[Intro Music]
Engel: Good morning, Linus! Linus: Good morning, Sebastian!
[Applause]
I'm glad, you showed up so numerous and fell
for this baiting title! I want to talk about human
factors in IT security and chose "hacking brains" for the title.
Background to this is the fact, that when you talk about "hackers"
most people think of halfgods in black.
Nobody really knows what they are doing, but those hackers
get into my device somehow and i don't know what they want from me
or how they did it. And the reality out there is
typically pretty different than most people imagine it. I stand firm
in the believe that basically all relevant problems in IT security
have been solved in theory. So we don't have like... we don't miss the knowledge
on solutions for particular problems, but we still can't make it work.
Even though we've solved everything theoretically,
the actual IT security is a desaster.
And that's most likely, because we build some fascinating IT-mechanisms and
we test them. As we can see this pole and it encloses some animal now, but
if we observe it in reality, it looks more like that...
[audience laughing] [someone singing to "Einzug der Gladiatoren"]
That's only a small threat and somehow
we imagine, that it will be different with bigger threats.
Let's have a look: We read about Emotet everywhere.
Hackers compromise PCs, encrypt all the data, demand a lot of ransom,
and Heise covered it a lot, until they got hit by it themselves.
[laughter] That means, even those who really should have known better
are still effected by it and i think thats
pretty