Press archive

In The Wild Project's summer special I go live into the deep web and the dark web with Jordi Wild. First I explain the difference between the surface, deep and dark web, how Tor chains three encrypted nodes, like linking three buses where the last driver doesn't know where you came from, and why it's worth booting from a USB stick with Tails, which runs in memory and encrypts whatever you save. I show that Tor also hosts perfectly legal sites, such as the BBC or ProPublica, which serve people living under censorship, and I criticise the mass blocking of Cloudflare IPs that LaLiga imposes in Spain during matches.

Hacking and outreach →

On Café & Pizza I go over my career: I was born in Paris, came to Spain aged 8 and started out programming text adventures in BASIC, moved through BBSs and Infovía, installed my first Slackware Linux in 1995 and gave my first talk in 2002. I recount my time in Madrid at a 100% Linux consultancy, the 2008 crisis that led me to become a driving instructor in Porto and how I ended up in management as head of security, as well as evaluating projects for the European Commission and sitting on an expert subgroup on AI and cybersecurity. I make the case for bug bounty as the extra mile after the annual pentest, warn that a CTF is harder than the real world and urge Europe to stop buying firewalls from the United States and Israel to gain technological sovereignty.

My career →

With Jordi Wild I go back over my beginnings: I programmed text adventures in BASIC, connected to BBSs and FidoNet by modem and, with Infovía, reached IRC, where at 15 or 16 I joined Hispahack as its youngest member. I tell how the group changed the front page of congreso.es after Trillo's famous «manda huevos» remark, and how it all ended in the Hispahack case, which saw logs begin to be accepted as court evidence and in which nobody was convicted. And I explain with simple examples flaws such as SQL injection or uploading a PHP file disguised as a CV, which still exist because in the rush security gets left for later, and later never comes.

My path as a hacker →