HackerTube

THE VIDEO SHELF · language-theoretic security

28c3: The Science of Insecurity

Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.

Why HN readers recommended it

HN commenters call it one of the best security talks and the standard introduction to LANGSEC, which they use to argue for simpler, well-specified input formats.

This is a summary from the source dataset, not an endorsement by Hacker News or the video creator.

Video & recommendation details

Creator / channel
28c3
Topic
language-theoretic security
Format
talk
Level
intermediate
HN recommenders in dataset
9
HN mentions in dataset
13
Recommendation years in dataset
2012–2024

These counts and years describe the included Hacker News records; they are not YouTube views or the video’s publication date.

From the original HN conversations

Excerpts from the recorded comments. Follow each source for the full comment and surrounding discussion.

  • Meredith Patterson's astonishing CCC talk on computing and linguistics. It's a tour de force, presenting a systematic and practical proposal for how we can build an open and secure future for computing. I can't imagine a better example of the joys of inter-disciplinary thinking. [VIDEO]

    jdietrich on Hacker News · 2013-04
    In Ask HN: What's the best technical talk you've heard?
  • > 1. Simpler formats for file representation and data interchange. When someone tries to add an extra bitfield option, say no. When they keep trying, get a wooden stick with "no" written on it. Part of the disease of modern computing is bloated specs. > …

    sedachv on Hacker News · 2016-05
    In Remote code execution vulnerability in ImageMagick
  • Item [8] was mentioned in this talk: [VIDEO] by Meredith Patterson. She contends, and it seems sound to me, that the time has passed to be "tolerant when accepting," and that you should instead only accept regular grammars or, at worst, context-free grammars as input …

    mkn on Hacker News · 2012-03
    In Tanenbaum’s advice for building product, networks, and living life.

Summaries, classifications and recommendation records are from the HackerTube source dataset. Read about this library and its limitations.