PickVidsBest Security & hacking Videos
The 192 Security & hacking videos here were recommended by different people across different months. Choose by who it is for: 7 introductory, 63 intermediate, 85 for a general viewer, and 37 for someone who wants the harder derivation. Most of them are a talk. What they share is that one speaker finishes a claim, and the examples exist to hold that claim up. Channels you will keep seeing include DEFCONConference, media.ccc.de, Black Hat.
Behind the Scenes of iOS Security
Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain.
Why Electronic Voting Is Still A Bad Idea
Tom Scott explains why electronic voting is a bad idea.
USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
James Mickens's humorous USENIX Security keynote argues that improving security and trusting opaque technology like machine learning is far harder than the industry admits.
Defcon 18 Changing threats to privacy Moxie Marlinspike Part
Moxie Marlinspike's DEF CON 18 talk on changing threats to privacy argues that surveillance arrived through convenient services and network effects, so opting out is not a real solution.
28c3: The Science of Insecurity
Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely.
DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome.
Elevator Hacking: From the Pit to the Penthouse
Deviant Ollam's two-hour conference talk explains how elevators work, from the pit and buffers to the car top, controller logic and access-control features.
Compiling C to printable x86, to make an executable research paper
Tom7 explains how he built a SIGBOVIK 2017 paper made only of printable ASCII bytes that is also a valid DOS executable.
Break Me00 The MoVfuscator Turning mov into a soul crushing RE nightmare Christopher Domas
Christopher Domas's Derbycon 2015 talk on the M/o/Vfuscator, a compiler that emits only x86 mov instructions, showing mov is Turing complete.
BlackHat USA 2011: SSL And The Future Of Authenticity
Moxie Marlinspike's BlackHat 2011 talk examines weaknesses of SSL and the certificate authority system and proposes Convergence, a decentralized notary approach with trust agility.
27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed.
Frank Abagnale | Catch Me If You Can | Talks at Google
Frank Abagnale, the real subject of Catch Me If You Can, speaks at Google about his life as a con man turned FBI fraud and cybersecurity expert, including advice on fraud, breaches and credit cards.
#HITB2012KUL D1T3 - The Grugq - OPSEC: Because Jail is for wuftpd
The Grugq's Hack In The Box 2012 talk on operational security for hackers, drawing on hacker indictments and counter-intelligence research.
Breaking the x86 Instruction Set
Christopher Domas presents at Black Hat 2017 how page fault analysis and processor fuzzing can exhaustively search the x86 instruction set.
Guarding Against Physical Attacks: The Xbox One Story — Tony Chen, Microsoft
Microsoft's Tony Chen explains how the Xbox One was designed to resist physical attacks, including secure boot, encrypted memory, a security processor and a hypervisor.
Cybersecurity as Realpolitik by Dan Geer presented at Black Hat USA 2014
Dan Geer's Black Hat 2014 keynote argues that cybersecurity is a matter of power and policy rather than wishful thinking.
DEF CON 26 - Svea, Suggy, Till - Inside the Fake Science Factory
A DEF CON 26 talk by investigative journalists and hackers on the fake science industry, with bogus conferences and predatory journals that give studies false credibility.
OAuth 2.0 and OpenID Connect (in plain English)
Okta developer advocate Nate Barbettini explains OAuth 2.0 and OpenID Connect in a roughly hour-long talk.
Theory and Practice of Cryptography
A Google Tech Talk by Steve Weis that introduces modern cryptography and its use in practice and at Google.
Why Electronic Voting is a BAD Idea - Computerphile
Tom Scott explains for Computerphile why electronic voting is a bad idea, arguing that paper ballots are transparent, auditable and hard to tamper with at scale.
DEF CON 22 - Zoz - Don't Fuck It Up!
Zoz's DEF CON 22 talk on operational security in the age of pervasive surveillance.
Bryan Cantrill on Jails and Solaris Zones
Bryan Cantrill's Papers We Love talk on FreeBSD Jails and Solaris Zones, tracing how OS-level virtualization grew out of chroot and the limits of the traditional UNIX security model.
DEF CON 22 - Deviant Ollam & Howard Payne - Elevator Hacking - From the Pit to the Penthouse
Deviant Ollam and Howard Payne give an in-depth DEF CON 22 explanation of how elevators work, from the pit to the penthouse.
[HOPE X] Elevator Hacking: From the Pit to the Penthouse
A HOPE X talk giving an in-depth explanation of how elevators work, from their history in hacker culture to using their control systems to bypass building security.