forked from laurens/fediversity_website
Presentatie bestandsnaam gecorrigeerd in nj2022
Eerste talks opgevoerd in nj2021
This commit is contained in:
Patrick Reijnen
parent
8f8890a0ec
commit
adda610183
|
|
@ -73,7 +73,7 @@ event_schedule:
|
|||
speaker: Sjoera Nas
|
||||
title: It's the metadata, stupid! Privacy versus de grote cloudproviders
|
||||
keynote: true
|
||||
link:
|
||||
link: talks/sjoera-nas-its-the-metadata-stupid-privacy-versus-de-grote-cloudproviders/
|
||||
center: true
|
||||
size: 2
|
||||
- row:
|
||||
|
|
@ -93,11 +93,12 @@ event_schedule:
|
|||
talk:
|
||||
speaker: Sake Blok
|
||||
title: TLS decryption in times of Perfect Forward Secrecy
|
||||
link:
|
||||
link: talks/sake-blok-tls-decryption-in-times-of-perfect-forward-secrecy/
|
||||
- column:
|
||||
talk:
|
||||
speaker: Mischa Peters
|
||||
title: The OpenBSD hypervisor in the wild, a short story, but getting longer
|
||||
link: talks/mischa-peters-the-openbsd-hypervisor-in-the-wild-a-short-story-but-getting-longer/
|
||||
- row:
|
||||
columns:
|
||||
- column:
|
||||
|
|
|
|||
|
|
@ -0,0 +1,28 @@
|
|||
---
|
||||
categories:
|
||||
date: 2021-11-11T13:31:43+02:00
|
||||
description:
|
||||
layout: event-talk
|
||||
slug:
|
||||
tags:
|
||||
title: "Mischa Peters - The OpenBSD hypervisor in the wild, a short story, but getting longer"
|
||||
speakers:
|
||||
- mischa-peters
|
||||
presentation:
|
||||
filename: 2021-11-11-mischa-peters-the-openbsd-hypervisor-in-the-wild-a-short-story-but-getting-longer.pdf
|
||||
recording:
|
||||
platform: youtube
|
||||
url: https://www.youtube.com/watch?v=OQCIy8INJig
|
||||
---
|
||||
|
||||
## Abstract
|
||||
|
||||
In the Summer of 2018 —after a poll on Twitter— OpenBSD Amsterdam started testing with vmm(4)/vmd(8). Mostly to see how far we could take it; more importantly to give back to the project. Little did we know where it would take us.
|
||||
|
||||
During this talk, Mischa will outline how it all started, how it’s built, how we operate the platform, what speedbumps we encountered and where we are now.
|
||||
|
||||
We are a big proponent of using as much out of OpenBSD base as possible and it has influenced our design choices a lot. These choices will be highlighted when discussing how the platform is built and how it’s operated.
|
||||
|
||||
## Biography
|
||||
|
||||
Mischa Peters is a long term BSD user, starting with FreeBSD 2.x and later OpenBSD as well. He is operating a hosting and co-location company out of Amsterdam The Netherlands, currently focused on providing services on top of OpenBSD. The OpenBSD Amsterdam project is a good example of it. For his $dayjob he is leading a team of System/Solutions Engineers for a security startup.
|
||||
|
|
@ -0,0 +1,30 @@
|
|||
---
|
||||
categories:
|
||||
date: 2021-11-11T13:31:43+02:00
|
||||
description:
|
||||
layout: event-talk
|
||||
slug:
|
||||
tags:
|
||||
title: "Sake Blok - TLS decryption in times of Perfect Forward Secrecy"
|
||||
speakers:
|
||||
- sake-blok
|
||||
presentation:
|
||||
filename:
|
||||
recording:
|
||||
platform: youtube
|
||||
url: https://www.youtube.com/watch?v=0renIBt6To
|
||||
---
|
||||
|
||||
## Abstract
|
||||
|
||||
As more and more traffic is encrypted with TLS, there is a stronger need for decrypting TLS traffic inside captured packet data (pcap files). But getting everything aligned to be able to decrypt the TLS traffic is not that trivial. Access to the servers private key is often not possible and even if you have access to the private key, most TLS sessions use Perfect Forward Secrecy which makes decryption based on the private key impossible.
|
||||
|
||||
Using session keys (instead of the private key of the server) to do the decryption is much more feasible. However, you need a way to get these session keys. There are several ways to get the session keys from one of the TLS endpoints. And sometimes you can use man-in-the-middle proxying to get them. Which method of retrieving the session keys could be used depends on the level of control you have over the used components in the TLS traffic flow.
|
||||
|
||||
In this presentation the different TLS handshakes will be discussed and several ways to get the session keys will be shown to enable TLS decryption with Wireshark and Tshark.
|
||||
|
||||
## Biography
|
||||
|
||||
Sake has been using Wireshark/Ethereal for almost 20 years. In 2009, Sake started the company SYN-bit to provide network analysis and training services to enterprises across Europe. During his work, he started developing functionality for Wireshark that he missed while working with the analyser in his day-to-day job. He also enhanced multiple protocol dissectors to suit his analysis needs. In 2007, Sake joined the Wireshark Core Development team.
|
||||
|
||||
Sake Blok calls himself "Relational Therapist for Computer Systems", as he solves problems by looking closely at the communication between computer systems.
|
||||
|
|
@ -0,0 +1,26 @@
|
|||
---
|
||||
categories:
|
||||
date: 2021-11-11T13:31:43+02:00
|
||||
description:
|
||||
layout: event-talk
|
||||
slug:
|
||||
tags:
|
||||
title: "Sjoera Nas - It's the metadata, stupid! Privacy versus de grote cloudproviders"
|
||||
speakers:
|
||||
- sjoera-nas
|
||||
presentation:
|
||||
filename:
|
||||
recording:
|
||||
platform: youtube
|
||||
url: https://www.youtube.com/watch?v=xaEP29OZR3U
|
||||
---
|
||||
|
||||
## Abstract
|
||||
|
||||
Sjoera Nas will speak about her experiences negotiating with big cloud providers about their compliance with EU privacy rules (General Data Protection Regulation and the ePrivacy Directive). She will summarise the key problems and outcomes, and discuss future EU legislative developments and alternatives such as Gaia X and national clouds.
|
||||
|
||||
## Biography
|
||||
|
||||
Drs. Sjoera Nas worked for the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) between 2006 and 2018, as head of the internet inspection team. She also worked for XS4ALL and Bits of Freedom.
|
||||
|
||||
Since her move to Privacy Company in 2018 she has written many DPIAs ("Data Protection Impact Assessment") on Microsoft, Google, Zoom, Oracle, SAP, and AWS cloud services for the Dutch central government, and for the Dutch universities (represented by SURF). Read the [DPIAs for government](https://slmmicrosoftrijk.nl/) and [on Google for SURF](https://www.surf.nl/en/news/all-about-dpia-google-workspace).
|
||||
|
|
@ -9,7 +9,7 @@ title: "Marcel Kornegoor - Course as Code: the future of AT Computing's training
|
|||
speakers:
|
||||
- marcel-kornegoor
|
||||
presentation:
|
||||
filename: 2022-11-29-course-as-code-the-future-of-at-computings-training-courses.pdf
|
||||
filename: 2022-11-29-marcel-kornegoor-course-as-code-the-future-of-at-computings-training-courses.pdf
|
||||
recording:
|
||||
platform: youtube
|
||||
url: https://www.youtube.com/watch?v=xaEP29OZR3U
|
||||
|
|
|
|||
Reference in a new issue