Site Archives

  • About post type iconApr 1, 2014 – 900 Words –

    About me, the site, and its content

  • Job Hunt! post type iconJan 1, 0001 – 100 Words –
  • Publications post type iconJan 1, 0001 – 200 Words –

    Presentations, Papers, other data

  • Topics post type iconJan 1, 0001 – 300 Words –

    General topics and post types

  • Projects post type iconJan 1, 0001 – 500 Words –

    Longer-term special projects and interests

  • Dark Mode, and other site improvements post type iconApr 23, 2025 – 1700 Words –

    On a recent Accidental Tech Podcast member special, John Siracusa unknowingly nerd-sniped me when he mentioned adding Dark Mode to his website. This sent me down a lengthy path of improvements and fixes to this site.

  • Post post type iconApr 23, 2025 – 100 Words –
  • Programming post type iconApr 23, 2025 – 100 Words –
  • Software post type iconApr 23, 2025 – 100 Words –
  • Tags post type iconApr 23, 2025 – 100 Words –
  • Types post type iconApr 23, 2025 – 100 Words –
  • Web post type iconApr 23, 2025 – 100 Words –
  • Latest news on Spotlight Knowledge Events post type iconApr 18, 2025 – 700 Words –

    A couple months ago, I identified a (likely) bug in Intel versions of macOS Sequoia. How’s that been going? Though it’s faked me out a couple times…the bug is still here, and still just as bad.

  • Macos post type iconApr 18, 2025 – 100 Words –
  • Troubleshooting post type iconApr 18, 2025 – 100 Words –
  • Howto post type iconApr 11, 2025 – 100 Words –
  • Technology post type iconApr 11, 2025 – 100 Words –
  • Tools post type iconApr 11, 2025 – 100 Words –
  • Word Salad – Slicing and Dicing with awk and sort post type iconApr 11, 2025 – 4600 Words –

    You’ve got a big logfile, and something weird is happening, but you don’t know what. There’s lots of data there, and you’re sure there are patterns. How can you make sense of the chaos, quickly, when you really don’t even know where to begin? Sometimes, you just need The Old Tools.

  • Managing Sequoia Disk Space post type iconMar 11, 2025 – 3000 Words –

    After a lot of exploration and experimentation, I’m finally closing in on a strategy that, if it won’t SOLVE the problems Ive been having, should at least mitigate them.

  • Update on Spotlight and Disk Space Woes post type iconFeb 27, 2025 – 2800 Words –

    My Mac’s disk has been filling up. I think I figured out where the problem was, but spent a week collecting data to be sure. Now I’m more confident, but also more confused.

  • macOS Sequoia Disk Space…Vanishing! post type iconFeb 19, 2025 – 3500 Words –

    My Mac Mini’s disk kept filling up. A lot. Even after I got rid of crap, it filled up again. Multiple gigs in just a day. What the hell is going on?

  • Hardware post type iconJan 28, 2025 – 100 Words –
  • Replacing my Synology DS1515+ post type iconJan 28, 2025 – 2200 Words –

    My decade-old NAS finally conked out. Just how easy is it, really, to move the drives to a newer unit? Let’s find out.

  • Puzzles post type iconOct 1, 2024 – 100 Words –
  • Security post type iconOct 1, 2024 – 100 Words –
  • Update on August Ping Storms post type iconOct 1, 2024 – 3900 Words –

    Still poking around the Noise Storm rabbit hole. I think I’ve figured out the four main packet types in this storm.

  • Ping Storms at GreyNoise post type iconSep 27, 2024 – 2600 Words –

    GreyNoise has been seeing crazy noise storms full of pings for years. I may have figured out what some of them are.

  • Funemployment, and Next Steps post type iconJul 9, 2024 – 2100 Words –

    A year ago, I got laid off. It’s been a weird ride since then…

  • Job-Hunt post type iconJul 9, 2024 – 100 Words –
  • Personal post type iconJul 9, 2024 – 100 Words –
  • Series post type iconJul 9, 2024 – 100 Words –
  • Work post type iconJul 9, 2024 – 100 Words –
  • Home-Automation post type iconApr 26, 2021 – 100 Words –
  • Remote-Keypad post type iconApr 26, 2021 – 100 Words –
  • Using an Adafruit NeoTrellis Keypad with MQTT post type iconApr 26, 2021 – 2200 Words –

    Writing the firmware for a NeoTrellis keypad to allow it to send and receive MQTT controls, and dealing with keypad library read/write conflicts.

  • Building a remote-control home automation keypad post type iconApr 25, 2021 – 1100 Words –

    Introduction to a series about a 16-key remote-control MQTT keypad

  • Code post type iconMar 11, 2021 – 100 Words –
  • Codenames Board Generator post type iconMar 11, 2021 – 1500 Words –

    Building a board generator for Codenames as a fun diversion

  • Fun post type iconMar 11, 2021 – 100 Words –
  • 1password post type iconNov 12, 2018 – 100 Words –
  • 1Password – Full Trip from Unlock to Encryption post type iconNov 12, 2018 – 1900 Words –

    Pulling the whole series together to demonstrate the 1Password vault system from unlock to item decryption

  • Cryptography post type iconNov 12, 2018 – 100 Words –
  • BSidesDE – A deep dive into 1Password Security post type iconNov 9, 2018 – 100 Words –

    Slides from my BSidesDE talk, November 9, 2018. A detailed description of how 1Password client unlocking and shared vault encryption works.

  • Lists post type iconNov 9, 2018 – 100 Words –
  • Presentations post type iconNov 9, 2018 – 100 Words –
  • Reference post type iconNov 9, 2018 – 100 Words –
  • 1Password – Wrapping up with a few quick topics post type iconNov 9, 2018 – 1400 Words –

    Finishing the Inside 1Password series with some miscellaneous topics

  • 1Password – Local Vaults post type iconNov 9, 2018 – 2400 Words –

    Looking at how Local Vaults are encrypted, and how that affects unlocking 1Password clients

  • 1Password – Into the Vaults! post type iconNov 9, 2018 – 1500 Words –

    How 1Password’s shared vaults work

  • 1Password – Unlocking Windows Clients post type iconNov 9, 2018 – 2100 Words –

    How the Encrypted Master Key works to unlock the Windows 1Password client

  • 1Password – MUKing about on the Mac post type iconNov 9, 2018 – 2000 Words –

    The Master Unlock Key and unlocking 1Pass on macOS

  • How 1Password Works – Getting under the hood post type iconNov 9, 2018 – 800 Words –

    Beginning of a deep dive into how 1password works

  • Encrypting for Apple’s Secure Enclave post type iconMay 31, 2018 – 2200 Words –

    How to properly encrypt EICES-format messages to be decrypted by the iOS and macOS Secure Enclave system

  • Ios post type iconMay 31, 2018 – 100 Words –
  • Crafts post type iconOct 17, 2017 – 100 Words –
  • Infosec Conference Badge Display post type iconOct 17, 2017 – 600 Words –

    I had way too many conference badges hanging from a stuffed moose head. So I built a nice display for my office.

  • Woodworking post type iconOct 17, 2017 – 100 Words –
  • Engineering post type iconSep 12, 2017 – 100 Words –
  • Rant post type iconSep 12, 2017 – 100 Words –
  • Technology Sucks post type iconSep 12, 2017 – 1500 Words –

    My 3D Blu-Ray stopped working. It took an hour to figure out the stupid simple cause.

  • Astronomy post type iconAug 24, 2017 – 100 Words –
  • Eclipse. post type iconAug 24, 2017 – 3900 Words –

    I’ve been waiting for this eclipse for nearly 40 years. Here’s how I got to see it firsthand.

  • Photography post type iconAug 24, 2017 – 100 Words –
  • Travel post type iconAug 24, 2017 – 100 Words –
  • iPhone Secure Enclave Firmware Key Found post type iconAug 17, 2017 – 1700 Words –

    The key to decrypt the firmware for the Secure Enclave Processor (SEP) on the iPhone 5S has been disclosed. It’s actually potentially a good thing.

  • New Website Engine post type iconAug 7, 2017 – 800 Words –

    I decided the site needed a visual overhaul, and didn’t want to keep hacking the old engine, so found a new one.

  • Homestuff post type iconAug 3, 2017 – 100 Words –
  • New Standing Desk post type iconAug 3, 2017 – 1100 Words –

    Adding a Fully Jarvis J3 standing desk frame to my IKEA desk

  • ShmooCon 2017 Badge (and more) Contest – Solutions post type iconJan 20, 2017 – 8500 Words –

    ShmooCon 13 Badge contest, scoring, solutions to the puzzles.

  • Puzzle-Data post type iconJan 20, 2017 – 100 Words –
  • ShmooCon 2017 Badge (and more) Contest – Challenges post type iconJan 20, 2017 – 1400 Words –

    Just the challenges from the 2017 ShmooCon badge puzzle / contest. No spoilers.

  • BSidesROC – A (not so quick) Primer on iOS Encryption post type iconApr 23, 2016 – 100 Words –

    Slides from my BSidesROC talk, April 23, 2016. An overview of how iOS encryption works, with emphasis on passcoes and potential attacks.

  • Poem Codes – WWII Crypto Techniques post type iconMar 27, 2016 – 2700 Words –

    A rough introduction to how poem codes work and how they may have been used in practice by SOE agents in WWII.

  • Put away the tin-foil: The Apple unlock case is complicated enough post type iconFeb 19, 2016 – 2100 Words –

    A high-level summary of what we know, what we think we know, and what we know we don’t know, as well as some words of caution.

  • Mobile post type iconFeb 10, 2016 – 100 Words –
  • Mobile App Authentication using TouchID and Tidas post type iconFeb 10, 2016 – 1000 Words –

    A first, rough look at a new mobile app authentication service from Trail of Bits

  • Blizzard of 2016 Time-lapse post type iconJan 22, 2016 – 1200 Words –

    A quick, simple rig to film a time-lapse video of snow piling up on my desk in a blizzard.

  • Weather post type iconJan 22, 2016 – 100 Words –
  • ShmooCon – My Hash Is My Passport: Understanding Web and Mobile Authentication post type iconJan 17, 2016 – 400 Words –

    Slides from my ShmooCon talk, January 17, 2016. A detailed overview of how Digest, NTLM, and OAuth work in the context of web and mobile applications.

  • DLP Considered Harmful – A Rant about Reliable Certificate Pinning post type iconNov 24, 2015 – 1600 Words –

    Yet another uninformed, unrealistically idealistic rant about how things *ought* to be. Most readers will probably strongly disagree.

  • Pki post type iconNov 24, 2015 – 100 Words –
  • Thoughts on CyberUL and Infosec Research post type iconJul 29, 2015 – 1900 Words –

    A discussion of ideas I’ve been kicking around about security research in general, and how current CyberUL speculation fits in.

  • Passwords post type iconApr 21, 2015 – 100 Words –
  • Salt as a Service: Interesting approach to hashing passwords post type iconApr 21, 2015 – 1100 Words –

    A new service called Blind Hashing, that incorporates salts taken from petabyte-sized cloud databases, hopes to make password cracking obsolete.

  • Nails in the Crypt – White Paper post type iconMar 6, 2015 – 100 Words –

    Nails in the Crypt – White Paper

  • Papers post type iconMar 6, 2015 – 100 Words –
  • Lenovo, CA Certs, and Trust post type iconFeb 20, 2015 – 1000 Words –

    The Lenovo-installed SuperFish man-in-the-middle malware has me thinking again about how the CA system is still broken.

  • ShmooCon – Knock Knock: A Survey of iOS Authentication Methods post type iconJan 23, 2015 – 1700 Words –

    Slides from my ShmooCon talk. A short review of multiple iOS apps and how they handle server authentication, looking at both network use and on-device storage of credentials.

  • Appletv post type iconNov 18, 2014 – 100 Words –
  • DerbyCon 2013 – Apple TV and Raspberry Pi Slides post type iconNov 18, 2014 – 100 Words –

    DerbyCon 2013 – Apple TV and Raspberry Pi Slides

  • Reverse-Engineering post type iconNov 18, 2014 – 100 Words –
  • Bypassing the lockout delay on iOS devices post type iconNov 18, 2014 – 700 Words –

    A bug in iOS (fixed in 8.1.1) allows a well-timed reboot to bypass the forced lockout timeout, allowing for multiple PIN attempts.

  • Why I hate voting. post type iconNov 4, 2014 – 800 Words –

    The parties have made voting even more of a hassle, and more infuriating, than the months of attack ads we endure.

  • What’s the deal with keyless entry car thefts? post type iconOct 28, 2014 – 1100 Words –

    Videos of people breaking into cars, and reports of hijacked dealer equipment. Real-world example of why backdoors are bad?

  • Link post type iconOct 27, 2014 – 100 Words –
  • MCX – a lousy substitute for proven technology post type iconOct 27, 2014 – 700 Words –

    MCX – a lousy substitute for proven technology

  • Privacy post type iconOct 27, 2014 – 100 Words –
  • iPhone SMS forwarding — cool, but may be risky post type iconOct 24, 2014 – 700 Words –

    If you’ve enabled SMS forwarding on your iPhone, you might want to ensure that messages don’t get displayed on your Mac when it’s locked.

  • Rebutting FUD and privacy issues surrounding Yosemite Spotlight post type iconOct 21, 2014 – 300 Words –

    A response from Apple downplays security concerns raised over how Spotlight search works on Yosemite.

  • NoVA Hackers – iOS Cryptography Slides post type iconOct 14, 2014 – 700 Words –

    Slides from a quick NoVA Hackers talk I pulled together based on recent blog posts about Apple iOS encryption and privacy changes.

  • Even more posts about iOS encryption post type iconOct 8, 2014 – 700 Words –

    The “Apple can’t decrypt devices for law enforcement” conversation continues to spawn excellent posts and explanations.

  • A (not so) quick primer on iOS encryption post type iconOct 6, 2014 – 3900 Words –

    Making sense of how iOS encryption works, especially what’s changed in iOS 8 and how Apple made it harder for law enforcement, can be difficult. I’ll try to help.

  • Beacons being deployed in NYC phone booths post type iconOct 6, 2014 – 300 Words –

    Advertising companies are placing Bluetooth beacons in New York City phone booths. Forbes explains this isn’t quite as scary as many think.

  • Data post type iconSep 5, 2014 – 100 Words –
  • Internet of SCADA, or, why does my HVAC blow? post type iconSep 5, 2014 – 1900 Words –

    My HVAC system is constantly failing. I’m building a system to closely monitor temps so I can catch failures earlier. After only a couple days with rough prototypes I’m already learning something useful.

  • Praetorian Crypto Challenge post type iconAug 25, 2014 – 600 Words –

    A fun set of (reasonably) quick crypto, puzzle, and hacking challenges from Praetorian.

  • Stealing user events from foreground apps on Android post type iconAug 22, 2014 – 200 Words –

    Quick description and demo videos for activity hijacking to steal user-entered data like passwords, credit card numbers, and check images. Includes links to USENIX paper.

  • BSidesLV 2014 Badge Contest post type iconAug 10, 2014 – 4500 Words –

    A badge puzzle / mini CTF at BSidesLV 2014. Created by Zack Fasel, sponsered by Urbane Security, won (somewhat soundly) by Darth Null.

  • BSidesLV 2014 Badge Contest – Challenges post type iconAug 10, 2014 – 500 Words –

    Just the challenges for the 2014 BSides Las Vegas badge puzzle / contest. No spoilers.

  • BSLV 2014 – Breaking PRNGs post type iconAug 6, 2014 – 400 Words –

    Quick review of BSidesLV Talk, in which they describe problems with the Mersenne Twister and other similer pseudo-random number generators.

  • Duo Security Bypasses PayPal 2FA for Mobile Apps post type iconJun 25, 2014 – 300 Words –

    Paypal mobile app authenticates, then kicks you out because it’s not two-factor compliant. They show how to leverage this into non 2FA access.

  • Early look at iOS 8 configuration profile changes post type iconJun 18, 2014 – 200 Words –

    A quick overview of changes to iOS configuation profile settings in the current iOS 8 beta.

  • More Mobile Malware Melodrama post type iconJun 17, 2014 – 500 Words –

    Lots of press recently about a potentially serious malware called Svpeng. A nice case study in the use of FUD in mainstream tech press.

  • iOS Malware – Still FUDish, not quite a Real Problem (yet) post type iconJun 10, 2014 – 800 Words –

    A consolidated list of known malware for iOS. Depending on your definition of malware.

  • Crazy-Ideas post type iconJun 2, 2014 – 100 Words –
  • Memory Pressure, Capacity Limits, and Ubiquitous Computing post type iconJun 2, 2014 – 900 Words –

    Last year, Apple introduced advanced power saving techniques. Can they do the same for memory? There’s never enough to smoothly switch between apps. If they can fix that, a world of opportunities opens.

  • Making Tunnelblick + Google Authenticator Easier to Use post type iconMay 30, 2014 – 1100 Words –

    VPNs which require 2-Factor Google Authenticator codes are a pain to start up in Tunnelblick on OS X. Here’s a script to make it easier.

  • Apple ID Compromise and Device Lockout post type iconMay 27, 2014 – 400 Words –

    Recent reports of users getting locked out of their iOS devices, probably due to compromise of their Apple ID password.

  • iOS Backups are Still Broken post type iconMay 19, 2014 – 500 Words –

    Backing up iOS devices to iCloud is still opaque and unreliable. And iTunes Wi-Fi backups just don’t work at all.

  • How much of your email goes through Google? post type iconMay 12, 2014 – 200 Words –

    Running your own server to protect the anonymity and content of your email is great, as long as nobody else you exchange messages with uses Gmail. How many of your emails are also on a Google server?

  • Bugs post type iconMay 8, 2014 – 100 Words –
  • Inadvertent OS X Mail Loading of Images in SPAM post type iconMay 8, 2014 – 300 Words –

    Mail.app’s protection against loading images on suspected SPAM messages is broken when forwarding the email to a spam-reporting service.

  • Osx post type iconMay 8, 2014 – 100 Words –
  • Dark Reading on the VZ DBIR puzzle post type iconMay 6, 2014 – 100 Words –

    Dark Reading article on the DBIR Puzzle

  • Referrer considered harmful: Leaking location of obscurely shared docs post type iconMay 6, 2014 – 300 Words –

    Shared files, hidden by the obscurity of their URLs, may be revealed to third parties if the files contain a link to an external site. The remote site can find the file via the referrer header.

  • Apple ID Madness post type iconMay 4, 2014 – 1100 Words –

    How we set up multiple personal iCloud accounts for the family, and a couple of shared accounts for parents and kids.

  • Blabbering post type iconMay 2, 2014 – 100 Words –
  • It’s time to (re)start. post type iconMay 2, 2014 – 300 Words –
  • BSidesROC 2014 – Crypto Puzzle post type iconApr 5, 2014 – 100 Words –
  • Crosspost post type iconMar 10, 2014 – 100 Words –
  • Sanitize your outputs: Apple ID Password Logfile Disclosure post type iconMar 10, 2014 – 1500 Words –
  • CVE-2014-1279 – Password Disclosure via Apple TV Touch Setup post type iconMar 10, 2014 – 1400 Words –
  • More Fun with Apple TV Hacking (and Manual RSA Signature Validation) post type iconFeb 21, 2014 – 1800 Words –
  • Apple TV Hacking, Counterattacks, and Certificate Pinning post type iconFeb 11, 2014 – 1000 Words –
  • ShmooCon 2014 – Crypto Puzzle Slides post type iconJan 19, 2014 – 100 Words –
  • Good fun with bad crypto post type iconJan 15, 2014 – 1300 Words –
  • Raspberry Pi Media Center on AppleTV – No Jailbreak Required post type iconSep 29, 2013 – 2600 Words –
  • iStupid: the indescreet SSID tool post type iconJun 19, 2013 – 200 Words –
  • Hijacking accounts using unicode magic post type iconJun 18, 2013 – 200 Words –
  • Apple’s security strategy: make it invisible post type iconJun 14, 2013 – 200 Words –
  • A chameleon for your streams post type iconJun 13, 2013 – 200 Words –
  • iOS 7 and Mavericks: New feature roundup from a security perspective – Intrepidus Group – Insight post type iconJun 11, 2013 – 100 Words –
  • iOS 7 and Mavericks: New feature roundup from a security perspective post type iconJun 11, 2013 – 1300 Words –
  • Android Security Overview post type iconJun 5, 2013 – 100 Words –
  • Skout server leaked nearly-exact location information on users post type iconMay 31, 2013 – 200 Words –
  • Auto-updating iOS apps post type iconMay 22, 2013 – 100 Words –
  • Two-factor authentication for Twitter: One account at a time post type iconMay 22, 2013 – 200 Words –
  • Google Hangouts and XMPP post type iconMay 17, 2013 – 400 Words –
  • Recovering iPhone Restrictions Passcode post type iconMay 16, 2013 – 100 Words –
  • Social Share Privacy post type iconMay 16, 2013 – 200 Words –
  • How To Safely Store A Password post type iconMay 16, 2013 – 100 Words –
  • Apple, Forensics, Law Enforcement, and FUD post type iconMay 13, 2013 – 1400 Words –
  • iSniff your Wi-Fi and GPS your House post type iconMay 10, 2013 – 1300 Words –
  • Risk post type iconMay 10, 2013 – 100 Words –
  • Archived-Comments post type iconMay 10, 2013 – 100 Words –
  • iSniff your WiFi – Archived Comments post type iconMay 10, 2013 – 600 Words –
  • DBIR Cover Challenge 2013 post type iconApr 29, 2013 – 2400 Words –
  • 2013 DBIR Puzzle – Archived Comments post type iconApr 29, 2013 – 300 Words –
  • iOS Configuration Profile Ransomware post type iconApr 11, 2013 – 600 Words –
  • Phishing post type iconApr 11, 2013 – 100 Words –
  • ShmooCon 2013 – Crypto Puzzle Slides post type iconFeb 17, 2013 – 100 Words –
  • Conferences post type iconFeb 12, 2013 – 100 Words –
  • Getting ready for ShmooCon post type iconFeb 12, 2013 – 300 Words –
  • Evading evasi0n: iOS 6 Jailbreak Prevention post type iconFeb 5, 2013 – 600 Words –
  • Mdm post type iconFeb 5, 2013 – 100 Words –
  • Tracking Down the UDID Source – Archived Comments post type iconSep 10, 2012 – 1100 Words –
  • Breach post type iconSep 10, 2012 – 100 Words –
  • Fidelis Decode This 2012 – Archived Comments post type iconSep 10, 2012 – 100 Words –
  • Tracking Down the UDID Breach Source post type iconSep 10, 2012 – 1500 Words –
  • What the flagnog? The Apple / FBI UDID breach, simplified. post type iconSep 5, 2012 – 1200 Words –
  • Winning the Decode This! puzzle at Black Hat post type iconAug 17, 2012 – 300 Words –
  • Fidelis Security Systems’ Decode This 2012 post type iconAug 17, 2012 – 1200 Words –
  • FidSecSys Decode This 2012 Ciphertext and Hints post type iconAug 17, 2012 – 200 Words –
  • Apple’s iOS Security Overview post type iconJun 20, 2012 – 600 Words –
  • Apple Using Unsalted Hashes Too? post type iconJun 7, 2012 – 600 Words –
  • Verizon 2012 DBIR Challenge post type iconMar 28, 2012 – 400 Words –
  • 2012 DBIR Puzzle – Archived Comments post type iconMar 28, 2012 – 600 Words –
  • 2012 Verizon DBIR Cover Challenge post type iconMar 28, 2012 – 3700 Words –
  • Verizon 2012 DBIR Sources post type iconMar 28, 2012 – 400 Words –
  • Quick Look at Apple Configurator post type iconMar 9, 2012 – 800 Words –
  • MDM Hacks – Archived Comments post type iconFeb 27, 2012 – 400 Words –
  • iOS MDM: Preventing Disassociation DOS and Potemkin Devices post type iconFeb 22, 2012 – 600 Words –
  • Verifying a Detached S/MIME Signature in Python post type iconFeb 21, 2012 – 600 Words –
  • BSides Phoenix 2012 Badge Puzzle post type iconFeb 19, 2012 – 1500 Words –
  • BSidesPHX 2012 Images post type iconFeb 19, 2012 – 100 Words –
  • Changes to iOS 5.0 MDM – Archived Comments post type iconFeb 15, 2012 – 1100 Words –
  • ShmooCon 2008 Puzzle – Archived Comments post type iconFeb 10, 2012 – 300 Words –
  • ShmooCon 2008 Badge Puzzle post type iconFeb 4, 2012 – 1900 Words –
  • ShmooCon 2012 Puzzle – Archived Comments post type iconFeb 4, 2012 – 1700 Words –
  • ShmooCon 2012 Badge Puzzle post type iconFeb 3, 2012 – 1800 Words –
  • ShmooCon 2012 Puzzle Data post type iconFeb 3, 2012 – 100 Words –
  • ShmooCon 2012 Puzzle Slides post type iconFeb 3, 2012 – 100 Words –
  • Changes to Apple MDM for iOS 5.x post type iconJan 31, 2012 – 300 Words –
  • ShmooCon 2012 – Apple MDM Slides post type iconJan 28, 2012 – 100 Words –
  • iOS MDM Command Reference post type iconJan 26, 2012 – 100 Words –
  • Finding Which Root CAs You Actually Use post type iconSep 2, 2011 – 500 Words –
  • BlackHat 2011 Fidelis Puzzle – Archived Comments post type iconAug 30, 2011 – 100 Words –
  • How to Lose $1000 in Vegas Without Even Gambling post type iconAug 30, 2011 – 1900 Words –
  • Fidelis Security “Decode This” Black Hat Challenge post type iconAug 30, 2011 – 100 Words –
  • First Anniversary post type iconAug 23, 2011 – 600 Words –
  • BlackHat 2011 Preview – Archived Comments post type iconAug 21, 2011 – 100 Words –
  • Strengths and Weaknesses in Apple’s MDM System post type iconAug 5, 2011 – 1400 Words –
  • BlackHat 2011 – Apple MDM Paper post type iconAug 4, 2011 – 100 Words –
  • BlackHat 2011 – Apple MDM Slides post type iconAug 4, 2011 – 100 Words –
  • CarolinaCon Flag Puzzle – Archived Comments post type iconJul 28, 2011 – 200 Words –
  • DEF CON 16 Puzzle – Archived Comments post type iconJul 28, 2011 – 100 Words –
  • Inside Apple’s MDM Black Box — Black Hat USA 2011 post type iconJul 28, 2011 – 500 Words –
  • Great Googly Moogly! I’m speaking at Black Hat! post type iconJul 28, 2011 – 800 Words –
  • DEF CON 16 Punch Card Puzzle post type iconJul 27, 2011 – 1400 Words –
  • Nails in the Crypt – Archvied Comments post type iconMay 23, 2011 – 400 Words –
  • CarolinaCon Flag Puzzle post type iconMay 8, 2011 – 1800 Words –
  • Analysis of iOS Location Data from Multiple Devices post type iconApr 25, 2011 – 2100 Words –
  • Is the iOS 4 location tracking privacy issue overblown? post type iconApr 20, 2011 – 600 Words –
  • The 2009 Verizon Data Breach Investigation Report post type iconApr 12, 2011 – 1500 Words –
  • 2009 Verizon DBIR Ciphertext post type iconApr 12, 2011 – 100 Words –
  • NoVAHackers – Nails in the Crypt slides post type iconApr 11, 2011 – 100 Words –
  • Quantifying the Unknown: Measuring a Theoretical SecurID Attack post type iconMar 22, 2011 – 1700 Words –
  • The RSA/SecurID Compromise: What is my risk? post type iconMar 18, 2011 – 900 Words –
  • RSA/SecurID Compromise – Archived Comments post type iconMar 18, 2011 – 1500 Words –
  • iOS Overlays – Archived Comments post type iconMar 12, 2011 – 100 Words –
  • VeriFone vs Square – A Draw? post type iconMar 9, 2011 – 600 Words –
  • Crazy idea for multi-user iPads post type iconFeb 25, 2011 – 700 Words –
  • Simple Bypass of Safari Restrictions on iOS post type iconFeb 15, 2011 – 600 Words –
  • Bypassing MDM Restrictions for Mobile Safari on iOS 4.2 post type iconFeb 15, 2011 – 700 Words –
  • ShmooCon 2011 Puzzle – Archived Comments post type iconFeb 9, 2011 – 100 Words –
  • ShmooCon 2011 Badge Contest post type iconFeb 9, 2011 – 4400 Words –
  • ShmooCon 7 Ciphertexts post type iconFeb 9, 2011 – 1200 Words –
  • Breaking a 147-Year-Old Message post type iconDec 30, 2010 – 4000 Words –
  • Civil War Code Ciphertext post type iconDec 30, 2010 – 300 Words –
  • Civil War Ciphers Fall! post type iconDec 30, 2010 – 900 Words –
  • Nails in the Crypt post type iconDec 22, 2010 – 800 Words –
  • Rainbow Tables for Unix DES Crypt(3) Hashes post type iconDec 20, 2010 – 600 Words –
  • ToorCon 12 Puzzle – Archived Comments post type iconDec 7, 2010 – 400 Words –
  • ToorCon 12 Badge Puzzle Ciphertexts post type iconDec 6, 2010 – 400 Words –
  • ToorCon 12 Badge Puzzle post type iconDec 6, 2010 – 4500 Words –
  • THOTCON Pre-Sale Code Puzzle post type iconNov 22, 2010 – 2700 Words –
  • DEF CON 18 Crypto Challenge post type iconSep 2, 2010 – 3700 Words –
  • DEF CON 18 Crypto Challenge Ciphertexts post type iconSep 2, 2010 – 600 Words –
  • Puzzles and Contests post type iconAug 29, 2010 – 1800 Words –

    A quick list of some of the puzzles or contests that I’ve won, with links to writeups (when they exist).

  • ShmooCon 2010 Badge Puzzle Data post type iconAug 29, 2010 – 100 Words –
  • ShmooCon 2010 Badge Contest post type iconAug 29, 2010 – 2500 Words –
  • Quahogcon Flag Puzzle – Archived Comments post type iconAug 24, 2010 – 300 Words –
  • QuahogCon Flag Puzzle post type iconMay 20, 2010 – 1900 Words –
  • THOTCON 0x1 – Archived Comments post type iconMay 11, 2010 – 200 Words –
  • THOTCON 0x1 Puzzle post type iconMay 11, 2010 – 2900 Words –
  • ShmooCon 2009 Badge Contest post type iconApr 27, 2010 – 2000 Words –
  • Crazy Security Con Weekend! post type iconApr 23, 2010 – 500 Words –
  • Khanfu post type iconApr 23, 2010 – 100 Words –
  • Belief-vs-Skepticism – Archived Comments post type iconApr 20, 2010 – 900 Words –
  • Blind Belief vs Excessive Skepticism post type iconApr 20, 2010 – 1300 Words –
  • Half-Baked Idea: Isolate Browser Security Contexts to Limit XSS Attacks post type iconApr 14, 2010 – 1300 Words –
  • It’s Time To Start post type iconApr 14, 2010 – 200 Words –
  • Talks and Presentations post type iconJan 1, 0001 – 400 Words –

    • Source

    Similar Posts