ssh exploit

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where DRAM bit flips cause DNS requests to go to domains one bit off from the intended one. It shows how hardware faults can be exploited for hijacking without any software exploit.

Artem Dinaburg's DEF CON 19 talk on bit-squatting, where flipped bits in DRAM cause devices to contact domains that differ by one bit from legitimate ones. He shows how registering such domains can hijack traffic without exploiting any software bug.

Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware. It also touches on Intel ME and other security coprocessors.

Netanel Rubin's 31C3 talk chains Perl's syntax quirks into a powerful remote code execution attack, taking down popular Perl-based projects.

Donnie Berkholz of RedMonk gives a Monki Gras talk arguing that abusive, toxic contributors damage open source projects. He makes the case for removing them from communities.

A 36C3 talk that systematically evaluates OpenBSD's exploit mitigations, asking how effective they really are and what they cost in performance, complexity and inspectability. It challenges the project's security marketing.

A 37C3 talk by Kaspersky researchers on Operation Triangulation, a zero-click iPhone attack that targeted their own colleagues. They describe capturing every stage of the chain, four zero-days and a previously unknown spyware active for years.

Kees Cook of Google gives a Linux Foundation talk on the Kernel Self Protection Project, which aims to harden Linux against attackers. He surveys threats, the state of available defensive technologies and a year of community progress.

A DeepSec 2010 conference talk by Ralf Philipp Weinmann on attacking the baseband processor of mobile phones rather than the application processor. It covers how open-source GSM base stations make malicious-tower attacks practical against neglected GSM stacks.

A one-minute clip from the 1966 film A Man for All Seasons. Thomas More refuses to arrest the Devil, saying he would give even the Devil the benefit of law for his own safety's sake.

John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome. He warns that CRISPR and related tools will make malicious genome hacks and targeted bioweapons feasible.

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

Simon Peyton Jones explains nested data parallelism and Data Parallel Haskell, an approach to exploiting multicore and distributed hardware while keeping a simple single-control-flow programming model.

Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.

A four-pane view of Armadillo Aerospace's Mod vehicle on a June 2010 boosted hop. The flight includes engine shutdown, drogue chute deployment, an engine restart and a safe landing.

The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits. They explain how the PS3 was cracked after Sony removed Other OS.

Reddit co-founder Alexis Ohanian responds in a short interview to Anderson Cooper's on-air criticism of Reddit over child exploitation content.

A restored 1994 video of Karl Sims' research on evolved virtual creatures, where simulated block creatures are bred through artificial evolution to swim, walk, follow and compete. It is a landmark demonstration of genetic algorithms in physics simulation.