A series of projects

Joel Palmtag
Sep 4, 2018 · 1 min read

This project, is a series of projects. In part meant to consolidate a bunch of my (typically) aimless experimentation and find a place for it to live. Between spending time trying to stay a sane well-informed citizen, and working full time, there may not seem like there’s enough time to put together much in the ways of interesting work.

Lucky for you, we find the time to make it work and use it to get to our hasty conclusions here. Typically I would write about all these things *after* I failed to complete most of them. This time, instead, we’ll try writing them out *before* I’ve completed them and then try and make something to show for it.

Security Research we might actually do:

  • Timing attack on a simple interface
  • RF sidechannels
  • Wifi Clustering small devices meaningfully
  • Back to Tor — Old Research, New Research

When it comes to projects, there are a never ending pile of them, and the above have a meaningful resonance with me. I have already started working on the first three, and look forward to putting what I have out there.

For my first work: Timing attack on a simple interface, we’ll focus on HTTP and one of the oldest authentication systems still in use today. Reasons why we still see it, and the path to reasoning out a vulnerability from first principles all the way to exploitation. Finally, the hardest lesson: is this a vulnerability anyone will give a fuck about?