projects
github
youtube
twitter
talks
press
≈) samy kamkar
WIRED: Watch How a Hacker's Infrared Laser Can Spy on Your Laptop's Keystrokes
9to5Mac: Invisible laser beam detects what a MacBook user is typing
Techopedia: The Day I Took MySpace Offline
Darknet Diaries Podcast: Samy
Business Insider: Legendary hacker's advice to today's young hackers
New York Times: Why Is This Chocolate Shimmering Like a Rainbow?
The Takeout: Shiny rainbow chocolate remains a beautiful mystery
C-Suite Quarterly: 40 Under 40
New York Times: Locking More Than the Doors as Cars Become Computers on Wheels
NPR: This Gray Hat Hacker Hacks Into Your Car To Prove A Point
VICE: Man Versus Machine (Op-Ed)
WIRED: Wickedly Clever USB Stick Installs a Backdoor on Locked PCs
Gizmodo: This $5 Device Can Take Over a Computer—Even If It's Locked
TechCrunch: The $5 PoisonTap quickly, completely hijacks even a locked computer’s internet
Ars Technica: Meet PoisonTap, the $5 tool that ransacks password-protected computers
Hackaday: PoisonTap makes raspberry pi zero exploit locked computers
Beyond Bad USB: Poisontap takes over your sleeping computer with a $5 USB stick
BBC: $5 'Poison Tap' hacks locked computers
The Register: PoisonTap fools your PC into thinking the whole internet lives in an rPi
Popular Mechanics: This $5 Device Can Hack Into Your Computer Even If It's Locked
Forbes: This $5 Device Can Hack Into Your Computer Even If It's Locked
TechCrunch: Warning: Do not let a drone equipped with terrifying robo-scissors cut your hair
WIRED: Why All Companies Should Hire Hackers
The Verge: The Mr. Robot Hack Report: MagSpoof
TechCrunch: Do not let a drone equipped with terrifying robo-scissors cut your hair
Threatpost: FBI Mum on Real-World KeySweeper Attacks
Digital Trends: FBI finally warns private business sector about snooping KeySweeper
Ars Technica: Beware of keystroke loggers disguised as USB phone chargers, FBI warns
Threatpost: Six Things To Watch For In 2016
WIRED: The Greatest Hits of Samy Kamkar
SCMagazine: Samy Kamkar's latest trick, spoofing canceled Amex cards
Hacker makes canceled American Express card work again
Boing Boing: Tiny open-source gadget simulates replacement Amex cards, disables chip-and-PIN
PC World: This gizmo knows your Amex number before you've received your new card
WIRED: A $10 Tool Can Guess (And Steal) Your Next Credit Card Number
Splinter: Samy Kamkar Turning Hackers Into Heroes
VICE/Motherboard: The MySpace Worm that Changed the Internet Forever
Fox News: Are bounty-hunting hackers the key to car security?
Gizmodo: Your Car Can Be Hacked. So What Are Auto-Makers Doing About It?
Engadget: OwnStar car hacker can remotely unlock BMWs, Benz and Chrysler
Hollywood Reporter: Hackers Reveal How They Could Steal Cars
MAKE: Anatomy of the RollJam Wireless Car Hack
TechCrunch: A $30 Dongle Can Unlock Your Car And Garage Remotely
Boing Boing: Cheap DIY gadget can open most keyless car doors, garages
Tom's Hardware: More Car Hacks From DefCon 23
Road and Track: Hacker's $30 Device Unlocks Just About Any Keyless Entry Car
Gizmodo: $32 Worth of Electronics Can Open Almost Any Keyless Car Door or Garage
Engadget: This $30 device defeats almost any keyless car or garage door
CNBC: This tiny device can hack a car's entry system
DailyMail: The $30 'universal remote' for cars that could give hackers access to your vehicle in seconds and even open your garage door
Network World: $32 RollJam Device can break into most cars and garage doors
The Register: Hack a garage and the car inside with a child's toy and a few chips
Bloomberg: How to Wirelessly Steal Cars
WIRED: This Hacker’s Tiny Device Unlocks Cars And Opens Garages
TechInsider: A hacker made a $30 gadget that can unlock many cars that have keyless entry
Business Insider: A hacker made a $30 gadget that can unlock many cars that have keyless entry
Motherboard/VICE: Unlock Almost Any Car and Garage Door With This $30 Device
Ars Technica: Meet RollJam, the $30 device that jimmies car and garage doors
Forbes: RollJam: This $50 'Universal Remote' Unlocks All Kinds Of Car Doors
Fox News: Hacker's RollJam device can steal your car keys, open your garage
Komando: A $32 hacker gadget opens almost any car or garage door
Ask Men: RollJam Device Works As "Universal Remote" For Car Doors
Popular Science: Thanks to this device, stealing your car has never been easier
Popular Science: Car hacker working with gm to fix onstar vulnerabilities
Road and Track: This Homemade Device Can Remotely Hack Any OnStar-Equipped Car
TechInsider: A hacker has a way to almost completely control a GM car and it only costs $100
WIRED: This Gadget Hacks GM Cars to Locate, Unlock, and Start Them
WIRED: Patch Your OnStar iOS App to Avoid Getting Your Car Hacked
Venture Beat: Researcher says he can hack GM’s OnStar app, open vehicle, start engine
Threatpost: OwnStar Device Can Remotely Locate, Unlock, and Start GM Cars
Business Insider: The GM OnStar hack still isn't completely fixed
Mashable: Hacker discovers major vulnerability in GM cars, hijacks vehicle functions
Make: Hacker Defeats a Master Combo Lock in Under Eight Tries
Slashdot: Opening Fixed-Code Garage Doors With a Toy In 10 Seconds
Tom's Guide: Hacked Child's Toy Opens Your Garage Door in Seconds
WIRED: This hacked kids toy opens garage doors in seconds
Boing Boing: Open garage-doors in less than a minute with a hacked kid's toy
Threatpost: Using a Toy to Open a Fixed-Code Garage Door in 10 Seconds
Popular Mechanics: A Hacked Kids Toy Could Open Your Garage Door
VICE: This Kids' Toy Can Hack Garage Doors in Seconds
Gizmodo: You Can Hack a Children's Toy to Open Random Garage Doors
TechCrunch: This Robot Cracks Open Combination Locks In Seconds
Gizmodo: Crack a Combination Lock In 30 Seconds With This 3D-Printed Contraption
WIRED: This Little 3-D Printed Robot Cracks Combination Locks In 30 Seconds
Atmel: This Arduino-based device can crack a Master Lock in under 30 seconds
DailyMail: Hacker 3D prints gadget that can crack a combination lock in 30 SECONDS
The Economist: Copping a 'copter: Rogue Drones
Motherboard/VICE: Here’s How to Break Open a Master Lock In Two Minutes
Business Insider: Hacker Claims to Crack Master Lock Combos Under Two Minutes
Gizmodo: The Trick to Cracking a Master Combo Lock in 8 Tries or Fewer
Boing Boing: Anyone can open a Master Lock padlock in under two minutes
Popular Mechanics: Here's How to Crack a Master Lock in Just 8 Tries
Lifehacker: This Calculator Helps You Crack Any Master Combination Lock in 8 Tries
Reuters: Hacker claims to crack Master Lock combos under two minutes
Ars Technica: How to crack any Master combo lock
Fortune: 6 notorious hackers and their second careers
DailyMail: The £6 'spy box' that tracks EVERYTHING you type
TechCrunch: This Fake Phone Charger Is Actually Recording Every Key You Type
Telegraph: The £6 box which spies on everything you type
Ars Technica: Meet KeySweeper, the $10 USB charger that steals MS keyboard strokes
Slashdot: Wireless Keylogger Masquerades as USB Phone Charger
ZDNet: A $10 USB charger with built-in wireless keylogger means more security headaches
Slashgear: Arduino-based KeySweeper charger sniffs MS wireless keyboards
Business Insider: Hackers Can Use A $10 Wall Charger To Intercept Anything Typed On Wireless Microsoft Keyboards
Tom's Guide: USB Charger Steals Microsoft Keystrokes
Threatpost: How a $10 USB Charger Can Record Your Keystrokes Over the Air
Ubergizmo: This USB Phone Charger Can Sniff Out Keystrokes From Wireless Keyboards
Atmel: A $10 USB charger can record your keystrokes wirelessly
The Hacker News: KeySweeper - Arduino-based Keylogger for Wireless Keyboards
SC Magazine: Researcher builds $10 spy tool disguised as wall charger
VentureBeat: this USB wall charger secretly logs your keystrokes
The Register: This $10 phone charger will wirelessly keylog your boss
Boing Boing: creepy keystroke logger camouflaged as USB charger
Boing Boing: Horrifying proof-of-concept USB attack
Gizmodo: Watching a USB Hack in Action Makes Me Never Want to Leave My Computer
TechCrunch: This Little USB Necklace Hacks Your Computer In No Time Flat
VICE: Motherboard: All the Ways Your Phone Can Be Hacked
History Channel: America's Book of Secrets: Big Brother
Entrepreneur: Drones That Attack Other Drones
NBC: Could Prime Air Drones Be Hacked?
Huffington Post: SkyJack Drones Can Hack Other Drones
Business Insider: Watch this Drone Hunt and Hack Other Drones
RT: SkyJack: Hacker-Drone that can wirelessly hijack drones
TechCrunch: Infamous Hacker Creates SkyJack to Hack Drones
Engadget: Raspberry Pi-equipped AR Drone can hijack other drones
Gizmodo: SkyJack Lets You Hunt Down and Hack Other Drones
WIRED: Flying hacker contraption hunts other drones
PCMag: SkyJack Software Finds and Hijacks Drones
VICE/Motherboard: How to Raise Your Own Zombie Drone Army
Discovery: Drone Hijacks Others In Air, Makes Them Zombies
BBC: Parrot drones vulnerable to flying attack
Ars Technica: Flying hacker contraption hunts other drones
Slashdot: How to hijack a drone for $400 in less than an hour
Threatpost: How to SkyJack a Drone in an Hour
Network World: Amazon's Nightmare: Software Hijacks Drones
SlashGear: SkyJack, based on Raspberry Pi, is a Hijacking Drone
CNET: Stanford researcher exposes Microsoft's Wi-Fi database
CNET: Microsoft's Web map exposes phone, PC locations
CNET: Researchers probe Google's geolocation database
RT: Privacy Issues in the US
CNET: Google curbs Web map exposing phone locations
LA Times: Hacker attacks show vulnerability of cloud computing
CNET: Google's Web mapping can track your phone
Wall Street Journal: Jobs Tries to Calm iPhone Imbroglio
The Register: Google sued over Android location data
Wall Street Journal: The ID Android Uses in Collecting Location
Technorati: Apple Tracks You, Android Tracks You. Who to Believe?
Tom's Guide: Google and Microsoft Tracking Your Location Too
Huffington Post: Google's Wi-Fi Database Knows Your Location
USA Today: Android location logging sparks privacy concerns
Huffington Post: Google Is Tracking Android Users' Location Data
CNET: Android data tied to users? Some say yes
Gizmodo: Wi-Fi Location Data Google Collects From Your Phone
NBC Nightly News: Privacy disclosures prompt fears of iTracker
NPR: Google, Too, Is Collecting Location Information From Phones
The Register: Google location tracking can invade privacy
The Guardian: Phones building vast databases for Google Apple
Ars Technica: Android phones keep location cache
MSNBC: Apple, Google tap phone location data
PC Magazine: Apple's iPhone Tracking
USA Today: Apple, Google collecting location data on users
Washington Post: The Circuit: iPhone data
Reuters: Apple, Google tap phone location data
CNET: E-mail security: Back on the front burner
Examiner: Google responds to location tracking furball
CNET: How police have obtained iPhone, iPad tracking logs
Wall Street Journal: Apple, Google Receive Phone Users' Locations
Forbes: Discover work email addresses with Peepmail
Fox News: Apple, Google Receive Phone Users' Locations
MSNBC: Discover others' work email addresses with Peepmail
Atlantic: Peepmail Finds Email Addresses Not Publicly Available
Slate: Countdown to Armageddon
Lifehacker: Peepmail Finds People's Email Addresses at Businesses
Wall Street Journal: Tool Shows Vulnerability of Email Addresses
NPR: How Science and Technology Influence Language
Wall Street Journal: Evercookies and Fingerprinting
Slashdot: Nevercookie Eats Evercookie
Slashdot: Unkillable Evercookie Killed ... Sometimes
The Economist: The cookie that never crumbles
Fast Company: Beware the Evercookie
CNBC: New Web Code Draws Concern Over Risks to Privacy
New York Times: Web Code Sees What Users Do Online
Slashdot: Geolocation XSS Tracker Proof of Concept
reddit: Find anyone's physical address (1600+ reddits)
The Register: Uber-zombie cookie give us the fear
Ars Technica: Zombie Cookie Wars
Slashdot: Introducing the Invulnerable Evercookie
MSNBC: Evercookie is one cookie you don't want to bite
PC World: The Cookie That Doesn’t Crumble
reddit: Samy's evercookie (1000+ reddits)
PC World: After Google Incident, Wi-Fi Data Collection Goes on
The Register: Hack uses Google Street View data to stalk its victims
Huffington Post: Web attack knows where you live
BBC: Web attack knows where you live
Slashdot: Using XSS and Google To Find Physical Location
CNET: On iPhone, beware of that ATT Wi-Fi hot spot
Bit-Tech: Hacker releases NAT traversal tool
Softpedia: Samy Worm Author Releases End-to-End NAT Traversal Tool
H Online: PHP blunders with random numbers
reddit: pwnat - NAT-to-NAT communication (1000+ reddits)
MITM iPhone's PhotoSwap: How To Steal Hot Pics Of Chicks
The Register: Hacker pierces hardware firewalls with web page
The Register: Hacker pilfers browser GPS location via router attack
The Register: Contest seeks the most diminutive XSS worm
Washington Post: Samy Worm Creator
ABC News: MySpace Hacker Tells His Story
PC World: Is Web 2.0 Safe?
Washington Post: As Web 2.0 evolves, security becomes an issue
PC World: Web 2.0 Security Seriously Flawed
Forbes: How To Hack MySpace
Slashdot: MySpace Worm Creator
Slashdot: Top 10 Web 2.0 Attack Vectors
Slashdot: XSS Vulnerabilities Reviewed and Re-Classified
The Guardian: Ajax prepares for battle on the dark side
Top 10 Web Moments of 2005
ZDNet: Samy opens new front in worm war
The Register: Web 2.0 worm downs MySpace
ComputerWorld: Teen uses worm to boost ratings on MySpace.com
Slashdot: Cross-Site Scripting Worm Floods MySpace
Google Blogoscoped interview: Samy, Their Hero
WebProNews: When In Hacker Doubt, Have A Burrito
Betanews interview: Cross-Site Scripting Worm Hits MySpace
Slashdot: First Ever Secure [Encrypted] IRC Network