To infinity and beyond Finow Space Station Finowfurt 2007-08-08 2007-08-12 5 1.01 05:00 00:30 11:00 01:00 Shelter Foo campopening Welcome! General Lecture English A welcome to the Camp. Explanation of facilities, organizational hints and and an introduction to the upcoming conference schedule. Tim Pritlove Julia Lüning Florian Holzhauer 12:30 01:00 Shelter Foo arguments_against_surveillance 'Cos "I Don't Like It" Is Not Enough! Society Lecture English One thing often lacking in discussions around privacy is a clear argument apart from the intuitive “I don’t like to be under surveillance”. This absence fatally leads to the wrong public impression that it is only about a personal taste for privacy against hits on child molesters, credit card fraud and terrorism. My talk thus will give some clear and rock-solid arguments, demonstrating privacy as a protection from injustice and from a new and speculative class society, as the foundation of our abilities to judge independently and ethically, as the breeding ground for personal and societal development, as our impression of freedom and as an important pre-emptive value to prohibit technological infrastructures for dictatorships. One thing often found to be lacking in many discussions on the struggle for privacy is a clear argument in favour of it. Even most activists whom everyone would suppose to have clear reasons mostly argue in strongly subjective terms, stating their personal uneasiness or discomfort with some surveillance problem in terms as “I don’t like to be under surveillance”. And sure enough: who does? But in times where terrorists disguise as civilians, where child molesters and credit card frauds use synonyms and all sorts of electronic communication, also disguised as harmless people, and where surveillance is ubiquitous in the sense that it is disseminated entirely invisible and unpresent – why not feel different? On what grounds can we really charge someone who says: “If surveillance doesn’t really disturb me and if it helps to catch terrorists and child molesters and protect my credit card, I think it’s ok”. In fact, even John Perry Barlow (on the last congress) seemed to be in favour of some sort of intern, panoptical self-surveillance if it does protect his credit card from fraud and his email account from spam. So why bother? Are we only protecting our very own (and probably misplaced) feelings? Of course not. By fighting for privacy, we fight for a most basic, most human need: our space. We need our space and we need it for a whole variety of important reasons: psychological, ethical, political, societal and others. And many scholars have in fact explored and argued in depth for these reasons. They only have to be translated and be made accessible. In my talk, I will thus present these scholarly perspectives in an understandable manner and thus will support the privacy activist with two whole fistfuls of most reasonable and valuable arguments in favour of privacy and in strong opposition to any kind of surveillance. By this, I deeply hope to fill that argumentative gap and clarify the activists intuitions. The arguments which I will present in more detail are the following: - Technological surveillance unfoundedly creates individual injustice and a new class society: As one subroutine of full-scale technological surveillance, profiling sorts people by their techno-informational behaviour. This behaviour however is not in any way truly representative for a person. It shows only a surface, but no reasons or backgrounds for any action chosen, but yet the resulting and entirely unfounded profiles are made a basis for many life-determining economical and political decisions, both on the macro-scale of society and its diversity of groups and on the micro-scale of the individual. This is not only in strong opposition to any understanding of reasonable judgement, thus instantiating injustice per definition with every single profile. No judge in no reasonable court would judge a person without any information on reasons or backgrounds whatsoever. It also results in the formation of a whole new class society as people are grouped into certain profile classes. - Privacy is the space for autonomous decisions: As privacy creates a space within which we can act autonomously without expecting judgement from others (as they don’t see us), the private space is the main location for autonomous judgement. Only there it is that we are independent of the influence of the more powerful or the otherwise influential and that we can decide the decision to shape our own lifes and our society. And as a democracy thrives on the ability of the individual to decide autonomously, it needs this ability as a necessary prerequisite. Surveillance however would inevitably let this ability shrivel as it can not be used anymore without having thoughts of someone else’s interests. And what is not being used, shrivels. - Privacy is the foundation for ethical decisions: Another ability doomed to shrivel will be that of ethical decision-making. In an environment which inhibits autonomy mainly in situations which involve value-judgements by constantly controlling conformity with laws and rules, all these value-judgments are made and materialised already and an ability to judge ethically in person is substituted by the mere need to conform. - Privacy is the space for personal development: As privacy is the space for autonomy, it is also the main location for personal development. In our personal own space, where we don’t have to fear judgement or failure, we can experiment, create, design and be the way we want to be. Thus we can explore our own borders. We can test and try ourselves without fear and accordingly find our place in the universe as a person. This would not be the case when we would be under constant surveillance. Borders would be definite and the universe of possibilities would be severely finite and one-dimensional, the limits of personality preset. - Privacy is the space for societal development: As some personal developments also carry a potential for societal impact, privacy can also be seen as the space in which new societal forms are being tried and established. This is a good thing since every society needs those “non-conservative” elements and outgrowths to develop and evolve into ever new forms on grounds of an ever changing environment. Full conservative rigidity can never be good for a society since no society can ever be considered perfect. It needs those little holes in the wall. However, surveillance would inhibit such border-crossing societal forms as they would fear to form themselves. Thus, also, revolutionary (or: non-conservative) thinking as a basic and very important human ability will shrivel, as it too will not be used anymore in a society under surveillance. And frankly, without that ability, we would still live in a caveman, slaveholder, patriarchal, aristocratic society with constant war, random torture and all that. - Privacy underlies the impression of freedom: Freedom is not only a political value. It is also a feeling, a personal impression. One feels free if and only if one has her or his very own space to act and think, to explore, to freely do things, to plan and talk, in short: only if the autonomous space exists. Surveillance now is still largely invisible and ubiquitous, but once it becomes more commonplace and commonplace knowledge, it will certainly inhibit that feeling as well as the impression of “own-ness” emerges only from the enclosure of the private. - A surveillance infrastructure can not pre-emptively be protected from grave misuse: A last grim argument then concerns the sheer technological infrastructure which is presently being built for surveillance. It’s basically technologically able to fully surveil and control any individual at any given time: thoughts, plans, ideas, social nets, locations – you name it. The only thing prohibiting this at present is the societal regulation of the use the technical system. But this societal regulation can change. The next dictator will come and boy, will he have fun with that infrastructure. So can it really be wise to build that infrastructure now, make it solid and impenetrable? All these arguments will now certainly be able to turn the tide. Privacy vs surveillance is not only about “a little privacy which I don’t even feel” against an additionally in its effectiveness very doubtful use for occasional hits on child molesters, credit card fraud and terrorism. As we could see, privacy protects us from injustice in life-determining decision and from the formation of a new and merely speculative class society. It is the foundation of our autonomy and consequentially of our abilities to judge independently and ethically. It is the breeding ground for personal and societal development which should always be protected since those are the basics of our personal and societal abilities to evolve and to adapt to changes. It gives us our impression of freedom and no one likes to be caged, however golden that cage might be. And at last, any technological infrastructure for surveillance can always be misused by a dictator – with very bad consequences. Sandro Gaycken 14:00 01:00 Shelter Foo ich_entziehe_mich Mit Technik gegen Überwachung Hacking Lecture German Der Vortrag befasst sich mit aktuellen Entwicklungen von Überwachungstechnologien und technischen Möglichkeiten, dieser Überwachung zu entgehen. Die Vorratsdatenspeicherung, der Bundestrojaner, die biometrische Vollerfassung, die Schnüffelchips, die Telekommunikations- und Internetüberwachungsmaßnahmen, die Personenkennzahlen, die Mautdaten, die Tracking Dots bei Druckern und Kopierern - die Liste der staatlichen und kommerziellen Möglichkeiten zur Ausforschung der Bürger wird mit jedem Jahr länger. Da verliert auch der geneigte Hacker schon mal den Überblick. Mit diesem Vortrag wollen wir daher versuchen, die einzelnen Maßnahmen zu erläutern und technische Gegenmaßnahmen aufzuzeigen. Raus aus der Matrix! Constanze Kurz starbug 15:30 01:00 Shelter Foo against_stasi_20 Widerstand ist nicht zwecklos, wenn er schlau und entschlossen ist Society German Viele Menschen fragen, was sie tun können, um die Überwachungsgesellschaft zu stoppen. Dieser Vortrag gibt Antwort. Der Kampf gegen den anscheinend unausweichlichen Abstieg in die Überwachungsgesellschaft ist oft frustrierend und stellenweise vergeblich. Wenn wir die Ideen von persönlicher Freiheit und Menschlichkeit am Leben halten wollen, müssen wir unsere begrenzten Vorräte an Zeit, Energie und Motivation gezielt und überlegt einsetzen. Dieser Vortrag legt dar, warum politische Aktivitäten alleine nicht mehr ausreichend sind, oft nur sehr begrenzte Wirkung zeigen und uns nicht retten werden. Während wir natürlich nicht aufhören können zu versuchen, die Öffentlichkeit (oder wenigstens die "Entscheidungsträger") zu beeinflussen, ist es nun an der Zeit, den Großteil unserer Energie in den Aufbau unserer eigenen Verteidigungssysteme zu stecken. Gut geschützte Netzwerke und Infrastrukturen, aber auch die Entwicklung von ideellen und kulturellen Abwehrmechanismen gegen die Kräfte des Bösen sind die Ziele, auf die wir unsere Kraft nun konzentrieren müssen. Wir müssen die kommenden dunklen Jahre überleben, aber wir müssen uns auch darauf vorbereiten, plötzlich auftauchende Chancen auszunutzen, die Dinge wieder zum Besseren zu ändern. Die kommenden massiven Veränderungen in allen Lebensbereichen werden solche Chancen erzeugen, es liegt an uns sie zu nutzen. Im zweiten Teil des Vortrags werden wir kurz eine Auswahl von technischen Projekten vorstellen, von denen wir denken, daß sie das Potential haben, effizient zur Verteidigung unseres Kulturraums beizutragen, die ein sehr gutes Aufwand-Nutzen-Verhältnis haben und die nur ein paar mehr Leute brauchen, die mitcoden oder mittun, um schneller produktiv und nützlich zu werden. Einige der Projektbetreiber werden auf dem Camp sein, so daß jeder, der meint "mal was tun" zu wollen, direkt Ansprechpartner findet. --- Fighting against the seemingly inevitable descent into a full-fledged surveillance society is frustrating and sometimes futile. To keep the ideas of freedom and humanity alive, we need to use our finite time, energy and resources wisely. This talk will argue that political activity alone is no longer sufficient, has shown to be of very limited impact and will not save us. While we can never give up trying to educate and influence the public (or at least the decision makers), it is now high time to put most of our energy into building our own networks, infrastructure and cultural defense systems against the forces of evil. We need to survive the coming dark years but also need to prepare for the big chances to change things back for the better that may arise unexpectedly from future events. In the second part of the talk, we will briefly introduce you to a selection of projects that we think have the potential to help building these defenses, have an exceptional good impact to work ratio and just need some activists and coders to get productive and useful faster. Some of the people running these projects will be at the camp, so you can hook up with them directly to find out how you can help out. Everyone who feels like he or she needs "to do something" is strongly encouraged to attend. Frank Rieger Ron 17:00 01:00 Shelter Foo tod_an_der_etsi_schnittstelle Society Lecture German Kurzer Abriß der Überwachungsstandardisierung in den europäischen Telekomnetzen Die politische Entwicklung von 1993, über die ersten "User Requirements" im ETSI Ende 1996, bis zu den ersten UMTS-Standards um die Jahrtausendwende. Die Arbeitsgruppe 3GPP SA 3 LI und das Technische Komitee SEC LI. Kurze Geschichte samt Arbeitsweise, Protagonisten aus Industrie und Überwachungsbürokratie. Data Retention aka Datenzwangsverhaltung alias Vorratsdatenspeicherung kurz zusammengefasst Griechenland: Vodafone, Ericsson, SAIC, das MI6 und der Tod von Kostas Tsalikidis, Netzwerk-Sicherheitschef von Vodafone Hellas Italien: Telecom Italia, Accenture, MiningMart, ein System Namens RADAR,zwei Dutzend Verhaftete, ein Hacker und der Tod von Adamo Bove, Netzwerksicherheitschef der Telecom Italia /TIM. Holland/USA: Der Auftakt durch Verint und andere Firmen aus dem elektronisch militärischen Komplex in Israel. Anekdotischer Ausklang Erich Möchel Vortragsfolien und Hintergrunddokumente 18:30 01:00 Shelter Foo gps_trackers How they track you when your mobile is switched off Hacking Lecture English This talk gives a detailed overview on the state of the art of GPS tracking system (aka. location bugs), how they work and how to find and defeat them. GPS based tracking of peoples, cars and things is quickly becoming a real threat to personal privacy. Trackers are now cheap and easy to build and deliver high position accuracy and real-time transmission if desired. Low-power electronics and modern battery technology combined result in tracking systems that can live for weeks and months hidden in your car, motorbike or even backpack, transmitting your moves and whereabouts unknown to you to unfriendly people. The talk describes how GPS trackers work, how and where they are usually hidden, how you can find them (by physical search and other means) and what you can do against them. We will also briefly cover GPS chips in mobile phones and tracking by mobile phones in general. Marvin Mauersberger 20:00 01:00 Shelter Foo geocaching_and_args Play Simulations of Future Problems Society Lecture English Geocaching and Alternative Reality Games are the first wave of "global gaming", involving players who use the GPS and internet technologies to create and solve challenges in physical space. This talk will highlight how these global games are helping illustrate the problems of the future and training players how to use their technology, wits and available resources to solve them. Geocaching and Alternative Reality Games are the first steps into true, physical world "global gaming". Players use digital technologies like GPS, geospatial imaging and online communication tools to create and solve challenges in the physical world. While these games attract adventure seekers of all levels from all walks of life, the players acquire the skills necessary to address global challenges beyond the capabilities of traditional institutions. These games are creating a new class of informed, networked global citizens who will shape the solution to tomorrow's problems. This first part of this talk will describe what Geocaching and Alternative Reality Games are. The intersection between the two is not readily apparent. Those participating in Geocaching use GPS devices and clever placement of "caches" in the real world to create a challenging pastime that encourages players to think critically about their world. Those who take part in ARGs mix issues, events and physical spaces in the real world to create situations that encourage players to, as in Geocaching, think critically about their world. The two pastimes are starting to intersect in ways that few non-participants could imagine. While these pastimes seem simple on the surface, players are creating and solving new challenges for each other that require a perfect intersection of digital and physical-world knowledge and skills. Few games in the past have called for skills ranging from scuba diving and rope climbing to cryptanalysis and social engineering. These games present no simple solutions, and require players to think on their feet. The second part of this talk will discuss three major challenges that have required players to acquire and use a mix of physical and mental skills. The final part of this talk will illustrate how players from many different cultures, backgrounds and classes are connecting with each other to not only play the game but advance in the hierarchy of gameplay by pooling knowledge and resources. These interactions among players are helping create relationships and skillsets that are showing us what the problems of tomorrow will be and how "everyday people" will unite to solve them. Nick Farr - The Official Global GPS Cache Hunt Site World Without Oil - A global oil crisis simulation (and ARG) Alternative Reality Gaming Network Wikipedia Article on Alternative Reality Gaming 21:30 01:00 Shelter Foo dungeons_and_hyperlinks Electronic Literature and Digital Narratives from Text Adventures to Hypertext Culture Lecture English While there are interesting experiments in electronic literature, interactive fiction, and hypertext poetry, few are known to the mainstream. We'll have a look at different approaches, from the standpoint of literary criticism, a technical standpoint and from experiences in the literature market. "You are standing in an open field west of a white house, with a boarded front door. There is a small mailbox here." Thus begins Zork, a 1980 computer game and one of the earliest examples of a genre that the New York Times Book Review described in 1983 as "games, which have been called 'participatory novels,' 'interactive fiction' and 'participa-stories'". Ever since, writers have tried out new forms of story-telling only possible on a computer, such as text adventures or the hypertext poetry of the early World-Wide Web. We want to introduce you to digital story-telling and present a few examples from the genre. We will also show you some authoring tools and programming languages for digital literature. Last, not least, and for putting things into a real world perspective, novelist Nika Bertram, author of "Der Kahuna Modus" (Eichborn, 2001), will share her experiences of an experiment where she developed an interactive fiction as a side-story to a conventionally published printed novel and the book market's reaction to that. Digital literature is a fine example of the blurring lines between hackers and poets. We feel that while literary theorists love to ponder on the "endless possibilities of the new medium", few people really read or experience electronic literature. Let's talk about Infocom-style dungeon crawls, chatterbots like SHRDLU and Eliza, and non-linear text in general. Nika Bertram Jens Ohlig 23:00 01:00 Shelter Foo memes_memetics_and_netculture i made you a lecture, but i eated it Culture Lecture English This lecture is about memes in and around netculture. Besides examples of more and less well known memes (hilarity ensues), the lecture will also try to shed light on the serious aspects of memetics. What are memes? What types are there? Chainletters, ...? Which memes are most common in netculture? Catchphrases, Lolcats, Imagemacros, Snowclones, ...? Are there any well known incubators for memes? What research has been conducted on Memetics? What is kitty pidgin? Florian Hufsky 00:30 01:00 Shelter Foo weltraumkommunismus Erst Weltraum oder erst Kommunismus? Culture Lecture German Nach "Chaos und Kritische Theorie" auf dem 23C3 ein weiterer Schaukampf: Oona Leganovic wird als Ijon Tichy dafür werben, erst das Kapitalverhältnis aufzuheben und dann ins All auszuwandern, weil sonst die irdischen Probleme überallhin mitgeführt würden. Daniel Kulla wird als Captain Janeway umgekehrt den Entdecker-Humanismus verteidigen, der schon das Mittelalter zu seinem Ende brachte und von dem erwartet werden kann, daß er dasselbe mit dem verkrusteten planetaren Warenzirkus auch schafft. AUS DEM INTRO: Janeway: Es ist besser, hier draußen zu sein als im dunklen Kellertrakt dieser Raumschiff-Ausgrabungsstätte, wo man uns in angeschaltetem Zustand fand. Wir waren dort isoliert und nur auf uns zurückgeworfen... Und es ist schön, daß es nur noch dezent beleuchtet ist. Nach zwei Wochen im Dunkeln ist es erforderlich, sich langsam umzugewöhnen. Da war die Umgewöhnung vorher abrupter: eben noch auf der Brücke des Raumschiffs Voyager, plötzlich in einem kleinen, finsteren Loch. TICHY: So sie hat gejammert ganze Zeit! "Eben noch unendliche Weiten, jetzt enges Verlies." "Eben noch unbegrenzte Ressourcen, jetzt gar keine." Ich bloß gesagt: "Geht mir doch genauso. Eben noch Weltraumkommunismus auf Sofa in Rakete, unterwegs zu aufregende unbekannte Sterne und sicherem großen Ruhm, dann ich stecke in enges Kabuff mit Anführerin von freies Weltraum, die haben noch nichts von mir, berühmte ruhmvolle Kosmonaut Tichy, gehört." - Dann wir haben erörtert, was ist Kommunismus. JANEWAY: Und zumindest in diesem Punkt herrschte Einigkeit. Ob man es wie Tichy Kommunismus nennt, wie es ja auch vor der Auswanderung ins All auf der Erde genannt wurde, oder allgemeine Emanzipation - das Prinzip ist das gleiche: die Voraussetzung dafür zu schaffen, daß alle am Universum teilhaben können. Und zunächst rauszubekommen, wer überhaupt "alle" sind. Neue Spezies und Mischformen aus Lebewesen, Maschine und Software - davon haben wir jede Menge entdeckt. Bzw. in Ihrem Fall, Herr Tichy, sind Sie wohl meist eher von denen entdeckt worden... TICHY: Frechigkeit! JANEWAY: Zumindest dieser Teil war ein erfrischender Dialog. TICHY: Trotzdem nicht hat aufgehört zu jammern. Und da ich habe keine Besatzung von Raumschiff, das mir kommen zu Hilfe, ich hab gekuckt mit Lötkolben, ob ich kann machen Holo-Emitter mobil damit können gehen raus aus Keller. JANEWAY: "Hab ich gekuckt mit Lötkolben" - an dieser Stelle fiel mir auf, daß ein gewisser unverantwortlicher Umgang mit Technik zur Weltanschauung des Herrn Tichy gehört. Obwohl es vollkommen aussichtslos war, mit seinem primitiven Werkzeug eine solche technische Verbesserung vorzunehmen, redete er auf mich ein, ich möge ihn nicht mit Vorschriften behelligen. TICHY: Und, hat etwa nicht geklappt? Jetzt wir sind nicht mehr in Keller, sondern in schönen großen Hangar mit Beleuchtung. JANEWAY: Weil man unsere Emitter hier draußen installiert hat. Bezeichnenderweise haben Sie, Herr Tichy, sich auch nur an meinem Emitter zu schaffen gemacht. Ich hingegen habe mir gesagt, ich bin mehr als 15000 Lichtjahre gereist, habe mich nicht von Zeitanomalien, Warpkernbrüchen und feindlichen Außerirdischen aufhalten lassen - ich lasse mich nicht von einer Kellerwand aufhalten! - Dann sind wir gefunden worden, weil wir uns mittlerweile so laut gestritten haben. VOM SCHLUSS: TICHY: Sind nicht nur Menschen Trottel. Können nicht nur Menschen aus Erfahrung nichts lernen. Die Bewohner Dychthoniens, die besuchte ich auf meiner 21. Reise, bilden sich ein, alles _zu_ gut verstanden zu haben, und trotz Raumfahrt ertrinken in ihre bekloppte Vernunft. Hilft nur Erkenntnis zur Selbsthilfe. Fremdes Beeinflussung ist außerdem Problem. Leary sagt, du mußt Plan haben, denn wenn du hast keinen Plan, wirst du Teil von Plan von jemand anderem. JANEWAY: Autonomie entsteht aus der Einsicht in bestehende Abhängigkeiten, die sich manchmal ändern lassen und manchmal eben nicht. TICHY: Und kann auch kommen ganz anders. Solange Menschen blöd, nix Raumfahrt, wenn Menschen endlich schlau, dann Erde schön und vielleicht auch nix Raumfahrt, denn ist keine Notwendigkeit mehr. So und so, Menschen müssen machen Kommunismus, denn ohne Kommunismus alle lachen uns aus Müssen Angelegenheiten von Mensch regeln nach Mensch, nicht nach Wert und auch nicht nach technisch optimiertes Mensch. Kommunismus heißt auch: Menschen weniger schreiend blöd. Und das unendliche Universum funktioniert auch ohne Geld. JANEWAY: Meine Damen und Herren, ich kann nicht genug betonen, daß ich Herrn Tichy an dieser Stelle leider nur beipflichten kann. Es geht in der Tat um Vollendung und Ausweitung der Emanzipation. Es geht darum, bessere Menschen zu werden nicht nach göttlichem Gebot. Es geht darum, Konflikte so friedlich wie möglich lösen. Was durch das Mitführen von Photonentorpedos natürlich erleichtert werden kann. Es geht darum, und damit lassen Sie mich schließen, Menschen die Möglichkeit zu geben, sich einem unendlichen Raum angemessen zu entfalten. - Wegtreten! Das ist ein Sternenflottenausdruck für 'Haut ab' Daniel Kulla Oona Leganovic Weltraumkommunismus Weblog Daniel Kulla Weblog Oona Leganovic 23C3 Videomitschnitt 12:30 01:00 Shelter Bar gecko3_open_hardware_fpga including an introduction to programable logic Science Podium English Hardware developers ever envyed the software developers in the way that they can build and try something extremly fast an with no cost, minutes compared to days or weeks. Today the field of programable logic, mostly the FPGA, has reached a point where digital hardware design is as easy as writing software and with the possibility to make many iterations without rebuilding your device. I show you some examples and what is behind programable logic. In the rest of the presentation I present you an new compact board for FPGA based system development, the GECKO3. Starting with the description of programable logic I will go on to the ways how you can programm them, what modern tools can do for you and what you have to think about when you would like to start building your own CPUs, Cryptocrackers or other things that are better fittet in hardware than in software. After I gave you a basic knowledge of the field, I will talk about an new FPGA based application board, called GECKO3. The complete board, schematics, pcb files, source codes,... is opensource, so you can use it as it is or take it as a help to build your own system from scratch. It is an application board, these means that it is small and cheap enought to include it in your product, not like a typical big overloaded development board. These board was developed at the Berne School of Applied Science in Biel Switzerland, where I work currently. The GECKO3 is built around a large FPGA (in the range from 1 Mio. to 4 Mio Gates) and includes the necessary things to achive a fast and riskless start of YOUR project. Around the FPGA there is the powersupply, 32 Mbyte of NOR Flash, 2x64 Mbyte DDR SDRAM, 100 Mbit/s Ethernet and a USB 2.0 Controler. Most important for your own application is that you get over 160 digital I/O pins to connect your application specific hardware. The Board is completly configurable through the USB connection, you do not need a special cable. we wrote software to make it easy to exchange any data between your PC and the FPGA without any knowledge of USB. Christoph Zimmermann Project Homepage of the GECKO3 FPGA and robotics platform Microelectronics laboratory (MicroLab) of the Berne School of Applied Science Central for opensource hardware cores for fpgas and chipdesign 14:00 01:00 Shelter Bar decoding_laser_printer_tracking_dots Shining lights on surveillance Hacking Lecture English Almost all color laser printers help track their users by printing hard-to-see patterns of yellow dots all over every page. The Electronic Frontier Foundation has been trying to get to the bottom of these dot patterns. What are these dots saying, where do they come from, who can read them, and is there any hope of getting rid of them? For decades, color laser printers have invisibly tracked their users by including patterns of tiny yellow dots on every single output page. This tracking was known to people who worked in the imaging industry and was intermittently disclosed by some manufacturers in their documentation. But even today, most end-users remain unaware of it. For the past two years, the Electronic Frontier Foundation (EFF) has examined this tracking mechanism - a system of exemplary interest because of the non-transparent way in which governments appear to have persuaded technology firms to change their product design without any specific legal basis - and, with the help of many volunteers, we've learned how to read some of the hidden information. This research is ongoing, but we already know how to make the dots easily visible (with LED lights, microscopes, or ordinary color scanners), and we know how to read the data embedded by several major printer manufacturers. Typically, a printer will mark its output pages with the printer serial number and the date and time that the page was printed (if the printer has its own built-in clock). This information facilitates associating color print output with individuals, because it could be correlated with credit card records, server logs, surveillance camera footage, and the like. We've succeeded in attracting a large amount of media interest, including television, newspaper, and magazine coverage in the United States and around the world. (Note that we did not discover the existence of these dots; we are simply the first organization to start to make a reasonably detailed and public study of them.) This coverage is valuable, but it has not necessarily changed industry practices. To do that, we need to go further. We're continuing to try to break printer codes, to explore the world of document forensics and expose why many recordable media are far less anonymous than their users expect, and to try to compel the U.S. government to reveal its role in inducing printer companies to create this technology. In this talk, I'll present a hands-on demonstration of how to find and interpret the tracking codes in some typical color laser printer output, survey some of the historical and political issues, and invite audience members to join us in shedding more (blue?) light on the subject. We're also interested in countermeasures that would disable the tracking or make it ineffective, and I'll present the best known countermeasures together with their possible limitations. Perhaps CCC attendees can help us find better countermeasures. Seth Schoen Is Your Printer Spying On You? 15:30 01:00 Shelter Bar inside_sputnik_and_openbeacon a hackers guide into homebrewn 2.4GHz hardware & peripherals Hacking Lecture English We want to empower users to use their Sputnik badges after the camp for all kinds of uses - as wireless keyboard sniffers, remote controls, door security systems, for art performances, intelligence applications and Smart Dust meshing systems. This talk provides a deep insight into OpenBeacon and Sputnik hardware, firmware and protocols of used. It will show how to create custom low cost 2.4GHz nodes based on this technology. The OpenBeacon platform is a project that is dedicated to provide very low cost communication hardware for 2.4GHz ISM band enabled devices for all kinds of uses. The Sputnik device - the first incarnation of OpenBeacon - is a small active 2.4GHz real-time tracking device, whose signal is picked up by the 30+ OpenBeacon base stations installed in the event venue. We just finished a new memory-stick-sized meshing node hardware design around the 32 bit ARM7 AT91SAM7S128 Microcontroller and the nRF24L01 2.4GHz frontend with GPL'ed firmware to enable users to create low cost wireless nodes based on their own firmware. No special hardware or compilers are needed to reprogram the device - the free gcc ARM crosscompiler toolchain is supported. The device can be reprogrammed and powered over USB. It also supports stand alone applications by using a battery pack. To allow a high range it provides a RP-SMA connector and a full size rubber antenna. The OpenBeacon tag - as used for tracking 900 people on the 23rd Chaos Comminucation Congress in Berlin - is a free design for an active RFID device which operates in the 2.4GHz ISM band. OpenBeacon is designed as a transceiver device and therefore both transmits and receives radio waves. The intention of this device is to offer a wide range of use cases such as visitor or item tracking and wireless remote controls with a free self-contained and low-cost RFID design. The OpenBeacon tag hardware is based on a PCB antenna connected to a Nordic Semiconductors 2.4GHz RF Chip (NRF24L01) and is controlled via a dedicated microcontroller (MicroChip PIC16F684). The 8-Bit RISC CPU with special low-power features provides the opportunity to implement a very sleek and power saving transmit design at minimal costs. The device is powered with one CR2032 coin cell and is expected to run for up to several months without changing battery. The OpenBeacon design offers an additional watch quartz for better time and delay reliability to support anticollosion and meshing protocols. A LED output and a touch sensor input is provided for interaction purposes. The transmitting range of the OpenBeacon tag depends on local conditions and is tested indoor within 10 meters through two dry walls or up to 30 meters under optimal line-of-sight conditions. To track OpenBeacon on this venue, the device signals are received by Ethernet based RFID reader base stations. The current base station design provides three switched 10/100 Ethernet ports (switched) and is powered over Ethernet (fully IEEE 802.3af compliant). Milosch Meriac The OpenBeacon Project - A free 2.4Ghz communication hardware platform 17:00 01:00 Shelter Bar people_profiles_and_trust On interpersonal trust in web-mediated social spaces Science Lecture English Trustmojo.com is a research project exploring the nature of interpersonal trust in the world of web-mediated social spaces. In this talk we aim to present some food for thought on why trust is increasingly important and how we as designers and architects must relate to it especially when creating social software. The unique human ability of trusting has long been essential to all collaboration, participation and to the forming of community and society. Trustmojo.com is a research project exploring the nature of interpersonal trust in the world of web-mediated social spaces. For CCC Camp 2007 we would like to present what we consider being the most important aspects of human trust online by looking at questions such as: How do we establish "architectures for trust" in online social spaces? How do we design for human trusting behavior to be possible? And what type of trust are we seeking to establish? In this talk Alexander Ljung and myself aim to present some food for thought on why trust is increasingly important and how we as designers and architects must relate to it especially when creating social software. Alexander Ljung Eric Wahlforss Trustmojo 18:30 01:00 Shelter Bar hacking_space Cheap access to Space using lighter then air methods Science Other English Reaching space so far is the business of large companies and national endeavors. However, small groups are working on achieving low cost space access using high end technology. This talk will give a brief insight into JP Aerospace, "America's other space program" and is connected to a real launch of a near space probe. From 2001 to 2004 I was working with JP Aerospace (JPA), a volunteer-based organization that is dedicated to the achievment of low cost space access. This non profit group, run by volunteers is only financed by donations and sponsoring. I will talk about my experiences with this group and about the idea of reaching space using "hacking" methods. The goal of JPA is to reach space using a lighter then air method consisting of 3 stages. The first stage is an airship that transports the payload from ground to the upper stratosphere. The second is a station in the upper stratosphere, acting as a spaceport. The third stage is a gigantic inflatable wing, that is being pushed by ion drives into orbit. To achive this final goal, a lot of small steps are being made to test technologies that are needed. At JPA, these steps are called missions and I was able to participate in several of them. The challenge with each mission is, that you don't really have a budget. You need to work with the parts, that are available (mostly from previous missions) and stuff that you can buy at high end places like "Home Depot" or "Radio Shack". My personal goal was to obtain some high resolution digital imagery from "up there". It has been achieved with the mission "Away 25". I will talk about some of the missions I was participating in and a bit about the oddities and weirdness that is connected with private space projects. As a demonstration, I would like to launch a weather balloon on site. This project is now about 50% completed. Instead of using amateur radio, I will rely on the dense cell phone network of Germany together with GPS. If the mission works out, we will get high resolution digital pictures from an altitude of up to 100.000 feet. Of course, these images can be published on the camp web page. If I may, I would like to auction off a large poster (90cmx2.8m) of a panoramic picture from 96.000 feet that has been made by Away 25 to finance this mission. Ralph Bruckschen JP Aerospace 20:00 01:00 Shelter Bar uvas md4-200, md4-1000 (hoffentlich), Opensource-Quadrocopter und Microcopter Science Lecture German Drones live and touchable. What happened in the drones community since January. Steini 21:30 01:00 Shelter Bar drohnen_zuechten UAVs und andere spannende Dinge Hacking Lecture German Was kann man tun, wenn man zwar eine Drohne haben möchte, aber keine 10.000 EUR locker hat und eh alles selber bauen will? Dieser Vortrag erzählt die wahre Geschichte zweier Nerds, die jeweils einen Quadcopter gebaut haben und diese Entwicklung für alle verständlich nachzeichnen wollen. Es werden sowohl eine Liste von benötigten Materialien vorgestellt, als auch die entstehenden Probleme und konkrete Lösungen präsentiert. Im Anschluss an den eigentlichen Vortrag wird noch eine Diskussion sowie die Vorführung der Eigenbauten stattfinden. fd0 Sebastian Poromka 23:00 01:00 Shelter Bar a_case_against_cplusplus Why C++ is bad for the environment, causes global warming and kills puppies Hacking Lecture English The selling points for C++ are mostly focused on how it supposedly makes it easier to write code. This talk will argue that it is much more important to make code easy to read, and in that respect C++ is a huge regression compared to C. The talk is mostly from the perspective of a professional code auditor. The point of the talk is to get people to think about how others (and themselves!) will have to read and understand the code in the future. This point is also true for other programming languages, so this is not just about C++ bashing, it is about showing what coding style is good for future generations and which will just get you in trouble. The examples will mostly be C++, obviously, but people from other programming languages might learn a thing or two from the talk, too. Felix von Leitner slides and errata 11:00 01:00 Shelter Foo 21th_century_digital_bikes No Gas, No Fee or Tax, No Driver License, what's possible with electronic powerd Vehicles today and in the neat Future. Science Lecture English This talk will present the actual Situation of modern digital controlled Bike and Vehicle Motors. The technology of pulse width modulation is wide spread and simple today, but its a hard and slow path to bring them on the Streets for day to day use. The lean development on the side of the Mass Industries, and the groundbreaking new devices that are build in small Garages and Factory's all over the world are the topic. Also there are some field reports from Drivers experience, the legal Situation in Germany/EU and a whole bunch of News for Nerds who want to move away from Gas. The development of alternative electronic Vehicles is traditionally very slow and on a small border of the gigantic classic automotive market in the world. Bikes with an electronic support Motor are available for nearly 30 Years now, but where are they on the Streets, and why are this first approaches not ready for the Mass? Since a few years there is an ongoing development for modern digital Controlled Motors, more feature-rich and hackable than the classic Brush Motor concept. Based on this and the Motors controlled by a Microprocessor I want to introduce the audience to this new driving Systems. Basically the Talk will split into 5 Parts: 1. The PWM Motor System in general I'll talk about the differences between the old Brush Motors and modern PWM Hub-Motors with a permanent magnetic Ring. 2. PWM used for Bicycles. Just the Motor won't bring you further. What happens if you want to use a PWM an a Bicycle? What is necessary to get things rolling. 3. Hackability of PWM Controlled Vehicle. It has a digital controlled System, well, no question, there are more than 3000 People on the field who understand what that means. 4. The legal Situation in Germany an Europe. But well, there is always a withdraw. Powered Wheels, even with electric current and not Gas are powered Wheels, and thus almost everywhere on the Planet under one or more regulation. So lets see what is possible. Especially in the Public Area. 5. My Filed Experience and what I've done so far. I'm a full time E-Biker for nearly a Year now. I did not drove a Car since 2005 for myself, so here is my story. A demonstration Device and some Vehicles will be available at the Camp Side. Hackers related to such activity are welcome to contact me before or on the Camp, bring your Hardware! Gismo C. Pulse-width modulation ExtraEnergy.org elektronenrad 12:30 01:00 Shelter Foo news_on_colliding_hashes The ball is rolling: One of the biggest challenges in practical cryptography, finding a collision for SHA-1, is tackled. Learn how YOU can contribute. Science Lecture English It is now already two years since the first theoretical attacks on the popular hash function SHA-1 have been announced. However so far nobody could show a collision for SHA-1. This talk surveys recent progress in the analysis of this hash function. How to contribute? Find out. Christian Rechberger Last year's news about our work Collision search basics SHA-1 Collision Search Graz 14:00 01:00 Shelter Foo cryptographic_key_recovery_from_linux_memory_dumps Does dm-crypt and cryptoloop provide expected security when facing modern computer forensics techniques? Hacking Lecture English Cryptoloop and dm-crypt are the two disk encryption solutions provided by the stock Linux kernel. This lecture will describe in detail how to find and reuse cryptoloop and dm-crypt keys from kernel memory. When disk encryption is done right it is virtually impossible to break, but as with any security function it is never stronger than its weakest link. Out of necessity keys needs to be stored in cleartext in memory during usage and can be collected by anyone with access to a memory dump of the system. This presentation will go into the details of how cryptographic keys used by dm-crypt and cryptoloop are stored and used in the Linux 2.6 kernel-series and how they can be recovered and reused. Torbjörn Pettersson 15:30 01:00 Shelter Foo howto_forget_your_secret_key What you always wanted to know about Flash memory - but were afraid it could be true Hacking Lecture English The dirty details of erasing key material on flash-memory based devices. Modern mobile devices (phones, music players, next generation of laptops) use various types of flash memory as their means of storage. When designing an encryption or secure storage system that runs primarily on this type of memory, you need to be aware of a number of pitfalls and problems. Not knowing how to delete stuff securely on flash memory can lead to anything from crypto-keys remaining in memory, "deleted" data reconstruction by someone stealing your device or your private porn unintentionally being left on the SD-card you lend to grandma. We will focus on the practical aspects of flash memory security and discuss some methods to achieve acceptable security on flash based devices. Erdgeist Frank Rieger 17:00 01:00 Shelter Foo hacking_on_the_nanoscale Dual Beam Devices for Rapid Prototyping and Reverse Engineering Science Lecture English Dual beam systems are a research and development tool widely used in semiconductor industry. They integrate a scanning electron microscope with a focused ion beam and allow to image, remove, and deposit nanometer size structures. The lecture introduces the basic principles, shows application examples, and explains how these devices can be used for hacking on the hardware level. At the headquarter of the worlds largest microchip manufacturer the atmosphere in the executive meeting is tensed. The competitor has just revealed a new processor with far superior performance. The own R&D has been working on the same technology but is at least one year behind. They seem to be just not able to figure out how to get the thing working. But there is this early prototype the guy they managed to poach last month brought with him. They should get to work. Within a few hours the guys at the lab had managed to cut through the packaging. The circuitry on the surface of the chip was already visible. They quickly figured out at which locations they had to dig deeper to get to the sweet secret. They milled out several of the transistors with nanometer precision. With the remote controlled arm of a micromanipulator they took the tiny parts out for final preparation. Once the pieces were in the microscope it was only a matter of waiting. The next morning the tomography was done and a 3d model of the transistor was rotating on the computer screen. Now with the elemental mappings in front of them it would be a piece of cake to copy the process. What would have sounded like science fiction only a few years ago is nowadays a standard application in companies. With more than a hundred deployed devices, sales rising, new vendors entering the market, and prices dropping dual beam systems will become as commonly available as scanning electron microscopes are today. However, this will not only propel research in science and industry but it has also the potential to deeply impact present security paradigms. It is the end of the hardware black box. Since it allows to image, dissect, and rewire on-chip circuitry statements like the following about the trusted platform module: "The endorsement key is a 2,048-bit RSA public and private key pair, which is created randomly on the chip at manufacture time and CANNOT be changed."*) might need to be reconsidered. *)Safford, David (2006-10-27). Take Control of TCPA. Linux Journal. Retrieved on 2007-02-07. Lorenz 18:30 01:00 Shelter Foo life_and_complexity Organisation, information and optimisation in real and simulated biological systems Science Lecture English What is the relationship between energy, information and complexity? How does nature organise itself, and why? How does evolution get from a bacteria to, say, a wombat? How far are we in understanding and simulating life and other complex systems? Although many of these questions are still largely unanswered, some interesting advancements have been made in recent years and decades. A number of these will be discussed and illustrated in this lecture. Why are organisms and ecosystems the way they are? While science has made great advances in explaining how the parts of such systems work, surprisingly little is still known about why and how the building blocks of living systems and their interactions actually came about. In recent decades we have begun to realise that phenomena such as self-organisation and 'emergent' properties of complex systems play an important role. Unfortunately such systems do not lend themselves very well to study by traditional scientific methods, hence the name 'complex systems'. The arrival of fast computers in the last two decades has made it possible to actually simulate the behaviour and evolution of large collections of simple 'agents'. This, coupled with advances in other fields such as genomics, thermodynamics, and information theory, has made that we are slowly beginning to understand why 'complex systems' behave the way they do. Topics covered in this lecture are expected to include the following: - The relationship between energy, information and complexity. - Self-organisation and emergent phenomena: why and how does nature organise itself? - The illusion of optimality: why the real world is often not 'optimal'. - How do you get from bacteria to wombat? The importance of multiple levels of organisation. - Computer-models of living systems, how far are we? Some examples of how complex behaviour can emerge from relatively simple systems. - Parallels between evolution and organisation in nature and in artificial systems, such as human society, economics and software/hardware architecture. Levien Slides, movies & stuff 20:00 02:30 Shelter Foo oeffentlich_rechtlicher_content Freier Zugang zu öffentlich-rechtlichen Inhalten? Society Podium German Die Digitalisierungsstrategie der öffentlich-rechtlichen Rundfunkanstalten - Gebührenfinanzierter Rundfunk im Zeitalter des Internet. Mit der Ankündigung der Digitalisierungsstrategie haben die öffentlich-rechtlichen Rundfunkanstalten einen großen Aufschrei bei den kommerziellen Sendern und Verlagshäusern ausgelöst. ARD und ZDF möchten ihre Programme auch über das Internet abrufbar machen. Die Privaten fürchten die gebührenfinanzierte Konkurrenz auf dem hart umkämpften Werbemarkt im Internet. Auf den Portalen der Zeitungen und Magazine gehören Videoclips mittlerweile ebenso zum Angebot wie Texte und Bilder. Und die Nachrichtenportale der öffentlich-rechtlichen haben mittlerweile umfangreiche Dossiers und Bilderserien. Die Medien verschmelzen. Was bedeutet ein veränderter Medienkonsum für den Auftrag der "Grundversorgung" durch das öffentlich-rechtlichen Fernsehen? Soll sich der gebührenfinanzierte Rundfunk auf das "aussterbende" Medium Fernsehen beschränken? Oder ist die Digitalisierungsstrategie einfach nur konsequent? Was bedeutet das neue Medium für TV-Macher, die Sender und die Zuschauer? Moderierte Podiumsdiskussion nach einem Einführungsreferat der ARD-Generalsekretärin. Frank Rosengart Verena Wiedemann 23:00 01:00 Shelter Foo hacking_the_bionic_man Science fiction or security in 2040? General Lecture English In this lecture we will discuss how security issues may impact the future, which may be confused with science fiction. Already today we find cyber-implants of different kinds embedded within the human machine. As security professionals we know there is no such things as perfect code, and security solutions are far from perfect. What will we be facing in 2040, and how might we defend ourselves - if at all. Gadi Evron 00:30 01:00 Shelter Foo powerpoint_karaoke Culture Contest German Powerpoint Karaoke hat ein einfaches Prinzip: der oder die Vortragende sieht die Folien der Präsentation bei Beginn des Vortrages zum ersten Mal. Whitfield Diffie entwickelte einst den Prototypen der Software, deren Siegeszug seit den 90er Jahren seinesgleichen sucht. Optisch nicht immer vollkommene Powerpoint-Präsentationen mit oder ohne Nutzwert sind inzwischen zur allgegenwärtigen Gewohnheit geworden - kaum ein Vortrag, der noch ohne die unvermeidlichen Folien auskäme. Von den vielen Milliarden Präsentationen pro Jahr haben wir einige hundert ausgewählt, denn die zuweilen kulturzersetzende Wirkung von Powerpoint kann auch ihre lustigen Seiten haben. Die Berieselung wird so zur Performance. We will also have some English slides if there are courageous speakers who don't speak German. Constanze Kurz neingeist 11:00 01:00 Shelter Bar introducing_funk and further explorations into the use of functional languages for network traffic generation Hacking Lecture English This talk will introduce a simple and incredibly powerful framework for the scripted generation of network traffic: Funk, a new tool for fuzzing arbitrary network protocols written using the Chicken Scheme-to-C compiler. Source code will be provided and explained, so you can start using this framework today for all your network traffic generation needs! Some familiarity with functional languages like Lisp or Scheme will be helpful, but not required. At my talk at DefCon 13, I described a framework and development environment for the generation of network traffic of arbitrary protocols. This framework was limited by it's reliance on a domain-specific language and the use of regular grammars. By re-visiting the same problem with a new perspective, the use of a functional language like Scheme, I've found a much simpler and more powerful approach. By using Chicken Scheme instead of a home-grown scripting language, even complicated protocols like ASN.1 can be fuzz-tested with ease. The use of a functional language makes it possible to provide a unified interface to all network protocols. This allows the abstraction of behavior for traffic generating programs, like fuzzers. Chicken Scheme has other advantages for network testing as well: - It can be run through an interpreter for debugging. - It can be compiled to fast and efficient native C code for scalability and embedding. - C and Scheme can be mixed and matched in both the interpreter and compiler. - Very dynamic and complicated protocols can be handled cleanly due to intrinsic properties of functional languages. I will be providing code representing the core of the framework as well as a protocol fuzzer written using it. In this talk, I will give a very brief introduction to functional languages and protocol testing (~5 min), briefly discuss the shortcomings of my previous solution, and why Scheme is a better fit for the problem. The rest of the time will be spent on the program itself: how to get started using the demo fuzzer and how to start using the framework for all your network traffic scripting needs. I'll also be estimating the interest in moving this forward as an open source project! Ideas for extending the environment include: - Filter/Receive/Inject support - Visual Script Design - additional protocol support Detailed Outline: I. Introduction, Opening II. Statement of Problem A. Initial Goals 1. Fuzzing 2. Flooding 3. Spoofing 4. Traffic Generation B. Long-term Goals 1. Query-Response 2. Arbitrary Network Scripting 3. Rapid Prototyping/Virtual Servers 4. Firewall and IDS C. Previous Attempt 1. Overview 2. Shortcomings III. Choice of Tools A. Shortcomings of Procedural Approach B. Why Scheme? 1. What the hell is Scheme anyway? 2. Seriously, what's up with the parentheses? 3. Why are LISP programmers so smug? 4. Why can't you just use C like normal people? C. Why Chicken? 1. Interpreted 2. Compiles to straight C 3. Functional language is right tool D. Chicken vs. Python 1. Lies, Damn Lies, and ... E. To Wiretap or not to Wiretap IV. Implementation Details and Source Code Review A. Protocol Representation 1. Operation Tables i. Generating ii. Serializing iii. Validating iv. Querying 2. Data Types i. Tables ii. Lambdas 3. Dynamic Protocols i. IP/TCP Checksums ii. ICMP iii. ASN.1 B. Packet Scripting 1. Abstract Operations 2. Flexibility 3. Extensibility and Openness C. Future Work 1. GUI, Long Term Goals 2. Project Volunteers? V. Demo (time permitting) ~10 minutes A. Live Network Fuzzing B. PCAP File Generation C. Binary Format Fuzzing VI. Conclusion, Q&A Ben Kurtz 12:30 01:00 Shelter Bar bayesian_network_traffic_analysis Supplementing firewall and intrusion detection systems through intelligent anomaly detection Hacking Lecture English This event will showcase a novel method for hostile traffic detection. Current methods are either insecure against new threats and too slow or ineffective. Stateless systems are insecure due to data being split across packets and a reconstructed scan is too slow to analyze networks with large throughput. Unlike current signature or rule based systems, this method is unique in that it analyzes and learns from prior events to provide suggestions for future attempts that may not match a rule. The event will culminate with the details of tools prototyped in Perl for enhancing network security. System administrators are better equipped to handle some intrusion attempts while automatic systems work best on others. This system utilizes neural or Bayesian network techniques--supplementing the rule based systems currently in use for deciding which traffic is allowed. Neural and Bayesian networks have been used in similar fields for some time: IBM's boot sector virus detection and defense against email spam are two examples. A decision making classifier will learn from existing IDS and/or firewall rules and traffic logs. This has the advantage in that it doesn't require human intervention and is easily adapted to a particular network topology. The system is then used to enhance existing network security and provide detection of possible attacks and prioritization of alerts. Both options are based on this intelligent classification of prior events. There is a general framework that can easily be adapted to work with any input data. Once categorized, the data is fed into a neural or Bayesian network. From there it is sent to the classifier for rule generation and alert prioritization. The key lies in the system learning which events should then be sent to the administrator to minimize the possibility of intrusion given finite administrator time. It works in real time and makes decisions on whether network events that indicate a perceived level of risk should be handled automatically or sent to the system administrator: the prioritization component of the system. The techniques are used to supplement and enhance an IDS and/or firewall. A possible expansion is to include temporal correlation to prevent attack progress. Further work can be done in optimizing the training algorithm and classifier so as to maximize accuracy with the evolution of threats. Luke Gotszling Information Trust Institute Project homepage Decision and Control Lab 14:00 01:00 Shelter Bar upgrading_martian_carrier_pigeons How Delay and Disruption Tolerant Networking works and how they can be used in various places Science Podium English Delay and Disruption Tolerant Networks (DTN) are where communications are not always possible or difficult. This talk discusses DTN's and how to securely update nodes that are flying around in outer space. In various environments randing from a small lake with probes that measure the quality of the water to soldiers running around on the battle field and Vger floating through outer space, there is a need for these entities to communicate with each other. The field that covers this is called Delay and Disruption Tolerant Networking (DTN). DTN's solve the problems with TCP, when e.g. connection simply would time out as light doesn't go faster than light, or when there is no direct connection possible at all for the next week or two. Other cases, like mentioned above might cause nodes to be off at certain times to conserve battery time, or simply because they maintain radio silence so that the enemy can't find them. The Internet Research Task Force (IRTF), which is the Research arm of the Internet Engineering Task Force (IETF) is trying to solve this riddle by providing alternative means of communications for these kinds of networks. Their current proposal are the Bundle and Licklider Transmission Protocol (LTP) protocols. The Bundle protocol is on the same layer as IP, while LTP covers the layer that TCP used to take. Bundle handles the routing of packets from A to B, taking care of security, delay metrics and congestion. LTP make it possible to actually send full messages between A and B. This talk will cover the various scenario's that DTN's are used in, how Bundle and LTP work in detail and lastly also how to deploy it in an efficient and secure manner, being able to upgrade all of your nodes in one go without worries with semi viral methods. [more to be filled in] Jeroen Massar IRTF Delay and Disruption Tolerant Network Research Group Delay- and Disruption-Tolerant Networking (the book) InterPlanetary Networks Special Interrest Group 15:30 01:00 Shelter Bar signaling_system_7 A short introduction to the Signaling System #7 protocol suite Hacking Lecture English One of the most ubiquitous networks of our time is the telephone network. We use it daily and take it for granted that it works - but how is this achieved? How does modern telephone switching work and why are cereal consumers equipped with whistles not able to place free calls anymore? Main objective of this lecture is to give you some basic insight into the Signaling System #7 protocol suite and to understand the fundamentals of state of the art telephone switching. Supplementary services like SMS and number portability is discussed as well as the smooth integration of ISDN. nibbler 17:00 01:00 Shelter Bar testing_and_exploiting_flash_applications Hacking Lecture English Flash is used for so-called RIA quite a long time now. Many of us know that Flash is evil and can be used for bad and ugly things, but it was not too easy to audit Flash apps in the past. The lecture will start with an overview over the history of Flash/ActionScript, its capabilities and flaws. A deeper look into the object and security model as well as the variable handling will follow, including an analyze of common developer mistakes and how it is possible to exploit those. But Flash is also a powerful tool for filing attacks over the network. So a couple of possible attack examples such as request forging, network scanning or Flash based attack back channels will be explained. The talk includes a section where free tools for auditing will be introduced. fukami FlashSec: Flash Security Wiki SektionEins Examples from the talk PoC for AS3 port probing 18:30 01:00 Shelter Bar antivirus_insecurity Bugs in Antivirus Software Hacking Lecture English Nowadays Antivirus Software are the larger defense deployed in corporations and final user desktops (mail servers, file servers, http and ftp internet gateways, workstations, etc) and their engines are reused in the IPSs that the same vendors develop. This talk will be about the findings and lessons learned while targeting the antivirus software that most of companies and users use. The talk will focus mainly in the type of bugs found (stack based buffer overflows, heap overflows, integer issues, uninitialized variables, traversals, etc) and the techniques used to find them. Sergio 'shadown' Alvarez 20:00 01:00 Shelter Bar trojan_reality_check An Overview of the Trojans we are really seeing in the wild, their technology and recent developments Hacking Lecture English This talk focuses on the various trojans the we actually see being used against companies and individuals in the world. It will show the real threats, how they work, what the real impact is. The talk will include screenshots from dropzones and practical demos, possibly as video clips. Today there is a lot of hype around some new proof-of-concept technology or around politically motivated trojans, etc. This talk will deliver a reality check, give an idea what kind of malware the McAfee Research organisation is actually seeing to be used in the real world and show how the diffent trojans work, what the impact is. The material used are internal statistics of the various threats sent to oder discovered by us, some more detailed analysis to make functionality more transparent and some demo's screenshots, etc. This talk will not advertise any products from us or anyone else. Instead of that short examples of various technologies will be used to discuss of that may help or why it fails. Toralv Dirro McAfee AVERT Researcher's Blog 21:30 02:30 Shelter Bar lightning_talks_day_2 General Lightning-Talk Definition: Lightning Talks is a daily event. which consists in one hour of several short talks. Each talk is limited to five minutes. Goal: There is one slot for Lightning Talks each day of the congress. The goal is to present 10 talks within each slot. So this might be up to 40 interesting talks in total. See the Wiki page for current info. Hannes Mehnert http://events.ccc.de/camp/2007/Lightning_Talks 11:00 01:00 Shelter Foo the_school_of_hacking_art Is it possible? 10 years experience from the first man who said "yes". Community Lecture English At the beginning of 90s Soviet (now Russian) hackerdom begin to experience same problems, as everywhere. Journalists became to blame computer fandom in virtually every crime they could imagine. At 1996, I have found just another solution by opening the School of Hacking Art very like karate-do Schools. In Germany there was TV Show "Die Hackerschule. Galileo. ProSieben. November, 13, 2000, 19:30 about the School. Also here is something in German, check it: http://web.archive.org/web/20050218210212/hscool.net/about/article2.html The event will be a free-style seminar. The basic idea: What have already been done, what should be done. The history of hacking education, relations/communications with government, business, media, etc. Strength and weakness of this way. Some examples of educational technologies from Russia, that are helpful to the whole underground. Q&A session. Ilya V. Vasilyev Article in German Video in German School blog 12:30 01:00 Shelter Foo estonia_information_warfare What really happened in Estonia, and what does it mean to us? Society Lecture English Estonia is one of the most advanced countries in the world, and just now survived what has been referred to as "the first 'real' cyber conflict". What really happened there, and what does it mean to us? What can we learn from these attacks and the battle strategies used? In this talk we will go over an outline of the attacks and the defense the Estonians mounted, and proceed to discuss the impact and what actually happened during these attacks. We will then discuss military strategy for use in information warfare as it can be learned from test cases observed during this incidents. Gadi Evron 14:00 01:00 Shelter Foo vds_im_tkg Der Gesetzesentwurf zur Umsetzung der Vorratsdatenspeicherung im TKG Society Lecture German Mittlerweile liegt der Gesetzentwurf zur Umsetzung der Vorratsdatenspeicherung in nationales Recht vor. Der Vortrag stellt die von der Bundesregierung vorgeschlagenen Normen vor und untersucht, ob sie mit der Richtlinie und der Verfassung in Einklang stehen. Darüber hinaus wird aufgezeigt, wer genau verpflichtet ist, was zu speichern und was nicht gespeichert werden muss und darf. Andreas Gietl 15:30 01:00 Shelter Foo online_search A Necessary Investigation Instrument? Society Lecture English The need for new investigation instruments in the fight against Cybercrime is a topic that is currently discussed on an intensive level – not only in Germany and not only in Europe. One instrument that is in the focus of the law-makers is the online search. Listening to the promoters of such an instruments it is easy to get the impression that the online search is the key to an effective fight against cybercrime – but is it really? The presentation summaries the discussion, highlights potential difficulties and points out alternative solutions. From my point of view it could be interesting to combine the legal issues with a technical approach. Marco Gercke 17:00 01:00 Shelter Foo terrorists_and_the_internet A Justification for Stricter Laws? Society Lecture English A number of legislative approaches that are regulating the use of the internet have two things in common: The cut back civil liberties and justify this with the fight against terrorism. But is it sufficient to justify such intensive measures with vague topics? The presentations highlights those areas where terrorists make use of the internet, analysis the potential of some of the measures that are currently on the wish list of law makers worldwide and compares both aspects. Marco Gercke 18:30 02:30 Shelter Foo ueber_morgen Filmvorführung und Diskussion Society Workshop German Filmvorführung und anschließende Diskussion im Rahmen der Beteilung am Filmfestival "über morgen". Der Chaos Computer Club nimmt als Filmpartner für "A Scanner Darkly" am Filmfestival "über morgen" teil, dass "die gesellschafter" veranstalten. Wir zeigen den Film, der sich mit Computerüberwachung, Erzeugung und Instrumentalisierung von Angst zur Gesellschaftskontrolle, Beeinflussung der Wahrnehmung und Drogenkonsum beschäftigt. Anschließend diskutieren wir, wie sich der Club am besten an dem Filmfestival beteiligen kann. Frank Rosengart Jens Ohlig Tina Lorenz "A Scanner Darkly" in der IMDB 21:30 02:30 Shelter Foo taugshow_12 A joyful bucket full of good clean fanaticism, crisis, language, culture, self-content, identity, utopia, mania and despair, condensed into the well known cultural technique of a prime time TV show. Culture Podium English monochrom presents: ++TAUGSHOW #12++ Taugshow is a tour-de-farce. A joyful bucket full of good clean fanaticism, crisis, language, culture, self-content, identity, utopia, mania and despair, condensed into the well known cultural technique of a prime time TV show. The flat hierarchies of talk shows are about as subversive as NYC Democrats smoking dope. But count us out! We won't produce a talk show. Nope. We produce a TAUGSHOW! Where people will be persons, even legal bodies. Which means: we dig it. Our guests are geeks, heretics, and other coevals. [taugen; Viennese slang: to dig/love/adore something] Host: Johannes Grenzfurthner Content Manager: Roland Guests: We are still looking... Jacob Appelbaum Johannes Grenzfurthner gratzer Phillip Stearns Rich Gibson b9punk monochrom's Taugshow Archives monochrom's Taugshow #12 00:30 01:00 Shelter Foo kurzwellenhacks_der_70er Hacking Lecture German Von Radio Pyöngyang bis zu den 500-KW-Jammern Dx-ing in Zeiten des kalten Krieges. Weltmusik hören als es sie noch nicht gab anno 1977 - von All India Radio über Radio Tchad bis Radio Barquisimeto [Venezuela] Seefunk, Flughafen-VOLMETS, Zeitzeichensender, Morse mit den Ohren decoden. Jagd auf die Richtfunkstrecken der Telecoms, Stützpunkte der Royal Navy, Erich Möchel 11:00 01:00 Shelter Bar linux_ist_obsolet_20 Science Lecture German Minix3 wurde von einer Gruppe unter der Leitung von Andy Tanenbaum entwickelt. Mit rund 4000 loc stellt es eines der kleinsten Micro-Kernelsysteme dar und steht erfreulicherweise unter einer freien Lizenz. An der TFH Berlin wurde eine Minix3-Firewall entwickelt, welche deutlich bessere Robustheitseigenschaften besitzt als bisher verwendete Systeme. Minix3 wurde von einer Gruppe unter der Leitung von Andy Tanenbaum (VU Amsterdam) entwickelt. Diese laufende Software zeigt, dass es moeglich ist, ein POSIX compliant Betriebssystem in unter 4000 lines of exectable code bereit zu stellen. Wir geben einen kurzen Einblick in die aktuelle Forschungen und Implementierungen. Im Rahmen einer Diplomarbeit an der TFH Belin wurde das Netfilter-Framework nach Minix 3 portiert. Diese Firewall arbeitet komplett im Usermode. Hierdurch werden Angriffe stark erschwert und die Stabiltiaet erheblich erhoehrt. Daher besitzt dieses Minix3-Firewallsystem deutlich bessere Robusheitseigenschaften als bisher verwendente Systeme. Rüdiger Weis http://www.minix3.org/ 12:30 01:00 Shelter Bar freifunk_und_recht Betreiberhaftung für offene Funknetze Society Lecture German Der Beschluss des LG Hamburg vom 26.7.2006 und ihm folgend das LG Frankfurt am Main vom 22.2.2007 zur Störerhaftung eines Betreibers von offenen Funknetzwerken hat in der Freifunk-Szene für Aufsehen gesorgt. Der Vortrag stellt das Urteil und - falls bereits gefallen - die Berufungsentscheidung vor. Weiter befasst er sich mit der Rezeption des Urteils in der juristischen Fachwelt und versucht, Hinweise für die Praxis zu geben (siehe dazu Gietl in ZUM 2007, 407). Das Risiko der Betreiber offener Funknetze, als Störer oder auf Schadensersatz in Anspruch genommen zu werden, ist aufgrund der Regelungen der § 7 und § 8 TMG minimal und steht hoffentlich der Entstehung vieler offener Netze nicht entgegen. Dasselbe gilt für das Strafrecht. Jedenfalls bis zur Kenntnis des Betreibers von aus seinem Netz verbreiteten Inhalten muss er keine Kosten befürchten. Inwieweit ihm eine Überprüfung der Rechtswidrigkeit der Inhalte und anschließende Maßnahmen zur Sperrung zumutbar sind, hängt stark von den Umständen ab, eine Verschlüsselung des Netzes oder Sperrung sämtlichen Peer-to-Peer-Traffics kann nicht verlangt werden. Daran ändert sich auch durch die Richtlinie zur Vorratsdatenspeicherung und der dadurch veranlassten Änderungen am TKG nichts. Andreas Gietl 14:00 01:00 Shelter Bar gnu_radio_and_the_usrp Current Capabilities and Future Directions Hacking Lecture English Eric Blossom and Matt Ettus will present an update on GNU Radio and the Universal Software Radio Peripheral 2 (USRP2). We'll talk about new applications and hardware, the port to the Cell (PS3), and demo a thing or two. Matt Ettus Eric Blossom GNU Radio Trac / Wiki 15:30 01:00 Shelter Bar the_a5_cracking_project Practical attacks on GSM using GNU Radio and FPGAs Hacking Lecture English A lot of work has been done on coding together GSM support for GNU Radio and now the next question is how to get past the A5 over-the-air encryption. In this talk we will present the GNU Radio software we've thrown together which let you monitor unencrypted GSM traffic and will go over the various published attacks on A5. The primary goal of this talk is to present our findings on building a practical and feasible A5/1 cracker that can decrypt GSM communications in a reasonable amount of time. First, this presentation will present the code that has been developed for capturing GSM traffic and how you can use it on your GNU Radio hardware. Then we'll provide a brief overview of the GSM protocols, encryption, and the past attacks on GSM, and what you can really do once you're able to start sniffing GSM packets. The other half of the talk will focus on our A5/1 cracking project and on our current findings on attacking A5/1. Many different attacks on A5/1 have been published, but most of them haven't been extremely practical. For our purposes, the known-plaintext attacks weren't as appealing as the ciphertext-only attacks so we try to focus only on these attacks. Additionally, attacks that require more than a few months to pre-compute or a day or two to reverse a key take too long for our purposes and seem impractical. We would also like to ideally implement this attack fully passively, mostly for legal reasons, but it isn't required. Because of these requirements, we mostly focus on time-space tradeoff attacks since they can be pre-computed ahead of time and possibly using FPGAs. Some of the most promising attacks include implementing the ciphertext-only attack published by Barkan, Biham, and Keller and other variations that essentially build a rainbowtable for reversing parts of A5/1. We have also found that FPGAs have the potential of being able to brute force the A5/1 keyspace in a reasonable timeframe so we will also present on the feasibility and the amount of hardware required to brute force the keyspace in different scenarios. The hope is that this talk will present a technical perspective on current state of GSM security and fuel a discussion on what's to come. Now that anyone with a GNU Radio board is able to start checking out GSM traffic, what does that mean to us and our privacy? Is it possible that there are a whole new set of vulnerabilities down at the lower protocol layers? What sort of useful things can we do now? At what point are we breaking the law? A lot of these questions should be answered now that software defined radio's are becoming more prevalent. Bring your thinking caps and join in on our discussion! Steve Joshua Lackey David Hulton The A5 Cracking Project The GSM Scanner Project gssm 17:00 01:00 Shelter Bar practical_rfid_attacks writing, sniffing & emulating 13.56MHz RFID tags with OpenPCD and OpenPICC hardware Hacking Lecture English This presentation will explain how to access information stored on 13.56MHz RFID cards by using the open hardware RFID reader/writer design OpenPCD. It will enable users of the OpenPICC 13.56Mhz RFID emulator to add software support for RFID emulation profiles and show how to practically sniff RFID transactions with OpenPICC. OpenPCD is a free hardware design for Proximity Coupling Devices (PCD) based on 13,56MHz communication. This device is able to screen informations from Proximity Integrated Circuit Cards (PICC) conforming to vendor-independent standards such as ISO 14443, ISO 15693 as well as proprietary protocols such as Mifare Classic. Contactless cards like these are for example used in the new electronic passports. The intention of the OpenPCD project is to offer the users full hardware control of the RFID signal and to provide different output signals for screening the communication. With already existing Free Software from the OpenMRTD project for implementing the PCD side protocol stack of various RFID protocols, this project will happily extend the free toolchain around RFID verification. The OpenPICC project for Proximity Integrated Circuit Cards (PICC) is the counterpart to OpenPCD. It is a device that emulates 13.56MHz based RFID transponders / smartcards. OpenPICC can be used to e.g. simulate ISO 14443 or ISO 15693 transponders, such as those being used in biometric passports and FIFA worldcup tickets. Like OpenPCD, the hardware design and software are available under Free Licenses. Henryk Plötz Milosch Meriac OpenPCD: a free 13.56MHz RFID reader & writer design OpenPICC: a free 13.56MHz RFID card emulator design Extended Slides of Henryk's talk on the simple RFID system at 23C3 18:30 01:00 Shelter Bar twisting_timing_in_your_favour Finding and exploiting concurrency issues in software Hacking Lecture English This lecture wants to make the audience a bit more familiar with a species of bugs that is not yet as boring and overfished as your vanilla buffer overflow: concurrency issues. Bring your debugger and some rubber gloves, because when investigating these beasts, you will need them. Concurrency of operation can be found in most larger software systems; think multi-threading, think UNIX signals, think asynchronous I/O operations, to give just a few hints. However, since concurrency always adds complexity in non-obvious ways, there are all kinds of things that it can make go wrong. Usually, this boils down to the violation of assumptions the system's developers have made - and violated assumptions have always been a hacker's best friend. After a brief introduction to what concurrency issues actually are, this presentation will show how to approach finding and exploiting these issues in software systems and highlight some of the challenges the nosy hacker faces in doing so. The presented material will be supported by examples from real-world software. Lisa Thalheim 20:00 01:00 Shelter Bar zert_vml_ani_and_third_party_patches Assembly - lots of it. Hacking Lecture English ZERT, the Zeroday Emergency Response Team, hit the news in the past 2 years with third-party patches to 0day attacks such as VML and ANI. What's behind these vulnerabilities, and how were the patches constracted? In this lecture we will discuss the VML and ANI vulnerabilities in depth (assembly knowledge required), and the ZERT response mechanisms. We will then proceed and describe how the ZERT patches were built (whether to avoid collisions with the real patch when it comes out, or how generic patching in-memory was accomplished). Gadi Evron Gil Dabah 21:30 01:00 Shelter Bar know_your_compiler ...and what the optimizer does so you don't have to Hacking Lecture English Programmers often attempt to make their code faster but end up only making it less readable. This talk attempts to show what kind of optimizations you can (and should) leave to your compiler. Felix von Leitner slides 23:00 01:00 Shelter Bar black_ops_2007 Billions Of Packets Can't Be Wrong Hacking Lecture English This year, I'm looking at two apparently divergent concepts: Automated structural analysis of arbitrary byte streams, and the identification of massive scale deployment patterns in Internet-facing services. The plan is to use code written for the former, to summarize and comprehend the nature of the latter. This talk will summarize the output of somewhere between 10 and 30 billion packets. It'll also have pretty pictures. Dan Kaminsky 11:00 01:00 Shelter Foo fun_with_nfc_mobile_phones Near Field Communication Hacking Lecture English The lecture offers an introduction in Near Field Communication (NFC) on mobile phones. You will get an overview about existing and future NFC applications and a starting point for developing your own. Stephan Karpischek NFC Forum Contactless Communication API Nokia 6131 NFC 12:30 01:00 Shelter Foo batman New routing algorithm and daemon for wireless community networks Science Lecture English B.A.T.M.A.N. is a new routing algorithm developed by the Freifunk community. It is a simple and robust algorithm for establishing multi-hop routes in mobile ad-hoc networks. It ensures highly adaptive and loop-free routing while causing only low processing and traffic cost. B.A.T.M.A.N BETTER APPROACH TO MOBILE AD-HOC NETWORKING B.A.T.M.A.N. is a new routing algorithm developed by the Freifunk community. It is a simple and robust algorithm for establishing multi-hop routes in mobile ad-hoc networks. It ensures highly adaptive and loop-free routing while causing only low processing and traffic cost. The described performance properties are not just assumptions based on theory or MANET simulations - the new algorithm has already been implemented for GNU/Linux and is now in use in Freifunk mesh networks in real life. We offer a performance optimised routing daemon for routing on Layer 3 of the OSI-model as well as a new daemon (batman-advanced) that routes on Layer 2. Check out the source code and documentation at http://open-mesh.net/batman . B.A.T.M.A.N. is a routing protocol that is proactive in the sense that it pro actively populates the routing table of each each mesh node without calculating topology graphs. It is hard to classify the algorithm - some people say 'it is clearly proactive', some think 'ah, yes this is a pheromone (ant-based) algorithm', others think it is a distance vector protocol. We recommend to watch our presentation and build your own opinion... B.A.T.M.A.N. is neither calculating nor searching routes unlike many famous proactive or reactive routing protocols. The algorithm is designed for wireless networks where the view of the topology is always fuzzy and constantly changing. Routing decisions are made based on the existence of information rather than on the content of information sent by other nodes in the mesh. Basically the algorithm is flooding the mesh with Originator messages (quite similar to Hello messages in other protocols) according to certain rules. The rules are designed for two objectives. Effectively controlling the originator-message propagation in the mesh and enabling loop-free route detection based on the reception of such originator messages from other nodes. Freifunk is using B.A.T.M.A.N. now on Layer 3 parallel to Freifunk-OLSR to compare the performance. The results are very good and the implementation has just passed testing under tough conditions. So we are ready now for large scale deployments. It is likely that B.A.T.M.A.N. will replace Freifunk-OLSR in the near future. We created with B.A.T.M.A.N. a serious competition to our last routing algorithm Freifunk-OLSR. The same community that improved OLSR RFC3626 to Freifunk-OLSR is now working on the ideas and the development of B.A.T.M.A.N. * B.A.T.M.A.N is building routes very fast and the response to changes is quicker compared to Freifunk-OLSR - it doesn't calculate gigantic topology-graphs - it doesn't need to synchronise topology informations - we are confident the algorithm is loop free and did not experience any loops or 'count to infinity' problems in practise - routing tables contain proactively all stations that are reachable without the overhead of traditional proactive routing protocols - a single, central server collects topology information from all nodes for 2D or 3D topology visualisation software - routing tables are build organically i.e. routing entries are not endlessly passed on. they appear only if they are available * B.A.T.M.A.N connects to gateways via UDP-tunnels - gateway clients can select their gateway - gateways are considered according to their speed and availability - gateway clients can switch a gateway if it appears to be a black hole - no more gateway switching as long as the gateway is available, i.e. VOIP, SSH, Chat connections are stable * B.A.T.M.A.N generates less protocol overhead than OLSR cu there Axel, Elektra, Marek Elektra Wagenrad Axel Neumann Marek B.A.T.M.A.N.-Project 14:00 01:00 Shelter Foo 23_ways_to_fight_for_your_rights Society Lecture English Human rights and civil liberties are under attack. Looking at the vast number of plans and legislatory projects, many have the feeling that political engagement is not worth the effort anymore. At the same time, it was never as easy as today: We have the net and can use it - for publicity, analysis, protest, and organizing. But not everything in politics happens on the net, and only few feel the desire to join political organizations and parties on a long-term basis. But there is still a lot that can be done. This presentation and the following workshop will discuss 23 concrete ways of using your own abilities to fight for your rights. Drawing on examples from international politics, national protest and local community-organizing, we will try to map the landscape of net-based and net-enhanced political struggles and see what works. Not everything is what everybody would like to do, but for everybody, there is something to do. Markus Beckedahl Matthias Mehldau Ralf Bendrath netzpolitik.org 15:30 01:00 Shelter Foo wipo_broadcasting_treaty Lobbying on an International Scale Society Lecture English The WIPO Broadcasting treaty in its original form is a threat not only to the rights of creative people around the world but to the core understanding of the internet. The Broadcasting Treaty within the WIPO originally intended to prohibit so-called "signal piracy". Instead it proposed a whole new form of copyright as an envelope around the existing forms. Together with a very light definition of "Webcasting" this could possibly change the way people work and publish on the internet. Currently civil society organizations from all over the world are joining large telecommunications corporations in a joint struggle against this treaty. A talk not only about a very bad treaty but also about successful lobbying on an international level. Petra Buhr Julian 'hds' Finn 17:00 01:00 Shelter Foo promoting_and_defending_digital_freedom_in_france How the french libre software activists do it Community Lecture English A presentation of a few successful campaigns in France in the field of defending freedom in a digital world: bringing awareness against the dangers of the EUCD transposition, against DRM, and influence the candidates to a presidential race to talk about Libre Software. What have we learned? How to do it? How to achieve better cooperation between associations/NGOs? Our association, APRIL, is getting bigger and bigger (we just passed the 1000th member, and had last year corporate members such as SUN Microsystems, Thalès, Neuf/Cegetel, Wengo, Fon, Thalès, Mandriva, Adacore, etc.). We're trying to get awareness about Libre Software, and defend it whenever it's in danger. For the last few years, a few manaces went more and more precise against Libre Software, and whenever Libre Software is in danger, it's all our freedoms in the digital world that are endangered too. So we built campaigns to structure our efforts about promoting and defending our freedoms. - EUCD.info : for 3 years, 1 to 3 persons worked full-time to build arguments, contact politics, write amendements, contact journalists, about the French transposition of the EUCD directive (DADVSI law). More than just making illegal to circumvent DRM, this transposition brought very specific "legal tools" supposed to "fight piracy" that were among the most hardcore ever seen. Many of them were pushed back thanx to the EUCD.info initiative, but some of them are still around : private police of the Internet, censorship of authors of software "used for pirating", mandatory use of DRM, etc. Our efforts went way further than just inside the legal text or the parliament, and many "collateral benefits" were obtained from this fight. - Candidats.fr objective was to influence the candidates to a presidential race to talk about Libre Software (Candidats.fr). 9 out of the 12 candidates, including the 6 first ones, replied to our very precise questionnaire (32 cornering questions!), giving time and work to consider the questions of Libre Software, interoperability, DRM, software patents, open standards, etc. We are continuing right now with the Législative Campaign, for deputy elections, and a brief about contacting those 7600 candidates with a distributed network of volunteers will be included too (work in progress ;) - StopDRM.info is too a French group about raising awareness on DRM that organised flashmobs (with up to 100 persons!) in superstores, and gave themselves to the police for having circumvented DRM under the new DADVSI law. - What have we learned ? How to do it ? What are the pitfalls to avoid ? How to "spin" a campaign ? How to achieve better cooperation between associations/NGOs ? jz APRIL EUCD.info campaign Candidats.fr Stop DRM ! 18:30 01:00 Shelter Foo scantegrity Science Lecture English The most fundamental power of computers may turn out to be allowing citizens’ control over the shaping of governance. Government has become so powerful that it can moot most any technological attempt to route around its policies, no matter how much fun is had at the margins. Some new and surprising cryptographic techniques for shaping governance offer challenges in both development and deployment. David Chaum 20:00 01:00 Shelter Foo rebellious_communication_and_the_federal_flood My experience and the role of bloggers, podcasters, and other rebellious net-based media sources in post Katrina New Orleans and the Gulf Coast. Society Lecture English Following hurricane Katrina, hundreds of thousands of people were hit with one of the worst disasters in US history; the mismanagement and neglect of the government, better known in New Orleans as the FEDERAL FLOOD. While the major media and the government itself carry out an information blackout about the details of this ongoing disaster, some bloggers and podcasters have taken matters into their own hands, reporting the news, exposing the corruption, and using the internet to speak directly to the outside world. This presentation is about my first hand experience, and their ongoing struggle. Bicyclemark Citizen Reporter Podcast New Orleans (NOLA) BLoggers Levees.org Video Entries 21:30 01:00 Shelter Foo enabling_innovation_in_europe Hacker Spaces, Startups, and a new approach to social movements Society Lecture English Great things rarely happen just because of good people or great ideas. For something interesting to happen opportunity, vision, and the ability to execute must come together. Why are there so few European ICT startups? If you've been following EU Reports on Innovation, you can see how bad the situation is already. In the words of the former Finnish Prime Minister, Mr. Esko Aho, in what is the Europan Union's prime document outlining a strategy for creating an innovative Europe: "Europe and its citizens should realize that their way of life is under threat[...] This society, averse to risk and reluctant to change, is in itself alarming but it is also unsustainable in the face of rising competition from other parts of the world." This talk explores Europe's seeming inability to innovate in ICT, looks for explanations from the perspective of founders, and tries to offer solutions to Europe's Innovation Dilemma. Paul Böhm Aho Group Report Metalab YEurope IG Startup Austria 23:00 01:00 Shelter Foo tits_bits pr0n 2.0 Hacking Lecture English Tits-n-Bits chronicles the technical and social challenges working at an adult video website. The presentation is focused on: an industry backgrounder, encoding/codec technology, performance monitoring, security and other goodies from the dark-n-profitable side of the interweb. Originally dared as a party joke, Tits-n-Bits is the resulting look behind-the-scenes of one adult video site - VideoBox.com. Launched in 2003, VideoBox pioneered custom video downloading; allowing users to steam only the video segments they're interested in. VB is unique with zero DRM and flat-rate billing. Recently the adult industry has adopted many of the popular "web 2.0" features - RSS, karma or feedback mechanisms, recommendation engines (e.g. Amazon), even XHTML/CSS compliant pages. These modern features along with many of the technical inner-workings will be discussed. Additionally the presentation will include crowd participation and unique visualizations will be shared. With brief stopovers in bubble 1.0 (CPTH), WiFi (both community and for-pay), web 2.0 (SixApart) and now pr0n 2.0 - Matt 'petey' Peterson is poised to shed some light on this amusing industry. Petey has been knob turning since the days of Gopher and ISDN, thought ironically is still young enough to prefer lambic to real beer. dorkmatt http://www.videobox.com/ 00:30 01:00 Shelter Foo von_neumann The Life of John von Neumann Culture Lecture English John von Neumann is considered one of the greatest and most influential mathematicians of the 20th century, one of the men who invented computers. This audio feature captures his life in a live spoken-word visual performance. Dr. John von Neumann, a witty, plump Hungarian, was a brilliant mathematician, a computer pioneer, and the founder of game theory whom nobody hesitated to call a genius. He was known as great fun at parties, once drank fifteen vodka martinis in a single evening as a kind of experiment. But he also brought the first computers to Los Alamos, and his machines were promptly put to work on calculations of implosion. Von Neumann made important contributions to the development of the atomic and hydrogen bomb, calculated that implosion was indeed feasible. The legendary scientist became a consultant, served on the Atomic Energy Commission from 1954 to his death 1957. Constanze Kurz Marcus Richter Jochen Koubek Kai Kittler 11:00 01:00 Shelter Bar breaking_wep_in_less_than_60_seconds the next level Hacking Lecture English WEP is the currently most used protocol for securing 802.11 networks, also called wireless lans or wlans. Recently, a new attack on WEP, the PTW attack, was discovered, which allows an attacker to recover the secret key in less than 60 seconds in some cases. WEP is the currently most used protocol for securing 802.11 networks, also called wireless lans or wlans. Recently, a new attack on WEP, the PTW attack, was discovered, which allows an attacker to recover the secret key in less than 60 seconds in some cases. We will explain how this attack works and how it can be appied to a real network. Furthermore, a passive version of the PTW attack has now been implemented, which allows an attacker to attack a network without the risk of beeing detected by an wireless IDS system. Additionally, we will present some other intresting attacks currently available in the aircrack-ng toolsuite. This includes the wesside-tool, which does wep-cracking fully automatically, and the easside-tool, which allows real-time-decryption of WEP-traffic without the secret key. Erik Tews Aircrack-PTW Breaking WEP in less than 60 Seconds 12:30 02:30 Shelter Bar crash_course_public_key_cryptography All the math you need to demystify public key crypto, no background needed. Science Lecture English This workshop is a lecture-style presentation on the mathematics of public key encryption, aimed towards people who want or may need to do their own encryption. The focus will be on discrete logarithms (DH, ElGamal, DSA), factoring (RSA), and elliptic curves. No background in mathematics necessary. This workshop is a lecture in the math background of public key encryption. (Bring something to take notes on!) All the prerequisite math will be covered, no prior background in mathematics is necessary. The goal of the lecture is to have everyone come out with enough understanding of some common algorithms, not just how but also why they work, that they may be able to reproduce and implement the algorithms properly. The focus will be on the discrete logarithm problem, commonly used in the Diffie-Hellman key exchange, ElGamal encryption, and DSA digital signatures; factoring, which is commonly used by RSA encryption and digital signatures; and elliptic curves, used in variants of the DLP. The math covered will mostly include abstract algebra and number theory. Seth Hardy 15:30 01:00 Shelter Bar swedish_analysis_of_nazi_crypto_ttys How Beurling et al. broke the Siemens & Halske T52 crypto teleprinter Science Lecture English This talk will describe how a team of Swedish cryptanalysts broke the electromechanical cryptographic teleprinter "Siemens & Halske T52" which was used by the Germans during World War II for "important" traffic. It contained a stream cipher implementation much more sophisticated than the substitution engine of the well-known Enigma. The talk will focus on reconstructing how the Swedes, specifically the key figure of Arne Beurling, could have gotten the ideas for breaking the cipher -- a process about which next to no historical accounts exist. The machine called Enigma, widely famous for being used by German armies during World War II to secretly (or so they hoped) communicate among troops, was a field device. It was portable, simple to operate, as well as relatively cheap to produce, containing neither electrical motors nor any coding/decoding assembly. It was, however, not the only crypto device employed by the Germans. The Siemens & Halske T52 (in its several variants), commonly referred to as the Geheim- or G-Schreiber (German for "secretly-writer"), was a teleprinter with integrated encryption/decryption facility. It was cryptographically superior to the Enigma and, by its nature, much more sophisticated in terms of its electro-mechanical engineering. Due to the latter, it was also much bulkier, weighing no less than 100kg, excluding the transport case. Therefore it was used as a stationary unit, primarily by the German air force, navy, and for diplomatic purposes. In total, about 600 units were in operation. From April 1940, Swedish authorities gained access to large quantities of T52-encrypted telegraph traffic. With Norway just invaded and significant parts of Finland already surrendered to Russia, the Swedes were obviously interested in the plaintexts and, having been quite successful at breaking Russian and French crypto already, promptly tried their luck in deciphering the German messages. The initial successfull cryptanalysis was done in only a matter of weeks by a scientist named Arne Beurling with next to no knowledge but the mere basics of teleprinter technology and a bunch of ciphertext intercepts. Unfortunately he refused to talk about the details of how he actually broke the cipher. This talk will try to reconstruct a possible sequence of ideas that could have led to the eventual breaking of the code. Thus it tries to shed some light on the "magical" work of a cryptanalyst. Sven Moritz Hallberg Wikipedia article about the T52 T52d simulator (for Windows) 17:00 02:30 Shelter Bar hardware_for_software_geeks Essential Tips and Tricks Hacking Lecture English How to build your own lab in your basement for engineering and reverse-engineering on a budget. Demystifying modern System On a Chip (SOC) Micro-Controllers for early hardware prototyping and software development. Practical reverse engineering; using your verification tools to reverse engineer and modify systems without source code. A presentation on getting started with embedded engineering. There is a lot to be said about the work area required for embedded engineering, what tools you will need and how to use them to accomplish useful tasks. An overview of hardware and software necessary to develop or reverse engineer embedded devices. As you will learn in this talk the tools are the same for both tasks. When you begin an embedded project of your own, what chips do you want to use? How do you go about prototyping your hardware? What methods should be considered before designing the system. Is your task better suited to multiple microcontrollers? Once you start writing code, how do you test it? Will your method of loading a binary into your final hardware differ? Do you need to write a bootloader? All these questions need to have answers to tackle an embedded project, we will be showing a variety of methods to solve these common questions. When reverse engineering a device, you need to figure out how it was put together. You need to get into the designer's head and figure out what methods were used to create the device. As you begin to answer these questions you can slowly unravel the device's secrets. We will show some techniques for reverse engineering embedded electronics and firmware and present a plethora of resources to start you off on your own journeys into this field. Ab3nd David Gustin 21:30 01:00 Shelter Bar hack_your_brain Using Sound & Light Machines to achieve desired states of consciousness Science Lecture English What would happen if you played a brainwave sequence into your brain? Answer: if it is a sequence that brings you to a desired state, it brings you there. Anyone can sleep like sleeping beauty, meditate like a zen master, or wake up without caffeine. This talk will cover an overview of research in the field of "brainwave entrainment," which is a fancy way of saying synchronizing one's brain to achieve a desired state of consciousness, such as sleep, meditation, or waking up. Starting with history of the field, the talk will delve into the background information necessary to understand the useful and fun Sound & Light Brainwave Machine project that the presenter built and wrote the main project article for in MAKE Magazine issue #10 (May-2007). This understanding will include the electronics, the firmware, and the physiology of the brain. The talk will conclude with a short discussion of the more complex project the presenter is currently working on, which is a more complex version of the MAKE article project. Simple Sound & Light Brainwave Machines will be available for people to try out after the presentation. Mitch MAKE Magazine Brainwave Machine project article TV-B-Gone 11:00 01:00 Shelter Foo regiotreff Community Meeting German Das Treffen für CCC-Erfas und Chaostreffs. Der Erfa-Beirat ist ein Treffen der Erfa-Kreise, in dem über lokale Projekte, die Aufgabenverteilung zwischen lokalen Gruppen im Verein und Probleme innerhalb der Erfa-Kreise gesprochen wird. Der Erfa-Beirat trifft sich im sogenannten Regiotreffen, denn auch Chaostreffs und Interessierte können daran teil nehmen, haben jedoch kein Stimmrecht für Entscheidungen. Das Regiotreffen findet vier Mal im Jahr, meistens auf clubweiten Veranstaltungen oder sonst durch einen Erfa-Kreis organisiert, statt. Florian Holzhauer CCC.de Chaostreffs & Erfas 12:30 01:00 Shelter Foo camp_noc_network_review Hacking Lecture English An introduction into the structure and design of the camp network - featuring a description of hardware setup and focusing on the Backbone Network infrastructure and Wireless LAN. Building a high-demand outdoor network in less than one week is a job that requires sufficient planning in advance. It starts with organizing hardware that is capable to serve the usage profile of about 2342 power-users and ends in asking providers to contribute in upstream connectivity. This talk will give you an outline of what the NOC people do - beginning month before Camp doors open. The Camp network concept is based on the experiences of the last Congresses. So this talk will show you why network is the way it is. Focus of this talk is network from access layer to the backbone and our Wireless LAN. It intends to give network administrators a brief overview of our approach to meet all requirements. Maxim Salomon Elisa Jasinska Niels Bakker 14:00 01:00 Shelter Foo campclosing General Lecture English Florian Holzhauer Julia Lüning