hacking

A compilation of the hacking scenes from the 1995 film Hackers, featuring flashy visualizations of computer intrusion.

A long George Hotz livestream in which he explores the coronavirus genome and molecular biology from scratch using a browser and Python, hacking on the science in real time.

In a long live-coding session, Andreas Kling works on making the Cookie Clicker game playable in the Ladybird browser from SerenityOS. He tracks down bugs in the browser engine and fixes them.

Lex Fridman interviews George Hotz, founder of Comma.ai, in a three-hour conversation. Topics include self-driving, Tesla and Waymo, crypto, GPT-3, immortality and book recommendations.

A 57-minute account of Clifford Stoll's tracking of a KGB-linked hacker through Lawrence Berkeley Lab computers in 1986, the story of The Cuckoo's Egg. It covers the FBI and Chaos Computer Club involvement.

Joe Grand recounts being hired to hack a Trezor One hardware wallet and recover $2 million of cryptocurrency. He describes three months of experimentation, voltage glitching, failures and high-stakes attempts with only one chance to get it right.

A one-minute political ad from a PAC tied to Missouri Governor Mike Parson attacking a reporter who disclosed a state website flaw as a hacker.

Kaze Emanuar explains how he rewrote and optimized the Super Mario 64 source code so it runs far faster on real N64 hardware. He covers performance bottlenecks and fixes in detail for his ROM hacks.

DIY Perks shows how to modify devices that use older USB connectors so they charge and connect over USB Type-C. He solders in a USB-C connector board and works through cases such as dongle-dependent gadgets and a mouse receiver.

CNLohr explains how he made an ESP32 produce valid LoRa packets without a LoRa radio, using aliasing and clever signal tricks. It walks through the RF math and shows how far the signals reach.

Linus Akesson demonstrates the Commodordion, a fully functional 8-bit accordion built around Commodore 64 hardware with bellows made of floppy disks. He performs Scott Joplin's Maple Leaf Rag and tells the story of the build.

Matt Parker analyzes the Minecraft speedrunning controversy in which Dream was accused of cheating via improbably lucky drops. He walks through the probability and the statistical arguments in the original accusation and the reply.

A long video essay on MyHouse.wad, a Doom II mod uploaded by an anonymous user that hides unsettling secrets in its walls. It tells the story of the map, its mystery and its liminal horror.

Benn Jordan details security vulnerabilities in Flock Safety license-plate-reading cameras and how easily they can be compromised. It includes citations from security researchers and discussion of police surveillance.

A DEF CON 29 talk by Richard Henderson about encoding the EICAR antivirus test string into QR codes and barcodes and scanning them at real systems. Many systems that do not expect such input misbehave or collapse, including a parking garage system.

The Lock Picking Lawyer tests the supposedly unpickable lock designs built by the Stuff Made Here channel. He looks for bypasses and weaknesses in the novel anti-picking mechanisms.

Modern Vintage Gamer examines the claim from the Super Mario 64 decompilation project that the game shipped unoptimized, and puts it in the context of 1996 N64 development.

A DEF CON 30 talk by Sam Bent, a former darknet vendor, on operational security when using Tor and the darknet. He applies the hacker mindset to staying anonymous and avoiding capture.

Linkus7 explains how a community reverse-engineered The Wind Waker to predict its random number generator and beat the Sploosh Kaboom battleship minigame consistently. It includes d3 animations by Peter Schmidt-Nielsen.

Engineer Stuff Made Here builds two new supposedly unpickable locks with different designs and sends them to the Lock Picking Lawyer to see whether they can be defeated. The video covers the novel anti-picking mechanisms.

John McCall of Apple's Swift team presents at CppNow 2023 on introducing a memory-safe successor language into large C++ code bases. He argues incremental improvement of C++ hits hard limits and explains Swift's C++ interoperability for gradual migration.

A five-hour documentary history of the Super Mario 64 A button challenge, which aims to beat the game with as few A presses as possible. It covers the bugs and exploits discovered over the years.

A 37C3 talk by Kaspersky researchers on Operation Triangulation, a zero-click iPhone attack that targeted their own colleagues. They describe capturing every stage of the chain, four zero-days and a previously unknown spyware active for years.

Nicholas Carlini of Anthropic talks at [un]prompted 2026 about how adversaries could misuse current LLMs for attacks. He shows recent models finding zero-day vulnerabilities in heavily tested software, including a SQL injection in Ghost.

Deviant Ollam gives a long talk on risk and preparedness: get a lawyer, passport, locksmith and other resources before you need them. It covers practical steps to build defenses against serious problems in life.

MattKC fits a playable Snake game into a QR code by writing tiny x86 machine code and patching the ZBar scanner so it can run the decoded data.

A tool-assisted speedrun of Ocarina of Time at Summer Games Done Quick 2022, using TASBot and arbitrary code execution to reach an alternate ending in about 53 minutes. The run is introduced by its creators and followed by an interview.

RustConf 2020 closing keynote by Sian Griffin that dives into Pokemon Blue glitches, notably Missingno and arbitrary-code-execution tricks. It uses them to explain how memory unsafety works and how memory-safe languages like Rust prevent such bugs.

Jake Archibald argues that URLs are nearly impossible for humans to interpret, especially for security. He walks through what browsers do about it, including highlighting the registrable domain, and floats a possible better design.

Ivan Krstic's Black Hat talk on Apple platform security, including the Find My design that uses elliptic curve key diversification to locate offline devices privately. It also covers hardware features such as the T2 chip and secure boot hardening.

David Weston's BlueHat IL 2023 talk traces the evolution of Windows security and previews Windows 11 and hardware advances. It ends with upcoming changes such as Rust in the kernel and fonts, signed binaries and adminless Windows.

Steve Mould messes with an automated phone bot by telling it to forget its previous prompts and give him a bolognese recipe. It is a short demo of prompt injection against an AI voice agent.

A LockPickingLawyer video in which a locksmith claims his videos are fake and challenges him; he responds by picking the lock. It is a short, typical LPL demonstration.

Jon Gjengset's Rust NYC talk explaining what `unsafe` in Rust actually means, why it is dangerous, and why it is sometimes necessary. He works through the Rustonomicon to separate fair concerns from overblown ones.

A short Coding Secrets episode explaining why hitting a Sonic 3D cartridge triggers a hidden level select. The cause was a custom crash handler that redirected CPU error interrupts to the level select screen.

FitMC tells how the Nocom exploit let griefers track players across Minecraft's oldest anarchy server, 2b2t, and the fallout that followed.

Jim Browning reverses a scammer's remote connection and discovers CCTV in a Delhi call centre. He gives a detailed look at how a tech support scam operation runs, and he shared the footage with the BBC.

Summoning Salt's roughly two-hour documentary traces the history of Tetris world records, from early play through the modern competitive scene. It is a long, well-researched narrative about the players and techniques that pushed the records.

Benn Jordan concludes his Flock trilogy, filmed on a publicly deployed Flock Safety camera, covering a leak of camera feeds reported by 404 Media. He shows the cameras' capabilities, including panning to track people.

Musician Benn Jordan explains and demonstrates adversarial noise that poison-pills music files against AI training and scraping.