Best Security & hacking Videos
「Security & hacking」下面有192部被不同的人、在不同月份推荐过的视频。挑的时候先看对象:入门7部,适合还没学过的人;进阶63部,适合已经懂术语的人;普通向85部,按兴趣就能看;更硬的37部,留给想看推导或细节的人。这一类数量最多的是演讲,所以它们的共同点是一位讲者把一个判断讲完,例子是为了撑住这个判断。常出现的频道包括DEFCONConference、media.ccc.de、Black Hat。目录给这个主题划的范围是:Computer security: vulnerabilities, exploits, malware, reverse engineering, CTF, penetration testing, Black Hat and DEF CON talks, OS security, memory safety, zero-days, responsible disclosure.如果只看三部,就从《Behind the Scenes of iOS Security》开始,它负责把问题讲出画面;然后看《Why Electronic Voting Is Still A Bad Idea》,换一种讲法或例子;最后看《USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?》,留给已经有基础的人。页面按每页24部切开,顺序看的是被推荐跨越了多少个月,不是播放量。每条标题下面那一句是这部片子自己的内容说明,用来区分它在讲定义、过程、演示还是观点。点进去能看到推荐原话、原文链接和适合谁看。看的时候把强烈推荐当成有人明确叫你去看,把引用当成只是拿来举例,把批评留下来对照,不要把每条评论都当成同一力度。

DEF CON 23 - Zoz - And That's How I Lost My Other Eye...Explorations in Data Destruction (Fixed)
Zoz's DEF CON 23 talk explores practical, often explosive ways to destroy data and hard drives quickly.

How to Design Impenetrable Airport Security
A Wendover Productions explainer on how airport security is designed, covering screening layers, x-ray scanning, and the contrast with Israel's profiling-based approach.

37C3 - Operation Triangulation: What You Get When Attack iPhones of Researchers
A 37C3 talk by Kaspersky researchers on Operation Triangulation, a zero-click iPhone attack that targeted their own colleagues.

Nicholas Carlini - Black-hat LLMs | [un]prompted 2026
Nicholas Carlini of Anthropic talks at [un]prompted 2026 about how adversaries could misuse current LLMs for attacks.

Keynote - Karen Sandler
Karen Sandler's keynote at Linux.conf.au 2012 on the software running inside medical devices such as her own pacemaker-defibrillator.

Lawyer. Passport. Locksmith. Gun. (A Talk About Risk & Preparedness)
Deviant Ollam gives a long talk on risk and preparedness: get a lawyer, passport, locksmith and other resources before you need them.

DEF CON 19 - Artem Dinaburg - Bit-squatting: DNS Hijacking Without Exploitation
Artem Dinaburg's DEF CON 19 talk on bit-squatting, where DRAM bit flips cause DNS requests to go to domains one bit off from the intended one.

How I Fixed a 10 Year Old Guitar Hero Bug Without the Source Code
A reverse engineer walks through fixing a ten-year-old bug in Guitar Hero III without access to its source code, using a disassembler and decompiler.

Can you fit a whole game into a QR code?
MattKC fits a playable Snake game into a QR code by writing tiny x86 machine code and patching the ZBar scanner so it can run the decoded data.

Hackfest 2015: Theo de Raadt presented "Pledge: A new security technology in openbsd"
Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need.

Scammers Wanted $3,000 - They Watched Me Spend It All
Kitboga baits tech-support scammers into believing they will get $3,000, wasting hours of their time while he plays along and screen-shares.

RustConf 2020 - Closing Keynote by Siân Griffin
RustConf 2020 closing keynote by Sian Griffin that dives into Pokemon Blue glitches, notably Missingno and arbitrary-code-execution tricks.

Here's Why Your Static Website Needs HTTPS
Troy Hunt argues that even static, non-secret websites need HTTPS, demonstrating attacks such as injected content and China's Great Cannon.

Black Hat 2013 - OPSEC Failures of Spies
Matthew Cole's Black Hat 2013 talk on operational security failures by CIA operatives.

How I hacked a hardware crypto wallet and recovered $2 million
Joe Grand recounts being hired to hack a Trezor One hardware wallet and recover $2 million of cryptocurrency.

DEF CON 24 - Chris Rock - How to Overthrow a Government
A DEF CON 24 talk on how a cyber mercenary group could forge identities and create the conditions for overthrowing a government.

Humans can't read URLs. How can we fix it? - HTTP 203
Jake Archibald argues that URLs are nearly impossible for humans to interpret, especially for security.

Behind the scenes of iOS and Mac Security
Ivan Krstic's Black Hat talk on Apple platform security, including the Find My design that uses elliptic curve key diversification to locate offline devices privately.

Florian Grunow, Niklaus Schiess: Lifting the Fog on Red Star OS
A 32C3 talk dissecting Red Star OS, North Korea's state-built operating system.

BlueHat IL 2023 - David Weston - Default Security
David Weston's BlueHat IL 2023 talk traces the evolution of Windows security and previews Windows 11 and hardware advances.

Ralph Langner: Cracking Stuxnet, a 21st-century cyber weapon
In an 11-minute TED talk, Ralph Langner explains how his team reverse-engineered the Stuxnet worm and worked out that it targeted industrial control systems, with a covert state origin.

RustConf 2017 - Closing Keynote: Safe Systems Software and the Future of Computing by Joe Duffy
Joe Duffy's RustConf 2017 closing keynote on his experience at Microsoft building Midori, an operating system written in a Rust-like safe systems language.

27c3: Console Hacking 2010 (en)
The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits.

The KGB, the Computer, and Me (Complete)
The 1990 NOVA documentary follows astronomer Clifford Stoll as he tracks a hacker through military and research computer networks, a story that involved the CIA and KGB.