Frontline
workers often fail to detect even death
threatening severe malnutrition in
children way too often children die
because they are brought to the hospital
when it's already too late
in fragile countries like South Sudan
and Madagascar governments and ngos
often don't know the magnitude of Crisis
and where exactly help is needed so in
chronic situations like in India with
over 40 percent of malnourished children
regular nutrition service of millions of
children are needed
um
there is a standard method of measuring
but it's expensive and even worse it's
very time consuming the people who do
the measurement have to be experts that
have to undergo regular training and
accidents of the capabilities to measure
children precisely and accurately so how
do we detect malnutrition today the
standard system has three to four
parameters it's the age of the child the
weight the height and there's also the
middle upper arm circumference a rapid
and cheap indicator but prone to errors
and not enough in itself of the four the
biggest challenge to an accurate
measurement is the height of children
children are moving and especially in
crisis is very stressful for both the
children and the parents if two people
need to hold down the child on them to
measure it against the wooden board it
is hard to read the data and to process
it correctly in the field
so one centimeter can be the Tipping
Point
but what if you could do a standardized
measurement just with your smartphone
no additional cost no experts needed
accurate and precise feedback in no time
that is what we are doing
we are building a mobile solution that
is quick and easy to use with high
accuracy and we're doing it non-profit
publishing all source code under GPL V3
this picture is a real measurement of my
son done by an early prototype
the
Google Project Tango smartphones we're
using do a projection of infrared dot
pattern for a 3D Point kill three times
per second it's the same technology that
is used in Microsoft Connect and Apple's
face ID Hardware the Tango API was a
foundation of Google's Arco so if you
are familiar with any of that please
come talk to me afterwards we currently
use a convolutional neural network to
detect humans and their body parts in
regular RGB video and automate the
measuring process and we could possibly
build predictors for the weight of the
child and unhealthy or even
life-threatening conditions like wasting
where children lose fat stunting where
children can't develop Healthy Mind Body
and overweight which is a rising problem
everywhere in the world
we are starting the first beta tests in
India in March and we'll do a pilot on
three locations in India from April to
June in these areas we expect 40 percent
malnourished children and two percent
with severe acute malnutrition
by simultaneously collecting data from
the standardized nutrition service in
the field we want to feed an online
machine Learning System to get better
results over time
so
we have a budget for the pilot 2018 we
have a partner organization that are
experts in the nutrition service we are
working on a scientific board we have a
Google Firebase backend we have a first
generation of convolutional neural
network a prototype of the app using
tensorflow and Project Tango and we will
publish the software on GitHub today on
the GPL V3
so we need you we need uh if you want to
contribute please contact me via email
or attend the Meetup today at 2PM at the
fancy term at of sea base and we need
more people building the app uh the back
end and the Machine learning part
like data scientists
experts in augmented reality Solutions
if you have interested interest in that
area if you have knowledge if you have
just have time for a talk or want to
contribute minutes hours days of your
time to this I think very important
course then please contact us and I
brought we brought six Project Tango
smartphones just like any of the three
teams in India will use
we also want to host discussions about
of course the technical implementation
but also ethics and privacy issues so
thank you for attention and contact me
true thanks
[Applause]
so next up is going to be Libre silicon
there it is
let's go
okay okay
um hello my name is David lancentoffer
I'm the CEO and founder of the startup
landscape Technologies we have small
extension startup
and we started to
cooperate with other companies in order
to
break the monopole of this big
semiconductor manufacturers
so what we are doing
we want to make free and open source
semiconductors the means
you can build this stuff in your
basement if you like
because the specification and of the
process and the technology
you can just take any
design from the internet and build it in
your basement
also the GPL turned out to be not really
sufficient for covering
semiconductor processes and Technology
so we have worked out with some friends
of mine who are lawyers the Libra
silicon public license
which is basically in essence the GPL
part specifically also covers the cases
of how do we manage design to physical
products
um yes and we've also want to introduce
a smart contract version of the RM
scheme in order that everyone can
actually earn money by developing free
and open source software
so why are we doing this
um
mpws for the people who are not aware of
what that means it's multi-project wafer
and this multi-project Wafers shuttle
services costs around twenty thousand US
dollars or more and take minimum two
months
so if you want to design a microchip
you're on it for years and pay a hundred
thousands of US dollars
and you're not free to build your own
chips at home even so you've designed it
because you don't have the design files
and sometimes the manufacturers want
ndas from you M4 the mtas themselves so
it's totally insane and paranoids to
Market
foreign
so you see this closed Market has
limited the development of
semiconductors so the the market is
continuously falling because it's
expensive and only big companies can
afford developing semiconductors
so we work together with the projects a
lot of Open Source projects who
developed a different
parts of this tool chain we developed or
are developing and please join there
that's my company down there this big
logo
Electronics
um
yeah and as I mentioned we want to
reward IP developers using
a Democrats the democratized
decentralized solution
on any
middleman system like ethereum or
whatever it's a way of life
so
we're gonna rent to make the hardware
part happening we rent out the clean
room and equipment from your Hong Kong
University of Science and Technology
that's pictures
from when I was there recently to
negotiate
renting the room
and
we can build
basically the whole CMOS process with
flash and RAM is everything there and we
also have we have been working on an Eda
and fully integrated integrated
development environment to develop chips
flow down there in the
reference
so in the back end we use gray wolf Q
router Eco was very lock all the open
source tools all here also linked in my
presentation slides
that screenshots of the tool the tool
chain we developed so on the very right
you see a pad frame with pre-routing and
on the left you see a tax editor and in
the middle signal viewer sort of
simulated circuit
so we have some issues and we need your
help
so please
come to me afterwards if you know some
at C plus plus qt or C and or very lock
and please help
here please contact me
thanks
thank you
[Applause]
so
next up is
known beacons
where is it
known Beacon's Wi-Fi automatic
Association attack
okay hello guys uh I want to start this
talk by asking you a few questions
how many of you have stayed in one of
the hotels mentioned on this slide
please radio hands
okay I can see most of you have
uh
how many of you have ever set up a
Chromecast device this is a Google
device that allows you to stream what
you have in your mobile device on your
television
I can see a few hands again
um how many of you have ever visited the
hotspot that belongs to a phone network
if you don't know what a phone network
is it's an
kind of situation where you can share
some of your bandwidth and in exchange
you can join Wi-Fi for freeze
okay I can see some
and finally how many of you have
connected to the insecure Wi-Fi network
here in the Congress okay I can see most
of you have
um so if you raise your hand and I think
most of you did
then you may be vulnerable to an attack
that we call known Beacon attack
what we do there is that we spawn a
rogue access point
um that actually broadcasts dozens of
Bitcoin frames what is a big on frame a
big on frame is the message that the
access point is going to sell to
everyone
in order to announce its presents
so for example if you open up your
network manager from your mobile phone
and you see 10 networks around then
there are 10 different Bitcoin frames
around so what we're doing is spoofing
faking these messages
and we try to simulate an environment
where like
dozens of networks around
these networks are of popular
open
public networks so for example
all the hotels that we mentioned earlier
font type networks common essids essid
is the actual name of the network like
public airport test
we can Brute Force so if you have set up
a Chromecast you probably know that in
order to set it up you need to connect
to an open network
that has as an esid Chromecast and then
for integers that we can Brute Force
and many others this dictionary is
actually getting bigger and bigger
thanks to the contributions of the Wi-Fi
feature community
and the effectiveness of our attack is
actually based on that what is going to
happen so as soon as we broadcast this
Beacon frames
if you have the default settings
that means that you have the auto
connect flag enabled
the auto connect flag is a special flag
that allows you to connect to the Wi-Fi
network you know you leave the area you
come back and you see your device that
has connected to the same Wi-Fi network
so we exploit this flag
and even if you have connected once in
your life
with that device on that Network then
you will automatically connect to our
Rogue access point and then we can mount
further attacks we can do data sniffy we
can present fishing phases and so forth
and so on
uh someone may ask isn't this the karma
attack
the karma attack is a very famous attack
that explodes the active scanning for
networks that the stations have
associated in the past but this is not
the karma attack most Network managers
nowadays have parts that are protected
from Karma because they don't do the
active scanning they do the passive
scanning they won't send probe request
frames for networks that they have
associated with in the past this attack
that I'm describing right now the known
beacons explodes only the auto connect
flag that means that even if your
network manager is not sending probe
request frames
like that for previously connected
networks is still vulnerable and all
Network monitors currently are
vulnerable to this attack except from
Windows of course again the
effectiveness of this attack has to do
with uh how a huge dictionary I'm going
I'm going to use and if the victim has
connected to one of the networks
that I have in my dictionary
so this new feature will be included in
the new version of Wi-Fi feature version
1.4 which is going to be released in the
upcoming days
uh we have passed host APD for doing
this
and there are many new features and I
want to thank everyone who helped with
this new release and specifically the
Wi-Fi Visa core developers Brian Smith
and Anna kintang and everyone else of
course you helped
that was all thank you very much
thank you
[Applause]
next up color-based network analysis
hello everyone good morning
my name is Florian and I want to
talk to you about colors and networks
can I start
is there a problem can I start yeah yeah
okay it isn't moving okay thank you
um why I'm doing this nowadays networks
are about protocols and protocol calls
are defined either they are defined
openly and we can read them in rfcs or
they are closed cells and property and
we have to some kind of reverse
engineering and trying to figure out how
can we get into it and how can we use it
and one thing that came into my mind is
MIT found out that if I if a human body
is seen an object it's quite faster to
recognize an object in a picture than
reading a text and finding this object
in the text so I think it's more
efficient to see a network in a
different way than we used to at the
moment at the moment we often use
Wireshark or TCP dump stuff like this
and parse all the network information
reading stuff and finding the right
point or the right bit
what I'm trying to introduce is we need
we take the the bits and bytes of an IP
packet and form pixels
so we have colors and in the front you
can see I cut the IP packet or take the
IP packet put free byte together into
one pixel and this for the full amount
of the IP frame so up to 1500 byte and
this so you can create structures and
patterns which are really great I think
and here you can see the difference what
will happen if you vary the number of
bytes from an IP packet you put into a
pixel at first on the top level I put 24
bit of an IP packet into one pixel
that's the maximum because we have the
RGB which uh takes up to eight bytes
and in the second one I have uh halfen
the amount of bytes I put into one pixel
and in the last pixel in the last button
picture I used just one byte so just
black and white
I see the point that if we take the full
color range of RGB as a human we don't
see the difference between some colors
but if machines if machines take a look
into it they see the difference and they
say maybe they can see a difference
so I here I can show you a simple
example how it will look like I think
most of you used some time before VoIP
and there are different speech codecs
and you can see without a further
knowledge about pcma and all this
feature codecs
how they can be efficient and how they
can be used and in the lower one you can
see
the pcma is not using the bandwidth as
it should be there are a lot of space
that is not used
so there's a tool out there and this is
how it looks like if you run it on the
Wi-Fi at the moment
if you take a look at it at the first
moment I see a lot of scared faces but
don't be scared it's just regular
patterns and structures and if you take
a look into specific ones you see
structures and counters and everything
is quite smooth and simple and you can
see quite easily what is happening and
what is what is happening not happening
I see totally the point that you don't
have the information
if a color changes what is actually
happening but you can identify it more
easily and more efficient
for example I like Wireshark though
Bioshock is really great for this
example I extracted an icmp stream and
two packets are modified and with
fireshock I'm it's very difficult to
find the differences in the packets and
on the right hand side you see the same
information just in colors and I think
everyone can see the or everyone can
spot where the colors and changes and
where the difference are made
for the Wireshark point of view
everything looks the same but if you
take everything into colors you can spot
the point where something is happening
and take a look a close look into it
so if you want uh
try it out give it a try take a look at
the code it's online have fun and make
more colors in the network thank you
thank you
I forgot to mention we'll have a 15
minute break at 12 30 so from 12 30 to
12 45. next up is hekaigi
good morning my name is ayubo I
apologies for having this talk in German
now as it addresses purely and solely
German legal circumstances and issues
the talk is about cooperatives
um
is
in foreign
foreign
house
foreign
betraying
or naturally organizations
foreign
thank you
[Applause]
so next up is a radio badge
talk with their own Hardware
and put
I told him it goes out of his five
minutes
[Music]
okay
so this is going to be a demo
which means we'll try to attach this
computer do
the output
let's see
looks good
uh video people could you switch to the
VGA Podium feed
did he bring a VGA Hardware
he's pointing at you I don't know what
he means
can somebody whistle the Jeopardy Melody
so
this is what happens when you bring your
own Hardware I can also try the digital
output yeah use the digital output
always digital is always better
foreign
I'm outputting something
so you are apparently outputting
something
I'm sorry you can just start talking
maybe all right so
you might remember the radio badge from
last camp and um we are still developing
firmware for it and the hacker F crew
has made a new feature which is high
speed frequency sweeping available for
the hacker app and I've spent some time
during this summer trying to Port the
firmware and today we finally got it
merged into a special branch of the hack
of the radio firmware and it oh yeah all
right there you go so here we go this is
the radio and at 3650 30C preview 30C
33c free on the way back I decided hey
let's make the radio cyber again for you
guys
and we had a look okay hacker has a new
firmware and this is a screenshot of it
you can sweep frequencies pretty fast
it's actually implemented inside the
firmware of the hackeraf to allow fast
changing of the tuned frequency and then
display a power Spectrum on the PC
so we've added this to the firmware as a
special program made called Q Spectrum
analyzer it knows the hacker ref and it
therefore also knows the radio and if
you add
the uh the right firmware to your radio
you can use that it's in the Opera merge
Branch at the moment because that's one
of the features that the hackeraf is
also adding
it requires a cpld update of your radio
check the hacker off documentation how
to do that and ideally you do a clean
checkout of the firmware first to build
it and now we can
have a look if this works
so I've already programmed it and if you
launch through Spectrum analyzer you've
got frequency selection start and stop
and if you say start
okay this is now coming live from the
radio over here this is the Wi-Fi
frequency band you can see a 2.4
gigahertz it starts going and then 2.48
gigahertz there's a sudden drop and
that's where Wi-Fi ends the upper 20
megahertz over here are not used so this
is a 100 megahertz span and it's pretty
fast
we can also have a look at maybe some
frequencies which are related to GSM
from 800 megahertz to
a thousand megahertz maybe so it's a 200
megahertz span
it's a little bit slower here in the
Wi-Fi frequency region we have a much
faster scanning rate than in the other
frequency regions but you can see over
here there's obviously some GSM activity
going on this Pawn probably too
and if you reduce the frequency span
let's say from around 800 to 900 you get
a little bit more speed
so we scanning around one gigahertz per
second the hackeraf can do I think
around six gigahertz per second still
working on making this faster but it's
pretty good already and it gives you a
nice overview over the Spectrum and you
can do arbitrary large ranges here so
you can go let's say from 100 megahertz
to
2700 megahertz 600
and it gets slower so this will take
around two to three seconds now to
complete but you can get an overview
like with a real Spectrum analyzer of
what's going on around here
all right thank you very much and the
hacker app all guys are also doing nice
USB snooping attacks using their new
board and the radio actually has two USB
ports don't forget that if anyone wants
support that we would be very happy
dude
[Applause]
there's going to be another talk with
their own Hardware so
we see how the setup works there
it's about hacking a piano
[Music]
all right there we go
hi oh hi yeah let's go okay sorry
yo my name is gone if I and this is my
piano well not exactly this is the anti
piano but this is the electronic bar
uh I felt like a few months ago well
this is piano it's nice you have a USB
port and you can do pretty much whatever
you like with an USB port so I decided
why not try to hack it and take control
of one computer with it so
I'm just going to dinner with you
I'm not going to touch anything just
change to another screen
and just plug it in
it's actually supposed to
do audio I know about vlto doesn't seem
to work too bad
you are supposed to actually play with
Flintstones anyways
and well
basically the
a while ago you have like a month ago
you had 13 USB kind of exploits that got
out in October for the Linux Canal most
of those are denial of services uh
basically
well you have use after phrase you have
never recognition I didn't have the time
to look at them but what I can tell is
that you could pretty much exploit one
of them with piano and get to can I
exploit you on the piano can I can
explode some likely to me and
finally I'm in a video about the subject
on oh actually hug this piano uh the uh
like the update system basically Compass
just two strings and two check if your
update is correct so you can pretty much
have your own update for USB doesn't
even need the day Target and it makes no
sense it's actually fairly easy but if
you want to see how I actually did that
and how it works inside out uh an
introduction to Hardware again well you
can check this video
a head of an out uh
it it actually makes no sense this piano
actually makes no sense so
like you have access to the data to be
playing framework for daytime so don't
try to apply it to any subject I try to
give a broad overview but
please just research your subject if you
want to know how do I can
thanks and stay away if you're here have
a nice day and see you later
thank you
so this is what we have until
okay welcome back to the lightning talk
session uh the second half starting with
living on a dollar a day
I make a silent talk
I have speak a lot of uh yeah a lot of
words and I've shown people a lot of
things
um
I will give you one hint keep in mind
it's paid by our taxes
and we have also yeah we are also a part
of the problem
assistant talk
[Music]
as you see are the pictures we have we
pay this [ __ ] up from our taxes um
we are heard uh in the world we are
hackers we can do something please help
to stop to waste Africa
many many thanks
thank you
so next up
one of the usual usual suspects of
lightning torque sessions
tdrm
good morning I'd like to talk about tdrm
the T hongsh dual radiation monitoring
system I gave a similar talk last year
and I will give you a brief recap
T hongs and dual are two nuclear power
plants closely to where I live in aachen
and I've had several outages and have
Falls Fishers and this is of great
concern to us because in case of
radioactive fallout not only aachen but
entire North or invest failure is in
danger we decided to play a part in
making our region safer by providing
sensors these are distributed in a
strategic locations around the power
plants and we get measurements of
radiation
so what's new first of all it's not just
us there are several other organizations
that play a part in protesting against
these power plants for example here you
can see a human chain from 50 000 people
from three countries
or the projection of the message stopped
tihongsh and dual onto the nuclear power
plants tower
also the usual things posters protests
what have you
so what did we do first of all we
decided to improve our website to reach
out to more people to make the data
easier to interpret easier to read
we had a project project with students
from The Faculty of media of the
University of applied sciences in
Dusseldorf that created a web app that
not only shows you information and
details but also measurements of the
radiation that you can interpret at
first glance
how did we get these measurements at
first we used Pi GI boards so Gigan
Miller tubes and Raspberry Pi
these had some problems due to the high
voltage Supply
so we decided to switch to
semiconductors which are unfortunately
more expensive and less accurate we
fixed the problems we are back to Pi GI
now we get measurements and
create a sliding window average which is
sent encrypted to our server
earlier this year some Physics students
approached us they're building a highly
sensitive gamma sensor this sensor can
distinguish different levels of energy
and those allows us to recognize
different isotopes it's a work in
progress there are prototypes and we're
looking forward to use these new sensors
so what happens with the data
first of all we provide raw data you can
see measurements for every station for
every cluster of stations for everybody
who wants to analyze lay analyze the
data in more detail
and as already shown we have easy to
interpret renderings of the current
readings for people who just want to
know whether they should run away
and we have some data that's also easy
to interpret but more detailed for
example for catastrophe management this
is important to us as going the official
way with all the bureaucracy involved
with communicating with Belgium
authorities and so on takes hours which
is too long
so we provide data in minutes we are
still working on how to get all these
information together and how to display
them it's a work in progress but we're
confident that we'll have a good website
later
so in summary we started a tech project
the whole thing gained a lot of momentum
not only we but also other organization
reached more people drew more attention
to the problems we provided a simple
method to get data and this enables us
and others to raise awareness and start
a discussion about these problems
so what's in store for the next years
we dream big we want to also correlate
our information with wind and weather
data
we want to reach more non-tech people
the normal people for example with
social media and other channels
we would like to provide a fail-proof
network
which is more difficult than it sounds
because in the case of nuclear disaster
we have to ensure reliability
and of course we would always like to
improve the sensors and the distribution
of sensors more people better
collaboration
with more of these things we aren't the
experts so if you know anything about
any of these things if you're
enthusiastic about making the world a
better place to what come to us talk to
us we are at the fifth assembly you can
contact us via email the project has a
mailing list I am thus title beer on
Twitter you can reach me there and also
thank you for your attention
thank you
next up the story of eduron
how Eddie raim got taken down for a day
good morning everybody well I'm a
student at ULM University and also a
network administrator and I want to tell
you a story how everyone got taken down
for a day and I assure you it's quite
peculiar
so first the scenario
imagine you go into your office on a
Monday morning and you just start
calling in and claim adirom isn't
working well first you think well it's
got to be the user's fault except it
wasn't at room somehow had stopped
working over the weekend and I want to
invite you on the journey and how we
fight uh fought the issue and how we
fixed it
well the first thing you do is you try
to associate your own client with that
room and see if it's working and what's
not working if anything is going wrong
and what we found was that we were not
getting an IP address so of course it's
got to be the DHCP server ain't it well
except
it's a little bit strange because
actually we monitor our DHCP server
quite closely and we didn't notice
anything strange happening so
it was not the DHCP server we locked in
on the box and we didn't see anything
wrong with it so we started sniffing the
network and hoped that maybe we find the
issue there and I'm sure you all have
seen uh such a Wireshark Trace but
before we analyzed this I want to give
you a quick reminder how DHCP works if a
client joins a network it basically
shouts into the network where I
broadcast hey is anybody there can
anybody give me an IP address and some
information on the network and whatnot
to which a server replies with an offer
so basically it says hey you can have
this IP address take these settings and
whatnot and this is followed by the
requests where the client request this
specific IP address and the whole thing
is concluded by and acknowledged so what
do we see here well at the marker we see
a DHCP discover we see twice strangely
but
there's the offer missing so something
is going on in the network strangely
enough when we did the same sniffing at
the DHCP server side we saw that the
bhcp server received all discovers
sent out all the offers but the offers
never reach the client so at this point
you start to sweat as a network
administrator because obviously what
what is going on what is going on you
don't know so
what we did was
um actually well this is another slide
where I can where I can show you again
uh the Opera was missing it was not
received by the client
um we had to trace the way of a packet
and this is uh very short we did a lot
of things to actually find out where the
packets were going if you are interested
in how we did it and how we correlated
all the forwarding databases entries and
so on you can visit me at the uh at the
open knowledge Foundation assembly
when we traced the packet well first a
quick word on our Network we have a
highly redone instruction in our
University with about 1 400 switches
everything is redundant and connected
into Loops so obviously we have to use
spanning tree protocol to ensure that
there are no Loops in the network and
only one path is active and as you can
see here there are multiple distribution
switches and then at some point there
are access switches where the clients
are connected so what happened
was that when the DHCP server that you
see uh over here sent its offer it
should go the right way to the cell
phone down here but for some reason it
was not going that way and it received
it was received by a totally different
port where I drew this little cloud
now the first thing you do is go to the
office where this port is located and
have a look what's on this port
and this thing was on this part so this
looks quite interesting
um this thing here represents the back
end I rebuild it in our assembly so it's
not exactly what we found but this thing
here with is the back end we have a
NETGEAR switch and there we have a
disassembled Cisco access point that we
wanted to fix because we don't have
support contracts for them anymore
what happened
is that we didn't know what to do next
but then one of our colleagues had a
closer look at the whole thing and what
you notice is that this success point is
not powered well there's no power cord
connected this is not a power of
ethernet switch so actually it should be
fine
except it wasn't because when you take a
closer look at the NETGEAR switch you
notice the port was up so how the hell
can that happen well it's quite easy in
the network switch obviously or
apparently has a mass shielding problem
so over the shielding of the ethernet
cable and the voltage supplied by the
data lines the access point got powered
up
but it got not powered up entirely so
what happened was that the networks with
the network chip on the access point got
pulled slightly up which costs all of
its inputs go to a high impedance state
which caused it to reflect on incoming
Network packets so this little switch
here negotiated the 100 Ambit link with
itself
so I talked about spending three first
um usually if you have a packet
reflection your network going on
spending three notices the whole thing
and blocks a connection except on this
port we used it for testing purposes and
disabled the whole thing a few months
ago so you see the whole thing was quite
peculiar what happens well
client sends a
developer to the to the point
everything's working fine
time the Discover reached the access
point the access point reflected the
whole thing while the DHCP server wasn't
processing the packet and this cost
because of the reflection it was the
same source Mac address that all
forwarding database entries in all
switches in our University flips to this
one peculiar board and all answers were
going to this port and this is how air
room got taken down for a day by an
access point that had no power thank you
thank you
next up BT mining
or data mining in the parliament
okay hi everyone I'm going to be briefly
talking about a data set in search of a
problem that it wants to solve
so um here in Germany we in theory have
some open data stuff so for example in
the last um Quality between SPD and CDU
they said yeah we want to make our state
very transparent and we want to make all
our stuff available and so on
um which is funny on many levels and
they they never did it in the end so
um
what does exist is the Parliamentary
documentation system and that is a
system hosted by the bundestag that
contains all the
um all the agenda items all the laws
that were drafted and all the protocols
from the from the plenary sessions it
basically contains everything
but since it's run by a state
institution it basically has no API it
has no capability for bulk downloads it
is PDF documents so it's not very
machine readable and it has no nice way
to get access to metadata so there is
some external system that has metadata
but it uses different identifiers and in
the end it's less work to just basically
scrape the system as is
um
so there are some upsides to the system
the PDFs actually do have a text track
going back to 1946 so to the first
session of the German Parliament they
have a text track with a very very good
OCR so it's it's really nice I haven't
found any errors so far
um the URLs where these PDFs are saved
are highly predictable they have a
decent HTML website that can be scraped
fairly easily and they have a very
friendly Tech Team so I basically call
them up and I was like do you have some
capability for about downloads and they
were like nah we don't have that but
feel free to scrape or just do us at
night so that was very friendly
um
so the result is roughly 500 lines of
code of python that are released on the
URL shown here I downloaded about 19 000
client which is for the people not from
Germany where a political party can ask
the
um the government a question and the
government has to answer within a
certain time frame then there are around
10 000 draft laws four thousand plenary
protocol
and in total about 130 000 documents 76
gigabytes spdf and I think I deleted the
txt version by now but yeah
um I also for good measure just put the
backup of everything on archive.org just
in case our democracy ever goes missing
and then we'll have a backup
um so what's next I have no idea what
I'm doing so I have no idea about
machine learning I have no idea about
text mining
um I think there could be some really
cool things you could do with this data
set but I don't have the skill set so
that's why I'm here
um if you have a cool idea what you want
to do with this then you can grab the
data set using one of these methods you
can download it from from the internet
archive using the Ia python client that
they provide
it takes quite a while it's actually
faster to just scrape it again from the
back end because the internet archive is
so slow but do it at night
you can grab it from my server of https
as star gz files if everyone does that
at once my server will go down
so maybe do some rate limiting and you
can obviously collect it yourself
there's the source code and yeah only
branded at night
and I think that's already it so if
there are any very quick questions I
don't know if we can do that
um I can't do it because I don't have
the space on my laptop for this right
now but if someone wants to do it and
and send me the information
um I can tweet it out on at Malik's
Marvel on Twitter so
m-a-l-e-x-m-a-v-e I forgot to put it on
the slides apparently okay great uh and
I'll put the link on the on the URL
there the mobile community
all right thank you very much
next up is imperfect VR
so hi I'm creative coding and this talks
about a project called imperfect VR
VR is a relatively still relatively new
for most people and they have questions
like this
or this one
I live in brexit Britain so this is an
interesting question
or even this question
and this is also like you see it's a
British tabloid so you see how they how
they depict the evil scientists or evil
and um but what people are looking for
in VR is actually this so this is VR
face and
um most people would like to buy uh VR
face you pay someone
some money and they they give you this
and um
okay there's something wrong with the
slides
um so
um imperfect VR is about a different
approach to VR it's about
um the idea that everyone can make can
create a VR and everyone means people
who who don't have coding experience I
started imperfect VR as a workshop at
electromagnetic field last year and I've
given 10 workshops so far and most of my
attendants have never coded before and
what we are doing in like about two
hours is basically do a Hello VR world
and it's it's quite underwhelming it's
not it's not something really amazing
but this takes like two hours to code
um and and to set up and
basically I show you the the whole
Workshop basically this is this is the
code that we are writing so all the
things that you need is a you need a
smartphone own you need a cardboard that
you can that you can laser cut yourself
or build yourself and you need a
framework called A-frame which is open
source made by people from Mozilla and
then you can create a VR
and you get a VR face but this time you
have made it yourself
and oh that's that's the wrong slide
sorry
um so coming back to that idea that we
we uh we think about like where do we
get our uh where do we get our our media
from where how do we get access to Media
um
this is the people who who sell you VR
and
um there's
um
I don't have like personal uh issues
with Mark Zuckerberg to be honest but um
uh the question is
um
what is uh what is the reason behind it
what is the reason behind building these
things
um and as these are the wrong slides I
have to go very fast so this is
um this gets a little bit uncanny and um
imperfect VR is a different approach
it's um in effect VR basically looks
like this and it's made by us it's made
by you and it comes from a culture
um of of VR that is about a medium it's
not it's not just the business
and this culture has been around for a
long time this is from from the 90s
and it's coming back again this is this
uh Symposium by arts and code who which
ran last year
um there are artists
um like Jeremy Bailey
and um Tim Sega
and there's glitch art there's a scene
who uses click chart in VR
this is hyphen lab not a strong voice in
in this field
and this is Jane gauntlet
and this is be another lab
and this is a Torsten and a sagalisa
Fogel was disconnected to Austin spent
48 hours in VR
and this is the Dream Machine by Brian
giessen it produces Flickr so you get
your own virtual reality
and haptic feel by Crystal
a marshmallow laser Feast that
constitute top Phobos and this is a
weird sense hacking experiment
so to wrap it up it's our choice
the creators and Inhibitors of virtual
walls you decide if you want to buy your
stuff from large corporations
or if you want to do it yourself and you
choose I am to that
this is imperfect VR and I'm creative
coding thank you
thank you
next up is uh
Viper on rexus
ah he's coming
all right let's go
hi I'm Harry and I will talk about the
bypar experiment flying on water exhaust
rocket
what is the rexus program rectus means
rocket experiments for University
students and it is a program by DLR and
SNSB
the German and the Swedish Space
Administration
and it provides the possibility for
students to build a space project with a
full project title
about one and five year from the first
proposal of our reviews and
documentation and so on through the
rocket launch
the rocket itself it has a mass of 450
kilogram and a pogi of 90 kilometers
so it provides around two or three
minutes of time for experiments in
microgravity
and it has just a pellet of 55 kilograms
so yeah there's space for around five
small experiments
um yeah it will start from the European
space and sounding rocket range S range
it is in kiruna Northern Sweden our
rocket will start in March 2018.
our concrete experimental wiper the
project as it means vaporizing us
penetration experiment on a rocket and
yeah we penetrate into eyes and a low
pressure and low gravity environment and
want to collect some data about the ice
mating probe about this ice mating
process
there are a few interesting things
because
below six millibar of pressure there is
no liquid phase so the eyes will
sublimate or vaporize instantly if you
melt into it
yeah and we have some research groups
doing numerical simulations on this
process and we want to collect the data
to verify those simulations
um these are common conditions in space
applications and we use this to simulate
and cylinders like environment but what
is insular dose let's have a look
and see that is it is a Saturn moon it
has a rocky core with a global ocean
around this Rocky core but over the
global ocean there's a big ice crust and
yeah liquid water can be very
interesting for the search for live
and you have to go through this very big
ice crust if you want to get to the
liquid water
so there's a project the encelados
Explorer initiative
mainly by the DLR
and they try to build a Lander for a
possible mission 2 and sailor those and
yeah we do some research for them
a quick overview of our CID I cannot go
in detail because of the time the hard
part is this gray unit in the middle it
contains three small ice cylinders
over it you can see in yellow and red
the heat probes for melting into the
eyes they are pressed on the Eyes by
Springs
on the blue and as a the blue unit with
the uh eye cylinders and the green
cupola above it a completely closed unit
so no uh wiper or possible liquid water
can escape into the rocket model
um yeah it only can escape through the
winding holes to the outside of the
rocket
reasons for participating in a Rex's
project you learn a lot of stuff your
University can teach you practical stuff
but also things like interdisciplinary
work and working in bigger teams
you'll contribute to relevant research
public published papers and so on and
you meet people from all over Europe
you can travel around and last but not
least you are two weeks at SRI Space
Center so if you have the chance to
participate in such a project two-word
thank you
if you want to have further information
thanks
next up is unlock your inner clock
from solar restrictions
you please don't pull out anything there
no no no no I just broke a lamp right
I'm sorry it won't be an actual
lightning talk so but it will be about
light so after 10 years of watching CCC
videos I thought it's time to throw
something back at you what I want to
tell you about is new in fact it's
really old I thought the first time a
scientist talking about it on TV like 15
years ago and studies itself took place
in like the 80s so
yeah that's not you I've been preaching
about it to everybody I see and it's
getting a little bit more traction
lately but still people do not use this
kind of energy source to the full
potential so here's the thing really
quick
have you ever wondered why people sleep
at night and are active at the day some
of you might think well isn't it the
other way around
but you do realize
most people work that way right also
people are more active in the summer and
have a better mood in the summer and
have a less mood in the winter they
sleep more eat more some say they even
get depressed so why is it there must be
a reason so some say it may be the
warmth but you can turn up the heat and
feel like summer it may get your blood
flowing a little bit but it's not the
same some say vitamin D but you can't
eat vitamin D and feel like someone
doesn't work so what is it well you've
experienced this a hundred of times and
see it when the spring comes days get
longer everybody's going outside sitting
in front of the coffees everybody's
raising their head in the sky to get a
tiny fraction of sunlight so obviously
it's the light but what is the
difference between sunlight and every
other light you have around you
well you see it here like this is a
light bulb and the natural sunlight and
you see it the the light bulb almost
have a completely lack of blue
frequencies in the Spectrum and that is
how most artificial light is and that is
a really stupid source to have around
you as a daylight light source so
because by the amount of the color blue
that is how your body distinguished
between night and day between summer and
winter I tell it really quick how that
works so you have receptors in your eye
like foreseeing like for the colors blue
red green some for brightness some for
movement to trigger your attention when
something's going on on the side all
these signals they go into is seeing
nerve into the parts of your brain where
imagery is processed right so but you do
have receptors in your eye that only
reset the color blue and the signals
they do not go into your scene they go
not into parts of your brain where
imagery is processed they go right back
to the ancient root part of your brain
to an area called supreciasmatic nucleus
comes from chasma Greek word for sun
suprasmatic nucleus and when the blue
light signals hit that area a whole
shitload of things is going on and the
most important thing is it cuts off the
sleep hormone production the production
of melatonin and that is what you want
to have during the day because if you
don't have it the people think it's
already evening and prepares you for
night time and makes you sleepy also
serotonin dopamine all the chemicals in
your brain that make you happy and
active they increase blood pressure
Rises heart rate increases and that is
what you want to have during your day
and that comes from blue light signals
in your eye
so that's these are the old slides
apparently
um
yeah so this kind of Light which I
brought with me and broke but I have
some more lamps with me what is this
kind of light is this magic does it cost
a thousand dollar well there are
antidepressant therapy lamps for
hundreds of Euros but you don't need to
buy that you can have them really cheap
this one was like 30 Euros on Amazon the
number you want to focus on the
technology of the lamp doesn't matter at
all the number you want to focus on is
6500k it's like a color temperature I
would say 2 000 is really cozy and 6500
means it has the same color temperature
that the sun has in the summer so it
means it has enough blue light signals
to get you activated during the day and
that is what you want to make use of and
that is what I wanted to share with you
thank you so I have some of these lamps
around with me I'm really Mentor please
approach me if you want to pimp your
space with some of these lamps um yeah
I'm happy to share these lamps with you
thank you
next up how to avoid Headhunters
hello everyone
um yeah I want to share some experience
some best practices I have for myself
when dealing with Headhunters
uh the clicker is
my first quick pile at the start who of
you has encountered a contact with the
Headhunter ever like LinkedIn or Xing
they're also called personal for middle
or recruiter okay approximately ten
percent I would say and who of you
actually got his current job by a
Headhunter that would be interesting one
two three four okay interesting
um well first have a look what Head
Hunter actually does well it's pretty
straightforward he wants to earn money
that's nothing bad and basically he
builds a big database out of drop
vacations and
applicants applicants are found well why
are business platforms and similar and
then he goes to the employer and shows
him his applicants which has the best
match and he tries to earn money well
basically through several services
and of course why a signed contract at
the end
um yeah there are different motivations
uh depending on the point of view at the
handhelder of course he wants to earn
money the most money is made by a signed
contract which is approximately 30 of a
one-year salary which can be quite much
how we will see the applicant of course
he wants to have a fast application he
wants to have the job there are some
lies often told by Headhunters I want to
go on to at this point and the employer
of course he wants to have an applicant
most times for jobs where you can not
find that easily applicant because there
were there are very rare
so um
this seems like a triple uh win
situation so everyone gets what she
wants every everybody is happy but only
at the first glance at the first at the
Second Glance you will see there are
some problems and tldr Au as an
applicant decrease your chances to get
the job because of higher fees for the
employer and those can be quite big here
we have a scenario which three
applicants the first one
applies without a head cutter and we got
to with the hand Hunter there's a minor
Gap at the matching basically perhaps
there are some hard skills missing like
he hasn't knowledge in node.js or
whatever but that's not that needed for
the drop but he can basically or all of
them basically can do the job
and um
please get closer to the mic because we
already get feedback okay thanks you can
see your slides down on the monitor also
you don't have to turn around yeah I
want to point out the important things
um yeah and um from point of view of an
employer you
um
you also want to save money there is
basically no need to take this applicant
because he has the same matching but the
employer has to pay this money and why
should he do this it's just earn money
but
well there's an exception through this
which is if the headhunt has an
exclusive mandate or the job is not
officially listed which means this
applicant vanishes and all only those
applicants are left over so the chances
are again equal and it should be okay to
take a headhunter I made a nice action
diagram which I follow when encountering
contact with the handhelter which can be
downloaded
at the following or else plagially safe
explanatory except explaining so I won't
go into at this point yeah thank you for
your attention and have a nice Congress
thank you
so the last talk is going to be pretty
easy privacy
hi my name is swam sorry
and I want to tell you about pretty easy
privacy this is somehow a follow-up on
pretty good privacy so what we're trying
is to roll out Mass encryption
encryption for the masses
so this is more or less a long-term
project so we also wrote an internet
draft in RFC I read out loud the first
sentence building an already available
security formats and message transports
pretty easy privacy describes protocols
to automatize operations like Key
Management key Discovery and private key
handling
um so pep how we call it is a
cross-platform abstractation to easily
use existing crypto tools it's designed
to encrypt All Digital written
Communications
um with the starting point of email it
encrypts automatically whenever and with
whatever most privacy enhancing crypto
standard is available so we're following
the opportunistic approach
um and all end user software shall be
hassle free and zero touch
um it's not yet another crypto tool with
a closed user base it's not any platform
provider it's not implementing any own
cryptool and it's not replacing any
crypto tool per se but we're compatible
with stuff that's there it's also not
just an Email encryption tool even
though that this is the beginning this
is how we start so at the moment it's
just an Email encryption tool yeah we
want to roll out Mass encryption to
optimize the costs of mass surveillance
we want to make the use of crypto pretty
easy so not only for the users but also
for developers they can plug in pep just
into existing apps and users can then
just use it without any hassle by
default this is the architecture so you
have your app at the bottom at the at
the top
then we have adapters in various
languages they're coming on the next
slide and then with this adapter you
plug in the engine and and the engine
knows about the crypto has so the
adapters is kind of bindings for the
engine API so the engine knows about the
transport protocols about the different
crypto
standards that that are there and then
as a developer you only have to care for
the interface between your app and the
adapter and if any crypto breaks or
something then we fix the engine the
engine is code audited and open source
for sure
um yeah this is the list of adapters so
we try to have everything like a gni for
Java C hatch for Windows stuff Json
object C for iOS and stuff yeah python C
plus plus
um and this is what it does at the
moment it handles open pgp and S mine
without any hassle for the user so it
automatically encrypts it encrypts the
subject in line there's no key
management needed there's no key server
any other centralized infrastructure
fingerprints we translate into trust
words we have an Optus opt-in passphrase
and the header is encrypted and
obfuscated and we have a sync protocol
this is the trust words instead of
fingerprints and this is the sync so you
sync your keys contacts and calendar
over various devices
with your own devices we're using iMap
for that so actually you think not over
the cloud which is just other people's
computers but your own computers we're
trying to do everything right so it's
end-to-end it's peer-to-peer there's no
centralized infrastructure any closed
servers and it's free software with code
audits we want to be compatible with
multiple crypto technology Technologies
so at the moment it's pgp as mime and um
a gpg and there is going to be OTR and
umemo and Axolotl and what else is there
same with message transports at the
moment it's SMTP as exchange and that
stuff but we also want to go for xmpp
and even SMS and stuff multiple
platforms multiple languages but content
encryption is not everything I think
this audience know this knows this very
well so in the future when those guys
are ready we also want to pipe
everything through gnunet if you don't
know about kenuna check it out they're
also here in Hall 2 having a assembly
new net is a mesh routing layer designed
to replace the old insecure Internet
Protocol stack you know this is all from
the 70s so we need to have uh yeah
nowadays internet
um so pep does what the user would want
to do so what we do is instead of
writing how-to guides which we all did
we're coming from the crypto Party
Movement and these things we do write
the user expectations into software and
protocols to take away the crypto needs
from the user's perspective so we
actually given up on the user
understanding why to use crypto and how
to use crypto and we're just sneaking it
in so users don't have to think about
the crypto anymore they can just use it
by default
thank you right on time
[Applause]
[Music]