From adda61018317381c9446ec7437f5cef438c2c858 Mon Sep 17 00:00:00 2001 From: Patrick Reijnen Date: Sat, 24 Jun 2023 14:30:14 +0200 Subject: [PATCH] Presentatie bestandsnaam gecorrigeerd in nj2022 Eerste talks opgevoerd in nj2021 --- .../nluug/najaarsconferentie-2021/_index.md | 5 ++-- ...e-wild-a-short-story-but-getting-longer.md | 28 +++++++++++++++++ ...ion-in-times-of-perfect-forward-secrecy.md | 30 +++++++++++++++++++ ...-privacy-versus-de-grote-cloudproviders.md | 26 ++++++++++++++++ ...uture-of-at-computings-training-courses.md | 2 +- 5 files changed, 88 insertions(+), 3 deletions(-) create mode 100644 content/evenementen/nluug/najaarsconferentie-2021/talks/mischa-peters-the-openbsd-hypervisor-in-the-wild-a-short-story-but-getting-longer.md create mode 100644 content/evenementen/nluug/najaarsconferentie-2021/talks/sake-blok-tls-decryption-in-times-of-perfect-forward-secrecy.md create mode 100644 content/evenementen/nluug/najaarsconferentie-2021/talks/sjoera-nas-its-the-metadata-stupid-privacy-versus-de-grote-cloudproviders.md diff --git a/content/evenementen/nluug/najaarsconferentie-2021/_index.md b/content/evenementen/nluug/najaarsconferentie-2021/_index.md index 1cd15c1..2e3cc6b 100644 --- a/content/evenementen/nluug/najaarsconferentie-2021/_index.md +++ b/content/evenementen/nluug/najaarsconferentie-2021/_index.md @@ -73,7 +73,7 @@ event_schedule: speaker: Sjoera Nas title: It's the metadata, stupid! Privacy versus de grote cloudproviders keynote: true - link: + link: talks/sjoera-nas-its-the-metadata-stupid-privacy-versus-de-grote-cloudproviders/ center: true size: 2 - row: @@ -93,11 +93,12 @@ event_schedule: talk: speaker: Sake Blok title: TLS decryption in times of Perfect Forward Secrecy - link: + link: talks/sake-blok-tls-decryption-in-times-of-perfect-forward-secrecy/ - column: talk: speaker: Mischa Peters title: The OpenBSD hypervisor in the wild, a short story, but getting longer + link: talks/mischa-peters-the-openbsd-hypervisor-in-the-wild-a-short-story-but-getting-longer/ - row: columns: - column: diff --git a/content/evenementen/nluug/najaarsconferentie-2021/talks/mischa-peters-the-openbsd-hypervisor-in-the-wild-a-short-story-but-getting-longer.md b/content/evenementen/nluug/najaarsconferentie-2021/talks/mischa-peters-the-openbsd-hypervisor-in-the-wild-a-short-story-but-getting-longer.md new file mode 100644 index 0000000..bba06db --- /dev/null +++ b/content/evenementen/nluug/najaarsconferentie-2021/talks/mischa-peters-the-openbsd-hypervisor-in-the-wild-a-short-story-but-getting-longer.md @@ -0,0 +1,28 @@ +--- +categories: +date: 2021-11-11T13:31:43+02:00 +description: +layout: event-talk +slug: +tags: +title: "Mischa Peters - The OpenBSD hypervisor in the wild, a short story, but getting longer" +speakers: +- mischa-peters +presentation: + filename: 2021-11-11-mischa-peters-the-openbsd-hypervisor-in-the-wild-a-short-story-but-getting-longer.pdf +recording: + platform: youtube + url: https://www.youtube.com/watch?v=OQCIy8INJig +--- + +## Abstract + +In the Summer of 2018 —after a poll on Twitter— OpenBSD Amsterdam started testing with vmm(4)/vmd(8). Mostly to see how far we could take it; more importantly to give back to the project. Little did we know where it would take us. + +During this talk, Mischa will outline how it all started, how it’s built, how we operate the platform, what speedbumps we encountered and where we are now. + +We are a big proponent of using as much out of OpenBSD base as possible and it has influenced our design choices a lot. These choices will be highlighted when discussing how the platform is built and how it’s operated. + +## Biography + +Mischa Peters is a long term BSD user, starting with FreeBSD 2.x and later OpenBSD as well. He is operating a hosting and co-location company out of Amsterdam The Netherlands, currently focused on providing services on top of OpenBSD. The OpenBSD Amsterdam project is a good example of it. For his $dayjob he is leading a team of System/Solutions Engineers for a security startup. diff --git a/content/evenementen/nluug/najaarsconferentie-2021/talks/sake-blok-tls-decryption-in-times-of-perfect-forward-secrecy.md b/content/evenementen/nluug/najaarsconferentie-2021/talks/sake-blok-tls-decryption-in-times-of-perfect-forward-secrecy.md new file mode 100644 index 0000000..271de62 --- /dev/null +++ b/content/evenementen/nluug/najaarsconferentie-2021/talks/sake-blok-tls-decryption-in-times-of-perfect-forward-secrecy.md @@ -0,0 +1,30 @@ +--- +categories: +date: 2021-11-11T13:31:43+02:00 +description: +layout: event-talk +slug: +tags: +title: "Sake Blok - TLS decryption in times of Perfect Forward Secrecy" +speakers: +- sake-blok +presentation: + filename: +recording: + platform: youtube + url: https://www.youtube.com/watch?v=0renIBt6To +--- + +## Abstract + +As more and more traffic is encrypted with TLS, there is a stronger need for decrypting TLS traffic inside captured packet data (pcap files). But getting everything aligned to be able to decrypt the TLS traffic is not that trivial. Access to the servers private key is often not possible and even if you have access to the private key, most TLS sessions use Perfect Forward Secrecy which makes decryption based on the private key impossible. + +Using session keys (instead of the private key of the server) to do the decryption is much more feasible. However, you need a way to get these session keys. There are several ways to get the session keys from one of the TLS endpoints. And sometimes you can use man-in-the-middle proxying to get them. Which method of retrieving the session keys could be used depends on the level of control you have over the used components in the TLS traffic flow. + +In this presentation the different TLS handshakes will be discussed and several ways to get the session keys will be shown to enable TLS decryption with Wireshark and Tshark. + +## Biography + +Sake has been using Wireshark/Ethereal for almost 20 years. In 2009, Sake started the company SYN-bit to provide network analysis and training services to enterprises across Europe. During his work, he started developing functionality for Wireshark that he missed while working with the analyser in his day-to-day job. He also enhanced multiple protocol dissectors to suit his analysis needs. In 2007, Sake joined the Wireshark Core Development team. + +Sake Blok calls himself "Relational Therapist for Computer Systems", as he solves problems by looking closely at the communication between computer systems. diff --git a/content/evenementen/nluug/najaarsconferentie-2021/talks/sjoera-nas-its-the-metadata-stupid-privacy-versus-de-grote-cloudproviders.md b/content/evenementen/nluug/najaarsconferentie-2021/talks/sjoera-nas-its-the-metadata-stupid-privacy-versus-de-grote-cloudproviders.md new file mode 100644 index 0000000..7d01237 --- /dev/null +++ b/content/evenementen/nluug/najaarsconferentie-2021/talks/sjoera-nas-its-the-metadata-stupid-privacy-versus-de-grote-cloudproviders.md @@ -0,0 +1,26 @@ +--- +categories: +date: 2021-11-11T13:31:43+02:00 +description: +layout: event-talk +slug: +tags: +title: "Sjoera Nas - It's the metadata, stupid! Privacy versus de grote cloudproviders" +speakers: +- sjoera-nas +presentation: + filename: +recording: + platform: youtube + url: https://www.youtube.com/watch?v=xaEP29OZR3U +--- + +## Abstract + +Sjoera Nas will speak about her experiences negotiating with big cloud providers about their compliance with EU privacy rules (General Data Protection Regulation and the ePrivacy Directive). She will summarise the key problems and outcomes, and discuss future EU legislative developments and alternatives such as Gaia X and national clouds. + +## Biography + +Drs. Sjoera Nas worked for the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) between 2006 and 2018, as head of the internet inspection team. She also worked for XS4ALL and Bits of Freedom. + +Since her move to Privacy Company in 2018 she has written many DPIAs ("Data Protection Impact Assessment") on Microsoft, Google, Zoom, Oracle, SAP, and AWS cloud services for the Dutch central government, and for the Dutch universities (represented by SURF). Read the [DPIAs for government](https://slmmicrosoftrijk.nl/) and [on Google for SURF](https://www.surf.nl/en/news/all-about-dpia-google-workspace). diff --git a/content/evenementen/nluug/najaarsconferentie-2022/talks/marcel-kornegoor-course-as-code-the-future-of-at-computings-training-courses.md b/content/evenementen/nluug/najaarsconferentie-2022/talks/marcel-kornegoor-course-as-code-the-future-of-at-computings-training-courses.md index e6cafec..aeb73ea 100644 --- a/content/evenementen/nluug/najaarsconferentie-2022/talks/marcel-kornegoor-course-as-code-the-future-of-at-computings-training-courses.md +++ b/content/evenementen/nluug/najaarsconferentie-2022/talks/marcel-kornegoor-course-as-code-the-future-of-at-computings-training-courses.md @@ -9,7 +9,7 @@ title: "Marcel Kornegoor - Course as Code: the future of AT Computing's training speakers: - marcel-kornegoor presentation: - filename: 2022-11-29-course-as-code-the-future-of-at-computings-training-courses.pdf + filename: 2022-11-29-marcel-kornegoor-course-as-code-the-future-of-at-computings-training-courses.pdf recording: platform: youtube url: https://www.youtube.com/watch?v=xaEP29OZR3U