secure sharing

An expat YouTuber in China shows how dockless bike-sharing, once loved, has been flooded by competing companies. Bikes pile up, get abandoned in odd places and are vandalised, with footage from around the city.

Rob Pike presents Upspin at Gopherfest 2017, an experimental framework for naming and sharing files and data securely and uniformly across a global namespace. It is a project written in Go rather than about Go.

Brian Warner, author of magic-wormhole, presents the tool at PyCon 2016. He explains how a few secret words let two computers securely transfer files, covering the cryptography (NaCl, SPAKE2) and library use.

Matthew Garrett's linux.conf.au 2012 talk covers EFI and UEFI from the Linux point of view: why the PC BIOS was bad, what EFI changes, the issues it brings, and Secure Boot.

Fernando Rojo explains how BeatGig reached $10M in sales with one frontend engineer by sharing code between React Native and Next.js, covering navigation, animation, theming and performance.

Andreas Antonopoulos answers a question about how to secure your Bitcoin. He covers holding your own keys, backing up the 12 to 24 word seed phrase, and the tradeoffs of custodial accounts, phone wallets and hardware wallets.

Tom Scott visits Cloudflare's San Francisco office to show the wall of lava lamps whose camera feed is used as a source of entropy for random number generation. It is a short explainer on how this helps secure internet encryption.

A 2007 clip in which immigration attorneys describe how they help employers run classified ads designed not to find qualified American applicants, so they can secure green cards for H-1B workers. It is presented as an exposé of the PERM process.

A Curry On talk by Lars Bak, known for V8 and Dart, on building a secure and robust IoT development platform. It discusses language and VM design choices for small devices.

Microsoft's Tony Chen explains how the Xbox One was designed to resist physical attacks, including secure boot, encrypted memory, a security processor and a hypervisor. The goal was to make any hardware attack cost more than the price of many games.

3Blue1Brown illustrates how enormous the 256-bit search space is, showing how infeasible it is to find a hash or key by guessing and checking.

Moxie Marlinspike speaks at Next Generation Threats 2014 about the challenges of encrypted communication and how Signal addresses them. He also draws on American action movies as narrative for secure communications.

Ivan Krstic's Black Hat talk on Apple platform security, including the Find My design that uses elliptic curve key diversification to locate offline devices privately. It also covers hardware features such as the T2 chip and secure boot hardening.

Hank Green, a TikTok creator with millions of followers, explains why he thinks TikTok underpays creators. He compares its fixed-pot creator fund with YouTube's revenue sharing.

Dan Callahan presents Mozilla Persona, a decentralized, cross-browser authentication system that removes site passwords, at PyCon 2013. He explains how the protocol works and how to add it to a Python site.

A Google I/O 2019 talk explaining the architecture of Linux on Chromebooks (Crostini), a sandboxed Linux development environment built on containers inside a VM, with demos and design rationale.

A short Star Trek TNG clip from 'Brothers' in which Data uses a lockout code with an unusually long, secret-sounding sequence.

Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain. He explains key hierarchies and how data can stay safe even in adversarial clouds.

Tony Chen of Microsoft explains at BlueHat Seattle 2019 how the Xbox One was designed to resist physical attacks. He covers the security design and hypervisor-based OS architecture that kept the console uncracked for years.

Part one of Sandia National Labs' first-person documentary on the use control, detonation safety and survivability of US nuclear weapons. It covers nuclear sharing in NATO and how control of use was separated from possession, leading to the always/never problem.

An Asianometry documentary-style video on the rise and collapse of China's dockless bike-share boom. It covers the startups, the heavy subsidies and the price wars.

A TED2014 interview in which Charlie Rose talks with Google CEO Larry Page about the company's long-term vision, including balloons for internet access and the DeepMind acquisition. Page also discusses data sharing and privacy.

Sam Stephenson's RailsConf 2016 talk on Turbolinks 5, showing how small teams can ship fast Rails apps in the browser and hybrid iOS and Android apps sharing one set of web views.

Python core developer Raymond Hettinger explains how Python's dictionary implementation evolved into the compact, ordered dict in Python 3.6. He uses pictures and small bits of pure Python, and covers key-sharing, compaction and versioning.

Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.

Robert Miles explains the orthogonality thesis: how an agent can be highly intelligent while pursuing goals that seem stupid or alien to humans. He separates intelligence from goals and touches on the stamp-collector example.

A 1972 song by Adriano Celentano whose lyrics are nonsense syllables designed to sound like American English to non-English speakers. It is a rock and rap-flavored novelty track with a video.

Julia co-creator Stefan Karpinski explains why multiple dispatch makes Julia code and types reusable across packages with so little friction. He covers sharing basic types and sharing generic algorithms.

Brian Fitzpatrick and Ben Collins-Sussman argue that the 'genius programmer' ideal harms collaboration. They advocate trading ego for growth, sharing work early, and understanding how tools shape social behavior.

James Mickens's 2015 Harvard colloquium argues that browsers are bloated and insecure because feature races trump clean interface design. He presents a cleaner, more secure browser architecture (Atlantis) with a much smaller API surface.

Skateboarding pioneer Rodney Mullen talks about how the open skate community and its environments drive the invention of new tricks out of pure passion. He draws parallels to collaboration and open source.

A Last Week Tonight segment on the US nuclear arsenal and how poorly it is maintained and secured. It covers weapons accidents, outdated launch protocols and security problems.

A neural-network upscaled 4K, 60 fps version of the 1906 film of a trip down Market Street in San Francisco, shot four days before the earthquake. It shows cable cars, horse carriages, early automobiles and pedestrians sharing the street.

A Dartmouth-produced documentary on how professors John Kemeny and Tom Kurtz, with a group of undergraduates, invented the BASIC language. It covers the creation of BASIC and the early time-sharing environment at Dartmouth.

Hamish Coleman describes reverse engineering the keyboard controller in a Thinkpad and reflashing it with custom firmware. He covers how Lenovo secures its firmware, and his ongoing work on the protocol between the BIOS and the vendor flash tool.

Dan Tentler shows a rapid-fire tour of insecure things found on the open internet using Shodan and his own scanning, from unprotected VNC endpoints to industrial controls. The emphasis is on how little security was considered before connecting them.

Ang Cui and Jonathan Voris present firmware modification attacks on networked printers at 28c3, showing how HP printers can be compromised and used as footholds for malware inside sensitive networks.

Eben Moglen of the Software Freedom Conservancy speaks at the 2009 Law of the Commons Conference about free and open software as a model for a new intellectual commons. The talk covers the legal and social case for sharing knowledge.

Tobias Engel's 31C3 talk shows how weaknesses in the SS7 telephone signaling network let companies and attackers locate, track and manipulate phones from anywhere in the world, with precision down to about 50 meters.

Craig Heffner's Black Hat 2013 talk on exploiting network surveillance cameras, covering how insecure their firmware is. It shows how easily such devices can be compromised.