MarkFlow: Make Your Markdown Sparkle!
Find out about MarkFlow, created by Joshua Holland to beautifully format your markdown and
TECHNICAL NOTES
During our normal day-to-day work, the Duo Labs team often encounters unique technical challenges — the kind that require a bit of voodoo beyond web sleuthing to solve. As we puzzle out a solution, we document how we got there, sharing our notes publicly so the wider infosec community might benefit.
Introducing srtgen - Making Automated
To make security conference talks more widely accessible, we released srtGen, which
What's an EdDSA?
EdDSA is a digital signature scheme that functions over elliptic curves. While ECDSA is
Writing an XDP Network Filter with eBPF
eBPF and XDP are powerful tools that can modify raw network traffic during some of the
Leveling Up Your Video Conferencing with OBS
Come join us on a journey to max out all of the CPU cores your 2016 Macbook Air has to
Multi-Stage Builds With Docker
Read our walkthrough of using multi-stage builds to create containers that only have the
Santa Leaves The Kernel: A macOS Endpoint Security
Kernel extensions have been historically used to write custom drivers, inspect network
Protecting Accounts from Credential Stuffing
Get a walkthrough of Google and Stanford's 2019 paper that detailed how they helped users
An Introduction to the Noise Protocol Framework
Dive into the Noise state machine, which takes a set of cryptographic operations & allows
An Exploration of 2P-ECDSA
Explore some of the context of threshold cryptography, a particular problem & the specific
SANS Holiday Hack 2019 Writeup
Read how Duo Labs solved the 2019 SANS Holiday Hack challenge, including solutions to the
Deploying Markdown To Confluence
Learn how we leveraged the Confluence API (application programming interface) to make our
Resident Keys and the future of WebAuthn/FIDO2
Read our review of the current status of WebAuthn as well as an explanation of how
Android Device Administrator: a BYOD Employee's
Explore the Android Device Administrator functionality from an employee perspective &
U2F Key Support in OpenSSH
This morning, Damien Miller announced experimental U2F/FIDO support for
Open-Sourcing Journal: How Labs Keeps Notes
Duo Labs open-sourced the system we’ve built to keep our research notes called Journal.
macOS Notarization, Hardware-Backed Code Signing
Learn how notarization, introduced in macOS 10.14 (Mojave), verifies that software
The Yagi-Uda Antenna: An Illustrated Primer
Consisting of a lightweight introduction to the theory and construction of the Yagi-Uda
How Security Keys Store Credentials
Learn what happens to the credentials stored on security keys like YubiKey. Do they sit
Detecting Phishing with SPF Macros
Learn how we used a feature of SPF (sender policy framework) to monitor who sent email on
Debugging Apache Spark pipelines
This guide covers some of the tools and parameters useful for debugging Spark pipelines.
How To Communicate With Duo Labs
Reach out and chat about one of our projects, open source releases or whatever is on your
Breaking Down UUIDs
Read a deep-dive on Universally Unique Identifiers (UUIDs or globally unique identifiers),
Unmasking Data Leaks: A Guide to Finding, Fixing,
Recap of the presentation "Unmasking Data Leaks: A Guide to Finding, Fixing, and
Message Passing and Security Considerations in
Gain a little insight into methods for communicating between Chrome extension components,
Welcome to Tech Notes
Here at Duo Labs we have tried to keep consistent research notes when working on our