Best Security & hacking Videos
「Security & hacking」下面有192部被不同的人、在不同月份推荐过的视频。挑的时候先看对象:入门7部,适合还没学过的人;进阶63部,适合已经懂术语的人;普通向85部,按兴趣就能看;更硬的37部,留给想看推导或细节的人。这一类数量最多的是演讲,所以它们的共同点是一位讲者把一个判断讲完,例子是为了撑住这个判断。常出现的频道包括DEFCONConference、media.ccc.de、Black Hat。目录给这个主题划的范围是:Computer security: vulnerabilities, exploits, malware, reverse engineering, CTF, penetration testing, Black Hat and DEF CON talks, OS security, memory safety, zero-days, responsible disclosure.如果只看三部,就从《Behind the Scenes of iOS Security》开始,它负责把问题讲出画面;然后看《Why Electronic Voting Is Still A Bad Idea》,换一种讲法或例子;最后看《USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?》,留给已经有基础的人。页面按每页24部切开,顺序看的是被推荐跨越了多少个月,不是播放量。每条标题下面那一句是这部片子自己的内容说明,用来区分它在讲定义、过程、演示还是观点。点进去能看到推荐原话、原文链接和适合谁看。看的时候把强烈推荐当成有人明确叫你去看,把引用当成只是拿来举例,把批评留下来对照,不要把每条评论都当成同一力度。

Behind the Scenes of iOS Security
Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain.

Why Electronic Voting Is Still A Bad Idea
Tom Scott explains why electronic voting is a bad idea.

USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
James Mickens's humorous USENIX Security keynote argues that improving security and trusting opaque technology like machine learning is far harder than the industry admits.

Defcon 18 Changing threats to privacy Moxie Marlinspike Part
Moxie Marlinspike's DEF CON 18 talk on changing threats to privacy argues that surveillance arrived through convenient services and network effects, so opting out is not a real solution.

28c3: The Science of Insecurity
Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely.

DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome.

Elevator Hacking: From the Pit to the Penthouse
Deviant Ollam's two-hour conference talk explains how elevators work, from the pit and buffers to the car top, controller logic and access-control features.

Compiling C to printable x86, to make an executable research paper
Tom7 explains how he built a SIGBOVIK 2017 paper made only of printable ASCII bytes that is also a valid DOS executable.

Break Me00 The MoVfuscator Turning mov into a soul crushing RE nightmare Christopher Domas
Christopher Domas's Derbycon 2015 talk on the M/o/Vfuscator, a compiler that emits only x86 mov instructions, showing mov is Turing complete.

BlackHat USA 2011: SSL And The Future Of Authenticity
Moxie Marlinspike's BlackHat 2011 talk examines weaknesses of SSL and the certificate authority system and proposes Convergence, a decentralized notary approach with trust agility.

27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed.

Frank Abagnale | Catch Me If You Can | Talks at Google
Frank Abagnale, the real subject of Catch Me If You Can, speaks at Google about his life as a con man turned FBI fraud and cybersecurity expert, including advice on fraud, breaches and credit cards.

#HITB2012KUL D1T3 - The Grugq - OPSEC: Because Jail is for wuftpd
The Grugq's Hack In The Box 2012 talk on operational security for hackers, drawing on hacker indictments and counter-intelligence research.

Breaking the x86 Instruction Set
Christopher Domas presents at Black Hat 2017 how page fault analysis and processor fuzzing can exhaustively search the x86 instruction set.

Guarding Against Physical Attacks: The Xbox One Story — Tony Chen, Microsoft
Microsoft's Tony Chen explains how the Xbox One was designed to resist physical attacks, including secure boot, encrypted memory, a security processor and a hypervisor.

Cybersecurity as Realpolitik by Dan Geer presented at Black Hat USA 2014
Dan Geer's Black Hat 2014 keynote argues that cybersecurity is a matter of power and policy rather than wishful thinking.

DEF CON 26 - Svea, Suggy, Till - Inside the Fake Science Factory
A DEF CON 26 talk by investigative journalists and hackers on the fake science industry, with bogus conferences and predatory journals that give studies false credibility.

OAuth 2.0 and OpenID Connect (in plain English)
Okta developer advocate Nate Barbettini explains OAuth 2.0 and OpenID Connect in a roughly hour-long talk.

Theory and Practice of Cryptography
A Google Tech Talk by Steve Weis that introduces modern cryptography and its use in practice and at Google.

Why Electronic Voting is a BAD Idea - Computerphile
Tom Scott explains for Computerphile why electronic voting is a bad idea, arguing that paper ballots are transparent, auditable and hard to tamper with at scale.

DEF CON 22 - Zoz - Don't Fuck It Up!
Zoz's DEF CON 22 talk on operational security in the age of pervasive surveillance.

Bryan Cantrill on Jails and Solaris Zones
Bryan Cantrill's Papers We Love talk on FreeBSD Jails and Solaris Zones, tracing how OS-level virtualization grew out of chroot and the limits of the traditional UNIX security model.

DEF CON 22 - Deviant Ollam & Howard Payne - Elevator Hacking - From the Pit to the Penthouse
Deviant Ollam and Howard Payne give an in-depth DEF CON 22 explanation of how elevators work, from the pit to the penthouse.

[HOPE X] Elevator Hacking: From the Pit to the Penthouse
A HOPE X talk giving an in-depth explanation of how elevators work, from their history in hacker culture to using their control systems to bypass building security.