reverse engineering

Christopher Domas's REcon 2013 talk on dynamic binary visualization for reverse engineering. He shows how rendering binary data as interactive visual maps and trigraphs reveals structure that hex dumps hide, leading to his Cantor.dust tool.

A 37C3 talk on how a series of Polish electric trains stopped working after servicing by an independent company. The speakers explain how train control systems work and how they reverse-engineered the software lockouts.

Glenn Vanderburg asks whether software development can be real engineering, surveying other engineering disciplines and decades of programming experience. He envisions what a software engineering worthy of the name might look like.

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

Frank Abagnale, the real subject of Catch Me If You Can, speaks at Google about his life as a con man turned FBI fraud and cybersecurity expert, including advice on fraud, breaches and credit cards.

A DEF CON 21 talk by Adam Laurie and Zac Franken on decapping chips, covering how to remove chip packaging and image the die to read out contents such as ROM.

JPL's David Cummings presents at the 2025 Flight Software Workshop how the team diagnosed and fixed the 2023 Voyager 1 anomaly from billions of miles away. It walks through the flight computer and the memory fix.

A Rubber Duck Engineering episode on the years before Flutter, covering web projects and three JavaScript frameworks that influenced it, and the early DOM-based, network-loaded Flutter.

Ray Kurzweil presents his book How to Create a Mind at Google, on reverse engineering the brain and using that understanding to build intelligent machines. He shows his graphs of exponential technological progress.

Lex Fridman interviews Navy pilot David Fravor, a primary witness of the 2004 Tic Tac UFO encounter, about the sighting, military aviation and aerospace engineering. The conversation runs close to four hours.

A feature-length film by the Makani team chronicling their thirteen-year effort to build energy kites that harvest wind power, with footage from test sites in Hawaii, California and Norway. It shows the engineering, the team and the eventual shutdown.

Sacha Arnoud, Waymo's Director of Engineering, gives a lecture in MIT's 2018 deep learning for self-driving cars course on the rise of machine learning in autonomous vehicles. It covers how Waymo uses deep learning and how it handles tricky driving situations.

Moishe Lettvin, a former Google engineer, shares lessons from 250 interviews and his time on the hiring committee. He tells how the committee given anonymized packets, including its own, would hire almost none of them.

John Carmack speaks at UMKC's 2017 commencement event about the difficulties of VR, especially end-to-end latency across hardware and software. He covers why latency and buffering matter and how nausea is addressed.

Destin Sandlin of Smarter Every Day gives a talk to an aerospace audience, comparing how Apollo was engineered and managed with NASA's Artemis program. He raises concerns about unresolved details, the number of launches and in-orbit fuel transfer needed to reach the Moon, and the loss of institutional knowledge.

John Carmack's long QuakeCon 2012 keynote, a free-ranging talk covering software engineering, game platforms, game streaming, and his early head-mounted display and VR work.

Historian and journalist Gwynne Dyer gives a long UBC talk on how climate change will reshape international politics. He covers food, borders, refugees and the possibility of unilateral geoengineering by affected nations.

Joran Dirk Greef's Systems Distributed '23 talk on TigerStyle, the engineering methodology behind TigerBeetle. It covers designing safer systems in less time through up-front design, assertions, and deterministic simulation.

Matt Parker's Royal Institution talk based on his book Humble Pi, covering everyday mathematical mistakes and spurious patterns that went wrong in engineering and software. It mixes stand-up comedy with stories of coincidence and error.

An episode of the Well There's Your Problem podcast on five-over-one buildings, wood-frame floors atop concrete bases, with engineering background and some oil industry news. It is long, rambling and has NSFW language.

Engineer Sandy Munro joins an Autoline panel for a 100-minute deep dive on Tesla's design and manufacturing, including the Model 3 and its motors.

A 105-minute technical deep dive from Noise In Space evaluating whether Starlink satellites could work as synthetic aperture radar. It covers SAR signal-to-noise, amplifiers, antennas, duplexing, phased array beamforming and simulations of V2 Mini and V3 satellites.

A two-hour episode of Fall of Civilizations on the Nabataeans, from humble desert traders to masters of Petra, and what finally brought down their empire.

Deviant Ollam's two-hour conference talk explains how elevators work, from the pit and buffers to the car top, controller logic and access-control features. It shows how this knowledge can be used for optimization and for bypassing building security.

The Grugq's Hack In The Box 2012 talk on operational security for hackers, drawing on hacker indictments and counter-intelligence research. It reviews OPSEC goals and methods for avoiding detection and arrest, with case studies of how hackers got caught.

A DEF CON 26 talk by investigative journalists and hackers on the fake science industry, with bogus conferences and predatory journals that give studies false credibility. It draws on a large investigation into the money behind them.

A Google Tech Talk by Steve Weis that introduces modern cryptography and its use in practice and at Google. It covers proofs of security and security definitions and a special topic. HN commenters treat it as a talk on verifiable electronic voting.

Okta developer advocate Nate Barbettini explains OAuth 2.0 and OpenID Connect in a roughly hour-long talk. It starts from the problems the protocols solve and walks through the flows. The description notes the implicit flow material is now out of date.

Bryan Cantrill's Papers We Love talk on FreeBSD Jails and Solaris Zones, tracing how OS-level virtualization grew out of chroot and the limits of the traditional UNIX security model.

Deviant Ollam and Howard Payne give an in-depth DEF CON 22 explanation of how elevators work, from the pit to the penthouse. It covers their control modes and how pen testers use elevators to bypass building security.

A HOPE X talk giving an in-depth explanation of how elevators work, from their history in hacker culture to using their control systems to bypass building security. It covers features and abilities of elevators that most people never see.

David Kriesel's 31C3 talk, in German, on the discovery that Xerox scanner-copiers silently replace digits and letters in scanned documents. He explains how the bug stayed unnoticed in the wild for years.

Bob Beck of OpenBSD describes the first month of LibreSSL, the fork aimed at cleaning up OpenSSL, including oddities found in the code base and why it was cleaned rather than audited cryptographically.

A long video essay on MyHouse.wad, a Doom II mod uploaded by an anonymous user that hides unsettling secrets in its walls. It tells the story of the map, its mystery and its liminal horror.

James Mickens's 2015 Harvard colloquium argues that browsers are bloated and insecure because feature races trump clean interface design. He presents a cleaner, more secure browser architecture (Atlantis) with a much smaller API surface.

A GDC 2018 talk by Valve's John McDonald on VACNet, a deep learning system that analyzes CS:GO gameplay to detect cheaters. It covers how the model is trained on human-reviewed Overwatch cases and how its output feeds human moderation.

A 36C3 talk by Bunnie Huang arguing that open source is necessary but not sufficient for trustworthy hardware, because verifying hardware is destructive and so creates a time-of-check/time-of-use gap. It surveys supply chain security and classes of hardware attacks, and presents the Betrusted approach to narrowing that gap.

Moxie Marlinspike's Black Hat talk presenting sslstrip, which defeats SSL in practice by intercepting the http-to-https redirect.

In the finale of Double Fine's Devs Play, speedrunner SMK demonstrates glitches and exploits that skip entire sections of Psychonauts while Tim Schafer and the dev team watch. The developers react to and discuss the bugs as they appear.

John McCall of Apple's Swift team presents at CppNow 2023 on introducing a memory-safe successor language into large C++ code bases. He argues incremental improvement of C++ hits hard limits and explains Swift's C++ interoperability for gradual migration.