HACKER TUBES / 재생목록
Question your security assumptions
Explore physical access, mobile systems, hardware supply chains, and the wider problem of building secure systems.
6 개 영상 · 6 시간 19 분
시청 시작추천 시청 순서
동영상을 선택하세요. 시청 페이지에서 이전 및 다음 링크로 계속 볼 수 있습니다.
- 01

Elevator Hacking: From the Pit to the Penthouse
DeviantOllam · 9 개의 HN 추천Deviant Ollam's two-hour conference talk explains how elevators work, from the pit and buffers to the car top, controller logic and access-control features. It shows how this knowledge can be used for optimization and for bypassing building security.
- 02

Behind the Scenes of iOS Security
Black Hat · 9 개의 HN 추천Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain. He explains key hierarchies and how data can stay safe even in adversarial clouds.
- 03

BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”
Microsoft Israel R&D Center · 6 개의 HN 추천Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report. He explains how undocumented components could be hidden on boards and how hard they are to spot.
- 04

28c3: The Science of Insecurity
28c3 · 9 개의 HN 추천Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.
- 05

USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX · 10 개의 HN 추천James Mickens's humorous USENIX Security keynote argues that improving security and trusting opaque technology like machine learning is far harder than the industry admits.
- 06

Cybersecurity as Realpolitik by Dan Geer presented at Black Hat USA 2014
Black Hat · 1 개의 HN 추천Dan Geer's Black Hat 2014 keynote argues that cybersecurity is a matter of power and policy rather than wishful thinking. He covers surveillance, the vulnerability market, software liability and privacy as the capacity to misrepresent yourself.