Earlier quoted context omitted.
In my dayjob I often run the tech for events, nearly once a week. In my experience known recording/publication tend to make discussions worse and not better than closed room discussions — especially if the topic is controversial. I'd love it if that wasn't the case, but that is not what I observed. That is because with published recordings it often becomes purely performative, where people aren't actually interested…
"the tendency speaks for the closed room, especially with touchy subjects." I do agree to that I just would have prefered a closed room debate with him invited to adress those issues, not the cancel mentality and then speaking in a close room about him.
39th Chaos Communication Congress Videos
111–120 of 121 posts
Re: 39th Chaos Communication Congress Videos
#112Earlier quoted context omitted.
Thank you, and happy to answer questions on that, it's been a crazy time! Maybe of relevance to non-security people here: 1. Most of it is about AI investigating event data in general, not just SOC/IR: cyber, intel, fraud, SRE, and we're even messing with customer 360 & social media data 2. For anyone into vibes coding or building agents, I encourage jumping to the "self-writing AI" section where we're finding we are…
Hey, I just saw your talk and for someone who's not really up to date with the latest AI developments it's eye opening what you got going in SoC investigations. I personally work as pentester and we're still doing a lot of manual work with AI simply as a better version of Google, but seeing the BOTS presentation I feel we can do better. Do you have any idea if anyone's working on something similar to Louie in pentest…
Companies like trail of bits are more interesting to me here, because they historically do deeper analysis. A place to look there is the darpa cc x ai (?) competition that finished at blackhat last year.
If in the US, we may be looking for a pen testing partner on an upcoming agentic AI contract, so feel free to msg - Leo @ graphistry
Re: 39th Chaos Communication Congress Videos
#113Earlier quoted context omitted.
Hey, I just saw your talk and for someone who's not really up to date with the latest AI developments it's eye opening what you got going in SoC investigations. I personally work as pentester and we're still doing a lot of manual work with AI simply as a better version of Google, but seeing the BOTS presentation I feel we can do better. Do you have any idea if anyone's working on something similar to Louie in pentest…
Companies like xbow and horizon are using agents that talk to symbolic tools to automate more red teaming flows for different domains, so very much so. As shown in my talk, modern models are quite capable, and they aren't doing investigation-level scenario depth, more like scans, so seems like becoming the new expectation that everyone can & will do. Companies like trail of bits are more interesting to me here, becau…
Re: 39th Chaos Communication Congress Videos
#114Where were people's favourite lectures? I attended 7 talks. My favourite talk by far was hacking the GPG. Brilliant, really: https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical... The "In-house electronics manufacturing from scratch" was a very inspiring talk: https://media.ccc.de/v/39c3-in-house-electronics-manufacturi... The rest were less good for me personally. Either over-dramatic and shallow (with a se…
Re: 39th Chaos Communication Congress Videos
#115Re: 39th Chaos Communication Congress Videos
#116Earlier quoted context omitted.
Linus said 'many eyes make all bugs shallow', but compared to Linux, there are not many eyes looking at FreeBSD.
That "many eyes" theory has failed us many times. For example, OpenSSL's heartbleed or the recent React RCEs.
Re: 39th Chaos Communication Congress Videos
#117Earlier quoted context omitted.
The biggest problem with ccc is that: 0. They are releasing too few tickets. 1. They are releasing the tickets too late. 3. Still not able to pay with card? I live somewhat nearby, but can’t book or plan a visit because of this. I appreciate that they are releasing videos shortly afterwards though.
There wasn't even enough assembly space this year, it was bursting at the seams. Sadly I think CCH is just too small for this conference. There's a much bigger conference space space down the street, but the rumor is that going back to Leipzig (where it was held during the renovation of CCH) is back in discussion. That place was too big though.
Re: 39th Chaos Communication Congress Videos
#118Earlier quoted context omitted.
Somehow it did not get much attention, but Signal president Meredith Whittaker (together with Udbhav Tiwari) spoke about the risks and threats from AI-enabled systems. AI Agent, AI Spy https://media.ccc.de/v/39c3-ai-agent-ai-spy I also found the talk about Asahi interesting, both from a technical standpoint but also as a nice update what the current status is. Asahi Linux - Porting Linux to Apple Silicon https://medi…
The Asahi talk was good, but the video switched waaaayyyyy too often between slide only -> slide + speaker -> stage -> only speaker. Made me kinda uncomfortable.
Re: 39th Chaos Communication Congress Videos
#119Earlier quoted context omitted.
The biggest problem with ccc is that: 0. They are releasing too few tickets. 1. They are releasing the tickets too late. 3. Still not able to pay with card? I live somewhat nearby, but can’t book or plan a visit because of this. I appreciate that they are releasing videos shortly afterwards though.
There wasn't even enough assembly space this year, it was bursting at the seams. Sadly I think CCH is just too small for this conference. There's a much bigger conference space space down the street, but the rumor is that going back to Leipzig (where it was held during the renovation of CCH) is back in discussion. That place was too big though.
Re: 39th Chaos Communication Congress Videos
#120It's a strange mix of very good tech talks and left-wing extremism. I'm looking forward to watching "Who cares about the Baltic Jammer?" and "The art of text (rendering)" as examples of the former. An example of the latter is "selbstverständlich antifaschistisch!"
So how is anti-fascism left-wing extremism? Fighting fascism is required of every person who wants to keep a working democracy, regardless of your fiscal policy ideas or how egoistical you want your government to represent you. Democracy is what allows you to remove bad leaders/parties without having to fight a bloody revolution. Fascism yearns to remove that possibility. Hence anti-fascism being needed. That being s…