x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Chaos Computer Club - recent events feed

Der Chaos Computer Club ist die größte europäische Hackervereinigung, und seit über 25 Jahren Vermittler im Spannungsfeld technischer und sozialer Entwicklungen.

technology

All Episodes

00:24:42

"I have no idea how to make it safer": Security and...

Chaos Computer Club - recent events feed ·

2025/11/26

Browser extensions are a powerful part of the Web ecosystem as they extend browser functionality and let users personalize their online experience. But with higher privileges than regular web apps, extensions bring unique security and privacy risks. Much like web applications, vulnerabilities often creep in, not just through poor implementation, but also through gaps in developer awareness and ecosystem support. In this talk, we share insights from a recent study in which we interviewed and observed

00:24:38

MCP security hot potato: how to stay secure...

Chaos Computer Club - recent events feed ·

2025/11/26

Model Context Protocol (MCP) is the latest hot topic in cybersecurity. Business wants it (AI is the new mantra), developers are excited (new toys, new code), and security teams are left to make it safe—often with already packed schedules. Let's treat it like just another Tuesday. Like many shiny new technologies (remember the early days of cloud?), MCP is being built with a “features first, security later” mindset. As a fresh piece of tech, it blends novel vulnerabilities with familiar, well-known

00:24:37

Extract: A PHP Foot-Gun Case Study (god2025)

Chaos Computer Club - recent events feed ·

2025/11/26

Do you always read the documentation before using a function in your languages' standard library? This talk explores the attack surface of a special feature in PHP which is easy to misuse with unforseen consequences. The `extract` function allows to replace the value of local variables named after the keys in an array. Calling it with user-controlled input allows the attacker to change arbitrary variables in the program. The documentation warns against the dangers of using it with untrusted data,

00:40:58

Pwn My Ride: Jailbreaking Cars with CarPlay (god2025)

Chaos Computer Club - recent events feed ·

2025/11/26

Apple CarPlay is a widely known protocol that connects smartphones to car multimedia systems. Based on AirPlay, CarPlay is installed in millions of cars, as it is supported by hundreds of car models from dozens of different manufacturers across the globe. In our talk, we will share how we managed to exploit all devices running CarPlay using a single vulnerability we discovered in the AirPlay SDK. We'll take you through our entire exploit development process from identifying the vulnerability, to

00:39:58

The Automation Illusion? What Machines Can't Do in...

Chaos Computer Club - recent events feed ·

2025/11/26

Threat modeling stands at a critical juncture. While essential for creating secure systems, it remains mostly manual, handcrafted, and often too slow for today's development cycles. At the same time, automation and AI offer new levels of speed and scalability— but how much can we rely on them? This talk explores the tension between automation and human expertise in threat modeling. We'll dissect the traditional threat modeling process—scoping, modeling, threat identification, risk analysis, and

00:19:24

Phishing for Passkeys: An Analysis of WebAuthn and...

Chaos Computer Club - recent events feed ·

2025/11/26

WebAuthn was supposed to replace swords on the web: uniform, secure, manageable authentication for everyone! One of its unique selling points was supposed to be the impossibility of phishing attacks. When passkeys were introduced, some of WebAuthn's security principles were watered down in order to achieve some usability improvements and thus reach more widespread adoption. This presentation discusses the security of passkeys against phishing attacks. It explains the

00:26:08

OWASP Cumulus: Threat Modeling the Ops of DevOps...

Chaos Computer Club - recent events feed ·

2025/11/26

In this presentation, we will highlight how threat modeling, as a proactive measure, can increase security in DevOps projects. We will introduce OWASP Cumulus, a threat modeling card game designed for threat modeling the Ops part of DevOps processes. This game (in combination with similar games like Elevation of Privilege or OWASP Cornucopia) enables DevOps teams to take the security responsibility for their project in a lightweight and engaging way. Licensed to the public under

00:22:18

Introducing Passkeys - Strategies and Challenges for...

Chaos Computer Club - recent events feed ·

2025/11/26

The future of authentication is passwordless - Passkeys are the key technology. This talk supports developers in implementing Passkeys in their organizations and helps with the decision between in-house development, SDK, or Passkey-as-a-Service solutions. You will learn how to design recovery flows and fallback mechanisms in a user-friendly way, how Passkeys can be securely shared across devices and platforms, and what level of security they offer compared to traditional methods. Practical user

00:24:21

Continuous Vulnerability Scanning with OWASP...

Chaos Computer Club - recent events feed ·

2025/11/26

The OWASP secureCodeBox project aims to provide a unified way to run and automate open-source scanning tools like nmap, nuclei, zap, ssh-audit, and sslyze to continuously scan the code and infrastructure of entire organizations. This allows setting up automated scans that will regularly scan internal networks and internet-facing systems for vulnerabilities. The SCB also allows defining rules to automatically start more in-depth scans based on previous findings, e.g., to start a specialized SSH scan

00:29:24

LangSec for AppSec folks (god2025)

Chaos Computer Club - recent events feed ·

2025/11/26

Die von LangSec beschrieben grundlegenden Sicherheitsprinzipien erklären die Hauptursachen vieler Sicherheitslücken und wie man diese beheben kann. LangSec sieht die anhaltende Schwachstellen-Epidemie in Software als eine Folge der ad-hock Entwicklung von Code, der Ein- und Ausgaben verarbeitet. Gemäß LangSec besteht der Schlüssel zur Entwicklung vertrauenswürdiger Software, die mit potenziell bösartigen Eingaben korrekt umgeht, darin alle gültigen oder erwarteten Eingaben und Ausgaben als formale

00:34:16

All the WAF power to the devs - why it reduces...

Chaos Computer Club - recent events feed ·

2025/11/26

Web application firewalls are often seen as a hindrance when going live, as perimeter WAFs can clash with GitOps-driven platforms. Empowering development teams with an application-centric WAF setup allows them to run and tune the WAF throughout the entire development lifecycle. It also enables full integration into any CI/CD pipeline or GitOps approach, reducing late surprises during deployment. In this talk, we demonstrate the application-centric approach with Envoy Proxy, OWASP Coraza, and the

00:21:17

From Startup to Scale: Choosing the Right AppSec Path...

Chaos Computer Club - recent events feed ·

2025/11/26

Security teams often inherit their organisation's structure - for better or worse. The way you design your AppSec programme and choose your team topology can determine whether security becomes a trusted enabler or a frustrating bottleneck. In this story-driven session, we follow Alex, who begins as the only security person in a 50-person startup. At first, Alex builds a centralised AppSec team, finding it effective for control but slow to scale. As the company grows to hundreds of employees,

00:27:51

How the EU created Electronic Invoices without...

Chaos Computer Club - recent events feed ·

2025/11/26

Companies within the European Union are increasingly required to be able to issue and process electronic invoices according to EU standards. For example, since January 2025, companies in Germany have been required to support electronic invoices in B2B contexts. While it is desirable to standardize invoice data formats, the EU standards have severe problems. They are overly and needlessly complicated, and security was not given much consideration. An unfortunate design choice to use a problematic

00:23:35

The Surprising Complexity of Finding Known...

Chaos Computer Club - recent events feed ·

2025/11/26

With the increasing reliance on third-party software components, ensuring their security against known vulnerabilities has become a daily challenge for individuals and organizations. Despite the availability of a variety of tools and databases, we found all of them fall short when applied to real-world scenarios - raising questions about their effectiveness, generalizability, and practical utility. Starting from our perspective as penetration testers, we identified three

00:39:37

Keynote: Code Dark Age (god2025)

Chaos Computer Club - recent events feed ·

2025/11/26

Generative AI is supposed to make our lives easier. But what if it's really just coding us straight into a new Dark Age? We hand over our systems to AI agents, only to watch them invent backdoors nobody asked for. Developers are left with the glamorous job of bug janitors, while attackers get new exploits. It's hard not to feel like we are front-row spectators to the collapse of digital civilization. This talk shows how these risks are multiplying, and how the public debate around security often

00:09:21

Welcome (god2025)

Chaos Computer Club - recent events feed ·

2025/11/26

Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de

00:28:24

Gateway to Adventure (nook25)

Chaos Computer Club - recent events feed ·

2025/11/15

Pen and Paper Rollenspiele verfügen über viele Facetten, die eine Person in ihrer Entwicklung unterstützen können. Sei es soziale Kompetenz, den Erwerb von Problemlösungsstrategien oder das Ausbrechen aus traditionellen Rollenbildern - das alles kann in einer Pen and Paper Runde vermittelt werden. Und die Teilnemenden haben auch noch Spaß dabei. Dieses Seminar erklärt kurz die Grundlagen von Pen and Paper Rollenspielen und wendet sich dann den positiven Aspekten einer PnP Runde zu. Es wird viel

00:51:21

Stadt, Land, Parkplatz (nook25)

Chaos Computer Club - recent events feed ·

2025/11/15

Die deutsche Verkehrspolitik ist seit Jahrzehnten geprägt von einer autozentrierten Sichtweise, die gesellschaftlich tief verankert und medial normalisiert ist. Während die Wissenschaft längst auf die Grenzen dieses Modells hinweist – ökologisch, gesundheitlich, wirtschaftlich – wird die öffentliche Debatte auch hier in Lübeck oft emotional, ideologisch oder verzerrt geführt. Der Vortrag beleuchtet verbreitete Mythen, strukturelle Verantwortungsdiffusion sowie die systematische Ausblendung

00:46:25

„Mein Gott, wo treiben sie uns hin?“ (nook25)

Chaos Computer Club - recent events feed ·

2025/11/15

Die Todesmärsche aus den Konzentrationslagern im April 1945 am Beispiel des Sachsenhausener Todesmarsches. Vortrag mit Originalfotos und Zeichnungen und Zitaten der überlebenden KZ-Häftlinge. Wie erging es den gefangenen Menschen? Wie hat sich die deutsche Bevölkerung verhalten, als die Märsche in die Dörfer und Städte kamen? Die Nights of Open Knowledge (Nook) in Lübeck ist eine offene Vortragsveranstaltung, die einem weiten Publikum Einblicke in die verschiedene Bereiche der Informatik, aber

00:09:40

Identitätsbildung bei Persona 5 Royal (nook25)

Chaos Computer Club - recent events feed ·

2025/11/14

Hans-Georg Möller macht mit Luhmann auf das Seele-Kultur-Problem aufmerksam, welches, ähnlich dem Leib-Seele-Problem, darin besteht, dass der Mensch sich am Widerspruch zwischen seinem Selbst und der Kultur, die er bewohnt und die ihm objektiv gegenübersteht, abarbeitet und in dieser Arbeit seine Identität ausbildet, wobei diese Identitätsbildung wiederum historisch variiert.Ich möchte beschreiben, wie die jungen Protagonisten in Persona 5 Royal sich systematisch von „Erwachsenen“ abgrenzen, um

2,142 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs