Pompili - From hero to_zero: The FatalNoise neverending story

Jul 9, 20190 likes1,698 views

It was 1993 when we decided to venture in a beat'em up game for Amiga. The Catalypse's success story pushed me and my comrade to create something astonishing for this incredible game machine... but things went harder, assumptions were slightly different, and italian competitors appeared out of nowhere... the project died in 1996. Story ended? Probably not...

Page  ‹N›
Except where otherwise noted, this work is licensed under
http://creativecommons.org/licenses/by-nc-sa/3.0/
ROME 27.10.2018
Andrea Pompili
apompili@hotmail.com – Xilogic Corp.
FROM HERO TO ZERO:
The FatalNoise neverending story
Andrea Pompili
There are only 10 types
of people in the world:
Those who understand binary,
and those who don't

"Wearable Botnets and Happy Hacked Drivers" by Andrea Pompili Bill Gates prediction has been outdated: Computers are spreading everywhere, and they will be connected and meshed together outdating all current implementation models. But what about security? Talking about hacked ADSL modems, hijacked railways video screens and car's control unit secrets, we'll start to review the real vulnerabilities of this new world, demystifying threats and actors who have already moved in this profitable black-market.

Pompili - The miracle of sprite multiplication (C64)Codemotion

This document appears to be notes from a presentation or tutorial about programming techniques for the Commodore 64 computer. It discusses several "miracles" or tricks used to optimize graphics and memory usage, including parallax scrolling, character rotation, sprite multiplication, and different sorting algorithms. It provides examples of early Commodore 64 games that employed these techniques such as Katakis, Phobia, and Catalypse.

Wearable Botnets and Happy Hacked Drivers - Andrea Pompili - Codemotion Milan...Codemotion

The document appears to be a presentation on hacking devices and embedded systems. It includes information on accessing microcontroller memory and interfaces, exploiting communication protocols like CAN bus, and gaining remote access to systems through techniques like opening a reverse shell over a service like IRC. References are provided on JTAG debugging, bus protocols, and other topics relevant to security research of embedded and IoT devices.

The Dark Side of Malware Analysis - Andrea Pompili - Codemotion Rome 2015Codemotion

Storicamente il reversing di eseguibili è sempre stata una pratica oscura associata alla pirateria o allo spionaggio industriale, ma oggi, con l'aumentare di malware targettizzati, quest'arte sta diventando un argomento molto discusso perchè necessita una forte capacità di analisi, intuizione ed inventiva. Ma perchè è così importante analizzare un malware? Quali strumenti utlizzare, ma soprattutto come approcciare il problema? Come gestire i meccanismi di protezione adottati? Niente di meglio per addentrarci nel mondo della malware analysis partendo proprio da alcuni casi reali.

Tools for Pulling RankMichael King

The document discusses various tools that Michael King uses for SEO purposes. It provides the names and URLs for over 30 different tools across various categories like keyword research, backlink analysis, social media monitoring, analytics, and content/link outreach. The tools mentioned include Screaming Frog, Keyword Eye, Ubersuggest, Ahrefs, Google Analytics, and many others. King emphasizes building your own tools to be more effective and explains how several of the mentioned tools can be used for specific SEO tasks.

Cyber Wars in the Cyber Space - Andrea Pompili - Codemotion Rome 2017Codemotion

Cyber: the final frontier, the place where government units and military intelligence are fighting a new kind of war. From total warfare to cyber warfare, from cyber crime to cyber terrorism, talking about intelligence and offensive based approaches, government malwares, big data repositories, 0-day brokering, attacks to nuclear implants, power plants and air carriers, we'll do a quick tour inside this new world, full of opportunities, contenders, lies and real amazing stories...

Attacks, Lies and the Underground World - Andrea Pompili - Codemotion Amsterd...Codemotion

Is it possible that, after years of indiscriminate leaks, drained bank accounts and successful persistent attacks of all shapes and colors, nothing has changed? Is it possible that, despite the OWASP Top 10 mentioned to death and the desperate warning of all security experts, some habits remain so hard to break? Surfing between truth and legends, we'll try to understand what really matters to the good ol' attacker and what mitigations, unfortunately, offer the Information Technology world, which is perpetually dazzled by the myth of the "magic box".

The magic world of APT 0.6 - Pompili Codemotion

The document discusses advanced persistent threats (APTs) and malware development techniques. It describes how APTs use multi-stage attacks, social engineering techniques like spear phishing, and resilient command and control methods. It also provides examples of obfuscated Java code used in malware, including XOR encryption, reflection, and class loader overrides to dynamically load malicious classes. The document aims to educate on the technical approaches used in complex, targeted attacks and malware campaigns.

Chi l'ha detto che i virus su Linux non esistono?Codemotion

Attacchi, bugie e underground digitale by Andrea PompiliCodemotion

Possibile che, dopo anni di leaks indiscriminati, conti correnti svuotati e attacchi persistenti di tutte le forme e colori, non sia cambiato nulla? Possibile che, nonostante le OWASP Top 10 citate fino alla nausea e le grida disperate degli espertoni di sicurezza, certe abitudini rimangano così dure a morire? Tra verità e leggende, cercheremo di capire cosa realmente conta per il povero attaccante e cosa, purtroppo, offre il mondo di un’information technology perennemente abbagliata dal mito della scatola magica.

Why I've to waste my time on cryptography? - Andrea Pompili - Codemotion Rome...Codemotion

Cryptography is a magic ring of darkness and mistiness, but seems that every time a new attack comes in town, technicians need to evaluate, configure or change something, surviving in the sea of the unawareness or following signals coming from misterious compliance regulations. We'll try to give a little survival guide for this world, which can make us more aware and confident on the future, or at least prepare for the next fashionable attacks. Maybe.

Andrea Pompili - The Dark Side of Malware AnalysisCodemotion

The magic world of Advanced Persistent Threat - Andrea Pompili - Codemotion M...Codemotion

Anche il business dei crimini informatici ha le sue innovazioni, e l'evoluzione riguarda servizi di botnet in affitto o self-contruction kit per la realizzazione di malware adatti per qualsiasi occasione. In questa consumerizzazione del crimine l'attenzione si sposta quindi sui client, per exploitare la fiducia dell'ignara vittima e ottenere le informazioni di interesse. Come funzionano le nuove campagne di attacco? Quali stratagemmi utilizzano? Come rilevarli? Il mondo delle guest image e la loro rapida e innovativa evoluzione, i progetti open, ma anche i limiti da prendere in considerazione.

OER XinXai (NOW)! Dalian OCWC Conference 2008Jon Phillips

Commodore 64 Mon Amour(2): sprite multiplexing. Il caso Catalypse e altre sto...Codemotion

Continuiamo il viaggio iniziato lo scorso anno nel magico mondo della moderna programmazione del Commodore 64. La scena italiana e romana è molto attiva. Dopo una brevissima introduzione sugli sprite in generale, il mitico Andrea Pompili, autore dello sparattutto Catalypse pubblicato da Genias nel 1992, ci spiegherà la tecnica dello sprite multiplexing, utilizzata per superare il noto limite degli 8 sprite contemporanei a schermo, applicata al suo gioco.

Using Java to build robots with high schoolersVMware Tanzu

The document discusses using Java to build robots with high school students. It describes competitions like the FIRST Robotics Competition where students design, build, and program robots. The author shares their experience having high school students on their robotics team build a robot called DEStiny using Java and competing in various competitions. Their team was initially seeded 8th but made it to 4th alliance and won a competition in New York City. The document encourages volunteering to get involved with robotics teams and competitions.

OpenAPIs are erverywhereJérémie Bresson

The document discusses OpenAPI specifications including that OpenAPI and Swagger are the same. It provides information on editors for OpenAPI specifications, importing OpenAPI specifications into Postman, and supporting OpenAPI on the server side by adding it to JAX-RS projects. It also discusses the code first and specification first approaches and using the OpenAPI Generator tool to generate code from an OpenAPI specification.

Digital Fabrication Studio: IP, Open Design and MetadesignMassimo Menichinelli

The document discusses various topics related to intellectual property in digital fabrication including copyright, patent, trademark, trade dress, licensing, and Creative Commons licensing. It provides examples of each topic and notes that different countries have different laws regarding things like copyright duration. Licensing your work is presented as an alternative to running your own business that reduces risk. Creative Commons licensing is shown as a way to publish content while enabling sharing and protecting author rights. Further reading on topics like free culture and open knowledge is recommended.

Understanding Open Source LicensesAll Things Open

This document discusses open source licenses. It explains that open source licenses determine how software can be used, reused, and distributed. There are three main types of open source licenses: permissive licenses that require credit but few other obligations; weak copyleft licenses that require modifications and derivatives to be openly licensed; and strong copyleft licenses that require all software linked or distributed with the licensed software to also be open source. The document advises readers to carefully understand the license for their software project to avoid legal risks and ensure their goals are met.

Understanding Open Source LicensesJim Jagielski

Contract Testing Php-pactDaniele D'Angeli

The document discusses consumer-driven contract testing. It explains that with contract testing, the consumer tests against a mock of the provider, records expectations, and then the provider validates that its implementation meets those expectations. This allows the consumer and provider to develop independently while maintaining integrated functionality. The Pact tool is presented as a way to implement contract testing across different programming languages and frameworks in a standardized way.

Ad of Geektrip for StudentsPhil Jeudy

Ignite java-robotsJeanne Boyarsky

Concourse in the Real World: A Case Study in CI/CD and DevOpsVMware Tanzu

SpringOne Platform 2017 Bryan Kelly, Cerner; Greg Meyer, Cerner "Ever heard of Concourse? If not, then let me be the first to introduce you to one of the newest CI/CD players. Concourse brings together both continuous integration and continuous delivery into one tool using declarative ""pipelines."" If you have had some exposure to Concourse, then you are probably familiar with example pipelines spread across various tutorials and open source projects. Many of these examples illustrate what a pipeline may look like in an environment where code can quickly go from development to production in a relatively short period time, possibly even minutes. Although this optimal sequence of events may work well in small and startup companies, it may not be well suited for organizations that are governed by development processes such as ISO 9001 or FDA regulations. How can Concourse be utilized to optimize the flow of applications and services through the development and deployment pipeline while meeting compliance of strict development processes? In addition to software development, Concourse can play just as critical of a role in DevOps. Pipelines can be utilized to streamline delivery of critical updates to infrastructure and system services. How can Concourse optimize DevOps in environments with strict change control processes? The presentation will explore a real world implementation of CD/CI and DevOps utilizing Concourse in an environment such as one described above. It will cover: A brief introduction to Concourse Describe the inherit advantages of incorporating both CD and CI into a streamlined process under one tool An in depth look at a real end to end pipeline in an ISO 9001 environment taking code from development to production Inherent synergies when writing Spring Boot applications Utilization of PCF pipelines to streamline DevOps processes for infrastructure and system service updates in a Pivotal Cloud Foundry implementation"

ApacheCon 2014 - Three Shall BeJim Jagielski

Powerpoint and CopyrightShawnee

The document provides guidance on creating effective PowerPoint presentations while avoiding copyright issues. It discusses visual design best practices like fonts, color, and background selection. It also covers copyright law basics such as fair use and obtaining proper permissions and attribution for images. Key recommendations include using fewer words, more images, and practicing presentations.

Imagine Prep Crowdfunding and Innovation presentation Traklight.com

This document provides an overview of intellectual property (IP) and strategies for protecting and leveraging IP. It discusses common misconceptions about IP, different types of IP including patents, copyrights, trademarks and trade secrets. It also outlines considerations for identifying owned IP, platforms for fundraising like Kickstarter and Indiegogo, building an online presence, crafting an effective pitch, and learning from campaign successes and failures. The goal is to educate about IP and crowdfunding strategies.

Reactive Applications on Apache Tomcat and Servlet 3.1 containersVMware Tanzu

SpringOne Platform 2017 Violeta Georgieva, Pivotal "Scalability and resilience are important key goals, characteristics for modern applications. To achieve this, applications can use non-blocking, event-driven manner that scale with a small number of threads with backpressure as a key ingredient. In Spring Framework 5, a new reactive stack is introduced, which includes Servlet/Reactive Streams bridge. Using this new capability it is possible to create reactive applications that can be deployed on Apache Tomcat or any Servlet 3.1 compatible containers. In this session you will learn how to leverage this bridge in your applications. In addition you will look behind the scene and see how this bridge is implemented supporting both HTTP and Websocket protocols. Performance comparison will be presented showing the benefits of the new approach."

Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...Codemotion

Pastore - Commodore 65 - La storiaCodemotion

More Related Content

Similar to Pompili - From hero to_zero: The FatalNoise neverending story (20)

Chi l'ha detto che i virus su Linux non esistono?Codemotion

Attacchi, bugie e underground digitale by Andrea PompiliCodemotion

Why I've to waste my time on cryptography? - Andrea Pompili - Codemotion Rome...Codemotion

Andrea Pompili - The Dark Side of Malware AnalysisCodemotion

The magic world of Advanced Persistent Threat - Andrea Pompili - Codemotion M...Codemotion

OER XinXai (NOW)! Dalian OCWC Conference 2008Jon Phillips

Commodore 64 Mon Amour(2): sprite multiplexing. Il caso Catalypse e altre sto...Codemotion

Using Java to build robots with high schoolersVMware Tanzu

OpenAPIs are erverywhereJérémie Bresson

Digital Fabrication Studio: IP, Open Design and MetadesignMassimo Menichinelli

Understanding Open Source LicensesAll Things Open

Understanding Open Source LicensesJim Jagielski

Contract Testing Php-pactDaniele D'Angeli

Ad of Geektrip for StudentsPhil Jeudy

Ignite java-robotsJeanne Boyarsky

Concourse in the Real World: A Case Study in CI/CD and DevOpsVMware Tanzu

ApacheCon 2014 - Three Shall BeJim Jagielski

Powerpoint and CopyrightShawnee

Imagine Prep Crowdfunding and Innovation presentation Traklight.com

Reactive Applications on Apache Tomcat and Servlet 3.1 containersVMware Tanzu

Chi l'ha detto che i virus su Linux non esistono?Codemotion

Attacchi, bugie e underground digitale by Andrea PompiliCodemotion

Why I've to waste my time on cryptography? - Andrea Pompili - Codemotion Rome...Codemotion

Andrea Pompili - The Dark Side of Malware AnalysisCodemotion

The magic world of Advanced Persistent Threat - Andrea Pompili - Codemotion M...Codemotion

OER XinXai (NOW)! Dalian OCWC Conference 2008Jon Phillips

Commodore 64 Mon Amour(2): sprite multiplexing. Il caso Catalypse e altre sto...Codemotion

Using Java to build robots with high schoolersVMware Tanzu

OpenAPIs are erverywhereJérémie Bresson

Digital Fabrication Studio: IP, Open Design and MetadesignMassimo Menichinelli

Understanding Open Source LicensesAll Things Open

Understanding Open Source LicensesJim Jagielski

Contract Testing Php-pactDaniele D'Angeli

Ad of Geektrip for StudentsPhil Jeudy

Ignite java-robotsJeanne Boyarsky

Concourse in the Real World: A Case Study in CI/CD and DevOpsVMware Tanzu

ApacheCon 2014 - Three Shall BeJim Jagielski

Powerpoint and CopyrightShawnee

Imagine Prep Crowdfunding and Innovation presentation Traklight.com

Reactive Applications on Apache Tomcat and Servlet 3.1 containersVMware Tanzu

More from Codemotion (20)

Fuzz-testing: A hacker's approach to making your code more secure | Pascal Ze...Codemotion

Pastore - Commodore 65 - La storiaCodemotion

Pennisi - Essere Richard AltwasserCodemotion

Rivivere l'ebbrezza di progettare un vecchio computer o una consolle da bar è oggi possibile sfruttando le FPGA, ovvero logiche programmabili che consentono a chiunque di progettare il proprio hardware o di ricrearne uno del passato. In questa sessione si racconta come dal reverse engineering dell'hardware di vecchie glorie come il Commodore 64 e lo ZX Spectrum sia stato possibile farle rivivere attraverso tecnologie oggi alla portata di tutti.

Michel Schudel - Let's build a blockchain... in 40 minutes! - Codemotion Amst...Codemotion

There's a lot of talk about blockchain, but how does the technology behind it actually work? For developers, getting some hands-on experience is the fastest way to get familiair with new technologies. So let's build a blockchain, then! In this session, we're going to build one in plain old Java, and have it working in 40 minutes. We'll cover key concepts of a blockchain: transactions, blocks, mining, proof-of-work, and reaching consensus in the blockchain network. After this session, you'll have a better understanding of core aspects of blockchain technology.

Richard Süselbeck - Building your own ride share app - Codemotion Amsterdam 2019Codemotion

When was the last time you were truly lost? Thanks to the maps and location technology in our phones, a whole generation has now grown up in a world where getting lost is truly a thing of the past. Location technology goes far beyond maps in the palm of our hand, however. In this talk, we will explore how a ridesharing app works. How do we discover our destination?How do we find the closest driver? How do we display this information on a map? How do we find the best route?To answer these questions,we will be learning about a variety of location APIs, including Maps, Positioning, Geocoding etc.

Eward Driehuis - What we learned from 20.000 attacks - Codemotion Amsterdam 2019Codemotion

Eward Driehuis, SecureLink's research chief, will guide you through the bumpy ride we call the cyber threat landscape. As the industry has over a decade of experience of dealing with increasingly sophisticated attacks, you might be surprised to hear more attacks slip through the cracks than ever. From analyzing 20.000 of them in 2018, backed by a quarter of a million security events and over ten trillion data points, Eward will outline why this happens, how attacks are changing, and why it doesn't matter how neatly or securely you code.

Francesco Baldassarri - Deliver Data at Scale - Codemotion Amsterdam 2019 - Codemotion

IoT revolution is ended. Thanks to hardware improvement, building an intelligent ecosystem is easier than never before for both startups and large-scale enterprises. The real challenge is now to connect, process, store and analyze data: in the cloud, but also, at the edge. We’ll give a quick look on frameworks that aggregate dispersed devices data into a single global optimized system allowing to improve operational efficiency, to predict maintenance, to track asset in real-time, to secure cloud-connected devices and much more.

Martin Förtsch, Thomas Endres - Stereoscopic Style Transfer AI - Codemotion A...Codemotion

What if Virtual Reality glasses could transform your environment into a three-dimensional work of art in realtime in the style of a painting from Van Gogh? One of the many interesting developments in the field of Deep Learning is the so called "Style Transfer". It describes a possibility to create a patchwork (or pastiche) from two images. While one of these images defines the the artistic style of the result picture, the other one is used for extracting the image content. A team from TNG Technology Consulting managed to build an AI showcase using OpenCV and Tensorflow to realize such goggles.

Melanie Rieback, Klaus Kursawe - Blockchain Security: Melting the "Silver Bul...Codemotion

The document summarizes some of the security issues with blockchain technology. It discusses how blockchain is not a "silver bullet" and does not inherently solve problems like privacy and security of smart devices. It outlines various application security issues with complex code, protocols, and difficulty of updates on blockchains. Concerns over data immutability and security of smart contracts are also covered. The document questions whether blockchain truly provides the level of decentralization and anonymity claimed, and outlines some impossibility results and limitations of existing approaches to achieving security and privacy in blockchain systems.

Angelo van der Sijpt - How well do you know your network stack? - Codemotion ...Codemotion

The document provides an overview of the HTTP network protocol in its early stages of development. It summarizes the initial IMP (Interface Message Processor) software used to establish connections and transmit messages over the ARPANET. It outlines some early requirements for host-to-host software to enable simple and advanced use between computer systems. The document also describes the initial host software specifications, including establishing connections, transmitting data efficiently, and implementing error checking between connected systems. This was one of the first documents to define core aspects of the early HTTP network protocol to enable information exchange over the fledgling internet.

Lars Wolff - Performance Testing for DevOps in the Cloud - Codemotion Amsterd...Codemotion

Performance tests are not only an important instrument for understanding a system and its runtime environment. It is also essential in order to check stability and scalability – non-functional requirements that might be decisive for success. But won't my cloud hosting service scale for me as long as I can afford it? Yes, but… It only operates and scales resources. It won't automatically make your system fast, stable and scalable. This talk shows how such and comparable questions can be clarified with performance tests and how DevOps teams benefit from regular test practise.

Sascha Wolter - Conversational AI Demystified - Codemotion Amsterdam 2019Codemotion

Sascha will demonstrate the opportunities and challenges of Conversational AI learned from the practice. Both Technology and User Experience will be covered introducing a process finding micro-moments, writing happy paths, gathering intents, designing the conversational flow, and finally publishing on almost all channels including Voice Services and Chatbots. Valuable for enterprises, developers, and designers. All live on stage in just minutes and with almost no code.

Michele Tonutti - Scaling is caring - Codemotion Amsterdam 2019Codemotion

A key challenge we face at Pacmed is quickly calibrating and deploying our tools for clinical decision support in different hospitals, where data formats may vary greatly. Using Intensive Care Units as a case study, I’ll delve into our scalable Python pipeline, which leverages Pandas’ split-apply-combine approach to perform complex feature engineering and automatic quality checks on large time-varying data, e.g. vital signs. I’ll show how we use the resulting flexible and interpretable dataframes to quickly (re)train our models to predict mortality, discharge, and medical complications.

Pat Hermens - From 100 to 1,000+ deployments a day - Codemotion Amsterdam 2019Codemotion

Coolblue is a proud Dutch company, with a large internal development department; one that truly takes CI/CD to heart. Empowerment through automation is at the heart of these development teams, and with more than 1000 deployments a day, we think it's working out quite well. In this session, Pat Hermens (a Development Managers) will step you through what enables us to move so quickly, which tools we use, and most importantly, the mindset that is required to enable development teams to deliver at such a rapid pace.

James Birnie - Using Many Worlds of Compute Power with Quantum - Codemotion A...Codemotion

Quantum computers can use all of the possible pathways generated by quantum decisions to solve problems that will forever remain intractable to classical compute power. As the mega players vie for quantum supremacy and Rigetti announces its $1M "quantum advantage" prize, we live in exciting times. IBM-Q and Microsoft Q# are two ways you can learn to program quantum computers so that you're ready when the quantum revolution comes. I'll demonstrate some quantum solutions to problems that will forever be out of reach of classical, including organic chemistry and large number factorisation.

Don Goodman-Wilson - Chinese food, motor scooters, and open source developmen...Codemotion

Chinese food exploded across America in the early 20th century, rapidly adapting to local tastes while also spreading like wildfire. How was it able to spread so fast? The GY6 is a family of scooter engines that has achieved near total ubiquity in Europe. It is reliable and cheap to manufacture, and it's made in factories across China. How are these factories able to remain afloat? Chinese-American food and the GY6 are both riveting studies in product-market fit, and both are the product of a distributed open source-like development model. What lessons can we learn for open source software?

Pieter Omvlee - The story behind Sketch - Codemotion Amsterdam 2019Codemotion

Dave Farley - Taking Back “Software Engineering” - Codemotion Amsterdam 2019Codemotion

Would you fly in a plane designed by a craftsman or would you prefer your aircraft to be designed by engineers? We are learning that science and empiricism works in software development, maybe now is the time to redefine what “Software Engineering” really means. Software isn't bridge-building, it is not car or aircraft development either, but then neither is Chemical Engineering. Engineering is different in different disciplines. Maybe it is time for us to begin thinking about retrieving the term "Software Engineering" maybe it is time to define what our "Engineering" discipline should be.

Joshua Hoffman - Should the CTO be Coding? - Codemotion Amsterdam 2019Codemotion

What is the job of a CTO and how does it change as a startup grows in size and scale? As a CTO, where should you spend your focus? As an engineer aspiring to be a CTO, what skills should you pursue? In this inspiring and personal talk, I describe my journey from early Red Hat engineer to CTO at Bloomon. I will share my view on what it means to be a CTO, and ultimately answer the question: Should the CTO be coding?

Mike Kotsur - What can philosophy teach us about programming - Codemotion Ams...Codemotion

If Socrates met Linus Torvalds, what would they talk about? How much math should be bundled into a good programming language? Can compiler resolve an argument and prove, that someone is right? Trough semantics of code, that we write every day, when looking carefully, one can see foundations of logic and science, that has been build more than 2000 years ago. Why does it matter, and how can we leverage this enormous power to make our code safe and sound in languages with advanced type systems, like Typescript and Scala.