Wow, currently I'm seriously underwhelmed by most of the presentations I've seen until now...
- Peter Glaser - Die Üblichen Verdächtigen (cache): 21C3 keynote (in german). Peter Glaser shows some differences between technocratic, amoral geeks like Wernher von Braun and the hacker culture
- Alexander Bernauer, Ansgar Wiechers - Unsicherheit von Personal Firewalls (cache): only saw the last few minutes of this one, but was not very impressed by the code examples shown. Hijacking IE to bypass personal firewalls is hardly news, but their infos (cache) have a few more interesting examples.
- Nils Magnus - SAP R/3 Protocol Reverse Engineering (cache): I expected this one to be quite interesting, but apart from a few general rants concerning host and network security in SAP environments, the presenter (who was 15 minutes late, too) didn't have anyting interesting. Obviously he started reverse-engineering some SAP protocol with a colleague (the SAP expert who wasn't present), but didn't get very far beyond some initial stage. Most moderately insightful comments came from the audience.
- starbug - Biometrie in Ausweisdokumenten (cache): Again, was quite late for this one, and only got some quite incoherent remarks about development in the legislative arena despite obvious technical problems with biometric methods.
- starbug - Biometrie �überwinden (cache): no way to get into this one, way overcowded (and unfortunately, two of the good ideas this year, a cool audio-streaming service via the DECT exchange and additional TVs in front of the lecture rooms, didn't really work out).
- Dirk Feldhusen, Matthias Heuft - Side Channel Analysis of Smart Cards (cache): these two implemented some nice ideas on how to attack an RSA private kay during processing on smart cards. Unfortunately, their english was quite weak, which made listening a major pain. And in the end they had to admit that their theoretical (and sucessfully simulated) attack didn't really work out in the real world.
- Daniel Bartlett - Automated Hacking via Google (cache): another potentially cool lecture that was torpedoed by an unexperienced speaker who seemed to be totally overwhelmed by the audience of about 900 people. His speech obviously was incomplete, and he failed to provide more than a few facts about attacks on php (and other) scripts, on how to find affected applications via google, and about automated attacks based on those results. He pointed out some possible improvements on the recent Santy worm, but didn't go into details either.
- Gerd Fittkau - Die Propagandaw�üste des realen Krieges (cache): one of the familiar, perfectly prepared and presented, anti-propaganda rants by Gerd Fittkau, the german-language answer to Michael Moore. Nice, but somehow I've heard similar talks before...
- Andy Müller Maguhn, Lars Weiler - CCC-Jahresrückblick (cache): the two CCC-speakers tell stories from their work over the last year. As usually, quite funny stuff
- Andreas Bogk, Felix von Leitner, FX of Penoelit, Michael Natterer - Das Literarische Code-Quartett (cache): four expierienced presenters show funny code snippets from different software, amongst them errors in the MySQL innodb log function and a buffer overflow in the mysql client libs.