DO Research

A recent note on vulnerability research economics, researcher incentives, and the gap between security value and security compensation.

A practical cloud security note about recurring implementation failure modes, passwords, providers, exposure, and the assumptions teams keep rediscovering.

A practical look at machine-learning malware traffic detection and the assumptions defenders inherit when models are applied to encrypted communications.

An applied research post on automated reconnaissance, security ideas, and turning rough concepts into practical cyber tooling.

A clear-eyed discussion of how much vulnerability analysis can be automated, how reliable those results can be, and why the question stays hard.

A research update on securely indexing and searching PGP-encrypted email, including local mailbox support and usability improvements.

A HAVOC research note on using small configuration changes to make malware fail at runtime by denying predictable conditions.

A research note about computationally hard problems, practical security work, and the value of useful approximations under pressure.

A physical-security research note on digital spin locks, weak human memory patterns, and assumptions in high-security environments.

A reverse-engineering note on extracting useful signal from .NET malware by programmatically recovering strings and analyst context.

The Dark-Drive release note: a USB storage device concept with modified firmware and behavior designed to challenge forensic assumptions.

A hardware-security reflection on embedded computers, trust boundaries, hidden behavior, and what users are forced to assume.

The public PAINT beta release note, preserving a concrete example of DO turning applied research into usable security tooling.

The original PAINT overview: attributing network flows back to process IDs and process names in real time for usable operator visibility.