reverse engineering

Chris Domas's DEF CON 23 talk on psychological warfare against reverse engineers. He builds code whose disassembly and control flow graphs mislead, intimidate and demoralize anyone analyzing it.

Michael Steil's 27c3 talk on reverse engineering the MOS 6502 from die shots into a transistor-level simulation, as in the Visual6502 project. It covers going from chip package to a digital model.

Hamish Coleman describes reverse engineering the keyboard controller in a Thinkpad and reflashing it with custom firmware. He covers how Lenovo secures its firmware, and his ongoing work on the protocol between the BIOS and the vendor flash tool.

Ken Shirriff walks through how to reverse engineer integrated circuits from die photos, using famous chips as examples, in a Hackaday SuperConference talk.

Alex Ionescu's OffensiveCon 2019 keynote on how reverse engineering is done on Windows without conventional reversing. It covers legal ways to obtain names of variables, exported functions and structures.

Christopher Domas's REcon 2013 talk on dynamic binary visualization for reverse engineering. He shows how rendering binary data as interactive visual maps and trigraphs reveals structure that hex dumps hide, leading to his Cantor.dust tool.

A reverse engineer walks through fixing a ten-year-old bug in Guitar Hero III without access to its source code, using a disassembler and decompiler. It is technical but explained step by step.

A 36C3 talk on the AMD Platform Security Processor, an undocumented ARM core inside AMD CPUs that runs before the main processor. The speakers present their reverse engineering of its internals.

A short clip demonstrating a phone-based social engineering trick in which a crying baby in the background is used to pressure a customer service rep. It shows how attackers exploit human sympathy rather than technical flaws.

Glenn Vanderburg asks whether software development can be real engineering, surveying other engineering disciplines and decades of programming experience. He envisions what a software engineering worthy of the name might look like.

Glenn Vanderburg argues at the O'Reilly Software Architecture Conference that software development is an engineering discipline, even if immature. He contends the discredited body of knowledge called software engineering has led people to wrongly reject the label.

A Tom Scott guest video by Grady Hillhouse of Practical Engineering on the 1981 Hyatt Regency walkway collapse. A seemingly minor change to the support design led to catastrophic failure, which is why the case is taught as a lesson to check and double-check everything.

Tom Murphy (suckerpinch) shows 'reverse emulation', using a Raspberry Pi in an NES cartridge to give an unmodified NES new abilities such as playing SNES games. The video starts in a strange way and gets stranger.

Christopher Domas presents his Cantor Dust tool at Derbycon 2012, a 3D visual approach to reverse engineering binaries by visualizing their structure dynamically.

A look inside Dr Abrasive's lab as he engineers a flash-card replacement for the Sega Saturn optical drive after cracking its CD protection 20 years on.

A 33c3 talk by marcan on reverse engineering the PS4 hardware to run Linux with 3D acceleration. It covers how the console differs from a PC and includes a story about tunneling PCIe over RS-232.

A 34C3 talk on the security architecture of the Nintendo Switch and the early progress breaking it. It introduces the Switch's custom OS and software stack, with the hackers' reverse-engineering and glitching work.

Glenn Vanderburg argues at Lone Star Ruby Conference 2010 that university-style software engineering does not work, and asks what real software engineering would look like. He revisits the waterfall model and what engineering means in other fields.

Musician Thoj performs a live looping session on the Teenage Engineering OP-1 synthesizer, building a deep house track layer by layer.

Christopher Domas's Derbycon 2015 talk on the M/o/Vfuscator, a compiler that emits only x86 mov instructions, showing mov is Turing complete. It explains how a full machine is built from mov and why the output is a nightmare to reverse engineer.

Jayson E. Street's DEF CON 19 talk shows photos from real security engagements where he was already inside client facilities, illustrating how social engineering and physical intrusion can cause huge losses. For each attack he also explains what defenses would have stopped him.

Practical Engineering explains Mechanically Stabilized Earth, where layers of reinforcement make soil strong enough to hold heavy loads, shown with a sand structure supporting a car. It notes that MSE walls are everywhere in infrastructure.

Bryan Cantrill's Craft 2019 talk on the ethical dilemmas software engineers face as software eats the world. He explores cases where engineering thinking conflicts with the law or personal morals, including Facebook's news feed experiments.

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

Frank Abagnale, the real subject of Catch Me If You Can, speaks at Google about his life as a con man turned FBI fraud and cybersecurity expert, including advice on fraud, breaches and credit cards.

Christopher Domas presents at Black Hat 2017 how page fault analysis and processor fuzzing can exhaustively search the x86 instruction set. The talk uncovers undocumented instructions and hardware bugs and shows limits of disassemblers.

Christopher Domas presents research at DEF CON 26 showing a hidden alternate instruction set and undocumented hardware backdoor in some x86 processors, found on a third-party CPU. He uses it to ask how feasible wider hardware backdoors are.

A DEF CON 21 talk by Adam Laurie and Zac Franken on decapping chips, covering how to remove chip packaging and image the die to read out contents such as ROM.

Christopher Domas's DEF CON 26 talk on secret processor registers that vendors reserve for third parties holding trusted keys. He examines how users are locked out of parts of their own CPUs.

A 32C3 talk dissecting Red Star OS, North Korea's state-built operating system. The speakers explain its internals and how it invades users' privacy, including file watermarking.

The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits. They explain how the PS3 was cracked after Sony removed Other OS.

Christopher Domas's Black Hat talk demonstrates a hardware backdoor in a third-party x86 processor, a hidden core that grants root from userland. He uses it to discuss how feasible broader hardware backdoors might be.

The fail0verflow 27C3 talk on breaking PS3 security, covering how Sony's implementation failed, including its ECDSA mistakes.

Practical Engineering gives a short introduction to concrete, covering the difference between concrete and cement, the ingredients, and reinforcement. It includes a hydraulic press demonstration of compressive strength.

Real Engineering examines whether greening the Sahara could draw down carbon and slow climate change. It concludes that the effort would be enormously costly and that changes in albedo and other effects undercut the climate benefit.

The introductory lecture of Richard Hamming's capstone course, The Art of Doing Science and Engineering: Learning to Learn. It focuses on style of thinking and on educating rather than training, using technical material only as illustration.

A Plogue developer shows the custom electronic test rigs built to measure the Sega Mega Drive/Genesis sound chip (YM2612) for the chipsynth MD emulation. It covers the years of testing and reverse engineering needed to reproduce the chip's quirks accurately.

Aamer Rahman of Fear of a Brown Planet delivers a stand-up routine on so-called reverse racism, arguing about power imbalance and why criticism of a dominant group is not equivalent to racism.

Kurzgesagt's animated explainer on CRISPR gene editing, covering how the technology works and what it could mean for curing disease, designer babies and aging. It frames genetic engineering as an irreversible change coming to humanity.

Stuart Armstrong of the Future of Humanity Institute gives an Oxford physics talk on what exploratory engineering suggests about the Fermi paradox. He argues that von Neumann probes and Dyson spheres are plausibly buildable and asks what traces advanced civilizations would leave.