hacking

Samy Kamkar demonstrates OpenSesame, a device that opens many fixed-code garage doors in seconds by exploiting a newly found attack, built around a Mattel toy. The video explains the attack and which brands are affected.

A roughly hour-long live hacking session in which Go team members Andrew Gerrand and Brad Fitzpatrick write the new version of tip.golang.org, the site serving leading-edge Go documentation. It is unedited pair programming on a real Go project.

A long George Hotz livestream in which he explores the coronavirus genome and molecular biology from scratch using a browser and Python, hacking on the science in real time.

A recording of the TASBot block at Awesome Games Done Quick 2017, where a robot plays games via tool-assisted speedruns, including Super Mario 64 and Portal on an SNES via arbitrary code execution, and ending with a Twitch Plays segment. It showcases console exploits and creative hardware hacking.

A short demo of a playable Space Invaders game built inside Dwarf Fortress, with a downloadable map. It shows the game's mechanics used as a computing substrate.

A short clip demonstrating a phone-based social engineering trick in which a crying baby in the background is used to pressure a customer service rep. It shows how attackers exploit human sympathy rather than technical flaws.

CNLohr explains how he made an ESP32 produce valid LoRa packets without a LoRa radio, using aliasing and clever signal tricks. It walks through the RF math and shows how far the signals reach.

Mike of mikeselectricstuff shows his heavily modified old BBC Micro system in a 28-minute tour of 8-bit hardware archaeology.

Linus Akesson demonstrates the Commodordion, a fully functional 8-bit accordion built around Commodore 64 hardware with bellows made of floppy disks. He performs Scott Joplin's Maple Leaf Rag and tells the story of the build.

A brief clip of a Nook Simple Touch e-ink reader running PlayStation 1 games through an emulator with a hacked fast refresh rate.

Ben Heck modifies a keyboard with magnets, Hall effect sensors and an Xbox controller so the WASD keys give analog control. He walks through the hardware build.

Strange Parts spends four months, seven custom circuit boards and several disassembled iPhones adding a working headphone jack to an iPhone 7 in China. The build is documented in detail.

SethBling shows MarI/O, a program using neural networks and the NEAT genetic algorithm to learn to play Super Mario World. The description links the source code, the paper and background reading.

SethBling uses Super Mario World glitches to inject and run Flappy Bird code on an unmodified SNES, entering it purely with controller inputs. It was the first time a human completed this kind of exploit by hand.

A tool-assisted speedrun of Pokemon Yellow by MrWint that uses arbitrary code execution to push Game Boy hardware to its limits. Through crafted inputs it injects code and ends up running other programs, such as Tetris, inside the game.

The Lock Picking Lawyer tests the supposedly unpickable lock designs built by the Stuff Made Here channel. He looks for bypasses and weaknesses in the novel anti-picking mechanisms.

In the finale of Double Fine's Devs Play, speedrunner SMK demonstrates glitches and exploits that skip entire sections of Psychonauts while Tim Schafer and the dev team watch. The developers react to and discuss the bugs as they appear.

Engineer Stuff Made Here builds two new supposedly unpickable locks with different designs and sends them to the Lock Picking Lawyer to see whether they can be defeated. The video covers the novel anti-picking mechanisms.

SethBling performs the first credits warp in Super Mario World on a real SNES console, a glitch that plays the ending without beating Bowser. The run relies on pixel-perfect positioning and tools such as a helper ROM hack.

Cosmo's 22:38 Ocarina of Time speedrun, performed live at AGDQ 2013. The runner uses a complex exploit to skip much of the game.

MattKC fits a playable Snake game into a QR code by writing tiny x86 machine code and patching the ZBar scanner so it can run the decoded data.

A tool-assisted speedrun of Ocarina of Time at Summer Games Done Quick 2022, using TASBot and arbitrary code execution to reach an alternate ending in about 53 minutes. The run is introduced by its creators and followed by an interview.

Steve Mould messes with an automated phone bot by telling it to forget its previous prompts and give him a bolognese recipe. It is a short demo of prompt injection against an AI voice agent.

A LockPickingLawyer video in which a locksmith claims his videos are fake and challenges him; he responds by picking the lock. It is a short, typical LPL demonstration.

A tool-assisted speedrun of Pokemon Yellow on Game Boy Color that uses glitches and frame-precise inputs to make the game execute an arbitrary program. It was later obsoleted by an improved run.

LockPickingLawyer shows a Sentry fire safe being cut in half with a saw in a few minutes. It is a short demonstration that these safes offer little protection against a determined thief.

A demo of a raycasting 3D engine built entirely from in-game mechanisms in vanilla Factorio 0.17. It renders simple 3D scenes, producing a new frame every 45 game ticks, with the video sped up to compensate for low UPS.

A short Princeton CITP video describing cold boot attacks, where encryption keys remain in DRAM after power loss and can be recovered. It covers the attack against disk encryption such as BitLocker, FileVault and TrueCrypt.

A FIDO Alliance demo with Google and Microsoft engineers showing passkeys working across operating systems, browsers, and devices. It walks through registering and signing in on new devices.

A 11:29 complete speedrun of Quake on Nightmare difficulty by the Quake done Quick team, assembled from separately recorded runs refined since 1996.

A tool-assisted run of Brain Age by TASBot, shown at Awesome Games Done Quick 2016. The bot gives deliberately deranged answers while exploiting the game's error-prone recognition.

The BotHack NetHack bot wins the game for the first time with no cheats or human intervention, in a run lasting about 3.5 hours. The description links the source code and the dumplog.

Tested explains how Apple's Touch ID recognizes fingerprints, then tries to defeat it using fake fingers and prints, retracing methods claimed by a German computer club.

Eric Parker connects a fresh Windows XP machine to the internet in 2024 to see how quickly it gets infected with malware. He documents the dangers of running an unpatched legacy OS online.

A no-death, no-bomb run of Touhou 8 Imperishable Night Stage 6A on Lunatic difficulty, capturing all spellcards. The player describes how Eirin's dense, crisscrossing patterns work and how to manipulate the bosses' positioning.

LockPickingLawyer cuts through a LiteLok flexible bike lock with cable cutters in about 16 seconds, one of several videos defeating the product.

A Belgian bank-safety campaign video in which a supposed clairvoyant stuns people by revealing personal financial details, then shows he found them all online. It warns viewers to be careful about what they share and about online banking security.

Footage of the 2007 Aurora test, in which a cyberattack was used to destroy a large generator at a test facility in Idaho.

A tool-assisted speedrun of Super Mario World that achieves arbitrary code execution through frame-precise controller inputs, finishing in 2:25. It was also performed live on real hardware at AGDQ 2014.

A short video of someone playing Doom on a TI-83+ graphing calculator, with a link to the version used.