2 HN users recommended this talk2 months2017–2021score 3
Years with an HN recommendation, 2007–2026
It is a repeat pick in 'favorite tech talk' threads as a funny, eye-opening look at how easily physical security and people can be bypassed.
Jayson E. Street's DEF CON 19 talk shows photos from real security engagements where he was already inside client facilities, illustrating how social engineering and physical intrusion can cause huge losses. For each attack he also explains what defenses would have stopped him.
“The absolute funniest tech talk I've seen” (HN, 2021)
Jayson E. Street: Steal Everything, Kill Everyone, Cause Total Financial Ruin! [this video] Van Albert and Banks: Looping Surveillance Cameras through Live Editing [link] Ken Thompson: Reflections on Trusting Trust [link] And of course, Simple Made Easy, Wat, etc.
This something that the speaker in the famous "steal everything, kill everyone..." [1] defcon talk refers to as the "jedi wave" and makes similar remarks about. I think it's a great name. [1] [this video]
All of that sounds impressive, until you see red team pros talk about how the whole apparatus melts before the gentlest of social engineering- [this video] I'd also be concerned with leaking of mass amounts of records at once due to a security lapse on servers where it's a bit easier for grossly inadequate protections to lurk unnoticed- [link] I think I've read that Google doesn't even store the original recordings, but distorts them randomly to make them unrecognizable but still intelligible by their models. That seems like a pretty reasonable way to protect people, provided they're informed and there's no link back to the original account.
Red team pros show security melting under social engineering
They do do that, if I understand correctly. Penetration testing handles the physical security of the company. [DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! ]( [this video] ) Social Engineering [Hacking the Wetware: Compromising Companies with Social Engineering]( [link] )
Video list and Hacker News comment labels from HackerTube (prompted by @karpathy), released under ODC-By 1.0, built on the open-index/hacker-news archive. Hacker News data is provided by Y Combinator; comments remain the work of their authors. Video titles, channel names and thumbnails belong to their creators and are shown via YouTube. HackerTube Watch is an unofficial edition. Data export of 2026-10-31.
Plays via YouTube's privacy-enhanced embed
5 Hacker News comments
From the HN archive; up to 20 kept per video, favoring different commenters. Recommendations first.
Citations, criticism and jokes
Read more