security

Lock-picking YouTuber Bill Johnson (BosnianBill) explains how to choose a high-security lock and why, showing examples and comparing designs. It covers what makes some padlocks more pick-resistant than others.

A Wendover Productions explainer on how airport security is designed, covering screening layers, x-ray scanning, and the contrast with Israel's profiling-based approach. It walks through the logic behind why security works the way it does.

Lieutenant General Mark Hertling gives a TEDx talk arguing that obesity and poor youth fitness are a national security problem because too few young Americans can meet military physical requirements.

3Blue1Brown illustrates how enormous the 256-bit search space is, showing how infeasible it is to find a hash or key by guessing and checking.

A 2018 tutorial explaining uBlock Origin's advanced user mode, including how to block scripts and use the dynamic filtering settings. It positions the extension as a replacement for tools like uMatrix.

John Oliver's Last Week Tonight segment on US voting machines, covering how they work, their security weaknesses, and how elections could be made more secure.

The Lock Picking Lawyer tests the supposedly unpickable lock designs built by the Stuff Made Here channel. He looks for bypasses and weaknesses in the novel anti-picking mechanisms.

LockPickingLawyer shows a Sentry fire safe being cut in half with a saw in a few minutes. It is a short demonstration that these safes offer little protection against a determined thief.

Karen Sandler, then Executive Director of the GNOME Foundation, talks at OSCON 2011 about the risks of proprietary, closed-source software in implanted medical devices like her own pacemaker-defibrillator.

ITS Tactical demonstrates how a ballpoint pen can open a zippered suitcase without leaving a trace, bypassing its lock, and suggests countermeasures.

Tom Scott explains why electronic voting is a bad idea. Elections must be trusted by everyone and attacks on software scale in ways attacks on paper do not, so open source or blockchain fixes do not solve it.

Tom Scott explains for Computerphile why electronic voting is a bad idea, arguing that paper ballots are transparent, auditable and hard to tamper with at scale. He covers why moving voting to phones, tablets or computers undermines trust and verifiability.

Computerphile interview with Prof. Ross Anderson on how Chip and PIN payment systems are being compromised, and the attacks researchers have seen.

Tom Scott performs a fictional story at GeekyConf about the day Google accidentally stops checking passwords, letting anyone into any account. It works as a parable about how a single point of failure in login can unravel everything built on it.

Deviant Ollam's DEF CON 17 talk explains how legally checking a firearm in luggage can be the most secure way to fly with valuable tech. It covers firearm transport rules and luggage locks.

A roughly 14-minute interview with OpenBSD founder Theo de Raadt at ruBSD 2013. He talks about making painful changes, getting real feedback, mitigation techniques compared to other OSs, and virtualization.

LockPickingLawyer cuts through a LiteLok flexible bike lock with cable cutters in about 16 seconds, one of several videos defeating the product.

WIRED's Andy Greenberg drives a Jeep on a highway while two hackers take control of it remotely over the internet. They manipulate the car and then cut the engine. The video accompanies the 2015 article on the Jeep Cherokee hack.

h3h3Productions describes how a hacker took over their phone number by getting a SIM card from T-Mobile, and gives security advice such as using a hardware key and an authenticator app.

LockPickingLawyer examines a challenge involving a tamper-sealed Abus lock and shows how the tamper seal can be defeated.

SANS ICS Security's parody video of the HyperEncabulator, a spoof of the Turbo Encabulator technobabble videos.

Engineer Stuff Made Here builds two new supposedly unpickable locks with different designs and sends them to the Lock Picking Lawyer to see whether they can be defeated. The video covers the novel anti-picking mechanisms.

Louis Rossmann explains why he stopped using GrapheneOS, describing his interactions with its lead developer Daniel Micay. It includes chat logs shown in the video.

Linus Tech Tips warns against cheap Android TV boxes, many of which ship with preinstalled malware. It looks at several boxes and suggests safer alternatives such as Chromecast and Nvidia Shield.

Samy Kamkar demonstrates OpenSesame, a device that opens many fixed-code garage doors in seconds by exploiting a newly found attack, built around a Mattel toy. The video explains the attack and which brands are affected.

A short video explaining the Intel Management Engine, a hidden embedded computer inside Intel machines with deep access to hardware. It is presented from an insider's perspective and raises backdoor and NSA concerns.

Tested explains how Apple's Touch ID recognizes fingerprints, then tries to defeat it using fake fingers and prints, retracing methods claimed by a German computer club.

Bryan Seely tells how he used fake Google Maps business listings to intercept phone calls meant for the Secret Service and FBI. He then turned himself in, and the talk explains the verification gaps that made it possible.

A WSJ investigation by Joanna Stern into iPhone thieves who watch victims enter their passcode, then use it to lock them out of Apple accounts and drain bank and payment apps. It explains how the thefts work and how to protect yourself.

CGP Grey explains the history of the US Social Security card and number, and why they became a de facto national ID despite never being meant for it. He also covers why America resists a proper identity card.

Benn Jordan concludes his Flock trilogy, filmed on a publicly deployed Flock Safety camera, covering a leak of camera feeds reported by 404 Media. He shows the cameras' capabilities, including panning to track people.

At DEF CON 27, Nina Kollars tells how buying Nespresso capsules on eBay led her to investigate fraudsters reselling goods bought with stolen credit cards. She describes her non-technical tracking and reporting efforts.

A reverse engineer walks through fixing a ten-year-old bug in Guitar Hero III without access to its source code, using a disassembler and decompiler. It is technical but explained step by step.

In an 11-minute TED talk, Ralph Langner explains how his team reverse-engineered the Stuxnet worm and worked out that it targeted industrial control systems, with a covert state origin. It is a compact look at cyber-forensics.

A bizarre, tongue-in-cheek video in which John McAfee himself supposedly shows how to uninstall McAfee antivirus. It is known for its NSFW sex and drug references.

Jim Browning reverses a scammer's remote connection and discovers CCTV in a Delhi call centre. He gives a detailed look at how a tech support scam operation runs, and he shared the footage with the BBC.

A short Princeton CITP video describing cold boot attacks, where encryption keys remain in DRAM after power loss and can be recovered. It covers the attack against disk encryption such as BitLocker, FileVault and TrueCrypt.

A FIDO Alliance demo with Google and Microsoft engineers showing passkeys working across operating systems, browsers, and devices. It walks through registering and signing in on new devices.

Omar Rizwan's short !!Con talk about writing a Breakout game in JavaScript that runs inside a PDF. It explores the surprisingly large PDF specification, including its scripting support.

Highlights of the June 2010 ICANN DNSSEC root Key Signing Ceremony, showing the procedures used to generate and protect the root zone signing key.