ssh exploit

A very short clip from The Matrix Reloaded in which Trinity runs nmap and then uses an SSH exploit. The scene is notable for showing a real tool.

SpaceX footage of the Grasshopper vehicle's 744 m test hop, filmed from a hexacopter that gets closer than earlier flights. Grasshopper was a vertical takeoff and landing rig built to test returning rockets to the pad.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where DRAM bit flips cause DNS requests to go to domains one bit off from the intended one. It shows how hardware faults can be exploited for hijacking without any software exploit.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where flipped bits in DRAM cause devices to contact domains that differ by one bit from legitimate ones. He shows how registering such domains can hijack traffic without exploiting any software bug.

Netanel Rubin's 31C3 talk chains Perl's syntax quirks into a powerful remote code execution attack, taking down popular Perl-based projects.

Donnie Berkholz of RedMonk gives a Monki Gras talk arguing that abusive, toxic contributors damage open source projects. He makes the case for removing them from communities.

The official trailer for The True Cost, a documentary on the fast fashion industry and who pays for cheap clothing. It touches on garment worker conditions and the Rana Plaza collapse.

Veritasium tells the story of the XZ backdoor, how a patient attacker became maintainer and nearly compromised SSH on Linux systems. It also covers free software history and how encryption in SSH works.

Christopher Domas's Black Hat 2015 talk on a long-unnoticed x86 design flaw that lets an attacker reach System Management Mode, a ring below the OS. It explains how the legacy architecture allows universal privilege escalation and persistent, hard-to-detect malware.

A one-minute clip of slime mold placed on a map with food at the cities around Tokyo, growing a network that approximates the Tokyo-area railway system.

A live performance at AGDQ 2014 in which Super Mario World is made to execute arbitrary injected code, running other games like Pong and Snake on the cartridge. It is done through a TASBot feeding precise controller inputs.

A 37C3 talk by Kaspersky researchers on Operation Triangulation, a zero-click iPhone attack that targeted their own colleagues. They describe capturing every stage of the chain, four zero-days and a previously unknown spyware active for years.

A tool-assisted speedrun of Super Mario World that achieves arbitrary code execution through frame-precise controller inputs, finishing in 2:25. It was also performed live on real hardware at AGDQ 2014.

A one-minute clip from the 1966 film A Man for All Seasons. Thomas More refuses to arrest the Devil, saying he would give even the Devil the benefit of law for his own safety's sake.

SethBling uses Super Mario World glitches to inject and run Flappy Bird code on an unmodified SNES, entering it purely with controller inputs. It was the first time a human completed this kind of exploit by hand.

John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome. He warns that CRISPR and related tools will make malicious genome hacks and targeted bioweapons feasible.

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

The 8-Bit Guy covers IBM's 1981 CGA graphics system, including how composite output and artifacting produced extra colors beyond the nominal palette. He argues CGA looked better in period than it does on RGB monitors.

A recording of the TASBot block at Awesome Games Done Quick 2017, where a robot plays games via tool-assisted speedruns, including Super Mario 64 and Portal on an SNES via arbitrary code execution, and ending with a Twitch Plays segment. It showcases console exploits and creative hardware hacking.

The Lock Picking Lawyer tests the supposedly unpickable lock designs built by the Stuff Made Here channel. He looks for bypasses and weaknesses in the novel anti-picking mechanisms.

In the finale of Double Fine's Devs Play, speedrunner SMK demonstrates glitches and exploits that skip entire sections of Psychonauts while Tim Schafer and the dev team watch. The developers react to and discuss the bugs as they appear.

A 2016 conference talk by a mobile game CEO on the tricks of free-to-play monetization, including player profiles and how to target high-spending whales.

A five-hour documentary history of the Super Mario 64 A button challenge, which aims to beat the game with as few A presses as possible. It covers the bugs and exploits discovered over the years.

A Jimquisition episode examining the human cost of predatory videogame monetization, focusing on loot boxes and microtransactions. It features testimonials from people harmed by gambling-style game mechanics.

The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits. They explain how the PS3 was cracked after Sony removed Other OS.

Karl Sims's 1994 demonstration of evolved virtual creatures: block-bodied creatures whose bodies and controllers are evolved through selection, mutation and recombination to swim, walk and compete.

A Last Week Tonight segment on mobile homes, showing how large investment companies are making this affordable housing option less affordable. It covers residents who rent land and cannot move their homes.

A speedrunner-made explanation of the Super Mario World credits warp, an arbitrary code execution glitch that jumps the game straight to the ending. It simplifies the underlying assembly and memory behavior with animations so non-experts can follow.

A tool-assisted speedrun of Pokemon Yellow on Game Boy Color that uses glitches and frame-precise inputs to make the game execute an arbitrary program. It was later obsoleted by an improved run.

Yosh trains a reinforcement learning agent to drive Trackmania until he can no longer beat it. The video explains how the training works and the design choices involved.

The climactic lesson scene from the 1983 film WarGames, in which the computer learns that the only winning move in nuclear war is not to play. It includes the character entering zero players and the famous closing line.

A tool-assisted run of Brain Age by TASBot, shown at Awesome Games Done Quick 2016. The bot gives deliberately deranged answers while exploiting the game's error-prone recognition.

A segment from the animated film The Twelve Tasks of Asterix, in which Asterix must get Permit A 38 from a maze-like building run by unhelpful bureaucrats. He wins by asking for a nonexistent permit.

The classic 1950s recording of Tennessee Ernie Ford singing 'Sixteen Tons', a song about a coal miner trapped in company-store debt.

A restored 1994 video of Karl Sims' research on evolved virtual creatures, where simulated block creatures are bred through artificial evolution to swim, walk, follow and compete. It is a landmark demonstration of genetic algorithms in physics simulation.

A short clip demonstrating a phone-based social engineering trick in which a crying baby in the background is used to pressure a customer service rep. It shows how attackers exploit human sympathy rather than technical flaws.