Post by Yvonne Pöppelbaum

Last week was conference week: What stuck in my mind most from the e-learning summit: the cool #escapegames by Tim Heitmann and the nice Lufthansa example how to teach #digitalliteracy from Jill Föckel (-> don’t use fancy new tools, but the ones everyone already uses every day!), Gabriele Riedmann de Trinidad’s much-needed approach of using AI to capture existing knowledge before it’s lost or the experts retire… And the clever solution from Anka Weder and her team at Asklepios to make employees’ knowledge and expertise available to everyone. A smart form of ‘design for #contribution’. And of course, the coffee chats were absolutely lovely! Nicola Peschke, Julia Zwick, Helga Bechmann, Ümit Uludag... Then, on Thursday and Friday, I stepped a bit outside my comfort zone: at the Elbsides workshop ‘Secure Development Lifecycle Applied’ at Jungheinrich AG. Lisi Hocke gave us a very practical introduction to fundamental #security concepts to explore how we can make the development lifecycle more secure. It’s actually a workshop that anyone who’s just coding on a whim and doesn’t always know exactly what they’re doing should attend. I was lucky that I didn’t have to tackle the #threatmodelling for the “Damn Vulnerable Restaurant” with its deliberately very patchy API service on my own, but could look over Aaron D.’s (and Christian Beyer’s and Florian Schäfer’s) shoulders and think about where vulnerabilities might lie and how to fix the bugs in the code. Thanks for that! Helpful links: https://lnkd.in/eUiXXiP2 At the elbsides conference on Friday, with a superb view from the Hotel Hafen Hamburg, I may not have grasped every technical detail, but I certainly gained a better understanding of some topics (The State of Quantum Computing by Natalie Kilber for example). There were also various points of connection between #AI and #journalism: how to use #OSINT tools to track down fake personas before accidentally hiring them. AI avatars are now so incredibly good that even a security firm has hired a fake persona (talk by Michael Reimsbach and Rishi). How attacks can manipulate web archive pages long after they have been archived (Robin Kirchner). I also really enjoyed the talks by Lisa Fröhlich (“Your traffic is lying to you”, on the risks faced by organisations that have never analysed their legitimate traffic and are unable to distinguish a bot campaign from a surge in demand) and Juliane Reimann on the illusion of finishability and the need for cognitive closure. The talk ‘Hacking the Meatmeet BBQ Probe’ could make for a great summer podcast, Eva. It’s about some serious security flaws in a barbecue thermometer… 🥩 By the way, this was my first conference where the men had to queue for the loo, not the women… Thanks Dagmar Swimmer and Team and all the volunteers who made the conference possible. 🚀 #elbsides #elearning #connectingthedots #securityawareness