hack

The Mentor (Loyd Blankenship) reads his 1986 essay "The Conscience of a Hacker" at H2K2 in 2002 and adds his own insight about its backstory.

The BotHack NetHack bot wins the game for the first time with no cheats or human intervention, in a run lasting about 3.5 hours. The description links the source code and the dumplog.

Joe Grand recounts being hired to hack a Trezor One hardware wallet and recover $2 million of cryptocurrency. He describes three months of experimentation, voltage glitching, failures and high-stakes attempts with only one chance to get it right.

John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome. He warns that CRISPR and related tools will make malicious genome hacks and targeted bioweapons feasible.

A 33c3 talk by marcan on reverse engineering the PS4 hardware to run Linux with 3D acceleration. It covers how the console differs from a PC and includes a story about tunneling PCIe over RS-232.

The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits. They explain how the PS3 was cracked after Sony removed Other OS.

A DEF CON 23 talk by Marc Rogers and Kevin Mahaffey walking through the architecture of the Tesla Model S, what Tesla got right and wrong, and how the interconnected systems can be hacked. It also covers the data the car collects.

C-SPAN footage of the L0pht hacker collective testifying before the US Senate Governmental Affairs Committee on May 19, 1998. The members discuss internet and computer security weaknesses. The uploader says the media remembered only the claim that they could take down the internet in 30 minutes.

Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.

Ben Krasnow of Applied Science explains how electrophoretic e-paper displays work and how he modified the driver firmware and waveform lookup tables of a 4.2-inch panel to reach roughly 3Hz partial refresh. It covers the tweakable constants in the refresh process and touches on colored e-ink microcapsules.

Craig Heffner's Black Hat 2013 talk on exploiting network surveillance cameras, covering how insecure their firmware is. It shows how easily such devices can be compromised.

Benn Jordan details security vulnerabilities in Flock Safety license-plate-reading cameras and how easily they can be compromised. It includes citations from security researchers and discussion of police surveillance.

Owen Maitzen's animated hour-long introduction to Hackenbush, a simple combinatorial game, and how its strategy leads to surreal numbers and the roots of the number system.

A DEF CON 20 talk by RenderMan on the security weaknesses of ADS-B, the unencrypted, unauthenticated aircraft tracking broadcast. It shows how easily the data can be spoofed and what that means for security designed in too late.

Micah Lee's Circle of HOPE 2018 talk on Qubes OS, which isolates activities in separate virtual machines so one compromise, such as a bad PDF or USB stick, does not expose everything. He gives an overview timed around the Qubes 4.0 release.

Jonathan Schiefer interviews Larry Wall, creator of Perl, in a 33-minute conversation. Wall discusses his self-designed linguistics degree and how language and programming overlap.

In Ars Technica's War Stories, Naughty Dog co-founder Andy Gavin explains how the team squeezed Crash Bandicoot onto the original PlayStation. They overwrote Sony library code in RAM, built custom animation compression, and streamed assets around slow seek times.

Jessie Frazelle's DockerCon SF 2015 talk on running Docker containers for desktop applications, with fun container hacks and images. It shows how far containers can be pushed beyond servers.

Facebook engineers explain why they abandoned the traditional MVC paradigm for a more functional architecture, introducing Flux and React. They use the unread-message-count bug as a case study of the problems of bidirectional data flow at scale.

Jake Vanderplas's PyCon 2016 talk shows how sampling-based methods such as simulation, shuffling and bootstrapping make statistics intuitive. His pitch is that if you can write a for-loop, you can do statistics.

Erik Meijer gives a provocative talk presenting what he calls a rational alternative to Agile, arguing against Scrum-style practice. He also touches on the tenth-man concept.

A 57-minute account of Clifford Stoll's tracking of a KGB-linked hacker through Lawrence Berkeley Lab computers in 1986, the story of The Cuckoo's Egg. It covers the FBI and Chaos Computer Club involvement.

A recording of the TASBot block at Awesome Games Done Quick 2017, where a robot plays games via tool-assisted speedruns, including Super Mario 64 and Portal on an SNES via arbitrary code execution, and ending with a Twitch Plays segment. It showcases console exploits and creative hardware hacking.

George Hotz gives a SXSW 2019 talk on the idea that we live in a simulation and asks what actions would be available from inside it. He takes a hacker's view of whether it could be escaped.

Tom Murphy (suckerpinch) shows 'reverse emulation', using a Raspberry Pi in an NES cartridge to give an unmodified NES new abilities such as playing SNES games. The video starts in a strange way and gets stranger.

Tom7 explains how he built a SIGBOVIK 2017 paper made only of printable ASCII bytes that is also a valid DOS executable. He writes a C compiler targeting printable x86 without self-modifying code and solves the puzzles the constraint creates.

A WGBH/NOVA re-enactment of Clifford Stoll's hunt for KGB-linked hacker Markus Hess, based on his book The Cuckoo's Egg. It starts from a 75-cent accounting discrepancy at Lawrence Berkeley Laboratory.

The 1990 NOVA documentary follows astronomer Clifford Stoll as he tracks a hacker through military and research computer networks, a story that involved the CIA and KGB. It is based on The Cuckoo's Egg.

A 34C3 talk on the security architecture of the Nintendo Switch and the early progress breaking it. It introduces the Switch's custom OS and software stack, with the hackers' reverse-engineering and glitching work.

Charlie Miller and Chris Valasek present their DEF CON 23 talk on remotely compromising an unmodified Jeep, pivoting from the entertainment system to the vehicle's internal networks to send control messages. They aim to show the reality of car hacking.

Ken Shirriff walks through how to reverse engineer integrated circuits from die photos, using famous chips as examples, in a Hackaday SuperConference talk.

A look inside Dr Abrasive's lab as he engineers a flash-card replacement for the Sega Saturn optical drive after cracking its CD protection 20 years on.

A DEF CON 24 talk on how a cyber mercenary group could forge identities and create the conditions for overthrowing a government. It is entertainingly outlandish and includes a drone-mounted saw for cutting power lines.

The fail0verflow 27C3 talk on breaking PS3 security, covering how Sony's implementation failed, including its ECDSA mistakes.

CNLohr explains how he made an ESP32 produce valid LoRa packets without a LoRa radio, using aliasing and clever signal tricks. It walks through the RF math and shows how far the signals reach.

Deviant Ollam, head of a physical penetration testing team, presents tactics for getting into buildings, from bypassing door levers with a wire to defeating bank doors. He argues that physical security is often surprisingly weak.

A DEF CON 21 talk by Karl Koscher and Eric Butler on how SIM cards work, including Java Card applets, the SIM toolkit and the OS running on the card. It shows how much control the network and the card have independent of the phone.

Matthew Cole's Black Hat 2013 talk on operational security failures by CIA operatives. It covers the Abu Omar case and how sloppy tradecraft with cell phones exposed officers through call records and metadata.

Christopher Domas's Derbycon 2015 talk on the M/o/Vfuscator, a compiler that emits only x86 mov instructions, showing mov is Turing complete. It explains how a full machine is built from mov and why the output is a nightmare to reverse engineer.

Christopher Domas presents research at DEF CON 26 showing a hidden alternate instruction set and undocumented hardware backdoor in some x86 processors, found on a third-party CPU. He uses it to ask how feasible wider hardware backdoors are.