knowledge

Medlife Crisis asks whether academic research should sit behind paywalls, covering publisher profit margins, unpaid reviewers, Sci-Hub and Aaron Swartz. It includes an interview with Sci-Hub founder Alexandra Elbakyan.

WIRED has UCLA professor Amit Sahai explain zero-knowledge proofs to a child, a teen, a college student, a grad student and an expert. Each round goes deeper into the cryptography and why it matters.

Tom Scott races a London black-cab driver who has memorized The Knowledge against a phone GPS across the city, comparing local expertise to navigation software.

Alexander Rose of the Long Now Foundation describes the design and construction of the 10,000 year clock conceived by Danny Hillis. He covers the project's history, methods, and how different cultures built things to last millennia.

David Rock gives a Google Tech Talk based on his book Your Brain at Work, using neuroscience to explain why focus and productivity are hard at the office. He gives strategies for managing mental energy and distraction.

Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain. He explains key hierarchies and how data can stay safe even in adversarial clouds.

3Blue1Brown explains the math and mechanics behind Bitcoin visually: ledgers, digital signatures, proof of work and the blockchain, building up a decentralized payment system from first principles.

Moxie Marlinspike's BlackHat 2011 talk examines weaknesses of SSL and the certificate authority system and proposes Convergence, a decentralized notary approach with trust agility.

Mike Hearn's talk at the 2012 London Bitcoin Conference on the future of Bitcoin, new applications and rebuilding the banking system. He covers lesser-known protocol features such as contracts, escrow and scripting.

Kim Nilsson presents his investigation into how Mt. Gox was hacked and mismanaged, tracing the finances and the missing bitcoins. It was given at the 2017 Breaking Bitcoin meetup.

Barely Sociable presents a case that Bitcoin creator Satoshi Nakamoto is cryptographer Adam Back. It uses interview clips and circumstantial evidence, and also touches on the block size dispute.

Moxie Marlinspike's DEF CON 19 talk on the weaknesses of SSL and the certificate authority system. He explains how CA trust became a problem and proposes an alternative that removes the CA oligopoly without reducing security.

Coffeezilla gives a comprehensive history of Tether, the stablecoin issued by a company controlled by the owners of Bitfinex. He lays out accusations that it is not fully backed.

Andreas Antonopoulos explains how to tell Bitcoin-style blockchains from corporate blockchain hype. He argues the goal should be de-banking everyone rather than banking the unbanked.

A documentary from Swan Bitcoin exploring Bitcoin's relationship with energy, featuring Lyn Alden and others, and arguing that mining is a net positive for the environment and not wasteful.

A step-by-step animated explanation of how SHA-256 works, from padding and message schedule to the compression function and final hash, with source code for the animations.

Moxie Marlinspike speaks at Next Generation Threats 2014 about the challenges of encrypted communication and how Signal addresses them. He also draws on American action movies as narrative for secure communications.

Peter Rizun and Andrew Stone present results of tests running 1 GB blocks on a Bitcoin test network at Scaling Bitcoin Stanford. The talk argues for big-block scaling and discusses its consequences.

Dr Mike Pound of Computerphile shows how a modern laptop can crack Enigma, using a ciphertext-only attack based on an older paper. He compares it with the tooling in CrypTool.

Brian Warner, author of magic-wormhole, presents the tool at PyCon 2016. He explains how a few secret words let two computers securely transfer files, covering the cryptography (NaCl, SPAKE2) and library use.

Rob Pike presents Upspin at Gopherfest 2017, an experimental framework for naming and sharing files and data securely and uniformly across a global namespace. It is a project written in Go rather than about Go.

Troy Hunt argues that even static, non-secret websites need HTTPS, demonstrating attacks such as injected content and China's Great Cannon. It accompanies his blog post of the same name.

Joe Grand recounts being hired to hack a Trezor One hardware wallet and recover $2 million of cryptocurrency. He describes three months of experimentation, voltage glitching, failures and high-stakes attempts with only one chance to get it right.

Ivan Krstic's Black Hat talk on Apple platform security, including the Find My design that uses elliptic curve key diversification to locate offline devices privately. It also covers hardware features such as the T2 chip and secure boot hardening.

The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits. They explain how the PS3 was cracked after Sony removed Other OS.

Moxie Marlinspike's 36C3 talk examines why distributed and decentralized technology is hard to build into consumer products, from the perspective of developing Signal. It argues that ecosystems move slowly and federation causes problems.

Scott Arciszewski's DEF CON 26 Crypto and Privacy Village talk critiquing the JOSE standards (JWT, JWS, JWE) and showing how to design cryptographic tokens more safely.

Tom Caputi presents the design of native encryption for ZFS at the OpenZFS Developer Summit, including design decisions and how authentication uses checksum fields.

A panel conversation with Stewart Brand at Ethereum's Devcon4, where he recounts his life and work 'hacking civilization' and discusses the role of institutions in decentralization.

David Mazieres presents the Stellar Consensus Protocol at Google, introducing federated Byzantine agreement. The model lets participants choose whom to trust rather than assuming fixed membership.

Dan Callahan presents Mozilla Persona, a decentralized, cross-browser authentication system that removes site passwords, at PyCon 2013. He explains how the protocol works and how to add it to a Python site.

The fail0verflow 27C3 talk on breaking PS3 security, covering how Sony's implementation failed, including its ECDSA mistakes.

Rick Falkvinge responds to viewer feedback on his earlier Lightning Network video and raises a flaw he says was not previously discussed. The main thread is the network's unsolved routing problem.

Veritasium tells the story of the XZ backdoor, how a patient attacker became maintainer and nearly compromised SSH on Linux systems. It also covers free software history and how encryption in SSH works.

A More Perfect Union report from a small Texas town next to a large Bitcoin mining facility, where residents describe constant noise and health problems. It looks at the political and corporate power behind the facility.

Tiffany Fong's phone interview with Sam Bankman-Fried shortly after FTX filed for bankruptcy. He discusses the alleged backdoor, FTT collateral, political donations, and his legal position.

Ian Miers' Devcon4 talk on failures in on-chain privacy for Bitcoin and Ethereum. It covers attacks on transparent and decoy-based schemes, including how Monero-style privacy can be eroded over repeated transactions.

A CNBC interview in which Deirdre Bosa talks with Tether's CTO and general counsel about the company's role in crypto and the future of stablecoins.

A Real World Crypto 2017 talk by a Google engineer on using private set intersection to match ad views with in-store purchases. It describes privacy-preserving matching that avoids exposing personal transactions.

Ali Rahimi accepts the NIPS 2017 Test of Time Award and argues that machine learning has become alchemy, with practice running ahead of understanding.