David Bombal

Big thanks to Proton VPN for sponsoring this video. To get a 75% discount on Proton VPN this Black Friday month, please use the following link: https://protonvpn.com/davidbombal

// Buy Hak5 coolness //
Buy Hak5 stuff here: https://davidbombal.wiki/gethak5

Why does the USB Rubber Ducky look like a normal flash drive but behave like a keyboard? Darren Kitchen, founder of ‪@hak5‬, tells David Bombal how a tool for fixing printers became a famous hacking device.

‪@DarrenKitchen‬ shares the story behind the USB Rubber Ducky, from hiding early circuit boards inside actual rubber ducks to building DuckyScript and developing a security tool used for automation, awareness training, and authorized red teaming.

We explore why computers accept input from USB keyboards, how keystroke injection works, and why an apparently harmless device can issue commands much faster than a person. Darren also explains Keystroke Reflection, a technique that uses keyboard indicator signals such as Caps Lock, Num Lock, and

Scroll Lock to transfer small amounts of data without relying on a normal network connection, when the host and access conditions permit it.

In this conversation:
• Why the Rubber Ducky originally helped Darren fix printers and network shares
• How a USB device can identify itself as a human interface device (HID)
• What DuckyScript does and how it evolved
• The security implications of high-speed keystroke injection
• How Keystroke Reflection works in principle, including air-gapped scenarios
• Darren's stories about the Rubber Ducky appearing in television and film
Learn more about the USB Rubber Ducky: https://shop.hak5.org/products/usb-ru... Hak5's explanation of Keystroke Reflection: https://shop.hak5.org/blogs/usb-rubbe...

What surprised you most: that it started as an IT shortcut, or the keyboard LED technique? Let us know in the comments. This interview discusses security research and authorized testing. Only use security tools on systems you own or are explicitly permitted to assess.

// Darren Kitchen SOCIAL //
YouTube: / darrenkitchen
Website: https://hak5.org/pages/hack-across-am...
X: https://x.com/hak5darren

// Hak5 WEBSITE //
https://davidbombal.wiki/gethak5

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU//
0:00 - Intro
0:30 - Hak5 Rubber Ducky origins
01:28 - What is a Rubber Ducky?
04:07 - Proton VPN sponsor segment
06:54 - How it works + origin story
12:03 - How the Rubber Ducky was created
13:40 - DuckyScript
17:48 - A powerful tool for automation
19:02 - Keyboard vulnerability // Rubber Ducky payload
23:58 - Rubber Ducky in media // Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#USBRubberDucky #Hak5 #Cybersecurity

Big thanks to Cisco & Splunk for sponsoring my trip to .Conf 2026 and also for sponsoring this video.

What happens when shooting an enemy in a Doom game deletes a real Kubernetes pod? Splunk built a Doom clone that does exactly that, then tracks the chaos in live dashboards. In this video, Heath shows me Metric Mayhem, a Doom-style game connected to a live e-commerce demo application running on Kubernetes. Enemies represent pods in the application, so playing the game creates real failures for Splunk to monitor.

We also look at Trace Invaders, Splunk’s take on Space Invaders, and how Chaos Mesh adds CPU stress, memory stress, and latency to the environment. Heath explains how the team captures game events as logs and turns them into dashboards showing deleted pods, player scores, boss defeats, and finish times.

In this video:
How game enemies map to Kubernetes pods

What happens in the demo when a pod is deleted and replaced
How Chaos Mesh introduces stress and latency
How Splunk Observability Cloud shows the impact on the application
How game logs power Splunk dashboards and leaderboards
Why an interactive game makes a monitoring demo easier to understand

If you’re learning Kubernetes, chaos engineering, or observability, this is a fun way to see how failures become useful data.
Would you try this in your own test lab? Let me know in the comments.

// Heath Johnson SOCIAL //
LinkedIn: / heathjohnsonvm

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 – Introduction
0:29 – Why Splunk Built a Video Game
01:03 – “DOOM” and Trace Invaders
01:45 – Chaos Engineering with Chaos Mesh
02:26 – Splunk Observability Cloud
03:27 – How the Game Was Created
04:24 – The Splunk Gaming Dashboard
05:18 – How Game Data Gets Into Splunk
05:41 – Gamifying Splunk
06:17 – What Data Can Splunk Ingest?
06:30 – What Does “Being Splunky” Mean?
07:12 – Gaming Chaos Meets Business Value
07:24 – Monitoring Kubernetes Metrics
07:47 – Building Custom Splunk Dashboards

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#SplunkSponsored #Kubernetes #SplunkConf

Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount.

// Glen Sorensen’s SOCIAL //
LinkedIn: / glen-sorensen
DeleteMe LinkedIn: / deleteme

// Article REFERENCE //
https://protonvpn.com/blog/windows-is...

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - Coming Up
0:49 - Why Privacy Matters Even If You Have Nothing to Hide
01:49 - How Much Are We Being Surveilled?
02:52 - How Companies Collect and Sell Your Personal Data
05:43 - Sponsor: Proton Drive
07:32 - Who Is Buying Your Personal Data?
08:34 - How Streaming Services and Smart TVs Track You
10:19 - Why Mobile Apps Are a Privacy Risk
11:41 - How Easy Is It to Find Someone's Personal Information?
13:11 - Doxxing, Scams and the Dangers of Exposed Data
14:32 - How Hackers Use Personal Data to Attack Companies
16:03 - How Is Mass Surveillance Legal?
17:01 - License Plate Readers and Location Tracking
18:13 - Are Smart TVs Spying on You?
19:03 - What Can I Actually Do?
21:55 - Does DeleteMe Really Work?
25:50 - Can You Ever Be Anonymous Online?
28:02 - Which Operating System Is Best for Privacy?
31:31 - How to Audit Your Apps and Permissions
33:36 - The Best Privacy-Focused Web Browsers
34:40 - Outro

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#privacy #vpn #internet

What happens when NVIDIA's AI drives a Mercedes-Benz CLA through Berlin traffic? David Bombal rides along to see how Alpamayo and the Halos safety stack work together.

At GTC Berlin, I ride in a Mercedes-Benz CLA running a development version of NVIDIA's Alpamayo driving software. We encounter cyclists, pedestrians, narrow roads, unusual junctions, parked cars and unpredictable drivers while the car handles much of the driving under human supervision.

We look at what is actually happening behind the scenes: an end-to-end AI model proposes a driving path, a separate classical safety stack checks the environment and rules, and a trajectory arbiter decides when to allow the plan or fall back. The car uses on-board NVIDIA DRIVE Orin computing, cameras, radar and ultrasonic sensors.

We also discuss training with US and European driving data, simulation with NVIDIA Cosmos, the difference between this development vehicle and NVIDIA's downloadable Alpamayo research models, and what it takes to adapt the system to different vehicles and countries.

In this video:
• A live AI-assisted drive through busy Berlin streets
• How Alpamayo and the classical Halos safety stack work together
• Why narrow roads, cyclists and German traffic lights are difficult cases
• The cameras, radar, ultrasonic sensors and DRIVE Orin hardware
• How real-world data and Cosmos simulation help train and test driving models
• Which Alpamayo research models you can explore yourself Important: this demonstration is a supervised Level 2 driver-assistance system.

The person in the driver's seat remains attentive and responsible; this is not an unsupervised robotaxi. Would you trust AI-assisted driving in a busy city? Which situation would you want it to handle first?

NVIDIA Alpamayo: https://www.nvidia.com/en-us/solution...
NVIDIA Halos: https://www.nvidia.com/en-us/ai-trust...

Alpamayo research downloads: https://developer.nvidia.com/drive/do...

Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// TIMESTAMPS //
0:00 - Intro
0:39 - Not a normal Mercedes
01:42 - How the Alpamayo stack works
02:52 - Levels of self-driving cars
04:01 - How the cameras work
05:10 - Difference between Alpamayo and Halos
07:49 - Self-driving cars in the future
08:30 - Alpamayo vs standard LLM
10:00 - Going for a drive // Training the AI model
14:52 - Alpamayo and Halos working together
15:38 - Left side and right side driving
16:21 - Smooth driving behaviour
18:47 - Petrol (Gas) vs electric cars
19:47 - Real-world scenario driving
21:16 - Petrol (Gas) vs electric cars continued
22:56 - Unique traffic laws
25:49 - The future of Aplamayo and Halos
26:49 - Difference to other self-driving cars
28:45 - Aplamayo on Hugging Face
30:35 - Trusting self-driving cars
33:02 - Handling unusual scenarios
34:17 - Adjusting acceleration based on the vehicle
37:05 - Hardware explained
38:43 - Self-driving cars in the future pt.2
39:57 - How the model is trained
41:38 - Conclusion

#NVIDIA #AutonomousDriving #Alpamayo

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal

Your phone can be tricked into connecting to a fake cell tower. These devices are commonly known as Stingrays, cell-site simulators or IMSI catchers. They can be used to
identify and locate phones in an area, and some attacks can interfere with the security of your cellular connection.

At Black Hat and DEF CON, I spoke to Cooper Quintin, Senior Staff Technologist at the Electronic Frontier Foundation (EFF), about Rayhunter.

Rayhunter is an open-source project from the EFF designed to detect suspicious cellular activity using inexpensive mobile hotspot hardware.

In this interview, Cooper explains how Stingrays and IMSI catchers work, why your phone can connect to a fake cell tower, what an IMSI is, how cellular downgrade attacks work, what a null cipher is, how Rayhunter detects suspicious activity, and what the EFF has learned from real-world deployments.

We also get into mobile forensic extraction, phone searches at the border, biometrics vs PINs and passwords, and the bigger question of how much surveillance power governments and law enforcement should have.

Thanks to ThreatLocker for sponsoring my trip to Black Hat and DEF CON and for sponsoring this video.
#CyberSecurity #Privacy #Hacking

// Cooper Quintin’s SOCIAL //
EFF Website: https://www.eff.org/about/staff/coope...
LinkedIn: / cooper-quintin-932029125
Website: https://cooperq.com/

// Web Page REFERENCE //
https://www.eff.org/deeplinks/2025/03...
https://www.eff.org/
https://ssd.eff.org/

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - Intro
0:52 - Cooper Quintin introduction
01:18 - Rayhunter tool by EFF
02:45 - Stingrays used by law enforcement
05:05 - How the Rayhunter works
08:44 - Threatlocker sponsor segment
09:59 - Rayhunter results
12:06 - Concerns of Stingrays
14:02 - Why should people care
15:17 - Concerns of mobile forensic extraction tools
17:17 - Password vs biometric
18:04 - Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.
#cybersecurity #bhusa26 #privacy