Meredith Patterson and Sergey Bratus argue that networked software stays insecure because protocols and inputs are too complex to recognize safely. They propose using formal language theory and grammars to build secure, verifiable input handling.

Why Hacker News readers recommend it: HN commenters call it one of the best security talks and the standard introduction to LANGSEC, which they use to argue for simpler, well-specified input formats.

“The best talk on computer security I have seen is Meredith Patterson's Science of Insecurity at 28c3”

View the original HN discussion

Related videos

talk

Ruby Conf 12 - Y Not- Adventures in Functional Programming by Jim Weirich

Confreaks

17 recommenders · 18 months·evergreen

talk

Behind the Scenes of iOS Security

Black Hat

9 recommenders · 11 months·dated

explainer

Why Electronic Voting Is Still A Bad Idea

Tom Scott

11 recommenders · 11 months·evergreen

talk

USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?

USENIX

10 recommenders · 10 months·evergreen

talk

Defcon 18 Changing threats to privacy Moxie Marlinspike Part

killab66661

6 recommenders · 10 months·evergreen

talk

"Propositions as Types" by Philip Wadler

Strange Loop Conference

9 recommenders · 8 months·evergreen

talk

DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome

DEFCONConference

11 recommenders · 8 months·evergreen

talk

Elevator Hacking: From the Pit to the Penthouse

DeviantOllam

9 recommenders · 7 months·evergreen