In 1981 a handful of West German hackers founded a club at a table that had belonged to a Berlin commune, in the back rooms of a left-wing newspaper. Three years later they made a German bank hand them DM 134,000 to prove its online system was broken, then gave the money back in front of the cameras. Over the next four decades they published a sitting interior minister's fingerprint, took apart the government's secret spyware, ran Europe's biggest hacker congress every winter, and watched one corner of their orbit sell computer access to the KGB. Europe's oldest hacker association is also its most respectable and its most disreputable, usually in the same year.
“Öffentliche Daten nützen, private Daten schützen.” — Make public data available, protect private data.
The Chaos Computer Club's own addition to the hacker ethic — a line the club says it wrote in the 1980s after “some more or less crazy individuals from the hacker scene had the idea of offering their ‘hacker know-how’ to the KGB.” From the club's Hackerethik (German original)
WHO
Chaos Computer Club (CCC) — Europe's largest and oldest hacker association, founded 12 September 1981, West Berlin; headquartered in Hamburg FACT
FOUNDER
Wau Holland (Herwart Holland-Moritz) and others, at a table once owned by the Kommune 1, in the rooms of the newspaper Die TageszeitungFACT
THE DRAMA
The Hackerethik; the 1984 BTX bank hack; the 1986–89 KGB-hack fallout; the 2008 Schäuble fingerprint; the 2011 Staatstrojaner teardown; the annual Chaos Communication Congress; the 2011 Domscheit-Berg expulsion
FORM
A registered nonprofit (eingetragener Verein) with roughly 7,700 members and local Erfa-Kreise chapters across the German-speaking world FACT
STATUS
INSTITUTION — the outlaw club that became the expert witness: it advises Germany's constitutional court, and it still runs the con
This file is not an accusation; the CCC's most famous acts were stunts with a stated point — embarrass a bank, embarrass a minister, embarrass the state's own malware — and the fight over whether that was public service or lawbreaking is the drama. The through-line is a club that codified a hacker ethic, then spent forty years being tested against it: by a KGB spy ring that grew up in its orbit, by a spokesman it expelled, and by the German government it kept dragging onto the operating table. It keeps the trophies and the embarrassments in the same cabinet.
the drama timeline
ACT I — THE TABLE AT DIE TAGESZEITUNG (1981–1984)
A newspaper prints an assembly note, a few hackers show up, and Europe's oldest hacker club is founded at a piece of furniture with a revolutionary past.
SEP 12, 1981
The club is founded
The Chaos Computer Club is founded in West Berlin by Wau Holland and others, at a table that had previously belonged to the Kommune 1, in the rooms of the newspaper Die Tageszeitung — in anticipation, the club says, of the role information technology would play in how people live and communicate. The Guardian records it was founded partly against the Deutsche Bundespost telecoms monopoly and the criminalization of home computer networking.
The CCC holds the first Chaos Communication Congress in Hamburg — the annual winter gathering that becomes one of the largest hacker conferences in the world and the club's public heartbeat. Wau Holland here at the Chaos Communication Camp of 1999, still holding forth on what the movement had and hadn't achieved:
Wau Holland at the Chaos Communication Camp, 1999 — the co-founder speaking at a CCC event eighteen years after the table at Die Tageszeitung, two years before his death.
The provider says the system is safe. The CCC disagrees, and proves it with a six-figure withdrawal it never intended to keep.
NOV 1984
The BTX hack
The CCC becomes world-famous by exposing a security flaw in Bildschirmtext (BTX), the Deutsche Bundespost's mass-market online system. After the provider ignored the club's proof of the flaw and publicly insisted the system was safe, the CCC used it to make a Hamburg bank debit DM 134,000 in the club's favor overnight — then returned the money the next day in front of the press. The point was the point: the flaw was real, and the people running it had lied about it.
The ethic gets its hardest test: not from the state, but from hackers in the club's own orbit who cross the line the club had not yet drawn.
1986–89
The KGB hack
A ring of West German hackers on the edge of the CCC scene — Karl Koch ("hagbard"), Markus Hess, Hans Hübner and others — breaks into US military and corporate networks and sells the access to the Soviet KGB. The intrusions are traced by Clifford Stoll and become The Cuckoo's Egg. Hess is later tried and convicted of espionage; Koch and Hübner confess under a West German amnesty and are not prosecuted. Koch is found dead in 1989, aged 23 — a loss the archive records soberly and in full elsewhere.
In direct response to the KGB affair, the CCC adds two clauses to its Hackerethik: “Mülle nicht in den Daten anderer Leute” (don't litter in other people's data) and “Öffentliche Daten nützen, private Daten schützen” (make public data available, protect private data). Selling break-in access to a foreign intelligence service was, the club decided, exactly what the ethic had to forbid.
ACT IV — THE STATE ON THE OPERATING TABLE (2008–2011)
Grown up and incorporated, the club turns its stunts on the German government's own biometrics and its own spyware — and the courts start to agree.
MAR 2008
Schäuble's fingerprint
To protest the push for biometric ID, the CCC acquires and publishes the fingerprint of German Interior Minister Wolfgang Schäuble — in its magazine, printed on a film readers could use to fool fingerprint readers. The message: a biometric you leave on every glass you touch is not a secret. The club later drove the point home by unlocking an iPhone 5S from a fingerprint lifted off glass.
The CCC publishes an analysis of the Staatstrojaner — the "federal trojan" German police used for source wiretapping. The club shows the malware could do far more than intercept calls: remote-control the machine, take screenshots, and fetch and run arbitrary code — capabilities the club argued were in direct contradiction to the Federal Constitutional Court's ruling on what such software was allowed to do. The CCC's earlier work against Nedap voting computers had already helped push German courts to distrust unauditable black boxes; this was the same argument, aimed at the police.
The club that spent decades fighting the state turns on one of its own over a fight about how to leak.
AUG 2011
Domscheit-Berg expelled
Former WikiLeaks spokesman Daniel Domscheit-Berg — who had broken with Julian Assange to launch the rival OpenLeaks — is expelled from the national CCC (though not from the Berlin chapter) amid the fallout of the WikiLeaks schism. The club that helped invent public-interest hacking could not settle its own argument about how leaking should work. The expulsion is revoked in February 2012.
The stunts were crimes: the BTX hack was unauthorized access to a bank's system that moved DM 134,000, and publishing a sitting minister's fingerprint on a film built to defeat readers is not a neutral demonstration. Intent to return the money and to make a point does not un-break the law, and the club has always romanticized the moment it broke it [1].
The orbit produced a spy ring: the KGB hackers came up in the CCC scene, and one of the ugliest Cold War computer-espionage cases grew out of the same milieu that celebrated breaking into other people's systems. The club drew its bright line only after the damage was done [7].
Every stunt had a point that held up: the BTX provider had lied about a real flaw, and the money went back the next day in front of the press; the Schäuble fingerprint made a true argument about biometrics the club later proved by unlocking an iPhone; the Staatstrojaner analysis exposed a police tool that exceeded what the constitutional court allowed. The receipts kept vindicating the club [1][3].
The club wrote the line and enforced it: the CCC added “protect private data” and “don't litter in other people's data” to its ethic because of the KGB affair, and it publicly rejected selling access to intelligence services. It is a registered nonprofit that advises Germany's highest court, not a crew that fenced its exploits [2].
It polices itself in public: the Domscheit-Berg expulsion — and its reversal — is the club arguing loudly about its own values rather than hiding them. Forty years in, the trophies and the embarrassments are on the same shelf, by choice [8].
YOU DECIDE
The CCC really did break into a bank, publish a minister's biometrics, and grow up next door to a KGB spy ring — and it really was right about the BTX flaw, the fragility of fingerprints, and the state trojan that did more than the court allowed. Both halves are load-bearing. Strip the myth away and you get the rarest thing in this archive: an outlaw institution that wrote down an ethic, got tested against it by its own people, and mostly — not always — held.
The archive does not deify. The archive keeps the returned DM 134,000 — and the KGB it never quite lived down.
evidence locker
PRIMARY / REFERENCE
Wikipedia — Chaos Computer ClubATTRIBUTED — dated record: the 12 Sep 1981 West Berlin founding by Wau Holland, the 1984 BTX/Bildschirmtext hack (DM 134,000 debited from a Hamburg bank and returned before the press), the March 2008 Schäuble fingerprint stunt, the 8 Oct 2011 Staatstrojaner analysis, the iPhone 5S fingerprint unlock, and the Domscheit-Berg expulsion.
en.wikipedia.org/wiki/Chaos_Computer_Club
CCC — Hacker Ethics (Hackerethik)PRIMARY — the club's own statement of the hacker ethic, including the two 1980s additions and the club's account that they were written in response to the KGB approach. German original at ccc.de/hackerethik.
ccc.de/en/hackerethics
CCC — Staatstrojaner analysis (2011)PRIMARY — the club's own writeup of the German state's surveillance trojan and the capabilities it found.
ccc.de/en/updates/2011/staatstrojaner
CONTEXT & CROSS-LINKS
Wikipedia (de) — BTX-HackATTRIBUTED — the German-language account of the 1984 Bildschirmtext hack and the Hamburger Sparkasse transfer.
de.wikipedia.org/wiki/BTX-Hack
Wikipedia — Wau HollandATTRIBUTED — the co-founder (Herwart Holland-Moritz), his role in the club and the hacker ethic, and his 2001 death.
en.wikipedia.org/wiki/Wau_Holland
Wikipedia — Chaos Communication CongressATTRIBUTED — the annual congress the CCC has run since 1984, and its scale as one of the world's largest hacker conferences.
en.wikipedia.org/wiki/Chaos_Communication_Congress
troll.fan — Karl KochCROSS-LINK — the 1986–89 KGB hack in full: the ring, the espionage convictions and amnesty, and Koch's death, handled soberly.
troll.fan/dossiers/karl-koch.html
troll.fan — the WikiLeaks schismCROSS-LINK — the Assange / Domscheit-Berg / OpenLeaks split behind the CCC's 2011 expulsion.
troll.fan/dossiers/wikileaks-schism.html
troll.fan — Crew RivalriesCROSS-LINK — the scene's feuds, of which the CCC's own family fights are a European chapter.
troll.fan/crew-rivalries.html
troll.fan — TimelineCROSS-LINK — where the CCC's beats sit in the wider chronology of the scene.
troll.fan/timeline.html
The standard. The Chaos Computer Club is a public organization of forty years' standing; its founding, its hacker ethic, the BTX hack, the Schäuble and Staatstrojaner actions, the congress, and the Domscheit-Berg expulsion and its reversal are matters of record, documented on the club's own site and the reference pages above. The KGB-hack criminal matters are attributed to the adjudicated record and treated in full on the Karl Koch file; Koch's death is stated soberly, with no manner asserted here. Mitigating and exculpatory facts — the returned money, the vindicated warnings, the ethic written against the KGB, the reversed expulsion — are given at full strength. The CCC also disavowed the 1999 Legions of the Underground "declaration of cyberwar," co-signing the joint statement against it. If a line here couldn't survive scrutiny, it wouldn't be on the page.