The Curious Engineer

All blogs / Security

Joe Kirwin

josephkirwin.com

A blog about Information Security and other ramblings.

SecuritySoftware / engineering practice

’15’20’25
Posts
78 from 2 Nov 2011 to 5 Sep 2026
Posting
now and then (1 in the last year)
Kind
personal blog
Feed
https://www.josephkirwin.com/feed.xml

2026 1

  1. Rethinking the PR Review Flow for LLM-Generated Bug Fixes

2024 2

  1. Modern Authorization (aka ReBAC) primer
  2. SAML group attributes, SCIM and shortcomings

2022 4

  1. Explaining how Android Secure-Copy-Paste (US10754929B2) works
  2. Why to be concerned about Browser Extensions?
  3. Protecting data in a runtime environment: Part 2 - Transparent metadata wrappers
  4. Protecting data in a runtime environment: Part 1 - Overview

2021 1

  1. Creating a Rocky Linux TemplateVM on Qubes

2020 3

  1. Separation of concerns between code and service layout
  2. The features I look for in a technical diagram
  3. Security Advice for Startups and Non-Profits

2019 1

  1. Creating a hardware torbox using a RaspberryPi Zero

2018 4

  1. Using optical character recognition (OCR) to defeat Homoglyph attacks
  2. A frustrating issue with SELinux label aliasing
  3. Using Z3 to invert non-cryptographic hashes
  4. Configuring bluetooth remote pointer on Linux

2017 7

  1. Z3 Constraint Solver Tips
  2. PoC ~ hiding code in plain html and JavaScript
  3. The Shell in the Ghost
  4. A more secure approach to BOSH deployments on Google Cloud Platform
  5. An idea for improving push based two-factor authentication
  6. Using secure chat for vulnerability disclosure
  7. A suggestion on how to mitigate Cross Audio Request Forgery (CARF)

2016 12

  1. Introducing Elfin
  2. HSTS isn't Pareto Efficient
  3. Updates to the design of Veerless
  4. Payment models on a distributed Internet
  5. [How To] Enabling chromium distiller reader mode
  6. Lamport's Hash Chains for Server Authentication
  7. What if we had mutex revocation lists?
  8. Serverside One-Time-Pad (Part2)
  9. Serverside One-Time-Pad (Part1)
  10. Operator Algebra
  11. Humbled by MD5
  12. Mitigating Catastrophic Backtracking in Node.js RegExp

2015 6

  1. All is not lost : right bitwise shifts
  2. (extended) Why is length > complexity? Because math...
  3. Intermediate Language Ergonomics
  4. the person(s) behind the mirror
  5. Proof that the decrement operator can be achieved [exclusively with binary operations]
  6. Code Satisfiability

2014 3

  1. Navigating to static constructors (.cctor) in MSIL
  2. The .Net obfu kung-fu
  3. Could Mozilla's Rust be a hybrid language bridging C# and F# features?

2013 10

  1. Reversing XOR linked lists in C#
  2. The Named Pipes Had a Party and Imposters Were Not Invited
  3. Passing Unevaluated Functions as Arguments with Linq
  4. Free video lectures on Machine Learning
  5. The Family Tree of XSLT SharePoint WebParts
  6. KeePass - Helps Quarantine Password Compromises
  7. Client Side SSL with SharePoint
  8. reg(ular|ex) (expressions)?
  9. OWASP Zed Attack Proxy 2.0 Released
  10. First time with Java

2012 13

  1. Forays into Linux
  2. Visual Studio 2012 Test Settings
  3. Microsoft Moles with Visual Studio 2012... Sort of.
  4. Unit test assertions against Xml Schemas
  5. Microsoft RiSE
  6. Idempotency is a goal in all software design
  7. Assembly Binding and Redirection
  8. IIS7 and the .Net Assembly Cache
  9. SharePoint 2010 Web Application Health Score
  10. Editing Office documents using Open XML SDK 2.0
  11. Enumerate a given user's permissions for a SharePoint site
  12. Enabling Slide Library functionality in SP2010
  13. Converting C# into PowerShell

2011 11

  1. The Sieve of Eratosthenes
  2. Debugging a process dump with WinDbg, the very basics...
  3. Using PowerShell against MOSS
  4. web.config inheritance with Asp.Net
  5. Micro-Optimization for C# Loops
  6. Disabling list view throttling temporarily or even permanently
  7. Get access to edit sealed, read only columns in SP2010
  8. Uploading large files (>28MB) into SharePoint
  9. SharePoint - How to display stack trace error in the browser.
  10. First Post
  11. My favourite free tools for use with Microsoft SharePoint