Chaos Computer Club CCC 39c3

1. GPG.fail, this is good one. Unfortunately not that unexpected one. I'm not going to rewrite the stuff. Just some of the things are out right very confusing: Compression Oracle, Parser Confusion, Signature Confusion, Signature Spoofing. All of those are highly questionable and might look even expertly planted flaws. Haha, very nice talk, absolutely awesome. And then people ask why people should (dis)trust all the "secure" systems.

2. Hacking Washing Machines, good stuff. Nothing really special, or surprising, but a great effort, interesting and fun results. - Great job! - Maybe the binary art in the ROM files was one of the funniest parts.

3. GNSS spoofing and Russian GPS jamming talk was really good, kw: VDES, R-Mode, ASM, VDE - This was actually so interesting talk and tech, that I had to take deep dive into eLoran, and how those signals of VDES and R-Mode could be utilized, as example indoors accurate timing, which sounded great. More options is always better, if the operation costs and unit costs can be kept sane. Especially for systems, which need some backup and can't rely on mobile data, satellite data, local fiber and or NTP. Also the VDES / R-Mode timing is quite accurate, if you're at fixed location so you know exactly the differential timing information. - In Finland R-mode location services are provided by Finnref Finpos (Differential GNSS, DGPS) which currently runs beacons but distance measurement (R-mode) code isn't yet in place.

4. Talks about Digital Independence and European Sovereignty - Very good topics, but as we know, quite challenging. For governments, organizations and citizens, all... It's easy to say, but many won't take proper action. - I'm in the special clan where people self-host stuff, on own hardware and or in Finland on rented rack servers / VPS environments, not pushing everything to US cloud.

2026-10-04