How we hacked the Bavarian State with an Open Source Open Letter (glt26)

How we hacked the Bavarian State with an Open Source Open Letter (glt26)

Author: CCC media team April 11, 2026 Duration: 30:53
None In September, a few of us Open Source nerds heard that the Bavarian government wanted to "sneakily" "invest" another billion Euro in Microsoft Cloud, Teams and 365 – without a tender, and before the year ends (Base contract) I talked to friends, and we created an open letter. Soon we were like ten initiators. We found support among many Bavarian Open Source companies and NGOs, only weeks later > 160 companies and institutions had been signing the letter. When larger German NGOs like the Gesellschaft für Informatik (Society for Informatics) and the Bund der Steuerzahler (Tax Payers' Association joined, the Bavarian Government could not stay silent any more. Leading up of today, two secretaries and the minister president have engaged in a public blame game. At first they were angry about the unwanted, additional publicity - and publicly said so. The goal of sneakily accomplishing the deal until end of 2025 failed and it is still not finalized. But now - four weeks before an election, secretaries of state for digital and finance are fighting publicly, accusing each other of "fake news" and are saying silly things. On camera - and in parliament. "OSS is too expensive" or "We needed something federated, decentralized and secure, thus we had to go for MS 365" and similar. It's fun. What we can learn from this? PR for OSS works, timing is helpful, topics are important and claims like "ONE BILLION!!" are valuable. No one knew Trump, Greenland and Davos would come to help us, but they did and made it hard for the conservative Bavarian government to keep doing what they had always been. And we were a bunch of people that stuck it out. And it's so important that we the OSS community learn how to play against the lobbys. We need to apply the "divide and conquer" strategy against the real enemies, not internally. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://pretalx.linuxtage.at/glt26/talk/7AC7RK/

Tune into the Chaos Computer Club-recent events feed for a direct line to the forefront of digital culture and critical technology discourse. Curated by the CCC media team, this podcast channels the raw, insightful atmosphere of Europe's most influential hacker association, bringing you recordings from their major gatherings and community events. Each episode is a deep dive into talks and presentations from the last two years, covering topics from cryptography and privacy rights to hardware hacking, societal impacts of surveillance, and open-source philosophy. You'll hear from researchers, activists, and engineers who are actively shaping our digital future, offering perspectives rarely found in mainstream tech conversations. This isn't a produced show with hosts; it's an archival audio stream of genuine conference sessions, complete with audience questions and the spontaneous energy of the live event. For anyone interested in the technical details and ethical debates at the heart of modern technology, this feed serves as an essential, unfiltered resource. Subscribe to this podcast to keep your finger on the pulse of the Chaos Computer Club's ongoing dialogue, where complex ideas are broken down and the tools for a more empowered digital life are openly discussed.
Author: Episodes: 100

Chaos Computer Club - recent events feed
Podcast Episodes
Gotta Hack 'Em All! Pokémon (eh23) [not-audio_url] [/not-audio_url]

Duration: 30:49
Viele kennen ja einige Hacks oder Glitches in Pokémon Rot und Blau. Wie aber funktionieren diese genau? Was passiert da eigentlich im Code? Was macht das ganze überhaupt möglich? Schauen wir uns das Ganze doch mal genaue…
How NOT to IPv6 (eh23) [not-audio_url] [/not-audio_url]

Duration: 30:01
Ein buntes Potpourri an Worst-Practices wie man die IPv6 Einführung nicht schafft. Die Transition des Internets von IPv4 zu IPv6 dauert jetzt schon weit über 20 Jahre, trotzdem geht sie in einigen Bereichen nur schleppen…
The commit history is a lie (eh23) [not-audio_url] [/not-audio_url]

Duration: 31:42
Bei diesem Talk gebe ich eine Einführung in Conventional Commits und was diese mit Semantic Versioning - also Versionierung im Stil "v1.6.1" - zu tun haben. Damit eure Git Historie nicht lästig, sondern hilfreich ist, un…
No Magic, Just Modbus (eh23) [not-audio_url] [/not-audio_url]

Duration: 27:24
OT (Operational Technology) ist nicht nur IT mit dickeren Kabeln. Dieser Talk führt in das Thema Sicherheit in industriellen Steuerungssystemen ein und zeigt, wie man Angriffe mit Frameworks strukturiert analysieren und…
Public-Public Data-DNA (eh23) [not-audio_url] [/not-audio_url]

Duration: 27:13
_Hier werden **offene Daten aus den Fachverfahren** unserer Verwaltungen mit **unseren öffentlichen Datenquellen** (OSM, WikiData, ..) verzahnt!_ Ähnlich eine DNA die beiden Stränge verbindet, synchronisiert p2d2 offene…
Open Source Lizenzen (eh23) [not-audio_url] [/not-audio_url]

Duration: 48:26
Wir erzählen euch etwas über Open-Source-Lizenzen, ob sie so funktionieren wie gedacht und andere Absurditäten. Alle reden von Open Source. Wir nicht. Wir reden über Open-Source-Lizenzen! GPL haben alle wohl schonmal geh…
Ghost in the stochastic parrot (eh23) [not-audio_url] [/not-audio_url]

Duration: 58:47
Sci-fi started merging with the real world around 2022. That's when I started paying attention. Are LLMs definitely persons? Are they definitely not persons? What can we prove? (What about animals?) Machines indistinguis…
A decade of certificate transparency and what may come next (eh23) [not-audio_url] [/not-audio_url]

Duration: 1:00:45
Certificate Transparency (RFC 6962) is a protocol that aims to provide additional security to the WebPKI ecosystem, which is used as the root of trust in TLS connections of the browsers. The idea is that issued certifica…