hack

The Mentor (Loyd Blankenship) reads his 1986 essay "The Conscience of a Hacker" at H2K2 in 2002 and adds his own insight about its backstory.

The BotHack NetHack bot wins the game for the first time with no cheats or human intervention, in a run lasting about 3.5 hours. The description links the source code and the dumplog.

A one-minute clip from the 1995 film Hackers in which characters trade technobabble about RISC architecture changing everything.

A HOPE X talk giving an in-depth explanation of how elevators work, from their history in hacker culture to using their control systems to bypass building security. It covers features and abilities of elevators that most people never see.

John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome. He warns that CRISPR and related tools will make malicious genome hacks and targeted bioweapons feasible.

The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits. They explain how the PS3 was cracked after Sony removed Other OS.

A DEF CON 23 talk by Marc Rogers and Kevin Mahaffey walking through the architecture of the Tesla Model S, what Tesla got right and wrong, and how the interconnected systems can be hacked. It also covers the data the car collects.

Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.

Micah Lee's Circle of HOPE 2018 talk on Qubes OS, which isolates activities in separate virtual machines so one compromise, such as a bad PDF or USB stick, does not expose everything. He gives an overview timed around the Qubes 4.0 release.

Jonathan Schiefer interviews Larry Wall, creator of Perl, in a 33-minute conversation. Wall discusses his self-designed linguistics degree and how language and programming overlap.

A roughly hour-long live hacking session in which Go team members Andrew Gerrand and Brad Fitzpatrick write the new version of tip.golang.org, the site serving leading-edge Go documentation. It is unedited pair programming on a real Go project.

In a long live-coding session, Andreas Kling works on making the Cookie Clicker game playable in the Ladybird browser from SerenityOS. He tracks down bugs in the browser engine and fixes them.

Jessie Frazelle's DockerCon SF 2015 talk on running Docker containers for desktop applications, with fun container hacks and images. It shows how far containers can be pushed beyond servers.

Jake Vanderplas's PyCon 2016 talk shows how sampling-based methods such as simulation, shuffling and bootstrapping make statistics intuitive. His pitch is that if you can write a for-loop, you can do statistics.

Erik Meijer gives a provocative talk presenting what he calls a rational alternative to Agile, arguing against Scrum-style practice. He also touches on the tenth-man concept.

A 57-minute account of Clifford Stoll's tracking of a KGB-linked hacker through Lawrence Berkeley Lab computers in 1986, the story of The Cuckoo's Egg. It covers the FBI and Chaos Computer Club involvement.

A brief clip of a Nook Simple Touch e-ink reader running PlayStation 1 games through an emulator with a hacked fast refresh rate.

A WGBH/NOVA re-enactment of Clifford Stoll's hunt for KGB-linked hacker Markus Hess, based on his book The Cuckoo's Egg. It starts from a 75-cent accounting discrepancy at Lawrence Berkeley Laboratory.

The fail0verflow 27C3 talk on breaking PS3 security, covering how Sony's implementation failed, including its ECDSA mistakes.

A short demo of a playable Space Invaders game built inside Dwarf Fortress, with a downloadable map. It shows the game's mechanics used as a computing substrate.

Omar Rizwan's short !!Con talk about writing a Breakout game in JavaScript that runs inside a PDF. It explores the surprisingly large PDF specification, including its scripting support.

A DEF CON 21 talk by Adam Laurie and Zac Franken on decapping chips, covering how to remove chip packaging and image the die to read out contents such as ROM.

Christopher Domas's Derbycon 2015 talk on the M/o/Vfuscator, a compiler that emits only x86 mov instructions, showing mov is Turing complete. It explains how a full machine is built from mov and why the output is a nightmare to reverse engineer.

Christopher Domas presents research at DEF CON 26 showing a hidden alternate instruction set and undocumented hardware backdoor in some x86 processors, found on a third-party CPU. He uses it to ask how feasible wider hardware backdoors are.

A panel conversation with Stewart Brand at Ethereum's Devcon4, where he recounts his life and work 'hacking civilization' and discusses the role of institutions in decentralization.

Mike of mikeselectricstuff shows his heavily modified old BBC Micro system in a 28-minute tour of 8-bit hardware archaeology.

A demo of Deldo, an Emacs package that lets Emacs hooks trigger vibration events on computer-controllable sex toys. It is an absurd teledildonics project that is half performance art.

Moxie Marlinspike's DEF CON 18 talk on changing threats to privacy argues that surveillance arrived through convenient services and network effects, so opting out is not a real solution. It also includes his framing of getting social democracy rather than the fascism people feared.

Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.

Moxie Marlinspike's BlackHat 2011 talk examines weaknesses of SSL and the certificate authority system and proposes Convergence, a decentralized notary approach with trust agility.

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

Microsoft's Tony Chen explains how the Xbox One was designed to resist physical attacks, including secure boot, encrypted memory, a security processor and a hypervisor. The goal was to make any hardware attack cost more than the price of many games.

Dan Geer's Black Hat 2014 keynote argues that cybersecurity is a matter of power and policy rather than wishful thinking. He covers surveillance, the vulnerability market, software liability and privacy as the capacity to misrepresent yourself.

A Google Tech Talk by Steve Weis that introduces modern cryptography and its use in practice and at Google. It covers proofs of security and security definitions and a special topic. HN commenters treat it as a talk on verifiable electronic voting.

Bryan Cantrill's Papers We Love talk on FreeBSD Jails and Solaris Zones, tracing how OS-level virtualization grew out of chroot and the limits of the traditional UNIX security model.

Evan Czaplicki, creator of Elm, discusses the hard parts of running an open source project: online community conflict, why its patterns arise, and a cultural history of open source. He offers ideas for more civil, productive communication.

Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report. He explains how undocumented components could be hidden on boards and how hard they are to spot.

Cory Doctorow's Talks at Google lecture on the coming civil war over general-purpose computing. He argues that locked-down devices, DRM, and surveillance threaten user control of computers.

Christopher Domas presents his Cantor Dust tool at Derbycon 2012, a 3D visual approach to reverse engineering binaries by visualizing their structure dynamically.

Jason Scott's DerbyCon 2012 talk on rescuing the Prince of Persia source code from old floppy disks, working with the game's author Jordan Mechner. It is a story of digital archaeology and recovering data from ancient media.