ssh exploit

SpaceX footage of the Grasshopper vertical takeoff and landing test vehicle making its first roughly 6-foot hop in McGregor, Texas, on September 21, 2012. It was an early step toward a reusable Falcon 9 first stage.

Robert Scoble interviews Paul Graham at Y Combinator's Mountain View headquarters as 36 new startups debut. They discuss what YC is, and Graham's no-assholes rule.

A very short clip from The Matrix Reloaded in which Trinity runs nmap and then uses an SSH exploit. The scene is notable for showing a real tool.

SpaceX footage of the Grasshopper reusable rocket prototype flying 325 m before landing on its pad. It was the first test to use the full navigation sensor suite and closed-loop control for a precision landing.

SpaceX footage of the Grasshopper vehicle's 744 m test hop, filmed from a hexacopter that gets closer than earlier flights. Grasshopper was a vertical takeoff and landing rig built to test returning rockets to the pad.

Craig Heffner's Black Hat 2013 talk on exploiting network surveillance cameras, covering how insecure their firmware is. It shows how easily such devices can be compromised.

An episode of Patriot Act with Hasan Minhaj on the cruise industry. It looks at worker exploitation, safety shortcuts, and how cruise lines sweep crime at sea under the rug.

Charlie Miller and Chris Valasek present their DEF CON 23 talk on remotely compromising an unmodified Jeep, pivoting from the entertainment system to the vehicle's internal networks to send control messages. They aim to show the reality of car hacking.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where DRAM bit flips cause DNS requests to go to domains one bit off from the intended one. It shows how hardware faults can be exploited for hijacking without any software exploit.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where flipped bits in DRAM cause devices to contact domains that differ by one bit from legitimate ones. He shows how registering such domains can hijack traffic without exploiting any software bug.

Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware. It also touches on Intel ME and other security coprocessors.

Netanel Rubin's 31C3 talk chains Perl's syntax quirks into a powerful remote code execution attack, taking down popular Perl-based projects.

Cosmo's 22:38 Ocarina of Time speedrun, performed live at AGDQ 2013. The runner uses a complex exploit to skip much of the game.

Donnie Berkholz of RedMonk gives a Monki Gras talk arguing that abusive, toxic contributors damage open source projects. He makes the case for removing them from communities.

Folding Ideas examines weird, algorithm-gamed children's content on YouTube, from automated toddler videos and educational spam to exploitative prank channels. It looks at how autoplay and recommendation systems reward this material.

The official trailer for The True Cost, a documentary on the fast fashion industry and who pays for cheap clothing. It touches on garment worker conditions and the Rana Plaza collapse.

A 36C3 talk that systematically evaluates OpenBSD's exploit mitigations, asking how effective they really are and what they cost in performance, complexity and inspectability. It challenges the project's security marketing.

Christopher Domas's Black Hat 2015 talk on a long-unnoticed x86 design flaw that lets an attacker reach System Management Mode, a ring below the OS. It explains how the legacy architecture allows universal privilege escalation and persistent, hard-to-detect malware.

A one-minute clip of slime mold placed on a map with food at the cities around Tokyo, growing a network that approximates the Tokyo-area railway system.

A live performance at AGDQ 2014 in which Super Mario World is made to execute arbitrary injected code, running other games like Pong and Snake on the cartridge. It is done through a TASBot feeding precise controller inputs.

Kees Cook of Google gives a Linux Foundation talk on the Kernel Self Protection Project, which aims to harden Linux against attackers. He surveys threats, the state of available defensive technologies and a year of community progress.

A DeepSec 2010 conference talk by Ralf Philipp Weinmann on attacking the baseband processor of mobile phones rather than the application processor. It covers how open-source GSM base stations make malicious-tower attacks practical against neglected GSM stacks.

A SpaceX concept animation showing the planned fully reusable Falcon 9, with both first and second stages performing vertical landings.

WIRED's Andy Greenberg drives a Jeep on a highway while two hackers take control of it remotely over the internet. They manipulate the car and then cut the engine. The video accompanies the 2015 article on the Jeep Cherokee hack.

A tool-assisted speedrun of Super Mario World that achieves arbitrary code execution through frame-precise controller inputs, finishing in 2:25. It was also performed live on real hardware at AGDQ 2014.

A one-minute clip from the 1966 film A Man for All Seasons. Thomas More refuses to arrest the Devil, saying he would give even the Devil the benefit of law for his own safety's sake.

SethBling uses Super Mario World glitches to inject and run Flappy Bird code on an unmodified SNES, entering it purely with controller inputs. It was the first time a human completed this kind of exploit by hand.

John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome. He warns that CRISPR and related tools will make malicious genome hacks and targeted bioweapons feasible.

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

The 8-Bit Guy covers IBM's 1981 CGA graphics system, including how composite output and artifacting produced extra colors beyond the nominal palette. He argues CGA looked better in period than it does on RGB monitors.

Simon Peyton Jones explains nested data parallelism and Data Parallel Haskell, an approach to exploiting multicore and distributed hardware while keeping a simple single-control-flow programming model.

A recording of the TASBot block at Awesome Games Done Quick 2017, where a robot plays games via tool-assisted speedruns, including Super Mario 64 and Portal on an SNES via arbitrary code execution, and ending with a Twitch Plays segment. It showcases console exploits and creative hardware hacking.

In the finale of Double Fine's Devs Play, speedrunner SMK demonstrates glitches and exploits that skip entire sections of Psychonauts while Tim Schafer and the dev team watch. The developers react to and discuss the bugs as they appear.

A 2016 conference talk by a mobile game CEO on the tricks of free-to-play monetization, including player profiles and how to target high-spending whales.

A Jimquisition episode examining the human cost of predatory videogame monetization, focusing on loot boxes and microtransactions. It features testimonials from people harmed by gambling-style game mechanics.

Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.

A four-pane view of Armadillo Aerospace's Mod vehicle on a June 2010 boosted hop. The flight includes engine shutdown, drogue chute deployment, an engine restart and a safe landing.

The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits. They explain how the PS3 was cracked after Sony removed Other OS.

A Last Week Tonight segment on mobile homes, showing how large investment companies are making this affordable housing option less affordable. It covers residents who rent land and cannot move their homes.

A speedrunner-made explanation of the Super Mario World credits warp, an arbitrary code execution glitch that jumps the game straight to the ending. It simplifies the underlying assembly and memory behavior with animations so non-experts can follow.