Introduction

Hi there, I am an internationally recognized security researcher.

Since owning my first Commodore-64 I've never stopped studying new technologies, developing unconventional attack vectors and exploring what makes things tick...and break.

https://andrea.bio

Datasheet

EXPERTISE
───────────────────────────────────────────────────────────────────────────────
┌──────────┐                                          ┌───────────┬─────────┐
│ HARDWARE ├───┐            ┌───────────── research → │   RDS-TMC │ TEMPEST │█
└──────────┘   │            │                         │ 802.3 PIP │ EMV     │█
┌──────────┐   │  ░░░░░░░░  ├── penetration testing   └─────────────────────┘█
│ FIRMWARE ├───┼─ SECURITY ─┤                           ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
└──────────┘   │  ░░░░░░░░  ├──────── code auditing
┌──────────┐   │            │                         ┌────────────┬────────┐
│ SOFTWARE ├───┘            └────────── engineering → │ USB ARMORY │ TAMAGO │█
└──────────┘                                          └─────────────────────┘█
                                                        ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
OPEN SOURCE
───────────────────────────────────────────────────────────────────────────────

┌────────────┐ ┌─ MK I ──┐  ┌─ crucible   ┌ mxc-scc2       boot-transparency ─┐
│ USB ARMORY ├─┐         ├──┘             ┌ mxs-dcp                           │
└────────────┘ └─ MK II ─┘  └─ interlock ─┴ caam-keyblob   ┌──────── go-boot ─┘
                    │                                      │ ┌────── kotama
 Armory Boot  ──────┘             ┌────────┐    ┌─ amd64 ──┘ │
 Armory Drive ──────┘ ─── arm ────┤ TAMAGO ├────┼─ arm64     │     ┄┄┄┄┄┄┄┄┄┄┄
 Armored Witness ───┘     ─┬─     └────────┘    └─ riscv64 ──┘     ┆ tenshi  ┆
                           │                       ───┬───         ┆ ftester ┆
                           └─────── GoTEE ────────────┘            ┄┄┄┄┄┄┄┄┄┄┄
かいしゃ
───────────────────────────────────────────────────────┬───────────────────────
2025/05 → Head of Security Engineering        Reversec ┤   foundry.reversec.com
2022/03 → Head of Product Security          WithSecure ┤ foundry withsecure.com
2017/02 → Head of Hardware Security           F-Secure ┤   foundry f-secure.com
2017/02 → ▒▒▒▒▒▒▒ Inverse Path is acquired by F-Secure │ ▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒

FOUNDATION
───────────────────────────────────────────────────────┬───────────────────────
2005/11 → Co-Founder                      Inverse Path ┤        inversepath.com

MISC
───────────────────────────────────────────────────────────────────────────────
Co-Founder • Open Source CSIRT • ocert.org                  ← 2008/03 - 2017/08
Researcher • University of Trieste, Department of Astronomy ← 2005/06 - 2007/12
UNIX Programming Consultant • London Internet Exchange      ← 2004/11 - 2004/12
Infrastructure Developer • Gentoo Linux                     ← 2003/07 - 2006/02
UNIX Security Engineer • Live Network Security              ← 2001/10 - 2005/10
Sysadmin and Security Officer • NE&T, Webtechna             ← 2000/11 - 2001/07

Links

• Personal site
• Research projects
• Open source

Main projects

• TamaGo - bare metal Go
• USB armory - open source flash-drive-sized computer
• go-boot - bare metal Go UEFI boot manager
• GoKey - bare metal Go smart card
• GoTEE - Go Trusted Execution Environment
• crucible - OTP fusing tool
• tenshi - log monitoring tool

Contact

andrea@inversepath.com | PGP/GPG key: 0x864C9B9E | Trieste, Italy

Social

Bluesky | Mastodont | 𝕏 | Linkedin | Instagram