{"guid":"8805e64f-3eb0-52b3-a660-33f51d3b3c1a","title":"Jens Spahns credit score is \"very good\"","subtitle":"","slug":"camp2023-57571-jens_spahns_credit_score_is_very_good","link":"https://pretalx.c3voc.de/camp2023/talk/NHHEZN/","description":"A case study on how to use security research as a method of direct action.\r\n\r\nIn the context of the CCC, we usually do our vulnerability disclosures responsibly. So we ensure that a vulnerability is closed or at least disclosed to the responsible entity for a certain amount of time before discussing it publicly. The practice of responsible disclosure is more than two decades old and has become the gold standard in handling vulnerabilities as a security researcher.\r\n\r\nOn the other hand, responsible disclosure often also minimizes a vulnerability's impact in public debates and, therefore, is an excellent way to keep everybody safe. Still, it also reduces the usefulness of security research as a method of direct action.\r\n\r\nIn this talk, I would like to explain based on two examples (the ID-Wallet as well as the Bonify case) in which cases I think the impact of a vulnerability can be maximized by shitposting it on Twitter while keeping everyone - except Jens Spahn and Helge Braun - safe. ","original_language":"deu","persons":["Lilith Wittmann"],"tags":["camp2023","57571","2023","Milliways"],"view_count":11549,"promoted":false,"date":"2023-08-16T20:00:00.000+02:00","release_date":"2023-09-11T00:00:00.000+02:00","updated_at":"2026-04-03T23:45:04.784+02:00","length":2790,"duration":2790,"thumb_url":"https://static.media.ccc.de/media/conferences/camp2023/57571-8805e64f-3eb0-52b3-a660-33f51d3b3c1a.jpg","poster_url":"https://static.media.ccc.de/media/conferences/camp2023/57571-8805e64f-3eb0-52b3-a660-33f51d3b3c1a_preview.jpg","timeline_url":"https://static.media.ccc.de/media/conferences/camp2023/57571-8805e64f-3eb0-52b3-a660-33f51d3b3c1a.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/conferences/camp2023/57571-8805e64f-3eb0-52b3-a660-33f51d3b3c1a.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/camp2023-57571-jens_spahns_credit_score_is_very_good","url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_title":"Chaos Communication Camp 2023","conference_url":"https://api.media.ccc.de/public/conferences/camp2023","related":[],"recordings":[{"size":33,"length":2790,"mime_type":"audio/opus","language":"eng","filename":"camp2023-57571-eng-Jens_Spahns_credit_score_is_very_good_opus-2.opus","state":"new","folder":"opus-translation","high_quality":false,"width":0,"height":0,"updated_at":"2023-09-13T09:13:04.315+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/opus-translation/camp2023-57571-eng-Jens_Spahns_credit_score_is_very_good_opus-2.opus","url":"https://api.media.ccc.de/public/recordings/70255","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"},{"size":42,"length":2790,"mime_type":"audio/mpeg","language":"eng","filename":"camp2023-57571-eng-Jens_Spahns_credit_score_is_very_good_mp3-2.mp3","state":"new","folder":"mp3-translated","high_quality":false,"width":0,"height":0,"updated_at":"2023-09-13T09:12:03.677+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/mp3-translated/camp2023-57571-eng-Jens_Spahns_credit_score_is_very_good_mp3-2.mp3","url":"https://api.media.ccc.de/public/recordings/70254","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"},{"size":null,"length":null,"mime_type":"text/vtt","language":"deu","filename":"8805e64f-3eb0-52b3-a660-33f51d3b3c1a-deu.vtt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2025-01-06T13:57:07.102+01:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/8805e64f-3eb0-52b3-a660-33f51d3b3c1a-deu.vtt","url":"https://api.media.ccc.de/public/recordings/71920","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"},{"size":237,"length":2790,"mime_type":"video/mp4","language":"eng","filename":"camp2023-57571-eng-Jens_Spahns_credit_score_is_very_good.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2023-09-11T13:07:37.458+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/h264-hd/camp2023-57571-eng-Jens_Spahns_credit_score_is_very_good.mp4","url":"https://api.media.ccc.de/public/recordings/70235","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"},{"size":256,"length":2790,"mime_type":"video/mp4","language":"deu","filename":"camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2023-09-11T13:07:33.530+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/h264-hd/camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good.mp4","url":"https://api.media.ccc.de/public/recordings/70234","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"},{"size":413,"length":2790,"mime_type":"video/webm","language":"deu-eng","filename":"camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2023-09-12T22:55:08.034+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/webm-hd/camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/68873","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"},{"size":158,"length":2790,"mime_type":"video/webm","language":"deu-eng","filename":"camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2023-09-12T22:54:35.506+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/webm-sd/camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/68854","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"},{"size":146,"length":2790,"mime_type":"video/mp4","language":"deu-eng","filename":"camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2023-09-12T22:54:04.944+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/h264-sd/camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_sd.mp4","url":"https://api.media.ccc.de/public/recordings/68828","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"},{"size":28,"length":2790,"mime_type":"audio/opus","language":"deu","filename":"camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2023-08-17T14:50:00.534+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/opus/camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_opus.opus","url":"https://api.media.ccc.de/public/recordings/68820","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"},{"size":42,"length":2790,"mime_type":"audio/mpeg","language":"deu","filename":"camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2023-08-17T14:41:34.969+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/mp3/camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/68817","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"},{"size":427,"length":2790,"mime_type":"video/mp4","language":"deu-eng","filename":"camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2023-09-11T13:07:42.568+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2023/h264-hd/camp2023-57571-deu-Jens_Spahns_credit_score_is_very_good_hd.mp4","url":"https://api.media.ccc.de/public/recordings/68815","event_url":"https://api.media.ccc.de/public/events/8805e64f-3eb0-52b3-a660-33f51d3b3c1a","conference_url":"https://api.media.ccc.de/public/conferences/camp2023"}]}