input devices

Peter Hutterer's linux.conf.au 2020 talk on creating libinput, the unified userspace input library, and the difficulties of handling the many quirks of input devices.

A DEF CON 19 talk by datagram introducing tamper-evident devices. It reviews how seals and similar products are designed and shows that they are often easily defeated, drawing on the DEF CON tamper-evident contest.

Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.

Cory Doctorow's 28c3 keynote argues that the copyright wars were just a skirmish and that the real fight will be a war on the general-purpose computer. He explains why locked-down devices, DRM and surveillance tools all depend on removing general computation.

A DEF CON 29 talk by Richard Henderson about encoding the EICAR antivirus test string into QR codes and barcodes and scanning them at real systems. Many systems that do not expect such input misbehave or collapse, including a parking garage system.

Dan Tentler's DEF CON 20 talk on odd things he found on the internet through Shodan, such as stoplights, power systems and other non-computer devices exposed online. It highlights how many devices need no credentials.

Mirabai Knight's PyCon 2013 talk on Plover, a free cross-platform stenography engine that lets people write at up to 240 WPM on ordinary hardware, including a demo of coding by steno.

Karen Sandler's keynote at Linux.conf.au 2012 on the software running inside medical devices such as her own pacemaker-defibrillator. She discusses the difficulty of learning what code runs in life-sustaining devices and why open source matters there.

David Sachs of InvenSense explains how gyroscopes, accelerometers and compasses work on their own and together, demonstrated on a modified Android handset. He covers sensor fusion algorithms and why rotation math such as Euler angles matters.

Karen Sandler, then Executive Director of the GNOME Foundation, talks at OSCON 2011 about the risks of proprietary, closed-source software in implanted medical devices like her own pacemaker-defibrillator.

Alex Russell's Chrome Dev Summit 2016 talk on building web experiences that work on slow, flaky networks and low-power devices. It argues developers should focus on the performance of real-world mobile hardware rather than desktop machines.

Dan Tentler shows a rapid-fire tour of insecure things found on the open internet using Shodan and his own scanning, from unprotected VNC endpoints to industrial controls. The emphasis is on how little security was considered before connecting them.

Cory Doctorow's Talks at Google lecture on the coming civil war over general-purpose computing. He argues that locked-down devices, DRM, and surveillance threaten user control of computers.

Chris Lonsdale presents a TEDx talk on how adults can learn a language in about six months, centering on immersion, comprehensible input and a practical learning methodology.

David MacKay's 2007 Google Tech Talk presents Dasher, a text-entry system driven by continuous gestures and a language model, reaching about 35 words per minute with one finger and 25 hands-free. It explains the information-theory reasoning behind the design.

Martin Kleppmann's QCon London 2018 talk on keeping data consistent in distributed systems without a central leader. It surveys CRDT algorithms for syncing devices and collaborative editing over peer-to-peer networks.

Peter Zeihan speaks at Iowa Swine Day 2022 on geopolitics, the end of globalization and agriculture. He argues that supply chains, energy and farm inputs are all about to be disrupted.

Ned Batchelder's PyCon 2012 talk gives a quick overview of what Unicode is, then focuses on what a Python programmer needs to handle text correctly. It presents the 'Unicode sandwich' strategy: decode bytes at input, work with Unicode internally, encode at output.

Ivan Krstic's Black Hat talk on Apple platform security, including the Find My design that uses elliptic curve key diversification to locate offline devices privately. It also covers hardware features such as the T2 chip and secure boot hardening.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where flipped bits in DRAM cause devices to contact domains that differ by one bit from legitimate ones. He shows how registering such domains can hijack traffic without exploiting any software bug.

Craig Heffner's Black Hat 2013 talk on exploiting network surveillance cameras, covering how insecure their firmware is. It shows how easily such devices can be compromised.

Karsten Nohl and Jakob Lell present BadUSB at Black Hat 2014, showing that USB controller firmware can be reprogrammed to impersonate other device types. They demonstrate system compromise and a self-replicating USB threat that current defenses cannot detect.

A Curry On talk by Lars Bak, known for V8 and Dart, on building a secure and robust IoT development platform. It discusses language and VM design choices for small devices.