input validation

Peter Hutterer's linux.conf.au 2020 talk on creating libinput, the unified userspace input library, and the difficulties of handling the many quirks of input devices.

Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.

Stavros Korokithakis gives a FOSDEM 2018 talk on how hard it is to validate email addresses properly, taking a tour through RFC 5321.

A DEF CON 29 talk by Richard Henderson about encoding the EICAR antivirus test string into QR codes and barcodes and scanning them at real systems. Many systems that do not expect such input misbehave or collapse, including a parking garage system.

Mirabai Knight's PyCon 2013 talk on Plover, a free cross-platform stenography engine that lets people write at up to 240 WPM on ordinary hardware, including a demo of coding by steno.

Ricardo Signes' YAPC::Asia Tokyo 2011 talk on the legends and horrors of email: how messy the SMTP and email standards are in practice. The first few minutes are Perl-specific, but the rest applies to anyone handling email.

Stuart Halloway shows how Clojure's spec library lets you build programs that are both agile and robust. He covers declarative, predicate-based specification layered on interactive REPL development.

Chris Lonsdale presents a TEDx talk on how adults can learn a language in about six months, centering on immersion, comprehensible input and a practical learning methodology.

David MacKay's 2007 Google Tech Talk presents Dasher, a text-entry system driven by continuous gestures and a language model, reaching about 35 words per minute with one finger and 25 hands-free. It explains the information-theory reasoning behind the design.

A lightning-style conference talk by Ricardo Signes about the horrors of email: its protocols, formats and decades of accumulated quirks. It is delivered with a humorous horror theme to show why handling email correctly is harder than it looks.

Peter Zeihan speaks at Iowa Swine Day 2022 on geopolitics, the end of globalization and agriculture. He argues that supply chains, energy and farm inputs are all about to be disrupted.

Ned Batchelder's PyCon 2012 talk gives a quick overview of what Unicode is, then focuses on what a Python programmer needs to handle text correctly. It presents the 'Unicode sandwich' strategy: decode bytes at input, work with Unicode internally, encode at output.

Chris McCord's ElixirConf EU 2023 keynote tracing LiveView's evolution from simple form validation to full apps, with code examples and live demos of what 1.0 will offer.