hackertubescom

HACKER TUBES / 播放列表

重新审视安全假设

从物理访问、移动系统与硬件供应链入手，重新理解安全系统为什么难以构建。

6 部视频 · 6 小时 19 分钟

开始观看

建议观看顺序

点击任意视频开始观看，在观看页通过上一部、下一部继续这个清单。

  1. 01

    Elevator Hacking: From the Pit to the Penthouse

    DeviantOllam · 9 则 HN 推荐

    Deviant Ollam's two-hour conference talk explains how elevators work, from the pit and buffers to the car top, controller logic and access-control features. It shows how this knowledge can be used for optimization and for bypassing building security.

  2. 02

    Behind the Scenes of iOS Security

    Black Hat · 9 则 HN 推荐

    Apple security head Ivan Krstic gives a Black Hat 2016 talk on iOS security, covering HomeKit, Auto Unlock and iCloud Keychain. He explains key hierarchies and how data can stay safe even in adversarial clouds.

  3. 03

    BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”

    Microsoft Israel R&D Center · 6 则 HN 推荐

    Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report. He explains how undocumented components could be hidden on boards and how hard they are to spot.

  4. 04

    28c3: The Science of Insecurity

    28c3 · 9 则 HN 推荐

    Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.

  5. 05

    USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?

    USENIX · 10 则 HN 推荐

    James Mickens's humorous USENIX Security keynote argues that improving security and trusting opaque technology like machine learning is far harder than the industry admits.

  6. 06

    Cybersecurity as Realpolitik by Dan Geer presented at Black Hat USA 2014

    Black Hat · 1 则 HN 推荐

    Dan Geer's Black Hat 2014 keynote argues that cybersecurity is a matter of power and policy rather than wishful thinking. He covers surveillance, the vulnerability market, software liability and privacy as the capacity to misrepresent yourself.