remote exploit

Charlie Miller and Chris Valasek present their DEF CON 23 talk on remotely compromising an unmodified Jeep, pivoting from the entertainment system to the vehicle's internal networks to send control messages. They aim to show the reality of car hacking.

WIRED's Andy Greenberg drives a Jeep on a highway while two hackers take control of it remotely over the internet. They manipulate the car and then cut the engine. The video accompanies the 2015 article on the Jeep Cherokee hack.

Ron Garret tells the story of the Remote Agent Experiment on NASA's Deep Space 1, where autonomous software controlled a spacecraft in 1999. He describes debugging Lisp code remotely from millions of miles away.

People Make Games investigates how Roblox relies on young, often child, developers to build its content while paying them very little. It covers Roblox's monetization model, the revenue split, and the harms to kids who make games on the platform.

FitMC tells how the Nocom exploit let griefers track players across Minecraft's oldest anarchy server, 2b2t, and the fallout that followed.

Craig Heffner's Black Hat 2013 talk on exploiting network surveillance cameras, covering how insecure their firmware is. It shows how easily such devices can be compromised.

An episode of Patriot Act with Hasan Minhaj on the cruise industry. It looks at worker exploitation, safety shortcuts, and how cruise lines sweep crime at sea under the rug.

Johnny Lee demonstrates head tracking with a Wii remote and a head-mounted pair of IR LEDs, so a screen acts like a window into a 3D scene as your head moves.

Netanel Rubin's 31C3 talk chains Perl's syntax quirks into a powerful remote code execution attack, taking down popular Perl-based projects.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where DRAM bit flips cause DNS requests to go to domains one bit off from the intended one. It shows how hardware faults can be exploited for hijacking without any software exploit.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where flipped bits in DRAM cause devices to contact domains that differ by one bit from legitimate ones. He shows how registering such domains can hijack traffic without exploiting any software bug.

A very short clip from The Matrix Reloaded in which Trinity runs nmap and then uses an SSH exploit. The scene is notable for showing a real tool.

A satirical Onion news segment announcing a Google feature that lets users opt out of Google's data collection by moving to a remote village without Google products or sunlight.

A People Make Games follow-up investigation into Roblox, built on stories from players and creators after the channel's first video. It covers the platform's treatment of young developers and its moderation.

Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware. It also touches on Intel ME and other security coprocessors.

Cosmo's 22:38 Ocarina of Time speedrun, performed live at AGDQ 2013. The runner uses a complex exploit to skip much of the game.

Nicholas Carlini of Anthropic talks at [un]prompted 2026 about how adversaries could misuse current LLMs for attacks. He shows recent models finding zero-day vulnerabilities in heavily tested software, including a SQL injection in Ghost.

Folding Ideas examines weird, algorithm-gamed children's content on YouTube, from automated toddler videos and educational spam to exploitative prank channels. It looks at how autoplay and recommendation systems reward this material.

The official trailer for The True Cost, a documentary on the fast fashion industry and who pays for cheap clothing. It touches on garment worker conditions and the Rana Plaza collapse.

A 36C3 talk that systematically evaluates OpenBSD's exploit mitigations, asking how effective they really are and what they cost in performance, complexity and inspectability. It challenges the project's security marketing.

A 1979 BBC Nationwide report asking whether word processors and networked microprocessors could end office commuting. It shows early word processing and a woman working from home, with surprisingly prophetic predictions.

Christopher Domas's Black Hat 2015 talk on a long-unnoticed x86 design flaw that lets an attacker reach System Management Mode, a ring below the OS. It explains how the legacy architecture allows universal privilege escalation and persistent, hard-to-detect malware.

A one-minute clip of slime mold placed on a map with food at the cities around Tokyo, growing a network that approximates the Tokyo-area railway system.

John Gruber interviews Craig Federighi and Greg Joswiak after WWDC 2020 about the Mac transition to Apple silicon, macOS Big Sur and iOS 14.

A live performance at AGDQ 2014 in which Super Mario World is made to execute arbitrary injected code, running other games like Pong and Snake on the cartridge. It is done through a TASBot feeding precise controller inputs.

CGP Grey argues that your brain treats a whole home as one room during lockdown, blurring work, rest and leisure. He recommends creating separate spaces and routines for different activities to stay balanced.

A 37C3 talk by Kaspersky researchers on Operation Triangulation, a zero-click iPhone attack that targeted their own colleagues. They describe capturing every stage of the chain, four zero-days and a previously unknown spyware active for years.

Google's short promo for Project Starline, a booth that shows a life-size, three-dimensional view of the person you are talking to. It presents the technology as a magic window for friends, families and co-workers who are far apart.

Kees Cook of Google gives a Linux Foundation talk on the Kernel Self Protection Project, which aims to harden Linux against attackers. He surveys threats, the state of available defensive technologies and a year of community progress.

A DeepSec 2010 conference talk by Ralf Philipp Weinmann on attacking the baseband processor of mobile phones rather than the application processor. It covers how open-source GSM base stations make malicious-tower attacks practical against neglected GSM stacks.

Microsoft Research demonstrates holoportation, which reconstructs and compresses high-quality 3D models of people in real time and sends them anywhere. With a HoloLens, remote participants appear as if present in your room.

A tool-assisted speedrun of Super Mario World that achieves arbitrary code execution through frame-precise controller inputs, finishing in 2:25. It was also performed live on real hardware at AGDQ 2014.

A short That Mitchell and Webb Look sketch about the perils of working at home, with an adult-humor punchline. It is British TV comedy.

Howard Abrams demonstrates, in an EmacsConf 2015 talk, how he uses org-mode's Babel and Tramp to configure and operate remote servers from a single document. Code blocks, their results and the explanatory text all live together.

SethBling uses Super Mario World glitches to inject and run Flappy Bird code on an unmodified SNES, entering it purely with controller inputs. It was the first time a human completed this kind of exploit by hand.

Numberphile visits Cliff Stoll, the man behind ACME Klein Bottles, and sees how he stores a thousand glass Klein bottles in a crawlspace under his house. A remote-controlled forklift fetches them.

John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome. He warns that CRISPR and related tools will make malicious genome hacks and targeted bioweapons feasible.

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

The 8-Bit Guy covers IBM's 1981 CGA graphics system, including how composite output and artifacting produced extra colors beyond the nominal palette. He argues CGA looked better in period than it does on RGB monitors.

Simon Peyton Jones explains nested data parallelism and Data Parallel Haskell, an approach to exploiting multicore and distributed hardware while keeping a simple single-control-flow programming model.