hackertubescom

HACKER TUBES / 播放清單

重新審視安全假設

從實體存取、行動系統與硬體供應鏈入手，重新理解安全系統為什麼難以建構。

6 部影片 · 6 小時 19 分鐘

開始觀看

建議觀看順序

點擊任意影片開始觀看，在觀看頁透過上一部、下一部繼續這份清單。

  1. 01

    Elevator Hacking: From the Pit to the Penthouse

    DeviantOllam · 9 則 HN 推薦

    Deviant Ollam's two-hour conference talk explains how elevators work, from the pit and buffers to the car top, controller logic and access-control features. It shows how this knowledge can be used for optimization and for bypassing building security.

  2. 02

    Behind the Scenes of iOS Security

    Black Hat · 9 則 HN 推薦

    Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain. He explains key hierarchies and how data can stay safe even in adversarial clouds.

  3. 03

    BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”

    Microsoft Israel R&D Center · 6 則 HN 推薦

    Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report. He explains how undocumented components could be hidden on boards and how hard they are to spot.

  4. 04

    28c3: The Science of Insecurity

    28c3 · 9 則 HN 推薦

    Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.

  5. 05

    USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?

    USENIX · 10 則 HN 推薦

    James Mickens's humorous USENIX Security keynote argues that improving security and trusting opaque technology like machine learning is far harder than the industry admits.

  6. 06

    Cybersecurity as Realpolitik by Dan Geer presented at Black Hat USA 2014

    Black Hat · 1 則 HN 推薦

    Dan Geer's Black Hat 2014 keynote argues that cybersecurity is a matter of power and policy rather than wishful thinking. He covers surveillance, the vulnerability market, software liability and privacy as the capacity to misrepresent yourself.