TECHNICAL NOTES

Joshua Holland

MarkFlow: Make Your Markdown Sparkle!

Find out about MarkFlow, created by Joshua Holland to beautifully format your markdown...

Created on August 13, 2020 (last updated August 13, 2020)

Rich Smith

Introducing srtgen - Making Automated...

To make security conference talks more widely accessible, we released srtGen, which...

Created on August 4, 2020 (last updated August 4, 2020)

Nick Mooney

What's an EdDSA?

EdDSA is a digital signature scheme that functions over elliptic curves. While ECDSA is...

Created on May 14, 2020 (last updated May 14, 2020)

Jeremy Erickson

Writing an XDP Network Filter with eBPF

eBPF and XDP are powerful tools that can modify raw network traffic during some of the...

Created on May 7, 2020 (last updated May 7, 2020)

Rich Smith

Leveling Up Your Video Conferencing with OBS

Come join us on a journey to max out all of the CPU cores your 2016 Macbook Air has to...

Created on April 29, 2020 (last updated April 29, 2020)

Eldridge Alexander

Multi-Stage Builds With Docker

Read our walkthrough of using multi-stage builds to create containers that only have...

Created on April 28, 2020 (last updated April 28, 2020)

Nick Mooney

Santa Leaves The Kernel: A macOS Endpoint...

Kernel extensions have been historically used to write custom drivers, inspect network...

Created on April 21, 2020 (last updated April 21, 2020)

Jordan WrightNick Mooney

Protecting Accounts from Credential Stuffing

Get a walkthrough of Google and Stanford's 2019 paper that detailed how they helped...

Created on March 10, 2020 (last updated March 10, 2020)

Nick Mooney

An Introduction to the Noise Protocol Framework

Dive into the Noise state machine, which takes a set of cryptographic operations &...

Created on March 5, 2020 (last updated March 5, 2020)

Nick Mooney

An Exploration of 2P-ECDSA

Explore some of the context of threshold cryptography, a particular problem & the...

Created on January 23, 2020 (last updated January 22, 2020)

Jordan Wright

SANS Holiday Hack 2019 Writeup

Read how Duo Labs solved the 2019 SANS Holiday Hack challenge, including solutions to...

Created on January 14, 2020 (last updated January 14, 2020)

Edward MarczakJordan Wright

Deploying Markdown To Confluence

Learn how we leveraged the Confluence API (application programming interface) to make...

Created on December 19, 2019 (last updated December 19, 2019)

Nick Steele

Resident Keys and the future of WebAuthn/FIDO2

Read our review of the current status of WebAuthn as well as an explanation of how...

Created on December 17, 2019 (last updated December 17, 2019)

Jeremy Erickson

Android Device Administrator: a BYOD Employee's...

Explore the Android Device Administrator functionality from an employee perspective &...

Created on December 11, 2019 (last updated December 11, 2019)

Nick Mooney

U2F Key Support in OpenSSH

This morning, Damien Miller announced experimental U2F/FIDO support for...

Created on November 1, 2019 (last updated November 1, 2019)

Jordan Wright

Open-Sourcing Journal: How Labs Keeps Notes

Duo Labs open-sourced the system we’ve built to keep our research notes called Journal....

Created on October 2, 2019 (last updated October 2, 2019)

James Barclay

macOS Notarization, Hardware-Backed Code...

Learn how notarization, introduced in macOS 10.14 (Mojave), verifies that software...

Created on September 9, 2019 (last updated September 9, 2019)

Baron Oldenburg

The Yagi-Uda Antenna: An Illustrated Primer

Consisting of a lightweight introduction to the theory and construction of the Yagi-Uda...

Created on August 26, 2019 (last updated August 26, 2019)

Nick Mooney

How Security Keys Store Credentials

Learn what happens to the credentials stored on security keys like YubiKey. Do they sit...

Created on July 16, 2019 (last updated July 16, 2019)

Jordan Wright

Detecting Phishing with SPF Macros

Learn how we used a feature of SPF (sender policy framework) to monitor who sent email...

Created on July 10, 2019 (last updated July 10, 2019)

Stefano Meschiari

Debugging Apache Spark pipelines

This guide covers some of the tools and parameters useful for debugging Spark pipelines.

Created on July 2, 2019 (last updated July 2, 2019)

Steve Manzuik

How To Communicate With Duo Labs

Reach out and chat about one of our projects, open source releases or whatever is on...

Created on July 1, 2019 (last updated July 1, 2019)

Nick Steele

Breaking Down UUIDs

Read a deep-dive on Universally Unique Identifiers (UUIDs or globally unique...

Created on June 21, 2019 (last updated June 21, 2019)

Jordan Wright

Unmasking Data Leaks: A Guide to Finding,...

Recap of the presentation "Unmasking Data Leaks: A Guide to Finding, Fixing, and...

Created on June 20, 2019 (last updated June 20, 2019)

Nick Mooney

Message Passing and Security Considerations in...

Gain a little insight into methods for communicating between Chrome extension...

Created on June 19, 2019 (last updated June 19, 2019)

Steve Manzuik

Welcome to Tech Notes

Here at Duo Labs we have tried to keep consistent research notes when working on our...

Created on June 5, 2019 (last updated June 5, 2019)