secure boot

Matthew Garrett's linux.conf.au 2012 talk covers EFI and UEFI from the Linux point of view: why the PC BIOS was bad, what EFI changes, the issues it brings, and Secure Boot.

Jason Cohen's MicroConf talk on designing a bootstrapped business by starting from your own strengths, goals and constraints. He works backward to the business model, pricing, market and product that fit, with practical points like annual prepay and pricing tiers.

A short Princeton CITP video describing cold boot attacks, where encryption keys remain in DRAM after power loss and can be recovered. It covers the attack against disk encryption such as BitLocker, FileVault and TrueCrypt.

Brian Krebs and Lance James present research on DDoS booter services at Black Hat 2013, including the SWATting Krebs suffered. HN knows it mainly for a later exchange between Krebs and Cloudflare's Matthew Prince.

David Heinemeier Hansson's talk at Startup School 2008 on building a profitable startup. He argues for bootstrapping and small, well-run companies instead of chasing investment and exits.

Microsoft's Tony Chen explains how the Xbox One was designed to resist physical attacks, including secure boot, encrypted memory, a security processor and a hypervisor. The goal was to make any hardware attack cost more than the price of many games.

Kurzgesagt argues that Facebook's claimed 8 billion daily video views are inflated by freebooting, meaning re-uploads of creators' videos. It describes how this harms independent creators.

Brian Warner, author of magic-wormhole, presents the tool at PyCon 2016. He explains how a few secret words let two computers securely transfer files, covering the cryptography (NaCl, SPAKE2) and library use.

Ivan Krstic's Black Hat talk on Apple platform security, including the Find My design that uses elliptic curve key diversification to locate offline devices privately. It also covers hardware features such as the T2 chip and secure boot hardening.

Destin Sandlin of Smarter Every Day explains 'Facebook freebooting', where Facebook users re-upload YouTubers' videos natively and the original creators lose views and revenue. He describes his own attempts to get Facebook to act.

Jonathan Blow's Reboot Develop 2017 talk on making game programming less terrible, discussing software bloat, slowness and the design goals behind his own programming language.

Maciej Ceglowski's talk at Web Directions argues that small teams and lone programmers can build sustainable businesses without chasing Silicon Valley's grow-or-die model. He offers alternative, more achievable definitions of success.

David Heinemeier Hansson, creator of Ruby on Rails and partner at 37signals, argues that planning is guessing and startups should focus on today. He says constraints are an advantage and that startups can bootstrap profitably in sizable markets.

Pieter Levels talks at Dojo Bali about building startups without venture capital through bootstrapping, persistence and learning many skills as a generalist. He reviews his own past projects.

Jellyvision hosts Basecamp founders Jason Fried and David Heinemeier Hansson for a Q&A about open source, productivity, feature requests and taking care of customers.

The opening lecture of Steve Brunton's Control Bootcamp, covering the kinds of control and why closed-loop feedback matters. It starts a series that follows the control chapter of the Brunton and Kutz data-driven science book.

Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware. It also touches on Intel ME and other security coprocessors.

Tony Chen of Microsoft explains at BlueHat Seattle 2019 how the Xbox One was designed to resist physical attacks. He covers the security design and hypervisor-based OS architecture that kept the console uncracked for years.

A demonstration of loading Altair 4K BASIC on an Altair 8800 clone, using a front-panel bootloader and an ASR-33 Teletype. It shows the full sequence of entering boot code, loading BASIC and running a program.

Cathode Ray Dude covers two bizarre HP 'Quick Start' features: QuickLook, an offline email client built on EFI firmware, and Daystarter, which hijacks the Windows boot process. It includes an explanation of EFI applications and why HP built these things.

Andreas Antonopoulos answers a question about how to secure your Bitcoin. He covers holding your own keys, backing up the 12 to 24 word seed phrase, and the tradeoffs of custodial accounts, phone wallets and hardware wallets.

Tom Scott visits Cloudflare's San Francisco office to show the wall of lava lamps whose camera feed is used as a source of entropy for random number generation. It is a short explainer on how this helps secure internet encryption.

A 2007 clip in which immigration attorneys describe how they help employers run classified ads designed not to find qualified American applicants, so they can secure green cards for H-1B workers. It is presented as an exposé of the PERM process.

A Curry On talk by Lars Bak, known for V8 and Dart, on building a secure and robust IoT development platform. It discusses language and VM design choices for small devices.

The restored 4k official music video for Fatboy Slim's Weapon of Choice featuring Bootsy Collins, directed by Spike Jonze, with Christopher Walken dancing around a hotel lobby. It won multiple MTV awards and a Grammy.

3Blue1Brown illustrates how enormous the 256-bit search space is, showing how infeasible it is to find a hash or key by guessing and checking.

A This Week in Startups episode in which Jason Calacanis interviews David Heinemeier Hansson of 37signals. They discuss bootstrapping, company philosophy and views on the tech industry.

Moxie Marlinspike speaks at Next Generation Threats 2014 about the challenges of encrypted communication and how Signal addresses them. He also draws on American action movies as narrative for secure communications.

Jake Vanderplas's PyCon 2016 talk shows how sampling-based methods such as simulation, shuffling and bootstrapping make statistics intuitive. His pitch is that if you can write a for-loop, you can do statistics.

David Rosen of Wolfire Games explains how simple procedural techniques can produce fluid, interactive character animation from very few keyframes. Examples come from Overgrowth, Receiver and Black Shades, from his 2014 GDC session.

An episode of This Week in Startups in which Jason Calacanis interviews Ruby on Rails creator David Heinemeier Hansson. They discuss startups, bootstrapping and 37signals' approach to business.

Rob Pike presents Upspin at Gopherfest 2017, an experimental framework for naming and sharing files and data securely and uniformly across a global namespace. It is a project written in Go rather than about Go.

A dotJS 2012 conference talk by Fat (of Twitter Bootstrap fame) on what open source really means and why maintainers feel guilty about it. It covers the obligations, expectations and burnout that come with releasing popular open source software, delivered with humor.

A short clip from Udacity's Web Development course in which Reddit co-founder Steve Huffman describes how Reddit grew early on. He explains seeding the site with content from fake accounts.

Dan Callahan presents Mozilla Persona, a decentralized, cross-browser authentication system that removes site passwords, at PyCon 2013. He explains how the protocol works and how to add it to a Python site.

A Google I/O 2019 talk explaining the architecture of Linux on Chromebooks (Crostini), a sandboxed Linux development environment built on containers inside a VM, with demos and design rationale.

Episode 2 of Corridor Digital's Anime Rock, Paper, Scissors, a short film made with AI-assisted animation techniques such as Stable Diffusion and DreamBooth. The story follows King Philip facing his twin brother and a barbarian king.

A short clip of the Harwell Dekatron/WITCH, the world's oldest original working digital computer from 1951, being restarted at The National Museum of Computing in 2012.

A Netflix engineer describes how Netflix uses Java in 2025, including Spring Boot, DGS/GraphQL, gRPC and keeping over 3000 services on the latest JDK. It covers generational ZGC upgrade experiences.

A short Star Trek TNG clip from 'Brothers' in which Data uses a lockout code with an unusually long, secret-sounding sequence.