Best Security & hacking Videos
「Security & hacking」下面有192部被不同的人、在不同月份推荐过的视频。挑的时候先看对象:入门7部,适合还没学过的人;进阶63部,适合已经懂术语的人;普通向85部,按兴趣就能看;更硬的37部,留给想看推导或细节的人。这一类数量最多的是演讲,所以它们的共同点是一位讲者把一个判断讲完,例子是为了撑住这个判断。常出现的频道包括DEFCONConference、media.ccc.de、Black Hat。目录给这个主题划的范围是:Computer security: vulnerabilities, exploits, malware, reverse engineering, CTF, penetration testing, Black Hat and DEF CON talks, OS security, memory safety, zero-days, responsible disclosure.如果只看三部,就从《Behind the Scenes of iOS Security》开始,它负责把问题讲出画面;然后看《Why Electronic Voting Is Still A Bad Idea》,换一种讲法或例子;最后看《USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?》,留给已经有基础的人。页面按每页24部切开,顺序看的是被推荐跨越了多少个月,不是播放量。每条标题下面那一句是这部片子自己的内容说明,用来区分它在讲定义、过程、演示还是观点。点进去能看到推荐原话、原文链接和适合谁看。看的时候把强烈推荐当成有人明确叫你去看,把引用当成只是拿来举例,把批评留下来对照,不要把每条评论都当成同一力度。

The Internet Was Weeks Away From Disaster And No One Knew
Veritasium tells the story of the XZ backdoor, how a patient attacker became maintainer and nearly compromised SSH on Linux systems.

DeepSec 2010: All your baseband are belong to us by Ralf Philipp Weinmann
A DeepSec 2010 conference talk by Ralf Philipp Weinmann on attacking the baseband processor of mobile phones rather than the application processor.

OpenSesame - hacking garages in seconds using a Mattel toy
Samy Kamkar demonstrates OpenSesame, a device that opens many fixed-code garage doors in seconds by exploiting a newly found attack, built around a Mattel toy.

The Memory Sinkhole - Unleashing An X86 Design Flaw Allowing Universal Privilege Escalation
Christopher Domas's Black Hat 2015 talk on a long-unnoticed x86 design flaw that lets an attacker reach System Management Mode, a ring below the OS.

seL4 Is Free – What Does This Mean For You?
Gernot Heiser presents seL4, a microkernel with a mathematical proof connecting security properties to the binary code, and explains what its open-sourcing means for users.

BadUSB - On Accessories that Turn Evil by Karsten Nohl + Jakob Lell
Karsten Nohl and Jakob Lell present BadUSB at Black Hat 2014, showing that USB controller firmware can be reprogrammed to impersonate other device types.

DEFCON 20: Bigger Monster, Weaker Chains: The National Security Agency and the Constitution
A DEFCON 20 panel with NSA whistleblower William Binney, journalist James Bamford and ACLU lawyers on the NSA's mass collection of communications and its conflict with the Constitution.

Voting Machines: Last Week Tonight with John Oliver (HBO)
John Oliver's Last Week Tonight segment on US voting machines, covering how they work, their security weaknesses, and how elections could be made more secure.

Black Hat USA 2013 - Spy-Jacking the Booters
Brian Krebs and Lance James present research on DDoS booter services at Black Hat 2013, including the SWATting Krebs suffered.

Sneakers (1992): My Voice Is My Passport
A one-minute clip from the 1992 film Sneakers in which characters defeat a voice-authentication system by splicing recorded phrases, ending on the line "My voice is my passport." It was posted to illustrate a post on government surveillance.

Trinity uses nmap in The Matrix Reloaded
A very short clip from The Matrix Reloaded in which Trinity runs nmap and then uses an SSH exploit.

Microsoft is Getting Rusty: A Review of Successes and Challenges - Mark Russinovich
Mark Russinovich's closing keynote at Rust Nation UK on Microsoft's adoption of Rust, covering security gains, integration challenges, performance results and lessons learned.

Intel ME explained (intel management engine) from insider
A short video explaining the Intel Management Engine, a hidden embedded computer inside Intel machines with deep access to hardware.

Testing Apple's Touch ID with Fake Fingerprints
Tested explains how Apple's Touch ID recognizes fingerprints, then tries to defeat it using fake fingers and prints, retracing methods claimed by a German computer club.

Wiretapping the Secret Service can be easy and fun | Bryan Seely | TEDxKirkland
Bryan Seely tells how he used fake Google Maps business listings to intercept phone calls meant for the Secret Service and FBI.

SANS ICS HyperEncabulator
SANS ICS Security's parody video of the HyperEncabulator, a spoof of the Turbo Encabulator technobabble videos.

!!Con 2020 - Playing Breakout… inside a PDF!! by Omar Rizwan
Omar Rizwan's short !!Con talk about writing a Breakout game in JavaScript that runs inside a PDF.

What happens if you connect Windows XP to the Internet in 2024?
Eric Parker connects a fresh Windows XP machine to the internet in 2024 to see how quickly it gets infected with malware.

Linus Torvalds - Backdoor In Linux
A short clip from the 2013 LinuxCon Linux Kernel Panel in which Linus Torvalds is asked about being approached to insert a backdoor into Linux.

Gov. Parson holds fake news accountable.
A one-minute political ad from a PAC tied to Missouri Governor Mike Parson attacking a reporter who disclosed a state website flaw as a hacker.

Protected KVM on Arm64: A Technical Deep Dive - Quentin Perret, Google
Quentin Perret of Google gives a technical deep dive into protected KVM (pKVM) on Arm64, a confidential computing approach for CPUs without hardware extensions.

Hackers (8/13) Movie CLIP - Hack the Gibson (1995) HD
A short clip from the 1995 film Hackers in which the characters attempt to hack the Gibson supercomputer, shown with flashy stylized visuals of digital intrusion.

[787] LiteLok Gold Cut in 16 Seconds!
LockPickingLawyer cuts through a LiteLok flexible bike lock with cable cutters in about 16 seconds, one of several videos defeating the product.

34C3 - Console Security - Switch
A 34C3 talk on the security architecture of the Nintendo Switch and the early progress breaking it.