A history of PaX: the hardening project that predicted modern exploit mitigations
A retrospective on PaX, the long-running Linux hardening patch whose early-2000s ideas anticipated ASLR, NX and other mainstream mitigations.
Read morePapers
Longer papers and research notes, many first written in Chinese, now summarised and refreshed.
2014
2012
A lesson in privilege escalation from an old Novell directory service
A legacy Novell/ConsoleOne environment illustrates how group self-enrolment and concurrent sessions turn modest access into full account takeover.
Read more2011
Conference notes: the security research scene around 2011
A neutral recap of the topics that characterised the regional security-conference circuit in 2011, without attributing any specific talk or speaker.
Read moreRunning an internal security tech day that people actually attend
A practical format for an internal security tech day, built around short rotating talks that keep a small research team's knowledge moving.
Read more