These are working drafts, not peer-reviewed results. Each states what it claims and what it doesn't; see About 'WIP'. Shorter notes and older research are in the blog.
-
An Undisclosed Generation Procedure in the SEC 2 Prime Koblitz Curves
working draftcryptography
The four SEC 2 prime-field Koblitz curves, secp256k1 among them, share regularities in their primes, coefficients and generators that the standard never states. A working draft reconstructing the generation procedure, testing attack paths, and marking what remains unexplained.
-
Microfiche Experts: Geographically Streamed Mixture-of-Experts for Region-Adaptive Autonomous Driving
working draftautonomous driving
A design paper for a driving model whose middle layers are a sliding, density-warped grid of regional experts, with hard-switching legal rule layers and constraint pressure as one signal for drift detection, temporary deltas and an emergency expert.
-
Constraint Pressure: What Grammar-Constrained Decoding Hides About Prompt Injection
working draftAI security
Grammar-constrained decoding keeps an LLM classifier's output well-formed by discarding the model's own next-token distribution. A working draft arguing that the discarded mass, constraint pressure, is a prompt-injection signal, with falsifiable hypotheses and a pilot design.
-
Trust Assumptions in Apple M-Series Secure Boot: Nonces, UID Fusing and the Factory Path
working draftApple security
A working-draft threat model for Apple silicon Macs. It asks what happens to the SEP's random number generator, UID, anti-replay state and long-term key protection if non-consumer factory or datacenter images can run, and documents a validly signed DataCenter-domain ticket whose boot nonce is DEADBEEF.
-
Mid-Layer Harm Probes: Detecting Harmful Intent Where the Concepts Live
working draftAI security
Output guardrails and fine-tuned refusals sit at the end of an LLM's stack, where jailbreaks can route around them. A working draft proposing harm detection from mid-layer activations: a side network fed by mapped neuron cohorts, with warming and cooling harm dimensions and a circuit breaker.
-
WIP: iCloud Keychain Poisoning
working draftApple security
How a malicious device in your iCloud Keychain can pre-seed insecure items that enable lateral movement through reset tokens and unlock features.
-
Windows Blue Pill: Compromise Without Breaking Secure Boot
working draftplatform security
A working draft on how a Windows machine could be turned into a hypervisor-level rootkit without breaking Secure Boot or the kernel driver model: roll the Secure Boot chain back to an older signed bootmgfw, run Windows as a Hyper-V guest, and use local kernel debugging from the host. Plus the undocumented BCD settings this surfaced.
-
A pcapng Encapsulation for Hardware Buses, Starting with SPI
working draftstandards proposal
pcapng already carries USB and other interfaces; embedded hardware buses have no standard encapsulation. A working proposal for a SPI link type, plus two general-purpose block types for link topology and link-state changes that would also serve Ethernet and other interfaces.
-
A Bootkit from the Sanctioned Path: Abusing M1 Unsigned-OS Mode and auto-boot
working draftApple security
Apple silicon lets an authorized admin boot a fully unsigned OS so the Mac isn't locked to macOS. A working draft on how that sanctioned path, plus auto-boot and no insecure-boot indicator, can be turned into a persistent, low-visibility bootkit, and what would detect or prevent it.
-
The Lightning and USB Attack Surface: TOCTOU Storage, WebUSB and Accessory Signaling
working drafthardware security
A working survey of the iOS physical-connector attack surface: a FUSE harness that gives malicious USB mass storage a time-of-check/time-of-use split, a WebUSB page that reaches a hidden Apple device configuration from a browser, and accessory-ID signaling that can force DFU. Draws together badusb, lightning_strike and lightning_dfu.
-
Mojo, Thor and Loki: Anatomy of a Mac Firmware and Kernel Implant
working draftApple security
A single-machine analysis of a Mac implant stack: modified SMC and EFI firmware reflashed over the Thunderbolt controller, and MojoKDP, a kernel debug-port module recovered from memory that exposes two serial ports and talks over a hardcoded MAC and IP. Artifacts, detection, and what stays unproven.