{"guid":"f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","title":"Deine Software, die Sicherheitslücken und ich","subtitle":"","slug":"rc3-2021-xhain-278-deine-software-die-si","link":"https://pretalx.c3voc.de/rc3-2021-xhain/talk/K8PQPE/","description":"\"Verdammt, ich habe eine Sicherheitslücke gefunden – Was nun?\". Dieser Talk beantwortet diese Frage und erzählt all das, was wir vor dem Melden unserer ersten Sicherheitslücke gerne gewusst hätten. Was ist eigentlich Responsible Disclosure? Wie mache ich das richtig?\r\n\r\nDoch dieses Jahr gab es auch mehrere Fälle, bei denen die schlimmsten Befürchtung eines Responsible-Disclosure-Prozesses eingetreten ist: Eine Anzeige. Allerdings nicht gegen das Unternehmen, das kriminell schlechte Software gebaut hat, sondern gegen die Finder*innen von Sicherheitslücken. Daher wollen wir auch einen Blick darauf werfen, wie Unternehmen richtig mit ihnen gemeldeten Sicherheitslücken umgehen können.\r\n\r\n","original_language":"deu","persons":["zerforschung","Linus Neumann"],"view_count":12156,"promoted":false,"date":"2021-12-28T19:00:00.000+01:00","release_date":"2022-01-04T00:00:00.000+01:00","updated_at":"2026-04-21T00:45:04.626+02:00","tags":["rc3-2021-import","278","2021","xHain"],"length":3443,"duration":3443,"thumb_url":"https://static.media.ccc.de/media/events/rc3/2021/278-f7e44a5a-cffd-50a8-8652-0ed0d9da15fd.jpg","poster_url":"https://static.media.ccc.de/media/events/rc3/2021/278-f7e44a5a-cffd-50a8-8652-0ed0d9da15fd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/rc3/2021/278-f7e44a5a-cffd-50a8-8652-0ed0d9da15fd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/rc3/2021/278-f7e44a5a-cffd-50a8-8652-0ed0d9da15fd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/rc3-2021-xhain-278-deine-software-die-si","url":"https://api.media.ccc.de/public/events/f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","conference_title":"rC3 NOWHERE","conference_url":"https://api.media.ccc.de/public/conferences/rc3-2021","related":[],"recordings":[{"size":null,"length":null,"mime_type":"application/x-subrip","language":"deu","filename":"rc3-2021-import-278-deu-eng-Deine_Software_die_Sicherheitsluecken_und_ich.de.srt","state":"complete","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-01-13T15:43:58.952+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/2021/rc3-2021-import-278-deu-eng-Deine_Software_die_Sicherheitsluecken_und_ich.de.srt","url":"https://api.media.ccc.de/public/recordings/56965","event_url":"https://api.media.ccc.de/public/events/f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","conference_url":"https://api.media.ccc.de/public/conferences/rc3-2021"},{"size":859,"length":3443,"mime_type":"video/webm","language":"deu-eng","filename":"rc3-2021-import-278-deu-eng-Deine_Software_die_Sicherheitsluecken_und_ich_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2022-01-04T22:40:06.484+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/2021/webm-hd/rc3-2021-import-278-deu-eng-Deine_Software_die_Sicherheitsluecken_und_ich_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/56896","event_url":"https://api.media.ccc.de/public/events/f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","conference_url":"https://api.media.ccc.de/public/conferences/rc3-2021"},{"size":286,"length":3443,"mime_type":"video/webm","language":"deu-eng","filename":"rc3-2021-import-278-deu-eng-Deine_Software_die_Sicherheitsluecken_und_ich_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2022-01-04T21:06:58.578+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/2021/webm-sd/rc3-2021-import-278-deu-eng-Deine_Software_die_Sicherheitsluecken_und_ich_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/56843","event_url":"https://api.media.ccc.de/public/events/f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","conference_url":"https://api.media.ccc.de/public/conferences/rc3-2021"},{"size":280,"length":3443,"mime_type":"video/mp4","language":"deu-eng","filename":"rc3-2021-import-278-deu-eng-Deine_Software_die_Sicherheitsluecken_und_ich_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2022-01-04T20:06:13.610+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/2021/h264-sd/rc3-2021-import-278-deu-eng-Deine_Software_die_Sicherheitsluecken_und_ich_sd.mp4","url":"https://api.media.ccc.de/public/recordings/56830","event_url":"https://api.media.ccc.de/public/events/f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","conference_url":"https://api.media.ccc.de/public/conferences/rc3-2021"},{"size":35,"length":3443,"mime_type":"audio/opus","language":"deu","filename":"rc3-2021-import-278-deu-Deine_Software_die_Sicherheitsluecken_und_ich_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2022-01-04T20:00:35.370+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/2021/opus/rc3-2021-import-278-deu-Deine_Software_die_Sicherheitsluecken_und_ich_opus.opus","url":"https://api.media.ccc.de/public/recordings/56829","event_url":"https://api.media.ccc.de/public/events/f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","conference_url":"https://api.media.ccc.de/public/conferences/rc3-2021"},{"size":52,"length":3443,"mime_type":"audio/mpeg","language":"deu","filename":"rc3-2021-import-278-deu-Deine_Software_die_Sicherheitsluecken_und_ich_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2022-01-04T19:59:35.940+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/2021/mp3/rc3-2021-import-278-deu-Deine_Software_die_Sicherheitsluecken_und_ich_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/56828","event_url":"https://api.media.ccc.de/public/events/f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","conference_url":"https://api.media.ccc.de/public/conferences/rc3-2021"},{"size":895,"length":3443,"mime_type":"video/mp4","language":"deu-eng","filename":"rc3-2021-import-278-deu-eng-Deine_Software_die_Sicherheitsluecken_und_ich_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2022-01-04T19:56:53.969+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/2021/h264-hd/rc3-2021-import-278-deu-eng-Deine_Software_die_Sicherheitsluecken_und_ich_hd.mp4","url":"https://api.media.ccc.de/public/recordings/56827","event_url":"https://api.media.ccc.de/public/events/f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","conference_url":"https://api.media.ccc.de/public/conferences/rc3-2021"},{"size":842,"length":3443,"mime_type":"video/mp4","language":"eng","filename":"rc3-2021-import-278-eng-Deine_Software_die_Sicherheitsluecken_und_ich.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2022-01-04T19:56:19.451+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/2021/h264-hd/rc3-2021-import-278-eng-Deine_Software_die_Sicherheitsluecken_und_ich.mp4","url":"https://api.media.ccc.de/public/recordings/56826","event_url":"https://api.media.ccc.de/public/events/f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","conference_url":"https://api.media.ccc.de/public/conferences/rc3-2021"},{"size":842,"length":3443,"mime_type":"video/mp4","language":"deu","filename":"rc3-2021-import-278-deu-Deine_Software_die_Sicherheitsluecken_und_ich.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2022-01-04T19:55:44.852+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/2021/h264-hd/rc3-2021-import-278-deu-Deine_Software_die_Sicherheitsluecken_und_ich.mp4","url":"https://api.media.ccc.de/public/recordings/56825","event_url":"https://api.media.ccc.de/public/events/f7e44a5a-cffd-50a8-8652-0ed0d9da15fd","conference_url":"https://api.media.ccc.de/public/conferences/rc3-2021"}]}