Introducing srtgen - Making Automated...
Every year there are thousands of talks given across the many security conferences that...
Try Duo's trusted access solution now.
Free Trial
During our normal day-to-day work, the Duo Labs team often encounters unique technical challenges — the kind that require a bit of voodoo beyond web sleuthing to solve. As we puzzle out a solution, we document how we got there, sharing our notes publicly so the wider infosec community might benefit.
Every year there are thousands of talks given across the many security conferences that...
EdDSA is a digital signature scheme that functions over elliptic curves. While ECDSA is...
eBPF and XDP are powerful tools that can modify raw network traffic during some of the...
Come join us on a journey to max out all of the CPU cores your 2016 Macbook Air has to...
One of the potential benefits of containers is being able to dramatically reduce the...
Kernel extensions have been historically used to write custom drivers, inspect network...
At USENIX Security 2019, researchers from Google and Stanford presented a paper which...
Noise is a framework that can be used to construct secure channel protocols. Noise...
In this article we explore some of the context of threshold cryptography while also...
This post details how we solved the 2019 SANS Holiday Hack challenge.
Today, we're open-sourcing a project we built which is able to mirror Markdown posts to...
We continue to see WebAuthn and the FIDO2 framework hitting important milestones within...
Android's Device Administrator functionality allows company-issued applications to...
This morning, Damien Miller announced experimental U2F/FIDO support for...
At Duo Labs, we hold a strong belief that the research journey is just as important as...
Notarization, introduced in macOS 10.14 (Mojave), verifies that software distributed...
Consisting of a lightweight introduction to the theory and construction of the Yagi-Uda...
When you use a security key such as a YubiKey, you need to create a credential for a...
SMTP was designed without authentication, allowing anyone to send email as anyone else....
This guide covers some of the tools and parameters useful for debugging Spark pipelines.
Want to reach out and chat about one of our projects, open source releases or whatever...
Universally Unique Identifiers, or UUIDS, are 128 bit numbers, composed of 16 octets...
Recap of the presentation "Unmasking Data Leaks: A Guide to Finding, Fixing, and...
In the process of writing a Chrome extension you may find yourself needing to...
Here at Duo Labs we have tried to keep consistent research notes when working on our...
With the Duo Labs team making more and more use of GitLab Runners for building,...
I’ve written several Chrome extensions in my tenure at Duo Labs. You can be pretty...
How to convince the Android emulator to trust your SSL certs and resolve your domains...
I wanted to run the webauthn.io Docker container locally, but I needed it to be served...
Using our handy sniffer.py sniffer, we can now dissect the messages being sent between...