Day 2, yesterday, was less exciting than day 1. That might be a function of the talks that I actually attended: The guy who presented an analysis of the Linux kernel-mode PRNG botched his answers to some questions from the audience. Steffen Meschkat gave a nice tutorial about JSON, but ran over his allotted time and skipped the authentication and authorization related part of his talk -- pity.
The best talk that I got to listen to was in the RFID hacking session; Henryk Plötz showed how to replicate an access-control card with home-grown technology and an ipod. Bonus points for hack value.
Now, day 3.