uk: Комп'ютерні науки

description: Photoresists are one of the essential ingredients for chip manufacturing and micro/nano engineering. We will show how we’re using them in a DIY Electron Beam Lithography set-up and how you’re able to cook your own cheap resists and mix your own developers. Resists? What's that? What are their applications How does it work (types (positive/negative), chemistry, proximity effect, dosage etc) EBL? What's that? How does it work Pros & cons: comparison between EBL (slow) photolithography (fast) Which resist can I use for EBL DIY cooking of PMMA based resists Comparison of different solvents Composition of different developers Comparison of different developers Applications Usage as a mask Usage as a structural dielectric material ...(?) The EBL exposure process simple SEM retrofitted with an EBL controller The common file formats (GDSII & OASIS) Scan-Gen: how to generate the proper curves for the exposure Hardware: off-the-shelf embedded modules like the RedPitaya Generation of different filling curve styles, calibration, compensation of the proximity effect, correction of the SEMs intrinsic parameters, dosage! Fiducial detection and alignment for multi-pass/multi-layer processes Stuff comes together walk through the complete process along a simple example More Examples Thanks & Credits Q & A

uk: вхід без авторизації

name: I could not resist: A brief introduction  to making and using cheap EBL resists.


Climate Tipping Points

Stefan Rahmstorf

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: Politicians, economists and even some natural scientists have tended to assume that tipping points in the Earth system — such as the loss of the Amazon rainforest or the West Antarctic ice sheet — are of low probability and little understood. Yet evidence is mounting that these events could be more likely than was thought, have high impacts and are interconnected across different biophysical systems, potentially committing the world to long-term irreversible changes. This talk summarizes evidence on the threat of exceeding tipping points and explores the effects of such large-scale changes, how quickly they might unfold and whether we still have any control over them. The Intergovernmental Panel on Climate Change (IPCC) introduced the idea of tipping points two decades ago. At that time, these ‘large-scale discontinuities’ in the climate system were considered likely only if global warming exceeded 5 °C above pre-industrial levels. Information summarized in the two most recent IPCC Special Reports (published in 2018 and in September 2019) suggests that tipping points could be exceeded even between 1 and 2 °C of warming (see ‘Too close for comfort’). If current national pledges to reduce greenhouse-gas emissions are implemented — and that’s a big ‘if’ — they are likely to result in at least 3 °C of global warming. This is despite the goal of the 2015 Paris agreement to limit warming to well below 2 °C. Some economists, assuming that climate tipping points are of very low probability (even if they would be catastrophic), have suggested that 3 °C warming is optimal from a cost–benefit perspective. However, if tipping points are looking more likely, then the ‘optimal policy’ recommendation of simple cost–benefit climate-economy models aligns with those of the recent IPCC report. In other words, warming must be limited to 1.5 °C. This requires an emergency response. In our view, the clearest emergency would be if we were approaching a global cascade of tipping points that led to a new, less habitable, ‘hothouse’ climate state. Interactions could happen through ocean and atmospheric circulation or through feedbacks that increase greenhouse-gas levels and global temperature. Alternatively, strong cloud feedbacks could cause a global tipping point. This talk will give an overview on how these different scenarios might play out, how likely they are, and what we need to do to avoid them.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

Chaos Computer Club e.V.

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: How secure is the interface between baseband chips and iOS? While this interface should protect against escalations from the baseband into operating system components, its implementation is full of bugs. Fuzzing this interface is not only relevant to security, but also results in various funny effects, since the iPhone looses information about its identity and location, and eventually ends up in a state with a few thousand unread SMS that can no longer be deleted. The baseband chip is the phone within a smartphone. While users might disable Bluetooth or not join untrusted Wi-Fis to increase security, mobile data and phone calls are always on. Some baseband features remain enabled even without an active data pass or SIM card installed. Thus, baseband chips are a popular target for Remote Code Execution (RCE) attacks. Launched over-the-air, they do not leave any trace on intermediate servers. With recently published tools, emulating and fuzzing baseband firmware has become accessible and gained a lot of attention by security researchers. Yet, a critical part of an exploit chain remains escalating from the baseband chip into the operating system. An attacker with code execution in the baseband chip could modify network traffic and escalate with a Web browser exploit. However, wireless communication is already susceptible to manipulation without a baseband exploit due to missing user data integrity protection, as shown by the IMP4GT attacks on LTE. Moreover, network traffic manipulation still requires the attacker to wait until their target creates traffic in the context of a Web browser. More stealthy attacks can be achieved via baseband activity that does not require any user interaction, such as retrieving information about nearby base stations. On an iPhone, the interface forwarding this information comes in two variants for Intel and Qualcomm baseband chips. Both interfaces interact with CommCenter, which is the phone component of the iPhone that parses and forwards phone calls, SMS, and more. This talk demonstrates how to fuzz these interfaces as well as various challenges and solutions in fuzzing these. The baseband interface is such an integral part of iOS that fuzzing results are not limited to finding issues within CommCenter but also led to discovery of bugs in various daemons connecting to it. Some of these issues might also be triggered by a rouge base station, though, fuzzing the baseband interface locally results in higher performance and more control. Fuzzing the baseband interface demonstrates fuzzing in a way that is easy to understand even for those who are not familiar with security research. The iPhone under test receives SMS so fast that it will not finish playingthe Dimm notification sound before the next SMS arrives, and, thus, this actually sounds like D-d-d-di-di-d-d-di-d-di-d-di-d-dimm! The sound effect when the audio controller hangs up is also quite fun. Exposure notifications are no longer available due to the location change, since the iPhone uses baseband information to determine its region. And due to all the confusion about its identity, it regularly asks for activation. Besides security analysis, understanding the baseband interface means that it can also be controlled on jailbroken iPhones. Moreover, passive observations are possible on non-jailbroken devices with a baseband debug profile. This opens up these devices for new wireless research opportunities.

uk: вхід без авторизації

name: Fuzzing the phone in the iPhone: D-d-d-di-di-d-d-di-d-di-d-di-d-dimm!


uk: Комп'ютерні науки

description: To stop the climate crisis the world needs to become climate neutral. But while renewables have made great progress, the hard challenges still lie ahead. In some sectors decarbonized technologies aren't even available - and a future zero-emission economy will require staggering amounts of electricity. Solar panels and wind turbines can replace coal power plants, and electric cars allow driving without oil. But if we want to evade the climate crisis we need to get rid of emissions everywhere. Sectors like steel, cement, petrochemicals, and aviation are much more challenging to decarbonize. The solution usually proposed is to either directly or indirectly move everything to electricity. However, the amount of electricity required to do this is many times the amount of electricity produced worldwide today. Some sectors cannot be electrified and will probably require carbon capture technology. And in the future we may need to remove greenhouse gases from the atmosphere, which will require even more electricity. The talk will give an overview of the challenges ahead on the way to climate neutrality - and why we will need much more electricity than most people realize.

uk: вхід без авторизації

name: The Challenges of Decarbonizing Everything


uk: Комп'ютерні науки

description: Nach dem Aufschrei um Artikel 13 (jetzt 17) der Urheberrechtsreform wurde es verdächtig still um die netzpolitischen Vorhaben aus der Feder der EU. Nun bedrohen Uploadfilter in der Gesetzesnovelle TERREG (Verordnung zur Verhinderung von terroristischen Inhalten) sogar journalistische Inhalte. Wenn selbst die Sonderberichterstatterinnen der UN ihre Bedenken mehrfach äußern müssen, sollten wir uns als Gesellschaft am Diskurs beteiligen. Denn auch mit dem Ratsentwurf zur Ende-zu-Ende-Verschlüsselung kommen weitere Grundrechtseingriffe auf die Bürger und Nutzer zu. Der Einbau von Hintertüren in unsere private Kommunikation bedeutet in der Praxis ein Verschlüsselungsverbot. Es kann nicht sein, dass die Zivilgesellschaft regelmäßig gefordert ist, vor den EUGh zu ziehen, um für den Erhalt ihrer Grundrechte einzustehen. Und dennoch: Digitale und dezentrale Proteste können mehr Einfluss nehmen als wir denken. Demokratie lebt nur durch die aktive Beteiligung. Wir alle müssen als Bürger unsere Verantwortung annehmen. Alles in allem scheint es die Aufgabe unserer Generation zu sein, unsere digitalen Freiheiten zu verteidigen. SaveTheInternet ist eine Graswurzelbewegung zu digitalen Freiheitsrechten. Welche Formen des Protestes und der Mitgestaltung sind im digitalen und dezentralen möglich? Ein Erfahrungsbericht aus dem digitalen Protest und Aufruf zum Einmischen. Ein Podcast von und mit Quallini, MissErdbeerfeld und Ethno aus dem Orgateam von SaveTheInterent. Gewachsen aus dem Protest gegen die Uploadfilter in der Urheberrrechtsreform sind wir nun dabei, einen Blick auf die kommenden Gesetzesvorhaben zu werfen. Ein kurzer Abriss zu den Themen: SaveTheInterent und der der Wirkung von Protesten, Urheberrecht, TERREG, E2EE, Hassrede und dem Digital Service Act, sowie die große Frage: Was kannst du tun?

@language: de

uk: вхід без авторизації

name: Netzpolitische Vollkatastrophen: TERREG und Verschlüsselungsverbot - Was tun?


uk: Комп'ютерні науки

description: Die Polizei legitimiert Videoüberwachung mit dem Versprechen von Objektivität und strikter Rechtsdetermination. Im Vortrag wird sie stattdessen als kontingenter Prozess der aktiven Konstruktion von Evidenz analysiert. Dargestellt wird der PROZESS der Videoüberwachung auf Demonstrationen auf basis empirischer Forschungen. Die Polizei legitimiert Videoüberwachung mit dem Versprechen von Objektivität und strikter Rechtsdetermination. Im Vortrag wird sie stattdessen als kontingenter Prozess der aktiven Konstruktion von Evidenz analysiert. Er besteht aus einer Abfolge von Entscheidungen, die in drei Grundphasen ablaufen: von der (a) Potenzialbestimmung über die (b) polizeilich orientierte Durchführung zur (c) staatsanwaltschaftlich orientierten und auf Verurteilung abzielenden Fixierung der Ergebnisse in der Nachbereitungsphase. Die Breite der polizeilichen Handlungsoptionen bis hin zur massiven Manipulation kann als Ausdruck soziologischen Ermessens begriffen werden, in welchem die polizeiliche Definitionsmacht gründet. Insbesondere die beteiligte Technik ermöglicht, dass die bei jedem Teilschritt bestehende Kontingenz (alternative Entscheidungsoptionen und Entwicklungspfade) im weiteren Verlauf unsichtbar gemacht wird. dies geschieht mittels technikbasierter Abstraktioenn und Objektivationen, die ihre Zustandekommen udn ihre Kontextbedingungen unsichtbar machen. Das Recht erweist sich in dieser Definitionsmachtkette als nur ein Handlungsmotiv unter vielen, die vielbeschworene "Rechtsdeterminiertheit" des Polizeihandelns hingegen erweist sich als (notwendige) Fiktion, insbesondere, wo die Polizei in Konfliktlagen zum Konfliktbeteiligten wird.

uk: вхід без авторизації

name: Videoüberwachung von Demonstrationen und die Definitionsmacht der Polizei.: Zwischen Objektivitätsfiktion und selektiver Sanktionierung


uk: Комп'ютерні науки

description: Since 2013 the Free Software Foundation Europe has been fighting for the right users have to choose and use their own routers and modems. After the successful for net neutrality in Europe in 2015, users in Europe have the right to freely choose routers and modems to access the Internet. Router Freedom is the standard, empowering users to control their devices with clear advantages for security, privacy and ecological footprint. Now, challenges on national implementation of the European rules will put this right under risk. In parallel new demands are being posed against commercial practices involving software that is sold with hardware by default, for instance operating system in laptops, browsers and app stores. The talk will provide an overview on the recent successes for router freedom and the legal challenges against net neutrality in Europe.

uk: вхід без авторизації

name: Net neutrality 2.0. Router Freedom and device neutrality and in Europe


uk: Комп'ютерні науки

description: Der Vortrag analysiert die aktuellen FOSS-Initiativen der Regierungen in Deutschland und der EU und gibt einen Überblick über die Motivationen und handelnden Personen. Nach Jahren des Stillstands hat Deutschland seit Ende 2019 mehrere Initiativen zur Förderung von FOSS gestartet. Gaia-X, die Corona-App, das Onlinezugangsgesetz und die elektronische Patientenakte fordern und forcieren Open Source in der öffentlichen Verwaltung und im Gesundheitswesen. Die Initiativen werden nicht nur Technologien, sondern auch Gesetze verändern, um "Public Money - Public Code" zu übernehmen. Was ist schon da, was fehlt noch? Was sind die Beweggründe? Wer sind die Akteure? Welche Konflikte sind zu erwarten?

uk: вхід без авторизації

name: Open-Source-Initiativen der deutschen und europäischen Regierungen: Digitale Souveränität in Theorie und Implementierung


uk: Комп'ютерні науки

description: *Rallying event and community organizers in Berlin to use* Mobilizon*, a federated, free software, and privacy-friendly alternative to Facebook Events.* Facebook Events dominates online event promotion ... even within the iconoclastic scene of Berlin. We seek to rally artists, clubs, and event organizers in Berlin (and elsewhere) to adopt a new, decentralized and federated, free software alternative to Facebook: *Mobilizon* [1]. In our talk we present the technical and political/social aspects of *Mobilizon* and call on participants to organize with us in order to: - register on *Mobilizon*, try out and post (or cross-post) events on the service, - provide assistance in hosting and maintaining a *Mobilizon* instance to introduce the service to the Berlin scene specifically, - contribute to the project by coding a custom UX with a Berlin identity, - draft a code of conduct for our community, and - host further instances to federate with the Fediverse. Disclaimer: The talk will be recorded as part of a documentary for ARTE dealing with online self-defense and free software. Many people feel held hostage by Facebook. One reason often mentioned is Facebook Events and the network effect within Facebook's walled garden. Event and community organizers in Berlin – many of whom are critical of Facebook – have been discussing reclaiming club culture from commercialization for several years now [2]. These cultural influencers have great power to change mentalities and behavior. Although alternatives to Facebook Events exist, none enables local communities to interconnect on a global scale on their own terms. Until now. *Mobilizon*, released in October 2020, is a decentralized and federated service using the ActivityPub protocol (a standard of the W3C). It allows people to find, create, and organize events. *Mobilizon* is developed by the NGO Framasoft [3] (‘Degooglify’ project, PeerTube) and is released under a free software license (GNU AGPLv3). The unique federated architecture prevents monopolies, offers users a diversity of hosting terms of service, and allows communities to regain control over their privacy [4]. [1] https://joinmobilizon.org/en/ [2] https://media.ccc.de/v/fusion19-8553-reclaim_club_culture [3] https://framasoft.org/en/ [4] https://peer.tube/videos/watch/d9bd2ee9-b7a4-44e3-8d65-61badd15c6e6

uk: вхід без авторизації

name: Berlin, let's take back control of our events!: Rallying event and community organizers in Berlin to use Mobilizon


uk: Комп'ютерні науки

description: Einsatz für das CADUS Emergency Medical Team (EMT) auf Lesbos! Und im vollen Lauf wird immer noch daran geschraubt. Wir berichten von unserer medizinischen Hilfe im Camp Kara Tepe 2, das nach dem Brand von Moria hastig aufgebaut wurde. Im Spannungsfeld zwischen übereifrigen internationalen Akteuren der humanitären Hilfe und eklatantem Mangel der Infrastruktur des Camps ist CADUS das erste mal nach dem EMT-Standard der WHO in den Einsatz gegangen. Wir erzählen euch, was alles zu einem EMT gehört, woran wir noch bauen und womit wir schon arbeiten. Dabei bekommt ihr einen Einblick in die Höhen und Tiefen der humanitären Hilfe, und in die aktuelle Situation im Camp auf Lesbos.

uk: вхід без авторизації

name: How to build an EMT - Aufbau und Einsatz des CADUS Emergency Medical Teams


uk: Комп'ютерні науки

description: Das Tor-Netzwerk ist ein essenzielles Werkzeug, um die eigene Privatsphäre im Internet zu schützen. Gerade Universitäten bieten eigentlich perfekte Voraussetzungen, um Tor-(Exit-)Knoten zu betreiben und das Netzwerk damit zu unterstützen. Dennoch finden sich kaum Tor-Exit-Knoten an Universitäten. Mit der Universität Hamburg und der TU Berlin betreiben wir sogar die beiden einzigen Exit-Knoten an deutschen Universitäten. In diesem Talk quantifizieren wir nicht nur den Beitrag von Bildungseinrichtungen zum Tor-Netzwerk, sondern wir rufen auch dazu auf, dieses ungenutzte Potenzial besser auszuschöpfen. Dazu fassen wir unsere Erfahrungen vom Betrieb zweier Exit-Knoten zusammen, gleichen sie mit älteren Guidelines zu diesem Thema ab und leiten daraus neue, konkrete Empfehlungen für einen reibungslosen Betrieb ab. Der Fokus liegt dabei auf einer technischen und organisatorischen Betrachtung, nicht auf einer juristischen.

uk: вхід без авторизації

name: Mehr als ein Tor zum Darknet: Tor-Exits an Universitäten


uk: Комп'ютерні науки

description: All over the Globe Care-receivers, healthcare professionals and makers join forces to co-create careables: tailor-made open solutions that tackle permanent or temporary disability. Careables is an open and inclusive approach to healthcare based on digital fabrication and collaborative making. We are looking at 3 years of co-creation and building a community that makes and shares open source hardware for health. The activities and designs are diverse. By showing a selection of Video Footage from the different sites of action in the Netherlands, Brazil, Ghana, Italy, Nepal, Germany and the online world we invite you to experience some of our key moments moments, be inspired and become part of the movement.

uk: вхід без авторизації

name: Careables - Video Stories of Open Source Hardware for Care


Lesung: Qualityland 2.0

uk: Комп'ютерні науки

description: Schwer was los in QualityLand, dem besten aller möglichen Länder. Jeder Monat ist der heißeste seit Beginn der Wetteraufzeichnung, ein Billionär möchte Präsident werden, und dann ist da noch die Sache mit dem Dritten Weltkrieg. Peter Arbeitsloser darf derweil endlich als Maschinentherapeut arbeiten und versucht, die Beziehungsprobleme von Haushaltsgeräten zu lösen. Kiki Unbekannt schnüffelt in ihrer eigenen Vergangenheit herum und bekommt Stress mit einem ferngesteuerten Killer. Außerdem benehmen sich alle Drohnen in letzter Zeit ziemlich sonderbar...

uk: вхід без авторизації


Infrastructure Review

uk: Комп'ютерні науки

description: This conference is run by teams of volunteers. In this event, they will provide some insight into the challenges they faced while building the infrastructure, networks, running video streams, or organizing the world map.

uk: вхід без авторизації


#rC3 - Abschluss

uk: Комп'ютерні науки

uk: вхід без авторизації


#rC3 Eröffnung

uk: Комп'ютерні науки

description: Willkommen zur ersten und hoffentlich einzigen Remote Chaos Experience!

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Fireside Chat with Cory Doctorow. Make sure not to miss Cory's main talk "What the cyberoptimists got wrong - and what to do about it" one hour earlier, day 19:00h in rc1.

uk: вхід без авторизації

name: Cory Doctorow – Fireside Chat: Reading and Q&A


Theresa Hannig – Fireside Chat

uk: Комп'ютерні науки

description: Lesung aus "Die Unvollkommenen", Vorstellung des aktuellen Buchprojekts "PANTOPIA" und lockere Q&A mit der deutschen SciFi-Bestsellerautorin.

uk: вхід без авторизації


Andreas Eschbach – Fireside Chat

uk: Комп'ютерні науки

description: Lesung aus N.S.A. und lockeres Gespräch mit dem deutschen SciFi-Autor.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The EU has been pushing for apps that support end-to-end encrypted messaging to contain an upload filter, which will scrutinise material for prohibited content before it's encrypted. This is the latest in a long line of attempts to maintain government access to data despite cryptography. In this talk, I will try to put them in context of the last two crypto wars and assess the costs their efforts have imposed on our economies. I'll finally ask what strategic direction democratic governments might take in the coming tussles with China.

uk: вхід без авторизації

name: What Price the Upload Filter?: The history and costs of government exceptional access


uk: Комп'ютерні науки

description: Die Ausstellung OPENCOIL setzt sich mit den Auswirkungen von Mikro-Mobilitätsdiensten auf den Stadtraum auseinander, indem sie ihre dezentrale Infrastruktur als Ausstellungsraum nutzt und gleichzeitig die Bedingungen und Auswirkungen dieser Infrastrukturen auch zum Thema macht. 11 Künstler*innen wurden eingeladen, ihre Arbeiten auf einem kleinen Wifi Controller mit ~2MB Offline-Speicher zu präsentieren. Diese „digitalen Galerieräume“ werden an 11 zufällig ausgewählten E-Scootern angebracht. So fährt die Ausstellung, von den Nutzer*Innen der Roller unbemerkt, als „roaming Speedshow“ durch die Stadt. Während Kapazitätsbeschränkungen und die bevorzugte Vermeidung von Zusammenkünften in geschlossenen Räumen, traditionelle Galerien und Museen vor Herausforderungen stellen, zielt OPENCOIL darauf ab, die Ortsunabhängigkeit des Online mit der Materialität des Offline (und umgekehrt) zu verbinden. Die Infrastruktur der „Mikro-Mobiltitätsdienste“ wird übernommen – klimaneutral und dezentral. Die Gehwege vieler Städte auf der ganzen Welt wurden in den letzten Jahren von sogenannten 'dockless sharing vehicles' regelrecht überflutet. Mit Versprechungen von Umweltfreundlichkeit und Elektromobilität, besetzten diese Risikokapitalismus Aktivisten die Grauzone zwischen privatem und öffentlichem Raum auf den Straßen unserer Städte. Diese gewissenlose Gewissenhaftigkeit der "Mikro-Mobilitätsdienste" wirft jedoch wichtige Fragen zu städtischem Raum, Eigentum, Agentur, Produktion, Ökologie und sehr spätem Kapitalismus auf. Wie umgehen mit der Inbesitznahme öffentlichen Raums? Welche Werkzeuge und Wege gibt es sich diesen zurückzuerobern? OPENCOIL soll nicht nur ein Pandemie-tauglicher Weg sein, um Kunst im öffentlichen Offline-Raum zu zeigen. OPENCOIL ist auch eine kreative (Um-)Nutzung von E-Scootern, ein Versuch, sich ihnen mit künstlerischen Mitteln zu nähern. Gezeigt werden Arbeiten, die sich mit Fragen der Überschneidung von öffentlichem und privatem Raum, dem Umgang mit Ressourcen sowie mit Greenwashing, Risikokapitalismus und Vandalismus befassen. Die teilnehmenden Künstler*innen sind: Aram Bartholl Constant Dullaart Dennis de Bel & Anton Jehle JODI Jonas Lund Martin Howse !Mediengruppe Bitnik Rosa Menkman Sarah Grant Sofya Aleynikova Danja Vasiliev

uk: вхід без авторизації

name: OPENCOIL – A Roaming Speedshow: or the fine art of appropriating inductive charging pads in the wild.


uk: Комп'ютерні науки

description: Auch wenn CO2-Moleküle und Corona-Viren naturwissenschaftlich nicht vergleichbar sind, bilden sie eine seltsame Allianz -- sowohl ihre Ursachen, als auch ihre Konsequenzen betreffend. Die digitale Revolution erweist sich als DER Brandbeschleuniger sämtlicher Krisen. Das dringend benötigte Überlebensprogramm wäre ohne prägnanten Rückbau geldbasierter Versorgungssysteme, De-Globalisierung sowie einer Zurückdrängung der aktuellen Technologieabhängigkeit nicht zu haben. Suffizienz, Sesshaftigkeit, moderne Subsistenz und kürzere Versorgungsketten würden dann zu wichtigen Gestaltungsoptionen.

uk: вхід без авторизації

name: Globalisierung, Digitalisierung und die Wachstumsfrage


uk: Комп'ютерні науки

description: The German Corona-Warn-App was published on June 16, 2020 and has been downloaded more than 23 million times since then. Data privacy and security have been and are of most importance in this project – even when they are invisible to most users. In this session, Thomas Klingbeil, Solution Architect of the Corona-Warn-App, will shed some light on aspects such as plausible deniability and the risk calculation and show their influence on the overall architecture. When looking at an mobile app, many people forget about the backend. However, especially when designing this component of the overall system it is very important, that it is not possible to learning about users' behaviours and the situation they are in, by observing the data traffic. For the Corona-Warn-App this specifically applies to the test results and the sharing of diagnosis keys in case of a positive diagnosis. To protect users (i.e. to create plausible deniability), the Corona-Warn-App uses a playbook, which simulates a realistically looking communication between mobile app and backend, even if there is no need for communication at that point of time. In this session, Thomas Klingbeil will shed light on those and other mostly invisible aspects of the app (e.g. the risk calculation).

uk: вхід без авторизації

name: Corona-Warn-App: Behind the scenes: Invisible, yet important


uk: Комп'ютерні науки

description: A firsthand look at efforts to improve diversity in software and hackerspace communities Hacking, as a mode of technical and cultural production, is commonly celebrated for its extraordinary freedoms of creation and circulation. Yet surprisingly few women participate in it: rates of involvement by technologically skilled women are drastically lower in hacking communities than in industry and academia. Hacking Diversity investigates the activists engaged in free and open-source software to understand why, despite their efforts, they fail to achieve the diversity that their ideals support. Christina Dunbar-Hester shows that within this well-meaning volunteer world, beyond the sway of human resource departments and equal opportunity legislation, members of underrepresented groups face unique challenges. She brings together more than five years of firsthand research: attending software conferences and training events, working on message boards and listservs, and frequenting North American hackerspaces. She explores who participates in voluntaristic technology cultures, to what ends, and with what consequences. Digging deep into the fundamental assumptions underpinning STEM-oriented societies, Dunbar-Hester demonstrates that while the preferred solutions of tech enthusiasts—their “hacks” of projects and cultures—can ameliorate some of the “bugs” within their own communities, these methods come up short for issues of unequal social and economic power. Distributing “diversity” in technical production is not equal to generating justice. Hacking Diversity reframes questions of diversity advocacy to consider what interventions might appropriately broaden inclusion and participation in the hacking world and beyond.

uk: вхід без авторизації

name: Hacking Diversity: The Politics of Inclusion in Open Technology Cultures


uk: Комп'ютерні науки

description: The role of the audience in stage performances is changing from passive spectators to contributors making the performance interactive by using different techniques. In this talk, we investigate the connection of audience physiological data to the experienced performance in three performance events with a total of 98 participants. We identified memorable performance moments by assessing, Electrodermal Activity (EDA) showing that the audience’s responses match the choreographer’s intention. Through Heart Rate Variability (HRV) features related to parasympathetic activity, we identified dramatic shifts that are connected to the choreographic development of the performance. Our results show how the audience's physiological responses are linked to the choreographic development of the performance. Based on the findings, we contribute a discussion of the registered physiological phenomena and implications of the audience’s responses analysis to performance and choreography design in general. Furthermore, we walk through the dataset collected from the performance events. Each performance lives from the interplay between audience and artists. Even if performers follow a precise script, each rendition is different partly due to audience reactions. Performers often describe it as an invisible link between then and the spectators, involving the audience in co-creating art. The stage design and described setup came out of a collaboration between the performing artists, designers and researchers in a semi-democratic process. Both researchers and artists contributed to developing the concept during the iterative process to balance research and artistic interests. This process was mainly led by artists, especially the choreographer. Besides the predetermined story and design, the choreographer also created some improvisational sections where dancers could interact with stage elements affected by audience physiological response. The main contributions of this talk are as follows: (1) We present the concept of "bringing the audience on stage" by mapping physiological signals from audience members to stage elements to amplify the connection between artists and the audience. We detail information about the design process, focusing on sensing heart rate and electrodermal activity (EDA), as well as how these signals are translated to the onstage elements through sonification and visualizations. (2) We describe an open integrated wearable system that consists of a wrist band, back-end processing, and output. Our proposed system enables the capturing and translating of physiological signals into stage design elements. (3) We realized our proposed concept as a proof-of-concept with the performance "Boiling Mind". The performance involved dancers, choreographers, researchers, visual and sound designers in the process. It was performed three times in front of an audience of 57, 37 and 45 people. In each performance, around 30 audience members wore the wearable wrist bands. The hardware used for the performance piece as well as the data recorded will be open sourced and will be made avaialable to download.

uk: вхід без авторизації

name: Boiling Mind: Analysing the link between audience physiology and choreography


uk: Комп'ютерні науки

description: CO2, Kohlenstoffdioxid, ist inzwischen im Bewusstsein aller angekommen. Ob als ppm Wert in der Erdatmosphäre und als Treibhausgas, oder durch die im Sommer vorgeschlagenen CO2 Ampeln. Aber: wie kann man denn die Konzentration eines unsichtbaren Gases in geriger Konzentration messen? Die "CO2-Ampel" hat seit August sprunghaft an Bekanntheit gewonnen, als die Konzentration von Kohlendioxid als potentieller Indikator für unzureichenden Austausch der Raumluft und damit für ein generell erhöhtes Infektionsrisiko vorgeschlagen wurde. Die prominenteste Sensorfamilie arbeitet über die Detektion der breitbandigen IR-Absorption des CO2-Moleküls, wir sehen uns IR- und Rama Spektroskopie an, wie einfache Sensoren funktionieren bis hoch zu hoch genauen industriellen Sensoren. Eine weitere Detektionsmethode bieten Metalloxid Sensoren, die mit moderner MEMS-Technologie sehr kompakt gefertigt werden können und mit der Größe eines Streichholzkopfes gut geeignet für wearable Devices sind. Dabei unterscheiden sich Sensoren, die tatsächlich CO2 messen können von solchen, die flüchtige organische Verbindungen (engl. volatile organic compounds, VOC) messen. Ein VOC Sensor findet sich auch auf der auf dem Camp 2019 vorgestellten card10 smartwatch. Wer eine besitzt, darf gern die neueste Firmware installieren und zu Hause mit experimentieren!

uk: вхід без авторизації

name: CO2 Messen - in Raumen und in der Atmosphäre: Messmethoden für CO2-Ampel, Atmosphäre und mehr


uk: Комп'ютерні науки

description: This talk gives a brief introduction to natural radioactivity and shows how a detector can be built from simple photodiodes. The electronics are easy to solder for beginners and provide a hands-on opportunity for entering the exciting world of modern particle physics with a practical DIY and citizen science approach. Natural radioactivity surrounds us everywhere and is composed of different kinds of ionising radiation or subatomic particles. This talk presents a DIY particle detector based on low-cost silicon photodiodes and its relations to modern detectors like the ones developed at CERN. The project is open hardware, easy to solder for beginners, and intended for citizen science & educational purposes. In contrast to simpler Geiger-Müller counters, this detector measures the energy of impinging particles and can distinguish in particular between alpha particles and electrons from beta decays. A cheap USB sound card or smartphone headset connection can be employed for recording the signals. Corresponding data analysis scripts written in python and related tools from particle physics research will be briefly discussed. An introduction about terrestrial and cosmic sources of radioactivity will be given together with details on the interaction of ionising radiation in silicon. I will conclude with a discussion of interesting every-day objects that are worthwhile targets for investigation and show example measurements of characteristic alpha particle energy spectra - without using expensive vacuum equipment.

uk: вхід без авторизації

name: Measuring radioactivity using low-cost silicon sensors: A DIY particle physics detector in a tin box.


Crypto Wars 2.0 (de)

uk: Комп'ютерні науки

description: Die globale Informationsoperation der 5-Eyes-Allianz & Verbündeter mit FBI, Europol et. al., sowie den nationalen Innen- und Justizministerien gegen E2E-Verschlüsselung. Die Entwicklung dieser Operation zur Durchsetzung gemeinsamer Interessen von 2015 bis zur Resolution des EU-Ministerrats im Dezember 2020. Die Resolution des EU-Ministerrats zum "Verschlüsselungsproblem" ist das Ergebnis einer konzertierten Kampagne der Spionageallianz Five Eyes mit FBI, Europol & vielen weiteren Polizeibehörden gegen E2E-Verschlüsselung. 2015 machten sich die Geheimdienste in drei Kontinenten plötzlich große Sorgen um die Überwachungsmöglichkeiten für die Strafverfolger. Die Folge war eine Serie von weltweiten Einzelkampagnen, die abwechselnd von Europol und FBI bzw. den Diensten der „Five Eyes“-Spionageallianz samt NATO-Staaten und den zuständigen Ministern in der Öffentlichkeit gefahren wurden. Jeder bedeutende Move dieser Kampagne folgte zeitversetzt den Terroranschlägen salafistischer Klerikalfaschisten irgendwo in der sogenannten "westlichen Welt".. Am Anfang standen Nachschlüssel für iPhones von Terroristen, dann kam Geraune über "Going Dark" von FBI & Europol. In Folge wurden "Goldene Schlüssel" gefordert, "Hilfe, die Polizei wird blind" geschrien, dann wurde die ETSI-Überwachungsschnittstelle für Facebook-Messenger, WhatsApp & Co standardisiert, Europol und FBI verlangten plötzlich keine Schlüssel mehr, sondern "Vordertüren". 2018 kamen dann die moderaten Vorschläge des GCHQ an die Betreiber von E2E-Plattformen aufs Tapet, doch bittschön einen ADK (Additional Decryption Key) zur E2E hinzuzufügen, auf dass den Strafverfolgern geholfen werde. Und genau diese "Lösung" wird jetzt angestrebt um der drohenden Datenarmut von Cops & Spooks zu begegnen. Deren Goldenes Zeitalter der Überwachung wird nämlich mit dem Ende des Seuchenjahrs 2020 eingeleitet.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: On November 13., Nintendo launched its newest retro console, the Nintendo Game and Watch - but by then it was already hacked! In contrast to the other Nintendo classic consoles (NES & SNES), Nintendo upped their game this time: A locked processor, AES-CTR encrypted flash & co. made it significantly harder to hack it, but in the end it was still hacked - one day before release. This talk walks through the whole process of opening it up, exploiting the firmware up to bringing homebrew to a new console - in a fun, beginner friendly way. The Nintendo Game & Watch was anticipated by a lot of retro-interested folks, and the clear expectation was: We wan't to get more games onto this device! But Nintendo made the life of hackers harder: The CPU is locked, the external flash AES encrypted, and the USB-C connector does not have its data-lines connected. But not so fast! In this talk we learn how to exploit the firmware, get code-execution via a NOP-slide, dump the ROMs & RAMs of the device and achieve what everyone has been asking for: DOOM running on the Nintendo Game & Watch.

uk: вхід без авторизації

name: Hacking the Nintendo Game & Watch: Your princess is AES encrypted in another castle


uk: Комп'ютерні науки

description: In den letzten Monaten der coronabedingten Kulturkrise hat sich aus der Initiative von unterschiedlichen Clubs, Clubverbänden und durch den Support des CCC ein bundesweites Projekt entwickelt für die kulturelle Anerkenung der Clubkultur. Die #clubsAREculture- Kampagne startet Ende 2020 mit einem Panel auf dem rC3. So ähnlich ist das auch mit der Kultur: Während Opern, Theater und Konzerthäuser seit jeher als Teil der Kultur anerkannt sind, haben Musikclubs damit zu kämpfen, selbstverständlich als vollwertiger Teil der Kultur betrachtet zu werden. Darf man Hochkultur also nur genießen, sich aber nicht vergnügen? Ist Clubkultur dann Kultur light oder um es mit Merz` klar mittelständischen Worten zu sagen: Lightkultur? Wo wird heute tatsächlich Kultur erlebt und wer bzw. was ist das genau? Können wir in einer Welt der Digitalisierung und Globalisierung ernsthaft noch einen Kulturbegriff anwenden der Jahrhunderte alt ist und trotzdem die Kulturpolitik bestimmt? Es geht um Kulturgeschichte, technische Entwicklungen, Medien, Generationskonflitke, Mehrwertsteuersatz, Stadt- und Bebauungsplanung, Schallschutzauflagen, Baunutzungsverordnung (BauNVO), Schutz vor Verdrängung, Alltagskultur, Gemeinwohlbezug und Freiräume. #clubsAREculture vereint Akteure, die sich für die Anerkennung der Clubkultur und Musikclubs einsetzen. Ziel wird eine Gesetzesänderung sein, die den heutigen Realitäten gerecht wird. Wir stellen unser Projekt, die Kampagne und die Petition vor.

uk: вхід без авторизації

name: LightKultur in Deutschland: Clubkultur oder wie modern ist unser Kulturbegriff?


uk: Комп'ютерні науки

description: In this talk, I aim to report and show a collection of observations, physical, visual and other evidence of the last years incidents that strongly indicate a context of the US Central Intelligence Agency and/or potentially other entities of the US Government actions against Wikileaks and surrounding persons and organisations. While the area of technical surveillance, SIGINT/COMINT and related Organizations and Methods have been more or less well understood in the hacker scene, the tactics and methods experienced and discussed in this talk are of a different type: For the moment, I would call it "initimidation surveillance" as it lacks the aspect of "covert" type of actions. On the last Chaos Communication Congress, I have analysed the technical aspects of the surveillance in and surrounding the ecuadorian embassy where Julian Assange stayed; this talk shows what happened to other people - friends of Assange, supporters of Wikileaks etc - not only in England, but also in other countries / other parts of the world. The idea is to not only show the scope of activities but also to contribute to a better understanding of these tactics, that might be applied also in completely different political environments where governments act in extralegal ways against activities they dislike, although they that are not a crime or easily criminalized.

uk: вхід без авторизації

name: CIA vs. Wikileaks: Intimiditation surveillance and other tactics observed and experienced


uk: Комп'ютерні науки

description: SAR for us does not mean “Search and Rescue", but “Solidarity and Resistance”. We will talk about the mission of the rescue vessel Louise Michel and why smashing borders won´t work without smashing the patriarchy - and the other way round. This summer, a pink ship popped up on the central mediterranean sea and made headlines by rescuing hundreds out of maritime distress. We will talk about the power structures behind this situation and about the values of our mission as we understand doing sea rescue not as an humanitarian act but as field that might conquer powerful relations. Borders are imaginary lines with a pronounced vulnerability, otherwise they would not need so many (technical) measures to protect them. But borders are more than 'only' borders of states/countries. Borders are also boundaries between humans, bodies, gender, ... or differently: they are supposed lines of distinction. Fighting these borders means we have to struggle them together and understand all of them as contested territories, contested bodies, contested spaces. But what could that mean? And (how) do we reflect what we’re doing and how we’re acting? How aware are we ourselves about white supremacy and neo-colonialism in our work? How can we challenge our internalized sexism and racism while working in the field under constant pressure of opressing systems?

uk: вхід без авторизації

name: The Mission of the MV Louise Michel: "Feminism will be anti-racist or it won´t be"


This Is Not A Game

uk: Комп'ютерні науки

description: Dieser Vortrag beschreibt die Entwicklung von QAnon als Spiel mit Realität und überlegt, weshalb dieser Verschwörungsmythos sich derart schnell verbreiten konnte. "Alternate Reality Games" sind eine relativ junge interaktive Erzählform, die einige interessante Eigenschaften hat. ARGs sind medienübergreifend, fesseln ihre Spielenden durch gemeinsames Recherchieren und Austauschen und benutzen dabei die je individuellen Leben der Spieler:innen als eigentliche Spielplattform. So können sie in kurzer Zeit sehr aktive und mitunter erstaunlich dauerhafte Gemeinschaften organisieren. Seit der Verbreitung von QAnon-Mythos und -Marke haben wiederholt Beobachter:innen darauf hingewiesen, dass es sich hierbei um eine Weiterentwicklung des Spielprinzips "Larping" zu einer Form handelt, die Parallelen zu Alternate Reality Games aufweist. Wenn auch natürlich nicht in Gänze erklären, so kann diese Perspektive doch dabei helfen, die spezielle Attraktivität von QAnon besser zu verstehen. Im Vortrag versuche ich Qeschichte, Hinterqründe und einige Sqielaspekte zusammenzufassen und mit eindeutig zu vielen Screenshots zu illustrieren. Dabei wird es vor allem um die Entwicklung im Kontext der US-Politik gehen.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Die USA hat im Vereinigten Königreich die Auslieferung von Julian Assange beantragt. Dazu fanden dieses Jahr zwei Prozessblöcke statt, die ich beide in London als politischer Beobachter verfolgt habe. Davon werde ich berichten. Im Februar und im September wurde insgesamt gut fünf Wochen lang über die mögliche Auslieferung von Julian Assange verhandelt. Inzwischen liegen gut 400 Seiten Abschlussstatements beider Parteien vor und für den 04.01.2021 hat die Richterin die Verkündung einer Entscheidung angekündigt. Im Vortrag möchte ich einen Eindruck davon vermitteln, wie das Verfahren abgelaufen ist, welche Akteure vor Ort aufgetreten sind, welche Punkte diskutiert wurden und ob diese einer Auslieferung entgegenstehen könnten.

uk: вхід без авторизації

name: Das Assange-Auslieferungsverfahren: Als Prozessbeobachter in London


uk: Комп'ютерні науки

uk: вхід без авторизації

name: The big melt: Tipping points in Greenland and Antarctica


uk: Комп'ютерні науки

description: During this event, we will discuss and propose basic safeguards that should be included in the DSA legislative package to make sure that fundamental rights of users, their empowerment and free choice are in the center of the upcoming legislation. The Internet has seen better times. Meant to liberate users, being online has become synonymous with being locked into a few powerful platforms, being tracked across the web without options to dissent and being left at the mercy of algorithmic decision systems that curate our online lives. Fundamental principles like transparency, openness, and informational self-determination that used to be central to the early days of the Internet seem to have been undermined significantly in the past decades. In the European Union, there is an opportunity to remedy this: the Digital Services Act is the most significant reform of Europe’s central platform legislation, and an unparalleled opportunity to formulate a bold, evidence based vision to address some of today’s most pressing challenges. To preserve what works, to fix what is broken. The need for systemic regulation of large online platforms is justified and necessary. There is an enormous power imbalance between the large platforms and their users. In recent years, continuous scandals and increased media coverage have made it clear to the public that companies are exercising this power and making enormous profits without taking sufficient responsibility to safeguard people’s fundamental rights. Furthermore, these platforms have failed to provide meaningful transparency, and the business models that are built on data harvesting without proper safeguards do not give users adequate control, either over their data or the information they receive and impart. We are not in a position to understand the extent to which our data are being used, nor are we able to determine the extent to which automated decision-making is leveraged in the curation or amplification of content. We cannot gauge the impact of these automated processes on our exposure to diverse content, and we cannot study or prevent the discriminatory treatment of underrepresented groups. The DSA legislative package is a unique chance to create systemic regulation of gatekeeper platforms based on human rights standards, while making the rights of users the utmost priority. In this session, we will discuss how and by what means the EU can meet this mark.

uk: вхід без авторизації

name: The EU Digital Services Act package: how to esure that the EU meets the goal of creating systemic regulation of large online platforms with users' fundamental rights in its center


uk: Комп'ютерні науки

description: Ob sie von Biontec, Curevac oder Moderna kommen werden, schon jetzt haben sich wenige reiche Länder den Löwenanteil der aussichtsreichsten Covid-19-Impfstoffe gesichert. Dabei ist Corona erst dann vorbei, wenn es für alle vorbei ist. Doch Europas Regierungen untergraben die globale Kooperation zur Überwindung der Gesundheitskrise und sichern das Recht auf Gewinne für die Pharmaindustrie ab. Wer sind die Gewinner, wer die Verlierer beim Wettlauf um den Impfstoff? Und was hat die Gates Stiftung damit zu tun? „Niemand ist sicher vor COVID-19, bevor nicht alle davor sicher sind. Selbst wer das Virus in seinen eigenen nationalen Grenzen besiegt, bleibt Gefangener dieser Grenzen, solange es nicht überall besiegt ist.“ Völlig zutreffend beschrieb Bundespräsident Frank Walter Steinmeier bei der Eröffnung des World Health Summit am 25. Oktober in Berlin das Wesen der Pandemie: Die Befreiung vom Virus bedarf eines globalen Handelns. Deutschland, Europa und alle anderen großen Industrienationen verhindern allerdings genau das. Eine kleine Gruppe reicher Länder, die 13 Prozent der Weltbevölkerung repräsentieren, hat sich bereits mehr als die Hälfte der zukünftigen Versorgung mit führenden COVID-19-Impfstoffen gesichert, berichtet die Hilfsorganisation Oxfam. Konkret haben die reichen Länder bereits mehr als fünf Milliarden Dosen von Impfstoffen aus den Kandidatenländern gekauft oder sind dabei, sie zu kaufen, bevor die klinischen Studien abgeschlossen sind. Weniger als 800 Millionen Dosen sind für die ärmsten Länder der Welt vorgesehen, berichtet die Duke University in einer kürzlich veröffentlichten Studie. Auch Deutschland hat solche Exklusivverträge abgeschlossen. Nimmt man die richtungsweisenden Entscheidungen seit Beginn der Pandemie genauer in den Blick, wird schnell deutlich, dass die Industrienationen an einer neoliberalen Politik festhalten, die das Recht auf Gewinn für Unternehmen gegen die Menschenrechte, konkret den gerechten und gleichen Zugang zu den Impfstoffen, absichert. Diese Ordnung wird mit aller Gewalt verteidigt und das ist durchaus wörtlich zu verstehen: Betrachtet man das Ringen um die kommenden Impfstoffe, zeigt sich, wie die Krise gelöst werden soll – auf Kosten der Armen. Die Nebenwirkungen sind tödlich und werden auch die wirtschaftliche, geographische und soziale Ungleichheit dramatisch vergrößern. Es droht die Restaurierung der Zweiteilung der Welt in Nord und Süd, auch wenn deren Überwindung verbal immer wieder bekräftigt wird.

uk: вхід без авторизації

name: Patente töten.: Wie Politik und Pharma den gerechten Zugang zum Impfstoff verhindern


uk: Комп'ютерні науки

description: Der netzpolitische Wetterbericht schaut zurück und nach vorne: Was sind die aktuell relevantesten netzpolitischen Debatten und was erwartet uns im nächsten Jahr? Welche Themen erhalten zu wenig Aufmerksamkeit und wo gab es Erfolge für die digitale Zivilgesellschaft? Eine kleine Pandemie hielt in diesem Jahr die Politik, Medien und Gesellschaft in Atem. Auch wenn das alles überlagerte, gab es leider noch viel mehr netzpolitische Debatten mehr, die etwas untergingen. Die Große Koalition befindet sich auf der Zielgeraden und traditionell ist das ein Fest für mehr Überwachungsbefugnisse, auch auf europäischer Ebene durch die aktuelle deutsche Ratspräsidentschaft. Verschlüsselung ist wichtig, soll aber trotzdem Hintertüren bekommen. IT-Sicherheit geht nur mit Staatstrojanern. Uploadfilter kommen, auch wenn das in der PR-Broschüre anders versprochen wurde. Die EU-Kommission hat sich warm gelaufen, verschiedene Gesetzgebungsverfahren wie der Digital Servce Act oder die Dauerbrenner Verordnung gegen Terrorpropaganda und e-Evidence.

uk: вхід без авторизації

name: Der netzpolitische Wetterbericht 2020: "Wir kommen um uns zu beschweren"


uk: Комп'ютерні науки

description: Studying automotive systems is often expensive and inconvenient, which prevents many people from getting started. To make research and education in automotive systems more accessible, we developed RAMN, an inexpensive open-source testbed that simulates a CAN/CAN-FD network of four Electronic Control Units. In our presentation, we introduce the testbed and demonstrate its use by experimenting with a simple Cruise Control algorithm in C, starting from establishing differential equations all the way to testing it in a driving simulator - all that using only open-source tools. We then use the result as a reference to explain what, concretely, would have been different on actual ECU hardware and software, and why that matters for security. 1) Introduction and motivations (~10 minutes) We briefly introduce the basics of automotive systems (ECU networks, CAN/CAN-FD), the importance of education and research in automotive security, and our motivations for designing a new testbed. 2) RAMN Introduction (~20 minutes) In this section, we introduce our new platform. RAMN is an inexpensive CAN/CAN-FD network of four Electronic Control Units (ECU) that can be programmed to simulate an active automotive network in closed-loop with the open-source autonomous driving simulator CARLA. It has the size of a credit card, is powered over USB, and can be recognized as a standard USB-to-CAN adapter. It is contained within one PCB, using only two layers and hand-solderable components. We show several demonstrations, then give details about the hardware (made with KiCAD) and the software (based on STM32 HAL and freeRTOS). 3) Experiments (~10 minutes) We use Cruise Control as an example algorithm to experiment with, using RAMN and other open-source tools. We analyze the problem, evaluate differential equations using Scilab, establish different control strategies, implement them in C in one of the ECUs and verify the results by connecting RAMN to the driving simulator CARLA, while making measurements on the CAN bus using BUSMASTER. 4) Automotive Grade (~10 minutes) We use the results of the previous section as a reference to explain what, concretely, would have been different with real ECU hardware and software. We discuss what drives the design of automotive systems, introducing important standards such as ISO26262 and MISRA-C. We explain what alternatives are available to researchers when technologies are hidden behind NDAs or prohibitive costs - and how RAMN makes use of them. 5) Automotive Security (~10 minutes) We use the content of the sections above to discuss automotive security, using RAMN to show demonstrations of potential activities.

uk: вхід без авторизації

name: RAMN: Resistant Automotive Miniature Network: A safe platform to study and research automotive systems


uk: Комп'ютерні науки

description: After the first unsuccessful deployment of voting machines in Germany about ten years ago, elements of electronic voting have reached elections again. Although there is now still a paper-trail, more and more essential steps, such as counting the votes, are moved into electronic systems. This change in the ballot-counting procedure took place mostly unnoticed by the public. We are two very concerned election workers who present our first-hand experience in this talk. We show that the current digital procedure is conceptually and practically flawed in terms of security. First, we give an insight into the role of computers and their interaction with humans during ballot-counting. We show that the underlying system concepts contradict IT-security best-practices. Next, we present an in-depth analysis of one ballot-counting software, deployed for the Bavarian municipal elections ("Kommunalwahlen"). We discovered several severe security vulnerabilities that allow an almost unnoticeable manipulation of local voting results. Finally, we conclude that there is an immediate need for action to re-establish election security and transparency - not only for the government but for everyone of us. Elections are a key element of every democracy. However, many democratic countries in the world have to face attacks on them, be it by the government or by foreign countries. Even if ballot counting has been finished, election results are often not accepted but questioned due to alleged manipulations. All these aspects pose major threats to democracy as they try to undermine the actual and publicly perceived integrity of elections. In Germany, elections are usually considered quite secure. Elections are paper-based and the subsequent ballot-counting is open to the public. The infamous introduction of electronic voting machines about ten years ago was finally stopped by the German Federal Constitutional Court. Thus, everything is human-controlled, transparent, and secure – isn’t it? Unfortunately, these claims are questionable since the silent introduction of electronic vote counting. The election system in Germany is quite complex, for example in the "Kreistagswahlen" (~district elections) workers have to count up to 70 individual votes per ballot, while respecting a special rule set. This process is very labor-intensive and sufficient election workers are often hard to come by. Due to this, electronic systems were introduced that provide support during vote counting. Election workers are no longer required to fill tally sheets, count votes, and sum them up on their own. Each ballot is simply entered into a software that performs all the magic and finally emits a result. This year, we volunteered again as election workers, but our trust in electronically-assisted elections has been vastly impacted. As IT-security researchers, we consider it our responsibility to share and discuss our concerns. We performed a thorough analysis of the concept and the hard- and software of the electronic vote counting system. We discovered several flaws on a conceptual and practical level, that can severely diminish the integrity of the election and makes it prone to manipulations. To underline the impact of the system’s vulnerabilities, we demonstrate an exemplary attack on an election. Finally, we propose different options on how to make elections secure again. We do not consider this an entirely technical case, as there are significant legal and societal circumstances that led to the deployment of this insecure system.

uk: вхід без авторизації

name: Hacking German Elections: Insecure Electronic Vote Counting - How It Returned and Why You Don't Even Know About It


uk: Комп'ютерні науки

description: When people develop carpal tunnel or various medical conditions, it can be difficult to use mainstream input mechanisms like keyboards, mice, and phone touchscreens. Ideally, accessible input mechanisms can be added to mainstream computers and phones. I will give two example demos. The first is using voice or eyelid blinks to control an ebook reader on a standard Android phone. The second is using speech recognition to interact with a Linux desktop, even to perform complicated tasks such as programming. When people develop carpal tunnel or various medical conditions, it can be difficult to use mainstream input mechanisms like keyboards, mice, and phone touchscreens. Such users might have to rely on speech recognition, eye tracking, head gestures, etc. Technology allows devices to understand these mechanisms as user input, and hence provide agency and a communication channel to the rest of the world. Every person's case is a bit different. Sometimes, a fully custom system has to be designed, such as for Stephen Hawking. A team from Intel worked through many prototypes with him, saying: "The design [hinged] on Stephen. We had to point a laser to study one individual." With custom hardware and custom software to detect muscle movements in his cheek, he still could only communicate a handful of words per minute. In less severe situations, the goal is often to add accessible input mechanisms to mainstream computers and phones. Similarly, a blind person will adapt to using a normal smartphone, despite not being able to see the screen. It is not economical to design myriad variants of hardware to handle many different users who all have slightly different needs. Adapting mainstream devices allows a wide range of existing software to be used, from email clients to Google maps, without reinventing everything. In my own case, I have a medical condition and cannot use my hands more than a certain threshold in a day. In order to keep reading books, I designed a speech recognition system and also an eyelid blink system to control an ebook reader app. As a computer programmer, I used to make heavy use of a keyboard to write code. With modern speech recognition, it is possible to design a spoken language that allows precise control over a computer. I will demo an open source voice coding system, and describe how it can be adapted to do any task on a desktop computer.

uk: вхід без авторизації

name: Accessible input for readers, coders, and hackers: From eyelid blinks to speech recognition


uk: Комп'ютерні науки

description: This year saw a major invasion of scientific work into the center of public attention. Scientific results came hot of the press and into the news cycles. For many people, this sudden impact of scientific language, culture and drawing of conclusion clashed with their every day world view. In my talk, I want to prepare the audience for the next wave of scientific influx and help them to get a systemic understanding of academia. How do scientists work? What are the funding and career structures? How do we do science? And, most importantly, how do we do science better? When we talk about scientific results, we assume most of the time that everybody knows how the scientific system produced them. This assumption can be problematic. The communication of risk and uncertainty, for example, varies greatly between the scientific community and society. A misunderstanding of science, scientific language or scientific publishing can lead to very wrong ideas about how things work. In this talk, I want to give a beginner friendly crash course on the scientific system. How does one get into science? Who pays for everything? What is scientific uncertainty? How does a scientific paper work? How can we address issues like bias and lack of diversity in science? I am an eager science communicator, who worked in the past in in molecular biology research and has since left active research to communicate science to the public. My goal is to share my view on the inner workings of science with more people to help them to become more science literate – and ultimately to be able to critically assess communication from researchers, institutions and PR companies. At the end of my talk, I want the audience to have a better understanding not only about the results of research but also the research process. We can only understand and interpret scientific results if we understand how they came to be.

uk: вхід без авторизації

name: Scientific Literacy 101: Let's understand how the scientific system works


uk: Комп'ютерні науки

description: he Electronic Frontier Foundation’s Kurt Opsahl with show you how to identify surveillance technologies that law enforcement may use at protests and other public gathering to spying on people exercising their fundamental rights. Learn how to spot the surveillance so you can advocate effectively for the policies necessary to protect your rights and bring transparency to the police surveillance. If you attend a protest, demonstration or any mass gathering in a public space, the police are probably surveilling you. Whether it’s sophisticated facial recognition, ubiquitous video recording, or the instant analysis of our biometric data, law enforcement agencies are following closely behind their counterparts in the military and intelligence services in acquiring privacy-invasive technologies, from automated license plate readers to body-worn cameras to drones and more. In this talk, Kurt Opsahl with show you how to identify surveillance technologies in use: • Where to look for these devices • How these technologies look • How these technologies function • How they are used by police • What kind of data they collect • Where to learn more about them Knowledge is power. Knowing what technologies are in use can help you understand the threats to your privacy and security, as well as tools to advocate for limits on police use of surveillance that may chill people’s rights to express themselves on public issues. Just as analog surveillance historically has been used as a tool for oppression, policymakers and the public must understand the threat posed by emerging technologies to successfully defend human rights in the digital age.

uk: вхід без авторизації

name: Observing Police Surveillance at Portests


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Attacking CPUs with Power Side Channels from Software: Warum leaked hier Strom? (en)


uk: Комп'ютерні науки

description: State-of-the-art report on Qualcomm DIAG diagnostic protocol research, its modern implementation as it appears in Hexagon basebands, advanced harnessing and reverse-engineering on modern off-the-shelf smartphones. Diag is a proprietary diagnostics and control protocol implemented in omnipresent Qualcomm Hexagon-based cellular modems, such as those built-in Snapdragon SoCs, and named so after the DIAG task in the baseband's RTOS that handles it. Diag presents an interesting non-OTA attack surface via a locally exposed interface channels to both the application processor OS and the USB endpoints, and advanced capabilities for controlling the baseband. Since Diag was first reverse-engineered around 2010, a lot has changed: mobile basebands are becoming increasingly security-hardened and production-fused, Hexagon architecture is gaining some serious advantages in the competition, and the Diag protocol itself was changed and locked down. Meanwhile, local attack surface in basebands is gaining importance, and so does baseband security and vulnerability research. In this talk I will present the state-of-the-art on Diag research, based on previously unpublished details about the inner workings of the Diag infrastracture that I reverse-engineered and harnessed for my research purposes, its modern use, and how we can exploit it to talk to the production-fused baseband chip on off-the-shelf modern phones such as Google Pixel, while understanding what exactly we are doing.

uk: вхід без авторизації

name: Advanced Hexagon Diag: and getting started with baseband vulnerability research


uk: Комп'ютерні науки

description: Bluetooth is still the best technology we have in a smartphone to implement exposure notifications. It is safe to use the Corona-Warn-App. Fight me! ;) Wait, what, did Jiska just submit a talk claiming that Bluetooth is secure?! Is this just another 2020 plot twist? No, it's not. Assuming that we need an app that enables exposure notifications based on distance measurements, Bluetooth is the best trade-off. Audio would be more accurate but requires permanent access to the microphone. GPS does not work indoors, Wi-Fi and LTE chips are less accessible through smartphone APIs, so we're left with Bluetooth. And Bluetooth LE Advertisements are actually a great choice for such a protocol, further reducing exploitability. As someone who was involved in finding multiple Bluetooth security issues within chips and operating systems, Jiska should be more afraid of Bluetooth, you might think. However, attacking Bluetooth on an up-to-date smartphone with recent chips is very complex and requires physical proximity. Those using outdated smartphones face similar risks when browsing the Internet, without the physical proximity requirement. There are other issues within the CWA, such as missing awareness of places like restaurants and public transport, and a health system that lacks fast test reports. We should care about real problems instead of claiming security issues that barely have an impact on average users.

uk: вхід без авторизації

name: Exposure Notification Security: Exposure notifications are secure and battery-friendly. Please use the app. kthxbye.


uk: Комп'ютерні науки

description: Immer neue Hitzerekorde, Dürresommer und Naturkatastrophen führen uns immer drastischer vor Augen, dass ein ungebremster Klimawandel dramatische Auswirkungen für die Menschheit haben wird. Der Weltklimarat empfiehlt dringend, die globale Erwärmung nicht über 1,5°C steigen zu lassen. Wollen wir das erreichen, müssen wir bereits bis 2040 eine Energieversorgung realisieren, die völlig ohne Erdgas, Erdöl und Kohle auskommt. Mit der aktuellen deutschen Energie- und Klimaschutzpolitik ist ein Einhalten des Pariser Klimaschutzabkommens unmöglich. Dieser Vortrag zeigt, mit welchen Konsequenzen wir beim Verfehlen der Klimaziele rechnen müssen und wie wir diese jetzt noch vermeiden können.

uk: вхід без авторизації

name: Nach der Coronakrise ist mitten in der Klimakrise: Wege aus der Klimakrise - Was uns droht und was getan werden müsste


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

en: Information and Library Sciences

de: Geisteswissenschaften

uk: Гуманітарні науки

en: Humanities

description: This tutorial focuses on how to use advanced features in PostgreSQL to simplify/improve data modeling. Functional indexes, table methods, and custom types are all covered, as is table inheritance as a data modeling (instead of data partitioning) tool.

uk: вхід без авторизації

name: Advanced Data Modeling Techniques in PostgreSQL

name: PGCon - PostgreSQL Conference for Users and Developers


Asynchronous IO for PostgreSQL

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: For many workloads PostgresSQL currently cannot take full advantage of modern storage systems, like e.g. good SSD. But even for plain old spinning disks, we can achieve higher throughput. One of the major reasons for that is that the majority of storage IO postgres performs is done synchronously (see e.g. slide 8fff in https://anarazel.de/talks/2019-10-16-pgconf-milan-io/io.pdf for an illustration as to why that is a problem). This talk will discuss the outcome of a prototype to add asynchronous IO support to PostgreSQL. The talk will discuss: * How would async IO support for PG look like architecturally? * Performance numbers * What sub-problems exist that can be integrated separately * Currently that prototype uses linux' new io_uring asynchronous IO support * Which other OSs can be supported? Do we need to provide emulation of OS level async IO? Note that support for asynchronous IO is not directly the same as support for direct IO. This talk will mainly focus on asynchronicity, and direct IO only secondarily.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: PostgreSQL databases can become corrupted for a variety of reasons, including hardware failure, software failure, and user error. In this talk, I’ll talk about some of my experiences with database corruption. In particular, I’ll mention some of the things which seem to be common causes of database corruption, such as procedural errors taking or restoring backups; some of the ways that database corruption most often manifests when it does occur, such as errors indicating inconsistencies between a table and its indexes or a table and its toast table; and a little bit about techniques that I have seen used to repair databases or recover from corruption, including some experiences with pg_resetxlog. This talk will be based mostly on my experiences working with EnterpriseDB customers; I hope that it will be useful to hackers from the point of view of thinking about possible improvements to PostgreSQL, and to end users from the point of view of helping them avoid, diagnose, and cope with corruption.

uk: вхід без авторизації

name: Avoiding, Detecting, and Recovering From Data Corruption


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: PostgreSQL is a mature and robust RDBMS since it has 30 years of history. Over the year, its query optimizer has been enhanced and usually produces good query plans. However, can it always come up with good query plans? The optimization process has to use some assumptions to produce plans fast enough. Some of those assumptions are relatively easy to check (e.g. statistics are up-to-date), some harder (e.g. correct indexes are created), and some nearly impossible (e.g. making sure that the statistic samples are representative enough even for skewed data repartition). For now, given those various caveats, DBA sometimes can't always realize easily that they miss a chance to get a meaningful performance improvement. To help DBA to get a truly good query plan, we'll present below some tools that can help to fix some of those problems by providing a missing index adviser, looking for extended statistics to create, and row estimation error correction information to get appropriate join orders with join methods automatically. - pg_qualstats: provides a new index and extended statistics suggestions to gather many predicate statistics on the production workload. - pg_plan_advsr: provides alternative good query plans automatically to analyze iterative query executions information to fix estimation rows error. In this talk, we will explain how those tools work under the hood and see what can be done, how they can work together. Also, we will mention what other tools also exist for related problems. Therefore, it will be useful for DBA who are interested in improving query performance or want to check whether current settings of indexes and statistics are adequate.

uk: вхід без авторизації

name: Building automatic adviser & performance tuning tools


Building Better Benchmarks

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: TPC, SSBM, YCSB... These are just some of the database benchmarks that are out in the wild. Yet there are many derivatives, implementations and variations of these and other benchmarks. The differences between them vary between ease of use, and effectiveness at testing at large scales. End-user licensing agreements and licensing of the software being used can be just as prohibitive as the test itself for being able to measure the performance of your software. "Better" is certainly subjective. From the point of view of open source software developers, we want something that: * can push the limits our of software and hardware * we are allowed to modify and change to better suit our needs * can be shared with colleagues and the world about the achievements made The current state of the art is surveyed for what is available to help us now and what hurdles remain in order for us to be able to do more. These hurdles only remain as opportunities for us to overcome with open source solutions.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: You know Postgres 12 is available, but you just haven't had time to look into it. Sure you want to learn more, but no one wants to just sit through a bunch of slides. What you really want is to see the features in Postgres 12 so you can figure out what will help make your users (and you!) happier with as little work as possible. I’m Robert Treat, and I’ve put together a whirlwind tour of new features available in Postgres 12. I think I know what will help you get the most bang for the buck, but if I am wrong, we can chose the features that you want to see most. That's right, there are no slides in this presentation, not even an about-me slide; we're going straight into the database to help you learn what options will help you make the best case with management to get you upgraded.

uk: вхід без авторизації

name: Choose Your Own Adventure Postgres 12 By Example


Community roadmap to sharding

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: Sharding is one of most wanted PostgreSQL features. Vertical scalability is limited by hardware. Replication doesn't provide scalability in read-write performance and database size. Only sharding promises this. However, such a brilliant feature is hard to implement. And here is the point where different community parties should work together. The PostgreSQL community has done a great work on foreign data wrappers and continues improving them. Postgres Pro has experience in distributed transactions, snapshots and query planning/execution. In this talk we will cover existing advances in sharding and present a roadmap of transforming them into a comprehensive sharding solution suitable for the main use cases.

uk: вхід без авторизації


CREATE STATISTICS: What is it for

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: One of the new features in PostgreSQL 10 is the ability to create multi-column statistics, helping the optimizer understand dependencies between columns. PostgreSQL 12 further improved the feature by supporting more complicated statistics types. This talk will explain a bunch of important questions - why we need this capability at all for some queries, how it works, which cases it can address currently, and which improvements are in the queue for PostgreSQL 13.

uk: вхід без авторизації


Deep Thoughts: Betting on Security

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: For all combinations of who/which/what, list who currently has which type of permissions for what objects in your most important database(s)? It shouldn’t be that hard to figure out, right? Would you be willing to bet your job that you have given a complete and correct answer, even if this were an open book test with access to the server and ample time? This talk seeks to dive deep into the weeds on the topic of how roles interact with Postgres default behaviors, role attributes, and object privileges, resulting in a particular discretionary access control (DAC) security posture.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: In this talk we would like to share our experiences in implementing MVCC in an open source scale out environment based on PostgreSQL. Scale out environment is characterised by multiple PostgreSQL servers with one master PostgreSQL server designated as the entry point for clients. Transactions may update data residing on more than one PostgreSQL instance. Isolating two or more such transactions running concurrently is a major challenge in a scale out system. Different isolation levels have their own challenges, serialisable being the hardest to implement efficiently. Distributed snapshots enable individual PostgreSQL instances within a scale out system to determine status (in-progress, committed, aborted) of a transaction and to decide whether effects of a transaction are visible using a given snapshot. The talk will go over this distributed snapshot mechanism in detail including several corner cases that we found tricky to implement right. Note that each PostgreSQL instance in the scale out system continues to create local snapshots and local transactions. Distributed deadlock occurs when the wait cycle spans multiple PostgreSQL instances. To detect it, wait graphs from each PostgreSQL instance need to aggregated and cycle detecting be performed on the aggregated data. The talk will describe how we model vertices and edges in such a graph, the method used to aggregate this information, being mindful of performance of the distributed system.

uk: вхід без авторизації

name: Distributed snapshots and global deadlock detection


Index: Do It Yourself

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: In Postgres, we already have the infrastructure for building index-as-extension, but there are not so many such extensions to date. But there are so many discussions of on how to make core indexes better. This is a talk about extracting index from core to extension and what can be done with usual indexes. Some of these optimizations are discussed in @hackers and can be expected in the core, others will never be more than extension. We will discuss ideas from academic researches and corresponding industrial response from developers, communities, and companies. There will be a short live-coding session on creating a DIY index in Postgres. I'll show how to extract access method from core to extension in 5 minutes and talk about ideas for enhancing indexes: learned indexes, removing opclasses in favour of specialized indexes, cache prefetches, advanced generalized search (GiST alternative) and some others.

uk: вхід без авторизації


Find your slow queries, and fix them!

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: Where, oh where, is all that time going? What in the world is that database thing doing?! This talk will help you understand what's happening (and why) and how to analyze poor query performance. We'll also go over steps and strategies to take to improve them and get the performance (and scalability!) you need. It all starts with figuring out what queries are slow, we'll do that by going into the various PostgreSQL configuration options for logging queries and a few helpful modules for getting even more information about ongoing queries. Next we'll go over EXPLAIN and EXPLAIN ANALYZE output for select queries, what the EXPLAIN output means in terms of how the query is being executed. Lastly (this is the good part- you have to stay til the end to get it!) we'll go over ways to improve the queries, including index creation, rewriting the query to allow PG to use a different plan, and how to tune parameters for specific queries.

uk: вхід без авторизації


Hacking the Query Planner, Again

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: This talk will focus on how the planner works from a developer’s view and elaborate on the process of converting a query tree to a plan tree in details. We can divide the planning process into 4 phases: preprocessing, scan/join planning, post scan/join planning and postprocessing. In this talk, I will explain what stuff is performed in each phase and what is the motivation to perform that. Topics will include: transforming ANY/EXISTS SubLinks into joins, flattening sub-selects, preprocessing expressions, reducing outer joins to inner joins, distributing quals to rels, collecting join ordering restrictions, removing useless joins, join searching process, upper planner path-ification, cost estimation, etc. Tom Lane's 2011 talk "Hacking the Query Planner” talked about the overview of query planner. In this talk, I will cover the internals of query planner with more details and in a way more close to planner codes. I hope this will be helpful in understanding the internals of PostgreSQL's planner and in hacking the planner codes to improve it.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: SQL standard 2011 introduce a temporal table concept which describe a table that store data with respect to time instance. It has two part application time period table and system versioned temporal table. An application time period are for meeting the requirements of applications based on application specific time periods which is valid in the business world rather than on the basis of the time it was entered in the database and system versioned temporal table state about the retention of old data alone with current data automatically by database management system and ability of queering both current and history data. A table can also be both a system versioned table and an application time period table.

uk: вхід без авторизації

name: Implementing System Versioned Temporal Table


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: IoT system has many of the edge computer and sensor devices. They are increasing to thousand and more, they have a lot of data. PostgreSQL provides a Parallel Query to collect such data efficiently. But data Gather node is a bottleneck because it cannot process in parallel. we tried to improve the speed of Gather node.I will explain some solutions such as Gather node parallelization and bulk copy records in Gather node.

uk: вхід без авторизації

name: Improve of Parallel Query when getting large scale records


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: Data storage engine is always the key to the performance of a database system. Traditionally, storage engine is implemented based on B+-tree or B-tree. Compared to traditional B+tree or B-tree, LSM-tree as another important data structure, recently attracts great attention from developers due to its wide usage in many open source projects including in web browsers and many data processing systems. There are some well-known incarnation of LSM-tree, such as LevelDB and RocksDB to make the index practical in the industry. Now, we bring it to the world of PostgreSQL. Users can utilize LSM-tree via Postgres‘ FDW through our implementation. So in the talk, we will cover these contents: 1. The motivation of introducing LSM-tree 2. How does LSM-tree work? 3. How does the specific implementation of LSM-tree work, such as LevelDB and RocksDB? What is their architecture? 4. How do we incorporate these existing LSM-tree implementations? 5. Some experiment results

uk: вхід без авторизації

name: Introducing LSM-tree into PostgreSQL, making it as a data gobbler


JSON[b] Roadmap

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: JSONB in PostgreSQL is one of the main attractive feature for modern application developers, no matter what some RDBMS purists are thinking. PG12 and upcoming PG13 complete the implementation of SQL/JSON standard, which is a great feature itself, but now it is time to think about improving the implementation in both directions - functionality and performance. For example, PostgreSQL recognized for its extensibility and it is natural to add support of user's data types and operators to JSONPATH, make use of JSONPATH to index json data, optimize access to specific key:value pairs for large json, and so on. Another important topic I want to discuss - is the single JSON data type. Historically, we have two JSON data types - textual and binary (better), the latter, called JSONB, is actually the most usable and popular data type. Now, looking forward to expected specification of JSON data type in future SQL standard, we have to decide how to make JSON data type to be generic and cover the old JSON, JSONB data types.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: This talk looks at the mechanics of memory and storage, and discusses a selection of opportunities for PostgreSQL to reduce stalls and improve performance. These include experimental and committed work done in the PostgreSQL and OS communities, along with some relevant ideas and observations found in academic papers. The following topics will be covered: * avoiding I/O stalls in recovery, index scans and joins * limiting I/O streams for parallel queries and concurrent queries * avoiding memory stalls for hash joins, sequential scans, index searches * avoiding branches through inlining and specialisation * reducing TLB misses for data and code

uk: вхід без авторизації

name: Mechanical Sympathy for Elephants: Reducing I/O and Memory Stalls


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: pgagroal is a high performance protocol-native connection pool for PostgreSQL. pgagroal is built upon libev, a high performance network library, and uses a shared-memory process model together with atomic operations for tracking state to achieve its high performance. In this session we will explore the * Architecture * Features * Deployment * Performance * Roadmap of pgagroal.

uk: вхід без авторизації

name: pgagroal: High-performance connection pool for PostgreSQL.


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: Kubernetes is an open source container orchestration platform for automating deployment, scaling and management of application containers. Nowadays, more and more applications are being deployed in containers on Kubernetes. However, managing database on Kubernetes is difficult because the data redundancy can have very specific requirements. There are several solutions that can help us to run a PostgreSQL HA cluster on Kubernetes. However, these solutions don't provide query load balancing functionality. Therefore, users need to modify the application to distribute read queries among multiple PostgreSQL containers. In this talk, I would like to give you an overview of Kubernetes and explain how to deploy a PostgreSQL HA cluster with query load balancing using Pgpool-II on Kubernetes. Although Kubernetes provides a way to monitor the basic cluster status, this is not sufficient for practical cluster management. In this talk, I will introduce the way to implement custom Prometheus metrics to monitor PostgreSQL cluster status and performance for extensive cluster monitoring.

uk: вхід без авторизації

name: PostgreSQL HA Cluster with Query Load Balancing on Kubernetes


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: Many DBAs avoid any kind of cloud offering and prefer to run their databases on dedicated hardware. At the same time companies demand to run Postgres at scale, efficiently, automated and well integrated into the infrastructure landscape. The arrival of Kubernetes provided good building blocks and an API to interact with and with it solve many problems at the infrastructure level. The database team at Zalando started running highly-available PostgreSQL clusters on Kubernetes more than two years ago. In this talk I am going to share how we automate all routine operations, providing developers with easy-to-use tools to create, manage and monitor their databases, avoiding commercial solutions lock-in and saving costs, show open-source tools we have built to deploy and manage PostgreSQL cluster on Kubernetes by writing short manifests describing a few essential properties of the result. Operating a few hundred PostgreSQL clusters in a containerized environment has also generated observations and learnings which we want to share: infrastructure problems (AWS), how engineers use our Postgres setup and what happens when the load becomes critical. * [Zalando Postres-Operator] * [Zalando Patroni]

uk: вхід без авторизації

name: PostgreSQL on K8s at Zalando: Two years in production


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: I have a patch in progress to add SQL:2011 valid time support to Postgres, so that you can more easily record a history of things that change over time. It lets you define temporal primary and foreign keys and issue temporal UPDATE and DELETE commands. Although the SQL:2011 standard introduces a new concept called PERIODs, I've based the Postgres features on our own built-in ranges---and plan to support PERIODs too (hopefully before I get to PGCon).

uk: вхід без авторизації

name: Progress adding SQL:2011 valid time to Postgres


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: Passwords: they just seem to work. You connect to your PostgreSQL database and you are prompted for your password. You type in the correct character combination, and presto! you're in, safe and sound. But what if I told you that all was not as it seemed. What if I told you there was a better, safer way to use passwords with PostgreSQL? What if I told you it was imperative that you upgraded, too?

uk: вхід без авторизації

name: Protect Your PostgreSQL Passwords: How SCRAM Works & Why You Need It


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: Ptrack has been developed a few years ago and provided a way to track page-level changes of the PostgreSQL database data. This information was used for implementation of block-level incremental backups, which was bundled with pg_probackup. However, that implementation of in-core Ptrack engine had a number of major drawbacks: * Requirement to keep a lot of additional files (one extra fork per relation); * Extremely invasive in-core changes; * Tricky workarounds to avoid races, when taking a backup. In this talk I am going to discuss block-level incremental backups and present a new incarnation of Ptrack — Ptrack 2.0. Being rewritten from the scratch it now uses a single shared hash table, which is mmap'ed in memory from the file on disk. All operations are made using atomics, so the map is completely lockless during the normal PostgreSQL operation. Ptrack map is written on disk at the end of checkpoint atomically block by block involving the CRC32 checksum calculation that is checked on the next whole map re-read after crash or restart. Due to the fixed size of the map there may be false positives (when some block is marked as changed without being actually modified), but not false negative results. This approach helps us to build simple, but yet durable and fast block-level incremental backups solution.

uk: вхід без авторизації

name: Ptrack 2.0: yet another block-level incremental backup engine


Seamless SQL optimization

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: There are two types of analysis and optimization. The first, macro-analysis, is analyzing the workload as a whole. Usually, it is done using pg_stat_statements or pgBadger The second one is micro-analysis and the central tool here is the EXPLAIN command. And there is a huge gap between them, partially covered by auto_explain and pg_qualstats extensions. In this tutorial, we learn how to establish a smooth and seamless SQL optimization process in your organization? Topics we'll cover: What are the pros and cons of using pg_stat_statements compared to log analysis performed by pgBadger? What are the key metrics in macro-analysis and how to choose the most applicable in each case (is it total time consumed by an SQL query group? or average timing, or maybe shared buffers hit and read by the query group per second?); Closing the gap: how to switch from macro-analysis to micro-analysis (you identified a "bad" SQL group, how to start optimizing it and what is needed to make this process faster / more automated?). How to simplify the process of adaption of using EXPLAIN command by a wide range of backend developers, what metrics matter and how (timing vs buffers involved). EXPLAIN visualization technics and their pros and cons (PEV, and FlameGraphs for EXPLAIN). How to accumulate knowledge about SQL optimization, share it with teammates and improve collaboration.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: If you ever wanted to find out what can be configured in postgresql.conf, you can easily find it in the official Postgres documentation. So, all you need to do is read it, yes, all of it, and you will have a perfectly configured database. Sounds easy, right? The reality, however, tends to differ from the laboratory conditions that documentation describes, in addition, there is never enough time to go through the documentation, especially, considering that not every parameter would make sense for your database. There are also settled differences that one should be aware of and the new releases that require constant adaptation of your config settings. In this tutorial, I will take you through all the settings that, in my experience, as a consultant working with a variety of databases, should be adjusted. I will look into reasoning for it, and review the chain reaction that each change in each of these settings, will trigger. We will review some typical workloads and I will also be sharing some recommended configurations which our DBAs follow when setting up for our clients and which have been proven over and over with different databases and under variety of our client’s requirements. Following this tutorial you will have the knowledge required to understand major postgresql.conf parameters, know what role they play in the overall database performance and will be able to set up your own version that will work for your database. If you are a DBA who is just starting to work with Postgres and would like to make sure that you have a reliable base to build your work on, this tutorial is for you.

uk: вхід без авторизації

name: The "default" postgresql.conf, step by step


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

description: Materialized views is a feature to store the results of view definition queries in DB in order to achieve faster query response. However, after base relations are modified, view maintenance is needed to keep the contents up to date. REFRESH MATERIALIZED VIEW command is prepared for the purpose, but this has to recompute the contents from a scratch, so this is not efficient in cases where only a small part of a base table is modified. Incremental View Maintenance (IVM) is a technique to maintain materialized views efficiently, which computes and applies only the incremental changes to the materialized views rather than recomputing. This feature is not implemented on PostgreSQL yet. We have proposed a patch to implement IVM on PostgreSQL and this is now under discussion. Since the first submission of the last year, we have made a great progress on this patch. For example, some aggregates, subqueries, self-join, and outer joins are supported now. These operations are important since they are commonly used in real applications. In this talk, we will explain the current status of our IVM implementation. The talk includes what problems are under the implementation, its solutions, what the current implementation can do, and what limitations and problems are left.

uk: вхід без авторизації

name: The Way for Updating Materialized Views Rapidly