uk: Комп'ютерні науки

description: Der Vortrag beleuchtet die Einflüsse auf den geheimnisvollen Teil des Mobilfunks – Störquellen im Uplink und deren Auswirkungen auf die Mobilfunk-Kommunikation sowie Praktiken zum Aufspüren von HF-Störquellen. Die Feldstärke-Balkenanzeige eines Smartphones (die Downlink-Empfangsfeldstärke) ist nur die Hälfte der Wahrheit zur Bewertung einer Mobilfunkversorgung. Die andere Hälfte ist der weithin unsichtbare aber gegen Störeinflüsse hochempfindliche Uplink, die Richtung vom Endgerät zu den Basisstationen. In diesem Vortrag werden Uplink-Störquellen, deren Auswirkungen sowie Mess- und Analysemöglichkeiten erläutert.

uk: вхід без авторизації

name: Die verborgene Seite des Mobilfunks: HF-Störquellen im Uplink


David Lanzendörfer

type: Person

keywords: Hardware, Making

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: While a lot of projects are currently developing their own processors, mostly as open source in Verilog, VHDL or even Chisel, we miss the free process that actually manufactures these chips. So we're developing the "Libre Silicon" project, a portable semiconductor manufacturing process and technology, using only free and open source tools: We would like to introduce the project, who we are, what we are doing and where we are now.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: LibreSilicon: Decentralizing semiconductor manufacturing

Chaos Computer Club e.V.

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: Over the summer Facebook, Google, and Twitter have started making transparent United States political ads shown on their platforms. We have been collecting and analyzing these political ads to understand how candidates, elected officials, PACs, non-profits, for-profit companies, and individual citizens are disseminating U.S. political content using these advertising platforms.

uk: вхід без авторизації

name: Explaining Online US Political Advertising


uk: Комп'ютерні науки

description: The software defined wide-area network is technology based on SDN approach applied to branch office connections in Enterprises. According to Gartner's predictions, more than 50% of routers will be replaced with SD-WAN Solutions by 2020. The SD-WAN can have firewalls and other perimeter security features on board which makes them attractive targets for attackers. Vendors promise "on-the-fly agility, security" and many other benefits. But what does "security" really mean from a hand-on perspective? Most of SD-WAN solutions are distributed as Linux-based Virtual Appliances or a Cloud-centric service which can make them low-hanging fruit even for script kiddie. Complexity of SDN creates additional security issues and cybersecurity pro should address it before an attack occurs. This presentation will introduce practical analysis of different SD-WAN solutions from the attacker perspective. Attack surface, threat model and real-world vulnerabilities in SD-WAN solutions will be presented.

uk: вхід без авторизації

name: SD-WAN a New Hop: How to hack software defined network and keep your sanity?


uk: Комп'ютерні науки

description: In this talk I want to present the computational undertakings in the field of cosmological structure formation and galaxy formation. Here, sometimes gigantic simulations help us to unravel the processes that led to the Universe that we can see today. I will give a short overview of our current understanding of the evolution of the Universe, the history and techniques of the simulations and their current state and future.

uk: вхід без авторизації

name: Simulating Universes: What Virtual Universes Can Tell Us About Our Own


uk: Комп'ютерні науки

description: As humans have a large negative impact on ecosystems all around the globe, we are approaching a major extinction event in which around 70% of all species will go extinct. This talk will give an introduction to a data-driven and system-based view of ecology.

uk: вхід без авторизації

name: Hacking Ecology: How Data Scientists can help to avoid a sixth global extinction


uk: Комп'ютерні науки

description: We all know what FAX is, and for some strange reason most of us need to use it from time to time. Hard to believe its 2018, right? But can FAX be something more than a bureaucratic burden? Can it actually be a catastrophic security hole that may be used to compromise your entire network? Come watch our talk and find out …

uk: вхід без авторизації

name: What The Fax?!: Hacking your network likes it's 1980 again


uk: Комп'ютерні науки

description: In this talk, I’ll present several attacks that leak the plaintext of OpenPGP or S/MIME encrypted emails to an attacker. Some of the attacks are technically interesting, i.e. the two different efail attacks, some are somewhat silly, yet effective. Some abuse HTML emails, some also work with plain ASCII emails. Furthermore, I’ll discuss our lessons learned and describe the efail-related changes to mail clients and the OpenPGP and S/MIME standards.

uk: вхід без авторизації

name: Attacking end-to-end email encryption: Efail, other attacks and lessons learned.


uk: Комп'ютерні науки

description: A cryptojacking website abuses the computing resources of its visitors to covertly mine for cryptocurrencies in the browser. In this talk, we explore this phenomenon and answer, amongst others, the following questions: How does the mining script work under the hood? How common is this attack? How much money do the attackers earn? And how can I defend myself against such attacks?

uk: вхід без авторизації

name: Web-based Cryptojacking in the Wild: When your browser is mining coins for other people


uk: Комп'ютерні науки

description: We let the technically ungifted build robots and to fight each other for the laughs. Please contact @honky in RocketChat or visit the ChaosZone Hall 2 if you want to participate. We need at least 8 Robots to participate, if we have more, we'll bring this to the battlefield.

uk: вхід без авторизації

name: Hebocon: The sumo robot fight for the technically ungifted


uk: Комп'ютерні науки

description: Sigfox is an emerging low-power wide-area network (LP-WAN) technology for IoT devices, comparable to LoRa. This talk recounts my analysis of Sigfox's radio protocol and presents an open reference implementation of an alternative Sigfox protocol stack. It confirms that while Sigfox ensures authenticity and integrity, transmitted payloads are not confidential. This presentation is targeted at a technical audience with some basic knowledge of cryptography (security goals, AES), but no knowledge in RF technology (modulation, scrambling, error correction) is required.

uk: вхід без авторизації

name: Hunting the Sigfox: Wireless IoT Network Security: Dissecting the radio protocol of Sigfox, the global cellular network for the IoT you have probably never heard of


Was ist ein Rastertunnelmikroskop?

de: Physik, Astronomie

fi: fysiikka, tähtitiede

uk: Фізика, Астрономія

en: Physics, Astronomy

fr: Physique, Astronomie

da: Fysik, Astronomi

es: Física, Astronomía

nl: Natuurkunde, Astronomie

de: Mathematik, Naturwissenschaften

uk: Математика, природничі науки

en: Mathematics, Natural Sciences

@language: de

uk: вхід без авторизації

name: Moderation Skorupka, Sascha (Leitung, Regie, Redaktion)

Leibniz Universität Hannover (LUH)

addressCountry: DE

addressLocality: Hanover

addressRegion: Lower Saxony


uk: Комп'ютерні науки

description: In this webinar ARDC partnered with the ADACS project to explore the FAIR data principles in the context of Astronomy research and the ASVO and IVOA as a community exemplars of the implementation of the FAIR data principles. Keith Russell (ARDC): Looking at FAIR In this talk Keith will provide an overview of the FAIR principles and how it was used in astronomy before it became official. He will conclude the talk by discussing what other disciplines can learn from their approach. Dr. Katrina Sealey (Macquarie University): Australian Astronomy and the FAIR Data Principles - what does this look like? The broad concepts of findable, accessible, interoperable and reusable data has long been a part of the astronomical communities data principles. Now that the world wide data communities are working towards formalised FAIR principles we will discuss how the astronomical community is adopting the FAIR principles into our ASVO data management. Dr Luke Davies (ICRAR, UWA): Hosting the next generation of galaxy evolution surveys at AAO Data Central The final talk of the webinar will look at a case study. Luke will discuss data products from the Galaxy And Mass Assembly survey and Deep Extragalactic Visible Legacy Survey (DEVILS -devilsurvey.org) and how they are generally used. Furthermore, he will outline some of the challenges faced in terms of hosting and serving these data to the community, and how the AAO Data Central helped overcome these challenges.

uk: вхід без авторизації

name: FAIR in Astronomy research - webinar 22 Oct 2018

Australian Research Data Commons (ARDC)

addressCountry: AU

addressLocality: Melbourne

addressRegion: Victoria


uk: Комп'ютерні науки

description: FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації

name: Building a Database Application with (almost) no Code


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Building Server Applications using Objective C and GNUstep


Was ist Risikomanagement?

uk: вхід без авторизації


FOSDEM 2009: Étoilé

uk: Комп'ютерні науки

uk: вхід без авторизації


10 cool things about Exherbo

uk: Комп'ютерні науки

description: This talk will focus on 10 important features that makes it easier for users and developers alike to work with Exherbo. While the talk will focus on the current state of Exherbo and the short-term future the ideas being presented should be equally interesting for other distribution developers and users. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


CalDAV - the open groupware protocol

uk: Комп'ютерні науки

description: Introduction into the CalDAV protocol and related protocols. Overview on OpenSource CalDAV clients and servers, and on libraries for CalDAV development. Attempt to motivate people to implement IETF standard protocols instead of proprietrary ones. CalDAV is a calendaring and scheduling client/server protocol designed to allow users to access calendar data on a server, and to schedule meetings with other users on that server or other servers. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


Apache felix

uk: Комп'ютерні науки

uk: вхід без авторизації


FOSDEM 2009: Bug

uk: Комп'ютерні науки

uk: вхід без авторизації


Cobbler & Koan

uk: Комп'ютерні науки

description: During this talk, we aim to give you an overview of the Cobbler project, explain where we'd like to see it going and explain a few use cases. Cobbler is an installation server, written in Python, which allows for rapid deployment (and re-deployment) of large amounts of physical and virtual machines by defining distributions, repositories, profiles and systems as objects. It's easy to get started with Cobbler, but we ship a lot of advanced features to make it as versatile as possible, so you won't get bored with it. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


FOSDEM 2009: Camelot

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Project Caiman: Build your own Distribution based on OpenSolaris 2008.11


FOSDEM 2009: Debian

uk: Комп'ютерні науки

description: Observations about the role that Debian plays in the world of Free Software, and some lessons learned that may help other Free Software projects.

uk: вхід без авторизації


FOSDEM 2009: Ext4

uk: Комп'ютерні науки

description: This presentation will discuss history of ext4, its features and advantages, and how best to use the ext4 filesystem. The latest generation of the ext2/ext3 filesystems is the ext4 filesystem, which recently left the development status of 2.6.28. With extents, delayed allocation, multiblock allocation, persistent preallocation, and its other new features, it is substantally faster and more efficient compared to the ext3 filesystem.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Putting Apache Solr to work: eZ Find, a powerful eZ Publish search plugin


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Quantitative data about libre software development: the FLOSSMetrics project


Free and Open Future

uk: Комп'ютерні науки

description: Freedom, openness and participation have become a pervasive part of digital life. 250 million people use Firefox. Wikipedia reaches people in 260 languages. Whole countries have Linux in their schools. Flickr hosts millions of openly licenses photos. Apache underpins the Internet. We have moved mountains. At the same time, the terrain has shifted. Our digital world has moved into the cloud. And, our window into this world is just as often unhackable phones in our pocket as it is flexible computers on our desktop. Hundreds of millions of people take being digital for granted, and rarely stop to think what it means. The world where free and open source software were born is not the same as the world they have helped to build. It's time to ask: what do freedom, openness and participation look like 10 years from now? How do we promote these values into the future? Building the open web and hackability into the world of mobile is part of the answer. Promoting privacy, portability and user control in the cloud are also critical. But what else? Mark Surman will reflect on these questions and chat with the FOSDEM crowd.

uk: вхід без авторизації


FOSDEM 2009: FreedroidRPG

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Free Software Identity Management challenges and technical details The presentation will revolve around the problems of building a modern Free Software based Identity Management Solution. The challenges we faced in trying to combine security, ease of used, standards, features, and interoperability with other solutions. The choices we have made for the current code base, and the choices we are facing going forward. The vision and future directions. The presentation will introduce the public to the technologies used, the modifications or additions we performed and will dive into technical details about how we architect the server and the future client components.

uk: вхід без авторизації

name: FreeIPA, Identity Management in the FOSS World


Fuzzing goals

uk: Комп'ютерні науки

description: The talk will present how a fuzzer is written and how it works. Then we will analyze a crash. And finally we will see how to report it to the vendor and typical vendor reactions. Fusil the fuzzer is a Python library to write fuzzers and a collection of twenty specific fuzzers: ClamAV, Firefox, mplayer, poppler (PDF), etc. A simple fuzzer can crash most (all?) applications.

uk: вхід без авторизації


Games Done Good

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Animal monitoring with Gemvid: Non-invasive measure of rats physical global activity


uk: Комп'ютерні науки

description: Ever wondered what it takes to make a community of more than 180 F/LOSS projects and 5,000+ geeks create great software? In this talk, Leslie Hawthorn will explore the successes and setbacks of Google Summer of Code, the first global program designed to introduce University students to Free and Open Source software development practices and methodologies. Leslie will discuss the program's inception, history, and impact, and the evolving requirements for managing a large scale global community. She will share lessons learned during the past three years as the program's Community Manager, with an eye to providing audience members with strategies for organizing their own community participation initiative, and provide attendees with an update on Melange, the new work flow application designed to manage *Google Summer of Code* - or similar programs - and Google's first Open Source project developed in the open from the first commit.

uk: вхід без авторизації

name: A Behind the Scenes Look at Large Scale Community Management


uk: Комп'ютерні науки

description: An understanding of the nature of your system workload is an important step in optimizing it for maximum performance on your hardware. I will discuss some useful tools and techniques for evaluating the workload of your FreeBSD system, and identifying the bottlenecks that are limiting performance.

uk: вхід без авторизації

name: Help! My system is slow!: Profiling tools, tips and tricks


uk: Комп'ютерні науки

uk: вхід без авторизації

name: How the social networking site Hyves benefits from puppet


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Open Invention Network: Linux Defenders in Context


Introduction to GnuTLS

uk: Комп'ютерні науки

uk: вхід без авторизації


LXDE Foundation

uk: Комп'ютерні науки

uk: вхід без авторизації


Marionnet: networking for dummies

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: I'll be going over some of the particular UI and workflow issues in editing, media uploading, and other areas that we intend to tackle, summarize some of the existing work toward those ends, and give a preview our upcoming Wikipedia Usability Initiative. MediaWiki was born in 2002, when Wikipedia's editing activity outgrew the concurrency limits of its original wiki engine. The first 6 years of this open-source wiki platform's development were largely devoted to scaling and performance, ensuring that the world's most editable online encyclopedia could keep up with the number of articles, visitors, and changes that come with being an insanely popular user-written site. But the user interface hasn't changed much since 2003; if anything, packing in more features has made many aspects of the wiki harder to use over time. In 2009, MediaWiki developers are turning their eye towards usability and design issues. As with the scaling problems we've tackled before, we have to be able to target anything from a tiny personal or intranet wiki to the massive Wikipedia sites, making a range of different use cases with different needs... It'll be fun!

uk: вхід без авторизації

name: MediaWiki's big code & usability push: And other fun stories for the internet age


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Quick start into mobile development for developers


uk: Комп'ютерні науки

uk: вхід без авторизації

name: ModularIT: a software libre project for sysadmins


uk: Комп'ютерні науки

uk: вхід без авторизації

name: MuseScore: Open Source music notation & composition software


MySQL High Availability Solutions

uk: Комп'ютерні науки

description: There are many ways of how to ensure the availability of a MySQL Server and how to provide additional redundancy and fault-tolerance. In this talk, Lenz will give an overview over some best practices and commonly used HA setups for MySQL. The talk will cover the Open Source components and tools that are frequently utilized, with a focus on Linux and OpenSolaris. The session will also cover MySQL Cluster, the architecture and relationship to the MySQL Server. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


FOSDEM 2009: OpenAMQ

uk: Комп'ютерні науки

description: I'll speak about a new messaging protocol called AMQP, and the iMatix projects that implement this protocol. AMQP makes it possible to make cheap, fast distributed applications, for pubsub, cloud computing, telecoms, etc.. I'll explain our OpenAMQ implementation of AMQP, and also our web-based RESTful messaging project, Zyre, which makes AMQP work over plain HTTP. This talk is aimed at FOSS developers with interest in new protocols. AMQP is a good example of how large businesses are promoting and investing in FOSS today.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Apport - Automatic Application Crash Reporting for openSUSE


uk: Комп'ютерні науки

uk: вхід без авторизації

name: MirrorBrain - Free CDN for Free Software Projects


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Collaboration in the openSUSE Build Service


uk: Комп'ютерні науки

uk: вхід без авторизації

name: The Community role in openSUSE life-cycle


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Putting Cross Development Support into OBS


OpenSUSE Education

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Bits from your GNOME team (with build service fun inside)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Putting the 'open' in openSUSE: Community-driven KDE development


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Legal aspects of distribution development


OpenSUSE on Netbooks

uk: Комп'ютерні науки

description: FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software. More info at http://fosdem.org

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: OpenFATE - How to get your most wanted features into openSUSE


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Creating customized openSUSE versions with SUSE Studio


FOSDEM 2009: Welcome - openSUSE

uk: Комп'ютерні науки

uk: вхід без авторизації


Wine - the free Windows Emulator

uk: Комп'ютерні науки

uk: вхід без авторизації


YaST2 - Future Roadmap

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Zypper - openSUSE's command line software manager


FOSDEM 2009: Opsview

uk: Комп'ютерні науки

uk: вхід без авторизації


FOSDEM 2009: OSI

uk: Комп'ютерні науки

uk: вхід без авторизації


OWASP Web Testing Methodology

uk: Комп'ютерні науки

description: The speech goal is to show the OWASP testing methodology and how you can implement a software development lifecycle that permit to develop more secure applications. The Open Web Application Security Project (OWASP) wants to deliver free tools and documentation for the Web Application Security. The talk will present the new OWASP Testing Guide v3 that includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues. OWASP Testing Guide v3 is a 349 page book; we have split the set of active tests in 9 sub-categories for a total of 66 controls to test during the Web Application Testing activity. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


FOSDEM 2009: Pyroom

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This talk is about reverse engineering a proprietary network protocol, and then creating my own implementation. The talk will cover the tools used to take binary data apart, capture the data, and techniques I use for decoding unknown formats. The protocol covered is the RTMP protocol used by Adobe flash, and this new implementation is part of the Gnash project. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації

name: Reverse Engineering of Proprietary Protocols, Tools and Techniques


Scala - A Scalable Language

uk: Комп'ютерні науки

description: In this talk I'll describe the design principles of the Scala programming language, which has scalability as its primary design objective. Today's software landscape resembles increasingly a tower of Babel: Systems are built using many different languages, combining server-side and client-side languages, scripting and systems programming languages, general and domain specific languages, all glued together with a hefty amount of XML. The advantage of this approach is that each individual language can be tailored to a specific application domain. Its disadvantage is that the necessary amount of cross-language glue can make applications cumbersome to write, deploy, and maintain. An alternative is offered by scalable languages, which can be used for many different applications, ranging from small scripts to very large systems. An important aspect of a scalable language is that it itself is extensible and malleable. It should be possible to define very high-level libraries in it, which act in effect as specialized domain specific languages. The advantages of this approach is that it leads to more regular system designs, gives better static checking, makes applications easier to deploy, and increases their reliability. In this talk I'll describe the design principles of the Scala programming language, which has scalability as its primary design objective. Scala combines lightweight syntax with strong static checking on a Java-compatible platform. It encourages the embedding of domain-specific languages as high-level libraries. I discuss how Scala affects systems design and discuss its suitability for large scale industrial deployment. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


The Secure List Server

uk: Комп'ютерні науки

description: FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


FOSDEM 2009: SmallMail

uk: Комп'ютерні науки

uk: вхід без авторизації


The Syslinux Project

uk: Комп'ютерні науки

description: This talk will discuss the x86 boot process, how to make it work in a dynamic system, and the tradeoffs between versatility and reliability. It will also discuss the Syslinux modular interface and how to use it to quickly add new features with a minimum of coding. Originally written during an all-night hacking session in 1994 with the intent to better support the then-ubiquitous install boot floppies, Syslinux has evolved over the years into a widely used boot loader suite with an advanced modular interface, with emphasis on ease of use and reliability. It is now the most commonly used x86 bootloader for removable media, and is increasingly used for conventional hard disk booting as well. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


The Fedora Project

uk: Комп'ютерні науки

description: The talk will take a look at the current roadmap for the Fedora Project, from a technical and community-building point of view. The discussion will focus on the recently-released Fedora 10 as well as the in-development Fedora 11, as well as other Fedora projects such as infrastructure, websites, translation, etc. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


TikiWiki CMS/Groupware

uk: Комп'ютерні науки

uk: вхід без авторизації


FOSDEM 2009: Upstart

uk: Комп'ютерні науки

description: This talk takes a trip along the Roadmap for Upstart 1.0, introducing what features will be available. Linux has always traditionally lacked good service management facilities, so much so that the typical daemon doesn't use what ones we have and instead relies on hokey shell scripts. Upstart is being developed to not only solve this problem but also how it, through integration with D-Bus, DeviceKit and similar frameworks, allows service lifecycles to be tied to hardware and system state. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації


FOSDEM 2009: Usbpicprog

uk: Комп'ютерні науки

uk: вхід без авторизації


FOSDEM 2009: Welcome

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Xwiki: The Xwiki Wysiwyg Editor: Rich Cross-Browser Editing, Take Two


uk: Комп'ютерні науки

description: The Zarafa webaccess plugin system is aimed at allowing developers to add functionality to the Zarafa webaccess, while not requiring them to modify existing system files inside the core of the Zarafa WebAccess software. Zarafa will show how to programm a module and shows the architecture integrations with open source solutions such as Alfresco and Sugarcrm and other community contributions. The Zarafa webaccess plugin system is aimed at allowing developers to add functionality to the Zarafa WebAccess, while not requiring them to modify existing system files inside the core of the Zarafa WebAccess software. Steve will show how to program a module and shows the architecture integrations with open source solutions such as Alfresco and Sugarcrm and other community contributions. FOSDEM (Free and Open Source Development European Meeting) is a European event centered around Free and Open Source software development. It is aimed at developers and all interested in the Free and Open Source news in the world. Its goals are to enable developers to meet and to promote the awareness and use of free and open source software.

uk: вхід без авторизації

name: Zarafa: AGPLv3 Multi-Protocol Collaboration Server


GAP Applications + PRICE

uk: Комп'ютерні науки

uk: вхід без авторизації


Garbage collection with Objective-C

uk: Комп'ютерні науки

uk: вхід без авторизації


ScalableOGo

uk: Комп'ютерні науки

uk: вхід без авторизації


Theming in GNUstep

uk: Комп'ютерні науки

uk: вхід без авторизації


Web Services in Objective-C

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: There are already plenty of node package managers so why yet another one? This talk aims to give you an overview of the current npm-to-nix ecosystem, what tools there are, what the strengths/shortcomings of each one have and what pnpm is all about and how it pertains to nix. After that I will be talking you through what goes in to building pnpm2nix, what problems I had along the way and how nix/nixpkgs could improve to help such efforts along. --- Bio: I love building software

uk: вхід без авторизації

name: Building pnpm2nix: yet another npm to nix tool


uk: Комп'ютерні науки

description: High energy physics, and large scale research in general, has both common and unusual requirements for computing. Software must be distributed across a wide range of non-heterogeneous resources, with single experiments able to continuously utilise many 10,000s of globally distributed machines. Exploitation of data continues for decades after it is first taken, making reproducibility and stability essential. The use of Nix has been tested within LHCb, one of the four large experiments at the Large Hadron Collider (LHC). In this talk we will discuss the conclusions of this testing, how Nix is suited to the needs of the ""big science"" community, as well as presenting some of the challenges which have been found when testing Nix. --- Bio: PhD student in high energy physics at the University of Manchester, UK and a member of the LHCb Collaboration studying the decays of Charm quarks. Interested utilising tools from outside the high energy physics community to make the use of computing more efficient.

uk: вхід без авторизації

name: Nix for software deployment in high energy physics


NixOS on Chromebooks

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Using some of the features of Nix 2, it's possible to build a rather fully featured but easy to use and understand Continues Integration Service. Scylla is an attempt to create a new platform for CI, more similar to ofBorg, but specialized for many smaller projects.

uk: вхід без авторизації

name: SCYLLA CI: Simpla Continuous Integration for pure Nix projects


Building static executables with Nix

uk: Комп'ютерні науки

uk: вхід без авторизації


NixCon 2018 - Welcome

uk: Комп'ютерні науки

uk: вхід без авторизації


Nix as HPC package management system

uk: Комп'ютерні науки

description: Modern High Performance Computing systems are becoming larger and more heterogeneous. The proper management of software for the users of such systems poses a significant challenge. These users run very diverse applications that may be compiled with proprietary tools for specialized hardware. Moreover, the application life-cycle of these software may exceed the lifetime of the HPC systems themselves. These difficulties motivate the use of specialized package management systems. In this presentation, we outline an approach to HPC package development, deployment, management, sharing, and reuse based on the Nix functional package manager. We report our experience with this approach inside the GRICAD HPC center in Grenoble, France, and compare it to other existing approaches. --- After a PhD in applied mathematics, I have worked in the scientific computing field, with a strong HPC component.

uk: вхід без авторизації


vpsAdminOS

uk: Комп'ютерні науки

description: Description:Building a lightweight hypervisor for Linux system containers on top of NixOS and not-os. How we adopted Nix ecosystem to allow migration of our production infrastructure from OpenVZ to LXC. --- Bio: Opensource software and hardware hacker

uk: вхід без авторизації


Nix(OS) modules everywhere!

uk: Комп'ютерні науки

description: Description:I'll talk about how I've implemented a deployment system from scratch in Nix for a client, and show how Nix(OS) modules can be used outside NixOS in productive ways. --- Bio: Freelancing devops engineer interested in functional programming and declarative deployments.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: At Release Engineering within Mozilla, we develop and support Firefox release pipelines that help Firefox developers test their patches and Release Management plan and execute Firefox releases. Release Engineering manage a number of services where each one aids in achieving these pipelines. e.g. kicking off and tracking a new release, analyzing the source code, and providing external dependencies for building and testing. Currently we use Nix to manage deployment and development of these services.. For this purpose, we wrote a small wrapper around Nix, to make interaction with Nix easier, and help with on-boarding. In this talk, I would like to share my experience of Nix adoption at Mozilla, especially within the Release Engineering / Management team. How we overcome some shortcoming of Nix-the-tool and what is still waiting for us to improve. What worked well and where Nix failed us. The main goal of this talk is to help others who are looking to introduce Nix at work, to know how to set expectations and what an such effort looks like. --- Bio: Rok is a Release Engineer at Mozilla, in Berlin. He is part of the Release Engineering team which helps ship Firefox and other Mozilla products. He is the author of pypi2nix tool, which tries to package python packages in Nix. In his free time … he hasn't had free time since his son was born.

uk: вхід без авторизації

name: How to make Nix ./pleasing to use at work


uk: Комп'ютерні науки

description: My talk I'm proposing is on how to use nix at home in a variety of different ways. We'll start with the basics, a single git repository with multiple machine configurations cloned to /etc/nixos. From there we'll talk about how to deploy machines using nixops with the none backend, specifically in the context of a home router machine with multiple interfaces running all the basic services needed for a secure usable home network. From their we'll foray into how nixos generations works under the hood a bit and talk about IOHK's work at making a remote deployable mac system using nix-darwin, as well as some custom code I wrote that allows you to run nix systemd services (example being prometheus node exporter) on any linux system. We'll wrap the talk up with some discussion about using nix for home automation and monitoring as well as a chance for Q&A. --- Bio: I've been involved with the nix community for a little over a year. I help out on IRC whenever I have a chance (disasm). I work on the devops team of IOHK using nix and haskell on a daily basis. I've been using nixops to deploy my main home router for a little over 6 months, and have been using custom haskell to deploy my mac systems using nix-darwin for about 3 months.

uk: вхід без авторизації

name: Nix at Home - Configuration management for your House!: Or...How I use enterprise level tools to have sanity at home!


Was ist "Smart Watts"?

uk: Комп'ютерні науки

uk: вхід без авторизації

name: Moderation Skorupka, Sascha (Leitung, Regie, Redaktion)


Dysnomia: complementing Nix deployments

uk: Комп'ютерні науки

description: One of the main goals of the tools in the Nix project is to fully automate deployments from declarative specifications. Thanks to the underlying purely functional deployment model of the Nix package manager, we get strong guarantees that dependencies are complete, we get (nearly) bit identical builds, and we can do atomic upgrades and rollbacks. Although Nix deployments are very powerful, the tools in the Nix project only manage the static parts of a system, such as packages and configuration files. Nix does not manage any state, such as databases. As a result, when deploying a NixOS configuration to a different machine, we get the same static system configuration (e.g. packages and configuration), but any state must still be manually migrated and deployed. In a network of machines, this could become very tedious. In this talk, I will show Dysnomia, a deployment tool inspired by Nix that can be used to manage units of state, such as databases. It makes units of states uniformly accessible (it has a plugin system supporting many kinds of state and databases), executes various deployment activities (e.g. activation, deactivation) and can manage snapshots of state in a snapshot store that has similarities with the Nix store. Dysnomia can be used as an independent tool, but is more useful when it is combined with tools in the Nix project -- we can automatically deploy databases as part of a NixOS configuration and we can combine it with Disnix to automatically migrate databases from one machine to another. --- Sander is a contributor to the Nix project since late 2007. He contributed to many areas in the Nix-ecosystem. He started the Android build environment. He maintains various Nix-related tools, such as Disnix, node2nix, NiJS, and composer2nix.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Nix is a fantastic tool for managing the dependencies of your development projects, but ironically the Nix language itself has very limited facilities for modular code reuse and composition. In this talk, I will present on my recent experiments with a system, inspired by node.js's "require" mechanism, to define packages of nix language code that can depend on other packages. Together with conventions encouraging detailed documentation, good error messages, and clean interfaces, I hope this project can form the seed for a robust ecosystem of libraries and tools that can help move us past the monolith of nixpkgs and enable us to more easily benefit from each others' work. --- Bio: Shea is a lead engineer at Target's data science and optimization group, whose production stack is built with Nix. He has been part of the NixOS community since 2010, has been working professionally with Nix since 2012, and is part of the Nix core team.

uk: вхід без авторизації

name: require.nix: dependency management for your favorite


NixOS 18.09 release managers

uk: Комп'ютерні науки

description: The release managers talking about the latest NixOS release

uk: вхід без авторизації


uk: Комп'ютерні науки

description: I would like to share our experiences while migrating a VM-based hosting infrastructure at Flying Circus Internet Operations from Gentoo to NixOS. It is a case study of migrating 500+ VM running diverse customer projects using a wide range of web technologies. I'll cover the following main points: 1. What was our motivation to change to NixOS? Which specific features of NixOS attracted us? 2. Creating a NixOS-based hosting platform - What did we have to implement? What is still missing? 3. What are the pain points? How could NixOS become more attractive? 4. What do our users think? -- benefits and stumbling blocks. --- Bio: Christian is a systems engineer working with Flying Circus Internet Operations in Halle (Saale), Germany. He works mainly on infrastructure which keeps customers' web applications running. Main programming languages are Python, Nix, Rust. Christian is a regular contributor to NixOS, most known for vulnix and vulnerability roundups.

uk: вхід без авторизації

name: Migrating a Hosting Infrastructure from Gentoo


uk: Комп'ютерні науки

description: Reflashing your broadband router with Linux (e.g. DD-WRT, OpenWRT, Tomato or variants) gives you unparalleled flexibility to do things that the manufacturer probably hadn't thought of. Remembering what you did, six months later, is often trickier. NixWRT is a (currently experimental) collection of derivations using the Nix package system and bits of NixOS to build router and IoT device firmware images using the principles of declarativity and composability that are why we love Nix. This talk will give you an overview of how it works, some war stories about the challenges faced, and hopefully the data you need to to decide whether to try it yourself on your own hardware. --- Bio: Daniel Barlow has been using Linux since kernel 0.99 (Slackware and MCC-Interim), and has never really adjusted as computing has moved on. Playing with resource-limited systems like routers and IoT devices helps him pretend it's still 1995. Since then he's programmed professionally in Perl, Common Lisp and Ruby, and played with Clojure and Nix. Most likely to say: ""try looking at it with {strace, wireshark}?"" Least likely to say: ""just buy a closed-source solution from an enterprise vendor""

uk: вхід без авторизації

name: NixWRT: purely functional firmware images for IoT


hnix

uk: Комп'ютерні науки

uk: вхід без авторизації


Cachix - binary cache(s) for everyone

uk: Комп'ютерні науки

description: This talk is going to cover how to best use Cachix in hobby and professional manner to ease development and adoption of Nix. Talk is also going to cover the motivation how Cachix came to be, what are the design decision behind it and their consequences, usage statistics and where it's possibly headed. --- Bio: Domen Kozar: I've started using Nix in 2012 and after years of many contributions in free time, started using Nix exclusively in 2016 packaging up OpenStack and functional testing a cluster with scenarios. In 2016 I've founded Enlambda consulting which helped many clients like Snabb and IOHK to adopt Nix as a way to solve interesting complex software distribution problems in our industry. Robert Hensing: Nix user since early 2016, Nix and Haskell freelancer since 2017. You may have caught him on stack overflow with a solution, advice or bad news. He is convinced that the future is not just immutable, but functional. Link to slides: https://drive.google.com/open?id=0BwzQu6RqRR5zeFpBckw1M3Q3eXBPdW5kWmIyWmo0TTA0X0pr

uk: вхід без авторизації


uk: Комп'ютерні науки

description: For my day job, I operate a compute fleet on a mixture of private and public cloud. We started out with NixOps, but ultimately found ourselves constrained by its limitations and "pet"-focused approach, so I ended up learning a lot by building our own cattle-focused deployment tool.--- Bio: Hi! I'm edef, and I build software and services for other people to build software and services with

uk: вхід без авторизації

name: Beyond NixOps: Compute Fleet Operations with NixOS


Nix roadmap

uk: Комп'ютерні науки

description: Our BDFL will be talking about the Nix roadmap --- Bio: Eelco is a senior software engineer at Tweag I/O. He obtained a PhD in Computer Science from Utrecht University in 2006 and was a postdoctoral researcher at Utrecht University and Delft University. As part of his PhD research project at Utrecht University, he developed Nix, the purely functional package manager, which forms the basis of the NixOS Linux distribution. He previously worked at LogicBlox and Infor.

uk: вхід без авторизації


state of the NixOS wiki

uk: Комп'ютерні науки

description: Tristan Helmich

uk: вхід без авторизації


Redesigning NixOS Networking

uk: Комп'ютерні науки

description: Description:NixOS networking has been the source of weird bugs for years. There is no simple mapping between systemd units and the setup and teardown of network interfaces and its interdependencies. The systemd project is aware of that and implemented systemd-networkd to manage networking configuration. There even is a second implementation of the NixOS networking interface that uses systemd-netword but in its current state has some drawbacks and inconsistencies that prevent using it by default. The question for NixOS is if the adoption of systemd-networkd is desired and if a redesign of the current config interface to support as much features as possible is needed. This talk presents my findings around the topic, some design ideas concerning a possible interface and my personal wishlist of useful and cool networking features that should be supported. --- Bio: Grumpy infrastructure engineer, NixOS security team & retired release manager

uk: вхід без авторизації


Nix for data pipeline configuration

uk: Комп'ютерні науки

description: My team develops a data pipeline to generate music recommendations. It consists of many batch jobs that read data from somewhere and write their output somewhere else, with complex dependencies and parameter tuning. Historically, we have configured these batch jobs with hand-written bash configuration, or with dedicated python-based tools such as Airflow. However, both lack flexibility, often forcing the developer to bypass them and to run jobs manually during development. The tasks of data pipeline configuration and package definition share some requirements: both imply running many programs in a specific order and with specific parameters. Since nix is a language dedicated to packages definition, which allows expressing packages in a succinct and highly flexible way, we decided to try to use it for data pipeline configuration. Nix-the-tool is too centered around package management for our use case, so we built our own tool around nix-the-language. It this talk, we’ll explore how to apply nix to data pipeline configuration. This will give us the opportunity to look at nix as a language, abstracted from its current ecosystem. We’ll also explore how to structure a nix codebase, encountering the same questions nixpkgs encountered a long time ago, but in a much smaller environment. The main goal of this talk is to share the different point of view of nix that comes from applying it to a different problem and starting from scratch. We also hope to serve as an inspiration to explore other nix-based DSLs. --- Bio: Georges is a Software Engineer at SoundCloud, in Berlin. He is part of the team that generates music recommendations. He loves exploring new ways to solve engineering problems, which led him to look into exciting technologies such as Haskell and NixOS. Some of his favorites hobbies are playing board games and learning German.

uk: вхід без авторизації


lazy dev env

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: When building extensions for databases, it can become burdensome to make sure you build and deploy matching versions. This often involves changing the version number in multiple places or custom scripting, in particular when deploying extensions to other environments. In this talk I will cover two cases of building database extensions for PostgreSQL and Redis, as well as how to use Nix to manage Python environments to run tests against temporary instances of the database. Finally I will briefly discuss building docker images for the database with the extension installed. --- Bio: John is a software engineer at InfoSum, where he works on the core components of their customer data platform. At InfoSum, he uses Nix to build several C projects as well as managing python dependencies, and has been using NixOS as his primary operating system for over a year. In his free time, John enjoys experimenting with Haskell, playing board games and going bouldering.

uk: вхід без авторизації

name: Building and Testing Database extensions with Nix


About the Nix sandboxes and breakpoints

uk: Комп'ютерні науки

description: Nix's build sandbox is one of the key enablers to ensure we can build our packages on every machine in the same way. It normalizes the build environment and restricts access to non-reproducible file and network resources. However at times it can be difficult and time consuming to figure out why a long running build failed. In this talk I will give a brief overview about the anatomy of Nix's sandbox on Linux. Then I will show how we can leverage breakpoints in builder scripts to inspect failures in the sandbox as they happen. Finally I will present dynamic tracing techniques based on the sysdig framework that can show likely impurities in the build process to hint to root cause of build failures. --- Bio: I do my PhD in University of Edinburgh where I work in systems research. When I am not reconstructing program failures from hardware traces and coredumps, I review and merge pull requests in nixpkgs or work on the NUR platform

uk: вхід без авторизації


Presenting nix-writers

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Nix User Profile (NixUP) should have been a declarative configuration for the user environment [1]. By now similar solutions have emerged, like nix-home [2] or home-manager [3]. In this talk the different approaches will be reviewed and an update on the state and future of NixUP will be given. [1] https://github.com/NixOS/nixpkgs/pull/9250 [2] https://github.com/sheenobu/nix-home [3] https://github.com/rycee/home-manager

uk: вхід без авторизації

name: NixUP – State and Future of a Nix-Managed User Profile


uk: Комп'ютерні науки

description: As the latest release managers, we will describe how NixOS releases have been done in the past and how we want to encourage the Nix community to participate in the release process. We are going to highlight some interesting new features of past releases and the then brand-new 17.09 'Hummingbird' release. Finally, we present you some ideas for features we would love to see implemented. We will give you an impression of the NixOS release process, how the release team works (RFC15) and your duties as release manager. Not to scare you away but to motivate you to step up as the next release manager. In particular, we will give you an overview of promising features the community has suggested but remain to be implemented. Some of those are general service hardening with systemd, a new test-runner container backend for quicker service tests and the service abstraction layer to use NixOS service modules in Docker containers or swap init systems.

uk: вхід без авторизації

name: Releasing NixOS – History, Hummingbird and Henceforth


uk: Комп'ютерні науки

description: This talk explores ways to introduce Nix into an existing infrastructure (at work), based on real-life experience.

uk: вхід без авторизації

name: Sneaking Nix at $work and become a hero, hopefully


uk: Комп'ютерні науки

description: While there is pretty good support for testing NixOS based services inside VMs, the same doesn’t hold for large parts of nixpkgs, especially for testing packages. I will present different approaches to improve testing. Over the last year I have been creating various testing environments, tried out different approaches and created tests for various parts of nixpkgs, notably package tests with very interesting properties. There are two kinds of tests in nixpkgs right now: /lib/tests: this is essentially a derivation that tests (some/most) library functions by checking their outputs. /nixos/tests: contains a list of tests for modules that use the VM testing infrastructure (`/nixos/tests/make-test.nix`). Both kinds of tests live in a different part of the codebase than the implementations they test, and have to be run separately, and manually (by hand or by CI). This leads to easy desynchronization of test- and actual implementation—the tests bit-rot over time. I therefore propose two maxims: All testing code should be as close to the implementation code as possible. Changing the implementation should not be possible without adjusting the testing code to make it pass. Coming from this angle, I recognized that a unique property of nix evaluation—short runtime—makes it possible to let nix packages depend on their tests. This is accomplished by a `seq` for derivations, discovered with @aszlig. I will present how drvSeq makes it possible to create package tests that are able to use the full power of the nix language for abstraction. It also does not cause unnecessary recompilation, like changing the checkPhase does right now. Going further, I will discuss best practices for including these tests into already existing packages. As well as packages, functions (and thereby whole language frameworks) can be tested as well, enabling a kind of testing that is automatically done to every usage of the function (i.e. every package in the framework). This could lead to interesting use cases. While VM tests already work with automatic CI support, their code location is not satisfying according to maxim 1. I will propose an integrations of VM tests as a module option, producing outputs neatly piecing into the current hydra setup.

uk: вхід без авторизації

name: Test ALL the Things – On improving the nixpkgs testing story


uk: Комп'ютерні науки

description: Talk with go through lessons learned using Nix in last two years to automate software distribution. What are the common technical and process obstacles using Nix to ship software in production - mean that customers depend on the pipeline. What supportive tools and Nix features were used, what Nix features aren't useful, where do I see improvements are needed. What do I see as something that will boost Nix usage in companies and what's my plan to get there.

uk: вхід без авторизації

name: Using Nix in production for the last two years


A type-system for Nix

uk: Комп'ютерні науки

description: We present here the new tix tool, a type-checker for the Nix language whose goal is to make nix code easier to write and maintain. Nix's strength comes from the ideas it borrows from functional programming: immutability, powerful abstraction capabilities, etc.., yet it misses one of the most emblematic and powerful feature of most functional programming languages: a strong static type-system, which becomes a problem given the increasing size of the Nix package collection. This proposal (which is the result of an internship funded by the Nix community and tweag I/O and supervised by Guiseppe Castagna) tries to fix this. The resulting type-system and typechecker have been designed with two very important constraints in mind: The type-system must be able to offer as much safety as possible for the programmer. One must be able to reuse existing nix code with as few modifications as possible. This means that: Most of Nix idioms have to be supported by the type-system − in particular the presence of types at runtime and the dynamic fields in the records, There must be ways to bypass − up to some extent − the type-system, using e.g. gradual typing or by locally disabling certain errors. In this talk, we will present the tool from the practical point of view of the nix user and discuss further improvements.

uk: вхід без авторизації


Incremental package builds

uk: Комп'ютерні науки

description: The current CI infrastructure around nixpkgs has difficulties to build the whole package set in due time. While there were attempts to build every pull requests, these are not enabled by default because it requires even more resources. We will explore how to optimize even more the build process to meet the size of nixpkgs. We will survey with state-of-the-art build systems like scons, bazel and tup to see how we could improve incremental builds in nix. Based on nix-make, we will describe how nix could cooperate with the build tool of a given package to bring incremental builds at a finer granularity. In particular, we will explore how the intensional store model (as used by bazel for example) could help avoiding some mass rebuilds.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This talk wants to give an overview over the usage and development of pypi2nix, a tool to generate and maintain python environments with nix. pypi2nix is already a viable tool to generate and manage python environments with their respective dependencies inside of nix. The first part of this talk will be focused on the current functionality of it. This includes features and shortcomings. The second part of the talk is about nixpkgs-python and how we use pypi2nix to maintain semi-automated self-updating sets of python packages. Finally we will discuss how pypi2nix could be used to maintain python package sets inside of nixpkgs in the future.

uk: вхід без авторизації

name: Managing Python Environments with pypi2nix


Nix 1.12

uk: Комп'ютерні науки

description: In this talk I will give an overview of the new features in Nix 1.12, and the ongoing work on the "nix" command intended to replace the existing command-line interface.

uk: вхід без авторизації


Nix at LumiGuide

uk: Комп'ютерні науки

description: LumiGuide develops and maintains bicycle and car parking guidance systems that are deployed in various cities in the Netherlands and abroad. To run this system a number of different machines are needed: image analysis servers deployed locally in facilities, central web-servers and support servers in data centers, embedded machines like Raspberry Pi's and ARM FPGA's to power our various displays in facilities and on the streets. Finally our engineers have workstation to write our software. All these machines need to be developed, tested, provisioned, configured, installed and rolled back (in case we make a mistake). Since we don't have a dedicated sys-admin we rely on automation to do most of these tasks. We use the Nix ecosystem of tools to help us with that. I will talk about how we've structured our mono-repository, how we make sure each engineer uses the exact same version of nixpkgs and the exact same NixOS configuration, how we override our Haskell packages, how we use Continuous Integration wit hydra and how we deploy our machines using nixops. Finally I will also talk about the things that we don't like about the Nix ecosystem.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: For the past couple of years, Darwin has been a first-class "pure" platform on Nix. In this talk I'll describe the many hurdles we've had to overcome to get from an impure poorly supported platform to where we are today. I'll also cover ongoing pain points and where we see the platform going, and why I think it should take over the Mac packaging ecosystem. When I first encountered Nix, I was simultaneously impressed by the purity of its Linux environment with virtually no untracked external dependencies, and disappointed with the situation on macOS. On macOS, some of my first experiences with Nix involved some painful surprises of impurities breaking my Nix builds, and my early attempts to fix them largely failed. As I tinkered with Nix and spoke to experts online, a clearer picture emerged for how to move from the impure situation to a pure one, and a few of us banded together on IRC over the following few months to bootstrap a pure compiler toolchain and OS-appropriate SDK from scratch. It's a grueling story of mass rebuilds multiple times a day, repeatedly waiting for three hours just to find stupid typos, and hunting down undesired dependency chains, but in the end it came together and actually worked, much to everyone's surprise. Although the situation is now far better than it was, there is still much work to do, and I'll go over some of the root causes of much of the remaining pain and how I propose to tackle it. I'll also go over some exciting recent developments in the macOS Nix space and what I think the project and platform will look like in the longer term.

uk: вхід без авторизації

name: Nix on Darwin – History, challenges, and where it's going


NixOS at Tumblr

uk: Комп'ютерні науки

description: Infrastructure automation testing is hard, but NixOS makes it a breeze. Using NixOS' testing framework, Tumblr developed a comprehensive integration test suite for Jetpants, Tumblr's database automation toolkit designed to manage billions of rows and hundreds of database machines. In this talk we will explore the challenges of testing Jetpants, mimicking complex replication and sharding topologies, and future applications of NixOS at Tumblr.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: NixOS is receiving more and more attention from users expecting up to date packages and timely security patches. Weekly "catch-up" issues were effective, but faltered after our datasource dried up. In this talk we will explore the challenges and potential solutions around regular NixOS security patching, and how to join the famous "-distro" list.

uk: вхід без авторизації

name: NixOS Security – Vulnerability Roundup n+1


uk: Комп'ютерні науки

description: For many reasons, Nixpkgs cannot accept every package ever created. Things have to change, let's make sure we can at least include every package, even if they are not part of our central repository! Since December 25th 2016, we are now able to use Overlays. Overlays gives us the ability to change the way Nixpkgs see the world, while providing most of the benefits that we can get from it. This presentation will address the following questions: Why overlays are useful, across a community, across an organization, or across the world? How to write an overlay with a few good and bad examples, and digging in the internals of Nixpkgs to understand how overlays are working? What can we do to improve the usage of overlay even more? What parts of Nixpkgs should be converted into overlays?

uk: вхід без авторизації

name: Nixpkgs Overlays – A place for all excluded packages


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

en: Information and Library Sciences

de: Geisteswissenschaften

uk: Гуманітарні науки

en: Humanities

uk: вхід без авторизації

name: Creating, using, and distributing compliant research data: A model for fulfilling legal and policy requirements


uk: Комп'ютерні науки

de: Allgemeine und vergleichende Literatur- und Sprachwissenschaft

uk: Загальне та порівняльне літературознавство та мовознавство

en: General and Comparative Literary Studies and Linguistics

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: Legal Issues Surrounding the Collection, Use and Access to Grey Data in the University Setting; How Data Policies Reflect the Political Will of Organizations


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: On Open Access to Research Data: A DANS Use Case


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: When is ‘grey’ too ‘grey’? A case of grey data


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: Data Management and the Role of Librarians


Librarians' Role in GAO Reports

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: Measuring reuse of institutionally-hosted grey literature


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: Research Data Management: What can librarians really help?


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: The data librarian: myth, reality or utopia?


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: A Case Study on the Content Curation for Improving Effectiveness of Research Reports


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: Open Data engages Citation and Reuse: A Follow-up Study on Enhanced Publication


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: The Q-Codes: Metadata, Research data, and Desiderata, Oh My! Improving Access to Grey Literature


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: When the Virtual Becomes Reality: An Environmental Scan of the Presence of Virtual Reality and Artificial Intelligence in Health and Cancer Care Environments


IBM Watson

uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: The Search Technology Behind WorldWideScience


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: WordWideScience.org - A global Alliance Supporting Open Science and Innovations in Discovery


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: WorldWideScience.org: What Make it Unique?


uk: Комп'ютерні науки

uk: Бібліотекознавство, документознавство

uk: Гуманітарні науки

uk: вхід без авторизації

name: Welcome Address: Open Science More than Access to Scholary Papers


uk: Комп'ютерні науки

description: North American railroads use several wireless systems for remote control, monitoring, and tracking of locomotives, railcars, signals, and other equipment. This talk will provide an overview of the systems in use, an in-depth look of two of them: The end-of-train (EOT) device contributed to the demise of the caboose 35 years ago, taking over one of its primary functions: monitoring brake pipe pressure. The EOT transmits pressure, its unique ID, and other data, encoded into AFSK packets, to a corresponding head-of-train (HOT) device in the locomotive. A secondary function is venting the line in an emergency braking event, under command of the HOT. BCH error correction is employed for reliability, but there are inherent security flaws. A SDR/GNU Radio/Python workflow for decoding and verifying packets will be demonstrated. Attempts at automatically identifying passing railcars were largely unsuccessful until the introduction of the Automatic Equipment Identification (AEI) system in the early 90s. This 900 MHz RFID system consists of passive tags on each locomotive and car and wayside readers at rail yard entrances and other locations of interest. The author's day job in environmental noise consulting led to a study of the feasibility of using AEI for rail noise studies. It had to be reverse-engineered first, of course. Using a repurposed commercial reader, Raspberry Pi, and cellular modem, a remote monitoring system gathered tag date for 5 weeks. Details of the protocol and monitoring system will be presented, along with video demonstrations.

uk: вхід без авторизації

name: WIRELESS VILLAGE - Introduction to Railroad Telemetry


uk: Комп'ютерні науки

description: Whilst 802.15.4 technologies such as Zigbee have been around for some time, our understanding of threats and risks associated with it have been lacking. As new use cases evolve, so have the opportunities for attack and exploitation. The purpose of this talk is to provide a real world exploration of where I've been finding zigbee devices with a purpose built war driving kit, some of the live collection I've done as well as an exploration of risks and what can be done. By the end of this talk, audience members will have an appreciation for cool technologies floating around their environments, an appreciation the issues associated with the 802.15.4 protocol, and how to plan and prepare from a security standpoint.

uk: вхід без авторизації

name: WIRELESS VILLAGE - Exploring the 802.15.4 attack surface


uk: Комп'ютерні науки

uk: вхід без авторизації

name: WIRELESS VILLAGE - "It's not Wi-Fi": Reverse engineering and managing radio signals


uk: Комп'ютерні науки

description: In this webinar, we hear from Simon Huggard, Chair of the Australian ORCID Advisory Group, and Melroy Almeida, Technical Support Analyst of the Australian Access Federation to explain who are members of the Australian ORCID Consortium, review the current state and achievements of this important national research information infrastructure, and how you can continue to support ORCID at your institution. Dr Laurel Haak, Executive Director of ORCID Inc. also joins us to provide an overall view of their roadmap over the next few years. The Australian ORCID Consortium is now in its third year of operation with 40 members, from 37 Australian universities, 1 national research organisation (CSIRO), 2 funding bodies (ARC, NHMRC) and the Consortium Lead, the Australian Access Federation. Since the establishment of the Australian ORCID Consortium in 2016, other national Consortia have sprung up internationally. Publishers such as Nature Publishing Group and Elsevier have also included ORCID as part of their publishing workflows.

uk: вхід без авторизації

name: ORCID - State of the Nation Webinar - 3 May 2018


uk: Комп'ютерні науки

description: What happens when a Pineapple, a Turtle and a Squirrel get high...up in the clouds? It's been a solid year for Hak5 and we're excited to debut some epic new features! Like a centralized web consoles for all your networked Hak5 Gear, WiFi Pineapple WPA Enterprise harvesting, credential capturing and pass-through, or LIVE reconnaissance and more! Join Sebastian Kinne and Darren Kitchen of famed pentesting tools for a peek into what's right around the corner.

uk: вхід без авторизації

name: WIRELESS VILLAGE - Little Fluffy Pineapple Clouds


uk: Комп'ютерні науки

description: Talk will focus on privacy (or lack thereof) of gotenna networks. We will cover traditional attacks which have only been available to state sponsored prior to popularization and wide availability of software defined radios. We will cover signal analysis, triangulation, protocol analysis, deanonimization, cryptanalysis, spoofing and selective jamming. Since the gotenna ecosystem also includes an app we will cover the vulnerabilities in the underlying crypto libraries, weak token generation, broken API segregation as well as other vulnerabilities. You too can learn how to analyze, snoop on and exploit RF networks like a pro with a hackrf, laptop and some elbow grease, sweat and sleep deprivation.

uk: вхід без авторизації

name: WIRELESS VILLAGE - RFNoC: Accelerating The Spectrum with the FPGA


uk: Комп'ютерні науки

uk: вхід без авторизації

name: WIRELESS VILLAGE - Attacking Gotenna Networks


WIRELESS VILLAGE - BLE CTF

uk: Комп'ютерні науки

description: The purpose of BLE CTF (https://github.com/hackgnar/ble_ctf) is to teach the core concepts of Bluetooth low energy client and server interactions. While it has also been built to be fun, it was built with the intent to teach and reinforce core concepts that are needed to plunge into the world of Bluetooth hacking. After completing this CTF, you should have everything you need to start fiddling with any BLE GATT device you can find.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Present, and (hopefully) Demo using a raspberry pi to detect wifi signal strength via audio click frequency.

uk: вхід без авторизації

name: WIRELESS VILLAGE - PiClicker v2.0: BSSI [Brain Signal Strength Indicator]: finding foxes with acoustic help


uk: Комп'ютерні науки

description: Given the challenge of locating a static Access Point this presentation highlights our strategy, pitfalls, and success.

uk: вхід без авторизації

name: WIRELESS VILLAGE - Hunting Rogue APs*: Hard Lessons


uk: Комп'ютерні науки

description: Using cheap commodity RF hardware to act as secure or backchannel communications for security research and pen tests. Wireless communication is getting cheaper and hobby projects are integrating long range low powered communication to link devices in all sorts of unique ways. But what about in the world of information security? This talk will cover the acronym soup of current communication systems including LoRA, RFM, Satellite, ASK, and many others to identify what protocols make sense when you are trying to communicate either stealthily or in remote areas. In addition, this talk will cover how to improve reliability of wireless communication and the costs associated with making your super pen test box. Or perhaps even what evil things can be done with these and how to protect yourself. The aim for this talk is to be interactive, and allow people to share experiences.

uk: вхід без авторизації

name: WIRELESS VILLAGE - Can you hear me now (DEFCON)? Wireless communication for pentesters


WIRELESS VILLAGE - Blue Sonar

uk: Комп'ютерні науки

description: BlueTooth is everywhere, it is in all of our pockets and the only protection most use is not being in discoverable mode. This will be a talk on enumeration, tracking non-discoverable Bluetooth devices, as well as an operators perspective on some awesome use cases for Blue_Sonar. Of course it is already in Pentoo. This talk is imperative for those in the WCTF, because you will need this tool to find many of the BlueTooth foxes.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: WIRELESS VILLAGE - WEP and WPA Cracking 101


uk: Комп'ютерні науки

description: Two years ago Richard Thieme spoke on “Playing Through the Pain: The Impact of Dark Knowledge on Security and Intelligence Professionals” for Def Con 24. He relied on dozens of experiences provided by colleagues over a quarter-century, colleagues from NSA, CIA, corporate, and military. Responses to the presentation have often been emotional and have corroborated his thesis. The real impact of this work on people over the long term has to be mitigated by counter-measures and strategies so scars can be endured or,even better,incorporated and put to use. In this presentation, Thieme elaborates those strategies and counter-measures. In what is likely his final speech at Def Con, he speaks directly to the “human in the machine” AS a human being. It’s not about leaving the profession: it’s about what we can do to thrive and transcend the challenges. It‘s about “saving this space,” this play space of hacking, work and life, and knowing the cost of being fully human while encountering dehumanizing impacts. It is easier to focus on exploits, cool tools, zero days, and the games we play in the space that “makes us smile.” It is not so easy to know how to play through the pain successfully. The damage to us does not show up in brain scans. It shows up in our families, our relationships, and our lives. Thieme is not preaching, he is sharing insights based on what he too has had to transcend in his own life. They call a lot of us “supernormals,” which means we discovered resilient responses to deprivation, abuse, profound loss … or the daily challenges of work that makes clear that evil is real. We are driven, we never quit, we fight through adversity, we create and recreate personas that work, we do what has to be done. It pays to know how we do that and know THAT we know so we can recreate resilience in the face of whatever comes our way. A contractor for NSA suggested that everyone inside the agency should see the video of “Playing Through the Pain.” A long-time Def Con attendee asks all new hires to watch “Staring into the Abyss,” a talk Thieme did a few years before. This subject matter is seldom discussed aloud “out here” and by all accounts is not taken seriously “inside,” which is perhaps why there have been half a dozen suicides lately at NSA and a CIA veteran said, “I have 23 suicides on my mind, the most recent senior people who could not live with what they knew.” The assumption baked into this talk: real hacking, its ethos and its execution, provides the tools we need to do this damn thing right. This talk is in honor of Perry Barlow and the EFF.

uk: вхід без авторизації

name: The Road to Resilience: How Real Hacking Redeems a Damnable Profession


Detecting Blue Team Recon With Ads

uk: Комп'ютерні науки

description: When my implant gets discovered how will I know? Did the implant stop responding for some benign reason or is the IR team responding? With any luck they'll upload the sample somewhere public so I can find it, but what if I can find out if they start looking for specific bread crumbles in public data sources? At some point without any internal data all blue teams turn to OSINT which puts their searches within view of the advertising industry. In this talk I will detail how I was able to use online advertising to detect when a blue team is hot on my trail.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Advanced malware such as TDL4, Rovnix, Gapz, Omasco, Mebromi and others have exposed in recent years various techniques used to circumvent the usual defenses and have shown how much companies are not prepared to deal with these sophisticated threats. Although the industry has implemented new protections such as Virtualized Based Security, Windows SMM Security Mitigation Table (WSMT), Kernel Code Signing, HVCI, ELAM, Secure Boot, Boot Guard, BIOS Guard, and many others, it is still unknown the professionals of the architecture of these protections, what are the components attacked by these contemporary malwares in the context of BIOS / UEFI and what are the tricks used by them. Precisely because of the lack of adequate understanding, most machines (BIOS / UEFI + operating system) remain vulnerable in the same way as a few years ago. In addition, there are a growing number of malwares that have used kernel drivers to circumvent limitations and protections in order to gain full access to the operating system and data. Exactly for these reasons, it is necessary to understand the way that malwares act as device drivers and what are the mechanisms used by these threats to infect an operating system. The purpose of this presentation is to show clearly and without too much details that often hinders understanding, how these threats act, which components are attacked, what are the techniques used by these advanced malware to subvert the system and how existing protections work .

uk: вхід без авторизації

name: Ring 0/-2 Rootkits: Compromising Defenses


uk: Комп'ютерні науки

description: Windows Defender Antivirus's mpengine.dll implements the core of Defender's functionality in an enormous ~11 MB, 30,000+ function DLL. In this presentation, we'll look at Defender's emulator for analysis of potentially malicious Windows binaries on the endpoint. To the best of my knowledge, there has never been a conference talk or publication on reverse engineering any antivirus binary emulator before. We'll cover a range of topics including emulator internals—machine code to intermediate language translation and execution; memory management; Windows API emulation; NT kernel emulation; file system and registry emulation; integration with Defender's antivirus features; the virtual environment; etc.—building custom tooling for instrumenting the emulator; tricks that binaries can use to evade or subvert analysis; and attack surface within the emulator. Attendees will leave with an understanding of how modern antivirus software conducts emulation-based dynamic analysis on the endpoint, and how attackers might go about subverting or attacking these systems. I'll publish code for a binary for exploring the emulator from within, patches that I developed for instrumenting Defender built on top of Tavis Ormandy's loadlibrary project, and IDA scripts to help with analyzing mpengine.dll and Defender's "VDLLs"

uk: вхід без авторизації

name: Windows Offender: Reverse Engineering Windows Defender's Antivirus Emulator


Playback: a TLS 1.3 story

uk: Комп'ютерні науки

description: TLS 1.3 is the new secure communication protocol that should be already with us. One of its new features is 0-RTT (Zero Round Trip Time Resumption) that could potentially allow replay attacks. This is a known issue acknowledged by the TLS 1.3 specification, as the protocol does not provide replay protections for 0-RTT data, but proposed countermeasures that would need to be implemented on other layers, not at the protocol level. Therefore, the applications deployed with TLS 1.3 support could end up exposed to replay attacks depending on the implementation of those protections. This talk will describe the technical details regarding the TLS 1.3 0-RTT feature and its associated risks. It will include Proof of Concepts (PoC) showing real-world replay attacks against TLS 1.3 libraries and browsers. Finally, potential solutions or mitigation controls would be discussed that will help to prevent those attacks when deploying software using a library with TLS 1.3 support.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Though many security mechanisms are deployed in Apple's macOS and iOS systems, some old-fashioned or poor-quality kernel code still leaves the door widely open to attackers. Especially, as kernel's critical components, device drivers are frequently exploited to attack Apple systems. In fact, bug hunting in Apple kernel drivers is not easy since they are mostly closed-source and heavily relying on object-oriented programming. In this talk, we will share our experience of analyzing and attacking Apple kernel drivers. In specific, we will introduce a new tool called Ryuk. Ryuk employs static analysis techniques to discover bugs by itself or assist manual review. In addition, we further combine static analysis with dynamic fuzzing for bug hunting in Apple drivers. In specific, we will introduce how we integrate Ryuk to the state-of-art Apple driver fuzzer, PassiveFuzzFrameworkOSX, for finding exploitable bugs. Most importantly, we will illustrate Ryuk's power with several new vulnerabilities that are recently discovered by Ryuk. In specific, we will show how we exploit these vulnerabilities for privilege escalation on macOS 10.13.3 and 10.13.2. We will not only explain why these bugs occur and how we find them, but also demonstrate how we exploit them with innovative kernel exploitation techniques.

uk: вхід без авторизації

name: One bite and all your dreams will come true: Analyzing and Attacking Apple Kernel Drivers


uk: Комп'ютерні науки

description: Are you a malware developer for Android devices? We have very bad news for you: the Android-SDK packager (aapt) is leaking your time zone! We have found a bug inside this Android-SDK's component that relies in not properly setting the value of a variable used as an argument for localtime() function, when setting the "Last Modified" field for the Android App's files. Because of this, the time zone of anyone using the Android-SDK packager to generate their APKs is leaked. The curious thing is that, despite of this bug inside aapt, the problem goes even beyond aapt itself: its roots goes deep into an incorrect handling errors in the operative system functions localtime() (Windows) and localtime_r() (UNIX). Because of in the world of Threat Intelligence determining the attacker's geographical location of is one of the most valuable data for attribution techniques, we focused our research in taking advantage of this bug for tracking Android malware developers. In addition to this, we have discovered another very effective way to find out the developer's time zone, based on a calculation of times extracting the GMT timestamp from the Android's app files and the UTC timestamp of the self-signed,"disposable" certificate added to the application (most common cases in malware developers). This is what we call: Rock appround the clock! Using these two different techniques, we have crunched some numbers with our 10 million apps database to determine how these leaked time zones (with one or another technique) are related with malware and which are the countries that generate more Android malicious applications, what is the possible relation between time zone and"malware likelihood" among other interesting numbers. But that's not all, we have another bad news for malware developers: no IDE (even Android Studio) removes metadata from the files added to the Android app. We will show examples with real cases in which, after analyzing the metadata of files inside the .apk, we got to know country, language, or even more specific geographical location of the developer and -in some cases- the name of the suppose-to-be-anonymous developer! Finally, we will share the scripts we have built to get all this information with just a simple click.

uk: вхід без авторизації

name: Rock appround the Clock: Tracking Malware Developers


uk: Комп'ютерні науки

description: With "Trust none over the Internet" mindset, securing all communication between a client and a server with protocols such as TLS has become a common practice. However, while the communication over Internet is routinely secured, there is still an area where such security awareness is not seen: inside individual computers, where adversaries are often not expected. This talk discusses the security of various inter-process communication (IPC) mechanisms that local processes and applications use to interact with each other. In particular, we show IPC-related vulnerabilities that allow a non-privileged process to steal passwords stored in popular password managers and even second factors from hardware tokens. With passwords being the primary way of authentication, the insecurity of this "last mile" causes the security of the rest of the communication strands to be obsolete. The vulnerabilities that we demonstrate can be exploited on multi-user computers that may have processes of multiple users running at the same time. The attacker is a non-privileged user trying to steal sensitive information from other users. Such computers can be found in enterprises with centralized access control that gives multiple users access to the same host. Computers with guest accounts and shared computers at home are similarly vulnerable.

uk: вхід без авторизації

name: Last mile authentication problem: Exploiting the missing link in end-to-end secure communication


Building the Hacker Tracker

uk: Комп'ютерні науки

description: In 2012, back when DEF CON still fit in the Riviera (RIP), I recognized a gap to fill. I wanted to create a mobile version of the paper DEF CON booklet that everyone could use at the con. I was unable to attend the conference that year. I was 8 months pregnant with my first child, and because I couldn't be there in person, I spent a lot of time wishing I was. So I built it. I spent countless hours pouring my heart into what became the Hacker Tracker, shiny graphics and all, and was committing code up until the minute I went into labor. Fast forward a few years: Seth was frustrated with the lack of a mobile app for iOS while attending DEF CON. Subsequently, he found the Android version of Hacker Tracker and reached out to me about creating an iOS version. I was thrilled that someone wanted to join me and help grow the project. Not long after that, I recruited Chris to work on the app as well. Now, 6 years since its inception, a small team supports the app development across iOS and Android and the apps are being used by half a dozen different conferences, representing several thousand users. From nothing to something, we've experienced quite a bit in 6 years. Join us as we share our moments of joy, fear, and panic,"things not to do", and more.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Complexity is increasing. Trust eroding. In the wake of Spectre and Meltdown, when it seems that things cannot get any darker for processor security, the last light goes out. This talk will demonstrate what everyone has long feared but never proven: there are hardware backdoors in some x86 processors, and they're buried deeper than we ever imagined possible. While this research specifically examines a third-party processor, we use this as a stepping stone to explore the feasibility of more widespread hardware backdoors.

uk: вхід без авторизації

name: GOD MODE unlocked: Hardware backdoors in x86 CPUs


uk: Комп'ютерні науки

description: Your computer is not yours. You may have shelled out thousands of dollars for it. It may be sitting right there on your desk. You may have carved your name deep into its side with a blowtorch and chisel. But it's still not yours. Some vendors are building secret processor registers into your system's hardware, only accessible by shadowy third parties with trusted keys. We as the end users are being intentionally locked out and left in the dark, unable to access the heart of our own processors, while select organizations are granted full control of the internals of our CPUs. In this talk, we'll demonstrate our work on how to probe for and unlock these previously invisible secret registers, to break into all-powerful features buried deep within the processor core, to finally take back our own computers.

uk: вхід без авторизації

name: The ring 0 façade: awakening the processor's inner demons


BLE Sniffing 101

uk: Комп'ютерні науки

description: Sniffing and attacking Bluetooth Low Energy devices has always been a real pain. Proprietary tools do the job but cannot be tuned to fit our offensive needs, while opensource tools work sometimes, but are not reliable and efficient. Even the recently released Man-in-the-Middle BLE attack tools have their limits, like their complexity and lack of features to analyze encrypted or short connections. Furthermore, as vendors do not seem inclined to improve the security of their devices by following the best practices, we decided to create a tool to lower the ticket: BtleJack. BtleJack not only provides an affordable and reliable way to sniff and analyze Bluetooth Low Energy devices and their protocol stacks, but also implements a brand new attack dubbed "BtleJacking" that provides a way to take control of any already connected BLE device. We will demonstrate how this attack works on various devices, how to protect them and avoid hijacking and of course release the source code of the tool. Vendors, be warned: BLE hijacking is real and should be considered in your threat model.

uk: вхід без авторизації


Outsmarting the Smart City

uk: Комп'ютерні науки

description: The term"smart city" evokes imagery of flying cars, shop windows that double as informational touchscreens, and other retro-futuristic fantasies of what the future may hold. Stepping away from the smart city fantasy, the reality is actually much more mundane. Many of these technologies have already quietly been deployed in cities across the world. In this talk, we examine the security of a cross-section of smart city devices currently in use today to reveal how deeply flawed they are and how the implications of these vulnerabilities could have serious consequences. In addition to discussing newly discovered pre-auth attacks against multiple smart city devices from different categories of smart city technology, this presentation will discuss methods for how to figure out what smart city tech a given city is using, the privacy implications of smart cities, the implications of successful attacks on smart city tech, and what the future of smart city tech may hold.

uk: вхід без авторизації