The Curious Engineer

All blogs / Security

DarthNull.org

darthnull.org

Recent content in DarthNull.org - David Schuetz Rambles about Stuff on Darth Null

SecurityDev tools / editors / IDEsGeneral

’05’10’15’20’25
Posts
196 from 1 Jan 2001 to 23 Apr 2025
Posting
now and then
Kind
personal blog
Feed
https://darthnull.org/index.xml

2025 10

  1. Dark Mode, and other site improvements
  2. Types
  3. Making Stuff
  4. Latest news on Spotlight Knowledge Events
  5. Randomness
  6. Word Salad - Slicing and Dicing with awk and sort
  7. Managing Sequoia Disk Space
  8. Update on Spotlight and Disk Space Woes
  9. macOS Sequoia Disk Space...Vanishing!
  10. Replacing my Synology DS1515+

2024 4

  1. Update on August Ping Storms
  2. Infosec
  3. Ping Storms at GreyNoise
  4. Funemployment, and Next Steps

2021 4

  1. Using an Adafruit NeoTrellis Keypad with MQTT
  2. Building a remote-control home automation keypad
  3. Codenames Board Generator
  4. Puzzles and Fun

2018 9

  1. 1Password - Full Trip from Unlock to Encryption
  2. BSidesDE - A deep dive into 1Password Security
  3. 1Password - Wrapping up with a few quick topics
  4. 1Password - Local Vaults
  5. 1Password - Into the Vaults!
  6. 1Password - Unlocking Windows Clients
  7. 1Password - MUKing about on the Mac
  8. How 1Password Works - Getting under the hood
  9. Encrypting for Apple's Secure Enclave

2017 8

  1. Infosec Conference Badge Display
  2. Technology Sucks
  3. Eclipse.
  4. iPhone Secure Enclave Firmware Key Found
  5. New Website Engine
  6. New Standing Desk
  7. ShmooCon 2017 Badge (and more) Contest - Solutions
  8. ShmooCon 2017 Badge (and more) Contest - Challenges

2016 6

  1. BSidesROC - A (not so quick) Primer on iOS Encryption
  2. Poem Codes - WWII Crypto Techniques
  3. Put away the tin-foil: The Apple unlock case is complicated enough
  4. Mobile App Authentication using TouchID and Tidas
  5. Blizzard of 2016 Time-lapse
  6. ShmooCon - My Hash Is My Passport: Understanding Web and Mobile Authentication

2015 6

  1. DLP Considered Harmful - A Rant about Reliable Certificate Pinning
  2. Thoughts on CyberUL and Infosec Research
  3. Salt as a Service: Interesting approach to hashing passwords
  4. Nails in the Crypt - White Paper
  5. Lenovo, CA Certs, and Trust
  6. ShmooCon - Knock Knock: A Survey of iOS Authentication Methods

2014 38

  1. DerbyCon 2013 - Apple TV and Raspberry Pi Slides
  2. Bypassing the lockout delay on iOS devices
  3. Why I hate voting.
  4. What's the deal with keyless entry car thefts?
  5. MCX - a lousy substitute for proven technology
  6. iPhone SMS forwarding -- cool, but may be risky
  7. Rebutting FUD and privacy issues surrounding Yosemite Spotlight
  8. NoVA Hackers - iOS Cryptography Slides
  9. Even more posts about iOS encryption
  10. A (not so) quick primer on iOS encryption
  11. Beacons being deployed in NYC phone booths
  12. Internet of SCADA, or, why does my HVAC blow?
  13. Praetorian Crypto Challenge
  14. Stealing user events from foreground apps on Android
  15. BSidesLV 2014 Badge Contest
  16. BSidesLV 2014 Badge Contest - Challenges
  17. BSLV 2014 - Breaking PRNGs
  18. Duo Security Bypasses PayPal 2FA for Mobile Apps
  19. Early look at iOS 8 configuration profile changes
  20. More Mobile Malware Melodrama
  21. iOS Malware - Still FUDish, not quite a Real Problem (yet)
  22. Memory Pressure, Capacity Limits, and Ubiquitous Computing
  23. Making Tunnelblick + Google Authenticator Easier to Use
  24. Apple ID Compromise and Device Lockout
  25. iOS Backups are Still Broken
  26. How much of your email goes through Google?
  27. Inadvertent OS X Mail Loading of Images in SPAM
  28. Dark Reading on the VZ DBIR puzzle
  29. Referrer considered harmful: Leaking location of obscurely shared docs
  30. Apple ID Madness
  31. It's time to (re)start.
  32. BSidesROC 2014 - Crypto Puzzle
  33. Sanitize your outputs: Apple ID Password Logfile Disclosure
  34. CVE-2014-1279 - Password Disclosure via Apple TV Touch Setup
  35. More Fun with Apple TV Hacking (and Manual RSA Signature Validation)
  36. Apple TV Hacking, Counterattacks, and Certificate Pinning
  37. ShmooCon 2014 - Crypto Puzzle Slides
  38. Good fun with bad crypto

2013 24

  1. Raspberry Pi Media Center on AppleTV - No Jailbreak Required
  2. iStupid: the indescreet SSID tool
  3. Hijacking accounts using unicode magic
  4. Apple's security strategy: make it invisible
  5. A chameleon for your streams
  6. iOS 7 and Mavericks: New feature roundup from a security perspective – Intrepidus Group - Insight
  7. iOS 7 and Mavericks: New feature roundup from a security perspective
  8. Android Security Overview
  9. Skout server leaked nearly-exact location information on users
  10. Auto-updating iOS apps
  11. Two-factor authentication for Twitter: One account at a time
  12. Google Hangouts and XMPP
  13. Recovering iPhone Restrictions Passcode
  14. Social Share Privacy
  15. How To Safely Store A Password
  16. Apple, Forensics, Law Enforcement, and FUD
  17. iSniff your Wi-Fi and GPS your House
  18. iSniff your WiFi - Archived Comments
  19. DBIR Cover Challenge 2013
  20. 2013 DBIR Puzzle - Archived Comments
  21. iOS Configuration Profile Ransomware
  22. ShmooCon 2013 - Crypto Puzzle Slides
  23. Getting ready for ShmooCon
  24. Evading evasi0n: iOS 6 Jailbreak Prevention

2012 29

  1. Tracking Down the UDID Source - Archived Comments
  2. Fidelis Decode This 2012 - Archived Comments
  3. Tracking Down the UDID Breach Source
  4. What the flagnog? The Apple / FBI UDID breach, simplified.
  5. Winning the Decode This! puzzle at Black Hat
  6. Fidelis Security Systems' Decode This 2012
  7. FidSecSys Decode This 2012 Ciphertext and Hints
  8. Apple's iOS Security Overview
  9. Apple Using Unsalted Hashes Too?
  10. Verizon 2012 DBIR Challenge
  11. 2012 DBIR Puzzle - Archived Comments
  12. 2012 Verizon DBIR Cover Challenge
  13. Verizon 2012 DBIR Sources
  14. Quick Look at Apple Configurator
  15. MDM Hacks - Archived Comments
  16. iOS MDM: Preventing Disassociation DOS and Potemkin Devices
  17. Verifying a Detached S/MIME Signature in Python
  18. BSides Phoenix 2012 Badge Puzzle
  19. BSidesPHX 2012 Images
  20. Changes to iOS 5.0 MDM - Archived Comments
  21. ShmooCon 2008 Puzzle - Archived Comments
  22. ShmooCon 2008 Badge Puzzle
  23. ShmooCon 2012 Puzzle - Archived Comments
  24. ShmooCon 2012 Badge Puzzle
  25. ShmooCon 2012 Puzzle Data
  26. ShmooCon 2012 Puzzle Slides
  27. Changes to Apple MDM for iOS 5.x
  28. ShmooCon 2012 - Apple MDM Slides
  29. iOS MDM Command Reference

2011 32

  1. Finding Which Root CAs You Actually Use
  2. BlackHat 2011 Fidelis Puzzle - Archived Comments
  3. How to Lose $1000 in Vegas Without Even Gambling
  4. Fidelis Security "Decode This" Black Hat Challenge
  5. First Anniversary
  6. BlackHat 2011 Preview - Archived Comments
  7. Strengths and Weaknesses in Apple's MDM System
  8. BlackHat 2011 - Apple MDM Paper
  9. BlackHat 2011 - Apple MDM Slides
  10. CarolinaCon Flag Puzzle - Archived Comments
  11. DEF CON 16 Puzzle - Archived Comments
  12. Inside Apple's MDM Black Box -- Black Hat USA 2011
  13. Great Googly Moogly! I'm speaking at Black Hat!
  14. DEF CON 16 Punch Card Puzzle
  15. Nails in the Crypt - Archvied Comments
  16. CarolinaCon Flag Puzzle
  17. Analysis of iOS Location Data from Multiple Devices
  18. Is the iOS 4 location tracking privacy issue overblown?
  19. The 2009 Verizon Data Breach Investigation Report
  20. 2009 Verizon DBIR Ciphertext
  21. NoVAHackers - Nails in the Crypt slides
  22. Quantifying the Unknown: Measuring a Theoretical SecurID Attack
  23. The RSA/SecurID Compromise: What is my risk?
  24. RSA/SecurID Compromise - Archived Comments
  25. iOS Overlays - Archived Comments
  26. VeriFone vs Square - A Draw?
  27. Crazy idea for multi-user iPads
  28. Simple Bypass of Safari Restrictions on iOS
  29. Bypassing MDM Restrictions for Mobile Safari on iOS 4.2
  30. ShmooCon 2011 Puzzle - Archived Comments
  31. ShmooCon 2011 Badge Contest
  32. ShmooCon 7 Ciphertexts

2010 24

  1. Breaking a 147-Year-Old Message
  2. Civil War Code Ciphertext
  3. Civil War Ciphers Fall!
  4. Nails in the Crypt
  5. Rainbow Tables for Unix DES Crypt(3) Hashes
  6. ToorCon 12 Puzzle - Archived Comments
  7. ToorCon 12 Badge Puzzle Ciphertexts
  8. ToorCon 12 Badge Puzzle
  9. THOTCON Pre-Sale Code Puzzle
  10. DEF CON 18 Crypto Challenge
  11. DEF CON 18 Crypto Challenge Ciphertexts
  12. Puzzles and Contests
  13. ShmooCon 2010 Badge Puzzle Data
  14. ShmooCon 2010 Badge Contest
  15. Quahogcon Flag Puzzle - Archived Comments
  16. QuahogCon Flag Puzzle
  17. THOTCON 0x1 - Archived Comments
  18. THOTCON 0x1 Puzzle
  19. ShmooCon 2009 Badge Contest
  20. Crazy Security Con Weekend!
  21. Belief-vs-Skepticism - Archived Comments
  22. Blind Belief vs Excessive Skepticism
  23. Half-Baked Idea: Isolate Browser Security Contexts to Limit XSS Attacks
  24. It's Time To Start

2001 2

  1. Job Hunt!
  2. Talks and Presentations