Dade

I did indeed say that. It's hard to know how long a bug will stay valid when that bug is in software that is literally designed to automatically update.

I've read a plethora of nonfiction. The Cuckoo's Egg was one of my favorites. Hacker / Tech Nonfiction I've read: Kingpin Spam Nation @War Countdown to Zero Day Ghost in the Wires Art of Intrusion Art of Deception Where Wizards Stay Up Late The Baby Harvest The Cuckoo's Egg Masters of Deception Worm Then in the fictional but educational realm there's these two: Dissecting the Hack: The F0rb1dd3n Network Dissecting the Hack: The V3rb0t3n Network Fictional Hacker/Cyberpunk/etc I've read: REAMDE Snow Crash Neuromancer WIZZYWIG Cryptonomicon Hacker Nonfiction I wish to read: Crack99 I'm also hoping to get into some of Cory Doctorow's work soon, it looks really good.

I just picked up a book called Zeroes, by Chuck Wendig. I'm about half way through it. 10/10 would read hacker fiction again.

With DeadUpdate having come out recently, the first thing I thought was to build a module for the pineapple. I haven't had the chance to pick up a new nano yet so I'm not able to develop it right now, but I figured I'd drop the idea here in case anyone else wanted to run with it :) Though one interesting thing to note is that since this is a vulnerability in an automatic updater tool, it's likely that it'll automatically be patched and end users would be none the wiser. So it's debatable how useful a module such as this might be. TL;DR push arbitrary executables to ASUS laptops for fun and profit.

You could also probably find people to do a remote session via Hangouts or something. Pick some ideas for things you want to cover, or find someone who is doing awesome research that you want to learn more about, and ask if they'll talk to your high school group. A lot of people in info sec like to share knowledge, so I don't think you'll have too hard a time finding professionals to talk with. You might also look around at local universities to see what their Computer Science or info sec departments have going on to get involved with. Also sctf does student capture the flags every quarter (or so) and could be a great opportunity for you guys to get hands on experience breaking things. As someone who was passionate about helping my local high school once upon a time, let me provide a few resources: HackerRank: This provides programming challenges, often more in the traditional programming competition style. Programming is an important skill to have, and you could have small competitions with each other there. Overthewire: Overthewire.org provides various wargames machines that you can play on. Exploit different holes to progress to the next level. Cybrary: cybrary.it offers video resources for many certifications to help you study. This could be particularly helpful if your school doesn't have any local computer experts or any classes. Old defcon talks are also awesome resources. There are years of defcon talks and Chaos Communication Congress talks and blackhat talks that are just ripe for watching on youtube. Good luck finding people to help out.