Uwe Hermann | A slightly paranoid Debian developer

Nice. Very nice. The Xbox-Linux / Free60 team around Michael Steil has published a paper / wiki page called 17 Mistakes Microsoft Made in the Xbox Security System. I'm currently reading the paper, but I'm not quite through yet (the PDF is 13 pages long). It contains a very detailed analysis of the 17 types of mistakes Microsoft made (they made most of them multiple times)...

The paper and the findings will be presented at the 22C3 in Berlin — this is one of the lectures I will definately be attending, that's for sure!

Quoting from the article:

"[Conclusion: ]The security system of the Xbox has been a complete failure.".

Also nice: the earlier (now obsolete) version of the paper was called The Hidden Boot Code of the Xbox — or "How to fit three bugs in 512 bytes of security code" ;-)

(via Golem)

The Fahrplan (yes, that's German — it means "schedule") of the 22C3 (the 22nd Chaos Communication Congress) is online now.

Joi Ito will deliver the keynote speech titled "Private Investigations".

Here's a small (really!) selection out of the plethora of great lectures:

• Understanding buffer overflow exploitation
• Hacking CCTV
• Peer-to-peer under the hood
• The intelligent web searcher
• RFID - overview of protocols, librfid implementation and passive sniffing
• VoIPhreaking
• European politics concerning digital rights
• Biometrics in Science Fiction
• Software Patenting
• A way to fuzzy democracy
• Military intelligence for terrorists(tm)
• Black Ops Of TCP/IP 2005.5
• Robots for fun and research
• Search Engines - Oracles of the Information Society
• Secure Code
• Literarisches Code-Quartett
• Attacking the IPv6 Protocol Suite
• Towards the first Free Software GSM Phone
• Esperanto, die internationale Sprache
• "Xbox" and "Xbox 360" Hacking
• How to construct Utopia
• The truth about Nanotechnology
• Free Software and Anarchism
• Hacker Jeopardy
• Breaking Down the Web of Trust
• Access to Knowledge
• Bluetooth Hacking - The State of The Art
• The very early Computer Game History
• Security Nightmares 2006

Four days, four rooms, lectures from 12:00 am to 12:00 pm every day. Need I say more?

Tim Pritlove Jens (argh, need some sleep!) from the Chaos Computer Club (CCC) has asked for more english blog posts about 22C3, the upcoming hacker conference in Berlin. So here you go.

Reminder:

The 22nd Chaos Communication Congress (22C3) is a four-day conference on technology, society and utopia. The Congress offers lectures and workshops on a multitude of topics including (but not limited to) information technology, IT-security, internet, cryptography and generally a critical-creative attitude towards technology and the discussion about the effects of technological advances on society.

The congress (sub-titled "Private Investigations") will be held from December 27th to 30th, 2005, in Berlin, Germany.

Some noteworthy bits and pieces:

• If I don't get hit by a bus, I'll be there.
• They have an (English) event blog which should keep you up to date.
• The 22C3 public wiki launched today.
• There are very nice 22C3 wallpapers available now (thanks to Antenne).
• The CongressRadio team will be podcasting during the congress.
• There is a 22C3 Planet (actually there are two).

This is gonna be one of the highlights of this year, I'm really looking forward to the congress.

The first signs of the upcoming 22C3 congress ("Private Investigations") are here — the Call for Papers has been posted.

From their site:

The 22nd Chaos Communication Congress (22C3) is a four-day conference on technology, society and utopia. The Congress offers lectures and workshops on a multitude of topics including (but not limited to) information technology, IT-security, internet, cryptography and generally a critical-creative attitude towards technology and the discussion about the effects of technological advances on society.

The Chaos Communication Congress is the annual congress of the Chaos Computer Club (CCC). The Congress has established itself as the "European Hacker Conference" bringing in people from all over Europe and even further away.

The congress will take place in Berlin, Germany from December 27th to 30th, 2005 (four days this time!).

Go there if you can — this is not something you should miss.

(via Hendrik Scholz)