# infosecurity.ch > Personal blog of Fabio Pietrosanti (naif) about privacy, information security, hacking, encryption, voice interception, Tor and intelligence, written between 2007 and 2017 and restored as a static archive on 2026-09-17. Posts are in English; pages under // are automatic translations made in 2013–2014. Author: Fabio Pietrosanti (naif) – https://fabio.pietrosanti.it/ – https://www.linkedin.com/in/secret/ – https://x.com/fpietrosanti – https://github.com/fpietrosanti Each post is available as clean Markdown at `index.md`. ## Posts - [infosecurity.ch is back online: the blog has been restored](https://infosecurity.ch/20260917/infosecurity-ch-restored/index.md): 2026-09-17 – After years offline, infosecurity.ch is back. On 17 September 2026 I restored this blog from its Internet Archive copy and republished it as a static site at… - [Low Liability - Reduced Abuses Tor Exit Nodes](https://infosecurity.ch/20170610/low-liability-reduced-abuses-tor-exit-nodes/index.md): 2017-06-10 – In 2011 i’ve experimented running a Tor Exit by reducing my liability , by reducing the source of abuses. During those years I’ve been looking at different… - [RFC 6189: ZRTP is finally a standard!](https://infosecurity.ch/20110411/rfc-6189-zrtp-is-finally-a-standard/index.md): 2011-04-11 – Finally ZRTP has been assigned an official RFC assignment, RFC6189 ZRTP: Media Path Key Agreement for Unicast Secure RTP. It had as a dependency the SRTP… - [Progress for GSM cracking in Freiburg university](https://infosecurity.ch/20110223/progress-for-gsm-cracking-in-freiburg-university/index.md): 2011-02-23 – The exciting world of mobile protocols (GSM, GSM-R, TETRA, UMTS, etc) hacking is getting official research activities from universities. The investment to… - [My TOR exit node experience trying to filter out noisy traffic](https://infosecurity.ch/20110124/my-tor-exit-node-experience-trying-to-filter-out-noisy-traffic/index.md): 2011-01-24 – Early this year i decided that’s time to run a TOR exit node so i brought a VPS at hetzner.de (because they are listed as a Good TOR ISP )and setup the… - [TETRA hacking is coming: OsmocomTETRA](https://infosecurity.ch/20110123/tetra-hacking-is-coming-osmocomtetra/index.md): 2011-01-23 – It’s very exciting to see the release of OsmocomTETRA , the first opensource SDR ( Software Defined Radio ) implementation of TETRA demodulator, PHY and… - [Government 2.0, Open Data and WikiLeaks](https://infosecurity.ch/20110115/government-2-0-open-data-and-wikileaks/index.md): 2011-01-15 – The concepts behind WikiLeaks, OpenLeaks, GlobalLeaks, BalkanLeaks is much more than just revealing secrets to the public. It’s part of a revolution that’s… - [ZORG, new C++ and Java ZRTP implementation public release](https://infosecurity.ch/20110112/zorg-new-c-and-java-zrtp-implementation-public-release/index.md): 2011-01-12 – Hi all, today at PrivateWave Italia S.p.A, italian company engaged in developing technologies for privacy protection and information security in voice… - [Encrypted mobile to landline phone calls with Asterisk 1.8](https://infosecurity.ch/20101025/encrypted-mobile-to-landline-phone-calls-with-asterisk-1-8/index.md): 2010-10-25 – We just released a technical howto on how to build up Secured mobile to landline VoIP infrastructure with: Asterisk 1.8 (just released, support SIP/TLS +… - [Eight Epic Failure of Regulating Cryptography](https://infosecurity.ch/20101021/eight-epic-failure-of-regulating-cryptography/index.md): 2010-10-21 – A very illuminating article on Eight Epic Failure of Regulating Cryptography and common misunderstanding by government regulators that doesn’t have a wide… - [PrivateGSM: Blackberry/iPhone/Nokia mobile voice encryption with ZRTP or SRTP/SDES](https://infosecurity.ch/20101019/privategsm-blackberryiphonenokia-mobile-voice-encryption-with-zrtp-or-srtpsdes/index.md): 2010-10-19 – I absolutely avoid to use my own personal blog to make promotion of any kind of product. That time it’s not different, but i want to tell you facts about… - [A couple of nice VPN provider](https://infosecurity.ch/20101017/a-couple-of-nice-vpn-provider/index.md): 2010-10-17 – There are a lot of reason why one would need to access internet trough a VPN. For example if you live in a country blocking certain contents (like… - [Not every elliptic curve is the same: trough on ECC security](https://infosecurity.ch/20100926/not-every-elliptic-curve-is-the-same-trough-on-ecc-security/index.md): 2010-09-26 – My own ECC curve security and selection analysis Most modern crypto use Elliptic Curve Cryptographic (ECC) that, with a smaller key size and reduce… - [ESSOR, European Secure Software Defined Radio (SDR)](https://infosecurity.ch/20100925/essor-european-secure-software-defined-radio-sdr/index.md): 2010-09-25 – I had a look at European Defense Agency website and found the ESSOR project, a working project funded for 106mln EUR to develop strategic defense… - [Product management and organization](https://infosecurity.ch/20100912/product-management-and-organization/index.md): 2010-09-12 – I had to better understand the concepts, roles and duties related to Product management and Product marketing management in software companies, why are… - [Remotely intercepting snom VoIP phones](https://infosecurity.ch/20100910/remotely-intercepting-snom-voip-phones/index.md): 2010-09-10 – I suggest reading remotely tapping VoIp phones ” on VoIP Security Alliance Blog by Shawn Merdinger . A concrete example on how current telephony… - [Voice communication security workshop](https://infosecurity.ch/20100826/voice-communication-security-workshop/index.md): 2010-08-26 – Hi, i made a talk about voice communication security technologies at University of Trento following an interesting information exchange with Crypto Lab… - [27C3 - CCC Congress CFP: We come in peace](https://infosecurity.ch/20100815/27c3-ccc-congress-cfp-we-come-in-peace/index.md): 2010-08-15 – We come in peace We come in peace, said the conquerers of the New World. We come in peace, says the government, when it comes to colonise, regulate, and… - [GSM cracking in penetration test methodologies (OSSTMM) ?](https://infosecurity.ch/20100723/gsm-cracking-in-penetration-test-methodologies-osstmm/index.md): 2010-07-23 – As most of this blog reader already know, in past years there was a lot of activities related to public research for GSM auditing and cracking. However when… - [Snake-oil security claims on crypto security product](https://infosecurity.ch/20100719/snake-oil-security-claims-on-crypto-security-product/index.md): 2010-07-19 – Security market grow, more companies goes to the market, but how many of them are taking seriously what they do? You know, doing security technology mean… - [Web2.0 privacy leak in Mobile apps](https://infosecurity.ch/20100717/web2-0-privacy-leak-in-mobile-apps/index.md): 2010-07-17 – You know that web2.0 world it’s plenty of leak of any kind (profiling, profiling, profiling) related to Privacy and users starts being concerned about it… - [AES algorithm selected for use in space](https://infosecurity.ch/20100708/aes-algorithm-selected-for-use-in-space/index.md): 2010-07-08 – I encountered a nice paper regarding analysis and consideration on which encryption algorithm it’s best suited for use in the space by space ship and… - [Blackberry Security and Encryption: Devil or Angel?](https://infosecurity.ch/20100707/blackberry-security-and-encryption-devil-or-angel/index.md): 2010-07-07 – Blackberry have good and bad reputation regarding his security capability, depending from which angle you look at it. This post it’s a summarized set of… - [Celebrating “Hackers” after 25 years](https://infosecurity.ch/20100701/celebrating-hackers-after-25-years/index.md): 2010-07-01 – A cult book , ever green since 25 years. It’s been 25 years since “Hackers” was published. Author Steven Levy reflects on the book and the movement… - [Botnet for RSA cracking?](https://infosecurity.ch/20100630/botnet-for-rsa-cracking/index.md): 2010-06-30 – I read an interesting article about putting 1.000.000 computers, given the chance for a serious botnet owner to get it, to crack RSA. The result is that in… - [Patent rights and opensource: can they co-exist?](https://infosecurity.ch/20100627/patent-rights-and-opensource-can-they-co-exist/index.md): 2010-06-27 – How many of you had to deal with patented technologies? How many of the patented technologies you dealed with was also “secrets” in their implementation?… - [China Encryption Regulations](https://infosecurity.ch/20100616/china-encryption-regulations/index.md): 2010-06-16 – Hi all, i found this very interesting paper on China Encryption Import/Export/Domestic Regulations done by Baker&Mckenzie in the US. It’s strongly business… - [IOScat - a Port of Netcat to Cisco IOS](https://infosecurity.ch/20100613/ioscat-a-port-of-netcat-to-cisco-ios/index.md): 2010-06-13 – A porting of famous netcat to Cisco IOS router operating system: IOSCat The only main limit is that it does not support UDP, but that’s a very cool tool! A… - [The (old) Crypto AG case and some thinking about it](https://infosecurity.ch/20100607/the-old-crypto-ag-case-and-some-thinking-about-it/index.md): 2010-06-07 – In the ’90, closed source and proprietary cryptography was ruling the world. That’s before open source and scientifically approved encrypted technologies… - [Missiles against cyber attacks?](https://infosecurity.ch/20100607/missiles-against-cyber-attacks/index.md): 2010-06-07 – The cyber conflicts are really reaching a point where war and cyberwar merge together. NATO countries have the right to use the force against attacks on… - [Mobile Security talk at WHYMCA conference](https://infosecurity.ch/20100602/mobile-security-talk-at-whymca-conference/index.md): 2010-06-02 – I want to share some slides i used to talk about mobile security at whymca mobile conference in Milan. Read here my slides on mobile security . The slides… - [iPhone PIN: useless encryption](https://infosecurity.ch/20100601/iphone-pin-useless-encryption/index.md): 2010-06-01 – I recently switched one of my multiple mobile phones with which i go around to iPhone. I am particularly concerned about data protection in case of theft and… - [Who extract Oil in Iran? Business and UN sanction together](https://infosecurity.ch/20100601/who-extract-oil-in-iran-business-and-un-sanction-together/index.md): 2010-06-01 – I like geopolitic and i am following carefully iran issues. I went to National Iranian Oil Company website and have seen “ Exploration & Production ” section… - [Exploit code against SecurStar DriveCrypt published](https://infosecurity.ch/20100525/hackers-doesnt-like-securstar-products-exploit-code-against-drivecrypt-published/index.md): 2010-05-25 – It seems that the hacking community somehow like to target securstar products, maybe because hacking community doesn’t like the often revealed unethical… - [Quantum cryptography broken](https://infosecurity.ch/20100520/quantum-cryptography-broken/index.md): 2010-05-20 – Quantum cryptography it’s something very challenging, encryption methods that leverage the law of phisycs to secure communications over fiber lines. To… - [FUN! Infosecurity consideration on some well known films](https://infosecurity.ch/20100518/fun-infosecurity-consideration-on-some-well-known-films/index.md): 2010-05-18 – Please read it carefully Film that needed better infosec . One the the review, imho the most fun one on film Star Wars : The scene Death star getting blown… - [great point of view](https://infosecurity.ch/20100420/great-point-of-view/index.md): 2010-04-20 – Because security of a cryptographic system it’s not a matter of “how many bits do i use” but using the right approach to do the right thing to mitigate the… - [Encryption is not scrambling: be aware of scrambler!](https://infosecurity.ch/20100420/encryption-is-not-scrambling-be-aware-of-scrambler/index.md): 2010-04-20 – Most of us know about voice scrambler that can be used across almost any kind of voice based communication technology. Extremely flexible approach: works… - [SecurStar GmbH Phonecrypt answers on the Infosecurityguard/Notrax case: absolutely unreasonable! :-)](https://infosecurity.ch/20100201/answer-of-securstar-gmbh-on-the-infosecurityguardnotrax-case-absolutely-unreasonable/index.md): 2010-02-01 – UPDATE 20.04.2010: http://infosecurityguard.com has been disabled. Notrax identity became known to several guys in the voice security environments (cannot… - [Evidence that infosecurityguard.com/notrax is SecurStar GmbH Phonecrypt - A fake independent research on voice crypto](https://infosecurity.ch/20100201/evidence-that-infosecurityguard-comnotrax-is-securstar-gmbh-a-fake-independent-research-on-voice-crypto/index.md): 2010-02-01 – Below evidence that the security review made by an anonymous hacker on http://infosecurityguard.com is in facts a dishonest marketing plan by the SecurStar… - [Dishonest security: The SecurStart GmbH Phonecrypt case](https://infosecurity.ch/20100201/dishonest-security-the-securstart-gmbh-case/index.md): 2010-02-01 – I would like to provide considerations on the concept of ethics that a security company should have respect to the users, the media and the security… - [About the SecurStar GmbH Phonecrypt voice encryption analysis (criteria, errors and different results)](https://infosecurity.ch/20100130/about-the-voice-encryption-analysis-phonecrypt-can-be-intercepted-serious-security-evaluation-criteria/index.md): 2010-01-30 – This article want to clarify and better explain the finding at infosecurityguard.com regaring voice encryption product evaluation. This article want to tell… - [Licensed by Israel Ministry of Defense? How things really works!](https://infosecurity.ch/20100129/licensed-by-israel-ministry-of-defense-how-things-really-works/index.md): 2010-01-29 – You should know that Israel is a country where if a company need to develop encryption product they must be authorized by the government. The government… - [O3B Networks: a new satellite broadband approach](https://infosecurity.ch/20100126/o3b-networks-a-new-satellite-broadband-approach/index.md): 2010-01-26 – That’s something amazing, “other 3 billion” broadband coverage not trough fiber but trough satellite. A project where also google is one of the shareholder… - [Index of economic freedom](https://infosecurity.ch/20091221/index-of-economic-freedom/index.md): 2009-12-21 – When looking at facts and figures about globalized world, the index of economic freedom is a nice tool to make proper considerations. - [Location Based Services: the big brother thanks you ;-)](https://infosecurity.ch/20091201/location-based-services-the-big-brother-thanks-you/index.md): 2009-12-01 – Do you use your iphone, google phone, blackberry or nokia smartphone with cool built-in GPS? Well law enforcement can now know even better where you are, at… - [Gold-Lock Security Encryption Contest: be careful!](https://infosecurity.ch/20091125/gold-lock-security-encryption-contest-be-careful/index.md): 2009-11-25 – This post is to talk about the “unfair” marketing approach of Gold-Lock, an israeli company doing mobile voice encryption authorized by Israeli Ministry of… - [Recuva: Nice windows data recovery tool](https://infosecurity.ch/20091112/recuva-nice-windows-data-recovery-tool/index.md): 2009-11-12 – Not a professional tool but an easy, quick and free one. If you just accidently deleted some files on windows or your employee leave the company deleting all… - [Military contractors going commercial](https://infosecurity.ch/20091110/military-contractors-going-commercial/index.md): 2009-11-10 – Most military contractors are suffering from the restriction of government’s budgets for military expenses and are moving into commercial markets, still they… - [Disk encryption sometimes ‘works’](https://infosecurity.ch/20091109/disk-encryption-sometimes-works/index.md): 2009-11-09 – I am one of the person convinced that a computer disk encryption system will not protect you from public authorities if they are convinced enough and the… - [Brazilian Electrical Blackout: preview of cyberwar](https://infosecurity.ch/20091107/brazilian-electrical-blackout-preview-of-cyberwar/index.md): 2009-11-07 – In 2005 and 2007 in Brazil million of people was targetted by a blackout. Initially it appeared like an accident. Now it’s known that was caused by a cyber… - [Political conflict in Turkey between Prosecutors and Wiretappers](https://infosecurity.ch/20091107/political-conflict-in-turkey-between-prosecutors-and-wiretappers/index.md): 2009-11-07 – It seems that in Turkey the Telecommunication Directorate (TIB), in charge of managing the wiretapping, intercepted the president of the Judge and… - [Come back to blogging](https://infosecurity.ch/20091107/come-back-to-blogging/index.md): 2009-11-07 – I come back to blogging. Why i stopped my blogging trial period? 1st because being busy @work 2nd because my blogging software expired and i hate wordpress… - [Conventionality is not morality.](https://infosecurity.ch/20090806/conventionality-is-not-morality/index.md): 2009-08-06 – During my daily RSS OCD reading I had to deal with this article : it has been written by a “senior anti-virus researcher at Kaspersky Lab’s “. Talk about… - [Hackers Hacking Hackers](https://infosecurity.ch/20090803/hacking-hackers/index.md): 2009-08-03 – Hackers hacking hackers are always pretty fun. And I am not talking about ZF0 5 (which was cool reading, even if not as cool as ~El8 was), I am talking about… - [This is big business, this is the American way](https://infosecurity.ch/20090731/this-is-big-business-this-is-the-american-way/index.md): 2009-07-31 – 43 years old “UFO eccentric” hacker Gary McKinnon just loses appeal against his extradition to the States for computer crimes he committed 7 years ago. If… - [Russia: the best worldwide place for cybercrime business](https://infosecurity.ch/20090730/russia-the-best-worldwide-place-for-cybercrime-business/index.md): 2009-07-30 – Russia is a very beautiful place for any committed cybercrime business owner. FBI and Mcafee are trying to do something , do they will ever succeed? I don’t… - [Iphone jailbreaking crashing towers? FUD!](https://infosecurity.ch/20090730/iphone-jailbreaking-crashing-towers-fud/index.md): 2009-07-30 – It’s interesting to read a news about an anti-jailbreaking statement by apple that say that with jailbreaked phones it may be possible to crash mobile… - [chinese espionage: the worst and more silent threat for western countries](https://infosecurity.ch/20090727/chinese-espionage-the-worst-and-more-silent-threat-for-westerncountries/index.md): 2009-07-27 – Hi all, in the past few years i saw an incredible increase in the amount of “public” news about espionage against different western countries and usually… - [Criminal business model: Somali pirate case study](https://infosecurity.ch/20090727/criminal-business-model-somali-pirate-case-study/index.md): 2009-07-27 – Hi all, this blog post is to have a nice economical point of view on somali pirates business model, something nice as also crime is a business and need it’s… - [Letter from a suicide hackers](https://infosecurity.ch/20090727/letter-from-a-suicide-hackers/index.md): 2009-07-27 – The concept of freedom of an hacker, killing himself not to loose the most important value of his life. Read there - [1st august 2009: Switzerland start realtime internet interception](https://infosecurity.ch/20090721/1st-august-2009-switzerland-start-realtime-internet-interception/index.md): 2009-07-21 – The intelligence strength is increasing everywhere… also in Switzerland that had a well known privacy protection approach! Read the WikiLeaks Article - [UAE government placing backdoors into Blackberry devices](https://infosecurity.ch/20090721/uae-government-placing-backdoors-into-blackberry-devices/index.md): 2009-07-21 – Nice attempt to place backdoors inside Blackberry devices. It seems that UAE government wanted to do something nasty placing backdoors trough software… - [Chinese Spying NSA/USA buying Cryptographic Equipment on Ebay](https://infosecurity.ch/20090712/chinese-spying-nsausa-buying-cryptographic-equipment-on-ebay/index.md): 2009-07-12 – It’s amazing. A chinese guy has been engaged within an espionage activity for the People’s Republic of China buying and exporting cryptographic equipments… - [Nokia World in Stuttgard 2-3 September](https://infosecurity.ch/20090711/nokia-world-in-stuttgard-2-3-september/index.md): 2009-07-11 – Everyone who’s business is directly connected to mobile, aggregators, operators and generally speaking mobility application should really attend Nokia World… - [Saas: is the end of the myth?](https://infosecurity.ch/20090710/saas-is-the-end-of-the-myth/index.md): 2009-07-10 – Saas business models growth a lot during the past few years and i personally appreciate it. No software to be installed, configured, maintained, service… - [Best advices by world leaders](https://infosecurity.ch/20090710/best-advices-collection-by-world-leaders/index.md): 2009-07-10 – Today i found a very nice set of 22 ‘best advices’ on Fortune coming from world leaders and i would really like to link there some of the most interesting… - [Mobile platform hacking: worms and botnet from phones?](https://infosecurity.ch/20090707/mobile-platform-hacking-worms-and-botnet-from-phones/index.md): 2009-07-07 – The hacking community is finally starting seriously auditing and hacking Symbian OS, even if it’s difficult, hard to work on, unpleasant to debug it . There… - [The real goal of online marketing: lead generation](https://infosecurity.ch/20090707/the-real-goal-of-online-marketing-lead-generation/index.md): 2009-07-07 – Often i discuss about online marketing, however it include the mysterious “marketing” magic word that’s tipically subject to misunderstanding and… - [Voice encryption in government sectors](https://infosecurity.ch/20090706/voice-encryption-in-government-sectors/index.md): 2009-07-06 – I will make some in depth articles about how voice encryption really works in government environments. The open standards and open source still have to reach… - [Product Management](https://infosecurity.ch/20090706/product-management-the-unknown-strategic-role/index.md): 2009-07-06 – You know, product management it’s a job for half-fish, half-meat guys, that understand both business needs and technology issues. I found two amazing and… - [Women as agents of future geopolitical changes](https://infosecurity.ch/20090706/women-as-agents-of-future-geopolitical-changes/index.md): 2009-07-06 – Nice to read about Global Trends 2025 from United States National Intelligence Council. - [How the various audio compression codec sounds?](https://infosecurity.ch/20090706/how-the-various-audio-compression-codec-sounds/index.md): 2009-07-06 – You know, we would not be able to use VoIP and have cheap international phone calls without audio compression codecs. It’s plenty of them, some royalty free… - [Hackers hired from UK Office of Cyber Security](https://infosecurity.ch/20090706/hackers-hired-from-uk-office-of-cyber-security/index.md): 2009-07-06 – It seems that in UK the management became illuminated, they discovered that the most efficient way to fight a cyber war is to hire soldier that play in the… - [Voice Security and Privacy slides](https://infosecurity.ch/20090706/untitled-2/index.md): 2009-07-06 – Below my slides on voice security and privacy from Security Summit 2009 . mmm, yes i am working in this area from 2005, will write again about it. 2009… - [Uno sguardo a…](https://infosecurity.ch/20070210/uno-sguardo-a/index.md): 2007-02-10 – Il mio primo post vorrà , ma non significa che lo farà nel breve periodo, analizzare la storia delle società di comunicazione riservata del mondo, le loro… ## Optional - [Full text of every post](https://infosecurity.ch/llms-full.txt) - [About the author](https://infosecurity.ch/author/) - [RSS feed](https://infosecurity.ch/feed.xml) - [Sitemap](https://infosecurity.ch/sitemap.xml)