# Rick Mark-Penwell > Personal site of Rick Mark-Penwell (also known as Rick Mark), a security, privacy and AI engineer and hardware security researcher. The site publishes research on Apple platform security, the T2 security chip, firmware, hardware and privacy, alongside products and open-source projects. Pages are static HTML and can be read without JavaScript or authentication. Research is dated and may describe historical platform behavior. Posts marked WIP are unfinished notes; preserve their caveats and distinguish proposals or speculation from demonstrated results. Cite each article's canonical URL and publication date. The About page is the source for the author's biography; linked external projects have their own documentation. ## Start here - [About Rick Mark-Penwell](https://rickmark.me/about/): Biography, career and Apple security research. - [Research and writing](https://rickmark.me/blog/): Complete chronological article archive. - [Products](https://rickmark.me/products/): Products and services with links to their own sites. - [Open-source projects](https://rickmark.me/#projects): Project and organization directory. ## Articles - [About 'WIP'](https://rickmark.me/blog/about-wip/): Published 2024-11-30. - [WIP: How did PKI become a joke?](https://rickmark.me/blog/wip-how-did-pki-become-a-joke/): Published 2024-11-30. - [Knowing what you don’t know…](https://rickmark.me/blog/knowing-what-you-dont-know/): Published 2024-10-27. - [WIP: iCloud Keychain Poisoning](https://rickmark.me/blog/wip-icloud-keychain-poisoning/): Published 2024-10-05. - [A Cautionary Tale...](https://rickmark.me/blog/a-cautionary-tale/): Published 2024-07-11. - [Dynamic Library Hardening - Read Only Thunks](https://rickmark.me/blog/dynamic-library-hardening-read-only-thunks/): Published 2022-07-30. - [Ubiquity UniFi Security and Boot-chain Analysis](https://rickmark.me/blog/ubiquiti-unifi-security-and-boot-chain-analysis/): Published 2022-07-30. - [Google: From the Citadel to the Dauntless](https://rickmark.me/blog/google-from-the-citadel-to-the-dauntless/): Published 2022-07-30. - [Using the T2 for Detection and Forensics](https://rickmark.me/blog/using-the-t2-for-detection-and-forensics/): Published 2022-07-30. - [USB Security in the Linux Kernel](https://rickmark.me/blog/usb-security-in-the-linux-kernel/): Published 2022-07-30. - [Work-in-Progress: Using Apple internal builds for RootKits](https://rickmark.me/blog/work-in-progress-using-apple-internal-builds-for-rootkits/): Published 2022-07-30. - [The Security Weakness of the M1](https://rickmark.me/blog/the-security-weakness-of-the-m1/): Published 2022-07-30. - [Dissection of the Apple Internet Recovery protocol and Security Analysis](https://rickmark.me/blog/dissection-of-the-apple-internet-recovery-protocol-and-security-analysis/): Published 2022-07-30. - [Qualcomm Baseband Research](https://rickmark.me/blog/qualcomm-baseband-research/): Published 2022-07-30. - [Plug'nPwn - Connect to Jailbreak](https://rickmark.me/blog/plugnpwn-connect-to-jailbreak/): Published 2022-07-30. - [ACE Controller Secrets](https://rickmark.me/blog/ace-controller-secrets/): Published 2022-07-30. - [Security Critical Kernel Object Confidentiality and Integrity](https://rickmark.me/blog/security-critical-kernel-object-confidentiality-and-integrity/): Published 2022-07-30. - [Design: Hybrid PROM / SPI Flash](https://rickmark.me/blog/design-hybrid-prom-spi-flash/): Published 2022-07-30. - [How Minimalism Hurts Security](https://rickmark.me/blog/how-minimalism-hurts-security/): Published 2022-07-30. - [How Apple Gets Security Wrong](https://rickmark.me/blog/how-apple-gets-security-wrong/): Published 2022-07-30. - [Design: Surface Area Reduction of the CS/ME by Using Bogus Public Keys](https://rickmark.me/blog/design-surface-area-reduction-of-the-cs-me-by-using-bogus-public-keys/): Published 2022-07-30. - [DataMigration iOS Mitigations](https://rickmark.me/blog/datamigration-ios-mitigations/): Published 2022-07-30. - [The SIM Swap Revisited](https://rickmark.me/blog/the-sim-swap-revisited/): Published 2022-07-30. - [Intel Goa’uld](https://rickmark.me/blog/intel-goauld-dark-symbiote/): Published 2022-07-30. - [Apple USB Target Disk Mode](https://rickmark.me/blog/apple-usb-target-disk-mode/): Published 2022-07-30. - [Abusing EFI Variables and the AMT](https://rickmark.me/blog/abusing-efi-variables-and-the-amt/): Published 2022-07-30. - [How To: Bypass T-Mobile SIM block, steal all their money, and leave no trace…](https://rickmark.me/blog/how-to-bypass-t-mobile-sim-block-steal-all-their-money-and-leave-no-trace/): Published 2021-12-13. - [On Warren’s Plan to Break Up Facebook](https://rickmark.me/blog/on-warrens-plan-to-break-up-facebook/): Published 2021-12-13. - [Puppeteer with ChromeOS](https://rickmark.me/blog/puppeteer-with-chromeos/): Published 2020-10-23. - [checkra1n and the T2](https://rickmark.me/blog/checkra1n-and-the-t2/): Published 2020-10-06. - [The Execution of the Warrant](https://rickmark.me/blog/the-execution-of-the-warrant/): Published 2020-04-16. ## Discovery - [XML sitemap](https://rickmark.me/sitemap.xml): Canonical indexable pages, updated at build time. - [Atom feed](https://rickmark.me/blog/feed.xml): Article feed.