The majority of content on this site either falls into the Security, Cloud, or JavaScript category.
security - ctf - bash - linux - debian - ssh - javascript - obfuscation - csp - chrome extensions - privacy - mechanical phish - hacrs - statistics - personal - covid - firewire - truecrypt - ssh firewall - hacking - bittorrent - sed - networking - forensics - usb - pie charts - fuzzing - java - cloud - co2 - flight - new york - subway - go - ios - tracking
Stripping URL query parameters with an iOS shortcut to reduce tracking June 25, 2023
Go or No Go: Differential Fuzzing of Native and C Libraries May 25, 2023
Connecting Block Business Units with AWS API Gateway May 19, 2023
NYC Old City Hall Subway Station Tour May 14, 2023
Invited Lecture in Language-Based Security at Chalmers University May 4, 2023
Measuring CO2 Concentration as Proxy for COVID Risk on a Flight - Concentration Is Highest From Boarding Until Reaching Cruising Altitude December 28, 2022
Tap to Pay on iPhone October 20, 2022
HotFuzz published in ACM Transactions on Privacy and Security July 19, 2022
Bridging Security Infrastructure Between the Data Center and AWS Lambda August 7, 2021
Using Lambda extensions to accelerate Secrets Manager access October 8, 2020
Providing mutual TLS Identities to AWS Lambdas August 27, 2020
HotFuzz - Fuzzing Java Programs for Algorithmic Complexity Vulnerabilities February 23, 2020
Pie Charts in the Land of Confusion: Of Cakes and Camemberts March 23, 2019
Ex-Ray: Finding Browser Extensions That Spy on Your Browsing Habits October 5, 2017
HaCRS Improves Mechanical Phish Bug Finding with Human Assistance September 26, 2017
These Chrome extensions spy on 8 million users March 31, 2016
Function-level JavaScript instrumentation with Closure Compiler September 29, 2015
Boston Key Party 2015 - Kendall challenge (Superfish) March 1, 2015
Content Security Policy - Trends and Challenges July 14, 2014
CSAW CTF Qualifications 2012 - Networking 300 October 1, 2012
PlaidCTF 2012 Challenge Torrent - Practical Packets writeup (200 points) April 30, 2012
Finding differences in JavaScript programs with the help of parse trees February 18, 2012
Connecting seamlessly with ssh through intermediate hosts December 21, 2011
iCTF 2011 challenge 15 writeup (150 points) December 20, 2011
Personalizing shell accounts that are used by multiple users December 19, 2011
iCTF challenge animation December 16, 2011
PlaidCTF Writeup: Fun with Firewire May 18, 2011