zero-knowledge

Without Boats, a Rust language team member, explains the design of Rust's async/await at RustLatam 2019. He covers the history and constraints behind zero-cost, allocation-free async state machines.

Part one of a 1996 BBC Modern Times documentary on the training to become a London black cab driver. It follows candidates learning the Knowledge and facing stressful repeated exams with Public Carriage Office examiners.

A 37C3 talk by Kaspersky researchers on Operation Triangulation, a zero-click iPhone attack that targeted their own colleagues. They describe capturing every stage of the chain, four zero-days and a previously unknown spyware active for years.

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

Aaron Boodman of Replicache asks why sync engines have not yet fixed web app complexity and what is missing for them to go mainstream. The talk lays out the ideas that led to the Zero sync engine.

Herb Sutter's CppCon 2019 talk on the split in the C++ community over exceptions and RTTI. He proposes making exceptions cheaper and more usable, including a zero-overhead, Result-like design.

Alexander Rose of the Long Now Foundation describes the design and construction of the 10,000 year clock conceived by Danny Hillis. He covers the project's history, methods, and how different cultures built things to last millennia.

Fernando Rojo explains how BeatGig reached $10M in sales with one frontend engineer by sharing code between React Native and Next.js, covering navigation, animation, theming and performance.

Eben Moglen of the Software Freedom Conservancy speaks at the 2009 Law of the Commons Conference about free and open software as a model for a new intellectual commons. The talk covers the legal and social case for sharing knowledge.

A two-hour Computer History Museum oral history interview with Bjarne Stroustrup, conducted by Paul McJones in 2015. It covers his youth, education at Aarhus and Cambridge, his career at Bell Labs and elsewhere, and the design and evolution of C++.

Moxie Marlinspike's BlackHat 2011 talk examines weaknesses of SSL and the certificate authority system and proposes Convergence, a decentralized notary approach with trust agility.

James Mickens of Harvard gives a funny lecture at HBS's Future Assembly arguing that blockchains are a very bad idea. He covers their trust, legal and practical shortcomings for real-world problems.

A Google Tech Talk by Steve Weis that introduces modern cryptography and its use in practice and at Google. It covers proofs of security and security definitions and a special topic. HN commenters treat it as a talk on verifiable electronic voting.

Mike Hearn's talk at the 2012 London Bitcoin Conference on the future of Bitcoin, new applications and rebuilding the banking system. He covers lesser-known protocol features such as contracts, escrow and scripting.

Bob Beck of OpenBSD describes the first month of LibreSSL, the fork aimed at cleaning up OpenSSL, including oddities found in the code base and why it was cleaned rather than audited cryptographically.

Kim Nilsson presents his investigation into how Mt. Gox was hacked and mismanaged, tracing the finances and the missing bitcoins. It was given at the 2017 Breaking Bitcoin meetup.

Moxie Marlinspike's DEF CON 19 talk on the weaknesses of SSL and the certificate authority system. He explains how CA trust became a problem and proposes an alternative that removes the CA oligopoly without reducing security.

Moxie Marlinspike's Black Hat talk presenting sslstrip, which defeats SSL in practice by intercepting the http-to-https redirect.

A documentary from Swan Bitcoin exploring Bitcoin's relationship with energy, featuring Lyn Alden and others, and arguing that mining is a net positive for the environment and not wasteful.

Moxie Marlinspike speaks at Next Generation Threats 2014 about the challenges of encrypted communication and how Signal addresses them. He also draws on American action movies as narrative for secure communications.

Peter Rizun and Andrew Stone present results of tests running 1 GB blocks on a Bitcoin test network at Scaling Bitcoin Stanford. The talk argues for big-block scaling and discusses its consequences.

Daniel J. Bernstein and Tanja Lange survey recent highlights in post-quantum cryptography at 35C3, covering the NIST competition, network protocol experiments, and broken candidates.

A two-minute clip of Andreas Antonopoulos explaining why a 51% attack on Bitcoin would not destroy it and what such an attack would cost. It is a succinct take on mining security.

Brian Warner, author of magic-wormhole, presents the tool at PyCon 2016. He explains how a few secret words let two computers securely transfer files, covering the cryptography (NaCl, SPAKE2) and library use.

Bob Beck of OpenBSD gives a BSDCan 2014 talk on the first month of LibreSSL, the OpenSSL fork. He explains why they forked, what they removed, and examples of the problems found in the OpenSSL code base.

A Reason TV segment, drawing on Alex Gladstein of the Human Rights Foundation, argues that Bitcoin works as an escape hatch for people living under authoritarian governments and inflating currencies.

Rob Pike presents Upspin at Gopherfest 2017, an experimental framework for naming and sharing files and data securely and uniformly across a global namespace. It is a project written in Go rather than about Go.

Troy Hunt argues that even static, non-secret websites need HTTPS, demonstrating attacks such as injected content and China's Great Cannon. It accompanies his blog post of the same name.

Ivan Krstic's Black Hat talk on Apple platform security, including the Find My design that uses elliptic curve key diversification to locate offline devices privately. It also covers hardware features such as the T2 chip and secure boot hardening.

The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits. They explain how the PS3 was cracked after Sony removed Other OS.

Moxie Marlinspike's 36C3 talk examines why distributed and decentralized technology is hard to build into consumer products, from the perspective of developing Signal. It argues that ecosystems move slowly and federation causes problems.

Scott Arciszewski's DEF CON 26 Crypto and Privacy Village talk critiquing the JOSE standards (JWT, JWS, JWE) and showing how to design cryptographic tokens more safely.

Tom Caputi presents the design of native encryption for ZFS at the OpenZFS Developer Summit, including design decisions and how authentication uses checksum fields.

A panel conversation with Stewart Brand at Ethereum's Devcon4, where he recounts his life and work 'hacking civilization' and discusses the role of institutions in decentralization.

David Mazieres presents the Stellar Consensus Protocol at Google, introducing federated Byzantine agreement. The model lets participants choose whom to trust rather than assuming fixed membership.

MC Frontalot's nerdcore song "Secrets From The Future" (2007), about secrets not staying hidden once future technology can break today's encryption.

Dan Callahan presents Mozilla Persona, a decentralized, cross-browser authentication system that removes site passwords, at PyCon 2013. He explains how the protocol works and how to add it to a Python site.

The fail0verflow 27C3 talk on breaking PS3 security, covering how Sony's implementation failed, including its ECDSA mistakes.

A FIDO Alliance demo with Google and Microsoft engineers showing passkeys working across operating systems, browsers, and devices. It walks through registering and signing in on new devices.

Rick Falkvinge responds to viewer feedback on his earlier Lightning Network video and raises a flaw he says was not previously discussed. The main thread is the network's unsolved routing problem.