device lockdown

Cory Doctorow's Talks at Google lecture on the coming civil war over general-purpose computing. He argues that locked-down devices, DRM, and surveillance threaten user control of computers.

Karen Sandler's keynote at Linux.conf.au 2012 on the software running inside medical devices such as her own pacemaker-defibrillator. She discusses the difficulty of learning what code runs in life-sustaining devices and why open source matters there.

A DEF CON 19 talk by datagram introducing tamper-evident devices. It reviews how seals and similar products are designed and shows that they are often easily defeated, drawing on the DEF CON tamper-evident contest.

Karen Sandler, then Executive Director of the GNOME Foundation, talks at OSCON 2011 about the risks of proprietary, closed-source software in implanted medical devices like her own pacemaker-defibrillator.

Cory Doctorow's 28c3 keynote argues that the copyright wars were just a skirmish and that the real fight will be a war on the general-purpose computer. He explains why locked-down devices, DRM and surveillance tools all depend on removing general computation.

Dan Tentler's DEF CON 20 talk on odd things he found on the internet through Shodan, such as stoplights, power systems and other non-computer devices exposed online. It highlights how many devices need no credentials.

Peter Hutterer's linux.conf.au 2020 talk on creating libinput, the unified userspace input library, and the difficulties of handling the many quirks of input devices.

David Sachs of InvenSense explains how gyroscopes, accelerometers and compasses work on their own and together, demonstrated on a modified Android handset. He covers sensor fusion algorithms and why rotation math such as Euler angles matters.

Alex Russell's Chrome Dev Summit 2016 talk on building web experiences that work on slow, flaky networks and low-power devices. It argues developers should focus on the performance of real-world mobile hardware rather than desktop machines.

Dan Tentler shows a rapid-fire tour of insecure things found on the open internet using Shodan and his own scanning, from unprotected VNC endpoints to industrial controls. The emphasis is on how little security was considered before connecting them.

Karsten Nohl and Jakob Lell present BadUSB at Black Hat 2014, showing that USB controller firmware can be reprogrammed to impersonate other device types. They demonstrate system compromise and a self-replicating USB threat that current defenses cannot detect.

Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain. He explains key hierarchies and how data can stay safe even in adversarial clouds.

R. Stanley Williams of HP Labs gives a keynote on the memristor, covering the physics, crossbar computation, and potential for memory and new computer architectures.

Andrew Tanenbaum's FOSDEM 2010 talk on MINIX 3, a microkernel OS built for high reliability and security. It shows how the system detects and recovers from device driver crashes, and addresses microkernel performance concerns.

Martin Kleppmann's QCon London 2018 talk on keeping data consistent in distributed systems without a central leader. It surveys CRDT algorithms for syncing devices and collaborative editing over peer-to-peer networks.

Ivan Krstic's Black Hat talk on Apple platform security, including the Find My design that uses elliptic curve key diversification to locate offline devices privately. It also covers hardware features such as the T2 chip and secure boot hardening.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where flipped bits in DRAM cause devices to contact domains that differ by one bit from legitimate ones. He shows how registering such domains can hijack traffic without exploiting any software bug.

Craig Heffner's Black Hat 2013 talk on exploiting network surveillance cameras, covering how insecure their firmware is. It shows how easily such devices can be compromised.

Pranav Mistry demos SixthSense, a wearable device that projects information onto the physical world and lets people interact with data through gestures. He also shows a paper "laptop" and says he will open-source the software.

Steve Jobs's January 2007 MacWorld keynote segment introducing the original iPhone. He presents it as a widescreen iPod, a phone and an internet communicator in one device.

An Apple WWDC24 session introducing Embedded Swift, a subset of Swift with no runtime that targets tiny microcontrollers. It demonstrates the idea on an off-the-shelf Matter smart home device.

A Curry On talk by Lars Bak, known for V8 and Dart, on building a secure and robust IoT development platform. It discusses language and VM design choices for small devices.

A 35C3 talk by Privacy International researchers who captured and decrypted traffic between Android apps and Facebook servers. They show many apps send Facebook device and usage data immediately on launch, even for users without Facebook accounts.