penetration testing

Deviant Ollam, head of a physical penetration testing team, presents tactics for getting into buildings, from bypassing door levers with a wire to defeating bank doors. He argues that physical security is often surprisingly weak.

Sandi Metz's RailsConf 2013 talk offers practical guidelines for deciding what to test and how, so tests stay cheap and stable. She argues for testing the public interface rather than implementation and using mocks appropriately.

Will Wilson explains autonomous testing: using deterministic simulation and fuzzing, building on FoundationDB's approach, to test software continuously. It sets out the ideas behind his later company Antithesis.

John Hughes, co-creator of QuickCheck, talks about property-based testing of hard systems. He shows production examples where it found very low-level bugs, including issues in the CAN bus standard.

Hillel Wayne's PyCon 2018 talk on testing beyond pytest and mypy. It introduces property-based testing with the Hypothesis library and design-by-contract with dpcontracts, and shows how to combine them with an existing test suite.

Alen Ladavac of Croteam talks about continuous integration and automated testing pipelines in games, with case studies from The Talos Principle and Serious Sam.

Ted Young of LightStep proposes trace testing, using distributed tracing data to unify testing and observability. The KubeCon-era talk argues for testing against trace data rather than treating tests and monitoring separately.

Destin of Smarter Every Day goes behind the scenes at the 23andMe lab to show how genotyping works. He also discusses DNA testing and privacy.

Deviant Ollam shows that most physical attacks on doors bypass the lock, with photo and video examples of how doors, frames and hardware get defeated. It is a physical security talk from Shakacon.

Jayson E. Street's DEF CON 19 talk shows photos from real security engagements where he was already inside client facilities, illustrating how social engineering and physical intrusion can cause huge losses. For each attack he also explains what defenses would have stopped him.

Will Wilson of FoundationDB explains how the team tested their distributed database using deterministic simulation. By running the whole system in a simulator with injected faults and reproducible seeds, they could find rare concurrency and network bugs.

Gary Bernhardt's RubyConf 2012 talk on testing in isolation without mocking everything. It goes through behavior versus data, mutation versus immutability, and how a functional core with an imperative shell yields natural isolation and parallelism.

Veritasium tells how Kodak film was fogged by radioactive fallout from the first atomic tests, letting the company detect nuclear testing before anyone announced it. The video also covers the deal to keep it quiet and how fallout contaminated packaging.

MedCram's Dr. Roger Seheult summarizes a discussion with Dr. Michael Mina on cheap, paper-based at-home COVID-19 antigen tests. It explains why lower sensitivity can still work well for screening infectious people.

Raymond Hettinger's PyBay 2018 keynote on preventing, finding and fixing bugs under a time budget. He covers testing practice, type annotation tradeoffs and the limits of coverage metrics.

GreatScott! tests ProLogium lithium ceramic batteries, a solid-state design. He measures their volumetric and gravimetric energy density, compares them to Li-ion and LiPo, and runs durability tests at the end.

John Oliver's Last Week Tonight segment on standardized testing in American schools. It covers how tests drive school funding, the achievement gap, and the testing industry around companies like Pearson.

Tested explains how Apple's Touch ID recognizes fingerprints, then tries to defeat it using fake fingers and prints, retracing methods claimed by a German computer club.

J. B. Rainsberger argues that large integrated tests are a scam: they are slow, fail opaquely, and give a false sense of coverage. He advocates focused collaboration and contract tests at boundaries instead.

Misko Hevery's Clean Code Talk shows how to use object-oriented techniques such as polymorphism to remove repeated if and switch statements. The result is code that is easier to test, understand and maintain.

Builder Matt Risinger freezes water-filled copper and PEX piping capped with SharkBite fittings to see which survives. The video compares how each pipe type handles freezing.

Deviant Ollam's two-hour conference talk explains how elevators work, from the pit and buffers to the car top, controller logic and access-control features. It shows how this knowledge can be used for optimization and for bypassing building security.

Deviant Ollam and Howard Payne give an in-depth DEF CON 22 explanation of how elevators work, from the pit to the penthouse. It covers their control modes and how pen testers use elevators to bypass building security.

LockPickingLawyer cuts through a LiteLok flexible bike lock with cable cutters in about 16 seconds, one of several videos defeating the product.

Asian Boss interviews Professor Kim Woo-joo of Korea University Guro Hospital about COVID-19 in early 2020. He covers masks, testing, aerosol spread, and South Korea's response.

Veritasium takes an IQ test and examines what IQ measures, its history including military use and eugenics, its controversies, and how it correlates with life outcomes. Experts including Cecil Reynolds and Stuart Ritchie contribute.

A doctor from Medlife Crisis explains in under three minutes why even a rich patient should not simply order every medical test, touching on pre-test probability and Bayesian reasoning. False positives make blanket testing counterproductive.

Linus Tech Tips tests a large batch of DisplayPort cables with a Total Phase cable tester, checking bandwidth and signal quality. Many cables did not meet their claimed specs.

A short news clip of a test in which a Tesla hits a child-sized dummy while a car equipped with Luminar's lidar stops in time.

John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome. He warns that CRISPR and related tools will make malicious genome hacks and targeted bioweapons feasible.

Ian Cooper's DevTernity talk revisits Kent Beck's original TDD ideas and shows where misunderstandings crept in. It argues tests should target behaviors through public interfaces rather than implementation details, so suites support refactoring instead of resisting it.

Gil Tene of Azul Systems explains common pitfalls in measuring latency and response time, including why averages mislead and the problem of coordinated omission. He introduces open source tools like HdrHistogram for better measurement and reporting.

A Medlife Crisis video by cardiologist Rohin Francis on overdiagnosis and over-screening. It explains how detecting more disease does not necessarily mean saving more lives, and covers harms such as unnecessary treatment.

SQLite creator Richard Hipp gives a history of SQLite and explains where it shines as a database at the edge of the network with no DBA. He covers long-term support, testing and how it is used in products.

America's Test Kitchen tests eight carbon-steel skillets to find the best one, asking whether a single pan can replace stainless, cast iron and nonstick. It names a winner and covers how the pans perform.

Adam Neely tests the claims for tuning to A=432 Hz by trying the unusual tuning systems that its proponents' numerology requires. He compares how they sound against standard tuning and temperaments.

A short video of a Boeing 777 wing being tested to destruction, finally breaking at 154 percent of its designed limit load. The wing is flexed upward until it fails.

Isao Hashimoto's time-lapse map shows all 2053 nuclear explosions between 1945 and 1998, with each nation getting a blip and a running tally. Each second represents one month.

Tantacrul critiques the UX and UI of Steinberg's Dorico music notation software, comparing it with Sibelius and user testing it with real musicians alongside his own attempt to compose in it.

Veritasium's Derek Muller spends an hour in a silent, dark anechoic chamber at BYU to test the claim that 45 minutes is the most anyone can bear. He reports on his experience and other people's reactions.