Live data from Hacker News

39th Chaos Communication Congress Videos

media.ccc.de

111–120 of 121 posts

Re: 39th Chaos Communication Congress Videos

#111
post #103
post #98

Earlier quoted context omitted.

In my dayjob I often run the tech for events, nearly once a week. In my experience known recording/publication tend to make discussions worse and not better than closed room discussions — especially if the topic is controversial. I'd love it if that wasn't the case, but that is not what I observed. That is because with published recordings it often becomes purely performative, where people aren't actually interested…

"the tendency speaks for the closed room, especially with touchy subjects." I do agree to that I just would have prefered a closed room debate with him invited to adress those issues, not the cancel mentality and then speaking in a close room about him.

Ah okay, maybe I don't know enough a out how it went down

Re: 39th Chaos Communication Congress Videos

#112
post #110

Earlier quoted context omitted.

Thank you, and happy to answer questions on that, it's been a crazy time! Maybe of relevance to non-security people here: 1. Most of it is about AI investigating event data in general, not just SOC/IR: cyber, intel, fraud, SRE, and we're even messing with customer 360 & social media data 2. For anyone into vibes coding or building agents, I encourage jumping to the "self-writing AI" section where we're finding we are…

Hey, I just saw your talk and for someone who's not really up to date with the latest AI developments it's eye opening what you got going in SoC investigations. I personally work as pentester and we're still doing a lot of manual work with AI simply as a better version of Google, but seeing the BOTS presentation I feel we can do better. Do you have any idea if anyone's working on something similar to Louie in pentest…

Companies like xbow and horizon are using agents that talk to symbolic tools to automate more red teaming flows for different domains, so very much so. As shown in my talk, modern models are quite capable, and they aren't doing investigation-level scenario depth, more like scans, so seems like becoming the new expectation that everyone can & will do.

Companies like trail of bits are more interesting to me here, because they historically do deeper analysis. A place to look there is the darpa cc x ai (?) competition that finished at blackhat last year.

If in the US, we may be looking for a pen testing partner on an upcoming agentic AI contract, so feel free to msg - Leo @ graphistry

Re: 39th Chaos Communication Congress Videos

#113
post #110

Earlier quoted context omitted.

Hey, I just saw your talk and for someone who's not really up to date with the latest AI developments it's eye opening what you got going in SoC investigations. I personally work as pentester and we're still doing a lot of manual work with AI simply as a better version of Google, but seeing the BOTS presentation I feel we can do better. Do you have any idea if anyone's working on something similar to Louie in pentest…

Companies like xbow and horizon are using agents that talk to symbolic tools to automate more red teaming flows for different domains, so very much so. As shown in my talk, modern models are quite capable, and they aren't doing investigation-level scenario depth, more like scans, so seems like becoming the new expectation that everyone can & will do. Companies like trail of bits are more interesting to me here, becau…

Thanks for the answers! Will look into this some more. I'm not based in the US I'm afraid but thanks for mentioning it.

Re: 39th Chaos Communication Congress Videos

#114
post #3

Where were people's favourite lectures? I attended 7 talks. My favourite talk by far was hacking the GPG. Brilliant, really: https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical... The "In-house electronics manufacturing from scratch" was a very inspiring talk: https://media.ccc.de/v/39c3-in-house-electronics-manufacturi... The rest were less good for me personally. Either over-dramatic and shallow (with a se…

The WhiteDate talk was pretty cool!

Re: 39th Chaos Communication Congress Videos

#116

Earlier quoted context omitted.

Linus said 'many eyes make all bugs shallow', but compared to Linux, there are not many eyes looking at FreeBSD.

That "many eyes" theory has failed us many times. For example, OpenSSL's heartbleed or the recent React RCEs.

”Most bugs are shallow” is more like it. One could also argue about the number of eyes actually looking at certain parts.

Re: 39th Chaos Communication Congress Videos

#117
post #109

Earlier quoted context omitted.

The biggest problem with ccc is that: 0. They are releasing too few tickets. 1. They are releasing the tickets too late. 3. Still not able to pay with card? I live somewhat nearby, but can’t book or plan a visit because of this. I appreciate that they are releasing videos shortly afterwards though.

There wasn't even enough assembly space this year, it was bursting at the seams. Sadly I think CCH is just too small for this conference. There's a much bigger conference space space down the street, but the rumor is that going back to Leipzig (where it was held during the renovation of CCH) is back in discussion. That place was too big though.

I liked the roominess of Leipzig once I'd gotten used to it. The central "hallway" looked cool with all the decoration.

Re: 39th Chaos Communication Congress Videos

#118

Earlier quoted context omitted.

Somehow it did not get much attention, but Signal president Meredith Whittaker (together with Udbhav Tiwari) spoke about the risks and threats from AI-enabled systems. AI Agent, AI Spy https://media.ccc.de/v/39c3-ai-agent-ai-spy I also found the talk about Asahi interesting, both from a technical standpoint but also as a nice update what the current status is. Asahi Linux - Porting Linux to Apple Silicon https://medi…

The Asahi talk was good, but the video switched waaaayyyyy too often between slide only -> slide + speaker -> stage -> only speaker. Made me kinda uncomfortable.

Complain to c3voc, specifically the video mixing! Without feedback like yours they won't know what's best.

Re: 39th Chaos Communication Congress Videos

#119
post #109

Earlier quoted context omitted.

The biggest problem with ccc is that: 0. They are releasing too few tickets. 1. They are releasing the tickets too late. 3. Still not able to pay with card? I live somewhat nearby, but can’t book or plan a visit because of this. I appreciate that they are releasing videos shortly afterwards though.

There wasn't even enough assembly space this year, it was bursting at the seams. Sadly I think CCH is just too small for this conference. There's a much bigger conference space space down the street, but the rumor is that going back to Leipzig (where it was held during the renovation of CCH) is back in discussion. That place was too big though.

The rumor about going elsewhere is indeed going strong.

Re: 39th Chaos Communication Congress Videos

#120
post #96

It's a strange mix of very good tech talks and left-wing extremism. I'm looking forward to watching "Who cares about the Baltic Jammer?" and "The art of text (rendering)" as examples of the former. An example of the latter is "selbstverständlich antifaschistisch!"

So how is anti-fascism left-wing extremism? Fighting fascism is required of every person who wants to keep a working democracy, regardless of your fiscal policy ideas or how egoistical you want your government to represent you. Democracy is what allows you to remove bad leaders/parties without having to fight a bloody revolution. Fascism yearns to remove that possibility. Hence anti-fascism being needed. That being s…

This "anti-fascism" talk sounds all nice and noble. But we all know that actual left-wing extremists have taken over the term now and most members are terrorist-adjacent. The irony is that antifa and other such "anti-fascists" are way more fascistic than their hypothetical and currently non-existent "fascists".
Post reply on HN