Okay, here's the summary of the provided transcript in the requested format:

Lightning Talks Day 3 Summaries

• 0:00:19 - Introduction to Lightning Talks:

  • Five-minute talks, red button countdown.
  • Speakers stop at zero, even if unfinished, with loud clapping.

• 0:01:01 - Alexis - Digital Integrity as a Fundamental Right:

  • Focus on legal innovation in Switzerland regarding digital rights.
  • Extending existing rights of physical/mental integrity to the digital space.
  • Adding "digital" to constitutional rights to guarantee autonomy.
  • "Right to an offline life" - not forcing connection.
  • Successfully voted into Geneva & Nel constitutions (94% & 95% approval)
  • Website available for more details. Presentation at 5pm, workshop at 8:45pm.
  • Strasburg city council adopted resolution to include digital integrity.

• 0:05:29 - Vulnerability in RDP:

  • DLL Hijacking vulnerability found in mstsc.exe.
  • Resource DLL loading and format string vulnerability chained for RCE.
  • Only works on Windows for ARM, thus not previously discovered.
  • Reported to Microsoft, received a CVE.
  • More RCE vulnerabilities found in RDP. Check LinkedIn for more.

• 0:10:06 - Static Security Analysis Tools for Java:

  • Static code analysis tools help developers find security issues without execution.
  • Tools use compiler-like techniques to check code.
  • Categories include Coding Standards, Bug Lists, SBOM, Secrets, API Usage, Data Flow Analysis.
  • Error Prone: Java tool from Google using meta-interfaces to match against code patterns
  • CodeQL: SQL-like query language for code analysis.
  • CogniCrypt: Eclipse plugin to scan Java for cryptographic API usage.

• 0:15:44 - FSF vs. Apple on DMA:

  • FSF intervening in Apple vs. European Commission litigation to enforce DMA.
  • Trying to protect free software against Apple's monopolistic control.
  • Legal activities: working on device neutrality, license questions, legal network.
  • Reuse software: helps developers with licensing.
  • Part of the Next Generation internet zero program.
  • Fsf needs support and volunteers for the fight with Apple.

• 0:20:59 - Simulation Hypothesis and Video Games:

  • Analyzing simulation hypothesis practically via video games
  • Dynamics in games are similar to quantum mechanics, suggesting simulation possibility.
  • Uses old games such as Super Mario and Doom to explore emergent properties.
  • Super Mario glitches related to quantum tunneling.
  • RNG (random number generators) is similar to the probability aspect of quantum interpretation.
  • Doom RNG has an interesting binary projection.

• 0:26:33 - CO2 Negative Energy Production:

  • Using trees to take CO2 from atmosphere and store it as wood.
  • Burning wood to create coal for long-term carbon storage.
  • Coal from wood acts as a fertilizer.
  • Process provides thermal energy.
  • Method is a very old pre-bronze age technique, if done properly can become carbon negative.
  • Personal experiments with wood oven, sequestering 3 tons of CO2/year.

• 0:31:37 - Fake Base Station Detection with Cellard:

  • Cellard detects fake cell base stations on iPhones, without jailbreak.
  • Uses the debug profile for Error: Column.new() missing 6 required positional arguments: 'cid', 'name', 'type', 'notnull', 'default_value', and 'is_pk' baseband diagnostics to gather cellular data.
  • Shows cell details, nearby cells, and exchanged packets.
  • Available via TestFlight, see the s guide Simo de website.
  • Requires installing a debug profile (expires after 21 days).
  • User data stays locally on the device.

• 0:36:55 - Building an Inflatable Ferris Crab:

  • Using PVC foil for inflatable build.
  • Prototypes scaled up using a projector to cut out the correct shapes.
  • Recommend an iron for welding seams, at over 220 degrees.
  • PVC glue was a failure.
  • Careful around triple points where multiple pieces of foil join.
  • The giant crab is at the Rust assembly.
  • The crab is hooked up to the internet, say something nice to it.

• 0:41:10 - Attacking Image Classifiers:

  • Adversarial attacks on image classifier systems.
  • Small perturbations causing intended misclassification.
  • Adversarial patch examples shown to make classifiers consistently output "airplane" when shown different images.
  • Attacks can be digital or physical.
  • Use the Adversarial Robustness Toolbox.
  • Workshop tomorrow at 5pm.

• 0:45:30 - iOS Inactivity Reboot:

  • iOS reboots after three days of inactivity to secure data before first unlock.
  • Secure Enclave Processor (SCP) tracks last unlock time.
  • Kernel initiates reboot, with fallback panic if something goes wrong.
  • Keybag daemon sends analytics to Apple after reboot
  • Three-day timer is a balance for security vs law enforcement access time.
  • Thieves can no longer let phones sit in a power bank to bypass security.

• 0:49:52 - LLM Hallucination in Graph Data:

  • LLMs hallucinate with graph data, measuring this via an approach with known graphs
  • Prompted with small graphs (Zacaryi club graph) to check factual correctness.
  • Uses edge list comparisons to evaluate LLM's responses.
  • Some LLMs invent edges while trying to create the graphs.
  • Error correlates with general hallucination leaderboards.
  • Interesting insights into how LLMs store / memorize data.

• 0:54:45 - Liber Office in a Web Browser:

  • WebAssembly allows for running C/C++ apps in the browser
  • LibreOffice compiled to WebAssembly (loova).
  • mcrip provides a virtual unix environment for libre office.
  • zjs library allows Javascript access to LibreOffice via the UNo API.
  • Shows how to load files into the virtual filesystem for use with LibreOffice.
  • Demonstrates a Javascript based address book application with LibreOffice integration.

• 01:00:24 - Youth Hacking for Freedom Competition:

  • Programming competition hosted by Free Software Foundation Europe for 14-18 year olds.
  • Projects must be free software, no other limitations.
  • Registration open till June, monthly calls.
  • Prizes from 1024 to 4096 plus a trip to Brussels.
  • Support for legal, licensing, and general questions is provided.

• 01:04:33 - Shovel: Network Analysis for CTFs:

  • Shovel is a network analysis tool developed for CTF competitions.
  • Abstract data to TCP/UDP flows for overview of data transfer.
  • Uses suricata with custom rules to analyze network flows.
  • Web interface with real time flows and suricata alerts.
  • Compatible with IPS.
  • Can block malicious user agents and commands by parsing raw data.

• 01:09:11 - Home Automation System:

  • Self-contained system using openWRT as a base.
  • A single firmware runs across devices.
  • Project logic is via scripts that can be modified directly on the device.
  • Has a web interface, a debugger, and a graphic subsystem, metra bridge.
  • Available on GitHub (QR Code provided).
  • All of the speaker's home automation systems are running on this framework.

• 01:19:33 - RDMA Solution for Remote Desktop:

  • Telescope project uses RDMA for remote desktop.
  • Uncompressed pixel-perfect video with low latency.
  • RDMA bypasses kernel networking stack for high performance.
  • Uses Looking Glass for raw frame capture and sharing.
  • Zero CPU time with RDMA rights.
  • Good for video editing because of color accuracy.
  • Project available as open source, links in the lightning talks channel.

• 01:24:43 - Closing Remarks

  • Reminder about taking trash, drinking water and washing hands.
  • Encouragement to participate in future lightning talks.

Let me know if you have any other transcripts you would like me to process!