{"$schema": "https://c3voc.de/schedule/schema.json", "generator": {"name": "pretalx", "version": "2026.1.1"}, "schedule": {"url": "https://talks.mrmcd.net/2017/schedule/", "version": "v0.8", "base_url": "https://talks.mrmcd.net", "conference": {"acronym": "2017", "title": "MRMCD 2017", "start": "2017-09-01", "end": "2017-09-03", "daysCount": 3, "timeslot_duration": "00:05", "time_zone_name": "Europe/Berlin", "colors": {"primary": "#3aa57c"}, "rooms": [{"name": "Prachtgarten", "slug": "1-prachtgarten", "guid": "3bd70113-b3cd-5e5f-91fa-71dc52f45848", "description": null, "capacity": null}, {"name": "Ziergarten", "slug": "3-ziergarten", "guid": "e48988ad-1bdd-5f2c-a7e8-cd8830a7f61e", "description": null, "capacity": null}, {"name": "Baumschule", "slug": "8-baumschule", "guid": "d86c9dc4-5419-5303-9e11-bde69da6f2c8", "description": null, "capacity": null}, {"name": "Platanenallee", "slug": "9-platanenallee", "guid": "42615e0b-ccb4-5801-8fd0-5a79cb8b8219", "description": "im Gang", "capacity": null}], "tracks": [], "days": [{"index": 1, "date": "2017-09-01", "day_start": "2017-09-01T04:00:00+02:00", "day_end": "2017-09-02T03:59:00+02:00", "rooms": {"Prachtgarten": [{"guid": "a4a9092c-9e1f-5f82-8590-17b6b3f2b9f9", "code": "C7WRZV", "id": 108, "logo": null, "date": "2017-09-01T17:30:00+02:00", "start": "17:30", "duration": "00:30", "room": "Prachtgarten", "slug": "2017-108-opening", "url": "https://talks.mrmcd.net/2017/talk/C7WRZV/", "title": "Opening", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "SGCJZC", "name": "Unicorn", "avatar": "https://talks.mrmcd.net/media/avatars/unicornio_kkDFKRn.jpeg", "biography": null, "public_name": "Unicorn", "guid": "90e2ef76-fc85-5c6f-9d63-cc30e26712a9", "url": "https://talks.mrmcd.net/2017/speaker/SGCJZC/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/C7WRZV/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/C7WRZV/", "attachments": []}, {"guid": "0acab73c-ac47-5b69-aeb8-af565dc6dab9", "code": "JKWHFE", "id": 44, "logo": null, "date": "2017-09-01T18:00:00+02:00", "start": "18:00", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-44-datenspende-bundestagswahl-2017-first-results-on-a-mass-experiment-to-analyze-google-s-personalization", "url": "https://talks.mrmcd.net/2017/talk/JKWHFE/", "title": "Datenspende Bundestagswahl 2017 - First Results on a Mass-Experiment to analyze Google's Personalization", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "", "description": "How much do we live in different worlds, when we search for political topics online? Germany has an upcoming election, and nobody really knows much about the knowledge spheres internet users find themselves in. This is in contrast to those spheres in our well-established newspaper and magazine landscape. To alleviate this gap of knowledge, Algorithm Watch has set up the \"Datenspende Bundestagswahl 2017\", a plugin for firefox and chrome which automatically searches for 16 keywords and submits the data to a central server. The keywords consists of the full name of the most important politicians and the seven largest parties. The harvested data is public and can be analyzed by anyone. The project was funded by a consortium of German media authorities and is supported by SpiegelOnline as our media partner. (datenspende.algorithmwatch.org)\r\n\r\nIn this talk I will give you some first insights into the variance of search results different people get. While we do not know anything about our users - for data protection reasons - we can see that for some keywords, there are clusters of people getting different results while for others the results are very homogeneous. In all cases analyzed so far, the amount of variance is less than expected based on a full personalization of search engine results and more varied than expected based on a mere regionalization. \r\n\r\nThe main result of the project, however, is that is a proof-of-concept showing that  society is actually able to audit socially relevant algorithms by combining the efforts of individuals - both as data donors and  data analysts. This principle has to be transferred to audit other social platforms that are even more likely to influence public opinion than search engines, especially social networks. Today, however, most of them do not offer the technical tools for society to be able to do that. This has to be changed.", "recording_license": "", "do_not_record": false, "persons": [{"code": "BU9RSU", "name": "Prof. Dr. Katharina A. Zweig", "avatar": null, "biography": "Leader of the Algorithm Accountability Lab at the TU Kaiserslautern and co-founder of Algorithm Watch. Studied biochemistry, computer science, and a bit of statistical physics. She designed the unique field of study called \"Socioinformatics\" which models and analyses the impact of IT systems on individuals, organizations, and society to create better socio-technical systems at the TU Kaiserslautern. She is author of the book \"Network analysis literacy\" and was awarded with multiple prizes, among them the \"ars legendi\" teaching prize in 2017; she is a junior fellow of the Gesellschaft f\u00fcr Informatik and one of Germans \"Digitale K\u00f6pfe\" 2014.", "public_name": "Prof. Dr. Katharina A. Zweig", "guid": "4959d2d9-947d-5f4a-8604-c18f29680455", "url": "https://talks.mrmcd.net/2017/speaker/BU9RSU/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/JKWHFE/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/JKWHFE/", "attachments": []}, {"guid": "1610489d-b254-526b-9331-a63fe13e7506", "code": "3T9E8Y", "id": 25, "logo": null, "date": "2017-09-01T19:00:00+02:00", "start": "19:00", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-25-leaking-and-modifying-fitbit-data", "url": "https://talks.mrmcd.net/2017/talk/3T9E8Y/", "title": "Leaking and Modifying Fitbit Data", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Fitbit produces the most secure fitness trackers on the market. Nevertheless, they are still exploitable. Enjoy a talk on all components of the Fitbit ecosystem, starting at hardware reverse-engineering on the never to be opened tracker itself, giving insights on a proprietary Bluetooth protocol introducing new vulnerabilities, and a server even giving hints on how to craft fake data.", "description": "Modifying a tracker's hardware, generating valid fake data to servers, and attacking the local wireless communication protocol.", "recording_license": "", "do_not_record": false, "persons": [{"code": "P9Z3BY", "name": "jiska", "avatar": null, "biography": "", "public_name": "jiska", "guid": "b0169d79-472d-5831-9cd9-3c79bfa39019", "url": "https://talks.mrmcd.net/2017/speaker/P9Z3BY/"}, {"code": "BV3ECX", "name": "DanielAW", "avatar": null, "biography": null, "public_name": "DanielAW", "guid": "21eda831-e512-5a1d-91db-c7463c518f0b", "url": "https://talks.mrmcd.net/2017/speaker/BV3ECX/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/3T9E8Y/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/3T9E8Y/", "attachments": []}, {"guid": "494743fa-6f84-580d-b080-b5d78794356c", "code": "8YW9KS", "id": 49, "logo": null, "date": "2017-09-01T20:00:00+02:00", "start": "20:00", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-49-das-universum-in-100tb", "url": "https://talks.mrmcd.net/2017/talk/8YW9KS/", "title": "Das Universum in 100TB", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Moderne High Performance Computing (HPC) Cluster erlauben es uns, das Universum mit seinen Millionen von Galaxien und deren Sternen vom Urknall bis heute in bisher unerreichter Detailtiefe zu simulieren. In diesem Vortrag gebe ich eine Einf\u00fchrung in die Funktionsweise moderner kosmologischer Simulationen und beleuchte dabei insbesondere die technischen Herausforderungen bei der Handhabung von Datenmengen der Gr\u00f6\u00dfenordnung 100TB. Dies reicht vom selbst geschriebenem Speichermanagement \u00fcber die Struktur des Outputs am Speicherlimit von HPC Clustern bis zur Ver\u00f6ffentlichung der Daten. Zum Schluss werde ich kurz umrei\u00dfen, welche wissenschaftlichen Fragestellungen man anhand der so gewonnenen Daten beantworten kann.", "description": "", "recording_license": "", "do_not_record": true, "persons": [{"code": "K7P7XH", "name": "Jolanta Zjupa", "avatar": null, "biography": null, "public_name": "Jolanta Zjupa", "guid": "bca192cc-5895-523f-aa4f-f67c2c92ddbf", "url": "https://talks.mrmcd.net/2017/speaker/K7P7XH/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/8YW9KS/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/8YW9KS/", "attachments": []}, {"guid": "5e534ea7-614d-5289-9972-cc94717dcfd4", "code": "EBEZQG", "id": 107, "logo": null, "date": "2017-09-01T21:00:00+02:00", "start": "21:00", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-107-analysing-colliding-particles-with-256-threads-performance-of-an-embarrassingly-parallel-problem-on-the-intel-xeon-phi-knights-landing", "url": "https://talks.mrmcd.net/2017/talk/EBEZQG/", "title": "Analysing colliding particles with 256 Threads - Performance of an embarrassingly parallel problem on the Intel Xeon Phi Knights Landing", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Ich habe ein Jahr lang am CERN meine Masterarbeit zum Thema Vektorisierung/Parallelisierung eines CERN-Photon-Pattern-Recognition-Algorithmus geschrieben. Das Hauptaugenmerk lag auf Optimierung der Performance durch Vektorisierung/Parallelisierung, sodass der Algorithmus auf einem Intel Xeon Phi Knights Landing (64 Kerne \u00e0 4 Hyperthreads) m\u00f6glichst performant l\u00e4uft.\r\n\r\nKurz gesagt, ich habe versucht ein \"inherently embarrassingly parallel problem\" mit OpenMP, Vector libraries, Variablen im Speicher an Cacheline-Grenzen ausrichten, Mathe-Tricks, etc so schnell wie m\u00f6glich zu kriegen.\r\n\r\nDieser Vortrag gibt eine Einf\u00fchrung in die Welt der manycore-Systeme aus Sicht eines Informatikers.", "description": "Einf\u00fchrung in Parallel Programming und Vektorisierung in Theory und Praxis.", "recording_license": "", "do_not_record": false, "persons": [{"code": "YS8MQS", "name": "chrysh", "avatar": "https://talks.mrmcd.net/media/avatars/avatar_TCQzv6J.jpeg", "biography": "Auf meinem Abschluss wird stehen \"M.Sc. Elektrotechnik\", doch im Herzen bin ich Informatiker. Neben dem Studium habe ich als Linux Kernel-Driver-Entwickler gearbeitet, und m\u00f6chte das nach dem Master auch weiterhin tun. Zur Zeit schreibe ich meine Masterarbeit am CERN zu Vektorisierung/Parallelisierung von Physik-C++-Code.", "public_name": "chrysh", "guid": "0c34f576-2f1c-5cbd-ab0e-a04c2278ea4e", "url": "https://talks.mrmcd.net/2017/speaker/YS8MQS/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/EBEZQG/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/EBEZQG/", "attachments": []}, {"guid": "3d61f339-e124-591b-a0ce-71e9f53e4273", "code": "ZZEFRH", "id": 41, "logo": null, "date": "2017-09-01T22:00:00+02:00", "start": "22:00", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-41-g20-und-gg-20-widerstandsrecht", "url": "https://talks.mrmcd.net/2017/talk/ZZEFRH/", "title": "G20 und GG \u00a720 Widerstandsrecht", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Wehrhafte Demokratie gegen wehrhafte Demokraten: Rechte, Grenzen, Grauzonen der Ereignisse um den G20", "description": "Der G20 und die Ereignisse als Lehrst\u00fcck f\u00fcr politische Bildung und Urteilsf\u00e4higkeit.\r\n\r\nDer Vortrag beginnt mit einer Gegen\u00fcberstellung von UN und der sich davon abgrenzende G20. Gefolgt von einer \u00dcbersicht vergangener G7, -8, -20 um den von 2017 einzuordnen.\r\n\r\nIm zweiten Teil stehen politische Bildung und die Polizeiwissenschaft im Vordergrund. Nach Grund-, Versammlungs- und Polizeirecht werden Erfahrungen der Polizeistrategie \"Harten Linie\" dem aktuellen Erkenntnisstand der Deeskalation gegen\u00fcber gestellt.\r\n\r\nDer Schlussteil betrachtet das Wechselspiel vor, die Auseinandersetzung w\u00e4hrend und die Nachwirkungen nach dem Gipfel. Dabei wird stets auf Polizeif\u00fchrung, Demonstranten und Randalierer Bezug genommen.\r\n\r\nAbschluss bilden ein paar Stichworte zum politischen Engagement als Privatperson oder Gruppe.", "recording_license": "", "do_not_record": false, "persons": [{"code": "LC7YBS", "name": "nanooq", "avatar": null, "biography": "member of the hackspace siegen. big fan of the engelsystem", "public_name": "nanooq", "guid": "ee5229b3-0100-54ec-ba02-071da2a93753", "url": "https://talks.mrmcd.net/2017/speaker/LC7YBS/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/ZZEFRH/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/ZZEFRH/", "attachments": []}], "Ziergarten": [{"guid": "ca4a7d09-c2c1-5b57-801a-d34b94a5a14a", "code": "JXN3UQ", "id": 13, "logo": null, "date": "2017-09-01T20:00:00+02:00", "start": "20:00", "duration": "00:50", "room": "Ziergarten", "slug": "2017-13-javascript-the-good-the-bad-the-ugly", "url": "https://talks.mrmcd.net/2017/talk/JXN3UQ/", "title": "JavaScript - The good. The bad. The ugly.", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "\u00dcberblick \u00fcber JS. Wo steht es jetzt? (ES2015, ES2016, ES2017, Babel, ESNext)\r\nWas sind die komischen Dinge von JS? Was die tollen?\r\n\r\n\u00dcberblick \u00fcbers tooling.\r\nWas ist momentan \"in\"?\r\nWarum sind die Sachen beliebt?\r\nWer nutzt JS \u00fcberhaupt? (Firmen, Projekte, Seiten)", "description": "JavaScript.\r\nOft bel\u00e4chelt. Trotzdem m\u00e4chtig, beliebt und \u00fcberall vorhanden.\r\nEin (humorvoller) \u00fcberblick \u00fcber die Sprache und das ecosystem.", "recording_license": "", "do_not_record": false, "persons": [{"code": "7RFUVK", "name": "marudor", "avatar": "https://talks.mrmcd.net/media/avatars/64ccf2f8aa5df207792f67a557ce2ec4_Q6wxR3h.jpg", "biography": "Dinge mit JS, Z\u00fcgen und so.", "public_name": "marudor", "guid": "9d347a9d-6e6c-58ce-b6e2-9167b58797e3", "url": "https://talks.mrmcd.net/2017/speaker/7RFUVK/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/JXN3UQ/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/JXN3UQ/", "attachments": []}, {"guid": "95d79a01-f808-5db3-a404-d0381d3d378f", "code": "7ZQPWK", "id": 36, "logo": null, "date": "2017-09-01T21:00:00+02:00", "start": "21:00", "duration": "00:50", "room": "Ziergarten", "slug": "2017-36-privacy-by-design-collecting-data-in-a-socially-responsible-manner-without-privacy-side-effects", "url": "https://talks.mrmcd.net/2017/talk/7ZQPWK/", "title": "Privacy by Design : Collecting data in a socially responsible manner without privacy side effects.", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Data from users is needed to build great products. Google, Facebook even Doubleclick would not be able to offer their services unless they had tons of data. No company or product is an exception, the current industry modus-operandi is \"collect-as-you-can\" and it is bound to produce privacy side effects.  \r\n\r\nWe would like to share an alternative approach based on client-side aggregation. This talk will showcase how it is perfectly possible to collect and anonymously send data without any user identifiers or PII for building data driven products like a browser with a fully integrated search engine (Cliqz), Anti-tracking, Anti-phishing etc. without risking or compromising the users privacy at any time.", "description": "Privacy by Design means that the complete architecture right from collection, processing, serving the data is built with privacy and security in mind from the ground up. The term Big Data needs little introduction; it is the foundation of today's services, without this most of the services that we enjoy today could not exists not exist. \r\nThe industry modus-operandi can be described as \"collect-all-you-can\", this behavior is not only accepted but encouraged. This approach to data collection, however is dangerous especially when data involves our everyday actions and when the subject of data collection involves human actions on the Web, side-effects are something to be considered seriously. \r\nWhat is a side-effect in context of data collection ? In simple terms, a piece of knowledge that can be learned from data analysis which was neither intended nor expected, and that poses a risk to the privacy of the subjects of the data collection. During this talk we will provide evidences of side-effects on popular systems such as google analytics that compromise the privacy of the users, even to the point of obtaining personal identifiable information (PII). \r\n \r\nUnfortunately the current approach of data collection where aggregation only happens on the backend of the collector makes these side effects unavoidable. \r\nAt Cliqz we faced the same problem when designing our data collection system. We needed data from our users to build our services: a browser with an integrated search engine, news recommendation, security services such as anti-phishing and anti-tracking and so on. However, we were very troubled by the side-effects. \r\nThat is why we created the framework \u2013 Human-Web[1] , a novel approach to data collection that relies on client-side aggregation rather than server-side. Since server-side aggregation of user's data is bound to produce side-effects, it is strictly forbidden. \r\nOur data collection backend only receives signals from our users if and only if those signals require no further aggregation. If aggregation by user is required, it will be carried out in the client itself. Thus no UID ever reaches our data collection backend. In addition to remove explicit UIDs we have a complex set of heuristics to detect potential implicit UIDs in the content of the signals as well. \r\nThis talk, however, is not just about how we at Cliqz build privacy preserving data collection systems, which have been running in production for over two years now, the whole motivation behind this talk is to showcase design choices and exciting new technologies that can help anyone collect and transport data in a privacy preserving manner which can be useful for any number of uses cases, for instance one can use the same approach to build a privacy-preserving google analytics (as can be showcased in a demo) and solve problems like re-targeting, complex telemetry for business intelligence, goal conversions or like in our case building a complete search-engine. \r\nThe intended audience for this talk is anyone who deals with data, as a takeaway they will learn how by a slight change in the methodology data can be collected in a much much saner and safer way ultimately protecting and respecting the user's privacy. \r\nActually to demonstrate further, we have built a demo Google Analytics[2] service that covers a wide-range of metrics that require would require tracking to solve not so trivial use cases like  unique, goal completion, return rate, time on page, etc, but instead it relies on the principles of privacy by design and yet achieves what services like Google analytics will. \r\n \r\nFootnotes: \r\n[1] : https://cliqz.com/en/whycliqz/human-web \r\n[2] : http://josepmpujol.net/public/papers/big_green_tracker.pdf", "recording_license": "", "do_not_record": false, "persons": [{"code": "ZMP7FF", "name": "Konark Modi", "avatar": null, "biography": "Konark works as a Software Engineer with Cliqz- a novel search engine embedded in browser that focuses on privacy. With more than 3M users, Cliqz ensures user privacy and data security.\r\nHelping Cliqz in making privacy a mainstream topic, Konark works on projects ranging across Privacy by design, Anonymous Data collection like Human Web, Human-web proxy network, Anti-Tracking etc.\r\n\r\nPrior to Cliqz, Konark was working with one of the largest e-commerce website in India(Makemytrip.com) in data platform and security team, solving interesting challenges related to data warehousing, business intelligence and data security.\r\nAs an active member of the community, he loves contributing and getting involved at various fronts in whatever way he can - be it through organising conferences for like-minded people or just disrupting social causes through technology.\r\n\r\nHis recent personal projects, in an endeavour to find and help organizations fix vulnerabilities have spanned across web browsers, health trackers, Government services, travel mobile apps to name a few.\r\n\r\nKonark has been a speaker and presenter at numerous international conferences like Apache Big Data, Berlin BuzzWords, EuroPython to name a few.", "public_name": "Konark Modi", "guid": "0ee56ce4-bc9d-59c6-8f96-ce1639f240fc", "url": "https://talks.mrmcd.net/2017/speaker/ZMP7FF/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/7ZQPWK/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/7ZQPWK/", "attachments": []}], "Baumschule": [{"guid": "193ea2c1-7de9-5633-b048-419122dffd10", "code": "K8P8EW", "id": 17, "logo": null, "date": "2017-09-01T19:30:00+02:00", "start": "19:30", "duration": "02:00", "room": "Baumschule", "slug": "2017-17-datenvisualisierung-mit-d3-fur-einsteiger", "url": "https://talks.mrmcd.net/2017/talk/K8P8EW/", "title": "Datenvisualisierung mit D3 f\u00fcr Einsteiger", "subtitle": "", "track": null, "type": "Workshop", "language": "de", "abstract": "", "description": "D3 ist eine JavaScript-Bibliothek zur Datenvisualisierung. Interaktive Grafiken, zum Beispiel aus der New York Times, wurden in der Regel mit Hilfe von D3 erstellt.\r\n\r\nDieser Workshop richtet sich an Menschen, die D3 ausprobieren m\u00f6chten. Der Workshop setzt Grundkenntnisse im Programmieren (vorzugsweise sogar mit JavaScript) voraus. Teilnehmer sollten einen Computer mit bringen. Wer einen interessanten Datensatz oder ein eigenes Projekt mit bringt, kann hier auch individuell Hilfe bekommen! Wer ohne eigenes Projekt erscheint kann sich aus vorhandenen Beispiel-Datens\u00e4tzen etwas nettes bauen.\r\n\r\nGrober Ablauf:\r\n\r\n- Kurze Einf\u00fchrung in Datenvisualisierung\r\n- Ausgesuchte Beispiele ansehen\r\n- D3 zum laufen bringen\r\n- Zusammenhang der D3-Bedeutung von scale, range und domain\r\n- Wie Daten mit den Elementen verwoben werden um Interaktion und Animation zu erm\u00f6glichen\r\n\r\nVortrags-Unterlagen: https://www.claudiuscoenen.de/mrmcd/", "recording_license": "", "do_not_record": true, "persons": [{"code": "SRVVZF", "name": "Claudius", "avatar": "https://talks.mrmcd.net/media/avatars/Passfoto_2013_crop_square_24g3evZ.jpg", "biography": "Vor vielen vielen Jahren ins web gefallen und seither nicht mehr 'raus gekommen. Programmiert gerne, einiges davon in JavaScript, Ruby oder PHP. Freiberuflicher Programmierer im Web- und Medienumfeld.\r\n\r\nHardware und Holz sind auch toll, aber das tut hier nichts zur Sache.", "public_name": "Claudius", "guid": "5fad3cc0-2d57-57a3-84b0-8bdf1012e539", "url": "https://talks.mrmcd.net/2017/speaker/SRVVZF/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/K8P8EW/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/K8P8EW/", "attachments": []}]}}, {"index": 2, "date": "2017-09-02", "day_start": "2017-09-02T04:00:00+02:00", "day_end": "2017-09-03T03:59:00+02:00", "rooms": {"Prachtgarten": [{"guid": "88fce61d-3e6a-5024-93d2-b092d9e107e4", "code": "9RCJWG", "id": 114, "logo": null, "date": "2017-09-02T12:00:00+02:00", "start": "12:00", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-114-entwicklungen-im-bereich-datenschutz-mit-blick-auf-die-ds-gvo-technische-perspektive", "url": "https://talks.mrmcd.net/2017/talk/9RCJWG/", "title": "Entwicklungen im Bereich Datenschutz mit Blick auf die DS-GVO - Technische Perspektive", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "", "description": "Die Europ\u00e4ische Datenschutz-Grundverordnung (DS-GVO) wird zum 25. Mai 2018 wirksam. In der aktuellen Transformationsphase stellt auch sich Frage, was im Bereich der Informationstechnik zu tun ist, um weiterhin eine datenschutzkonforme Verarbeitung von personenbezogenen Daten zu gew\u00e4hrleisten. In dem Vortrag soll ein Abriss gegeben werden, welche Kriterien zu betrachten und welche Ma\u00dfnahmen zu ergreifen sind. Dazu werden Beispiele herangezogen, die Tracking, Profiling und Scoring in den Blick nehmen, um zu verdeutlichen, dass auch die zur Verabschiedung anstehende ePrivacy-Verordnung f\u00fcr die IT wesentlich sein wird.", "recording_license": "", "do_not_record": true, "persons": [{"code": "JECESM", "name": "Julia Stoll", "avatar": null, "biography": null, "public_name": "Julia Stoll", "guid": "9ff3380a-2bc6-5228-989f-0cb86a9659da", "url": "https://talks.mrmcd.net/2017/speaker/JECESM/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/9RCJWG/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/9RCJWG/", "attachments": []}, {"guid": "1e857466-603e-537c-a886-fce657a96507", "code": "YCDHU9", "id": 22, "logo": null, "date": "2017-09-02T13:30:00+02:00", "start": "13:30", "duration": "00:30", "room": "Prachtgarten", "slug": "2017-22-creating-a-routable-bicycle-map-for-garmin-devices-with-openstreetmap-data", "url": "https://talks.mrmcd.net/2017/talk/YCDHU9/", "title": "Creating a routable bicycle map for garmin devices with OpenStreetMap data", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "", "description": "A brief summary of my experience in creating the \"Radkarte\". Starting with a short overview over the available data in the OpenStreetMap and general routing algorithm. Introduction into the toolchain used to create the garmin maps and lessons learned.", "recording_license": "", "do_not_record": false, "persons": [{"code": "3TZ8RC", "name": "Johannes Lucia", "avatar": "https://talks.mrmcd.net/media/avatars/2d6cd31e8817994dfe7c769891152ff7_400x400_Tj7KBwM.png", "biography": "TBD", "public_name": "Johannes Lucia", "guid": "1ee4eccf-e08b-59da-9c86-2f36dab705d3", "url": "https://talks.mrmcd.net/2017/speaker/3TZ8RC/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/YCDHU9/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/YCDHU9/", "attachments": []}, {"guid": "438951e0-c470-5295-a85b-f082610987f2", "code": "8MYU7E", "id": 29, "logo": null, "date": "2017-09-02T14:30:00+02:00", "start": "14:30", "duration": "00:30", "room": "Prachtgarten", "slug": "2017-29-a-primer-to-machine-learning", "url": "https://talks.mrmcd.net/2017/talk/8MYU7E/", "title": "A Primer to Machine Learning", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Machine Learning has gained traction in recent times for a vast majority of purposes.\r\nThis ranges from data analysis over self-driving cars to playing Board-Games like Go, the applicants spread from companies like Google, Amazon and Facebook to insurances and banks who want to use Machine Learning to decide if a person is suited for a loan or to set insurance rates.\r\nIn this talk I want to give an introduction to the topic and introduce concepts behind Machine Learning and enable the audience to separate buzzwords from actual content.\r\nNo previous knowledge about Machine Learning will be required.\r\n\r\n(The focus of this talk will be more on basics and concepts and less on forefront of research, intended to provide a general entry-level overview over the field of Machine Learning.)", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "TUQ7AW", "name": "cherti", "avatar": null, "biography": "", "public_name": "cherti", "guid": "a9ea9b8b-4fd0-50c1-abb0-e2c0b0c5cc2e", "url": "https://talks.mrmcd.net/2017/speaker/TUQ7AW/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/8MYU7E/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/8MYU7E/", "attachments": []}, {"guid": "76fe5875-ad74-508d-b860-a5cd0e091ea4", "code": "VHLTSN", "id": 46, "logo": null, "date": "2017-09-02T15:30:00+02:00", "start": "15:30", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-46-badasses-in-computer-science-and-why-we-need-to-talk-about-them", "url": "https://talks.mrmcd.net/2017/talk/VHLTSN/", "title": "Badasses in Computer Science - and why we need to talk about them.", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Women in computer science are rare enough, but they exist, today as well as in the past. Who are and who were these women? What role did they play in the history of computer science? And what can we learn from them?", "description": "The topic of women in computer science is much more present today than it used to be. Still, it is not exactly a new problem in itself. What are challenges that women faced in computer science from its early beginnings until today? Even despite  these challenges there were, of course, women who persevered and contributed significantly to the discipline and related areas. Who were they? What do we have to thank them for? And why do we need to talk about them? As with many people from the past there is something we can learn from them. There might, however, be another reason as well: If a computer scientist, or any person for that matter, is asked about famous computer scientists, can you imagine what names they will list? How many previously unknown names and stories will you hear in this talk? And why?\r\n\r\nThis talk will try to discuss questions and possible answers, statistics and stories, numbers and studies from the topic of (historical) women in computer science.", "recording_license": "", "do_not_record": false, "persons": [{"code": "QL3Z9T", "name": "Nana", "avatar": null, "biography": "", "public_name": "Nana", "guid": "3e8cf653-4561-5ccf-9e54-5ed07f258411", "url": "https://talks.mrmcd.net/2017/speaker/QL3Z9T/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/VHLTSN/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/VHLTSN/", "attachments": []}, {"guid": "290e5a12-1442-5628-8884-3d86753841b7", "code": "QL8FMK", "id": 21, "logo": null, "date": "2017-09-02T16:30:00+02:00", "start": "16:30", "duration": "00:30", "room": "Prachtgarten", "slug": "2017-21-kleineanfragen-sehrgutachten-und-stellungnah-me-wie-wir-bundesdaten-anschaulich-machen", "url": "https://talks.mrmcd.net/2017/talk/QL8FMK/", "title": "kleineAnfragen, sehrgutachten und stellungnah.me: wie wir Bundesdaten anschaulich machen", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Dieser Vortrag zeigt, wie wir Anfragen aus den Parlamenten, Ausarbeitungen der wissenschaftlichen Dienste und Gesetzesentw\u00fcrfe und tausende Stellungnahmen von Vereinen und Verb\u00e4nden an die \u00d6ffentlichkeit bringen und sie dabei zug\u00e4nglicher und durchsuchbar machen.", "description": "In den Parlamenten und Beh\u00f6rden fliegen viele Dokumente umher, die nur wenig Menschen jemals zu Gesicht bekommen - die aber sehr interessant sind.\r\nSo gibt es kleine und gro\u00dfe Anfragen von Abgeordneten aus den Parlamenten, die von der jeweiligen Regierung und der Verwaltung beantwortet werden m\u00fcssen. Der Bundestag und weitere Parlamente unterhalten wissenschaftliche Dienste, die den Abgeordneten Sachverhalte erkl\u00e4ren. Gesetzesentw\u00fcrfe und tausende Stellungnahmen von Vereinen und Verb\u00e4nden aus ganz Deutschland zeigen, wie verbindliche Regelungen f\u00fcr die gesamte Gesellschaft getroffen werden.\r\nIn diesem Talk zeige ich, wie wir diese Dokumente an die \u00d6ffentlichkeit gebracht haben, zug\u00e4nglicher und durchsuchbar f\u00fcr alle machen - und wie du selbst an Dokumente aus Beh\u00f6rden kommen kannst.", "recording_license": "", "do_not_record": false, "persons": [{"code": "E9KTNC", "name": "@robbi5", "avatar": null, "biography": "", "public_name": "@robbi5", "guid": "723637b6-b4b4-5877-93bc-5e9bc58eb7f3", "url": "https://talks.mrmcd.net/2017/speaker/E9KTNC/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/QL8FMK/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/QL8FMK/", "attachments": []}, {"guid": "94668d55-22e8-5ae5-9d7c-eb434e876d50", "code": "EFZ97G", "id": 38, "logo": null, "date": "2017-09-02T18:30:00+02:00", "start": "18:30", "duration": "00:30", "room": "Prachtgarten", "slug": "2017-38-automatisierte-pflanzenzucht-und-maschinelles-lernen", "url": "https://talks.mrmcd.net/2017/talk/EFZ97G/", "title": "Automatisierte Pflanzenzucht und maschinelles Lernen", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Erfahrungen bei der automatisierten Zucht von Pflanzen (Kresse, Phacelia) und sp\u00e4tere Verwendung der Sensor-Werte und Photos f\u00fcr maschinelles Lernen.", "description": "Seit April 2016 z\u00fcchten wir so automatisch wie m\u00f6glich Pflanzen. Erst Kresse inzwischen auch [Phacelia](https://de.wikipedia.org/wiki/Phacelia) und sp\u00e4ter vielleicht G\u00e4nsebl\u00fcmchen. Verwendet wurden hierbei alte RaspberryPIs, IKEA-Samla-Boxen und Sensoren, die noch in unseren Projekt-Boxen schlummerten. Nach \u00fcber 100 Wachstumszyklen (vom S\u00e4hen bis \"Ernten\") haben wir einige Fails erlebt: Schimmel (diverse), zu viel Wasser, zu wenig Wasser, Sensordefekte, Internetausf\u00e4lle und menschliche Unachtsamkeit.\r\nEs wurden \u00fcber 400000 Photos und \u00fcber 2 Millionen Sensorwerte gespeichert.\r\nUm den fehleranf\u00e4lligsten und wichtigsten Sensor (Wasserstand in der Box) zu ersetzen wurden Classifier trainiert. (Tensorflow, Convolutional-Neural-Network)\r\nWir w\u00fcrden euch gerne von unseren Erfahrungen berichten.\r\n\r\nCode und Daten: https://github.com/mfa/cress-classify", "recording_license": "", "do_not_record": false, "persons": [{"code": "C8UP79", "name": "Andreas Madsack", "avatar": null, "biography": "Pythonista, Djangonaut, @shackspace\r\n\r\nhttps://madflex.de", "public_name": "Andreas Madsack", "guid": "8f8de7f0-b307-57cd-9f6e-2f037dc97eb5", "url": "https://talks.mrmcd.net/2017/speaker/C8UP79/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/EFZ97G/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/EFZ97G/", "attachments": []}, {"guid": "60a2dfae-65c6-5619-bcef-eddbd3a71955", "code": "BRJNLT", "id": 34, "logo": null, "date": "2017-09-02T19:30:00+02:00", "start": "19:30", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-34-secure-battleship-schiffe-versenken-mit-viel-kryptografie", "url": "https://talks.mrmcd.net/2017/talk/BRJNLT/", "title": "Secure Battleship - Schiffe versenken mit viel Kryptografie", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Das Spiel \"Schiffe versenken\" ist vielen bekannt. Wie spielt man dieses Spiel ueber das Internet?  Und das auch noch mit einer Partei, die potentiell cheated?  Dieser Vortrag zeigt, wie man mit Secure Multiparty Computation (bzw. 2PC) und cleveren kryptografischen Primitiven den Spieleklassiker hinreichend sicher spielen kann.", "description": "\"Schiffe Versenken\" hat mehrere nicht triviale Anforderungen.\r\nJede Partei muss ihre Schiffe auf dem Spielfeld nach gewissen Regeln platzieren. Wie kann ich beweisen, dass meine Schiffe korrekt aufgestellt sind ohne gleich die Position meiner Schiffe zu verraten?\r\nWie stelle ich sicher, dass mein Gegenueber seine Schiffe nicht noch waehrend des Spiels verschiebt um meinen Treffern auszuweichen?\r\nDiese und andere Fragen werden wir mit Hilfe von Kryptografie beantworten. Konkreter werden wir Commitments, Oblivious Transfers, und Secure Multiparty Computation benutzen um das Spiel abzusichern.\r\nWir praesentieren sowohl das Protokoll als eine Implementierung mit ABY.", "recording_license": "", "do_not_record": false, "persons": [{"code": "XRPMAL", "name": "Tobias Mueller", "avatar": null, "biography": "Tobias is a German Free Software advocate, former member of the GNOME Foundation's Board of Directors, and Pythonista. He acquired a Masters degree in Security and Forensic computing from Dublin, is now working in the area of applied cryptography, and loves to build and break stuff. Especially making security systems usable and bringing them to the masses.", "public_name": "Tobias Mueller", "guid": "72b8833d-0058-5e18-a386-6f58819c43fe", "url": "https://talks.mrmcd.net/2017/speaker/XRPMAL/"}, {"code": "BZ8TQS", "name": "lenerd", "avatar": null, "biography": "", "public_name": "lenerd", "guid": "edab8f2d-d1e3-5ea0-a9f8-38975135223b", "url": "https://talks.mrmcd.net/2017/speaker/BZ8TQS/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/BRJNLT/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/BRJNLT/", "attachments": []}, {"guid": "2dba6ffa-996a-56e7-93ea-aaf1d6d883c6", "code": "FWTYS3", "id": 26, "logo": null, "date": "2017-09-02T20:30:00+02:00", "start": "20:30", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-26-the-facebook-of-financial-transactions-user-tracking-on-the-bitcoin-blockchain", "url": "https://talks.mrmcd.net/2017/talk/FWTYS3/", "title": "The Facebook of financial transactions - User tracking on the bitcoin blockchain", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Bitcoin has gained widespread interest for anonymous payments in recent times, driving the prices for a bitcoin through the roof.\r\nThose prices are generally rising correlated with waves of ransomware, as bitcoin is the most common way of paying those ransoms.\r\nAfter all, it's an anonymous currency, perfect for anonymous payments, isn't it?\r\nIn this talk, we will challenge the assumption of anonymity of the bitcoin network and see what conclusions can be drawn from the publicly available Bitcoin blockchain.\r\nWe will discuss options to track bitcoins, evaluate the possibilities to attribute addresses and transactions to users and their interactions with one another.\r\nWe will also take a look at how to characterize payments in the blockchain and what conclusions we can draw from that about the usage of Bitcoin as a cryptocurrency.\r\nNo previous knowledge about Bitcoin is necessary, a brief review of the properties of the bitcoin blockchain will be included in the talk to set the necessary starting point for everyone interested in the topic.\r\n\r\nScripts used for analysis can be found here: https://github.com/cherti/bitcoin-analysis", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "TUQ7AW", "name": "cherti", "avatar": null, "biography": "", "public_name": "cherti", "guid": "a9ea9b8b-4fd0-50c1-abb0-e2c0b0c5cc2e", "url": "https://talks.mrmcd.net/2017/speaker/TUQ7AW/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/FWTYS3/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/FWTYS3/", "attachments": []}, {"guid": "017d186f-c8ad-51fd-8564-71663ace1cad", "code": "FT7A7U", "id": 112, "logo": null, "date": "2017-09-02T21:30:00+02:00", "start": "21:30", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-112-lightning-talks", "url": "https://talks.mrmcd.net/2017/talk/FT7A7U/", "title": "Lightning Talks", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "", "description": "Ihr habt ein ein Thema, Projekt, eine Idee, einen Hack, sucht Teampartner f\u00fcr etwas oder wollt einfach nur etwas Kurioses, Am\u00fcsantes, \u2026 pr\u00e4sentieren, dabei aber keinen ganzen Vortragsslot f\u00fcllen? Dann kommt zu den Lightning Talks!\r\n\r\nBei einer kurzen Pr\u00e4sentation k\u00f6nnt ihr in 5 \u2013 10 Minuten vorstellen, was immer euch auf dem Herzen liegt. Das ganze l\u00e4uft nach dem first-come first-served Prinzip bis der komplette Vortragsslot gef\u00fcllt ist: Schickt eure Folien einfach bis kurz vor den Lightning Talks an `psy@darmstadt.ccc.de` oder bringt diese - vorbereitet zum Anschluss an einen VGA Beamer - auf eurem Laptop mit. Es gibt keine Deadline. Versucht nicht mehr als 10 Folien zu haben, euer Vortrag artet sonst erfahrungsgem\u00e4\u00df zu einer l\u00e4ngeren Pr\u00e4sentation aus. Vorzugsweise pr\u00e4sentieren wir die Folien von einem zentralen Laptop, damit das umst\u00f6pseln zwischen den Vortr\u00e4gen entf\u00e4llt. Falls ihr mit eigenem Laptop pr\u00e4sentieren wollt, ist das auch kein Problem, sagt psy aber bitte vorher Bescheid, damit er das einplanen kann.", "recording_license": "", "do_not_record": false, "persons": [], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/FT7A7U/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/FT7A7U/", "attachments": []}, {"guid": "890c7720-ac2d-5a79-8048-ab9765b0c8f5", "code": "FHAKLV", "id": 111, "logo": null, "date": "2017-09-02T23:00:00+02:00", "start": "23:00", "duration": "01:30", "room": "Prachtgarten", "slug": "2017-111-powerpoint-karaoke", "url": "https://talks.mrmcd.net/2017/talk/FHAKLV/", "title": "PowerPoint-Karaoke", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Wir sind wieder in die Abgr\u00fcnde der PowerPoint-Kultur hinabgestiegen und haben die besten\u2122 Foliens\u00e4tze f\u00fcr euch ans Tageslicht bef\u00f6rdert. Ob die L\u00f6sung f\u00fcr das Energieproblem, eure Geldsorgen oder eure Internet-Sex-Sucht: Wenn ihr ordentlich vortragt, werden wir gemeinsam die Welt retten!", "description": "Same procedure as last year: Wir bringen originelle Folien mit, ihr haltet Lightning Talks dazu. Vielleicht gibt es auch Alkohol.", "recording_license": "", "do_not_record": true, "persons": [{"code": "8CRPQQ", "name": "izibi", "avatar": null, "biography": null, "public_name": "izibi", "guid": "ed23a1e8-a62b-5920-ad38-3dae34943200", "url": "https://talks.mrmcd.net/2017/speaker/8CRPQQ/"}, {"code": "QRWDUE", "name": "iridium", "avatar": null, "biography": "", "public_name": "iridium", "guid": "6833c6b7-c36a-5a32-b93c-4724bed6fad1", "url": "https://talks.mrmcd.net/2017/speaker/QRWDUE/"}, {"code": "QTY9GZ", "name": "F30", "avatar": null, "biography": "", "public_name": "F30", "guid": "9cace659-05e6-5f7a-819f-8513f6678519", "url": "https://talks.mrmcd.net/2017/speaker/QTY9GZ/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/FHAKLV/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/FHAKLV/", "attachments": []}], "Ziergarten": [{"guid": "466d37a5-75bb-5e89-8c9a-837563577f4d", "code": "PAY8KR", "id": 39, "logo": null, "date": "2017-09-02T11:15:00+02:00", "start": "11:15", "duration": "02:15", "room": "Ziergarten", "slug": "2017-39-cybermorningshow", "url": "https://talks.mrmcd.net/2017/talk/PAY8KR/", "title": "CyberMorningshow", "subtitle": "", "track": null, "type": "Workshop", "language": "de", "abstract": "", "description": "Die CyberMornginshow LIVE von der MRMCD 2017", "recording_license": "", "do_not_record": false, "persons": [{"code": "X8TVCC", "name": "Thies M\u00fcller (td00)", "avatar": null, "biography": "Eskalation / CYB(E/A)R / CyberMorningshow", "public_name": "Thies M\u00fcller (td00)", "guid": "87f5c8ba-f94c-5511-9be3-1c2fd6b12975", "url": "https://talks.mrmcd.net/2017/speaker/X8TVCC/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/PAY8KR/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/PAY8KR/", "attachments": []}, {"guid": "d57e051a-422d-5cf7-9bf4-3dcea5e8d570", "code": "AHNRHG", "id": 19, "logo": null, "date": "2017-09-02T13:30:00+02:00", "start": "13:30", "duration": "00:50", "room": "Ziergarten", "slug": "2017-19-jabber-xmpp-instant-messaging-selber-in-die-hand-nehmen", "url": "https://talks.mrmcd.net/2017/talk/AHNRHG/", "title": "Jabber/XMPP: Instant Messaging selber in die Hand nehmen", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Der Vortrag ist eine aktuelle Zusammenfassung rund um das Thema XMPP. Angefangen wird mit der Frage warum wir dezentrale Kommunikationsprotokolle wie XMPP brauchen gefolgt von einer groben Einf\u00fchrung darin wie XMPP funktioniert. Da der durchschnittliche Besucher der mrmcd jedoch schon einmal von XMPP geh\u00f6rt hat geht es im Hauptteile \u00fcber die Neuerungen die XMPP in den letzten Jahren erfahren hat und einem Ausblick darauf wie es weitergehen wird. Abschlie\u00dfend gibt es noch Hinweise dazu, was man tun muss um selber mit XMPP anzufangen.", "description": "Instant Messaging als Kommunikationsform gewinnt zunehmend an Bedeutung. Umso gef\u00e4hrlicher ist es, dass wir uns bei dieser Kommunikation zunehmend in die Abh\u00e4ngigkeit einiger weniger Monopolisten begeben. Die Einf\u00fchrung von Ende-zu-Ende Verschl\u00fcsselung \u00e4ndert nichts daran, auf Gedeih und Verderb einem Konzern ausgeliefert zu sein, f\u00fcr den die Benutzer Ware statt Kunden sind. Ein Wechsel von Whatsapp zu anderen zentralisierten Diensten wie Signal, Telegram oder Threema verschiebt das Problem jedoch nur, solange diese Alternativen nicht untereinander kompatibel.\r\nMit XMPP g\u00e4be es einen Standard mit dem die Dienste verschiedener Hersteller kompatibel gemacht werden k\u00f6nnten. Da die bekannten Hersteller dies allerdings nicht wollen - und auf Grund ihres Gesch\u00e4ftsmodells auch nicht k\u00f6nnen - m\u00fcssen wir die Sache selber in die Hand nehmen und unsere eigene IM-Infrastruktur schaffen. Doch ist XMPP das Richtige Werkzeug f\u00fcr diesen Job? Was hat sich in der XMPP-Entwicklung innerhalb der letzten Jahre getan? Was gibt es noch zu tun? Wie kann ich selber einsteigen?", "recording_license": "", "do_not_record": false, "persons": [{"code": "3AQJKU", "name": "Daniel Gultsch", "avatar": null, "biography": "Daniel Gultsch ist Mitglied der XMPP Standards Foundation, Entwicker des Android XMPP-Clients Conversations und Verfechter von dezentraler, Anbieterunabh\u00e4ngiger Kommunikation.", "public_name": "Daniel Gultsch", "guid": "c273bcbb-e316-5906-87f6-e2e38c5ef556", "url": "https://talks.mrmcd.net/2017/speaker/3AQJKU/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/AHNRHG/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/AHNRHG/", "attachments": []}, {"guid": "a282edf9-d4ef-52ac-a4fa-8d384696c5e3", "code": "UXTBSB", "id": 50, "logo": null, "date": "2017-09-02T14:30:00+02:00", "start": "14:30", "duration": "00:50", "room": "Ziergarten", "slug": "2017-50-wir-werden-alle-storben-1-quid-facis-cert-bund", "url": "https://talks.mrmcd.net/2017/talk/UXTBSB/", "title": "Wir werden alle st\u00f6rben!1!! - Quid facis, CERT-Bund?", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "2001 wurde im BSI das Referat CERT-Bund als Anlaufstelle zur Behandlung von Computersicherheitsvorf\u00e4llen in der Bundesverwaltung gegr\u00fcndet. Der Talk gibt eine \u00dcbersicht \u00fcber die aktuellen Zust\u00e4ndigkeiten und T\u00e4tigkeiten als national / governmental CSIRT.\r\n\r\nNeben Vorfallsbearbeitung / -analyse wird es im Vortrag um die datenbasierten Dienste Spam Monitoring, Warn- / Informationsdienste und Threat Hunting gehen. Last but not least werden im Talk auch die daf\u00fcr eingesetzten Verarbeitungstools MISP und IntelMQ vorgestellt und das Thema Schwachstellenver\u00f6ffentlichung / -risikobewertung behandelt.", "description": "Quid facis tumultum, CERT-Bund? Quid furori te dedis? Quid clamorem tollis et multis verbis parvam rem magnam facis?", "recording_license": "", "do_not_record": false, "persons": [{"code": "NRZJWS", "name": "jonite", "avatar": null, "biography": "sense making, community organizing", "public_name": "jonite", "guid": "2ebe24cb-0706-58db-aa78-63eee9bcb046", "url": "https://talks.mrmcd.net/2017/speaker/NRZJWS/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/UXTBSB/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/UXTBSB/", "attachments": []}, {"guid": "14eaea8f-0ba7-5a1c-baf5-08749342c86c", "code": "Q3SKJE", "id": 28, "logo": null, "date": "2017-09-02T16:30:00+02:00", "start": "16:30", "duration": "00:30", "room": "Ziergarten", "slug": "2017-28-case-study-of-mobile-billing-fraud-in-the-wild", "url": "https://talks.mrmcd.net/2017/talk/Q3SKJE/", "title": "Case Study of Mobile Billing Fraud in the Wild", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "WAP billing is a widely available and easy to use micropayment system provided by the mobile network operators. The customer purchases with a single click and then the charge will be added to his mobile phone bill, without any registration needed. The downside of this billing method is a fraud problem. An amount of 13% of all mobile phone users were victims of WAP billing fraud in Germany. Until now, no research analyzed how this kind of attacks work. This talk presents a case study in which we found several sites that do exploit Universal XSS vulnerabilities. This allowed the attackers to bypass the browser's security restrictions and purchase their products on their victim's account without need of any interaction by the victim. We will explain how the scam works in detail and discuss mitigations that will effectively prevent the ongoing fraud.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "EGTFGL", "name": "Sven Nobis", "avatar": null, "biography": "Sven Nobis works as a Security Analyst at ERNW performing application and infrastructure assessments. He is mainly focusing on web application security but is also interested in mobile security. Besides IT security, he is a passionate developer and trying to link his experiences to the everyday work.", "public_name": "Sven Nobis", "guid": "88408a3f-eacf-5666-bdbb-adcccb9ab8e5", "url": "https://talks.mrmcd.net/2017/speaker/EGTFGL/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/Q3SKJE/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/Q3SKJE/", "attachments": []}, {"guid": "66367474-6042-5488-a3da-cbccdd969383", "code": "3CGHAH", "id": 24, "logo": null, "date": "2017-09-02T18:30:00+02:00", "start": "18:30", "duration": "00:50", "room": "Ziergarten", "slug": "2017-24-ernte-und-zubereitung-von-wettersatellitenfruchten", "url": "https://talks.mrmcd.net/2017/talk/3CGHAH/", "title": "Ernte und Zubereitung von Wettersatellitenfr\u00fcchten", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Die National Oceanic and Atmospheric Administration betreibt seit den fr\u00fchen 70ger Jahren,\r\neine Wettersatellitenplantage im niedrigen Erdorbit.\r\nVon dort berieseln uns die letzten verbliebenen 3 Exemplare der Familie NOAA-Satelliten ihren Fr\u00fcchten\r\nW\u00e4hrend fr\u00fcher die Ernte und Zubereitung dieser Datenfr\u00fcchte den ambitionierten Hobbyd\u00e4rtner\r\nnoch vor gr\u00f6\u00dfere Probleme stellte, kann man heute g\u00fcnstige Konsumergartenger\u00e4te\r\nsoweit modifizieren, dass eine Ernte m\u00f6glich wird.\r\nAuch die Zubereitung der oft schwer verdaulichen Datenfr\u00fcchten ist durch\r\nSaftware und moderne Personal-Komposter f\u00fcr den Hobbyisten in Greifbare N\u00e4he ger\u00fcckt.\r\nAu\u00dferdem wurde die Aufzucht der n\u00f6tigen Antennenpfl\u00e4nzchen durch 3D-Drucker-Technologie\r\nstark vereinfacht und ist auch f\u00fcr weniger ge\u00fcbte D\u00e4rtner zu leisten.\r\nIm Rahmen der Bundesdatenschau m\u00f6chte ich von meine eigenen Experimente zur\r\nErnte und Zubereitung von Wettersatellitenfr\u00fcchten mit dem rad1o oder einem rtl-SDR-Stick\r\nberichten und in diesem Zusammenhang meine drei Projekte 3DP-QFH, ArkLNA und apt-decoder vorstellen.", "description": "Die National Oceanic and Atmospheric Administration betreibt seit den fr\u00fchen 70ger Jahren,\r\neine Wettersatellitenplantage im niedrigen Erdorbit.\r\nVon dort berieseln uns die letzten verbliebenen 3 Exemplare der Familie NOAA-Satelliten ihren Fr\u00fcchten\r\nW\u00e4hrend fr\u00fcher die Ernte und Zubereitung dieser Datenfr\u00fcchte den ambitionierten Hobbyd\u00e4rtner\r\nnoch vor gr\u00f6\u00dfere Probleme stellte, kann man heute g\u00fcnstige Konsumergartenger\u00e4te\r\nsoweit modifizieren, dass eine Ernte m\u00f6glich wird.\r\nAuch die Zubereitung der oft schwer verdaulichen Datenfr\u00fcchten ist durch\r\nSaftware und moderne Personal-Komposter f\u00fcr den Hobbyisten in Greifbare N\u00e4he ger\u00fcckt.\r\nAu\u00dferdem wurde die Aufzucht der n\u00f6tigen Antennenpfl\u00e4nzchen durch 3D-Drucker-Technologie\r\nstark vereinfacht und ist auch f\u00fcr weniger ge\u00fcbte D\u00e4rtner zu leisten.\r\nIm Rahmen der Bundesdatenschau m\u00f6chte ich von meine eigenen Experimente zur\r\nErnte und Zubereitung von Wettersatellitenfr\u00fcchten mit dem rad1o oder einem rtl-SDR-Stick\r\nberichten und in diesem Zusammenhang meine drei Projekte 3DP-QFH, ArkLNA und apt-decoder vorstellen.\r\n\r\nZu Anfang muss der Hobbyd\u00e4rtner erst einmal den genauen Aufbau von APT-Signalen verstehen.\r\nDiese speziellen Vertreter der FM modulierten AM-Nachtsinusgew\u00e4chsen gedeihen\r\nleider nur unter speziellen zirkular-polarisierten Bedingungen.\r\nDeshalb ist die Wahl der richtigen Antenne f\u00fcr die Ernte von elementarer Bedeutung.\r\nHier konnte unter Verwendung modernster 3D-Drucker-Technologie die Aufzucht von QFH-Antennen\r\nso weit vereinfacht werden, dass auch handwerklich weniger begabte D\u00e4rtner keine Probleme haben sollten.\r\nLeider erschweren vor allem im urbanen Raum diverse Sorten\r\nvon spontaner Begleitvegetation in den Kulturpflanzenbest\u00e4nden rund um 137MHz die Ernte.\r\nUm dieser Unkrautsignale Herr zu wurde ein Vorverst\u00e4rker mit integriertem Filter entwickelt,\r\nder nebenbei auch noch die Ausbeute erh\u00f6ht.\r\nDann stellt sich nat\u00fcrlich die Frage welche Datenharke zum Einsammeln der Signalfr\u00fcchten am besten\r\ngeeignet ist: ein rtlsdr-St\u00f6ckchen, das ber\u00fchmte rad1o oder doch besser die Wunderharke3000?\r\nAuch die Auswahl der begleitenden Saftwaren f\u00fcr den Komposter will wohl \u00fcberlegt sein.\r\nW\u00e4hrend der Hobbyd\u00e4rtner hier problemlos gqrx arbeiten kann,\r\nk\u00f6nnen ge\u00fcbte D\u00e4rtner hier auch zu GNU-radio greifen,\r\nweshalb beide Varianten im Rahmen des Vortrages kurz erkl\u00e4rt werden.\r\nF\u00fcr den letzten Verarbeitungsschritt m\u00f6chten ich den Hobbyd\u00e4rtner dann noch mein bew\u00e4hrtes\r\nHausmittel apt-decoder anbieten, welches f\u00fcr leicht unreife Signale bessere Resultate liefert,\r\nals die traditionellen Zubereitungsmethoden mit atpdec oder WxToImg.", "recording_license": "", "do_not_record": false, "persons": [{"code": "BW7B9K", "name": "Deleted User", "avatar": null, "biography": "Verr\u00fcckter Wissenschaftler, wahnsinniger Hacker, vergleichsweise unerschrockener Mountainbiker, nebenbei Informatikstudent und Kenner von rauchfreiem Whisky.", "public_name": "Deleted User", "guid": "f332281f-2fe6-5ec4-9937-1090cee79697", "url": "https://talks.mrmcd.net/2017/speaker/BW7B9K/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/3CGHAH/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/3CGHAH/", "attachments": []}, {"guid": "3fca497b-f139-5093-981e-c17a5acd54e9", "code": "WTYCHD", "id": 10, "logo": null, "date": "2017-09-02T19:30:00+02:00", "start": "19:30", "duration": "00:50", "room": "Ziergarten", "slug": "2017-10-nix-os-package-management-done-right", "url": "https://talks.mrmcd.net/2017/talk/WTYCHD/", "title": "Nix(OS): Package-management done right", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Wir schauen uns Nix als Paketverwaltung an, NixExpr als deklarative Sprache zum erstellen von Paketen und NixOS zur Verwaltung von Services mit Hilfe von Nix.", "description": "Nix ist ein Packagemanager der deterministische Builds erm\u00f6glicht. Nix bietet dadurch funktionen wie Rollbacks, eindeutige Aufl\u00f6sung aller Abh\u00e4ngigkeiten und erm\u00f6glicht Libraries in verschiedenen Versionen installiert zu haben ohne Konflikte zu erzeugen. NixOS ist das Betriebssystem basierend auf Nix, welches noch zus\u00e4tzlich deklarative und deterministische Ans\u00e4tze f\u00fcr Konfigurationen von Services mit sich bringt.", "recording_license": "", "do_not_record": false, "persons": [{"code": "VHFFKB", "name": "uwap and profpatsch", "avatar": null, "biography": "", "public_name": "uwap and profpatsch", "guid": "b3dbe514-3034-5795-8ae6-7fcfc0ccead1", "url": "https://talks.mrmcd.net/2017/speaker/VHFFKB/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/WTYCHD/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/WTYCHD/", "attachments": []}], "Baumschule": [{"guid": "0295c030-bcfb-57b1-81a5-7f3c1bc8f7e5", "code": "FV73CL", "id": 37, "logo": null, "date": "2017-09-02T13:00:00+02:00", "start": "13:00", "duration": "01:30", "room": "Baumschule", "slug": "2017-37-ccc-regiotreffen", "url": "https://talks.mrmcd.net/2017/talk/FV73CL/", "title": "CCC Regiotreffen", "subtitle": "", "track": null, "type": "Workshop", "language": "de", "abstract": "Treffen der Vertreter der verschiedenen lokalen Entit\u00e4ten.", "description": "The same procedure as every year", "recording_license": "", "do_not_record": true, "persons": [{"code": "8K3DXF", "name": "fxrh", "avatar": null, "biography": "", "public_name": "fxrh", "guid": "2a2a4f0c-bc29-5768-9c30-d05013ba5c8b", "url": "https://talks.mrmcd.net/2017/speaker/8K3DXF/"}, {"code": "SMW8WR", "name": "sva", "avatar": null, "biography": null, "public_name": "sva", "guid": "68879c18-ebe3-5b26-9765-da8f1bb92d7b", "url": "https://talks.mrmcd.net/2017/speaker/SMW8WR/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/FV73CL/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/FV73CL/", "attachments": []}, {"guid": "a91273fd-2233-54ce-937a-9a73f5da9bee", "code": "9GV3RC", "id": 27, "logo": null, "date": "2017-09-02T14:30:00+02:00", "start": "14:30", "duration": "04:00", "room": "Baumschule", "slug": "2017-27-pwning-for-beginners", "url": "https://talks.mrmcd.net/2017/talk/9GV3RC/", "title": "Pwning for Beginners", "subtitle": "", "track": null, "type": "Workshop", "language": "de", "abstract": "Du wolltest schon immer Binary Exploitation verstehen und endlich auch Pwning Challenges bei CTFs l\u00f6sen? Wir erkl\u00e4ren euch alle Grundlagen um Bufferoverflows zu verstehen und auszunutzen.", "description": "Der Workshop wird auf den Materialien (Aufgaben und Slides) eines Universit\u00e4tskurses basieren ( https://github.com/RPISEC/MBE ). Wir werden die VM mit den Aufgaben f\u00fcr euch lokal hosten.\r\n\r\nInhalte:\r\n- Kurzes Recap von x86/IA32 Assembler und Speicherlayout eines Prozesses\r\n- Bufferoverflows (Stack)\r\n- Grundlegender Shellcode\r\n- Grundlegende Mitigations (DEP und ASLR) und Bypasses (ROP)\r\n\r\nVoraussetzungen:\r\n- grundlegender Umgang mit der Linux Shell\r\n- relativ simplen C Code lesen und verstehen k\u00f6nnen\r\n- irgendeine M\u00f6glichkeit sich per SSH verbinden zu k\u00f6nnen\r\n- grundlegendes Verst\u00e4ndnis von Assembler\r\n\r\nEmpfohlen zum lokalen testen/arbeiten:\r\n- Linux System mit 32 Bit Support und\r\n-- gdb und peda https://github.com/longld/peda \r\n-- python2", "recording_license": "", "do_not_record": false, "persons": [{"code": "9WLKQ3", "name": "komasa", "avatar": null, "biography": "We are the Wizards of Dos CTF team from the Darmst\u00e4dter Hackerspace.", "public_name": "komasa", "guid": "b4173501-e234-5194-9859-34f12f4c887a", "url": "https://talks.mrmcd.net/2017/speaker/9WLKQ3/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/9GV3RC/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/9GV3RC/", "attachments": []}, {"guid": "e8bdac90-9159-5131-bf9d-20274494ce78", "code": "XAUTUV", "id": 43, "logo": null, "date": "2017-09-02T18:30:00+02:00", "start": "18:30", "duration": "02:00", "room": "Baumschule", "slug": "2017-43-cryptopartying-fur-cryptopartymacher-und-solche-die-es-noch-werden-wollen", "url": "https://talks.mrmcd.net/2017/talk/XAUTUV/", "title": "Cryptopartying f\u00fcr Cryptopartymacher (und solche, die es noch werden wollen)", "subtitle": "", "track": null, "type": "Workshop", "language": "de", "abstract": "Wissens- und Erfahrungsaustausch rund um Cryptoparties und verwandte Veranstaltungen.", "description": "Wer schon einmal eine Cryptoparty (oder eine \u00e4hnliche Veranstaltung) gemacht hat, oder es vielleicht noch tun will, wei\u00df, dass es hunderte verschiedene M\u00f6glichkeiten gibt, so etwas aufzuziehen, alle mit ihren ganz eigenen Vor- und Nachteilen. Es kann sich also durchaus lohnen, sich mal mit anderen zusammenzusetzen und \u00fcber bisherige Erfahrungen zu reden. Hier gibt es die M\u00f6glichkeit die K\u00f6pfe zusammenzustecken und genau das zu tun.", "recording_license": "", "do_not_record": true, "persons": [{"code": "GLH3FF", "name": "Pascaline", "avatar": null, "biography": "", "public_name": "Pascaline", "guid": "9e5d5926-24c7-5e89-b309-44b359a03cab", "url": "https://talks.mrmcd.net/2017/speaker/GLH3FF/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/XAUTUV/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/XAUTUV/", "attachments": []}, {"guid": "893436a5-e904-5f33-ba05-317186ed6086", "code": "XSSTVZ", "id": 4, "logo": null, "date": "2017-09-02T20:30:00+02:00", "start": "20:30", "duration": "01:00", "room": "Baumschule", "slug": "2017-4-dein-geographischer-fingerabdruck", "url": "https://talks.mrmcd.net/2017/talk/XSSTVZ/", "title": "Dein geographischer Fingerabdruck", "subtitle": "", "track": null, "type": "Workshop", "language": "de", "abstract": "Smartphones sammeln die Standortdaten ihrer Nutzer. Daraus lassen sich weitreichende Analysen ableiten. Stellt man sich die Standort-Historie eines Menschen auf einer Landkarte abgebildet vor, dann ist das Mobilit\u00e4tsmuster so individuell wie ein Fingerabdruck. \r\n\r\nWir wollen uns mit der Frage besch\u00e4ftigen, wie Standortdaten sicher unter dem Gesichtspunkt der Privatsph\u00e4re verwendet werden k\u00f6nnen. \r\n\r\nF\u00fcr manche Andwendungen, sind Standortdaten unverzichtbar. Zum Beispiel f\u00fcr eine Mitfahrb\u00f6rse ist es wichtig zu wissen, wo Fahrer und Mitfahrer sind. An diesem Beispiel wollen wir den aktuellen Stand der Technik und Wege in die Zukunft besprechen. \r\n\r\nMitwirkende sind dazu eingeladen, ein 5-min\u00fctiges Impuls-Statement vorzubereiten.\r\n\r\nNotizen https://hackmd.io/IYBgjAzAxgrAZgEwLQmgdiQFgKZWQTmDBiQgCYoQpyZYEIg=#", "description": "Standortdaten von Smartphone-Usern verraten sehr viel Pers\u00f6nliches. Wir wollen besprechen, wie diese Daten unter Wahrung der Privatsph\u00e4re genutzt werden k\u00f6nnen. Unser Denk-Beispiel ist eine Mitfahrb\u00f6rse, die Fahrer und Mitfahrer zusammen bringt.", "recording_license": "", "do_not_record": true, "persons": [{"code": "HTGS3R", "name": "Frank Gerhardt", "avatar": null, "biography": "Technik kann auch mal zu was gut sein.", "public_name": "Frank Gerhardt", "guid": "409c92ca-5505-514a-83b8-b25e905be282", "url": "https://talks.mrmcd.net/2017/speaker/HTGS3R/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/XSSTVZ/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/XSSTVZ/", "attachments": []}]}}, {"index": 3, "date": "2017-09-03", "day_start": "2017-09-03T04:00:00+02:00", "day_end": "2017-09-04T03:59:00+02:00", "rooms": {"Prachtgarten": [{"guid": "e2e794a6-40c1-5a67-abfd-57b135cf3169", "code": "JXHVSA", "id": 48, "logo": null, "date": "2017-09-03T12:00:00+02:00", "start": "12:00", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-48-der-mann-der-die-cia-erfand", "url": "https://talks.mrmcd.net/2017/talk/JXHVSA/", "title": "Der Mann, der die CIA erfand", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Biographischer Vortrag \u00fcber Allen Dulles, der Geheimdienste in den USA und in Deutschland pr\u00e4gte.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "TQBEKU", "name": "Markus Kompa", "avatar": null, "biography": null, "public_name": "Markus Kompa", "guid": "02f60dc2-838e-5836-802c-3610c2d79b5e", "url": "https://talks.mrmcd.net/2017/speaker/TQBEKU/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/JXHVSA/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/JXHVSA/", "attachments": []}, {"guid": "e42fbf5a-73bb-5202-882e-bf5ebb3a2dfe", "code": "E3LUDE", "id": 35, "logo": null, "date": "2017-09-03T13:00:00+02:00", "start": "13:00", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-35-attacking-the-kernel-with-non-control-data-attacks", "url": "https://talks.mrmcd.net/2017/talk/E3LUDE/", "title": "Attacking the Kernel with Non-control Data Attacks", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "In this talk, an overview of memory attacks will be presented. Particularly, non-control data attacks will be discussed and examples provided. In contrast to traditional attacks, non-control data attacks do not alter the control flow of the kernel but rather manipulate data structures, which makes it both hard to detect and to prevent.", "description": "As protection and detection mechanisms, such as code integrity validation (CIV) and control flow integrity (CFI), are increasingly advancing, traditional code corruption and code hijacking attacks become difficult. Consequently, other attack techniques emerge. One of those techniques attacks the integrity of the system without manipulating the control-flow or the kernel's code segment and therefore circumvents current defense mechanisms. Such attacks are referred to as non-control data or data-only attacks.", "recording_license": "", "do_not_record": false, "persons": [{"code": "XRPMAL", "name": "Tobias Mueller", "avatar": null, "biography": "Tobias is a German Free Software advocate, former member of the GNOME Foundation's Board of Directors, and Pythonista. He acquired a Masters degree in Security and Forensic computing from Dublin, is now working in the area of applied cryptography, and loves to build and break stuff. Especially making security systems usable and bringing them to the masses.", "public_name": "Tobias Mueller", "guid": "72b8833d-0058-5e18-a386-6f58819c43fe", "url": "https://talks.mrmcd.net/2017/speaker/XRPMAL/"}, {"code": "XWSJH3", "name": "Stefan Seefeldt", "avatar": null, "biography": "", "public_name": "Stefan Seefeldt", "guid": "dfa04984-a3a5-5fcf-b674-e9b2c9621990", "url": "https://talks.mrmcd.net/2017/speaker/XWSJH3/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/E3LUDE/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/E3LUDE/", "attachments": []}, {"guid": "62769a38-46e4-5307-873f-b10ba758b76d", "code": "DC9AG9", "id": 12, "logo": null, "date": "2017-09-03T14:00:00+02:00", "start": "14:00", "duration": "00:30", "room": "Prachtgarten", "slug": "2017-12-web-privacy-lustwandeln-im-trackergarten", "url": "https://talks.mrmcd.net/2017/talk/DC9AG9/", "title": "Web-Privacy: Lustwandeln im Trackergarten", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "", "description": "Die Flora und Fauna von Trackern und Werbefirmen auf Webseiten wird schon l\u00e4nger von interessierten Hobbyisten und professionellen Internet-Botanikern beobachtet. Dort dr\u00fcben sehen Sie zum Beispiel ein wundervolles Exemplar der Gattung Googlus Analytica, das seine Ausleger tief in der Webseite ihrer Krankenkasse verwurzelt hat, und dort vorne sehen Sie die vielen bunten Bl\u00fcten der diversen Internet-Werbefirmen, die auf Ihrer Nachrichtenseite wachsen und gedeihen. Und dort dr\u00fcben sehen Sie einen Schwarm zwitschernder Social-Media-Buttons \u2013 wie soll man da noch den \u00dcberblick behalten?\r\n\r\nIn diesem Vortrag m\u00f6chten wir unseren automatisierten Web-Scanner PrivacyScore vorstellen. PrivacyScore ist ein frei verf\u00fcgbares (GPLv3+) Werkzeug f\u00fcr interessierte Hobby-Botaniker*innen, das die Beobachtung diverser Gattungen dieser faszinierenden Kreaturen in der freien Wildbahn erm\u00f6glicht. W\u00e4hrend sich bislang viele darauf konzentrieren, den Trackern und Werbebannern durch hohe Z\u00e4une den Eintritt in ihren Garten zu verwehren, sind wir an ihrem nat\u00fcrlichen Lebensraum und der Artenvielfalt interessiert. Eine Auswahl m\u00f6glicher Forschungsfragen, die wir mit unserer Methodik beantworten k\u00f6nnen:\r\n\r\n* Welche Branchen bieten eine besonders reiche F\u00fclle an Werbenetzwerken und Trackern?\r\n* Welche G\u00e4rten sind mit TLS-Schl\u00f6ssern abgesichert, und wie hochqualitativ sind diese Schl\u00f6sser?\r\n* Und welche unserer Nachbarn haben vergessen, den Wildwuchs an Datenbank-Backups, PHPInfo-Seiten und Git-Repositories auf ihrer Webseite zu stutzen?\r\n\r\nWir sind vor allem an komparativen Analysen interessiert. Daher erm\u00f6glicht unser System L\u00e4ngs- und Querschnittstudien, um verschiedene Webseiten zu vergleichen. Wenn ihr euch also schon l\u00e4nger gefragt habt, welcher CCC-Erfa die am saubersten konfigurierte Webseite hat, oder welche deutsche Gro\u00dfstadt die wenigsten (oder meisten!) Tracker auf ihrer Webseite verwendet, habt ihr ab jetzt dazu die M\u00f6glichkeit. Und nat\u00fcrlich k\u00f6nnen unternehmungslustige Hobbybotaniker*innen das Projekt jederzeit erweitern \u2013 holt euch also gerne einen Ableger und beginnt eure eigene Zucht.\r\n\r\nPrivacyScore befindet sich momentan noch in Entwicklung, und viele Auswertungsfunktionen werden erst in den kommenden Monaten entstehen. Dieser Talk soll eine Einf\u00fchrung in den aktuellen Stand bieten und die M\u00f6glichkeiten aufzeigen, die das System bietet - von der pers\u00f6nlichen Neugierde bis hin zu Datenschutz-Aktivismus.\r\n\r\nLinks:\r\n\r\n* PrivacyScore.org\r\n* github.com/PrivacyScore/PrivacyScore", "recording_license": "", "do_not_record": false, "persons": [{"code": "CQWUPF", "name": "Malexmave", "avatar": null, "biography": "", "public_name": "Malexmave", "guid": "4b1a5d17-6c45-5722-9d8d-410065ebe323", "url": "https://talks.mrmcd.net/2017/speaker/CQWUPF/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/DC9AG9/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/DC9AG9/", "attachments": []}, {"guid": "09d67950-8f19-5755-821e-33e508b17de0", "code": "FFHJZL", "id": 113, "logo": null, "date": "2017-09-03T15:00:00+02:00", "start": "15:00", "duration": "00:50", "room": "Prachtgarten", "slug": "2017-113-lightning-talks-part-ii", "url": "https://talks.mrmcd.net/2017/talk/FFHJZL/", "title": "Lightning Talks (Part II)", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "", "description": "Ihr habt ein ein Thema, Projekt, eine Idee, einen Hack, sucht Teampartner f\u00fcr etwas oder wollt einfach nur etwas Kurioses, Am\u00fcsantes, \u2026 pr\u00e4sentieren, dabei aber keinen ganzen Vortragsslot f\u00fcllen? Dann kommt zu den Lightning Talks!\r\n\r\nBei einer kurzen Pr\u00e4sentation k\u00f6nnt ihr in 5 \u2013 10 Minuten vorstellen, was immer euch auf dem Herzen liegt. Das ganze l\u00e4uft nach dem first-come first-served Prinzip bis der komplette Vortragsslot gef\u00fcllt ist: Schickt eure Folien einfach bis kurz vor den Lightning Talks an `psy@darmstadt.ccc.de` oder bringt diese - vorbereitet zum Anschluss an einen VGA Beamer - auf eurem Laptop mit. Es gibt keine Deadline. Versucht nicht mehr als 10 Folien zu haben, euer Vortrag artet sonst erfahrungsgem\u00e4\u00df zu einer l\u00e4ngeren Pr\u00e4sentation aus. Vorzugsweise pr\u00e4sentieren wir die Folien von einem zentralen Laptop, damit das umst\u00f6pseln zwischen den Vortr\u00e4gen entf\u00e4llt. Falls ihr mit eigenem Laptop pr\u00e4sentieren wollt, ist das auch kein Problem, sagt psy aber bitte vorher Bescheid, damit er das einplanen kann.", "recording_license": "", "do_not_record": false, "persons": [], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/FFHJZL/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/FFHJZL/", "attachments": []}, {"guid": "44e547b8-2306-5df8-b624-f486212207a1", "code": "7NTTPU", "id": 109, "logo": null, "date": "2017-09-03T16:00:00+02:00", "start": "16:00", "duration": "00:30", "room": "Prachtgarten", "slug": "2017-109-closing", "url": "https://talks.mrmcd.net/2017/talk/7NTTPU/", "title": "Closing", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "SGCJZC", "name": "Unicorn", "avatar": "https://talks.mrmcd.net/media/avatars/unicornio_kkDFKRn.jpeg", "biography": null, "public_name": "Unicorn", "guid": "90e2ef76-fc85-5c6f-9d63-cc30e26712a9", "url": "https://talks.mrmcd.net/2017/speaker/SGCJZC/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/7NTTPU/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/7NTTPU/", "attachments": []}], "Ziergarten": [{"guid": "6aba1386-41dd-58f1-a890-aff372b4e676", "code": "RNJNXM", "id": 40, "logo": null, "date": "2017-09-03T12:00:00+02:00", "start": "12:00", "duration": "00:50", "room": "Ziergarten", "slug": "2017-40-a-low-level-view-at-the-lattice-ice40-hx1k-hx8k-fpga", "url": "https://talks.mrmcd.net/2017/talk/RNJNXM/", "title": "A low-level view at the Lattice iCE40 HX1K/HX8K FPGA", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "", "description": "With the introduction of the Yosys/arachne-pnr/IceStorm toolchain, the Lattice iCE40 FPGA has become a popular platform for hackers to take their first steps with FPGAs. However, the documentation available for the iCE40 FPGA is mostly addressed at people already familiar with FPGA design.\r\n\r\nThis talk gives an introduction to the architecture of the iCE40 FPGA, explaining the available primitives and the mechanisms to combine them to more complex behavior. It also covers some more advanced topics like the creating configurations by hand, how the configuration process works, and storing multiple configuration images on the flash and switching configurations at runtime.", "recording_license": "", "do_not_record": false, "persons": [{"code": "Z78XGL", "name": "Roland Lutz", "avatar": null, "biography": "", "public_name": "Roland Lutz", "guid": "d3fe5727-e5cc-5619-8dff-d3db5e072b5d", "url": "https://talks.mrmcd.net/2017/speaker/Z78XGL/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/RNJNXM/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/RNJNXM/", "attachments": []}, {"guid": "997818df-d125-5b35-b9d6-485ca97c2e95", "code": "HYYQG3", "id": 15, "logo": null, "date": "2017-09-03T13:00:00+02:00", "start": "13:00", "duration": "00:50", "room": "Ziergarten", "slug": "2017-15-un-professionelle-unkrautvernichtung-ransomware-vs-antivirus", "url": "https://talks.mrmcd.net/2017/talk/HYYQG3/", "title": "(Un)professionelle Unkrautvernichtung: Ransomware vs. Antivirus", "subtitle": "", "track": null, "type": "Talk", "language": "de", "abstract": "Ransomware stellt nach wie vor eine gro\u00dfe Bedrohung f\u00fcr die IT-Landschaft dar. Dieser Vortrag zeigt Motivation, Funktionsweise und (mehr oder weniger schlechte) M\u00f6glichkeiten, sich vor Ransomware zu sch\u00fctzen. Zum Beispiel wird in einem kleinen Experiment getestet, wie sich Ransomware vor Virenscannern verstecken l\u00e4sst.", "description": "Seit kurzem geistert wieder eine Bedrohung durch die Medien: Ransomware. Es handelt sich dabei um Malware, die eine L\u00f6segeldzahlung durch die Sperre des Bildschirms oder die Verschl\u00fcsselung von Dateien erpressen will.\r\n\r\nDieser Vortrag wird die Motivation und Profitabilit\u00e4t hinter Ransomware beleuchten, seine Funktionsweise demonstrieren und Schutzm\u00f6glichkeiten aufzeigen. Mit dabei:\r\n\r\n- Finde die Sicherheitsl\u00fccke\r\n- Live-Demo\r\n- Ordentlich Raum f\u00fcr AV-Bashing\r\n\r\nDie besten Vorkehrungen gegen Ransomware, n\u00e4mlich ein gesundes Sicherheitsbewusstsein und vor allem Backups, haben die wenigsten User. Die landl\u00e4ufige Meinung, Virenscanner w\u00fcrden die Bedrohung schon beseitigen, erweist sich bei genauerem Hinsehen aber als falsch: Wie leicht Virenscanner zu t\u00e4uschen sind, zeigt ein kleines Experiment im Rahmen dieses Vortrags.\r\n\r\nBlogeintrag zum Talk: https://codefoundry.de/security/2017/09/03/ransomware-vs-antivirus.html", "recording_license": "", "do_not_record": false, "persons": [{"code": "CGPLAG", "name": "Franz Wimmer", "avatar": null, "biography": "Student, .NET developer and IT security enthusiast. \r\nSoon-to-be #cloudnativenerd.\r\nOn a completely unrelated note, I love climbing and skiing. Sometimes I'm funny.\r\n\r\n// Twitter: @codefoundryDE // Blog: https://codefoundry.de/blog.html //", "public_name": "Franz Wimmer", "guid": "cf12cbcd-d907-5615-839d-79a155db18df", "url": "https://talks.mrmcd.net/2017/speaker/CGPLAG/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/HYYQG3/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/HYYQG3/", "attachments": []}], "Baumschule": [{"guid": "c81782e2-b298-59d3-9c44-24c549da5688", "code": "SGKFWB", "id": 30, "logo": null, "date": "2017-09-03T12:00:00+02:00", "start": "12:00", "duration": "02:00", "room": "Baumschule", "slug": "2017-30-data-analysis-with-python", "url": "https://talks.mrmcd.net/2017/talk/SGKFWB/", "title": "Data Analysis with Python", "subtitle": "", "track": null, "type": "Workshop", "language": "en", "abstract": "This workshop intents do enable the audience to use Python to analyse Data out there. We will analyse an exemplary dataset using the Python Scientific Library as well as Python's statistics toolset Pandas.\r\n\r\nParticipants should be fluent in Python (version 3, we will not consider Python 2 in this workshop).\r\nKnowledge in the aforementioned libraries is not necessary and will be demonstrated in the workshop.", "description": "This workshop intents do enable the audience to use Python to analyse Data out there. We will analyse an exemplary dataset using the Python Scientific Library as well as Python's statistics toolset Pandas.\r\n\r\nParticipants should be fluent in Python (version 3, we will not consider Python 2 in this workshop).\r\nKnowledge in the aforementioned libraries is not necessary and will be demonstrated in the workshop.", "recording_license": "", "do_not_record": false, "persons": [{"code": "TUQ7AW", "name": "cherti", "avatar": null, "biography": "", "public_name": "cherti", "guid": "a9ea9b8b-4fd0-50c1-abb0-e2c0b0c5cc2e", "url": "https://talks.mrmcd.net/2017/speaker/TUQ7AW/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/SGKFWB/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/SGKFWB/", "attachments": []}, {"guid": "232f3b49-dcc6-5606-99cd-12c4279ac4e2", "code": "W898LF", "id": 16, "logo": null, "date": "2017-09-03T14:00:00+02:00", "start": "14:00", "duration": "01:00", "room": "Baumschule", "slug": "2017-16-freifunk-regiotreffen", "url": "https://talks.mrmcd.net/2017/talk/W898LF/", "title": "Freifunk-Regiotreffen", "subtitle": "", "track": null, "type": "Workshop", "language": "de", "abstract": "Auch dieses Jahr wollen sich die auf den MRMCD anwesenden Freifunker wieder \u00fcber Probleme, Erfahrungen und zuk\u00fcnftige Entwicklungen austauschen.", "description": "Auch dieses Jahr wollen sich die auf den MRMCD anwesenden Freifunker wieder \u00fcber Probleme, Erfahrungen und zuk\u00fcnftige Entwicklungen austauschen.", "recording_license": "", "do_not_record": true, "persons": [{"code": "P98W79", "name": "Leah", "avatar": null, "biography": "", "public_name": "Leah", "guid": "c2a7ffd8-1923-5f6a-b561-3662d57279d0", "url": "https://talks.mrmcd.net/2017/speaker/P98W79/"}], "links": [], "feedback_url": "https://talks.mrmcd.net/2017/talk/W898LF/feedback/", "origin_url": "https://talks.mrmcd.net/2017/talk/W898LF/", "attachments": []}]}}]}}}