uk: Комп'ютерні науки

description: This learning session will guide the attendees through various concepts related U-boot including hacks to gain access to U-boot console, U-boot console commands and structure and various methods on using U-boot to exploit an embedded IoT systems. After each learning objective we will have Q&A sessions.

uk: вхід без авторизації

name: IoT Village - Introduction to U Boot Interaction and Hacking


Jonathan Stines

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: This learning session attendees will learn how to properly utilize a logic analyzer for examining, testing and decoding digital communication on embedded systems. Also, various logic analyzers from cheap models to the more expensive models will be shown and discussed. After each learning objective we will have Q&A sessions.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: IoT Village - Introduction to Logic Analyzers

DEF CON

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


IoT Village - Honespots & IoT Security

uk: Комп'ютерні науки

description: Honeypots AND IoT security, all in one place? Yes, why YES I tell you, and this is it! Oh sure, honeypots are not new, but how they are used is what makes this talk just a little bit different. Presented for your viewing pleasure will be IoT specific honeypot configurations, some deployed with k8s (some not) and how they are used to not only trap attacks against your IoT devices but also detect attacks FROM a compromised IoT device.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Once limited to the realm of science fiction, robotics now plays a vital role in many industries, including manufacturing, agriculture, and even medicine. Despite this, the kind of robot that interfaces with people directly - outside of the occasional toy or vacuum - threatens to remain an inhabitant of fiction for the foreseeable future. Teleconference robots, a rapidly growing niche, may help make that fiction a reality. Robots such as these have found use in consumer, enterprise, retail, and even medical environments and some are even capable of autonomous movement. It’s precisely these features, however, that make them a valuable target for hackers. Unlike a simple camera exploit, compromising such a device would grant an attacker mobility in addition to audio/video, greatly increasing their ability to spy on victims in the most private of situations - their homes, medical appointments, or workplaces. Not knowing when to quit, McAfee Advanced Threat Research uncovered four 0-day vulnerabilities in a popular teleconference robot. We’ll show how an attacker armed with nothing besides the victim’s phone number could exploit these vulnerabilities to intercept or join an existing call, gain access to the robot’s camera and microphone, and even achieve “owner” privileges, granting the ability to remotely control the robot - all with zero authentication. Bio: Mark Bereza is a security researcher and new addition to McAfee's Advanced Threat Research team. A recent alumnus of Oregon State's Computer Science systems program, Mark's work has focused primarily on vulnerability discovery and exploit development for embedded systems. Mark previously presented at DEFCON 27, less than 6 months after graduating college.

uk: вхід без авторизації

name: IoT Village - Assembling VULNtron: 4 CVEs That Turn a Teleconference Bot into a Spy


IoT Village - Stepped on a Nail

uk: Комп'ютерні науки

description: It was a crisp October evening as Nerdwell walked the streets of the Internet looking for juicy bugs. Suddenly, his attention was drawn to something that he could not ignore. ""Is that memory?"" He thought to himself, ""it sure is ... a whole heap of it!"" In this talk, Nerdwell will share the story of how a chance observation, along with healthy doses of curiosity and persistence, ultimately led to a high severity finding of unauthenticated remote memory disclosure in the Mitel MiVoice 6800 and 6900 series SIP Phones. Nerdwell will take us through the technical details of CVE-2020-13617 and demonstrate exploitation. He'll then share some of the insights gained along the way, including: * Unexpected benefits of the emerging bug bounty industry upon IoT security in general; * The roles of curiosity and creativity in the hacker's mindset, and how these traits influence security research; and * Ways to use open source tools, like Shodan.io and GitHub, to select IoT devices for further research. The talk will close with suggestions for future research and tips for new researchers looking to break into the field of IoT hacking.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This talk discusses the rise of IoT botnets, the culture that surrounds them, and the vulnerabilities that enable their continued existence. I will discuss various analyses of major botnet families, discuss exploits and vulnerability classes in IoT devices, and examine the rapid growth of these botnets for commercial use. I will also discuss newer innovations in IoT malware, and outline some of the ways that vendors could reduce their impact moving forward.

uk: вхід без авторизації

name: IoT Village - Hella Booters: Why IoT Botnets Aren't Going Anywhere


uk: Комп'ютерні науки

description: Under the best of circumstances, coordinating disclosure of vulnerabilities can be a challenge. At times it can feel like everyone involved in CVD has conflicting motivations. The truth is that all of us are aspiring to do the right thing for end-users based on our perspective. The panel will share experiences and show how researchers and technology companies can work together to improve the impact of disclosing vulnerabilities on the technology ecosystem. Join CRob (Red Hat), Lisa Bradley (Dell), Katie Noble (Intel), Omar Santos (Cisco), Anders Fogh (Intel) and Daniel Gruss (TU Graz) for an exciting and engaging dialog between security researchers and industry experts on the Joy of coordinating vulnerability disclosure.

uk: вхід без авторизації

name: IoT Village - The Joy of Coordinating Vulnerability Disclosure


uk: Комп'ютерні науки

description: IoT device manufacturers have no idea what's running on their devices -- they really don't. In 2002 then-US Secretary of Defense, Donald Rumsfield, brought public attention to a notion that information can be divided into three categories: known knowns, known unknowns, and unknown unknowns. As hackers, how can we apply this formulation to IoT vulnerabilities? The known knowns: Vulnerabilities that have been explicitly discovered through scanning and testing. The known unknowns: Newly created software that has yet to undergo any application security testing. The unknown unknowns: Systems that the defender does not know about. There is, in fact, a fourth dimension: unknown knowns, which comprise “that which we intentionally refuse to acknowledge that we know” or “do not like to know.” The unknown knowns: Vulnerabilities that are known to exist, but that have not been associated with all the systems they actually affect. In this talk, we report on IoT device vulnerability findings at massive scale, as a result of our firmware collection and analysis. For this research we have selected approximately 50k firmware images, representing over 7M files, 10k products, and 150 vendors, spanning many different architectures and operating systems. We will highlight some of the trends we've uncovered in supply chain vulnerabilities, and reveal specific examples of device backdoors, botnets, and vulnerabilities discovered in medical, home, and commercial device firmware.

uk: вхід без авторизації

name: IoT Village - IoT under the Microscope: Vulnerability Trends in the Supply Chain


uk: Комп'ютерні науки

description: Do you ever play iSpy with the smart devices around you and wonder how easy it is to hack shit and get CVEs? In the Zoomer era, smart devices are extremely accessible, generally cheap and not very security focused. In this talk, Sarda (a fellow Zoomer) will walk the audience through the basic methodology, tooling, exploitation, and disclosure process used when hacking an IoT device. This talk will include a “livish” demo of the exploitation of 5 CVEs, including remote code execution and telnet access, discovered while researching the Tenda AC1900 router—which can be chained to provide persistent root shell access to the device

uk: вхід без авторизації

name: IoT Village - Kicking Devices, Taking CVEs: Zoomer Guide to Hacking


uk: Комп'ютерні науки

description: While researching UPnP vulnerabilities I became frustrated with the currently available UPnP tools. Some devices that I knew had UPnP just weren't found with any of the tools I tried. Out of this frustration, came a new and improved BHunter extension for Burp Suite. In this lightning talk I'll go over some of the issues I found and the improvements made to it, and I'll give a demo of the tool in action.

uk: вхід без авторизації

name: IoT Village - In Search of the Perfect UPnP Tool


IoT Village - Pandemic In Plaintext

uk: Комп'ютерні науки

description: When a wireless engineer decides to tune into hospitals to determine the state of COVID in the community, he finds detailed patient info being broadcast into thin air. By capturing, decoding, and analyzing the info, the true state of the pandemic is realized.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Want to tinker with locks and tools the likes of which you've only seen in movies featuring secret agents, daring heists, or covert entry teams? Then come on by the Lockpick Village, run by The Open Organisation Of Lockpickers, where you will have the opportunity to learn the hands-on how the fundamental hardware of physical security operates and how it can be compromised. The Lockpick Village is a physical security demonstration and participation area. Visitors can learn about the vulnerabilities of various locking devices, techniques used to exploit these vulnerabilities. Experts will be on hand to demonstrate and discuss pick tools, and other devices that are generally available. By exploring the faults and flaws in many popular lock designs, you can not only learn about the fun hobby of sportpicking, but also gain a much stronger knowledge about the best methods and practices for protecting your own property.

uk: вхід без авторизації

name: Lock Picking Village - Bobby Pins, More Effective Than Lockpicks


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lock Picking Village - Key Duplication -It's Not Just for the Movies


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lock Picking Village - Doors, Cameras, and Mantraps OH MY: My methods and experiences as a Physical Security Risk Assessor


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lock Bypass Village - OSINT of Facilities by Physical Reconnaissance


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lockpick Village - Introduction To Lockpicking


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lock Picking Village - Safecracking for Everyone


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lock Picking Village - Keystone to the Kingdom: Tricks targeting Best SFICs


Lock Picking Village - Cuff Stuff

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lock Picking Village - High Security Wafer Locks - An Oxymoron?


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lock Picking Village - Hybrid PhySec Tools: Best of both words or just weird?


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lock Picking Village - Law School for Lockpickers


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lock Picking Village - How I defeated the Western Electric 30c


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Lock Picking Village - Intro to High Security Locks and Lockpicking


uk: Комп'ютерні науки

description: Smart sex toys are a huge topic – and we’re not talking about their size! The Internet of Things (IoT) has triggered many personal items to become connected and smart, watches, toothbrushes, glasses and even toilets, to name just a few. The adult toy market has not been left behind with new models of toys that include the opportunity to connect them to the Internet and allow them to be remotely controlled. IoT devices and their vulnerabilities are frequently discussed in the media, and sex toys are not the exception. Many of them have holes in them. Keep focused, we mean holes and bugs in the software. This is despite the sensitivity of the extremely personal information they handle. We analyzed the security of the Android applications that control the most frequently purchased models of connected sexual pleasure devices, to determine the extent to which the confidentiality of user data could be vulnerable. Our research revealed interesting security flaws derived from both the implementation of the application and the design of the device, affecting the storage and processing of information. If you’re one of the many users who have a smart sex toy connected to the internet, or plan to buy one, you cannot miss this talk, it may have you shaking in your seat. Our presentation may make you reconsider connecting it ever again or not purchasing one at all.

uk: вхід без авторизації

name: IoT Village - Exploring vulnerabilities in Smart Sex Toys: the exciting side of IoT research


cs: Matematika

de: Mathematik

fi: matematiikka

uk: Математика

en: Mathematics

fr: Mathématiques

da: Matematik

es: Matemáticas

nl: Wiskunde

de: Mathematik, Naturwissenschaften

uk: Математика, природничі науки

en: Mathematics, Natural Sciences

uk: вхід без авторизації

name: The Generic Clifford Algebra and its Brauer Class

name: Banff International Research Station (BIRS) for Mathematical Innovation and Discovery


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Voting Village - Testing Cannot Tell Wether Ballot-Marking Devices Alter Election Outcomes


uk: Комп'ютерні науки

description: Cybersecurity researchers keep identifying cybersecurity vulnerabilities in voting machines andin the election process, but not much happens in closing identified vulnerabilities. The privatesector vendors involved in voter registration, manufacturing and programming voting machines,and vote tabulation are less than responsive and few have not provided evidence that they havestrong cybersecurity programs that meet best practices and standards and regular have cyberrisk assessments performed. This presentation will put forward a federal policy approach thatwill help correct these problems and advance the integrity of elections across the country.

uk: вхід без авторизації

name: Voting Village - A Policy Approach to Resolving Cybersecurity Problems in the Election Process


uk: Комп'ютерні науки

description: In the 2018 midterm elections, West Virginia became the first state in the U.S. to allow select voters to cast their ballot on a mobile phone via a proprietary app called “Voatz.” Although there was no public formal description of Voatz's security model, the company claimed that election security and integrity were maintained through the use of a permissioned blockchain, biometrics, a mixnet, and hardware-backed key storage modules on the user's device. In this work, we present the first public security analysis of Voatz, based on a reverse engineering of their Android application and the minimal available documentation. We performed a cleanroom reimplementation of Voatz's server and present an analysis of the election process as visible from the app itself. We find that Voatz has vulnerabilities that allow different kinds of adversaries to alter, stop, or expose a user's vote, including a sidechannel attack in which a completely passive network adversary can recover a user's secret ballot. We additionally find that Voatz has a number of privacy issues stemming from their use of third party services for crucial app functionality. Our findings serve as a concrete illustration of the common wisdom against Internet voting, and of the importance of transparency to the legitimacy of elections.

uk: вхід без авторизації

name: Voting Village - The Ballot is Busted before the Blockchain: A Security Analysis of Voaatz, the First Internet Application Used in U.S. Federal Elections


uk: Комп'ютерні науки

description: The emergence of new electronic ballot return methods creates an opportunity for greater vote access and potential enfranchisement, but also raises concerns about security in an increasingly tumultuous cyber-election landscape. The challenge of security is further compounded by a lack of proactive guidance from the federal level on developing these new technologies, leaving a gap in the secure development of the technologies to adopt an elections framework and approach to security. Experts from the National Cybersecurity Center (NCC) will offer a draft of security guidelines for the new electronic ballot return platforms to consider, and for federal agencies to adopt. The guidelines format mimics the Voluntary Voting System Guidelines created by the Election Assistance Commission.

uk: вхід без авторизації

name: Voting Village - Secure the Vote Standards: Electronic Ballot Return Standards & Guidlines - The Future of Voting


uk: Комп'ютерні науки

description: Remarks from Benjamin Hovland, Chairman of the US Election Assistance Commission

uk: вхід без авторизації

name: Voting Village - The U.S. Election Assistance Commission


uk: Комп'ютерні науки

description: Join Cordero Alexander Delgadillo, a business and technology lawyer, and more recently a former political candidate, as he demonstrates that elections, especially local elections, are akin to information systems (even reasonably locked down systems), because both are highly susceptible to the very non-tech, human vulnerabilities (nefarious and negligent). In this talk Cordero will provide insight by: - Examining the structures of American Democracy - Telling stories from his own election lawsuit: Delgadillo v. City of Peoria et al - Highlighting election process issues deemed “inconsequential” or “un-addressable” - Sharing information and resources

uk: вхід без авторизації

name: Voting Village - A Lawyer's Reflections on Elections


uk: Комп'ютерні науки

description: Democracy is the cornerstone of America’s Constitution, identity, and ideology, and this foundation was shaken during the 2016 Presidential Election. Four years later, we still have great lengths to go to ensure that the integrity of the 2020 Presidential Election, and any election moving forward, is protected. In February, this panel convened to discuss the threats and challenges that are present and may arise between then and the November election. We discussed the intersection of people,technology, security, and elections, with a focus on themes including: - The true scope of the problem when it comes to “hacking elections” - The biggest threats to the 2020 vote–threat modeling for disinformation, voting machine vulnerabilities, website hacking, and election manipulation - The role of hackers and coordinated vulnerability disclosure in building voter trust and improve cyber-resilience - The impact for the elections in the west at large, driven by the U.S.’s prominence as the champion for democracy. However, we did not know a pandemic and a constantly changing rhetoric by candidates and government leaders, along with several court cases, primaries and other events would add even more challenges for the 2020 election. We will discuss what is left in the 90 days left between now and the election, what can be feasibly helped by the public, governments, and others to ensure a secure and valid election, as well as what will need to be carried forward as lessons learned.

uk: вхід без авторизації

name: Voting Village - Hacking Democracy II: On Securing an Election


Voting Village - Senator Ron Wyden

uk: Комп'ютерні науки

description: Remarks from US Senator Ron Wyden of Oregon

uk: вхід без авторизації


uk: Комп'ютерні науки

description: What are the possibilities, and challenges, for using data science to protect elections? Stephanie Singer will describe an open source tool to aid in quick consolidation of election results, and a public-facing web front end planned for November 2020 and beyond.

uk: вхід без авторизації

name: Voting Village - Verified Voting: Strengthening Democracy for all Voters


uk: Комп'ютерні науки

description: Keynote Remarks from U.S. Representative for California's 14th congressional district, Jackie Speier

uk: вхід без авторизації

name: Voting Village - Voting Village Keynote Remarks


uk: Комп'ютерні науки

description: Since 2018, we have been experimenting with smartphone-app based mobile voting for a very small number of voters across various jurisdictions in the United States. The small-scale nature of these pilots has not prevented attackers and researchers from around the world from attempting to break into the platform at multiple levels. In this paper, we present the significant amount of attack data that has been collected over the past couple of years and an early analysis of the nature of these attack attempts, their lethality, origins, etc. We also present the mitigation measures that have worked and the ones that haven’t. Lastly, we will also dive deeper into a couple of very significant attack attempts and present a detailed analysis of the threat vectors, the attack modality, duration, etc. All this data is being shared in the public domain for the very first time and an anonymized dataset will be available for open downloads. We hope that it will further inform research in this space.

uk: вхід без авторизації

name: Voting Village - Analysis of Security Data Collected during the Mobile Voting Pilots


uk: Комп'ютерні науки

description: Amidst the COVID-19 pandemic, countless aspects of American life have been impacted, including our elections. Accommodations for the pandemic include an unprecedented shift towards absentee balloting across the United States, as well as drastically reduced in-person voting options. While we cannot predict the state of the pandemic come November, it is clear that elections will operate differently, constrained by health concerns around in-person voting,reduced polling place staff, and massive budget shortfalls. Such large-scale change will necessarily impact election security, as new attack surfaces open due to states relying on rapidly expanded infrastructure. With political polarization at a high, it is crucial that elections remain safe and secure despite the pandemic, and that American citizens believe their elections credible. In this talk, we will explore the areas of election infrastructure that are changing, and new associated security concerns based on our work at the U.S. Cybersecurity and Infrastructure Security Agency (CISA).

uk: вхід без авторизації

name: Voting Village - Leveraging Electronic Balloting Options Safely and Securely During the COVID-19 Pandemic


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Voting Village - An Overview of the Security Challenges Posed by State-Level Election Management System


uk: Комп'ютерні науки

description: New tactics and capabilities in information warfare give authoritarians unprecedented power to "hack" the electorates. Our research on campaigns in Poland and Taiwan show the breadth and impact of operations against democracies around the world and what they foreshadow for the US Presidential election.

uk: вхід без авторизації

name: Voting Village - War by Other Means: How information warfare undermines democracy


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Voting Village - See something, say something


uk: Комп'ютерні науки

description: Elections are critical in a free and fair society. Public trust in election infrastructure begins with understanding what the Government has done with transparency and how the hacker community can help. We are all citizens and our voices should be heard. - What has the Federal Government done since 2016 including with state and local? - What changes have come about with the military’s Defend Forward strategy in 2018? - How do they work together with the domestic efforts? - How are foreign and domestic campaigns of disinformation managed? - What else could we do better? - How can the hacker community help?

uk: вхід без авторизації

name: Voting Village - A Panel with the Feds on Election Security


uk: Комп'ютерні науки

description: Millions of overseas voters must choose between the following ballot return methods: international mail, email or fax return as allowed by each respective state law. The insecurity of email and fax, arguably, creates a security gap in the overall elections infrastructure that undermines its integrity. The National Cybersecurity Center proposes to ‘hack a fax’ in order to demonstrate the lack of security, and create an opportunity to strengthen standards. The concern to the broader community is that as we continue to seek to make voting more accessible, it must also be secure. Policies that limit overseas voters to technology that may not have security standards in place, and therefore are insecure, reduces the integrity of the overall elections ecosystem.

uk: вхід без авторизації

name: Voting Village - Secure the Vote: Hack a Fax


Voting Village - Election Security

uk: Комп'ютерні науки

description: Kylee Zabel’s ‘Washington State’s Secretary of State Kim Wyman On Voting Security’

uk: вхід без авторизації


uk: Комп'ютерні науки

description: As the previous DEF CON Voting Villages have proved, our voting equipment and infrastructure are very vulnerable to multiple types of attacks. But now, with everything that’s going on in the world ,voting by mail is the new vulnerable thing! Instead of focusing on problems and broken things, this talk will focus on simple fixes that vendors and governments can put into action right now. Starting with the registering to vote, then moving through parts of the entire system, BiaSciLab will offer suggestions on how simple practices and changes in thinking can improve the security of the entire system. Last year, in the Voting Village BiaSciLab did a talk on the election systems problems and howto fix them. This year with voting by mail, new problems are appearing! Like States not allowing people to vote by mail! Breaking down these flaws and offering real solutions for each one, BiaSciLab will bring hope in the face of this daunting and complex security problem in these hard times.

uk: вхід без авторизації

name: Voting Village - Don't Go Postal Over Mail In Voting: A Look into Voting by Mail


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS Village - Confessions of an Offensive ICS Cyber Security Researcher


ICS Village - Keynote Introduction

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS Village - Mexico: Industrial Cybersecurity footprint, key data, perspectives, lessons learns and opportunities


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS Village - Building a Cyber - Physical Testbed: Blackstart Restoration Under Cyber Fire


uk: Комп'ютерні науки

description: Critical Infrastructure Protection

uk: вхід без авторизації

name: ICS Village - Operationalizing Cyber Norms: Critical Infrastructure Protections


uk: Комп'ютерні науки

description: Hacking Into distribution companies.

uk: вхід без авторизації

name: ICS Village - Playing with Electricity: Red Teamin in Power Distribution Companies


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS Village - ICS SecOps: Active Defense Concept with Effective Incident Response in Industrial Control Systems


ICS Village - Keynote

uk: Комп'ютерні науки

description: Keynote presentation by Chris Krebs, Director of the Department of Homeland Security's Cybersecurity and Infrastructure security Agency (CISA)

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS Village - Journey of ICS Project Files: Visibility and Forensics to Exploitation


ICS Village - ATT&CK for ICS

uk: Комп'ютерні науки

uk: вхід без авторизації


So you think you can int? (C++)

uk: Комп'ютерні науки

description: There's an old saying; "When in doubt, do as the ints do.". But what do they do, exactly? What does an int actually look like? What happens if it's not initialized? What happens when it overflows? Why on earth does 1["ABC"] even compile? In this talk, you will learn why you need to know operating system security, activation records and standardese to understand a simple int in C++.

uk: вхід без авторизації


Making sense of unstructured data

uk: Комп'ютерні науки

description: In this talk Anders Norås will teach you how to use computational lingusitics to make sense of and extract data from unstructured human language texts. The session is structured as a step-by-step, progressive walkthrough where we build a small application which uses computational lingustics and machine learning to determine whether an product review is positive or negative. We'll be using Python for the programming examples, but knowing Python is not a prerequisite for attendes.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Windows Phone 8.1 is out, and the stand-out new feature is convergence of the Windows and Windows Phone platform, making it easy to build universal apps that run on both platforms. But that’s not all! There are loads of new APIs that enrich the phone platform, lots of new platform features such as new Background task possibilities, GeoFencing, advanced sharing and much, much more. In this talk, we’ll take a tour around the new Windows Phone developer platform, outlining the new app development options and calling out the major new platform capabilities that you can take advantage of in your Windows and Windows Phone apps.

uk: вхід без авторизації

name: A lap around the Windows Phone 8.1 development platform


uk: Комп'ютерні науки

description: With Windows Phone 8.1, convergence with the Windows programming frameworks means that it is easy to build universal apps that run on both Windows tablets and PCs, and on Windows Phone. In this session, we will take a look at the new features in Visual Studio 2013 and the Windows Phone 8.1 SDK that help you build universal apps, and dive into the architecture of a ‘real-world’ universal app, looking at questions such as when to use shared code in the Shared folder, when and how to use Portable Class Libraries, how to share XAML and what you should do to create tailored UI that differs between a Phone screen and a Tablet/PC screen.

uk: вхід без авторизації

name: Building Universal Apps for Windows Phone and Windows 8.1


From Code Monkey to Boss Man

uk: Комп'ютерні науки

description: You're a software developer today, but tomorrow there's a good chance you'll be running a business, even if you don't know it yet. As a software developer you have a set of skills which prepare you for building businesses. Creativity, problem solving, analytic skills - all of these things can help you step into the role of entrepreneur. In this talk I'll tell you my story of how I went from writing code to running a business and give you some ideas for what you'll need to learn along the way. From a basic understanding of financing and accounting to a sense of empathy necessary to connect to those around you and lead a business to success, there are skills that you can improve on that will help you even if you don't become the boss.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: It’s time for a design revolution in open technology. Companies like Google and Facebook that dominate the Internet promise us free services in exchange for the right to watch and study us; to mine and farm us. Like quarries, like livestock, we are natural resources to be exploited in a brave new digital world of corporate surveillance that threatens our most fundamental freedoms. There are open alternatives but they are too difficult for most of us to use. It is time to bring design thinking to open source and build beautiful, seamless open consumer products that are easy to use and which respect our fundamental freedoms.

uk: вхід без авторизації

name: Free is a Lie: The problem with consumer technology today and how to fix it.


0-layered architecture

uk: Комп'ютерні науки

description: If you want to respond fast to clients asking for large amounts of data you can't wait for entire objects to finish loading, just as you don't wait for a movie to download when watching it online. As battle-hardened Enterprise developers we are used to working with humongous datasets, and as our users have been spoiled with the performance of modern web applications, we are challenged to deliver more data faster. In this talk we'll look at techniques on how to stream data from SQL Server to clients using .NET Web API. We will see that in freeing us from the shackles of traditional layered architectures we can drastically reduce latency and memory footprint. We will look in detail at this caching strategy and there will be plenty of code examples.

uk: вхід без авторизації


10 Things I’ve Learned From Open Source

uk: Комп'ютерні науки

description: Over the past couple of years, Brendan has worked extensively with OSS projects and helped introduce new developers to this brave new world. In this talk he will demonstrate a practical guide to working in Open Source. Join him for real-world advice, based on the things he's seen succeed (and fail!). If you're looking to start your own OSS journey; or if you already do a little and would like to do more; you need to catch this talk.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Carl Franklin has done extensive work with the Kinect for Windows SDK v2, and now he's sharing his knowledge and code with you. He shares code to simplify Kinect development as well as GesturePak Alpha v2, which lets you record and recognize gestures in C#.

uk: вхід без авторизації

name: The Future of UX with Kinect for Windows v2


C# is in my ears and in my eyes

uk: Комп'ютерні науки

description: Google Glass! FitBit! Agent Watch! Wearable computing might seem like something from the future, but many people are embracing the future today. And C# developers already have the tools and skills to harness the power of wearable devices. This talk demonstrates how you can take advantage of .NET to develop applications that connect your phone, Google Glass, smartwatch, FitBit, and the Internet of All The Things.

uk: вхід без авторизації


Functional UI programming

uk: Комп'ютерні науки

description: Various JavaScript toolkits have been offered the past few years to enable the use of functional patterns on the frontend. While these tools promote composable APIs and pure functions to a certain degree, UI programming is still encumbered with stateful MV*-like frameworks, or just plain dirty DOM manipulation. Facebook's React is an interesting approach to UI programming in the browser that does away with manual DOM manipulation all together, and more closely resembles classic UI programming. Combine this approach with the immutable data structures of Clojurescript, and we're really getting somewhere. In this talk I will explore the path to fully functional UI programming in the browser through React, Clojurescript, Om (React for Clojurescript) and other tools.

uk: вхід без авторизації


HTML5/JavaScript Communication APIs

uk: Комп'ютерні науки

description: HTML5 and related specifications come with a lot of new JavaScript APIs; communication is one of the most important aspects. It is now possible to send cross-frame, cross-browser tab, even cross-domain requests, receive push messages from the server, use bi-directional full-duplex communication, and more. This session will discuss these and other techniques, show code samples, and list helper libraries.

uk: вхід без авторизації


Coding with MongoDB in .NET

uk: Комп'ютерні науки

description: Enterprises are choosing MongoDB, with greater frequency. It's a good time to get a grasp on how to talk to MongoDB from .NET. In this talk, Craig will walk you through building a simple web application utilizing the .NET driver that demonstrates the basic features of MongoDB including CRUD operations, LINQ, and Object-Document-Modeling (ODM).

uk: вхід без авторизації


Real World Schema Design with MongoDB

uk: Комп'ютерні науки

description: Craig Wilson will lead a discussion examining the schema design insights and trade-offs using real world examples. We'll look at three example applications: building an email inbox, selecting a shard key for a large scale web application, and using MongoDB to store user profiles. From these examples you should leave the session with an idea of the advantages and disadvantages of various approaches to modeling your data in MongoDB.

uk: вхід без авторизації


The Future of ASP.NET Part II

uk: Комп'ютерні науки

description: David Fowler and Damian Edwards will answer *your* questions about the all new ASP.NET vNext in this follow on talk after you've got the overview from Scott Hanselman. Come prepared with the questions you want answers to or just watch and learn as we peel back the layers of the new story.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Learn how to use Prism for the Windows Runtime to accelerate managed Windows Store app development by using its support for MVVM and commonly required core services. This session, delivered by one of the Prism for the Windows Runtime team members, will demonstrate how to accelerate app development by using Prism's support for bootstrapping MVVM apps, navigation, state management, validation of user input, and more.

uk: вхід без авторизації

name: Accelerating Windows Store app development using Prism for the Windows Runtime


uk: Комп'ютерні науки

description: Everyone's heard of NoSQL and document databases, and in this talk we’ll look at RavenDB, and why you might want to use it. But changing your mindset from a relational schema is hard, so we’ll go past the buzzwords and the basics to tell you why RavenDB was the right choice for our application, how we changed to thinking about documents, and how we use it on a day-to-day basis. We'll cover the problems we've experienced, how we solved them, and some things we’ve learnt when using RavenDB.

uk: вхід без авторизації

name: From SQL to RavenDB: A .NET Team’s Journey


uk: Комп'ютерні науки

description: SynopsisVelocity is one of the most common metrics used-and one of the most commonly misused-on agile projects. Velocity is simply a measurement of speed in a given direction-the rate at which a team is delivering toward a product release. As with a vehicle en route to a particular destination, increasing the speed may appear to ensure a timely arrival. However, that assumption is dangerous because it ignores the risks with higher speeds. And while it’s easy to increase a vehicle’s speed, where exactly is the accelerator on a software team? Michael “Doc" Norton walks us through the Hawthorne Effect and Goodhart’s Law to explain why setting goals for velocity can actually hurt a project's chances. Take a look at what can negatively impact velocity, ways to stabilize fluctuating velocity, and methods to improve velocity without the risks. Leave with a toolkit of additional metrics that, coupled with velocity, give a better view of the project's overall health.

uk: вхід без авторизації

name: Agile Metrics - Velocity is NOT the Goal


The Technical Debt Trap

uk: Комп'ютерні науки

description: Technical Debt has become a catch-all phrase for any code that needs to be re-worked. Much like Refactoring has become a catch-all phrase for any activity that involves changing code. These fundamental misunderstandings and comfortable yet mis-applied metaphors have resulted in a plethora of poor decisions. What is technical debt? What is not technical debt? Why should we care? What is the cost of misunderstanding? What do we do about it? Doc discusses the origins of the metaphor, what it means today, and how we properly identify and manage technical debt.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: If the world of fantasy has taught us anything, it is that the oldest magic is the most powerful magic. In the realm of computing, no magic is more ancient than the one that arises from the duality of code and data. The ability to treat code as data and data as code is at the core of LISPs legendary meta-programming capabilities, but the idea is even older than that - it echoes the spectre of von Neumann himself! With expression trees, the enabling technology behind LINQ and the dynamic language runtime, .NET programmers have access to a beautiful programming model to control this ancient magic. In this demo-driven session, we will start with some simple examples to explain the basics of working with expression trees. However, we will quickly progress to something more useful and powerful, as we consider how to build a DSL for expressing rules to be compiled and evaluated at runtime. We will end up with a complete real-world example using data validation in an ASP.NET MVC application that would be infeasible without the capabilities offered by expression trees.

uk: вхід без авторизації

name: Metamagical programming with expression trees


Code reviews

uk: Комп'ютерні науки

description: It's undisputed that regular peer reviews are one of the most effective ways to maintain high quality in a code base. Yet, so many development teams choose not to adopt them for their software project.In the publishing industry, no written word ever sees the light of day before it has gone through an extensive period of critical review. This applies to books, scientific papers and newspaper articles alike. Why not software? In this session we'll explore the social and practical reasons why code reviews aren't as widely adopted in modern software development shops as they should be.We'll also look at a few concrete tools and techniques that teams can put in place to help them overcome the most common road blocks. In the end, we'll see how code reviews help peers leverage each other's knowledge and skills to ensure their work is as good as it can possibly be.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This session will provide a kickstarter for Hadoop on the Microsoft platform. It will take the audience from installation, through upload of data and analysis to visualisation of results via PowerBI. It's a must for any developer who is interested to find out how the data science/big data wave is going to impact them and what skills are needed work in this market.

uk: вхід без авторизації

name: Hadoop Kickstarter for the Microsoft Platform


uk: Комп'ютерні науки

description: Web application testing is a rapidly evolving topic, so year by year it is reasonable to enumerate the possible options and re-evaluate the web testing strategy you have chosen for your project. In this talk I would like to share what we have learned about web testing during our projects. I will show strategies and tools that have worked for us to address the different specialties of the different applications. (Did I mention already, that there is no one-size-fits-all solution in web testing?) You will hear about things like test-driven web development, problems and solutions of unit testing MVC controllers, efficient usages of Selenium WebDriver, but also about headless browser testing, parallel test execution, cloud testing and of course a bit of SpecFlow.

uk: вхід без авторизації

name: Lessons Learned - Web Application Testing in .NET


uk: Комп'ютерні науки

description: Today's major .NET languages allow developers to use functional techniques that can reach far outside the realm of traditional imperative and object-oriented programming. Yr (yr.no), Northern Europe's biggest weather site serving millions of users worldwide since 2007, has taken advantage of many of these techniques since the introduction of LINQ and the rise of F#. The talk will give an introduction to how this has been done in both C#, VB.NET and F#, with a variety of applications including data processing, functional composition for I/O flow control, HTML rendering and the use of functional DSL techniques for graph rendering.

uk: вхід без авторизації

name: Case study: Making use of functional programming techniques in .NET


Brief tour of Clang

uk: Комп'ютерні науки

description: LLVM came a long way from being a research project to a production quality environment for building compilers. Clang is built on top of LLVM and is a leading compiler for C family languages. Hands-on demonstration of clang's technical advantages, tooling support, and bleeding edge C++1y implementation.

uk: вхід без авторизації


Designing Wonderful .NET APIs

uk: Комп'ютерні науки

description: There are .NET libraries that are complex to setup, hard to understand, difficult to debug, and impossible to extend. And then there are .NET libraries for the same task that wonderfully just work. Why do some libraries succeed where others fail? In this session James will discuss what makes a well designed API, from high level design principles like The Pit of Success, The Wall of Complexity, and The Power of Sameness, to applying those concepts in low level .NET class design, with the goal of creating .NET libraries that developers love to use.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Being able to give active Internet connectivity to objects gives rise to wide array of applications and innovation in such diverse areas as city planning, smart toys, road traffic monitoring, industrial automation, critical infrastructure monitoring including smart grid to name a few. In a few years Internet of Things will not be a buzz-word anymore, it will be built into every electronic product we are using. This will lead a great deal of innovation from silicon vendors in the next decade to where the main targets of innovation will be high performance systems and complex software on portable devices. This presentation will demonstrate real world use cases and show how developers can get started with applications for Internet of Things.

uk: вхід без авторизації

name: Internet Of Things and everything wireless


Continuous Delivery with Octopus Deploy

uk: Комп'ютерні науки

description: One of the main tenets of Agile development is to deliver business value to the production environment early and often. That's easy enough if you are delivering one small web app, but what if your application is composed of several web apps across multiple tiers with a large database and maybe even a few Windows services and scheduled tasks? Now you need a deployment system that is built to scale and allows you to automate all of these tasks to achieve consistency in your deployments. In this session I will show you how Octopus Deploy can make these deployments as simple as the click of button. I will also highlight new features in the 2.0 release such as Guided Failure and audit trails.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: For far too long the web has gone without a fast, reliable framework to render fake mustaches. The handlebar, mutton chop, and soul patch will guide us in our journey to optimize canvas and JavaScript performance. We’ll discuss our pragmatic approach to performance optimization and walk through real world challenges we solved while developing HTML5 games like Cut the Rope and Contre Jour.

uk: вхід без авторизації

name: Facial Hair & the Road to Faster JavaScript


uk: Комп'ютерні науки

description: Standing up and sharing your knowledge can be the piece needed to build an extraordinary career. In this fun and interactive talk, Johannes will share the techniques that has helped him find his passion and share it. Through actively participating and sharing in conferences and user group, Johannes has become a highly sought after employee who gets the opportunity to travel the world and learn and share knowledge as part of his job. In this talk, Johannes will go through a simple and structured process that can make anyone comfortable giving a presentation in few minutes. You will learn how to find out what you want to talk about, how to structure your ideas and how to practice effectively.

uk: вхід без авторизації

name: Build an extraordinary career by sharing your knowledge


Introducing Roslyn

uk: Комп'ютерні науки

description: Project Roslyn is Microsoft's next-generation compiler for C# and VB that will revolutionize the .NET ecosystem by enabling the average .NET developer to leverage the power of the compiler. In this talk, I will introduce you to the compiler's new API, and demonstrate how exposing the compiler as a service will change the .NET development environment forever.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Bad news, folks - the number of devices we have to support isn't going to get any smaller. As developers, we now support a plethora of devices and platforms ranging from cheap Android phones through to iPads and even (it's true!) traditional desktop PCs. That would be fine, except we rarely have any extra development time to optimise for them! There is good new, though! Hybrid apps continue to let us target all these form factors with the same core code, and relatively minor additions to create responsive designs. They're not a new concept, but the scope of what is possible has grown significantly. This session will dive into the current state of the art for hybrid, including technologies such as PhoneGap, FireFox OS, Chrome Packaged Apps and node-webkit. By the time you leave, you'll know exactly what you need to build a modern hybrid app which is perfectly suited to your multi-device ecosystem.

uk: вхід без авторизації

name: What’s the state of HTML5 & hybrid apps?


W8.1: Given to Fly

uk: Комп'ютерні науки

description: One of the most important aspects of a Windows Store app is its performance: an end-user will simply not keep on using your app if (s)he has to wait too long to complete the task (s)he’s using it for – after all, for most apps, there will be loads of alternatives. For Windows 8.1 XAML apps, quite a few things changed concerning performance when you compare it to Windows 8. In this session we’ll cover those topics as well as learn about performing tasks in parallel, offloading tasks, keeping your UI thread responsive, data and UI virtualization, overdraw & analyzing performance… In short: if you’re serious about developing a Windows Store app and you want to learn how to ensure you keep it fast & fluid, you’ll want to attend this session.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: "Any application that can be written in JavaScript will eventually be written in JavaScript" - Atwoods Law Have you ever wanted to control devices in your own home over the internet? I will show you how you can do this with the help of Arduino and JavaScript. Arduino is an open-source microcontroller that can connect to various sensors and affect it's surroundings by controlling lights, LCD screens, motors and other actuators. Johnny-five is a JavaScript library that can communicate with an Arduino using node.js. This opens doors for new possibilities, like integrating with Windows Azure or Firebase. I will introduce Arduino and johhny-five and show you how these two in conjunction can get you started with "The Internet of things". Furthermore I will demonstrate how Arduino combined with various web technologies let's you build awesome home automation systems.

uk: вхід без авторизації

name: Controlling the world with Arduino & JavaScript?


History of Programming: Part 1

uk: Комп'ютерні науки

description: Join Mark on a quick-fire, whistle-stop, shallow-to-the-point-of-vacuous tour through the history of programming and programming languages, from the surprise twist at the beginning, through the Golden Age of LISP, C and Smalltalk, right up to the present day. What was the Greatest Programming Language ever? Which is better: dynamic or static typing? Why is Java? What does the future of programming hold for the brave adventurer? Discover the answers to none of these questions or indeed any others in this utterly pointless but hopefully entertaining talk. Warning: not suitable for children or IT managers.

uk: вхід без авторизації


From text to full-text

uk: Комп'ютерні науки

description: These days if you need to implement search you tend to grab an off the shelf solution such as Elasticsearch, Solr, FAST, Google Search appliance or a SAAS provider (EpiServer Find, hosted solr/elasticsearch services). All of these options are great at taking data blobs (json/xml/documents) and making them queryable and are absolutely recommended over rolling your own solution. However to get the most out of these it really helps to understand just a little bit of what these services are actually doing to your data. In this talk I'll explain how Lucene takes your data, stores it and molds it into a shape that can be queried over at insane speeds. Showing what it does in the background: tokenizing, analyzing, inverted indices and how this is of importance when writing queries and facetting your data.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Building a high performance front end is a balancing act. You need to understand all the different moving parts and subsystems in the browser and how they interact with each other. Small changes can significantly impact page and app load time, memory consumption, and processor use which has a huge impact on your user’s experience! In this session, we will dive into the subsystems of the browser and learn to optimise performance on sites and in web apps. We will also deep dive into the new performance analysing tools in IE11 available expose good and bad run-time patterns for your sites and web apps, and provide users with a fast and fluid experience.

uk: вхід без авторизації

name: Understanding your website: Through the IE11 F12 tools


Machine Learning with F#

uk: Комп'ютерні науки

description: While Machine Learning practitioners routinely use a wide range of tools and languages, C# is conspicuously absent from that arsenal. Is .NET inadequate for Machine Learning? In this talk, I'll argue that it can be a great fit, as long as you use the right language for the job, namely F#. F# is a functional-first language, with a concise and expressive syntax that will feel familiar to data scientists used to Python or Matlab. It combines the performance and maintainability benefits of statically typed languages, with the flexibility of Type Providers, a unique mechanism that enables seamless consumption of virtually any data source. And as a first-class .NET citizen, it interops smoothly with C#. So if you are interested in a language that can handle both flexible data exploration and the pressure of a real production system, come check out what F# has to offer.

uk: вхід без авторизації


A Heaping Stack of Scripts

uk: Комп'ютерні науки

description: JavaScript applications keep getting bigger, more complex, and harder to debug. Without stacktraces, how are we expected to find, decipher, and fix our bugs? "Stacktrace or GTFO!" Getting the Stacktrace is on us. Only we can design the code to capture stacktraces effectively. Let's explore some popular libraries like stacktrace.js and tracekit, some techniques for catching exceptions without mess try/catches everywhere, and what's coming next with expanded error objects. Let's talk about finding and fixing our errors and stop this proliferation of a broken JavaScript web.

uk: вхід без авторизації


Demo Labs - Phirautee

uk: Комп'ютерні науки

description: Over the past few years, ransomware has gone wild and organisations around the world are getting targeted leading to the damage and disruption. As we all know that the threat landscape is changing rapidly and we hear the fuss about ransomware infection at the offices or read about it in the news. Have you ever wondered how threat actors are writing ransomwares? What level of sophistication and understanding is required to target an organisation? In this demo, we will utilise the native Windows commands to build ransomware and target a host via phishing. Introducing Phirautee, a proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell and does not require any third-party libraries. This tool steals the information, holds an organisation's data to hostage for payments or permanently encrypts/deletes the organisation data. The tool uses public-key cryptography to encrypt the data on the disk. Before encrypting, it exfiltrates the files from the network to the attacker. Once the files are encrypted and exfiltrated, the original files are permanently deleted from the host and then tool demands a ransom. The ransom is asked using the cryptocurrency for payments, so transactions are more difficult for law enforcement to trace. During the demonstration of Phirautee, you will see a complete attack chain i.e. from receiving ransomware attack via a phishing email and how the files get encrypted on the compromised systems. A detailed walkthrough of the source code would be provided to understand how hackers utilise simple methods to create something dangerous. I will end the demo with several defence mechanisms by performing forensics analysis on Phirautee using publicly available tools.

uk: вхід без авторизації


Demo Labs - Starkiller

uk: Комп'ютерні науки

description: The ultimate goal for any security team is to increase resiliency within an organization and adapt to the modern threat. Starkiller aims to provide red teams with a platform to emulate Advanced Persistent Threat (APT) tactics. Starkiller is a frontend for the post-exploitation framework, PowerShell Empire, which incorporates a multi-user GUI application that interfaces with a remote Command and Control (C2) server. Empire is powered by Python 3 and PowerShell and includes many widely used offensive security tools for Windows, Linux, and macOS exploitation. The framework's flexibility to easily incorporate new modules allows for a single solution for red team operations. Both red and blue teams can utilize Starkiller to emulate and defend against the most used APT attack vectors.

uk: вхід без авторизації


Demo Labs - malconfscan with cuckoo

uk: Комп'ютерні науки

description: "MalConfScan with Cuckoo" is a tool for automatically extracting known Windows and Linux malware's configuration data. MalConfScan with Cuckoo works as a plug-in for Cuckoo Sandbox. Cuckoo Sandbox is a leading open-source automated malware analysis system. You can automatically dump malware configuration data by installing this plug-in on Cuckoo. This is a unique feature compared to other commercial Sandbox products. It supports over 30+ Windows and Linux malware families to extract the configuration data. Also, it can be used for the memory forensics tool for Windows/Linux OS as a Volatility plug-in. It helps to detect known/unknown malware and extract configuration data from memory images.

uk: вхід без авторизації


Demo Labs - PyRDP

uk: Комп'ютерні науки

description: PyRDP is a Remote Desktop Protocol (RDP) monster-in-the-middle (MITM) tool and library useful in intrusion testing and malware research. Its out of the box offensive capabilities can be divided in three broad categories: client-side, MITM-side and server-side. On the client-side PyRDP can actively steal any clipboard activity, crawl mapped drives and collect all keystrokes. On the MITM-side PyRDP records everything on the wire in several formats (logs, json events), allows the attacker to take control of an active session and performs a pixel perfect recording of the RDP screen. On the server-side, on-logon PowerShell or cmd injection can be performed when a legitimate client connects. Over the last year, we implemented several features that we are going to uncover in this brand-new demo lab workshop: a headless mode that allows deployment on systems with less resources or without an X11 stack, a fully transparent layer-2 deployment capability leveraging IP_TRANSPARENT sockets, a brand new Windows Graphical Device Interface (GDI) implementation and the ability to convert recorded sessions into MP4 videos. On the malware research side, PyRDP can be used as part of a fully interactive honeypot. It can be placed in front of a Windows RDP server to intercept malicious sessions. It can replace the credentials provided in the connection sequence with working credentials to accelerate compromise and malicious behavior collection. It also saves a visual and textual recording of each RDP session, which is useful for investigation or to generate IOCs. Additionally, PyRDP saves a copy of the files that are transferred via the drive redirection feature, allowing it to collect malicious payloads.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Cotopaxi is a set of tools for security testing of Internet of Things devices using specific network IoT/IIoT/M2M protocols (e.g. AMQP, CoAP, MQTT, DTLS, mDNS, QUIC). These tools will be used by penetration testers and/or security researchers to identify IoT services and verify security vulnerabilities or misconfigurations. Based on recent publications, including a report from Trend Micro (https://www.trendmicro.com/vinfo/us/...tion-protocols), new IoT protocols are widely used both in public networks and in industrial environments. Unfortunately, in most cases those servers are not configured properly or use outdated components. Currently available tools used for security testing, like nmap or OpenVAS, do not support all new IoT protocols (e.g. AMQP, CoAP, MQTT, DTLS, mDNS, QUIC). So possibilities to test IoT products and discover such devices in tested networks are limited. We are working to fill this gap with Cotopaxi toolkit.

uk: вхід без авторизації

name: Demo Labs - Cotopaxi: IoT protocols testing toolkit


uk: Комп'ютерні науки

description: Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

uk: вхід без авторизації

name: Demo Labs - Mobile App Security Testing with MobSF


Demo Labs - redlure

uk: Комп'ютерні науки

description: redlure can be described as a distributed phishing platform. There is a centralized API (redlure-console) where you can create the different aspects of your phishing campaigns. This console controls secondary servers running a more basic API (redlure-workers) that do the actual hosting of your phishing sites/files and communicate results back to the main server. Obviously there are existing tools that can accomplish phishing, but here are a few features to this tool that differentiate it and will be described in the abstract.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Carnivore is a username enumeration and password spraying tool for Microsoft services (Skype for Business, ADFS, RDWeb, Exchange and Office 365). It originally began as an on-premises Skype for Business enumeration/spray tool as I was finding that these days, organizations often seem to have locked down their implementations of Exchange, however, Skype for Business has been left externally accessible, and has not received as much attention from previous penetration tests due to the lack of tools as impactful as Mailsniper. Overtime this was improved and built upon to bring the same service discovery, username enumeration and password spraying capability to Skype, ADFS, RDWeb, Exchange, and O365 all in the same tool. Carnivore includes new post compromise functionality for Skype for Business (pulling the internal address list and user presence through the API), and smart detection of the username format for all services. As a practical means of entry into an organisation – numerous external penetration tests have uncovered an on-premises Skype for Business or ADFS server even for organisations that have moved Mail/SSO/etc to the cloud.

uk: вхід без авторизації

name: Demo Labs - Carnivore: Microsoft External Attack Tool


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS Village - On the insecure nature of turbine control systems in power generations


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS Village - 5 Quick Wins for Improving ICS Cybersecurity Posture


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS Village - Vulnerability Discovery: Tips for Surviving & Thriving


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS Village - Mission Kill: Process Targeting in ICS Attacks


ICS Village - Vivisecting PowerPC

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ICS Village - PowerLine Truck Hacking 2TOOLS4PLC4TRUCKS


Advanced Agile Planning

uk: Комп'ютерні науки

description: Velocity is perhaps the most useful metric available to agile teams. In this session we will look at advanced uses of velocity for planning under special but common circumstances. We will see how to forecast velocity in the complete absence of any historical data. We will look at how a new team can forecast velocity by looking at other teams. We will see how to predict the velocity of a team that will grow or shrink in size. Most importantly we will look at the use of confidence intervals to create plans we can be 90% confident in, even on fixed-price or fixed-date contracts.

uk: вхід без авторизації


IDEs: The DVD Commentary

uk: Комп'ютерні науки

description: We developers often take IDEs for granted. But have you ever wondered what’s going on under the surface? I’d like to pull back the curtains on the inner workings of the modern IDE, see where the state of the art is now, and look where it’s heading for the future. We’ll take a tour of the wealth of features provided, and take a deep dive into how the IDE knows so much about your code, and how it can provide such fast navigation and safe refactorings. We’ll also look at why some people are choosing to move away from IDEs and back to text editors, and what the future holds, with projects such as Nitra, Roslyn and Lighttable.

uk: вхід без авторизації


Agile Estimating

uk: Комп'ютерні науки

description: The first step in creating a useful plan is the ability to estimate reliably. In this session we will discuss how to do this. We will look at various approaches to estimating including unit-less points and ideal time. The class will present four specific techniques for deriving reliable estimates, including how to use the popular Planning Poker® technique and other techniques that dramatically improve a project's chances of on-time completion.

uk: вхід без авторизації


Getting Agile with Scrum

uk: Комп'ютерні науки

description: Scrum is one of the leading agile software development processes. Over 12,000 project managers have become certified to run Scrum projects . Since its origin on Japanese new product development projects in the 1980s, Scrum has become recognized as one of the best project management frameworks for handling rapidly changing or evolving projects. Especially useful on projects with lots of technology or requirements uncertainty, Scrum is a proven, scalable agile process for managing software projects. Through lecture, discussion and exercises, this fast-paced tutorial covers the basics of what you need to know to get started with Scrum. You will learn about all key aspects of Scrum including product and sprint backlog, the sprint planning meeting, the sprint review, conducting a sprint retrospective, activities that occur during sprints, measuring and monitoring progress, and scaling Scrum to work with large and distributed teams. Also covered are the roles and responsibilities of the ScrumMaster, the product owner, and the Scrum team. This session will be equally suited for managers, programmers, testers, product managers and anyone else interested in improving product delivery.

uk: вхід без авторизації


User Stories for Agile Requirements

uk: Комп'ютерні науки

description: The technique of expressing requirements as user stories is one of the most broadly applicable techniques introduced by the agile processes. User stories are an effective approach on all time constrained projects and are a great way to begin introducing a bit of agility to your projects. In this session, we will look at how to identify and write good user stories. The class will describe the six attributes that good stories should exhibit and present thirteen guidelines for writing better stories. We will explore how user role modeling can help when gathering a project’s initial stories. Because requirements touch all job functions on a development project, this tutorial will be equally suited for analysts, customers, testers, programmers, managers, or anyone involved in a software development project. By the end of this tutorial, you will leave knowing the six attributes of a good story, learn a good format for writing most user stories, learn practical techniques for gathering user stories, know how much work to do up-front and how much to do just-in-time.

uk: вхід без авторизації


RELEASE Scalable Erlang

uk: Комп'ютерні науки

description: In this talk I'll present Scalable Distributed (SD) Erlang -- an extension of distributed Erlang functional programming language for reliable scalability. The work is a part of the RELEASE project that aims to improve the scalability of Erlang programming language. I'll start by providing an overview of the RELEASE project and discussing distributed Erlang limitations. Then I'll introduce SD Erlang, its design, motivation, and the main two components, i.e. scalable groups and semi-explicit placement. The scalable groups (s_groups) enable scaling the network of Erlang nodes by eliminating transitive connections, i.e. a node may belong to multiple s_groups where each s_group node has transitive connections with the nodes from the same s_groups and non-transitive connections with other nodes. The semi-explicit placement enables to spawn processes on nodes either in a particular s_group, or with particular attributes (e.g. available hardware or software), or with certain parameters (e.g. least load). I’ll also cover the results of the preliminary validation, and SD Erlang operational semantics and its verification. I'll conclude the talk by providing a brief overview of the ongoing work and our future plans.

uk: вхід без авторизації


Privacy for the Internet

uk: Комп'ютерні науки

description: Are you as fed up as I am about all the privacy scandals by both secret services such as NSA and GCHQ and companies such as Google, TV companies, and others? But what can we do? Well, Martin Fowler recently gave an important keynote with the working title "We are not just code monkeys." It talks about the role we as IT guys play, could play, and should play in this world. So let's use our knowledge and responsibility. The goal for this session is to get a better understanding about the problem, the tasks, possible solutions so that we IT experts can finally rescue the world. It's not a talk, it's a starting point.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: A solid understanding of object end-of-lifecycle handling is necessary for achieving efficient memory use in .NET. Unfortunately, the official documentation on the topic is somewhat fragmented and targeted at developers from historically relevant backgrounds, leaving an increasingly large proportion of new .NET developers to flounder in some rather murky waters. This session will examine how to best design for object end-of-lifecycle in .NET, including such concerns as: Why do we have both finalizers and IDisposable? How are they meant to interact? When should you implement a finalizer? (Probably much less often than you might think!) When should you implement IDisposable? What are the recommended implementation patterns for both finalization and disposition? What are the recommended patterns for consumption of disposable objects?

uk: вхід без авторизації

name: Finalization and disposition in .NET: Or how to kill poor, helpless objects efficiently and effectively


uk: Комп'ютерні науки

description: Developing a multi-million LOC highly integrated software product across several locations in numerous time-zones introduces multi-dimensional challenges for the developer operation. Ensuring a frequently available build, configuring and parameterizing tools effectively and efficiently, and guaranteeing that the right content is included for the right release are the top three challenges. Furthermore, to optimize the operation, a reliable and deterministic development environment as well as a lean release coordination structure must be in place. This can be obtained by designing a development operation (DevOps) with a focus on self-service and automation, coupled with tight integration with the developers to continuously optimize the flow of features through the build system to the final artifact delivered to the customer. The Petrel Build Services group is a development operation (DevOps) team offering a range of services for the Petrel E&P software platform. Automated builds, a scalable test and debug environment, tool stack support, code diagnostics, and daily installers are key deliverables. In less than 10 years, the size of the organization being supported by the Build Services group has grown from a team of 10 to hundreds of developers. This has been achieved by maintaining a flat headcount in the group.

uk: вхід без авторизації

name: A Peek into an Enterprise Development Operation Team


Insecure coding in C (and C++)

uk: Комп'ютерні науки

description: Let's turn the table. Suppose your goal is to deliberately create buggy programs in C and C++ with serious security vulnerabilities that can be "easily" exploited. Then you need to know about things like stack smashing, shellcode, arc injection, return-oriented programming. You also need to know about annoying protection mechanisms such as address space layout randomization, stack canaries, data execution prevention, and more. This session will teach you the basics of how to deliberately write insecure programs in C and C++. Warning: there will be lots of assembler code in this talk.

uk: вхід без авторизації


It doesn’t work like that in enterprise

uk: Комп'ютерні науки

description: We've all heard it... or something similar. There's probably one senior guy at work who tells you this at least once a month. You've got an idea for an amazing new feature or practice that's going to save your company both time and money, but it's too 'cutting edge'; your management fears the unfamiliar and you are cruelly stifled. "It doesn't work like that in Enterprise" is a passionate and motivational story about my journey as a developer in the face of one of the worst fallacies in our industry. The extremes of my experience will make you laugh & cry in equal measure, and maybe help put your own frustrations into perspective.

uk: вхід без авторизації


iOS app Development with Xamarin and F#

uk: Комп'ютерні науки

description: With each new release of Xamarin Studio, the mobile story gets even better for functional programming. It’s possible to write fully native, cross-platform mobile apps — iOS, Android, Mac, Windows Phone 7, and Windows 8 — all entirely in F#! I’ll concentrate on iOS development, starting with the basics, and continuing with many important tips and tricks that will keep you productive. You’ll practically be a master app dev when we’re done -- all that’s missing is your idea!

uk: вхід без авторизації


Making 3D games with MonoGame

uk: Комп'ютерні науки

description: MonoGame is a brilliant games framework that solves the annoying problem of more platforms to develop for than you can throw a hat at. With monogame you can develop for them all at once. MonoGame is an open source implementation of XNA. It makes 2D game programming very easy, but a less well know fact, is that 3D is also much easier than it seems. This talk will guide you through the basics of 3D game programming, You'll be loading, displaying and moving 3D models with textures and be able to play about with different camera types. By the end and once you've clocked out from the day job you'll be ready to create your own 3D gaming masterpiece.

uk: вхід без авторизації


The Future of Extreme Web Browsing

uk: Комп'ютерні науки

description: Only a handful of people will get to climb Mt. Everest during their lifetime and even fewer will land backflips over 25 meter canyons on a mountain bike. In fact, you probably shouldn't try that. And yet, growing support for WebGL and other immersive web technologies bring more of us closer to that reality than we've ever been before. In this talk, we’ll explore the future of interactive story telling and what it means to some of the worlds most passionate explorers. We'll show you how these pioneers are using emerging technologies to bring some of the world's most extreme moments into the living rooms of fans and enthusiasts. Come see how 3D, audio, video, gigapixel photography and compelling new hardware combine to create a brand new kind of narrative.

uk: вхід без авторизації


Advanced Test Driven Development

uk: Комп'ютерні науки

description: Once you start to get good at TDD, you begin to learn the nuances of the discipline such as the fact that tests and code grow in very opposite directions. As the tests get more specific, the code gets more generic. You also begin to learn that in the red/green/refactor cycle there are just a few standard gestures that move a test from red to green. In this talk, Uncle Bob will discuss those gestures, called transformations, and will present the idea that they when applied in a particular order and priority they can have a profound effect on the resulting code. This one is at the bleeding edge of TDD research; and will leave you with something to ponder.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: So we've heard the message about Clean Code. And we've been practicing TDD for some time now. But what about architecture and design? Don't we have to worry about that? Or is it enough that we keep our functions small, and write lots of tests? In this talk, Uncle Bob talks about the next level up. What is the goal of architecture and design? What makes a design clean? How can we evolve our systems towards clean architectures and designs in an incremental Agile way.

uk: вхід без авторизації

name: NDC Oslo 2014 - Architecture: The lost years


uk: Комп'ютерні науки

description: Why is functional programming becoming such a hot topic? Just what is functional programming anyway? And when am I going to have to know about it? In this talk Uncle Bob will walk you through the rationale that is driving the current push towards functional programming. He'll also introduce you to the basics by walking through some simple Clojure code.

uk: вхід без авторизації

name: Functional Programming: The Failure of State


Beautiful Builds

uk: Комп'ютерні науки

description: In this session Roy Osherove covers useful patterns for solving common problems that you might come across while building your automated build process: slow builds, unmaintainable scripts, dependencies between multiple componenents and versions, and more.

uk: вхід без авторизації


FORSE: Knowledge is our force!

uk: Комп'ютерні науки

description: Are you a Ninja or a Samurai? Ever wondered if you could switch from old-school Bash to a newcomer PowerShell? Or the other way around? Could one of them be as effective at the other one? Perhaps even better or easier to master? Want to find out? Come and see the epic dance off of a Bash command line ninja and PowerShell samurai. Find your favourite scripting platform, by watching us solve real-world problems using the two!

uk: вхід без авторизації


Building Directives for AngularJS

uk: Комп'ютерні науки

description: Directives are a powerful feature of Angular and allow you to bring future web standards into the browser today. Directives are also intimidating at first because you need to know some magical incantations to make them work correctly and efficiently. In this session we’ll build some custom directives and see how to work with scope objects, linking functions, transclusions, and other features of directives that can transform your front end development.

uk: вхід без авторизації


Node Tools For Front End Developers

uk: Комп'ютерні науки

description: Bower, Grunt, Gulp, and Yeoman are tools you can use to help your front-end development regardless of the server side technology stack you use. In this session we’ll see how to use Node and the Node ecosystem to power your development in HTML, JavaScript and CSS, and discuss the strengths and weaknesses of the various tools and processes.

uk: вхід без авторизації


TDD in Tatters

uk: Комп'ютерні науки

description: TDD has been tattered, torn, twisted, stood on its head, and pounded into an pulp of techno-fetishism. TDD was a game-changer, but the focus in the interceding years has shifted from technique to tools, and TDD has been devolving into a lost art. By tearing TDD down to its bones, this presentation presents TDD in its essence, free of tools, and reinforcing the primary focus on design principles. It attempts to convince you to return to a simpler time when TDD was still about design, and software developers were dutifully steeped in the critical importance of design principles. To avoid being held to any particularly offensive positions, this talk liberally attacking the status quo of testing and contemporary tool-obsessed TDD in Ruby, while introducing yet-another testing library in Ruby.

uk: вхід без авторизації


The Future of .NET on the Server

uk: Комп'ютерні науки

description: It’s an exciting time for ASP.NET. What does the next version of Visual Studio and ASP.NET bring to the world of web development? Where does ASP.NET fit into the world of HTML5? What is One ASP.NET and how does it affect you? What role will MVC and WebForms play as technologies like SignalR, Web API and SPA gain traction. Will it all snap together in a way that makes sense? There's cross platform issue, Roslyn, a new CLR and more. Join Scott Hanselman as he share some internal documents, future thinking, open source, and exciting surprises about the future of ASP.NET.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Statically typed functional programming languages like F# encourage a very different way of thinking about types. The type system is your friend, not an annoyance, and can be used in many ways that might not be familiar to OO programmers. Types can be used to represent the domain in a fine-grained, self documenting way. And in many cases, types can even be used to encode business rules so that you literally cannot create incorrect code. You can then use the static type checking almost as an instant unit test — making sure that your code is correct at compile time. In this talk, we'll look at some of the ways you can use types as part of a domain driven design process, with some simple real world examples in F#. No jargon, no maths, and no prior F# experience necessary.

uk: вхід без авторизації

name: Domain Driven Design with the F# type System


An intro to the Internet of Things

uk: Комп'ютерні науки

description: My aim is to clear away some misunderstandings regarding the Internet of Things, and introduce MQTT - a protocol that is considered one of the most promising protocols. I'll start with a live demo of my IoT setup with a sonar, Arduino, Raspberry PI, MQTT, a talking Skull, Node.red, Sensors and Minecraft! Perhaps you can use the setup to have an entertaining Halloween… Part one of this talk provides a picture of what the selling points for IoT are - and some of the obstacles we’ll met on our way to get there.Part two focuses on technology: Different competing standards for IoT - with examples. This should be relevant to many of the listeners, as most consultancies and companies will come across IoT in the coming years. How I use one of the most promising protocols - MQTT - in a hobby project that can also involve children in order to teach a little coding, a bit about internet of things, and some hobby electronics. I'll introduce Node.red - a node.js based framework for orchestration of IoT and MQTT. I'm going to show message flow, source code, live influence of the components, and best practices for MQTT orchestration In conclusion I’ll give examples on how you can combine use IoT technologies like MQTT in typical business systems to bridge them to the physical world via sensors and indicators.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: These days it's easy to get started building a Single Page Application (SPA). Dozens of frameworks are clamouring to pitch their trivial "hello world" and "todo list" examples. But the moment you step outside the predefined path and begin actually crafting something for a real business, you face an explosion of choices. This talk is about experiences of building large SPAs and maintaining them over time. In part, I'll demonstrate pros and cons of various technology choices, such as TypeScript, Grunt, and AMD module optimisers. In part, I'll demonstrate some Knockout.js-specific techniques, such as the new and powerful "components" feature that improves maintenance, testability, and runtime performance. Throughout, I'll share lessons learned from building and maintaining the core of the Windows Azure management portal, an exceptionally large and high-profile SPA whose various parts are developed by many different teams within Microsoft. I hope these experiences will prove useful when you build your next rich JavaScript application.

uk: вхід без авторизації

name: Architecting large Single Page Applications with Knockout.js


Discrete Math: You Need to Know

uk: Комп'ютерні науки

description: What do you need to know about prime numbers, combinatorics, and the underpinnings of public key cryptography? Well, maybe more than you think! In this talk, we'll explore the branch of mathematics that deals with individual, countable things. Most of the math we learn in school deals with real-valued quantities like mass, length, and time. However, much of the work of the software developer deals with counting, combinations, numbers, graphs, and logical statements: the purview of discrete mathematics. Join us for this brief exploration of an often-overlooked but eminently practical area of mathematics.

uk: вхід без авторизації


How I hacked my way to Norway

uk: Комп'ютерні науки

description: Have you heard? Apparently we’ve created a dreadfully insecure internet with vulnerabilities reaching so far and so wide that literally anything is obtainable online through covert methods. Often this involves the now very well-known yet frequently present classic exploits – SQL injection, cross site scripting and others – but now we’re also seeing new attacks against security defences such as two factor authentication. In this session I’ll take you through how the risks we, as developers, are building into web sites and APIs can be easily exploited to gain access to everything from credit cards to credentials to control of commercial facilities. For many people, they’ll be stunned at the simplicity of the risks that continue to be exploited whilst for others, risks they never knew existed will be exposed, decomposed and most importantly, the mitigation will be shown. This session recreates real world examples of attacks against airlines, ticketing systems, hotels and transportation services – enough that someone literally could hack themselves all the way around the world to Norway. It’s not a theoretical exercise; these are real world attacks by real world hackers laid bare.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Now that we can declare dynamic objects in C#, how should we define our APIs? Typed, dynamic, mixed? In this session we will learn that sometimes it's useful to create an API in two incarnations: as strong typed and dynamic one. Such API can be adopted by developers with either preference and exposed to .NET platoforms that lack DLR support. We will study the principles of designing a dual API, demonstrate how to ensure maximum code sharing between typed and dynamic versions, and how to package and publish library files so they can be consumed on variety of .NET platforms, including iOS and Android. We will also talk about added value that dynamic support brings to C#, looking at real-world examples such as dynamic view models, micro-ORMs and REST services. Last but not least, we will build and run code samples on Windows and Mono.

uk: вхід без авторизації

name: Typed? Dynamic? Both! Cross-plat DSLs in C#


Core Software Design Principles

uk: Комп'ютерні науки

description: Creating code is easy, creating good code takes a lot of time, effort, discipline, and commitment. The code we create are truly the manifestations of our designs. Creating a lightweight design can help make the code more extensible and reusable. In this presentation we will take an example oriented approach to look at some core design principles that can help us create better design and more maintainable code.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Since the introduction of lambda expressions in C#, we have had two different style of programming. Yet, programmers used to the habitual style often find it easy to fall back on those old practices. In this presentation we will take a number of common tasks we code in C#, discuss the downsides of the habitual style, transform it into functional style, and discuss the benefits. We will also discuss some techniques that can help make this transformation easier on everyday projects.

uk: вхід без авторизації

name: Transforming your C# code to functional style


Introduction to Pebble Programming

uk: Комп'ютерні науки

description: Pebble is the most popular smart watches available in the market today. Unlike other smart watches that tries to cramp all the features into a watch, Pebble’s philosophy is that a smart watch is really a companion to the smart phone. Rather than replace the phone, Pebble is used to display notifications from the phone, creating alerts by vibrating the phone. The key factor that made Pebble so appealing is its ability for developers to create watch apps that integrates with the phone. And so in this session, Wei-Meng Lee will walk you through the development aspect of Pebble. You will learn how to write apps for the Pebble, and how to prepare your application for the Pebble Appstore.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: In this session, veteran author and Android trainer Wei-Meng Lee will give you a whirlwind introduction to the Android Wear platform recently announced by Google. You will learn how to setup the SDK, learn how to create notifications for your Android Wear watches, and learn how to integrate Android Wear into your Android applications.

uk: вхід без авторизації

name: Say Hello to your Google Android Wear Watch


uk: Комп'ютерні науки

description: FQuake3 is a project started by Will as an attempt to port id Software’s Quake III Arena to F# and to figure out how functional programming can be applied to game engines. The project is less than a year old, and has been worked on by Will in his free time. The talk will discuss Will’s journey to the founding of F# and why he started this project. The project structure, demos, code examples, and comparisons will be presented along with a live code example of how to port a C function to F#.

uk: вхід без авторизації

name: Porting Quake III to F#: A Journey to Functional Programming


Rigidity for Unirational Groups

uk: Математика, природничі науки

uk: вхід без авторизації

name: Banff International Research Station (BIRS) for Mathematical Innovation and Discovery


uk: Математика, природничі науки

uk: вхід без авторизації

name: On the Tits-Weiss conjecture on U-operators and the Kneser-Tits conjecture for some groups of type E_7 and E_8.


uk: Математика, природничі науки

description: A^1-Euler numbers can be constructed with Hochschild homology, self-duality of Koszul complexes, pushforwards in Sl_c oriented cohomology theories, and sums of local degrees. We show an integrality result for A^1-Euler numbers and apply this to the enumeration of d-planes in complete intersections. Classically such counts are valid over the complex numbers and sometimes extended to the real numbers. A^1-homotopy theory allows one to perform counts over arbitrary fields, and records information about the arithmetic and geometry of the solutions with bilinear forms. For example, it then follows from work of Finashin–Kharlamov that there are 160;839⟨1⟩+160;650⟨-1⟩ 3-planes in any 7-dimensional cubic hypersurface when these 3-planes are counted with an appropriate weight. This is joint work with Tom Bachmann.

uk: вхід без авторизації

name: Integrability Result for A^1-Euler Numbers

name: Institut des Hautes Études Scientifiques (IHÉS)

addressCountry: FR

addressLocality: Bures-sur-Yvette

addressRegion: Île-de-France


uk: Математика, природничі науки

description: In this talk I will sketch the construction and highlight the main properties of a new motivic category for logarithmic schemes, log smooth over a ground field k (without log structure). This construction is based on a new Grothendieck topology (called the “dividing topology”) and on the principle that homotopies should be parametrised by the affine line with compactifying log structure. The resulting category logDM shares many of the fundamental properties of Voevodsky’s DM, that can be faithfully embedded inside it, and can be used to represent cohomology theories that are not A^1-homotopy invariant (like Hodge cohomology or Hodge-Witt cohomology). If time permits, we will discuss some conjectures relating the étale version of our category with integral coefficients with the Milne-Ramachandran category of integral étale motivic complexes. This is a joint work with D. Park (Zurich) and P.-A.Østvær (Oslo).

uk: вхід без авторизації

name: Triangulated Categories of Log Motives over a Field


uk: Математика, природничі науки

description: Some celebrated conjectures of Beilinson, Grothendieck, Kimura, Tate, Voevodsky, Weil, and others, play a key central role in algebraic geometry. Notwithstanding the effort of several generations of mathematicians, the proof of (the majority of) these conjectures remains illusive. The aim of this course, prepared for a broad audience, is to give an overview of a recent noncommutative approach which has led to the proof of the aforementioned important conjectures in some new cases

uk: вхід без авторизації

name: 3/3 Noncommutative Counterparts of Celebrated Conjectures


uk: Математика, природничі науки

description: Foundational work of Hu—Kriz and Dugger showed that for Real spectra, we can often compute as easily as non-equivariantly. The general equivariant slice filtration was developed to show how this philosophy extends from C2-equivariant homotopy to larger cyclic 2-groups, and this has some fantastic applications to chromatic homotopy. This talk will showcase how one can carry out computations, and some of the tools that make these computations easier. The natural source for Real spectra is the complex points of motivic spectra over ℝ, and there is a more initial, parallel story here. I will discuss some of how the equivariant shadow can show us structure in the motivic case as well.

uk: вхід без авторизації

name: Real and Hyperreal Equivariant and Motivic Computations