x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Chaos Computer Club - recent events feed

Der Chaos Computer Club ist die größte europäische Hackervereinigung, und seit über 25 Jahren Vermittler im Spannungsfeld technischer und sozialer Entwicklungen.

technology

All Episodes

00:49:09

EntrySign: create your own x86 microcode for fun and...

Chaos Computer Club - recent events feed ·

2025/08/10

We present EntrySign, a cryptographic flaw in AMD’s microcode patch verification logic, including how we discovered the bug and how you can extend our results. EntrySign lets us execute arbitrary microcode on all AMD CPUs from Zen to Zen 5 and modify the behavior of x86 instructions. We will delve into the format of AMD microcode, how their patches are verified, how we were able to reverse engineer this process, and how we were able to access the key information required to defeat it. Licensed to

00:21:58

Lockpicking in CTFs (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

The WHY2025 Capture the Flag competition (CTF) has multiple lockpicking challenges as part of the CTF. Successfully picking these locks gives you one of the flags. To be able to create a solid CTF challenge out of an ordinary lock we had to come up with some kind of solution. We used our past experiences in CTFs as inspiration to see how we could do it better. This talk shows the concepts we came up with and which are currently used in the WHY2025 CTF. Licensed to the public under

00:54:16

How to bluff your way into Zero Trust (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

Zero Trust (ZT) is a security paradigm gaining traction and popularity. In the talk I will show how ZT is the progression of many security ideas that you may already be familiar with, and how you can rebrand and review what you are already doing to show that you are making progress. Zero Trust (ZT) is a security paradigm gaining traction, especially in the US defense community. The underlying idea is to reduce implicit trust as much as possible. This makes great sense from a security perspective

00:26:57

Who Gave the Toaster Root Access to the Physical...

Chaos Computer Club - recent events feed ·

2025/08/10

Smart devices are deeply embedded in the physical world: they can see, hear, and control things around us, often with zero real limits. When they’re hacked, it’s not just your data on the line; it’s your safety, privacy, and environment. In this talk, I’ll share some new ideas for putting a layer of access control between these devices and the real world, so we stop giving them a blank check. These days, “smart” devices aren’t just watching and listening: they can act on the physical world, often

00:25:29

📧 Your own Mailserver - 2025 Edition (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

So, it is 2025 and mailservers are getting more and more replaced by cloud-based solutions, which promise to be easy and secure... But what if you can just do it yourself? Hosting your private message server and applying common modern mailserver security practices on your own? This talk wants to introduce a few common software solutions and introduce multiplie techniques from an operators toolbox. This talk will cover typical pitfalls you encounter if you try to host your own mailserver solution:

00:34:21

Pentesting Passkeys (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

Passkeys are a new way to log in without passwords. They solve a lot of the traditional security risks associated with passwords. But passkeys are only secure if implemented well. When implemented incorrectly, they lead to new attack vectors that hackers can exploit. In this talk, we will first study the protocol behind passkeys, called Webauthn. We will then look at some common implementation mistakes, and how we can exploit them. Next, we will present a methodology to carry out pentests on

00:52:09

Packets Over Any Wire: Alternative Networking Mediums...

Chaos Computer Club - recent events feed ·

2025/08/10

Why limit yourself to Ethernet and Wi-Fi when every wire in your house can carry packets? This talk explores alternative physical networking technologies that exist but are often overlooked. From Powerline Networking (HomePlug AV/AV2) to MoCA over coaxial cables, we’ll dive into how these systems work, their encryption and security models, known exploits, and the inherent risks of non-switched cable mediums. Beyond the theoretical, we’ll examine real-world applications, including whole-home audio

00:52:53

Reverse Engineering Life: A teardown of the DNA...

Chaos Computer Club - recent events feed ·

2025/08/10

Love reverse engineering? You'd be right since you always find something interesting! In this talk we're going to study absolutely every byte of the DNA source of a real bacterium. And in doing so, we'll find bootstrapping code, genes, duplicate genes, anti-viral defense mechanisms, idiomatic/non-idiomatic/borrowed code & much more. It helps if you've also visited the companion talk on DNA, but this presentation is broadly accessible even without prior knowledge. A typical bacterium has around one

00:40:52

GNU Taler: beyond digital money (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

Digital money everywhere, all the time, all at once... isn't it getting a little boring? In this talk you will learn how [GNU Taler](https://taler.net/), a privacy-focused payment system, leverages the properties of digital tokens and blind signatures to enable a wide array of use cases such as discount coupons, subscriptions, and tax-deductible donation receipts; all while preserving untraceability in customer-to-merchant transactions. Licensed to the public under

00:42:40

A Guided Tour to UNIX Shells (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

Any even remotely advanced tasks on unixoid systems will inevitably lead to an encounter with one of the systems oldest components: The shell. An ancient artefact that is in equal parts being feared, mystified, or possibly even glorified. In an effort to demystify origins, development, and current role of shells, this talk tells a tale deeply rooted in the earliest days of UNIX development. In the process, several (historic as well as current) shells will be introduced among their notable features

00:50:27

Repair for Future (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

A brief retrospective over the past 16 years of organized voluntary repair initiatives and a look at the breakthroughs for the right to repair movement When Martine Postma organized her first Repair-Café in Amsterdam, would she have imagined the kind of traction that her initiative would gain worldwide? With rampant enshittification of services, but also products ("planned obsolescence") comes resistance from consumers and politics. I'll show a few blatant examples and outline the recent progress

00:44:00

Low Energy to High Energy: Hacking nearby EV-chargers...

Chaos Computer Club - recent events feed ·

2025/08/10

During the first Pwn2Own Automotive, organised by ZDI in Tokyo in January 2024, Computest Sector 7 successfully demonstrated exploits for vulnerabilities in three different EV-chargers. All three could be exploited to execute arbitrary code on the charger, with the only prerequisite being close enough to connect to Bluetooth. As electric vehicles become increasingly integrated into our transportation infrastructure, the security of their charging systems is becoming paramount. A threat actor

00:51:12

How to make a Domain-Specific Language for non-devs...

Chaos Computer Club - recent events feed ·

2025/08/10

A Domain-Specific Language is a computer language that’s made and suitable for a specific domain — *dûh*. But what happens when that domains is inhabited and operated by people that are – **gasp**! – not developers?! This is when a DSL has the opportunity to shine, and even outshine generic AI. The field of Domain-Specific Languages has been going through a quasi-perpetual, reincarnating Gartner hype cycle for decades. Nevertheless, there are many DSLs out there, with many aimed squarely at

00:48:27

How we made the Netherlands more secure and...

Chaos Computer Club - recent events feed ·

2025/08/10

It started with a simple idea in 2016: make the state of security of our government transparent/public. The simple idea has become national government policy. Using transparency we've helped fix tons of security issues, reduce costs and increased control on IT. This year we've rolled out in Belgium and started measuring accessibility of websites in the same fashion. Learn how we've achieved extreme impact with a minimal budget and keep on doing so. Security and accessibility must be

00:22:25

Why Proprietary Tooling Hurts Your FOSS Project...

Chaos Computer Club - recent events feed ·

2025/08/10

You’ve released your code under a free license, but your project runs on proprietary platforms like Slack, GitHub, Notion, or Zoom. What’s the harm? In this talk, we’ll explore how relying on closed tools contradicts open source values, excludes contributors, locks your community into corporate ecosystems, and drives away idealistic contributors who care deeply about freedom. We’ll also tackle common justifications, like convenience or popularity, and show how they often mask deeper trade-offs. My

00:44:06

The state of IPv6 (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

IPv6 has been talked about a lot since a very long time. It never really caught on... or did it? Where are we right now? Where are we heading and what can you do about it? What is the matter with IPv6? How did we go from something that was supposed to be the future of the internet to where we are today? Is it still like that? What plans are currently unfolding? Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event:

00:26:25

Embrace Chaos! How Game Randomizers Work (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

Game randomizers can breathe fresh air into your favorite video games by changing where things are, what enemies you fight, or even what the win conditions are. But how do they work? Let's embrace chaos and learn about them! Game randomizers can breathe fresh air into your favorite video games by changing where things are, what enemies you fight, or even what the win conditions are. But how do they work? In this talk, I'll share my experience building a randomizer for the Gameboy Advance version of

00:26:17

Knock knock who's there 2.0, the subtle art of...

Chaos Computer Club - recent events feed ·

2025/08/10

Building entrance systems for prisons, hospitals an tv studio's should be secure. But is this really the case? After "Knock knock who's there 1.0" at MCH2022, we will again look at some high-tech lockpicking, this time at more sensitive locations. The responsible disclosure is a tale of it's own! And why exactly is a 3-letter agency in the US interested in the disclosure? Feeling safe at home and at work is one of the most basic requirements for living. Part of being, and feeling, safe is the

00:29:59

The Flipper Blackhat (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

I developed a 100% open-source (Quad core A7, 512MB RAM) Linux-enabled Flipper module for WiFi pentesting and ethical hacking! This talk covers how and why I developed the Flipper Blackhat: starting at the hardware level through the bootloader, kernel and up to user space. On the hardware side, I'll detail the power supplies, the DDR3 routing, radios, and the A33 processor itself. I'll show the build system, device trees, Python scripts and the penetesting suite I ship with it. I'll provide an

00:48:06

Dries Depoorter (WHY2025)

Chaos Computer Club - recent events feed ·

2025/08/10

Belgian creative technologist and artist Dries Depoorter, based in Ghent, creates thought-provoking work about technology, surveillance, AI and social media in a playful way that makes people laugh while delivering serious messages in an accessible way. His projects explore digital culture that can inspire marketers: privacy challenges, artificial intelligence applications, surveillance and authentic social media projects. With his unique background in electronics and digital innovation, Dries has

1,910 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs