A really cool talk was the Dash button talk. The presenter exploited a bug in the audio stack, or as I like to think about it, he got the firmware by singing the secret code word.