Runic Labs
Technical write-ups on the systems we investigate, how they work, and where their security assumptions fail.
As AI accelerates vulnerability discovery, where does that leave human researchers? The Human Edge explores how insight, cognitive performance, and learning from failure can support original security research. Drawing on lessons from fuzzing, Pwn2Own, and cognitive science, I argue that our advantage depends on continuing to innovate as our tools evolve.
Target / QNAP QTS 5.x + bundled plugins (Notes Station 3, QmailAgent, QVPN, et al.)
Read across QTS's web layer and three first-party plugins. Looked at how authentication, IPC, plugin sandboxing, and container boundaries actually compose in practice, versus how QNAP's docs describe them.
Target / Palo Alto Networks firewalls running PAN-OS
A field report on Palo Alto Networks firewalls, their attack surface, trust boundaries, and sandbox model.