ecu

Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain. He explains key hierarchies and how data can stay safe even in adversarial clouds.

Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.

Lock-picking YouTuber Bill Johnson (BosnianBill) explains how to choose a high-security lock and why, showing examples and comparing designs. It covers what makes some padlocks more pick-resistant than others.

A Wendover Productions explainer on how airport security is designed, covering screening layers, x-ray scanning, and the contrast with Israel's profiling-based approach. It walks through the logic behind why security works the way it does.

Ivan Krstic's Black Hat talk on Apple platform security, including the Find My design that uses elliptic curve key diversification to locate offline devices privately. It also covers hardware features such as the T2 chip and secure boot hardening.

James Mickens's humorous USENIX Security keynote argues that improving security and trusting opaque technology like machine learning is far harder than the industry admits.

Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report. He explains how undocumented components could be hidden on boards and how hard they are to spot.

A 34C3 talk on the security architecture of the Nintendo Switch and the early progress breaking it. It introduces the Switch's custom OS and software stack, with the hackers' reverse-engineering and glitching work.

Dan Geer's Black Hat 2014 keynote argues that cybersecurity is a matter of power and policy rather than wishful thinking. He covers surveillance, the vulnerability market, software liability and privacy as the capacity to misrepresent yourself.

Brian Warner, author of magic-wormhole, presents the tool at PyCon 2016. He explains how a few secret words let two computers securely transfer files, covering the cryptography (NaCl, SPAKE2) and library use.

David Weston's BlueHat IL 2023 talk traces the evolution of Windows security and previews Windows 11 and hardware advances. It ends with upcoming changes such as Rust in the kernel and fonts, signed binaries and adminless Windows.

Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.

A UC Berkeley CS 161 lecture by Nicholas Weaver on cryptocurrency and blockchains, covering how they work and the case against them. It is aimed at a computer security course audience.

Rory McCune's AppSec EU 2015 talk on security risks in modern software deployment. It covers weaknesses in package ecosystems like npm, RubyGems and PyPI, and repository compromise.

A tool-assisted speedrun of Pokemon Yellow by MrWint that uses arbitrary code execution to push Game Boy hardware to its limits. Through crafted inputs it injects code and ends up running other programs, such as Tetris, inside the game.

Steve Mould explains homochirality: why biological molecules like sugars and amino acids come in only one handedness. He covers ideas about how this asymmetry might have arisen, touching on meteorite samples and RNA.

Yann LeCun on the Big Technology Podcast discusses why current AI models cannot make discoveries despite their knowledge. He argues systems need abstract world models and also covers limits of AI research, investor expectations, and open source after DeepSeek.

A tool-assisted speedrun of Pokemon Yellow on Game Boy Color that uses glitches and frame-precise inputs to make the game execute an arbitrary program. It was later obsoleted by an improved run.

David Shaw of D. E. Shaw Research presents Anton, a special-purpose machine that speeds up biomolecular simulations about a hundred-fold. The lecture covers molecular dynamics and how simulation helps understand how drugs bind.

A tool-assisted speedrun of Super Mario World that achieves arbitrary code execution through frame-precise controller inputs, finishing in 2:25. It was also performed live on real hardware at AGDQ 2014.

John Oliver's Last Week Tonight segment on how prosecutors wield power in the US criminal justice system and how it can be abused. It touches on elected district attorneys, plea pressure and the lack of electoral competition.

Jonathan Blow demos his prototype programming language, covering the base language and compile-time execution, including running a game while compiling. The video is about 70 minutes of demo followed by Q&A.

Veritasium short showing Drew Berry's scientifically accurate animations of the molecular machines that drive cell division. It walks through mitosis, chromosomes and motor proteins.

Tom7 explains how he built a SIGBOVIK 2017 paper made only of printable ASCII bytes that is also a valid DOS executable. He writes a C compiler targeting printable x86 without self-modifying code and solves the puzzles the constraint creates.

Louis Brandy presents the most common and infamous recurring C++ bugs seen in Facebook's huge codebase, including shared_ptr data races and operator[] pitfalls. He explains the surprising complexity behind seemingly simple code.

Christian Schafmeister's Google Tech Talk on Clasp and CANDO, a Common Lisp implementation on LLVM and C++ used to design molecules, including energy minimization and force-field calculations.

An AdaCore webinar in which NVIDIA engineers explain why and how they adopted Ada and SPARK for security-critical firmware. It covers the business case and the engineering experience of the transition.

Lieutenant General Mark Hertling gives a TEDx talk arguing that obesity and poor youth fitness are a national security problem because too few young Americans can meet military physical requirements.

Ron Vale of UCSF and HHMI gives an introductory lecture on kinesin, dynein and myosin motor proteins. He covers their roles in cells and how they turn ATP hydrolysis into directed motion and force.

Dan Callahan presents Mozilla Persona, a decentralized, cross-browser authentication system that removes site passwords, at PyCon 2013. He explains how the protocol works and how to add it to a Python site.

Lex Fridman's long podcast interview with Yann LeCun on Meta AI, open source, the limits of LLMs, AGI and the future of AI.

A DEFCON 20 panel with NSA whistleblower William Binney, journalist James Bamford and ACLU lawyers on the NSA's mass collection of communications and its conflict with the Constitution.

A short Apple Get a Mac ad that mocks Windows Vista's constant security pop-up prompts.

Christian Schafmeister's Google Tech Talk on designing spiroligomer molecules and building Clasp, a Common Lisp on LLVM that interoperates with C++, to program molecular design. It covers the chemistry, automatic differentiation for force fields, and how the compiler is built.

A Munk Debate on the proposition that AI research and development poses an existential threat. Yoshua Bengio and Max Tegmark argue for it, and Melanie Mitchell and Yann LeCun argue against.

Andreas Antonopoulos answers a question about how to secure your Bitcoin. He covers holding your own keys, backing up the 12 to 24 word seed phrase, and the tradeoffs of custodial accounts, phone wallets and hardware wallets.

Justine Tunney presents Redbean, a web server distributed as a single actually portable executable that runs on multiple operating systems. It embeds Lua, SQLite and MbedTLS in a fork-based server.

LockPickingLawyer picks an Amazon's Choice 'high security' padlock in about two seconds.

A short clip of Joe Biden speaking about leveraging loan guarantees to get Ukraine's prosecutor general fired, with a partisan description framing it as corruption.

A fan-made video of the Simpsons Stonecutters Song, in which a secret society takes credit for controlling world affairs, with lyrics and stills from the show.