News

Recent stuff:

• [25 Nov 2005] Slides of Tor protocol specification paper released.
• [10 Nov 2005] Slides about mobile phone security issues released.
• [02 Nov 2005] Slides about surveillance technologies released.
• [28 Oct 2005] Gpgirc-0.3 tool released.
• [23 Oct 2005] Gpgirc tool released.
• [02 Jul 2005] Bluescan tool released.
• [14 Jun 2005] Slides of the speech Obfuscated C Code at Hackit05 released.

For now that's all! Note that feedback is always welcome!

---

Tools

Here is some tools I wrote:

• Gpgirc

  Gpgirc crypt your irc query with other users using gpg with an asimmetric algorithm. You can chat with more privacy and the application is transparent for the irc client because work like a proxy.

• Bluescan

  Bluescan is a bluetooth scanner application with an ncurses interface, you can use it to detect bluetooth enabled mobile phone, query mobile phone and get some information, service discovery, and send command to the mobile phone like start a phone call (TODO).

---

Papers

Here is some papers I wrote:

• tor.sxi

  Slides of Tor protocol specification, an overlay network designed to anonymize low-latency TCP-based applications.

• mobile.sxi

  Some good reason why you shouldn't use a mobile phone.

• sorveglianza.sxi

  Analysis of modern surveillance technologies.

• obfuscated.pdf

  Slides of the speech Obfuscated C Code at Hackit05.

• watson.txt

  A paper about the TCP reset attack vulnerability.

• grillo.txt

  A paper about text-to-speech synthesis.

• filesystem.txt

  A paper that explain how to write your own simple filesystem.

---

Source Code

Here is some obfuscated C code I wrote:

• quine.c

  Self-replicating and iterating quine. This program write on the standard output the source code ot itself with a little change. You can recompile the output of the program and run it again and you will have another different program every time.

• clock.c

  Pointer and constant notation abuse.

• int main(){char *_=strdup(__FILE__);_[strlen(_)-2]=0;puts(_);}.c

  Filename quine program, this program write the source code of itself on the standard output and the source code of the program is embedded in the filename.

• pi.c

  Write the value of pi, the source code is indented itself like the pi symbol.

• marijuana.c

  Binary file embedded inside source code.

• main.c

  Abuse of main() declaration.

• tux.c

  The game of the snake written with the ascii art library, the code is itself an ascii art.

Here is some source code of programs I wrote:

• quota.c

  Some time you can bypass quota restriction with this trick.

• mpg666.c

  A simple mp3 player.

• tcp_reset.c

  Proof of concept exploit that demonstrates the vulnerability described by Paul A. Watson in his paper "Slipping In The Window: TCP Reset Attacks".

• aaview.c

  Ascii image viewer.

• stegosauro.c

  Steganographic tool to store hidden information in wave file.

• aasnake.c

  The game of the snake rendered with aalib.

• aagrab.c

  Renderize the stream of the webcam in an ascii art realtime video.

• grab.c

  Grab images from the webcam.

• grillo_parlante.c

  Text-To-Speech synthesizer that read text aloud.

• query.c

  This program analize the idle of an IRC user and try to guess for possible query with other user.

• otp.c

  A simple implementation of the One Time Pad encryption algorithm.

• httprandom.c

  Retrieve true random numbers from the random.org and the Hotbits server.

• dsp_video.c

  Implementation of RFC 1750. Collect thermal noise from a sound digitizer with no source plugged in or a camera with the lens cap on, if the system has enough gain to detect anything.

• poison.c

  Proof of concept program that implement an ARP poisoning attack.

• sniff.c

  Sniffer program that shows the header of the packets in ascii art.

• morse.c

  Translate a string into morse code.

• bouncer.c

  A simple datapipe.

• suxfs.c

  Simple filesystem that run in user space.

---

Projects

You can take a look to some projects I'm involved with:

• ondaquadra.org: underground electronic magazine.
• neuroni.org: pronti al peggio.
• alternauts.org: alternative research group.

---

Links

Server di movimento:

• www.autistici.org: il collettivo Autistici/Inventati.
• www.indivia.net: il primo server vegetale a foglia lunga verde chiaro: facile da deglutire, miracoloso solo ad intervalli regolari, si digerisce in un bicchier d'acqua.
• www.ecn.org: Isole nella Rete.
• www.neuroni.org: pronti al peggio.
• www.oziosi.org: Il nostro scopo e' la riconquista del tempo, siamo tutto fuorche' inattivi e proprio perche' siamo attivi non abbiamo voglia di lavorare....

Some friends site (alphabetical order):

• www.autistici.org/bakunin: Bakunin home page.
• www.hospitalityclub.org/~inquis: Inquis home page (he made the template of this site, thank you!).
• www.autistici.org/underscore/acari/lesion: Lesion home page.
• www.autistici.org/snagg: Snagg home page.

Music:

• www.l300.it: L300 underground hip hop philosophy.

---

Contacts

Feel free to contact me for comments and suggestions:

• E-Mail: eazy (at) ondaquadra.org