Hacking since 1995 · Milano · Roma · Shenzhen · Dubai
Fabio Pietrosanti

FabioPietrosanti

naif
石风翱
Shí Fēng'áo
HackerEntrepreneurInnovator

Entrepreneur and biohacker. I build open-source infrastructure for transparency, whistleblowing and digital rights — plus ventures in longevity, algorithmic finance and last-mile logistics. Professional troublemaker.

31years in information security
135talks, panels and workshops
377press, TV and radio mentions
111articles, papers and research write-ups
36projects documented
01

About

The short version — the same text as on LinkedIn.

I build things that shift power: open-source infrastructure, non-profit ventures and companies — mostly where technology meets civil rights.

I started in information security in 1995, inside the Italian hacker community — a background I never left. In 2005 I co-founded PrivateWave, a mobile voice-encryption company, where I worked with Philip Zimmermann on a ZRTP-based protocol for circuit-switched networks. In 2010 I started GlobaLeaks, free software for secure whistleblowing now used by media, NGOs, public bodies and private companies worldwide, and built the Hermes Center for Transparency and Digital Human Rights around it — today a member of European Digital Rights (EDRi). Since 2016, Whistleblowing Solutions turns that technology into a sustainable service, as a non-profit social enterprise with no private shareholder interests.

In parallel I work on problems that are less political and more physical. At SignalSwarm I lead a fully automated, market-neutral trading platform and the asset management service built on it. For thirteen years, at our family's GLS express-courier branch, I pushed automation, ecological last-mile delivery and cost-control systems into a business that moves parcels for a living. Since 2023 I've been building biohack.it, open infrastructure that turns individual self-experimentation into comparable human data.

What connects them is a method rather than a sector: take something opaque — a supply chain, a market, a bureaucracy, a body — instrument it, and give people the tools to act on what they find. Preferably as free software.

I also help organise the Italian hacker community: the Italian Hacker Camp and the Italian Hacker Embassy at the Dutch and German camps.

Advisory, board seats and partnerships: welcome. Say hello.

02

The long version

Three decades, told through what was built and what it changed.

1995–2004

The hacker scene and the first security jobs

Fabio started in information security in 1995 inside the Italian hacker community, where he is still known as naif. By the late 1990s he was writing in BFi (the s0ftpj e-zine) and contributing to Italian Linux documentation such as Linux Domande e Risposte.

In 2000–2001 he co-founded Sikurezza.org, one of the reference Italian security communities and mailing lists, and was a founding member of the Italian Black Hats, launched at SMAU 2001. In 2002 La Stampa followed him and other Black Hats around Milan testing the security of wireless networks.

Meanwhile the hobby became a profession: CTO of Live Network Security, freelance ICT-security writer for Mondadori's WeekIT and for ICT Security, network security manager at I.NET — where he designed a Security Operation Center — and from 2004 senior information-security consultant reporting to the security CTO of Telecom Italia. Talks from those years cover wireless insecurity (Webbit, SMAU, CNR), anonymous communication (hack.lu 2006) and PGP (e-privacy 2005).

2005–2014

Voice encryption and the honesty of the crypto market

In 2005 he co-founded KHAMSA, later PrivateWave Italia, building mobile voice and messaging encryption (PrivateGSM) for governments and enterprises, and worked with Philip Zimmermann on a ZRTP-based encrypted transport for circuit-switched networks. PrivateWave released ZORG, an open-source C++ and Java ZRTP implementation, in 2011 — the year ZRTP became RFC 6189.

Two international patents came out of that work, filed by KHAMSA Italia with Federico Moro and Lorenzo Boccaccia: WO2008015721 / EP2057808, secure management of multiple identities in centralised messaging services, and WO2008015723 / EP2057777, a method to record a non-repudiable digital communication and identify its participants (see Patents).

On his blog infosecurity.ch he wrote about mobile and voice security and exposed how parts of the market worked: in 2010 he showed that a supposedly independent review of voice-encryption products was traceable to one of the vendors (picked up by The Register), and he wrote against snake-oil claims and marketing “hacking contests”. With others he released OSXCrypt (2008), an attempt to bring TrueCrypt-compatible disk encryption to macOS.

2010–today

Whistleblowing and anonymity infrastructure

In 2010 he started GlobaLeaks, free software for secure and anonymous whistleblowing, and in December 2010 built the Hermes Center for Transparency and Digital Human Rights around it; Hermes has been a member of European Digital Rights (EDRi) since 2018. Hermes also rewrote and maintained Tor2web, the gateway that lets ordinary browsers reach Tor onion services.

GlobaLeaks became the base of whistleblowing platforms run by newsrooms, NGOs and public bodies — from Publeaks in the Netherlands and IRPILeaks to anti-corruption channels with Transparency International Italy and, later, the Italian anti-corruption authority. Since 2016 Whistleblowing Solutions, a non-profit social enterprise, turns that technology into a sustainable service.

He has been a regular in the Tor community since 2011: running exit relays and Tor2web nodes, taking part in the international Tor developers' meetings, and opening tickets that changed Tor itself — OutboundBindAddressExit, shipped in Tor 0.3.0, comes from his 2016 proposal for low-liability exit relays.

2016–2022

Policy, surveillance and democracy

The same method moved into policy. In 2017 he was one of the proponents of the Italian bill on state trojans (captatori informatici) presented by Stefano Quintarelli, and he took the topic to e-privacy, Freedom Not Fear in Brussels and the CCC. He ran the 2017 campaign that pushed VideoLAN to serve VLC over HTTPS, mapped the risks of Kaspersky software in the Italian public sector (Euronews 2018, again in 2022) and used FOIA requests to monitor surveillance.

On electronic voting he wrote the Guida Hermes al voto digitale, analysed the 2017 Lombardy e-voting referendum, animated the CRVD committee, studied how Italians abroad could vote at polling stations (the AIRE study) and, with OpenRousseau, showed the weaknesses of the Five Star Movement's Rousseau platform — including by voting twice on it.

In 2022 Monitora PA, a civic-hacking project run with Hermes and volunteers, pushed thousands of Italian public administrations to remove Google Analytics.

2012–2025

Parcels, logistics and algorithmic finance

For thirteen years he worked in the family's GLS express-courier branch in Latina, bringing automation, measurement systems, cost control and ecological last-mile delivery into a business that moves parcels for a living. That work produced Haulersense (computer vision and revenue recovery for couriers), LESS.green and OpenPUDO — open-source software for pick-up and drop-off networks — and PLogistics, an e-commerce fulfilment operation. In 2022 he taught the logistics of pick-up points at LIUC University.

Since 2019 he has led SignalSwarm in Dubai: a fully automated, market-neutral trading platform and the asset-management service built on it.

2023–today

Biohacking and open human data

Since 2023 he has been building biohack.it with the Hacking Biology Foundation: AGPL-licensed, non-profit infrastructure where self-experimenters document protocols and standard-coded biomarkers, so that individual experiments become comparable human data. He has talked about it on Rai 1 (Codice), Rai Radio 1 (Codice Beta) and at the TimePie biohacker forum in Shanghai.

03

Five threads

Hacker since 1995 — that one never ends. Open-source hacktivism since 1997, cybersecurity since 2001, and the three that matter most right now.

Open-source hacktivismsince 1997

From the Italian hacker scene — the BFi e-zine, Italian Linux documentation, Sikurezza.org, Hackmeeting, End Summer Camp — to a simple rule kept ever since: what he builds ships as free software. ZORG, OSXCrypt, Tor2web, GlobaLeaks, OpenPUDO, biohack.it.

Cybersecuritysince 2001

The profession: security operations and threat analysis at I.NET, counter-intelligence and security research at Telecom Italia, published advisories, the Italian Black Hats, then ten years of mobile voice encryption at PrivateWave — two international patents — and, ever since, security work in the open: the VLC HTTPS campaign, TLS and Tor tickets.

Digital rightsfocus now · since 2010

Hermes Center and GlobaLeaks: whistleblowing and anonymity technology used by newsrooms, NGOs and public bodies, plus the advocacy around it — surveillance, state trojans, biometrics, public-sector privacy.

National securityfocus now · since 2018

Measuring the digital dependencies of a country instead of debating them: the Kaspersky risk matrix, the OSSCI proposal for an observatory on the national cyber perimeter, and mxmap.it on who really runs the infrastructure of Italian public administration.

Biohackingfocus now · since 2023

biohack.it and the Hacking Biology Foundation: open infrastructure that turns individual self-experimentation into comparable human data — protocols, standard-coded biomarkers, results in the open.

04

Work

Roles and companies. Titles and dates are kept identical to LinkedIn; details are expanded here.

  1. Jan 2023Present

    Co-Founder

    Biohack.it — Hacking Biology Foundation
    Jan 2023 – Present
    Details

    Founder and initiator of Biohack.it, open infrastructure for structured human self-experimentation. A free, open-source (AGPL-3.0) non-profit platform, stewarded by the Hacking Biology Foundation, where biohackers document their protocols, measure efficacy and safety through standards-coded biomarkers (LOINC/UCUM), and share both the protocol and its outcomes in the open — so that many individual experiments become comparable human data. Leading product, specification, community and partnerships. Turn self-experimentation into evidence. https://biohack.it

  2. Dec 2010Present

    President, Co-Founder

    Hermes - Center For Transparency and Digital Human Rights
    Dec 2010 – Present · Milan, Lombardy, Italy
    Details

    The Hermes Center for Transparency and Digital Human Rights is a nonprofit association that develops and promotes Transparency and Anonymity Technologies such as GlobaLeaks and Tor2web.

    It also engage in advocacy and policy activism in the area of Digital Rights and Privacy Activism.

    Hermes Center is, since 2017, an EDRi (European Digital Rights) Observer then become in 2018 EDRi Member.

    I do support project startup with activities in area of fundraising, administration and project management, partnership management, some security design and software testing, a bit of advocacy.

    This initiative started in December 2010 as GlobaLeaks Project along with tight cooperation of Winston Smith Project (active since 2002 in organisation of e-privacy event).

  3. Sep 2020Present

    Co-Founder, Board Member

    Info.nodes
    Sep 2020 – Present · Self-employed · Milan, Lombardy, Italy
    Details

    Supports journalists and activists doing their fundamental job: Expose the truth & promote effective social changes.

  4. Feb 2019Present

    Managing Director

    SignalSwarm Information Technology Ltd
    Feb 2019 – Present · Full-time · Dubai, United Arab Emirates · Hybrid
    Details

    Leading SignalSwarm, Trading Management Software Platform development and operations.

    Strategy in implementing Asset Management service with fine tuned algorithms from Signals Selection to Risk Management.

    Financial Trading with Managed Account via fully automated logic with asset-neutral, market-neutral, evolutive and adaptive system (Stock, Bond, ETF, CFD, FX, Crypto, Commodities).

  5. Apr 2016Present

    Co-Founder, Partner, Board of Directors Member

    Whistleblowing Solutions
    Apr 2016 – Present · Milan, Lombardy, Italy
    Details

    Strategic and operational development of the social enterprise.

    Pursuing the social mission of fighting corruption.

    Researching new technological and organizational methods to empower whistleblowers within public and private organization.

    Sharing all generated knowledge with the whistleblowing community at large.

    The company is a non-profit "Social Enterprise" with no private shareholder interests, pursuing social mission.

  6. Apr 2016Present

    Board Member, Co-Founder

    Associazione Inclusive Hacker Framework (ex-Italian Grappa)
    Apr 2016 – Present · Via Vittorio Veneto 114 - San Donà di Piave, Venice, Italy
    Details

    Associazione Inclusive Hacker Framework (ex-Italian Grappa) organizes:

    - The Italian Hacker Camp (Padova) https://www.ihc.camp

    - The Italian Hacker Embassy, the assembly/village of Italian Hacker Community within the Dutch and German Hacker Camp every two years

    It used to organize also ESC, up to ESC2016, End Summer Camp (www.endsummercamp.org) in Venice every year

    Here i mostly support coordination of Italian Hacker Embassy, Italian Hacker Camp and formerly used to contribute to End Summer Camp.

    Explanation Video (ESC2015) in Italian: https://www.youtube.com/watch?v=IYYU6jwN8rQ

    More on http://italiangrappa.it/ .

  7. Jan 2019Jan 2026

    Co-Founder, Partner

    Advanced Knowledge Ventures
    Jan 2019 – Jan 2026 · Self-employed · Switzerland
    Details

    Corporate Investment Vehicle in Technology Ventures.

    Provide joint-venture base due diligence and business strategy consulting services for pre-seed, seed and M&A operations.

  8. Sep 2022Sep 2025

    Co-Founder, Partner

    PLogistics
    Sep 2022 – Sep 2025 · Self-employed · Latina, Latium, Italy
    Details

    Plogistics provides advanced e-commerce warehousing, e-fulfilment, reverse logistics, warehouse stock financing, cash-on-delivery (COD) split-payment processing, parcel sorting, labeling/re-labeling, address correction, proactive customer services alongside technology development for national and international supply chain partners and customers.

    With unique solutions tailored for Affiliate Marketing and dropshipping professionals, it’s the only e-fulfilment player with ecommerce digital marketing DNA, with direct integration with major marketplace and order management platforms.

    Thanks to its 20,000+ sqm warehousing facility strategically located in the center of Italy, Plogistics customers can enjoy inbound/outbound direct access to National Express Courier services (GLS Italy), Sea Freight Ports interconnection for Cargo Containers (Civitavecchia, Naples) and Raw Materials (Gaeta), Air Freight Airport (Rome Fiumicino/FCO).

    Collaboration program for logistics professionals enable plogistics to fit into major projects working alongside trucking, handlers and custom clearing partners.

  9. Nov 2012Sep 2025

    Business Consultant, Board of Directors Member

    GLS (Latina Branch)
    Nov 2012 – Sep 2025 · Latina, Latium, Italy
    Details

    Develop company (family business) management in optimizing business processes across all areas with goals of performance improvement, cost reduction and shareholder value creation.

    Research and Innovate with in-house technology development for automation, ecological last mile, measurement systems improvements, financial and cost control systems.

    Handle large account, new special projects, business development with complementary services.

    The company runs express courier services and is one of the oldest members of the GLS Italy network, active since 1986.

  10. Jan 2020Jan 2024

    Co-Founder, Partner

    Ethic Alliance Inc.
    Jan 2020 – Jan 2024 · Washington DC-Baltimore Area
    Details

    Ethic Alliance Inc. is a social enterprise partnering with public, private, and civil society entities whose aim is to create a scalable mechanism to reward and protect whistleblowers for bringing to light waste, abuse, fraud, and corruption. The target of our current efforts are the federal funds from the $2 Trillion Coronavirus Aid, Relief, and Economic Security (CARES) Act and other federal programs. We are made up of anti-corruption experts, Law firms, and cyber-security specialists with decades of experience in the False Claims Act (FCA) that have been used, since 1989 to recover more than $39 billion in taxpayer funds.

  11. Jul 2020Dec 2023

    Co-Founder, Partner

    LESS.green
    Jul 2020 – Dec 2023 · Self-employed · Milan, Lombardy, Italy
    Details

    LESS, Leading Environmentally Sustainable Shipping, is a non-profit high tech startup aimed at reducing the pollution and the contribution to anthropogenic global warming (AGW) of the last mile leg of B2C goods transportation in the eCommerce supply chain.

    It produces free software on Github https://github.com/lessgreen

  12. Aug 2019Feb 2023

    Co-Founder, Partner

    Haulersense
    Aug 2019 – Feb 2023 · Contract · Latina, Latium, Italy
    Details

    Haulersense researches and develops advanced technological solution for the purpose of revenue recovery and process performance improvement within CEP market (Courier, Express, Postal).

    Leveraging Artificial Intelligence, Computer Vision and Big Data analytics techniques, Haulersense process existing data to deliver economically tangible values to its customers.

    Among it’s key projects and products:

    - Multi-vendor Weight and Volume recovery for Image based Volumetric Weighting Systems

    - Defect Management Telemetry system for parcel machines with autonomic revenue loss detection

    - CEP Shipping Data Analytics for cost-revenue batch and realtime revenue control

  13. Jan 2014Jan 2021

    Member

    Transparency International Italy
    Jan 2014 – Jan 2021 · Milan, Lombardy, Italy
    Details

    Transparency International Italia does policy advocacy and awareness in the area of transparency, anti-corruption and whistleblowing.

    I'm a member, collaborating in advocacy and training as a cooperation point with the Hermes Center (that works on Whistleblowing Technologies).

  14. Jan 2018Jan 2020

    CEO, Co-Founder, Partner

    Ethic Whispers
    Jan 2018 – Jan 2020
    Details

    Ethic Whispers is a Social Tech-Legal startup focused on supporting international (outside US) whistleblowers that look forward for whistleblowing rewards while addressing corporate wrongdoing.

  15. Sep 2005Mar 2014

    Founder, CTO, Board of Director

    PrivateWave Italia S.p.A.
    Sep 2005 – Mar 2014 · Milan
    Details

    Co-founder of high-tech security startup.

    Winner of innovation competition at Startup Incubator of Polytechnic of Milan and Swiss University of Lugano.

    Lead from the early technology design up to fundraising and business development.

    Strategy and vision for Communication Security and Voice Encryption.

    Lead security and crypto technology strategies

    International Business Development (Government / Large Enterprise).

    Support company growth with fundraising and industrial partnership.

    Evaluate customer and partners needs.

    Encryption technologies for mobile voice and messaging.

    Design and implementation of secure communication technologies for high competitive markets.

    Deep knowledge/understanding/design of telecommunication (circuit switch / packet switched / wired / wireless) and encryption technologies, also in Government sector regarding communications security (COMSEC) and Common Criteria (CC) requirements.

    Deep knowledge in developing "products" with delivery as easy to be installed software and appliance format for easy deployment by IT departments.

    Worked with Philip Zimmermann for the design of a Circuit Switched's encrypted transport protocol based on ZRTP.

    The company started with a different name, KHAMSA SA, as a swiss company, and it's sister KHAMSA ITALIA SRL.

  16. Jun 2011Jun 2013

    Security Advisor

    BV-Tech (S.p.A)
    Jun 2011 – Jun 2013 · Milan, Lombardy, Italy
    Details

    Advisory for security technologies (communication security, anonymity, intelligence) and international business development (industrial partnership, international tender)

  17. Jun 2004Jan 2007

    Senior Information Security Consultant

    Telecom Italia S.p.A.
    Jun 2004 – Jan 2007
    Details

    Reporting to Security CTO of Corporate of Telecom Italia SpA on:

    counter Intelligence

    security advisory for corporate security strategy

    Information security research (incl. review of TILab Projects)

    security policy review

    early warning

    open source intelligence

    incident handling

  18. Aug 2001May 2004

    Network Security Manager

    I.NET
    Aug 2001 – May 2004
    Details

    Responsible for the information security services offering and for internal threat analysis.

    Worked in a 3 people's team with dedicated budget and complete autonomy.

    Developed the new managed information security portfolio of the company (product management).

    Project products and services concept.

    Establish partnership with software vendors and consulting company.

    Manage big customers projects.

    Design and implement the Security Operation Center infrastructure.

    Organize courses for sales force and for security engineers regarding new services.

  19. Jan 2001Dec 2001

    Freelance journalist

    WeekIT - Mondadori
    Jan 2001 – Dec 2001
    Details

    As a freelancer journalist was writing articles on ICT security news, products and technology for WeekIT weekly magazine.

  20. May 2001Jul 2001

    CTO

    Live Network Security SRL
    May 2001 – Jul 2001
    Details

    Senior Security Analyst.

    Work to create the company security consulting offering.

    Develop product concept.

    Follow customers with pre-sales activity.

    Manage penetration testing team.

    Evaluate and implement custom firewalls and IPS.

Patents

Secure multi-identity management methods for a centralized messaging service

WO2008015721 (PCT/IT2007/000558) · EP2057808 · priority IT RM2006A000425
Priority 4 Aug 2006 · PCT filed 2 Aug 2007 · published 7 Feb 2008
Inventors: Federico Moro, Lorenzo Boccaccia, Fabio Pietrosanti · Applicant: KHAMSA Italia S.r.l.

Method of recording a not repudiable digital transmission of information and identifying the participants in the communication

WO2008015723 (PCT/IT2007/000565) · EP2057777
Priority 4 Aug 2006 · PCT filed 3 Aug 2007 · published 7 Feb 2008
Inventors: Federico Moro, Lorenzo Boccaccia, Fabio Pietrosanti · Applicant: KHAMSA Italia S.r.l.
05

Projects

Software, research, campaigns and a few that never started — with the sources for each.

YearProjectAreaWhat it isSources
2000Sikurezza.orgHacker communityItalian security community and mailing lists, co-founded around 2000; presented at Webbit and Security Summit.
2000Early security codeSecurity researchEarly security code and research published 2000–2002.
2001Italian Black HatsHacker communityAssociation of Italian security researchers launched at SMAU 2001; founding member.
2005PrivateGSM / PrivateWaveEncryptionMobile voice and messaging encryption for governments and enterprises, built by PrivateWave Italia (2005–2014), with ZRTP-based designs developed with Philip Zimmermann.
2007OSXCryptEncryption2008 open-source release bringing TrueCrypt-compatible disk encryption to macOS, with Orlando Bassotto and Matteo Flora.
2007Italian Hacker Camp & EmbassyHacker communityThe Italian hacker gatherings: End Summer Camp in Venice, the Italian Hacker Camp in Padova and the Italian Hacker Embassy village at the Dutch and German camps (since CCCamp 2007).site
2009Snake oil in voice encryptionSecurity research2009–2010 writing against unverifiable security claims and marketing contests in voice encryption.1 2 3
2010GlobaLeaksWhistleblowingFree and open-source software for secure, anonymous whistleblowing, started in 2010 and used worldwide by newsrooms, NGOs, companies and public administrations.site
2010Hermes Center for Transparency and Digital Human RightsDigital rightsNon-profit association founded in December 2010 to develop transparency and anonymity technologies and to do digital-rights advocacy. EDRi member since 2018.site
2010The SecurStar caseSecurity research2010 evidence that a supposedly independent review of voice-encryption products was run by one of the vendors; covered by The Register.1 2 3
2010Elliptic-curve choicesEncryption2010 analysis of elliptic-curve choices in proprietary crypto products.1
2011Tor2webAnonymity & TorGateway that lets ordinary browsers reach Tor onion services. Originally created by Aaron Swartz and Virgil Griffith, rewritten and maintained by the Hermes Center from 2011.site
2011ZORG — open-source ZRTPEncryptionOpen-source C++ and Java implementation of ZRTP released by PrivateWave in January 2011.
2011Tor exit and Tor2web nodesAnonymity & TorOperating Tor exit and Tor2web nodes from 2011 and studying abuse and noisy traffic on them.
2011Low-liability Tor exitsAnonymity & TorFrom running an exit node to changing Tor: the proposal for exit-only outbound addresses became OutboundBindAddressExit in Tor 0.3.0.site 1 2 3
2016Whistleblowing Solutions / WhistleblowingPAWhistleblowingNon-profit social enterprise (2016) offering GlobaLeaks as a service; WhistleblowingPA made a free whistleblowing channel available to Italian public administrations.site
2017Trojans and Rule of LawSurveillance & policyItalian bill on state hacking tools presented by Stefano Quintarelli in 2017; Fabio was one of its proponents, together with lawyers and technologists. Presented in Italy, at the CCC and at Freedom Not Fear in Brussels.site 1 2 3
2017Hermes guide to digital votingE-voting & democracyHermes Center guide to the risks of digital voting (2017).
2017Lombardy 2017 e-voting analysisE-voting & democracyAnalysis and FOIA requests on the voting machines used in the 2017 Lombardy autonomy referendum.
2017VLC over HTTPSSecurity research2017 campaign after the CIA leaks: tickets, a census of 35 HTTPS mirrors and a proof of concept pushed VideoLAN towards HTTPS downloads.site 1 2 3
2018CRVD — e-voting committeeE-voting & democracyCommittee on the requirements of voting in a democracy: analyses and articles on e-voting (2018–2020). Site preserved in 2026.site 1 2
2018Kaspersky risk matrixNational cybersecurityRisk matrix of using Kaspersky software in the Italian public sector, if the vendor were forced to cooperate with the Russian government (2018, updated 2022).site 1
2019AIRE — voting from abroadE-voting & democracy2019 geolocation study of Italians registered abroad: 80 overseas polling stations would cover more than 86% of voters — an alternative to online voting.1 2 3
2019OpenRousseauE-voting & democracyOpen-source counter-platform (2020) exposing the weaknesses of the Five Star Movement's Rousseau voting system.
2019HaulersenseLogisticsAI and computer-vision tools for couriers: weight and volume revenue recovery, parcel-machine telemetry and shipping analytics (2019–2023).
2019OSSCI — national cyber-perimeter observatory (never started)National cybersecurityProposal (2019) for an observatory actively measuring the security of Italy's national cyber perimeter, reviewed by dozens of engineers and lawyers and supported by more than 250 people — years before the national cybersecurity agency existed. It never started.site 1 2 3
2020LESS.greenLogisticsNon-profit tech start-up for low-emission last-mile delivery in e-commerce (2020–2023), publishing its software on GitHub.site
2020COVID-19 outbreak mapping (never started)COVID-19Proposal (March 2020) to use mobile-network cell data to support COVID-19 contact tracing, geo-targeted SMS alerts to outbreak clusters and quarantine notices, without giving public authorities individual identities or locations. Fabio was the primary author; legal opinions from Stefano Aterno, Carlo Piana, Saetta, Perri, Simbula, Monte, Gallus, Lisi and Pelino, comments from Gerardo Costabile, Agostini and Dirani. It never started.site 1
2020Lazio COVID app analysisCOVID-19Security audit of the Lazio region's COVID app LAZIOdrCOVID with Giovanni Rocca (29 March 2020), done with Fabio's own tax code: fixed DES key, unlimited SMS checks, a token that opened any patient's reports. The main flaw was fixed within about six hours.site 1
2020ifuriosi.it evidence archiveTransparency researchArchive of evidence (2020) linking the ifuriosi.it site and its Philip Morris advertising to infrastructure shared with Casaleggio Associati.site 1 2
2021OpenPUDOLogisticsOpen-source software for pick-up and drop-off point networks, released by LESS in 2021.site 1 2 3
2022Monitora PAPublic-sector privacyCivic-hacking project (2022) that measured Italian public websites and pushed thousands of administrations to remove Google Analytics.site
2022LIUC 2022 — pick-up pointsLogisticsLecture on pick-up points at LIUC University's conference with SOS LOGistica (29 September 2022).site 1 2 3
2023biohack.itBiohackingOpen infrastructure for structured human self-experimentation: protocols, standard-coded biomarkers and shared outcomes (AGPL-3.0, non-profit, since 2023).site
2026mxmap.itDigital sovereigntyMap of which providers handle the email of Italian public administrations, and an observatory on digital sovereignty (2026).site
2026Latina airport campaignCivicCivic campaign for Latina airport as the third airport of Lazio (2026).
06

Talks, press & writing

Every verified source found so far, from 1998 to today: filter, search, open the original or its archived copy.

07

Books — citations & contributions

Books that interview, quote, credit or cite him, and what each one actually says.

YearBookHow he appearsAuthors / publisherWhat it saysSources
2001LDR: Linux Domande e Risposte 3.0contributorGaetano PaolonePLUTO / ILDP (Italian Linux Documentation Project), libro elettronico liberoFree Italian GNU/Linux FAQ book: answer 2.1.2 (how to monitor the system's daily traffic), an ipchains script that accounts HTTP, IMAP, POP3 and SMTP traffic, is credited to Fabio Pietrosanti in the contributors' index.1
2007Profilo hacker. La scienza del criminal profiling applicata al mondo dell'hacking (ed. inglese: Profiling Hackers: The Science of Criminal Profiling as Applied to the World of Hacking)acknowledgedRaoul Chiesa, Stefania Ducci, Silvio CiappiApogeo (2007); ed. inglese CRC Press / Auerbach (2008-2009)The Hacker's Profiling Project (UNICRI) book thanks Fabio "Naif" Pietrosanti in its acknowledgements, among the Italian hacking and security people who helped the research; he is not known to be discussed beyond that.1 2 3
2009Il software libero in ItaliacontributorAndrea Glorioso (a cura di)Shake Edizioni (collana Cyberpunkline)CC-licensed collective volume: chapter 12, "Il FLOSS nella sicurezza informatica", is his. He argues that open-source software is more secure than closed (hidden backdoors, peer review, exposure windows, his own BIND bug of 2000 fixed within a day), covers open cryptography, e-passports and e-voting, and ends with a map of the Italian scene (s0ftpj, Antifork, Blackhats.it, Metro Olografix, Sikurezza.org, Winston Smith…).1 2
2012This Machine Kills Secrets: How WikiLeakers, Cypherpunks, and Hacktivists Aim to Free the World's InformationinterviewedAndy GreenbergDutton (Penguin), New YorkIn the chapter on WikiLeaks' successors, Greenberg presents Pietrosanti and Arturo Filastò as the cofounders of GlobaLeaks, which aims to be the BitTorrent to WikiLeaks' Napster; he describes him as a thirty-year-old security engineer and reports his goal of growing from some fifty WikiLeaks copycats to hundreds or thousands of "leak nodes".1 2 3
2013Destini Hacker - Attacco al sistemaacknowledgedLele Rozza, Alessio PennasilicoBlonkEbook novel on information security: his name is in the acknowledgements, between Igor Falcomatà and Yvette Agostini, in both the Italian and the English edition (The hackers' destiny). Ebook only, no printed page number.1
2016Polityka 2016 (volume annuale rilegato)mentionedPolityka (redazione)Wydawnictwo Prasowe PolitykaBound annual volume of the Polish weekly, not a book proper: an article explains that GlobaLeaks was built by Italian hackers Fabio Pietrosanti and Arturo Filastò for the Hermes Center and is used by European watchdogs, anti-corruption groups and media.1
2017La Guida HERMES al Voto DigitaleacknowledgedWinston Smith (Emmanuele Somma); prefazione di Marco Calamari, postfazione di Chelsea ManningInfomedia Editori / HERMES Center for Transparency and Digital Human RightsCritical guide to electronic voting published by the Hermes Center (CC BY-NC-SA licence): the first name on the acknowledgements page is Fabio "naif" Pietrosanti (Hermes Center).1 2
2018Smarter Crowdsourcing for Anti-Corruption: A handbook of innovative legal, technical, and policy proposals (ed. spagnola: Manual de propuestas legales, técnicas y de políticas innovadoras)quotedBeth Simone Noveck, Kaitlin Koga, Rafael Aceves Garcia, Hannah Deleanu, Dinorah Cantú-PedrazaInter-American Development Bank / GovLabGovLab/IDB handbook for Mexico: Pietrosanti, president and co-founder of the Hermes Center that built GlobaLeaks, is on the list of the process's experts (whistleblowing) and is quoted on two points: in a vertical sector you only want relevant reports, and routing reports to multiple actors (an NGO and a public office) builds trust and accountability.1 2
2019L'esecuzione. 5 Stelle da movimento a governomentionedJacopo IacoboniLaterzaDiscussing the Rousseau platform, after Stefano Zanero's verdict, he lists the critical IT experts: Matteo Flora, Fabrizio Carimati, Stefano Fratepietro, Fabio Pietrosanti, Andrea Stroppa and Paolo Attivissimo, noting that experts saying otherwise are extremely rare. Print page number unknown.1
2020ANNO 2020 I PARTITI PRIMA PARTEquotedAntonio GiangrandeautopubblicatoSelf-published press-clipping compilation, not an original essay: it reprints an article on Open Rousseau in which Pietrosanti explains the project's technical design, based on Decidim, the platform already used in Barcelona.1
2020Applying Internet Laws and Regulations to Educational TechnologycitedBruce L. MannIGI GlobalCites Pietrosanti and Aterno's 2017 Boing Boing article on Italy's proposal to regulate government trojans and takes up its principles, such as safe removal of the trojan after an investigation and traceability of its use.1
2020Coding Democracy: How Hackers Are Disrupting Power, Surveillance, and AuthoritarianismmentionedMaureen WebbMIT PressNames him among the Hermes Center founders (p. 115, with Matteo Flora and others; again on p. 120, missing from the index). On pp. 220-222, in the section on Maddish (Maddalena Falzoni of the Barcelona collective Xnet), she tells how Maddish found GlobaLeaks the easiest tool and worked closely with him and his colleague Giovanni.1
2020Digital Whistleblowing Platforms in Journalism: Encrypting LeaksacknowledgedPhilip Di SalvoPalgrave Macmillan (Springer Nature)In the acknowledgements Di Salvo names Fabio 'Naif' Pietrosanti and the Hermes Center as crucial to the research; on p. 73 he names him (with Filastò) as a main GlobaLeaks coder, and chapter 5 uses his Nexa Center slides as a source, with data cross-checked with a Hermes member.1 2
2020Shooting the Messenger: Criminalising JournalisminterviewedAndrew FowlerRoutledgeFowler met him in a square in Rome: he presents him as the man who conceived GlobaLeaks, built to overcome WikiLeaks' limits (centralised, mostly English-only) and the weak security of other systems, and notes that in 2010 he could not have known how vital anti-surveillance would become for journalists.1
2020The Ethics of Cybersecurity (cap. 10: Cybersecurity and the State)citedMarkus Christen, Bert Gordijn, Michele Loi (a cura di); cap. 10 di Eva SchlehahnSpringer (open access)The chapter on the state as a potential cyber-attacker cites Pietrosanti and Aterno's 2017 Boing Boing piece on Italy's proposed law to regulate government hacking, as an example of EU states allowing intrusive surveillance technologies.1 2
2021Once a Bitcoin Miner: Scandal and Turmoil in the Cryptocurrency Wild WestmentionedEthan LouECW PressIn the account of the 2019 Pyongyang blockchain and cryptocurrency conference he lists him among the attendees as an Italian information-security specialist, alongside Virgil Griffith.1
2021Research Anthology on Business Aspects of CybersecuritycitedInformation Resources Management Association (a cura di)IGI GlobalAnthology that (probably reprinting Bruce Mann's chapter) cites Pietrosanti and Aterno 2017 on regulating government trojans: safe removal after the investigation and traceability.1
2022ANNO 2022 L'ACCOGLIENZA OTTAVA PARTEquotedAntonio GiangrandeautopubblicatoSelf-published press-clipping compilation, not an original essay: it reprints Il Riformista pieces (Nicola Biondo, February 2022) in which Pietrosanti, Hermes Center activist, warns about Kaspersky antivirus in Italian public bodies.1
2024Digital Media and Grassroots Anti-Corruption (cap. 7: Digital whistleblowing platforms for anti-corruption: The Transparency International Italia case)mentionedAlice Mattoni (a cura di); cap. 7 di Philip Di SalvoEdward Elgar (open access)The chapter on the Transparency International Italia case recalls that GlobaLeaks was started by Italians Arturo Filastò, Claudio Agosti, Fabio Pietrosanti, Giovanni Pellerano and Michele Orrù and presented at End Summer Camp 2011.1
2024Intelligenza artificiale, blockchain e criptovalutequotedMassimiliano Nicotra, Fulvio Sarzana di S. IppolitoWolters Kluwer ItaliaQuotes him, as president and co-founder of the Hermes Center, on the frontiers of behavioural user profiling made possible by artificial intelligence.1
2025Modern Internet Regulations and Laws in Educational TechnologycitedBruce L. MannIGI GlobalNew edition of Mann's work: it again cites Pietrosanti and Aterno 2017 (Boing Boing) on regulating government trojans, in the text and in several chapter bibliographies.1
2025Political Automation: An Introduction to AI in Government and Its Impact on CitizensprofileEduardo AlbrechtOxford University PressAppendix I ("Further Reading by Scholars", pp. 212-256), a set of expert profiles, includes one on him (p. 227, "Fabio Pietrosanti - Hermes Center"): from early hacking to entrepreneurship, in cybersecurity since 2000, co-founder of the Hermes Center. He is not among the book's interviewees.1

Pages and wording come from the archived copies or the publisher's search-inside; where the page is unknown it is left blank. Books not searchable online are still being checked on paper.

08

From the archive

Title slides of his own talks, 2002–2010 — the full decks are in the archive.

09

Communities

Where most of the work actually happens.

Hermes Center & GlobaLeaks

Co-founder and president since 2010. EDRi member since 2018.

Italian hacker community

Since 1995: s0ftpj/BFi, Sikurezza.org, Italian Black Hats, Hackmeeting, End Summer Camp, the Italian Hacker Camp and the Italian Hacker Embassy at CCCamp, HAR, OHM, SHA and the Chaos Communication Congress.

Tor Project

A regular of the Tor community: Tor exit-relay and Tor2web node operator, participant in the international Tor developers' meetings, contributor of tickets and proposals — two of them shipped in Tor 0.2.6 and 0.3.0.

Progetto Winston Smith & e-privacy

Speaker, moderator and Big Brother Awards presenter at e-privacy since 2005.

Transparency International Italy

Member 2014–2021, bridge with Hermes on whistleblowing.

Copernicani

Member: working group on online voting (2019), dialogues on facial recognition (2020) and privacy coins (2023).

10

Past sites

Earlier personal pages, rebuilt from the Web Archive.

Also

Blood and plasma donor with AVIS — four times a year

Four donations a year, every year. Of everything on this page, this is the one thing anyone can do, and the one with the most certain effect: an hour of your time, someone else's life. If you are in Italy, find your local AVIS and book a donation — plasma too, it is always short.

Find your AVIS →
11

Contact

Advisory, board seats, partnerships, press and speaking: welcome.

Write on LinkedIn — that is the fastest way to reach him.

Code, data and the sources behind this page are on GitHub.

For press and speaking: the archive above has every talk and interview, with contacts of the organisers.

WeChat QR code
WeChatfpietrosanti

Scan the code or add the handle on WeChat.