uk: Комп'ютерні науки

description: CONTEXT Stereoscopic vision is a substantial aspect of three-dimensional visualization approaches. Although most recent animation movies created for cinemas are shown in stereoscopic 3D (S3D), there are still many areas which do not take advantage of this technology. One of these areas is cell visualization. Despite the fact that many protein crystallographers have preferred working with stereoscopic devices for over a decade, it is quite astonishing that cell visualization seems to have ignored S3D completely, even though stereoscopic visualization of the cellular cosmos not accessible to the human eye bears high potential. Furthermore, the scientific community often works with interactive visualization environments. These tools usually provide S3D for different hardware configurations, but the intensity of the stereoscopic effect can only be manually adjusted by using slider buttons. This technique is sufficient to explore a single instance of a molecule, but it is inconvenient when navigating through a large environment on multiple scales. OBJECTIVE In this work approaches will be discussed to apply S3D to 1) rendered cell animations and 2) interactive cell environments by using freely available open source tools. A very important aspect in cell visualization is the bridging of scales. The mesoscopic level starts at a few thousands of nanometers – related to the cell and its components – whereas the molecular level goes down to a few Angstrom, where single atoms are visible. Therefore, both scales may differ by a factor of 100,000. This is especially a problem if the stereoscopic effect should be adjusted during an interactive navigation process. METHOD For the rendered animations it will be shown how to use Blender in combination with Schneider’s Stereoscopic Camera plug-in. An exemplary short movie was created, starting in the blood vessels, proceeding with the inner cell components and finally showing the translation and transcription process based on protein/PDB models. The interactive exploration environments are provided by the CELLmicrocosmos project. On the molecular level, the MembraneEditor is used to show a fixed projection plane S3D method. The mesoscopic level is represented by CellExplorer which is equipped with a dynamic projection plane S3D method. RESULTS The stereoscopic cell animations rendered with Blender were successfully shown on notebook monitors and power walls as well as on large cinema projection screens. The CELLmicrocosmos projects were optimized to provide adequate interactive cell environments which were successfully used during different university projects and presentations. Because the software developer is not able to define the relative position of the user to the point of interest, the fixed projection plane S3D method was used in combination with smaller membrane structures. But the dynamic projection plane is furthermore compatible with cell environments featuring large scale differences. NOVELTY Cell visualization is an emerging area in scientific communication. This work should encourage cytological researchers to take S3D technology into account for future projects. Moreover, the stereoscopic capabilities of the CELLmicrocosmos project are shown which have been developed over several years and which have never been discussed in our previous publications.

uk: вхід без авторизації

name: Stereoscopic cell visualization: From mesoscopic to molecular scale


Mikko Kytö

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: CONTEXT: Depth perception is an important component in many augmented reality (AR) applications. It is, however, affected by multiple error sources. Most studies on stereoscopic AR have focused on the personal space whereas we address the action space (at distances beyond 2 m; in this study 6-10 m) using a video see-through display (HWD). This is relevant for example in the navigation and architecture domains. OBJECTIVE: For design guideline purposes there is a considerable lack of quantitative knowledge of the visual capabilities facilitated by stereoscopic HWDs. To fill the gap two interrelated experiments were conducted: Experiment 1 had the goal of finding the effect of viewing through a HWD using real objects while Experiment 2 dealt with variation of the relative size of the augmentations in the monoscopic and binocular conditions. METHOD: In Experiment 1, the participants judged depths of physical objects in a matching task using the Howard-Dolman test. The order of viewing conditions (naked eyes and HWD) and initial positions of the rods were varied. In Experiment 2, the participants judged the depth of an augmented object of interest (AOI) by comparing the disparity and size to auxiliary augmentations (AA). The task was to match the distance of a physical pointer to same distance with the AOI. The approach of using AAs has been recently introduced (Kytö et al. 2013). The AAs were added to the scene following literature-based spatial recommendations. RESULTS: The data from Experiment 1 indicated that the participants made more accurate depth judgments with HWD when the test was performed first with naked eyes. A hysteresis effect was observed with a bias of the judgments towards the starting position. As for Experiment 2, binocular viewing improved the depth judgments of AOI over the distance range. The binocular disparity and relative size interacted additively; the most accurate results were obtained when the depth cues were combined. The results have similar characteristics with a previous study (Kytö et al. 2013), where the effects of disparity and relative size were studied in X-Ray visualization case at shorter distances. Comparison of the two experiments showed that stereoscopic depth judgments were more accurate with physical objects (mean absolute error 1.13 arcmin) than with graphical objects (mean absolute error 3.77 arcmin). NOVELTY: The study fills the knowledge gap on exocentric depth perception in AR by quantitative insight of the effect of binocular disparity and relative size. It found that additional depth cues facilitate stereoscopic perception significantly. Relative size between the main and auxiliary augmentations turned out to be a successful facilitator. This can be traced to the fact that binocular disparity is accurate at short distances and the accuracy of relative size remains constant at long distances. Overall, these results act as guidelines for depth cueing in stereoscopic AR applications.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: Stereoscopic depth perception in video see- through augmented reality within action space

IS&T Electronic Imaging (EI) Symposium

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: This work examines the impact of content and presentation parameters in 2D versus 3D on depth perception and spatial presence, and provides guidelines for stereoscopic content development for 3D sports TV broadcasts and cognate subjects. Under consideration of depth perception and spatial presence experience, a preliminary study with 8 participants (sports: soccer and boxing) and a main study with 31 participants (sports: soccer and BMX-Miniramp) were performed. The dimension (2D vs. 3D) and camera position (near vs. far) were manipulated for soccer and boxing. In addition for soccer, the field of view (small vs. large) was examined. Moreover, the direction of motion (horizontal vs. depth) was considered for BMX-Miniramp. Subjective assessments, behavioural tests and qualitative interviews were implemented. The results confirm a strong effect of 3D on both depth perception and spatial presence experience as well as selective influences of camera distance and field of view. The results can improve understanding of the perception and experience of 3D TV as a medium. Finally, recommendations are derived on how to use various 3D sports ideally as content for TV broadcasts. © (2014) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.

uk: вхід без авторизації

name: The impact of stereo 3D sports TV broadcasts on user's depth perception and spatial presence experience


uk: Комп'ютерні науки

description: 4-view parallax barrier is considered to be a practical way to solve the viewing zone issue of conventional 2-view parallax barrier. To realize a flickerless 4-view system that provides full display resolution to each view, quadruple timedivision multiplexing with a refresh rate of 240 Hz is necessary. Since 240 Hz displays are not easily available yet at this moment, extra efforts are needed to reduce flickers when executing under a possible lower refresh rate. In our last work, we have managed to realize a prototype with less flickers under 120 Hz by introducing 1-pixel aperture and involving anaglyph into quadruple time-division multiplexing, while either stripe noise or crosstalk noise stands out. In this paper, we introduce a new type of time-division multiplexing parallax barrier based on primary colors, where the barrier pattern is laid like “red-green-blue-black (RGBK)”. Unlike other existing methods, changing the order of the element pixels in the barrier pattern will make a difference in this system. Among the possible alignments, “RGBK” is considered to be able to show less crosstalk while “RBGK” may show less stripe noise. We carried out a psychophysical experiment and found some positive results as expected, which shows that this new type of time-division multiplexing barrier shows more balanced images with stripe noise and crosstalk controlled at a relatively lower level at the same time. © (2014) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.

uk: вхід без авторизації

name: Time-division multiplexing parallax barrier based on primary colors


uk: Комп'ютерні науки

description: Augmented reality has become important to our society as it can enrich the actual world with virtual information. Transparent screens offer one possibility to overlay rendered scenes with the environment, acting both as display and window. In this work, we review existing transparent back-projection screens for the use with active and passive stereo. Advantages and limitations are described and, based on these insights, a passive stereoscopic system using an anisotropic back-projection foil is proposed. To increase realism, we adapt rendered content to the viewer's position using a Kinect tracking system, which adds motion parallax to the binocular cues. A technique well known in control engineering is used to decrease latency and increase frequency of the tracker. Our transparent stereoscopic display prototype provides immersive viewing experience and is suitable for many augmented reality applications. © (2014) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.

uk: вхід без авторизації

name: Transparent stereoscopic display and application


uk: Комп'ютерні науки

description: The generation of full-parallax and 360-degree three-dimensional (3D) images on a tabletop screen is proposed. The proposed system comprises a small array of high-speed projectors and a rotating screen. All projectors are located at different heights from the screen. The lens shift technique is used to superimpose all images generated by the projectors onto the rotating screen. Because the rotating screen has an off-axis lens function, the image of the projection lens generates a viewpoint in the space, and the screen rotation generates a number of viewpoints on a circle around the rotating screen. Because all projectors are located at different heights, different projectors generate the viewpoints at different heights. Therefore, multiple viewpoints are aligned in the vertical direction to provide the vertical parallax. The proposed technique was experimentally verified. Three DMD projectors were used to generate three viewpoints in the vertical direction. The heights of the viewpoints were 720, 764, and 821 mm. Each projector generated 900 viewpoints on a circle. The diameter of the rotating screen was 300 mm. The frame rate was 24.7 Hz. The generation of 360-degree 3D images with the horizontal and vertical parallaxes was verified. © (2014) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.

uk: вхід без авторизації

name: Vertical parallax added tabletop-type 360-degree three-dimensional display


uk: Комп'ютерні науки

description: Static and dynamic parallax barrier displays became very popular over the past years. Especially for single viewer applications like tablets, phones and other hand-held devices, parallax barriers provide a convenient solution to render stereoscopic content. In our work we present a computer vision based calibration approach to relate image layer and barrier layer of parallax barrier displays with unknown display geometry for static or dynamic viewer positions using homographies. We provide the math and methods to compose the required homographies on the fly and present a way to compute the barrier without the need of any iteration. Our GPU implementation is stable and general and can be used to reduce latency and increase refresh rate of existing and upcoming barrier methods. © (2014) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.

uk: вхід без авторизації

name: Vision-based calibration of parallax barrier displays


uk: Комп'ютерні науки

description: In this talk, we explore modern approaches to glasses-free 3D display using compressive light field displays. In contrast to conventional technology, compressive displays aim for a joint-design of optics, electronics, and computational processing that together exploit compressibility of the presented data. For instance, multiview images or light fields show the same 3D scene from different perspectives - all these images are very similar and therefore compressible. By combining displays that use multilayer architectures or directional backlighting combined with optimal light field factorizations, limitations of existing devices, for instance resolution, depth of field, and field of view, can be overcome. In addition to light field display, we will discuss approaches to compressive super-resolution image display and compressive high dynamic range display. As with compressive light field displays, these technologies rely on multiplexing image content in time such that the visual system of a human observer combines presented patterns into a consistent 3D, high-resolution, or high-contrast image. With the invention of integral imaging and parallax barriers in the beginning of the 20th century, glasses-free 3D displays have become feasible. With rapid advances in optical fabrication, digital processing power, and computational perception, a new generation of display technology is emerging: compressive displays exploring the co-design of optical elements and computational processing while taking particular characteristics of the human visual system into account. We will review these techniques and also give an outlook on next-generation compressive light field camera technology.

uk: вхід без авторизації

name: Compressive displays: Combining optical fabrication, computational processing, and perceptual tricks to build the displays of the future


uk: Комп'ютерні науки

description: 3D movies have a long history dating as far back as 1915. Jeff will provide an overview and preservation status of the 1950’s “Golden Age” 3D movies plus several “pre Golden Age” 3D content examples. Through Jeff’s keen interest in early 3D movies and all forms of early film content, he has been instrumental in locating, restoring, preserving and exhibiting many early 3D film titles. Jeff has many interesting and unusual stories to tell of how he helped locate and recover several early 3D movies. The onward march of time, and the ever faster changes in technology now present many challenges for the preservation of early 3D film content, but also offer new opportunities. The rapid replacement of 35mm film projection with digital projection is a key part of this change. Jeff will reflect on the three 3D Movie Expos that he has run in Hollywood which have allowed the public to experience these historical 3D movies once again.

uk: вхід без авторизації

name: Preservation and exhibition of historical 3D movies


Your Chakra Is Not Aligned

uk: Комп'ютерні науки

description: Microsoft Chakra is the new JavaScript engine on the block, and the bugs are pouring in. This presentation discusses techniques for finding bugs in a ‘fresh’ ECMAScript engine. When standards are implemented, design decisions are made that can affect security for years to come. This talk describes some of the implementation details of Chakra and how they led to specific bugs, as well as some ideas for finding future bugs. Recommended for people who want to find more or better browser bugs!

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The presentation will cover reverse engineering a satellite based IP content delivery system. These systems are generally used for moving digital media (such as movies, video on demand) but also can be used for digital signage and any other type of files. The presentation will touch on all aspects of reverse engineering from satellite reception, packet analysis, forward error correction reverse engineering (along with an explanation of the math), to the difficulty dealing with the extremely constant high bitrates on an off the shelf linux PC. The end result of the entire reverse engineering project was a linux based software client that has similar features as the commercial version based solely on an analysis of the protocol and incoming data.

uk: вхід без авторизації

name: Reverse Engineering: Satellite Based IP Content Distribution


uk: Комп'ютерні науки

description: This talk will explore Intel Processor Trace, the new hardware branch tracing feature included in Intel Skylake processors. We will explain the design of Intel Processor trace and detail how the current generation implementation works, including the various filtering modes and output configurations. This year we designed and developed the first open-source Intel PT driver for the Microsoft Windows operating system. We will discuss the architecture of the driver and the large number of low level programming hurdles we had to overcome throughout the development of the driver to program the PMU, including registering Performance Montering Interrupts (PMI), locating the Local Vector Table (LVT), managing physical memory. We will introduce even the new features of the latest version, like the IP filtering, and multi-processor support. We will demonstrate the usage of Intel PT in Windows environments for diagnostic and debugging purposes, showing a “tracing” demo and our new IDA Plugin, able to decode and apply the trace data directly to the visual assembly graph. Finally we discuss how we’ve harnessed this branch tracing engine for guided fuzzing. We have added the Intel PT tracing mode as an engine for targeting Windows binaries in the widely used evolutionary fuzzer, American Fuzzy Lop. This fuzzer is capable of using random mutation fuzzing with a code coverage feedback loop to explore new areas. Using our new Intel PT driver for Windows, we provide the fastest hardware supported engine for targeting binaries with evolutionary fuzzing. In addition we have added new functionality to AFL for guided fuzzing, which allows users to specify targeted areas on a program control flow graph that are of interest. This can be combined with static analysis results or known-vulnerable locations to help automate the creation of trigger inputs to reproduce a vulnerability without the limits of symbolic execution. To keep performance as the highest priority, we have also created new methods for efficiently encoding weighted graphs into an efficiently comparable bytemap.

uk: вхід без авторизації

name: Harnessing Intel Processor Trace on Windows for fuzzing and dynamic analysis


Contributor analysis

uk: Комп'ютерні науки

description: Contributor analysis is a simple cryptanalysis technique which allows detecting and attacking blatantly broken cryptographic algorithms and implementations. Although the technique is inspired by the techniques employed by algebraic approaches it aims at being much simpler to understand and reason with, making it possible not only to automate the testing but also to even run tests using pen and paper. In this talk we will introduce the participants to this technique, explain briefly the theoretic principles that make it work and how it relates to algebraic cryptanalysis and then explain how to handle contributor lists with different common operations. We will explain how these lists can be used to mount an attack therefore proving why a succesfully attacked cipher can be considered broken. Finally we will show some simple examples of ciphers affected by these techniques. No mathematical nor cryptographical knowledge is needed to follow this talk although some programming or computer architecture knowledge is recommended.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The inclusion of open-source components into large, closed-sourced applications has become a common practice in modern software. Vendors obviously benefit from this approach as it allows them to quickly add functionality for their users without the need to invest costly engineering effort. However, leveraging open source for a quick functionality boost comes with security side effects that might not be understood by the vendor until it is too late. In those cases, misunderstood or poorly implemented open source allows attackers to bypass security mechanisms that may exist elsewhere in the proprietary system. This talk provides insight into these side effects through an examination of Adobe Reader’s XSLT (Extensible Stylesheet Language Transformations) engine, which is based on the now abandoned open-source project called Sablotron – an XML processor fully implemented in C++. We focus on techniques for auditing the source code of Sablotron in order to find corresponding bugs in Adobe Reader. We also present a new source-to-binary matching technique to help you pinpoint the vulnerable conditions within Sablotron that also reside in the assembly of Reader. Real-world application of these techniques will be demonstrated through a series of code execution vulnerabilities discovered in Adobe Reader’s codebase. Finally, we’ll highlight the trends in vulnerabilities discovered in Adobe Reader’s XSLT engine over the last year.

uk: вхід без авторизації

name: Transforming Open Source to Open Access in Closed Applications


Embedded devices reverse engineering

uk: Комп'ютерні науки

description: Embedded devices are everywhere. With new powerful micro CPUs which packs more power than CRAY-1 while costing just a couple of pence, question to use micro CPU or not is no more. Developers are using them for even the simplest of the tasks. IoT devices are using more powerful and more complex devices with multiple peripherals and cores, which supports TCP/IP stack and multitude of layer 2 networking protocols.There are different frameworks created to help developers to create complex software needed to drive these devices. Specifics of the environment force focus on continuous operations with high reliability while they should have a reduced power consumption and memory requirements, while security is mostly an afterthought if implemented at all. By introducing FreeRTOS as an example of frameworks for embedded devices firmware development, we’ll explore basics of its architecture and security features (and a lacks of them). Reverse engineering plays a big role in security assessment in the IOT space, being a very simple real-time operating system FreeRTOS lacks the traditional separation between kernel and userland space, which tends to make harder the identification of user code and framework code, increasing the time needed to perform reverse engineering. Access to peripherals is also in different ways has there are no well-known syscalls. While doing a security assessment on the automotive industry we came across the STM32F0 micro CPU made by STM based on an ARM Cortex6-M0. A simple processor used a lot in the IOT world ruing FreeRTOS, while doing our research for any resources related to reverse engineering documentation we came to the conclusion that there are not too many such resources, specifically compared to how common is this processor or the FreeRTOS. We’ll investigate FreeRTOS source code and show basics of memory organization. We’ll address some of IP stack specifics, way tasks are handled, SSL library and stack protection. We’ll cover tasks, mutexes, semaphores, and interrupt handling. Also we’ll show specifics of memory organization and memory structures used for task handling. We’re going to use a simple demo showing how to blink the led when button is pressed to demonstrate mapping between source and compiled code and to demonstrate execution flow in FreeRTOS. Building upon this example, we’ll demonstrate useful techniques for reverse engineering firmware of such OS. We will show how to differentiate between memory access from GPIO functions. We will demonstrate a tool (IDA Script) to help automate this process. It should cover automatically addressing pin names, signals and variables as defined in RTOS source code. Our presentation will start by explaining the concepts of FreeRTOS, moving into the security features that it lacks when compared with other Operating Systems. Then we will move into the reverse engineering using the STM32F0 as an example, we will show how to identify the reads and write operations into the peripherals and how our IDA plugin can help on those tasks.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: According to a study from 2015, Adobe Flash Player comprised eight of the top 10 vulnerabilities leveraged by exploit kits. Most exploit developers rely on fuzzing the values to ASNative within ActionScript 2/ActionScript 3 in order to discover weaknesses. This usually occurs without actually knowing what data to send and where it will end up. However, these bug hunters have shared little information on how to reverse Flash itself, if they even know. What is public is primarily on how people have found and exploited similar vulnerabilities. What has always been missing is a deeper understanding of Flash as a whole – until now. This talk details techniques that allow researchers to perform mappings between ActionScript 2/ActionScript 3 and their undocumented counterparts. This moves analyzing Flash from simple fuzzing techniques to in-depth reverse engineering. We begin with how Flash starts up the AS2/AS3 virtual machines then work through to demonstrating the mapping of native functions. Finally, we’ll demonstrate the effectiveness of these techniques by marking up the flash debugger projector and using it to analyze a vulnerability in Adobe Flash. By examining the internals of Flash’s ActionScript implementations, researchers gain a new and unique visibility in finding and analyzing zero-day exploits.

uk: вхід без авторизації

name: A Little Less Conversation, A Little More ActionScript


uk: Комп'ютерні науки

description: Disassembled binary code can be turned into a graph of instructions linked by possible execution flow (Control Flow Graph). Based on academic research on malware detection through graph matching and facing large numbers of similar files to analyze, we aim to provide accurate results to an analyst working on malware families. Our approach is a YARA-like detection tool: GRAP matches user-defined graph patterns against the CFG of a given code. GRAP is a standalone tool that takes patterns and binary files, uses a Capstone-based disassembler to obtain the CFGs from the binaries, then matches the patterns against them. Patterns are user-defined graphs with instruction conditions (“opcode is xor and arg1 is eax”) and repetition conditions (3 identical instructions, basic blocks…). The algorithm solves a simplified version of the subgraph isomorphism problem, allowing the matching to be very quick. It can be used to find generic patterns such as loops and to write signatures to detect malware variants. We also developed a plugin giving IDA the capabilities to detect and browse matches directly within the GUI. Python bindings are available to create scripts based on GRAP and extract valuable information (addresses, instructions) from matched parts. In this talk, we will introduce the algorithms used and then focus on practical use cases: detect common patterns (from the command line or within IDA), create a malware pattern, and extract information from matched instructions. The tool and the plugin will be released under an open source license.

uk: вхід без авторизації

name: GRAP: define and match graph patterns within binaries


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Getting Physical with USB Type-C: Windows 10 RAM Forensics and UEFI Attacks


Poutine: Dusting Forgotten Lore

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Reversing a binary using a rare CPU architecture requires to write a lot of code, such as disassembler, assembler, or block splitting logic. Once implemented, there is still a need for a graphical interface dedicated to reverse. Sooner or later, more needs might also arise: symbolic execution, emulation, jit, debugging, … miasm2 is a powerful reverse engineering framework written in Python. It greatly simplifies the definition of new CPU architectures, and allows to assemble, disassemble and jit code. This talk will present r2m2, a radare2 plugin that aims at easing reversing new architectures by leveraging radare2 and miasm2 features. Its goal is to be as architecture independent as possible. r2m2 bridges the radare2 and miasm2 communities: radare2 being the graphical interface of miasm2, and miasm2 simplifying the implementation of new architectures. Currently, r2m2 is able to assemble, disassemble, split blocs, using miasm2, and convert internal miasm2 expressions to radare2 ESIL.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: From Web PKI and digital signatures to PCI-DSS and DNSSEC, a big part of the security industry currently depends on special cryptographic modules to implement cryptography, the so called Hardware Security Modules (HSMs). Every certificate used in the web has been signed by a key stored inside an HSM, and every time a DNSSEC query is being validated, the root keys generated by such an HSM are being used. In this presentation, the security of such a device, the Utimaco SecurityServer, will be evaluated. Inside the device, a Texas Instruments TMS320C64x DSP can be found which performs all operations. The TMS320C64x DSP is an exotic architecture compared to the classic x86, x86_64, ARM, MIPS and other common architectures, due to its unique features, such as the multiple functional units, each having its own assembly commands and the ability to execute multiple commands in parallel. This architecture, together with the ABI and a small introduction to the memory organization will be presented. The research will then mostly focus on the device’s firmware. Due to the inability of IDA pro to correctly disassemble the files, and the minimal number of tools for this architecture, the capstone disassembler has been extended and the TMS320C64x architecture has been added. Finally, a vulnerability to the HSM’s firmware will be presented, together with the methodology that was used in order to find the bug.

uk: вхід без авторизації

name: Hackable Security Modules Reversing and exploiting a FIPS 140-2 lvl 3 HSM firmware


uk: Комп'ютерні науки

description: A look at bypassing the Code Read Protection in the NXP LPC family of ARM microcontrollers. This is an example of one of the simple security features found in common microcontrollers, and how it is easily bypassed. The Code Read Protection (CRP) is implemented in bootloader software and can be easily read and disassembled, showing the fragility of the CRP mechanism. This talk describes the path to exploiting the bootloader software, developing and using a simple glitcher. A glitcher is designed, the chip is tested for vulnerability to glitch, and an attack is formulated to disable CRP and enable readout of FLASH contents. As glitch attacks go, this is a simple and ‘beginner-level’ attack which should be easily reproducible. The talk will include hardware and software design, including schematics and source code, for a glitcher able to bypass CRP.

uk: вхід без авторизації

name: Breaking Code Read Protection on the NXP LPC-family Microcontrollers


Teaching Old Shellcode New Tricks

uk: Комп'ютерні науки

description: Metasploit x86 shellcode has been defeated by EMET and other techniques not only in exploit payloads but through using those payloads in non-exploit situations (e.g. binary payload generation, PowerShell deployment, etc..). This talk describes taking Metasploit payloads (minus Stephen Fewer’s hash API call), incorporating techniques to bypass Caller/EAF[+] checks (post ASLR/DEP bypass) and merging those techniques together with automation to make something better. There will be lots of fail and some win.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The main goal of our work is to find out a sensible way to detect vulnerabilities in binary iOS applications. We present a new fully featured toolset, that constitutes a decompiling and analyzing engine, targeting ARM/AArch64 programs, particularly iOS applications. In general, the analysis workflow consists of four steps: Downloading and decrypting an iOS application from AppStore. We introduce the iOS-crack engine that is capable of automatic downloading, decrypting and dumping memory of AppStore applications using a jailbroken device. Decompiling the iOS application. The toolset is capable of carrying out a completely automated analyses of binary programs, using the LLVM as the intermediate representation language. Unlike known binary code to LLVM translation tools, our decompilation tool aims at a high-level program semantics reconstruction. That is: program CFG reconstruction, advanced analysis and propagation of memory objects and stack pointer tracking, data types reconstructions, program data model construction. Almost all iOS application are written in Objective-C or Swift, so we also take care about precise types reconstruction and use the runtime types information in decompilation process. Static analysis of the iOS application. We introduce our static analysis framework that is able to find all common vulnerabilities of mobile applications, especially iOS applications. Representation of analysis results. The toolset is able to produce a human-readable pseudocode representation of the source binary. During the presentation we will demonstrate our analysis engine in action. We will show real-world examples of the most common security flaws and how they can be found.

uk: вхід без авторизації

name: Analyzing iOS apps: road from AppStore to security analysis report


miLazyCracker

uk: Комп'ютерні науки

description: The presentation will show how easy it can be to crack not just Mifare Classic but the new Mifare Plus which have an improved PRNG which nullifies MFCUK/MFOC which currently crack Mifare Classic. I have taken portions of code from the Proxmark3 and LibNFC to combine into one tool that works with a $30 usb reader which looks just like a usb thumbdrive, and requires no arguments whatsoever. Simply place a card on the reader, run: $ ./miLazyCracker And the script will talk to the card, determine if the PRNG is vulnerable or not, and select the proper attack. From there it will iterate through any missing keys and finally dump the card so it can be cloned. The talk also shows how to create cards with open source tools (this part is not new but it’s easily explained). I am a Masters student in Computer Science and have worked with embedded devices for about 10 years and most recently worked in cyber security research. I love everything smart card related, wireless (zigbee, zwave, 6LoPAN), hardware hacking, reversing .NET and patching programs to do crazy stuff. I think this is cool because anyone can clone a card (or see if its clonable) with no prior knowledge of smart cards, no learning about sector layouts and what arguments to give to the script whatsoever, and it only a $30 part which looks like a usb thumb drive. This makes it very possible to sit on a bus or subway next to the lady who has her badge in her purse and potentially clone her card, follow her to work and gain access to a building. Its not necessarily the most novel reverse engineering feat but it bring smart card cloning (and attacks as recent as 6 months old) to the masses. this isn’t so more people can break in, but so companies can be aware of how easy this is and to move away from anything with the name Mifare.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Previously, we discovered a number of vulnerabilities in UEFI based firmware including software vulnerabilities in SMI handlers that could lead to SMM code execution, attacks on hypervisors like Xen, Hyper-V and bypassing modern security protections in Windows 10 such as Virtual Secure Mode with Credential and Device Guard. These issues led to changes in the way OS communicates with SMM on UEFI based systems and new Windows SMM Security Mitigations ACPI Table (WSMT). This research describes an entirely new class of vulnerabilities affecting SMI handlers on systems with Coreboot and UEFI based firmware. These issues are caused by incorrect trust assumptions between the firmware and underlying hardware which makes them applicable to any type of system firmware. We will describe impact and various mitigation techniques. We will also release a module for open source CHIPSEC framework to automatically detect this type of issues on a running system.

uk: вхід без авторизації

name: Baring the system: New vulnerabilities in SMM of Coreboot and UEFI based systems


Legacy Crypto Never Dies

uk: Комп'ютерні науки

description: In 2012 I released a DES cracking service with Moxie Marlinspike for cracking MSCHAPv2 and quickly started seeing it being used for cracking other things besides MSCHAPv2.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: When your firewall turns against you: Lightning Talks


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Keeping your tools safe IDA: Lightning Talks


ADEM (Breathe)

uk: Комп'ютерні науки

description: The aim of this project is to create a device that collects air pollution data (PM2.5 and PM10 fine dust) and is mounted on bicycles to crowdsource factual air pollution information in and around the city of Ghent, Belgium.

uk: вхід без авторизації

name: Free and Open Source Software Conference (FrOSCon) e.V.


Settling the IM war

uk: Комп'ютерні науки

description: The world of Instant Messaging is populated with hundreds of providers - all incompatible with each other though history has shown that walled gardens are not sustainable. Why are we unable to agree upon a standard to communicate with each other?

uk: вхід без авторизації


uk: Комп'ютерні науки

description: While you're reading this, two new Docker PaaS have launched and one existing is shutting down. Doing infrastructure is hard. Doing infrastructure is fun. Maybe it was never harder and more fun then these days. We want to share our personal experiences of how to keep it on the fun side and still take care of the hard things.

uk: вхід без авторизації

name: How to build your own cloud while staying in business


uk: Комп'ютерні науки

description: Elio will introduce the new Mozilla Community Design initaitve, how it works in the open and how it raises the importance of design in open source projects by empowering non technical people to contribute.

uk: вхід без авторизації

name: Designing in the open: Mozilla Community Design


Docker Batteries

uk: Комп'ютерні науки

description: Docker als Applikationscontainer kommt schnell an die Grenzen. Fehlt doch das Managen von Infrastruktur und die Orchestrierung von Docker. Docker Batteries sind (austauschbare) Plugins und AddOns. Hier stellen wir die "eingebauten" Batteries von Docker vor.

@language: de

uk: вхід без авторизації


uk: Комп'ютерні науки

description: openATTIC ist ein auf Linux basierendes Open Source Storage Management System. Dieser Vortrag stellt das Projekt und die Neuerungen der letzten Monate vor und beschreibt auch, was wir uns für die Zukunft so vorgenommen haben, z.B. die Erweiterung der Ceph-Management-Funktionalität in Kooperation mit SUSE und der Ausbau der "klassischen" Storage-Funktionen.

uk: вхід без авторизації

name: Open Source Storage Management mit openATTIC


Von z-Tree zu oTree

uk: Комп'ютерні науки

uk: вхід без авторизації


Konferenzorganisation 101

uk: Комп'ютерні науки

description: Eine Konferenz zu organisieren ist viel Arbeit. In der IT Szene werden daher gerne Tools entwickelt, welche einen dabei unterstützen. Diese werden oft auch zu OS, jedoch nur selten bekannt. Ich möchte daher für alle (Neu-)Organisatoren einen Überblick über Tools geben, welche bei der FrOScon und anderen Konferenzen, zum Einsatz kommen und sich bewährt haben. Dieser Vortrag hat keinen Anspruch einen vollständigen Überblick zu geben.

uk: вхід без авторизації


Reactive Javascript mit RxJs

uk: Комп'ютерні науки

description: Stell dir vor, das Iterator Pattern und das Observer Pattern lernen sich in einer Bar kennen, verlieben sich ineinander und zeugen ein Kind, das sie “RxJS” nennen. RxJS stellt Erweiterungen zur reaktiven Programmierung in JavaScript bereit. Es handelt sich hierbei um ein Paradigma, bei dem der Datenfluss im Fokus liegt. Angestrebt wird, ein stabiles, skalierbares und resilientes Anwendererlebnis zu schaffen. Im Kern steht der effiziente Umgang mit asynchronen Ereignissen. Und die sind zahlreich: vom Bootstraping der Applikation, Steuern von Animationen, Umgang mit Benutzereingaben bis hin zu XHRs. Die Session erklärt anhand beispielhafter Implementierungen, was hinter diesem Paradigma steht. Sie zeigt überdies auf, wie damit zeitgemäße asychrone Anwendungen eventgetrieben entwickelt werden, ohne überflüssigen Overhead zu produzieren.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Vorgestellt wird eine Python basierte Prozesskette im Flugzeugvorentwurf zur Rumpfstrukturauslegung am Deutschen Zentrum für Luft- und Raumfahrt (aktuell in Entwicklung). Dabei wird die Prozesskette genauer erläutert sowie einzelne Kernmodule (z.B. FE-Präprozessor oder FE-Konverter) und Schnittstellen demonstriert und diskutiert.

uk: вхід без авторизації

name: Automatisierte Strukturauslegung im Flugzeugvorentwurf mit Python


Team? Welches Team?

uk: Комп'ютерні науки

description: Scrum hat uns versprochen, dass wir ein festes Team haben und jeder in diesem Team irgendwann zwangsläufig alle Aufgaben im Team zu ungefähr 80% übernehmen kann: UX, Coding, Administration, sein tiefes Fachwissen jedoch weiter pflegt. Gibt es diese "T shaped persons" oder gibt es eventuell doch einen Grund, warum wir noch Spezialisten haben? Und wie soll oder kann ein agiles Team eigentlich aussehen?

uk: вхід без авторизації


Java Caching with JSR107 and tCache

uk: Комп'ютерні науки

description: Caching data is an essential part in many high-load scenarios. A local 1st-level cache can augment a shared 2nd-level cache like Redis and Memcached to further boost performance. JCache (JSR107) is the Java Standard for Caching, and tCache is a production-proof OpenSource JCache provider. This talk presents advanced features of JCache like EntryProcessors and Listeners, and tCache specific cutting-edge features like data-aware evictions, and built-in load-spreading.

uk: вхід без авторизації


Designing Puppet Catalogs

uk: Комп'ютерні науки

description: Before puppet was used in large infrastructures manifests and modules were developed to simply work. But then infrastructure grew and several stakeholders needed to understand what's happening. We will talk about roles & profiles in Puppet, how to use them and what they really are.

uk: вхід без авторизації


Einstieg in GitLab

uk: Комп'ютерні науки

description: Dieser Vortrag vermittelt die Verwaltung und Dokumentation von Software-Projekten mit GitLab. Neben den Grundlagen wird auch die Automatisierung von Quellcode-Übersetzungen behandelt.

uk: вхід без авторизації


FreeIPA

uk: Комп'ютерні науки

description: Dieser Vortrag behandelt die Implementation einer zentralen Authentifizierung unter Linux mit FreeIPA. Neben den Grundlagen werden auch eine Praxis-Beispiele demonstriert.

uk: вхід без авторизації


BGP und OSPF

uk: Комп'ютерні науки

description: Der Vortrag erklärt, wie das „Internet“ im Hintergrund funktioniert. Wie findet ein Paket sein Ziel? Was passiert eigentlich, wenn ein Unterseekabel ausfällt? Und wie kann man diese Technologie auf seinem Linux-System selbst ausprobieren (dn42.net)?

uk: вхід без авторизації


DNSSEC

uk: Комп'ютерні науки

description: Mit DNSSEC wurde eine Möglichkeit geschaffen, DNS-Einträge zu authentisieren. Heute ist diese Erweiterung weit verfügbar, zum Beispiel auch für .de und .org Domains. In diesem Vortrag wird die grundsätzliche Funktionalität von DNSSEC vorgestellt und folgende Fragen beantwortet: Wie sieht eine so geschützte Zone aus? Woher kommt die Sicherheit? Was kann DNSSEC nicht leisten? Welche neuen Anwendungen (DANE) ergeben sich daraus für das Domain-Name-System? Zum Schluss geht der Vortrag auch darauf ein, wie DNSSEC in der Praxis für den einzelnen aussehen kann -- sowohl als Konsument als auch auf der Serverseite.

uk: вхід без авторизації


Sichere Softwareentwicklung

uk: Комп'ютерні науки

description: Continuous Delivery (CD) ist in aller Munde. Zu Recht, denn neben der Möglichkeit, sehr frühzeitig Feedback zu neuen Entwicklungen zu erhalten, erlaubt CD durch Automatisierung von Build-, Deploy- und Testprozessen schnell, zuverlässig und wiederholbar Software auszuliefern, qualitativ hochwertig, mit niedrigem manuellen Aufwand und geringem Risiko. Doch wollen wir unsere Software kontinuierlich ausliefern, müssen wir auch kontinuierlich Sicherheits-Tests durchführen! Continuous Security Testing bedeutet, statische und dynamische Analysen bereits während der Entwicklung durchzuführen, um frühzeitig und regelmäßig Sicherheitsmaßnahmen umzusetzen, bevor manuelle Prüfungen wie Penetrationstests zum Einsatz kommen. Um eine Anwendung bereits während der Entwicklung auf das Vorhandensein sicherheitskritischer Schwachstellen hin überprüfen zu können, ist eine Integration in den Entwicklungsprozess und somit eine kontinuierliche und am besten automatisierte Prüfung notwendig. Der Vortrag stellt die praktischen Erfahrungen aus einem Projekt vor, bei dem Sicherheits-Richtlinien (Secure Coding Guide) für die eigene Entwicklung von Java-Webanwendungen aufgestellt und Sicherheitstests in den Softwareentwicklungsprozess integriert wurden. Dabei wird auf die organisatorischen, inhaltlichen und technischen Überlegungen eingegangen.

uk: вхід без авторизації


a FrOSCon Map

uk: Комп'ютерні науки

description: karten gibt es ja - aber wie macht eine eigene karte, die nur das enthält, was man selber braucht?

uk: вхід без авторизації


Database High Availability

uk: Комп'ютерні науки

description: Database high availability is no magic anymore. What do you need for high availability. How important are backups? How important is replication? How can you do all this without master downtime? How can you manage high availability with open source / free software tools? The talk will be mostly product independent. Mostly considered database worlds are MariaDB and PostgreSQL.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Der Vortrag liefert einen Überblick über die Verbesserungen, die in den jüngst vorgestellten und in Kürze erwarteten Versionen der Linux-Kernels stecken. Auch aktuelle Diskussionen rund um den Entwicklungsprozess und Fortschritte bei Kernel-nahen Treibern werden zur Sprache kommen.

uk: вхід без авторизації

name: Aktuelle Entwicklungen beim Linux-Kernel


Free Software Virtual Singer

uk: Комп'ютерні науки

description: Virtual Singers such as Hatsune Miku are very popular in Japan. Before that there was also an MBROLA-based Virtual Singer called Melissa and a multilingual formant synthesizer called Virtual Singer by the French company Myriad. All those Virtual Singers are based on proprietary software, until recently there was no free replacement. In 2011 I discovered that the Music Technology Group had released their Spectral Modeling Synthesis library under the GNU GPL, and I decided to use that one in my own UTAU compatible resampler.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: „Letztes Jahr haben wir Scrum eingeführt. Das war anfangs ganz nett. Aber jetzt ist es schlimmer als vorher. Nur noch Chaos und Meetings. Und die wichtigen Themen kommen nicht dran.“ Solche oder ähnliche Sätze begegnen mir häufiger. Dann heißt es, nicht vorschnell urteilen, sondern genau hinschauen: Lebt das Unternehmen die agilen Werte? Sind sie nur als Projektmethode vorgeschoben? Passt SCRUM nach festem Schema zu euren Unternehmensabläufen? Machen die Entwickler-Teams das gleiche SCRUM wie Admins und DevOps? Wie man den passenden agilen Weg für das unterschiedliche Teams findet und damit echte Zusammenarbeit möglich macht erläutert Tobias Ranft aus seiner Erfahrung als Entwickler, SCRUM-Master und Berater.

uk: вхід без авторизації

name: Seit wir SCRUM machen ist alles super. Nicht!


uk: Комп'ютерні науки

description: With the pandas library there is a powerful alternative to scientific programming languages such as R, Octave or Matlab. Originally designed for the analysis of financial data is has become a standard in terms of data handling and manipulation and is widely used not just in science but also the financial industry. In this article we describe how pandas can be applied in everyday analyses where efficient data handling is required and how it can be integrated with other Python libraries such as numpy or matplotlib.

uk: вхід без авторизації

name: Using Python pandas for scientific Research


Fragile development

uk: Комп'ютерні науки

description: Anyone doing any kind of Agile development has heard of or practiced Scrum, which has become a favorite among development managers. In reality, Scrum is a scourge, not a boon, and it's time to understand that the emperor is naked.

uk: вхід без авторизації


NixOS

uk: Комп'ютерні науки

description: Popular configuration management systems have come a long way transforming imperative to declarative configuration. Rather than relying on extra tools that support a multitude of operating systems, NixOS is a GNU/Linux distribution with a novel take on both package and configuration management to achieve declarative and stateless service configurations on the operating system level.

uk: вхід без авторизації


How we changed openSUSE developement

uk: Комп'ютерні науки

description: Developing Linux distribution is not easy, everybody wants to use for something else. Some people want the latest and greatest and some want to avoid changes and live with only bugfixes forever. In openSUSE project, we changed the way we do our distribution last year to address both those needs and this talk will describe what we did and how.

uk: вхід без авторизації


golang rockt!

uk: Комп'ютерні науки

description: Golang ist eine von Google entwickelte Sprache, die aktuell einen enormen Zulauf erhält. Seitdem ich golang für mich entdeckt habe, macht mir das programmieren doppelt so viel Spaß wie vorher. Der fun-Faktor der Sprache entsteht durch ihre Einfachheit, Robustheit und hohe Performance. Außerdem ist Golang sehr leicht zu lernen. All das hat uns so sehr überzeugt, dass wir golang nun auch in großen Entwicklerteams produktiv einsetzen.

uk: вхід без авторизації


Komplexe Abfragen mit aktuellem SQL

uk: Комп'ютерні науки

description: Seit einigen Jahren bietet ISO-SQL wesentlich mehr bei den Abfragen mit SELECT als früher. Leider haben sich diese großartigen Neuerungen noch nicht so recht herumgesprochen, was dieser Vortrag ändern möchte.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Your project's code base is rock solid, you are rolling releases early and often, your test suite is comprehensive and running regularly, your code is well performing without any glitches. Everything is in place that defines a successful open source project - or isn't it? This talk tries to highlight some of the key questions software developers will quickly be faced with when dealing with open source: In addition to coding skills, topics like people management, naming, trademark enforcement, licensing, patents, pr and more become topics to deal with.

uk: вхід без авторизації

name: Open source is just about the source, isn't it?


uk: Комп'ютерні науки

description: Im Gegensatz zu klassischen Content Management Systemen versprechen statische Blogs und Webseiten weniger Sicherheits- und Performanceprobleme und mehr Fokussierung auf das Schreiben der Texte. Für wen sind Sie geeignet und was ist beim Start zu beachten?

uk: вхід без авторизації

name: BACK to the Future: Statische Blogs und Webseiten mit Jekyll


take care of your logs

uk: Комп'ютерні науки

description: Warum sollte ich vergänglichen und unnützen Daten Aufmerksamkeit widmen? Warum zusätzliche Ressourcen aufwenden um diese zentral zu sammeln?

uk: вхід без авторизації


uk: Комп'ютерні науки

description: In den letzten Jahren erfreut sich Docker und das Konzept von Containern immer grösserer Beliebtheit, insbesondere wenn man in oder für die Cloud entwickelt. Dieses Vorgehen bewirkt aber oft, dass man mitunter eine steigende Anzahl an Containern orchestrieren muss. Unterstützung beim Containermanagement bieten bereits weit verbreitet Werkzeuge wie Kubernetes, Docker Swarm oder Shipyard. Dabei ist insbesondere Kubernetes oft komplex zum Einstieg und bringt eine Vielzahl an Begriffen mit, die man erstmal lernen muss. Seit kurzem jedoch gibt es einen Newcomer in dem Feld, Rancher, der sich immer wachsender Beliebtheit erfreut. Rancher ermöglicht einen schnellen und einfachen Start einer Multi-Agent Umgebung, da es kompatibel zu den Standard Docker Konfigurationen (docker-compose.yml) ist. In diesem Talk wird es neben einer Einführung in Rancher auch Erfahrungsberichte aus dem produktiven Einsatz von Rancher geben.

uk: вхід без авторизації

name: Docker Container orchestrieren mit Rancher


Icinga2 automatisiert

uk: Комп'ютерні науки

description: Mointoring von Hand zu pflegen ist Arbeit. Oft werden Server oder einzelne Dienste vergessen und Abhängigkeiten nicht berücksichtigt. Der Vortrag soll Anregungen geben wie man sich das Leben mit Icinga2 deutlich einfacher machen kann. Die Inhalte im einzelnen: - Kurze Einführung Icinga2 - Deplyoment von Icinga2 mit Ansibel - Anbindung CMDB - Nutzung der API für die Automatisierung von Aufgaben

uk: вхід без авторизації


Hochschulen im Web

uk: Комп'ютерні науки

description: Hochschulen und ihre Institute müssen mit ihren Webseiten die Anforderungen verschiedener, recht unterschiedlicher Zielgruppen abdecken. Zielgruppen sind unter anderem wissenschaftliche Tätige von anderen Hochschulen, die an der eigenen Hochschule tätigen Menschen, Studierende, potentielle Studierende, Entscheider über Forschungsmittel, Fachleute aus Politik und Wirtshaft als auch die interessierte Öffentlichkeit. Jede dieser Zielgruppen hat andere Bedürfnisse bezüglich der Webseite.

uk: вхід без авторизації


Hardware is Hard

uk: Комп'ютерні науки

description: If you've been around the hardware world, or backed a kickstarter that's manufacturing something, you've seen the delays, the apparent excuses, the the updates that just sound crazy. Well, turns out those excuses and crazy sounding updates are more likely true than not. I intend on trying to pull back the curtain on how hardware is built, and some of things that software folks take for granted in how our hardware gets made and delivered.

uk: вхід без авторизації


Where is this IoT bus taking us?

uk: Комп'ютерні науки

description: We now live in a golden age where computational power has gotten so cheap, and so low energy that computers are now entering into everything. We now have devices that can sit on your wrist for days alerting you to dynamic events, keep track of your motion and steps, connect to the wireless networks and report all this data, as well as bluetooth enabled pregnancy tests. Lets explore this new world we are entering in both it's glory and it's bizzare, and realizing just exactly how much power we have both for good, and evil and how being open about things, hardware and software, can help us all.

uk: вхід без авторизації


The future of private clouds

uk: Комп'ютерні науки

description: Last June, Nextcloud started as an ownCloud fork; a first release came less than two weeks later! Today, plans are already taking shape. Where is the project going? Key for Nextcloud is community: working, in the open, with others. We'll talk about calendar and contacts, communication and productivity, enterprise functionality, upgrading, distribution packaging and more.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Security and privacy of information stored on embedded devices is gaining on importance. It turns out that security models designed for desktops and servers cannot be directly adopted in embedded devices. Moreover desktop systems themselves seem to lag behind, when it comes to accessing privilege-oriented resources like camera, microphone or address book. Aleksander will show how growing security requirements for operating systems are fulfilled with usage of existing Linux mechanisms, like MAC or DAC and new ones, like Cynara and Security Manager. You will have a chance to learn the complete security framework implemented in Tizen operating system and Linux Foundation's Automotive Grade Linux and get to know how well designed solution can provide security and privacy for whole system, relieving efforts of 3rd-party developers.

uk: вхід без авторизації

name: Modern Security Model for Embedded Linux Distributions


uk: Комп'ютерні науки

description: Knowledge Discovery und speziell maschinelles Lernen sind sehr nützliche Werkzeuge für die automatisierte Datenanalyse. Die Anwendung des maschinellen Lernens hat in den vergangenen Jahren stark an Bedeutung gewonnen und sich als Lösung für Klassifikationsprobleme etabliert. In Astronomie und Astrophysik treten große Datenmengen insbesondere in Surveys auf, beispielhaft sei hier das Weltraumteleskop Kepler genannt, welches für die Suche nach Exoplaneten konzipiert wurde. In der Domäne der Photometrie ist hier die Analyse von Helligkeitsänderungen in den Lichtkurven von Sternen eine zentrale Aufgabe, beispielsweise von sich gegenseitig bedeckenden Sternen.

uk: вхід без авторизації

name: Data Mining in astronomischen Surveydaten variabler Sterne mit Python


Commodore 64 Reloaded

uk: Комп'ютерні науки

description: Der Commodore 64 ist der meist verkaufte 8 Bit Homecomputer "gewesen". Mit seinen Sound- und Graphikeigenschaften war er einzigartig und eine Sensation zur damaligen Zeit. Schätzungen der Verkaufszahlen bewegen sich zwischen 12 Mio. und 30 Mio. Geräten. Der Vortrag beschäftigt sich mit der Historie und Gegenwart dieser legendären Hardware. Die C64-Community ist weiterhin extrem groß und entwickelt sich kontinuierlich weiter.

uk: вхід без авторизації


I Am Your User, Why Do You Hate Me?

uk: Комп'ютерні науки

description: Open source software projects can be prickly toward their users. Poor documentation, a steep learning curve, and a finely tuned focus on excellence and quality can make a project community seem hostile. As users of many different open source projects over the years, Leslie Hawthorn has often wondered about this problem and contemplated what to do about it. This session takes some long-standing private rants public.

uk: вхід без авторизації


How to organize a CoderDojo

uk: Комп'ютерні науки

description: CoderDojo is a worldwide initiative to teach kids how to program. Each one is organized individually and the organizer can choose how to do it. I will show you what we do at our Dojo in Cologne and share tips on how to organize a Dojo :)

uk: вхід без авторизації


Internet of Bats

uk: Комп'ютерні науки

description: In meinem Vortrag möchte ich über Hard- und Software reden, die ich im Rahmen der Überwachung von Fledermaus-Bewegungen entwickelt habe.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Distributed Research Infrastructures are built to support scholars from various disciplines in their work. In the case of CENDARI, a toolset aimed at historians has been developed with support by the European Comission. We will explain how popular open source solutions like Jenkins and Puppet have been employed in building the infrastructure, which is composed of open source applications, both existing and specifically developed.

uk: вхід без авторизації

name: Developing Research Infrastructures the DevOps way


uk: Комп'ютерні науки

description: Das Dateisystem: Allgegenwärtig, aber mysteriös. Der Talk soll das Mysterium Dateisystem etwas entzaubern, indem die gängigen Konzepte und die Designs der verschiedenen Standarddateisysteme vorgestellt werden. Er ist für alle die schon immer wissen wollten, wie die gängigen Dateisysteme eigentlich konzeptionell funktionieren.

uk: вхід без авторизації

name: (irq0): A Short History of (Linux) Filesystems


Apple OSX und iOS management

uk: Комп'ютерні науки

description: Einführungsvortrag in die professionelle Verwaltung von Apple OS X und Apple iOS System mit einem Fokus auf den Einsatz von freier Software.

uk: вхід без авторизації


Voctomix

uk: Комп'ютерні науки

description: In 2014 the C3VOC decided, that it wanted to substitute DVSwitch as a Live-Video-Mixer Software with a HD-Capable solution. Two years later, the FrOSCon 2016 will be produced with Voctomix, our own Live-Video-Mixer System.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: In many disciplines in the social sciences and humanities, research is increasingly dealing with large scale text corpora that require the use of advanced NLP tools to process them and extract information. However, to date, most existing algorithms focus on the topical organization (e.g., bag-of-words based LDA) and relatively simple grammatical (e.g., subjects and objects of the discussion, adverbials of place, time, etc.) and semantic structures (e.g., sentiment) of the text, while more complex meanings remain difficult to extract. This talk introduces the EU-funded research project INFOCORE’s strategy to algorithmically detecting calls for action, and discusses the involved challenges, available tools and further developments in the case of conflict discourse. At the same time, it sets out a more general approach to integrating existing algorithms to enable the detection of implicit, more complex semantic structures.

uk: вхід без авторизації

name: Pushing the frontiers of Information Extraction


State of the Union

uk: Комп'ютерні науки

description: Wieder ist ein Jahr vergangen. Was passierte in 2016 in der Open-Source- und Technologiewelt? Oliver Zendel und Michael Kleinhenz werfen einen ironischen Blick zurück auf die letzten 12 Monate, diskutieren gemeinsam mit dem Publikum Entwicklungen, Ausblicke und Eindrücke des letzten Jahres - und erklären, was Katzenklos mit Freier Software zu tun haben. Ein vergnüglicher Couchtalk durch 365 Tage FOSS.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Eine Einführung in die Entwicklung von Spielen mit der Open-Source-Engine libGDX am Beispiel einer Brettspielumsetzung.

uk: вхід без авторизації

name: Cross-Plattform Game Development mit libGDX


Ansible Advanced

uk: Комп'ютерні науки

description: Wegen seiner niedrigen Einstiegsschwelle und hohen Funktionalität wird Ansible immer populärer. Playbooks wachsen sehr schnell und werden unübersichtlich und kompliziert, was gegen die Prinzipien des Configuration Managements spricht. Was macht man damit das nicht passiert?

uk: вхід без авторизації

name: Free and Open Source Software Conference (FrOSCon) e.V.


Angular 2: Getting Started

uk: Комп'ютерні науки

description: Anhand einer Demo-Anwendung wird gezeigt wie Angular 2 aufgebaut ist und wie man loslegen kann.

uk: вхід без авторизації


How to design your own chip?

uk: Комп'ютерні науки

description: Buy hardware, write software -- this is the basic rule we in the FLOSS community followed for many years. But things are changing. Today it is easier than ever before to create own digital hardware, aka. "chips." In this talk I'll show give a introduction into what (in terms of tools, knowledge and other factors) is required to get a digital hardware design up and running. I'll also show how to get started: where can I find the community to get help and existing code? What existing projects can I contribute to?

uk: вхід без авторизації


The Youth Hostel

uk: Комп'ютерні науки

description: I will discuss how it took me nearly 25 years to produce a 40-page book: the writing, typesetting and binding of my mock–mock-epic poem The Youth Hostel, and how this led to my hacking on LaTeX font support, taking over the maintainership of psutils, becoming a Debian Maintainer, and working for Google. On the way, I found that the opposites of Larry Wall's cardinal virtues of the programmer can also be virtuous.

uk: вхід без авторизації


Container for Desktops

uk: Комп'ютерні науки

description: Wie man Containertechnologie wie LXC, Docker, etc. auch auf dem eigenen Desktop-Computer bzw. Notebook nutzen kann, um Privacy und Datensicherheit beim Surfen im Netz und bei vielen anderen Aktivitäten entscheidend zu erhöhen.

uk: вхід без авторизації


init

uk: Комп'ютерні науки

description: Short introduction and last minute changes are announced here

uk: вхід без авторизації


Creating printable maps

uk: Комп'ютерні науки

description: There are a lot of online services that produce nice maps from OpenStreetMap data, but only very few that generate output suitable for printing. This talk is going to present MapOSMatic, a service that produces large scale single and multi page high resolution maps.

uk: вхід без авторизації


Phoenix Framework

uk: Комп'ютерні науки

description: Das mit der neuen Programmiersprache Elixir geschriebene Webframework Phoenix wird von vielen Ruby on Rails Entwicklern bereits als die beste Erfindung seit geschnitten Brot gefeiert. Ist das so oder ist der Hype übertrieben? Muss man sich wirklich eine funktionale Programmiersprache antun? Ist Phoenix wirklich so viel schneller?

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Strukturiertes, zentrales Logging auf verschlüsseltem Transportweg: Mit Systemd gar nicht schwer. Vorgeführt am Beispiel eines Raspberry Pi Clusters.

uk: вхід без авторизації

name: Logging mit Sytemd im Raspberry Pi Cluster


uk: Комп'ютерні науки

description: Die Cloud™ ist unendlich und skalierbar. Punkt. Warum ist es dann noch wichtig die Performance und Skalierbarkeit von Cloud-basierten Systemen zu testen? Skaliert nicht mein Anbieter mein System, solange ich mir das leisten kann? Ja, aber… Cloudanbieter skalieren in erster Linie Ressourcen. Sie sorgen nicht automatisch dafür, dass Anwendungen schnell, stabil und – viel wichtiger – skalierbar sind. Performancetests sind ein wichtiges Instrument, um ein System und dessen Laufzeitumgebung zu verstehen.

uk: вхід без авторизації

name: Last- und Performancetests in der Cloud?!


uk: Комп'ютерні науки

description: Salt ist eine gut skalierbare, vielseitige Lösung zum Systems Management. Die Verwaltung weniger oder mehrerer zehntausend Systeme ist mit Salt problemlos möglich. In diesem Vortrag werden mögliche Szenarien vorgestellt, bei denen sich der Einsatz von Salt anbietet.

uk: вхід без авторизації

name: Skalierbares Systems Management mit Salt


uk: Комп'ютерні науки

description: In the coming years, the EU is determined to bring its industries to the digital market and acquire a leading position on the global tech market. In order to achieve this ambitious goal of allowing Europe's "own Google or Facebook" to emerge, the EU has come up with several political and legislative proposals that obviously cannot overlook software. Three or more magic letters combined in an acronym have, therefore, the power to either support innovation and fair competition, or drown the EU in its vendor lock-in completely. The terms "open standards", "open platforms", and Free Software are being used more and more often but does it mean that the EU is "opening" up for software freedom for real? My talk will explain how several current EU digital policies interact with Free Software, and each other, and what does it mean to software freedom in Europe.

uk: вхід без авторизації

name: DSM, EIF, RED: Acronyms on the EU level and why they matter for software freedom


uk: Комп'ютерні науки

description: Becoming a parent is an step in many people’s life path that will arrive sooner or later, suddenly changing all your priorities. What before was critical might become less important, but what will not change is your need to work.

uk: вхід без авторизації

name: Multi-threading programming and parenting processes


uk: Комп'ютерні науки

description: Letztes Jahr wurden auf der FrOSCon die technischen Hintergründe sowie die Motiviaton des Auftragnehmers erläutert, vom kommerziellen Marktführer hin zu einem OSS-Projekt im Bereich Business-Software zu migrieren. In diesem Jahr referieren sowohl der Projektverantwortliche (Jan Büren, kivitendo) als auch der Auftragnehmer (Andreas Korte, IT-Leiter vitracom AG) zum gesamten - und inzwischen erfolgreich abgeschlossenen - Projektverlauf und geben einen Ausblick, wie es weitergeht." Jan Büren

uk: вхід без авторизації

name: kivitendo als Nachfolger für SAP by Design


uk: Комп'ютерні науки

description: Administratoren sind nicht gezwungen, die von der Distribution gelieferte MySQL-Version einzusetzen: Wenn sie eine andere Variante oder Version bevorzugen, dann können sie von der Auswahl der Distribution abweichen. Jörg Brühe

uk: вхід без авторизації

name: MySQL-Auswahl auch gegen die Distribution


Sichere Webanwendungen mit Clojure

uk: Комп'ютерні науки

description: In diesem Vortrag praesentieren wir Clojure als eine mögliche Sprache um mit wenig Aufwand sichere Webapplikationen zu bauen. Wir zeigen dabei mit welchen Features gängige Frameworks verschiedene Angriffe verhindern und zeigen, dass "Security" ein grundlegender Teil der Architektur sein muss. Joy Clark, Simon Kölsch

uk: вхід без авторизації


openvocs

uk: Комп'ютерні науки

description: We will introduce an open platform for Voice Communication Systems for Mission Control. Our own background is Space Mission Control Room Conferencing at the German Space Operations Center. Markus Töpfer

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Welche Probleme treten beim Einsatz von Open Source für den Betrieb von IT-Infrastruktur auf und wie können diese gelöst werden?

uk: вхід без авторизації

name: Warum Unternehmen zögern Open Source einzusetzen - und wie wir das ändern


uk: Комп'ютерні науки

description: Shipping quality software always involves in-depth testing. In order to minimize time spent on repetitive actions, this task should be fully automated. During this talk Paweł will discuss key problems faced while building automatic testing infrastructure for Tizen operating system images. He will also present how Tizen release team dealt with this task. Both hardware and software presented in this talk is open-sourced and can be easily used to build embedded software testing lab. Paweł Wieczorek

uk: вхід без авторизації

name: Automated Testing Laboratory for Embedded Linux Distributions


uk: Комп'ютерні науки

description: Nach drei Jahren wurde endlich die nutzerunfreundliche Praktik des Routerzwangs gesetzlich für unzulässig erklärt, und aktuell treibt uns die EU-Funkabschottung um. In diesem Vortrag wird der Referent einen Überblick über die Herausforderungen dieser Fälle geben, die er bei seiner Arbeit für die FSFE zusammen mit Entwicklern, NGOs und Unternehmen erfahren hat. Vor allem aber sollen Erfahrungen geteilt werden, was wir daraus für ähnliche Fälle lernen können, um effektiver im Großen wie im Kleinen politisch aktiv zu sein. Denn technische Mittel können zwar oft kurzfristig eine rechtlich schlechte umgehen, doch um langfristig Freie Software und Nutzerrechte zu fördern, müssen wir das Problem an der Wurzel anpacken. Max Mehl

uk: вхід без авторизації

name: Routerzwang und Funkabschottung – Was Aktivisten davon lernen können


uk: Комп'ютерні науки

description: Die digitale Transformation war im letzten Jahr in aller Munde. Dabei meint die Begrifflichkeit nicht, dass etwas Digitales umgeformt wird, sondern dass digitale Komponenten in bislang nicht digitale Umgebungen und Systeme eingeführt werden. Gerade in industriell geprägten Regionen betrifft diese Veränderung primär produzierende Unternehmen. Diese Ingenieur-starken Unternehmen verwenden eher die Begrifflichkeit "Cyber-Physical-Systems", womit sie den Verbund einer IT und einer maschinellen Komponente meinen. Aus einer reinen Informatiker-Sicht entspräche ein solcher Verbund einer Einführung einer IT-Komponente in eine hochgradig heterogene Umgebung. Auf Basis eines exemplarischen Infrastruktur-Stacks werden die Begriffe im Internet der Dinge Umfeld definiert und abgegrenzt. Weiterhin zeigen wir anhand einiger Kundenreferenzen Infrastrukturen und erläutern, wie ein generischer Open-Source-Software-Ansatz aussehen kann. Stefan Grote

uk: вхід без авторизації

name: Open-Source-Software als Schlüsselqualifikation im Internet der Dinge


NoSQL as Not Only SQL

uk: Комп'ютерні науки

description: A deep walk through PostgreSQL JSON features with data examples. This does include the new and shiny PostgreSQL 9.5 JSON features.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Die Spezifikation des Java Memory Model (JMM) gehört zu der kompliziertesten im Java Umfeld, deren Verstädnis aber in Zeiten von Mehrkernprozessoren unabdienbar ist, um die Java Applikationen zu schreiben, die Nebenläufigkeit korrekt unterstützen. Vadym Kazulkin, Rodion Alukhanov

uk: вхід без авторизації

name: Java Memory Model (JMM) für Anfänger und Fortgeschrittene


uk: Комп'ютерні науки

description: Kurze Zusammenfassung des Stands der Komponentierung des WWW und Einführung in das Clientside Component Model (ccm) André Kless

uk: вхід без авторизації

name: Komponenten für das WWW: Das Client-side Component Model (ccm)


uk: Комп'ютерні науки

description: Ein kurzes Update zur (steuer-) rechtlichen Behandlung von Kryptowährungen (Bitcoin & Co.) und wo für unternehmerische Aktivitäten regulatorische, strafrechtliche oder steuerliche Risiken drohen. Axel Hellinger

uk: вхід без авторизації

name: Rechtliche und steuerliche Fallstricke im Umgang mit Kryptowährungen


Rudder - Config Management für alle?

uk: Комп'ютерні науки

description: Rudder gehört zu den jüngeren Tools zur Serververwaltung. Es managed die Standard Unix-/Linux-/Windows Systeme, bringt aber ein paar Besonderheiten mit, die mir wirklich viel Spass machen. In dem Vortrag möchte ich ein bisschen "wie nehme ich Rudder her" zeigen, aber auch zeigen, wo die Unterschiede zu den meisten Tools in diesem Bereich liegen. Florian Heigl

uk: вхід без авторизації


Python für das Internet der Dinge

uk: Комп'ютерні науки

description: MicroPython ist eine neue, schlanke Implementierung der Programmiersprache Python, Version 3, die dafür optimiert ist, auf Systemen mit beschränkten Ressourcen, also z.B. Mikroprozessoren, zu laufen. MicroPython wurde bereits auf viele weit verbreitete Embedded-Plattformen portiert, so z.B. Boards mit STM32F4 Cortex-M4 oder ESP8266 Prozessoren und dient gleichzeitig als minimales Betriebssystem und zur Steuerung und Abfrage der Peripherie, Schnittstellen und Sensoren. Gleichzeitig läuft MicroPython auch unter UNIX-ähnlichen Betriebsystemen und damit auch auf Single-Board-Computern, wie dem Raspberry Pi. MicroPython ist ein Open Source Projekt unter der MIT-Lizenz und eine hervorragende Alternative zu Entwicklungsumgebungen für Elektronik-DIY-Projekte wie NodeMCU oder Arduino. Christopher Arndt

uk: вхід без авторизації


gnuplot #2: Auswertung von Daten

uk: Комп'ютерні науки

description: Nachdem es im letzten Jahr nur zu einer kurzen Einführung die Darstellung von Daten mit gnuplot gereicht hat, soll es diesmal um die Auswertung von Daten gehen: optische «Analyse», Ausgleichskurven, Histogramme, … Harald König

uk: вхід без авторизації


Das Privoxy-Ökosystem

uk: Комп'ютерні науки

description: Der Vortrag gibt einen Überblick über die Privoxy-Funktionen, die vor der Nutzung explizit aktiviert werden müssen, beschreibt Einsatzmöglichkeiten und stellt Anwendungen aus dem Privoxy-Umfeld vor.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: privacyIDEA ist ein System zur Verwaltung auf Authentifizierungs-Faktoren. So lassen sich in verschiedenen Szenarien durch flexible Mehr-Faktor-Authentifizierung Anmeldeverfahren leicht besser absichern. Cornelius Kölbel

uk: вхід без авторизації

name: Mehr-Faktor-Authentifizierung am Puls der Zeit


Karriereplanung für IT Fachleute

uk: Комп'ютерні науки

description: IT Spezialisten, IT Architekten und Privatdetektive haben eines gemeinsam. Alle glauben zu wissen was es ist aber es gibt noch keinen staatlich anerkannten Ausbildungsweg für diese Berufsgruppen. Viele nationale aber vor allem internationale Unternehmen setzen deshalb auf einen Karrierepfad für Fachleute neben dem klassischen Managementstrukturen. Um in diesem Karrierpfad erfolgreich zu sein bedarf es neben den fachlichen Skills eines breites Spektrums an nichfachlichen Fähigkeiten im Bereich Kommunikation, Planung und Ausdrucksfähigkeit. Was ist dort zu beachten und wie kann man sich frühzeitig auf diese Fragen vorbereiten um rechtzeitig auch die wichtigen Dinge neben den Bits und Bytes zu erlernen? Hagen Bauer

uk: вхід без авторизації


uk: Комп'ютерні науки

description: A welcome by the vice president for research and young academics of the University of Applied Sciences Bonn-Rhein-Sieg. Prof. Dr. Margit Geißler

uk: вхід без авторизації

name: FrOSCon 2016 - Welcome by the vice president


uk: Комп'ютерні науки

description: Initially inspired by the proprietary software Prezi, Sozi is a free and open-source "zooming presentation" tool based on open standards. This talk will expose the general concepts of Sozi and how it benefits from the use of open standards, from a user's as well as a developer's point of view. We will give an overview of the current status of the project and the expected future developments. Over the last few years, several presentation tools have emerged that provide alternatives to the traditional desktop slideshow software. Some of them, like reveal.js, allow to create slideshows using web standards such as HTML5, CSS3 and JavaScript. Others, like the proprietary software Prezi, have set a new paradigm based on a sequence of camera movements (translations, zooms, rotations) over a single, unlimited canvas where all the visual content of your document is laid out. Initially inspired by Prezi, Sozi is a free and open-source "zooming presentation" tool based on open standards. A Sozi presentation is an SVG document augmented with presentation data and a player script in JavaScript. As a consequence, such a document can be played directly by any standards-compliant web browser without the need to install a plugin or a specific viewing software. For presentation creators, we have chosen to build the Sozi editor as an extension to the free SVG editor Inkscape. Sozi is open to contributions: volunteers have provided translations to 8 languages, others have created packages for several widely-used GNU/Linux distributions

uk: вхід без авторизації

name: An overview of Sozi: SVG-based zooming presentation software


uk: Комп'ютерні науки

description: PostgreSQL Europe's Annual report will be presented along with other announcements, and the results of the 2014 board elections revealed

uk: вхід без авторизації

name: Announcements, Annual Report and Election Results


Annual Squeak Shoutout

uk: Комп'ютерні науки

description: Progress made in squeak the past year and a look at the development of spur, the new VM

uk: вхід без авторизації


uk: Комп'ютерні науки

description: AppStream provides a solution for application-centric software management using existing package managers, while Listaller extends the package manager with the ability to install 3rd-party applications in a secure way, without introducing additional UI. This talk explains the basic concepts of both projects and the motivation behind them, as well as the obstacles in cross-distro collaboration which we hit while developing these tools. Software management on Linux is traditionally done using packages, although desktop users are more interested in applications instead and do not care much about how something is packaged. Also, users often want to install software which is not available in the repositories (e.g. unpackaged stuff, as well as new versions of applications), without having to upgrade the whole distribution. AppStream provides a solution for application-centric software management using the existing package-managers, by providing extra metadata for packages. This allows developers to create cross-distro application-centers, like GNOME-Software or Apper. Listaller extends the package manager with the ability to install 3rd-party applications, which are not (yet) in the distribution's repositories. It builds on top of the AppStream specs and focuses on integration, so the installation process is completely transparent for users, and Listaller-installed applications can be managed with existing software-management tools. Because software from 3rd-party sources is a potential security risk, Listaller also tries to give users a hint if they can trust a certain application, and includes sandboxing for these applications. Both projects rely heavily on metadata provided by upstream projects and distributions. This talk will explain the concepts of AppStream and Listaller, which new metadata needs to be added and why as well as how distributions can make a software-center available for their users. If the time allows it, the talk will also highlight the problems we had with the AppStream project in the first place and how we could improve cross-distribution collaboration in general

uk: вхід без авторизації

name: AppStream & Listaller: The next step in application management and deployment on Linux


uk: Комп'ютерні науки

description: Generating music from an Arduino usually needs a shield. And shields cost money. This talk introduces a project that makes it free and easy to play sound without a shield, nor a knowledge of musical theory. We shall introduce a number of projects that make the Arduino make noises, other than the squeaks of the example code. This includes the new library, Armstrong, which supports various methods of playing music, along with MIDI functionality, all from a vanilla Arduino

uk: вхід без авторизації

name: Armstrong - Music with the Arduino: No shields required!


uk: Комп'ютерні науки

description: CentOS has cemented a reputation as the "community enterprise operating system" - one that provides a reliable rebuild, but is not known for innovation in its own right. With the news that Red Hat and CentOS are joining forces, this is going to change. Here's how CentOS is planning to change, and how other distros can learn from our next phase. This includes our governance changes, and how we'll address several different special interest groups (SIGs) that have different ideas they want to realize with CentOS. It also includes technical changes, and I'll explain how we're going to manage our build system and source control for accepting upstream code and then creating new variants. Most importantly, I'll also be taking questions about the new direction and how we got to this point

uk: вхід без авторизації

name: CentOS: Planning for Variants and the Next Chapter: A Broader, Faster, Easier Route to Contributions in CentOS


Automatic Testing of Installed Software

uk: Комп'ютерні науки

description: Automatic Testing of Installed Software is a testing framework to validate the various flavors of software installed on an HPC site. It is composed of a set of unit tests, a runtime and a result-gathering dashboard. These tests are user-oriented as they assess the basic features that a general user expect to work on an HPC platform. Currently, it only focuses on generic MPI functionality as it is one complex and critical component of an HPC platform, but it will be extended to compilers, libraries and performance validation and regression in the future. HPC centers tend to provide a wide choice a software. Different users requires different software, but also different versions of the same software. Combined with the different compilers, MPI stacks, library dependencies, there is an explosion of software flavors installed on an HPC site. Tools already exist to help managing this large variety of software. Users can choose their software through the software list using the 'module' system. Administrators can perform automatic compilation and installation of software using EasyBuild. Additionally, software also require some customizations on some HPC sites. Thus, software flavors need to be validated after installation to check they're working as expected by the users. We developed and provide a set of unit tests together with a runtime and result-gathering framework to perform a such Automatic Testing of Installed Software. These tests take the side of the users in order to test any basic feature that a general user expect to work on an HPC platform. So far, the proposed tests only focus on generic MPI functionality as it is one complex and critical component of an HPC platform. The unit tests include, for example, compilation with mpicc and distributed execution with mpiexec. It has been applied successfully on the HPC platforms of the University of Luxembourg to assess builds of OpenMPI, MPICH, MVAPICH2 and IntelMPI generated with EasyBuild. In the future, we consider extending our unit tests to validate more components like compilers, libraries, toolchains and even applications. Another future direction is to consider performance validation and regression.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This talk will cover the basics of autoscaling, different types of auto-scaling, and how you can use your metrics to take good auto-scaling decisions. Targeted to entry level to mid level auto-scaling users. * What is autoscaling * Different kinds of traffic peak scenarios * Autoscaling reactive vs proactive * Autoscaling with external tools - Rightscale, Autoscale API, Heat, Ceilometer * Autoscaling with your metrics - Graphite, Provisioning, Configuration Management

uk: вхід без авторизації

name: Autoscaling best practices: How did we survive the peak


uk: Комп'ютерні науки

description: The public libraries in Denmark wanted an admin system for their new BibOS-system, which is an Ubuntu-based GNU/Linux distribution for audience PCs. To achieve this, we built a completely new and completely free administration system for Debian-based PCs. The public libraries in several Danish municipalities are in the process of switching their audience PCs from Windows to Ubuntu. They needed a central administration system to manage it, and Canonical's Landscape product was unacceptable for them; they needed the system to be completely free/open source, and Canonical's licensing when running Landscape as software-as-a-service was too expensive. The available free alternatives are either too technical for library staff, or they don't support Debian-based systems well. In response, we created "BibOS Admin", a completely new administration system for all Debian-like systems. It enables users to remotely manage, maintain and upgrade PCs and run arbitrary, centrally defined scripts on them. The system is designed to be easy to use for non-technical staff who can rely on a set of pre-defined scripts, which should be set up as part of the setup for each organization (source code available here: https://github.com/magenta-aps/bibos_admin). In the talk, I will discuss the technical and organizational challenges of building a new management from scratch in collaboration with the public libraries in Aarhus and Silkeborg, who kindly funded the effort

uk: вхід без авторизації

name: BibOS Admin - a web-based, easy to use admin system for Ubuntu: Because Landscape is too expensive


uk: Комп'ютерні науки

description: As the prominent open-source data center virtualization solution, oVirt relies on a powerful and easy approach to configuring a data center's network. By leveraging the advanced network capabilities offered by OpenStack Networking, oVirt's maintainers aim to bring this field even further, allowing data center administrators to use advanced networking capabilities while maintaining the simplicity of oVirt's network management approach. Developers & Users are welcome to join us in this session, and to discover how oVirt currently leverages OpenStack Networking, and see the road-map to future network virtualization in the Data Center, all using open source enterprise-grade software. In this session Mike Kolesnik from Red Hat's Cloud Networking Group will cover the networking capabilities of both of these projects, covering Neutron's popular use cases, including: * Overlay networking * Security Groups * IP address management * Other capabilities, as well as covering the traditional data center virtualization offering. In addition we'll review the integration of these two products, and see how you can leverage the advanced networking capabilities from the cloud in your virtualized data center. The future is still ahead, as we will explore what's already there and what's yet to come in this emerging collaboration. Developers & Users are welcome to join us in this session, and to discover how oVirt currently leverages OpenStack Networking, and see the road-map to future network virtualization in the Data Center, all using open source enterprise-grade software

uk: вхід без авторизації

name: Bring your virtualized networking stack to the next level: oVirt & OpenStack Neutron integration


uk: Комп'ютерні науки

description: Most of the flexibility that has been brought to the development of software defined radios resides in components that can be associated with the physical layer of the radio. This talk tries to shed some light on how SDRs can also benefit from flexibility in higher protocol layers such as link-layer protocols. Specifically, the talk introduces a component-based link-layer protocol architecture that allows to build self-contained protocol components that can be combined to complete link-layer protocol solutions in a Lego-like manner. The talk will cover some architectural aspects as well as some implementation-specific problems that we came across during the development of a prototype using Iris.

uk: вхід без авторизації

name: Building Link-Layer Protocols in a Lego-like Fashion


uk: Комп'ютерні науки

description: The Capsicum project adds new security primitives to FreeBSD and other UNIX-like operating systems, blending security models from capability systems with the practicality of real running code, today. This talk will describe what Capsicum is, how it works, and several exciting new developments in its deployment.

uk: вхід без авторизації

name: Capsicum: Practical capabilities for UNIX


uk: Комп'ютерні науки

description: General presentation of the Tizen project and how to interact with it at the application or core level or even for designing your own Tizen system. Tizen is a Linux Operating System for phones, vehicles, and other devices. Talk will give a short introduction to the project and focus on how can any developer interact with it.

uk: вхід без авторизації

name: Contributing to the Tizen Project: Apps, core, platform, hardware, what ? where ? how ? and when ?


Clang: Re-inventing the Compiler

uk: Комп'ютерні науки

description: The LLVM clang C++ compiler has exceeded all expectations the last year, gaining unprecedented new features that let you explore, rewrite, and rediscover your source code. This is a talk about the human story of a compiler: What can we achieve going beyond compilation? Why are we compelled to invent a better wheel? How can we make everyday life better for coders, and could the compiler itself become an instrument for wider social change? Developed by an eclectic team of academics, supercomputer hobbyists and vendors including Apple and Google, the LLVM project has proven itself as a hotbed of innovation leading the renaissance in C-family programming languages, recently receiving the coveted ACM Software System Award. Whether you're a kernel hacker, app developer or front-end designer, clang is different to other compilers, it's coming to a machine near you in 2014 and may well impact your work: Here's what you need to know.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The battle for Wesnoth is in the rare position of being an open source game project featuring many different translations for its huge amount of content. Currently Wesnoth features 54 translations of which 15 translations of the stable series are more than 90% complete. This session is about sharing the history behind this and factors which can help projects gain a stable internationalization community. The talk will focus on best practices which have shown themselves as working nicely for getting the translation community started as well as keeping translators happy. It might also show how the translation process is connected to the release cycle and what common problems for game translations are.

uk: вхід без авторизації

name: Community based translations of games: Why babelfish ain't enough


uk: Комп'ютерні науки

description: In this course, we examine the aspects regarding building maintaining and operating data warehouses as well as give an insight to the main knowledge discovery techniques. The course deals with basic issues like storage of the data, execution of the analytical queries and data mining procedures. Course will be tought completly in English. The general structure of the course is: Typical dw use case scenarios Basic architecture of dw Data modelling on a conceptual, logical and physical level Multidimensional E/R modelling Cubes, dimensions, measures Query processing, OLAP queries (OLAP vs OLTP), roll-up, drill down, slice, dice, pivot MOLAP, ROLAP, HOLAP SQL99 OLAP operators, MDX Snowflake, star and starflake schemas for relational storage Multimedia physical storage (linearization) DW Indexing as search optimization mean: R-Trees, UB-Trees, Bitmap indexes Other optimization procedures: data partitioning, star join optimization, materialized views ETL Association rule mining, sequence patterns, time series Classification: Decision trees, naive Bayes classifications, SVM Cluster analysis: K-means, hierarchical clustering, aglomerative clustering, outlier analysis

uk: вхід без авторизації

name: Data Warehousing and Data Mining Techniques - Introduction (28.10.2010)

name: Technische Universität Braunschweig, Institut für Informationssysteme

addressCountry: DE

addressLocality: Braunschweig

addressRegion: Lower Saxony


uk: Комп'ютерні науки

description: This talk will present Transactional Memory, a programming abstraction for managing concurrency, both in multi-threaded programs running on multi-core processors as well as in distributed cloud infra-structures. This talk will present Transactional Memory (TM), a programming abstraction for managing concurrency, both in multi-threaded programs running on multi-core processors as well as in distributed cloud infra-structures. TM allows programmers to declare which parts of a program need to run atomically (i.e., as indivisible steps), while a generic implementation involving compilers, runtime libraries, middleware, and hardware support for TM takes care of ensuring this atomicity at runtime. The two presenters will give an overview of recent advances, standardization efforts (e.g., for C++), and open-source tools providing support for TM (e.g., GCC).

uk: вхід без авторизації

name: Concurrent Programming Made Simple: The (r)evolution of Transactional Memory


Configuration Management 101

uk: Комп'ютерні науки

description: Common threads run through modern configuration management systems. This talk will explore CM by examining promise theory, convergent systems, idempotence, and order. We'll also touch on orchestration, immutable systems, and containers, and testing

uk: вхід без авторизації