mass

Psychologist Robert Epstein presents a Stanford EE380 colloquium on how internet algorithms such as search rankings can manipulate opinions, purchases and votes at massive scale. He also describes a new monitoring system for tracking such influence.

A DEF CON 22 panel with Rob Graham, Paul McMillan and Dan Tentler on the quirks of scanning the entire internet with masscan. They discuss how fast IPv4 can be scanned and what the results reveal.

Hyrum Wright shares lessons from five years of mass code migrations in Google's huge C++ codebase. He covers why to migrate, how hard it really is, and how Google updates core libraries and their users continually.

A PyData London 2018 talk on how JPMorgan scaled its Athena Python platform over ten years to about 35 million lines of code and thousands of developers. It covers infrastructure, tooling and culture for analytics and visualization at that scale.

Luis von Ahn, creator of CAPTCHA and reCAPTCHA, explains how small contributions from many people online can digitize books. He then introduces Duolingo as a way to translate the web while people learn languages.

A DEFCON 20 panel with NSA whistleblower William Binney, journalist James Bamford and ACLU lawyers on the NSA's mass collection of communications and its conflict with the Constitution.

Moxie Marlinspike's DEF CON 18 talk on changing threats to privacy argues that surveillance arrived through convenient services and network effects, so opting out is not a real solution. It also includes his framing of getting social democracy rather than the fascism people feared.

Frank Abagnale, the real subject of Catch Me If You Can, speaks at Google about his life as a con man turned FBI fraud and cybersecurity expert, including advice on fraud, breaches and credit cards.

The Grugq's Hack In The Box 2012 talk on operational security for hackers, drawing on hacker indictments and counter-intelligence research. It reviews OPSEC goals and methods for avoiding detection and arrest, with case studies of how hackers got caught.

Dan Geer's Black Hat 2014 keynote argues that cybersecurity is a matter of power and policy rather than wishful thinking. He covers surveillance, the vulnerability market, software liability and privacy as the capacity to misrepresent yourself.

Cory Doctorow's 28c3 keynote argues that the copyright wars were just a skirmish and that the real fight will be a war on the general-purpose computer. He explains why locked-down devices, DRM and surveillance tools all depend on removing general computation.

Zoz's DEF CON 22 talk on operational security in the age of pervasive surveillance. He shows how hard it is to avoid mistakes even for people who should know better.

Cory Doctorow's Talks at Google lecture on the coming civil war over general-purpose computing. He argues that locked-down devices, DRM, and surveillance threaten user control of computers.

Technosociologist Zeynep Tufekci argues that the machine-learning systems used to serve ads also decide what political and social information people see. She explains how opaque algorithms can nudge, segment and manipulate users, and warns that the real danger is powerful people using AI to control populations.

A DEF CON 23 talk showing how weak controls in electronic death registration systems let someone virtually kill a person and obtain a real death certificate, with consequences for their identity and life.

Poul-Henning Kamp's FOSDEM 2014 talk is a hypothetical account of how an intelligence agency such as the NSA would sabotage open source software, standards and online discussion. It covers Skype's history, OpenSSL and psyops against standards.

Kim Nilsson presents his investigation into how Mt. Gox was hacked and mismanaged, tracing the finances and the missing bitcoins. It was given at the 2017 Breaking Bitcoin meetup.

Aral Balkan's re:publica 2015 talk argues that people are the product of surveillance-based business models. It makes an ethical case against data monopolies and for privacy as a human right.

A 29C3 panel with whistleblowers Jesselyn Radack, Thomas Drake and William Binney. They talk about what happens when exposing secret government power becomes a crime, and about surveillance abuses.

Dick Hardt's fast-paced OSCON keynote on Identity 2.0 and the move toward user-centric digital identity. It is also famous for its rapid-fire, many-slide presentation style.

At DEF CON 27, Nina Kollars tells how buying Nespresso capsules on eBay led her to investigate fraudsters reselling goods bought with stolen credit cards. She describes her non-technical tracking and reporting efforts.

Moxie Marlinspike's DEF CON 18 talk argues that privacy threats have shifted from centralized state databases like TIA to corporate data collection by companies like Google, despite wins in strong cryptography and decentralization.

Patricia Aas's EuroBSDCon keynote is about ethics for people who build software, covering how the tech industry got to its current state and what engineers can do about it. It steps back from technical detail to the bigger picture.

Eben Moglen speaks at NYU in 2010 about freedom in the cloud, arguing that centralized services and handing over personal data and server logs erode privacy and freedom. The talk lays out the motivation for FreedomBox, a personal server for your own data.

Tesla's 2020 Battery Day event, with a company update and a keynote on new cell design, manufacturing, vertical integration and cheaper lithium and materials. It ends with the Plaid Model S and a Q&A.

A DEF CON 30 talk by Sam Bent, a former darknet vendor, on operational security when using Tor and the darknet. He applies the hacker mindset to staying anonymous and avoiding capture.

Adrian Crenshaw's DEF CON 22 talk gives an overview of Tor and I2P, then goes through real cases where darknet users were caught. These include Silk Road and its operator.

Alexander Nix of Cambridge Analytica presents at the 2016 Concordia Summit on using big data, psychographic profiling and behavioral microtargeting in elections.

Moxie Marlinspike speaks at Next Generation Threats 2014 about the challenges of encrypted communication and how Signal addresses them. He also draws on American action movies as narrative for secure communications.

Journalist Matthew Cole's Black Hat 2013 talk on the CIA's operational security failures in the 2003 Milan kidnapping. Phone and location metadata exposed the team and led to arrest warrants.

Karla Burnett presents real phishing campaigns run against a Bay Area tech company, including conversion rates and how existing protections were bypassed. She argues for evidence-based techniques to prevent credential phishing, not just mitigate it.

Jayson E. Street's DEF CON 19 talk shows photos from real security engagements where he was already inside client facilities, illustrating how social engineering and physical intrusion can cause huge losses. For each attack he also explains what defenses would have stopped him.

A 37C3 talk by Kaspersky researchers on Operation Triangulation, a zero-click iPhone attack that targeted their own colleagues. They describe capturing every stage of the chain, four zero-days and a previously unknown spyware active for years.

An Intelligence Squared debate in which Will Self argues for Brave New World and Adam Gopnik for Nineteen Eighty-Four as the better dystopian warning. It includes acted excerpts and is chaired by Jonathan Freedland.

Eli Pariser's TED talk argues that personalized web services trap users in filter bubbles, limiting exposure to challenging information. He says this is bad for individuals and for democracy.

Matthew Cole's Black Hat 2013 talk on operational security failures by CIA operatives. It covers the Abu Omar case and how sloppy tradecraft with cell phones exposed officers through call records and metadata.

Eben Moglen's re:publica 2012 talk argues that media which spy on and data-mine the public threaten freedom of thought, and that free technology and free culture are needed to protect it.

Ivan Krstic's Black Hat talk on Apple platform security, including the Find My design that uses elliptic curve key diversification to locate offline devices privately. It also covers hardware features such as the T2 chip and secure boot hardening.

Poul-Henning Kamp's FOSDEM 2014 talk presents a fictitious NSA program called ORCHESTRA, satirizing how intelligence agencies could influence startups and open source. It is a humorous but pointed look at surveillance and subverted software.

Designer Thomas Thwaites describes his attempt to build a toaster from scratch, from mining ore and deriving plastic from oil. It is a short TED talk on how much civilization a simple object depends on.