ssh exploit

People Make Games investigates how Roblox relies on young, often child, developers to build its content while paying them very little. It covers Roblox's monetization model, the revenue split, and the harms to kids who make games on the platform.

FitMC tells how the Nocom exploit let griefers track players across Minecraft's oldest anarchy server, 2b2t, and the fallout that followed.

Craig Heffner's Black Hat 2013 talk on exploiting network surveillance cameras, covering how insecure their firmware is. It shows how easily such devices can be compromised.

An episode of Patriot Act with Hasan Minhaj on the cruise industry. It looks at worker exploitation, safety shortcuts, and how cruise lines sweep crime at sea under the rug.

Charlie Miller and Chris Valasek present their DEF CON 23 talk on remotely compromising an unmodified Jeep, pivoting from the entertainment system to the vehicle's internal networks to send control messages. They aim to show the reality of car hacking.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where DRAM bit flips cause DNS requests to go to domains one bit off from the intended one. It shows how hardware faults can be exploited for hijacking without any software exploit.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where flipped bits in DRAM cause devices to contact domains that differ by one bit from legitimate ones. He shows how registering such domains can hijack traffic without exploiting any software bug.

A People Make Games follow-up investigation into Roblox, built on stories from players and creators after the channel's first video. It covers the platform's treatment of young developers and its moderation.

Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware. It also touches on Intel ME and other security coprocessors.

Netanel Rubin's 31C3 talk chains Perl's syntax quirks into a powerful remote code execution attack, taking down popular Perl-based projects.

Cosmo's 22:38 Ocarina of Time speedrun, performed live at AGDQ 2013. The runner uses a complex exploit to skip much of the game.

Nicholas Carlini of Anthropic talks at [un]prompted 2026 about how adversaries could misuse current LLMs for attacks. He shows recent models finding zero-day vulnerabilities in heavily tested software, including a SQL injection in Ghost.

A 36C3 talk that systematically evaluates OpenBSD's exploit mitigations, asking how effective they really are and what they cost in performance, complexity and inspectability. It challenges the project's security marketing.

Veritasium tells the story of the XZ backdoor, how a patient attacker became maintainer and nearly compromised SSH on Linux systems. It also covers free software history and how encryption in SSH works.

Christopher Domas's Black Hat 2015 talk on a long-unnoticed x86 design flaw that lets an attacker reach System Management Mode, a ring below the OS. It explains how the legacy architecture allows universal privilege escalation and persistent, hard-to-detect malware.

A 37C3 talk by Kaspersky researchers on Operation Triangulation, a zero-click iPhone attack that targeted their own colleagues. They describe capturing every stage of the chain, four zero-days and a previously unknown spyware active for years.

Kees Cook of Google gives a Linux Foundation talk on the Kernel Self Protection Project, which aims to harden Linux against attackers. He surveys threats, the state of available defensive technologies and a year of community progress.

A DeepSec 2010 conference talk by Ralf Philipp Weinmann on attacking the baseband processor of mobile phones rather than the application processor. It covers how open-source GSM base stations make malicious-tower attacks practical against neglected GSM stacks.

John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome. He warns that CRISPR and related tools will make malicious genome hacks and targeted bioweapons feasible.

A recording of the TASBot block at Awesome Games Done Quick 2017, where a robot plays games via tool-assisted speedruns, including Super Mario 64 and Portal on an SNES via arbitrary code execution, and ending with a Twitch Plays segment. It showcases console exploits and creative hardware hacking.

Coffeezilla's investigation into the Counter-Strike 2 skin gambling ecosystem, covering casino sites, influencers and esports teams that profit from it. It is part of a multi-part series on Valve's skin economy and its effects on young players.

A Jimquisition episode examining the human cost of predatory videogame monetization, focusing on loot boxes and microtransactions. It features testimonials from people harmed by gambling-style game mechanics.

Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.

The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits. They explain how the PS3 was cracked after Sony removed Other OS.

Yosh trains a reinforcement learning agent to drive Trackmania until he can no longer beat it. The video explains how the training works and the design choices involved.

A tool-assisted run of Brain Age by TASBot, shown at Awesome Games Done Quick 2016. The bot gives deliberately deranged answers while exploiting the game's error-prone recognition.