PickVidsBest Security & hacking Videos
The 192 Security & hacking videos here were recommended by different people across different months. Choose by who it is for: 7 introductory, 63 intermediate, 85 for a general viewer, and 37 for someone who wants the harder derivation. Most of them are a talk. What they share is that one speaker finishes a claim, and the examples exist to hold that claim up. Channels you will keep seeing include DEFCONConference, media.ccc.de, Black Hat.
4 2 1 Christopher Domas The future of RE Dynamic Binary Visualization
Christopher Domas presents his Cantor Dust tool at Derbycon 2012, a 3D visual approach to reverse engineering binaries by visualizing their structure dynamically.
David Kriesel: Traue keinem Scan, den du nicht selbst gefälscht hast
David Kriesel's 31C3 talk, in German, on the discovery that Xerox scanner-copiers silently replace digits and letters in scanned documents.
BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”
Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report.
DEF CON 23 - Chris Rock - I Will Kill You
A DEF CON 23 talk showing how weak controls in electronic death registration systems let someone virtually kill a person and obtain a real death certificate, with consequences for their identity and life.
LibreSSL with Bob Beck
Bob Beck of OpenBSD describes the first month of LibreSSL, the fork aimed at cleaning up OpenSSL, including oddities found in the code base and why it was cleaned rather than audited cryptographically.
NSA operation ORCHESTRA: Annual Status Report
Poul-Henning Kamp's FOSDEM 2014 talk is a hypothetical account of how an intelligence agency such as the NSA would sabotage open source software, standards and online discussion.
I'll Let Myself In: Tactics of Physical Pen Testers
Deviant Ollam, head of a physical penetration testing team, presents tactics for getting into buildings, from bypassing door levers with a wire to defeating bank doors.
Building a Better Web Browser - James Mickens - Harvard CS Colloquium 2015
James Mickens's 2015 Harvard colloquium argues that browsers are bloated and insecure because feature races trump clean interface design.
DEF CON 19 - Moxie Marlinspike - SSL And The Future Of Authenticity
Moxie Marlinspike's DEF CON 19 talk on the weaknesses of SSL and the certificate authority system.
Replace Your Exploit-Ridden Firmware with Linux - Ronald Minnich, Google
Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware.
GDC 2018: John McDonald (Valve) - Using Deep Learning to Combat Cheating in CSGO
A GDC 2018 talk by Valve's John McDonald on VACNet, a deep learning system that analyzes CS:GO gameplay to detect cheaters.
CppCon 2017: Louis Brandy “Curiously Recurring C++ Bugs at Facebook”
Louis Brandy presents the most common and infamous recurring C++ bugs seen in Facebook's huge codebase, including shared_ptr data races and operator[] pitfalls.
We Hacked Flock Safety Cameras in under 30 Seconds. 🫥
Benn Jordan details security vulnerabilities in Flock Safety license-plate-reading cameras and how easily they can be compromised.
Nina Kollars - Confessions of an Nespresso Money Mule - DEF CON 27 Conference
At DEF CON 27, Nina Kollars tells how buying Nespresso capsules on eBay led her to investigate fraudsters reselling goods bought with stolen credit cards.
DEF CON 18 - Moxie Marlinspike - Changing Threats To Privacy: From TIA to Google
Moxie Marlinspike's DEF CON 18 talk argues that privacy threats have shifted from centralized state databases like TIA to corporate data collection by companies like Google, despite wins in strong cryptography and decentralization.
[1299] Unpickable Locks From Stuff Made Here
The Lock Picking Lawyer tests the supposedly unpickable lock designs built by the Stuff Made Here channel.
DEF CON 23 - Chris Domas - Repsych: Psychological Warfare in Reverse Engineering
Chris Domas's DEF CON 23 talk on psychological warfare against reverse engineers.
36C3 - Open Source is Insufficient to Solve Trust Problems in Hardware
A 36C3 talk by Bunnie Huang arguing that open source is necessary but not sufficient for trustworthy hardware, because verifying hardware is destructive and so creates a time-of-check/time-of-use gap.
DEF CON 29 - Richard Henderson - Old MacDonald Had a Barcode, E I E I CAR
A DEF CON 29 talk by Richard Henderson about encoding the EICAR antivirus test string into QR codes and barcodes and scanning them at real systems.
DEF CON 26 - Christopher Domas - GOD MODE UNLOCKED Hardware Backdoors in redacted x86
Christopher Domas presents research at DEF CON 26 showing a hidden alternate instruction set and undocumented hardware backdoor in some x86 processors, found on a third-party CPU.
"Why do you lock your door?" - RVASec 2012
Locksport historian Schuyler Towne's RVASec 2012 talk on why people lock their doors, tracing the history of locks and the assumptions about security behind them.
DEF CON 30 - Sam Bent - Tor - Darknet Opsec By a Veteran Darknet Vendor
A DEF CON 30 talk by Sam Bent, a former darknet vendor, on operational security when using Tor and the darknet.
Defcon 21 - Decapping Chips The Strike Easy Hard Way
A DEF CON 21 talk by Adam Laurie and Zac Franken on decapping chips, covering how to remove chip packaging and image the die to read out contents such as ROM.
REcon 2013 - The Future of RE : Dynamic Binary Visualization (Christopher Domas)
Christopher Domas's REcon 2013 talk on dynamic binary visualization for reverse engineering.