ROOTCON 16
Theme: (Hard Wire)

September 28, 29 & 30 2022
Taal Vista Hotel, Tagaytay City

Media direct downloads || YouTube Videos

A new secret stash for fileless malware
by: Denis Legezo
Download Slide | Watch Video

Today, attacks using fileless malware have become more complex and the actors behind them have created new advanced means of implementing them. In 2022, Kaspersky discovered the new methods used to keep the code hidden from prying eyes. For the first time, we’ve discovered that Windows’ event logs participate in the infection chain. This is concerning, as the event logging exist in any installation of the most widely used operating system on the globe.

These informational messages might keep the additional binary data. The dropper saves the shellcode into the Key Management System’s (KMS) event sources information, assigning a specific category ID and incremented message IDs. Auxiliary malicious modules can then gather 8KB pieces from logs, turn these into a complete shellcode and run them.

Nevertheless, the actor’s interest in the event logs isn’t limited to just keeping the shellcodes. To hide the infection process, Go droppers also patch the ntdll.dll Windows API functions related to logging (like EtwEventWriteFull, etc.).

In our presentation, we will share the results of our in-depth research into the infection chain, containing:
- commercial pentesting frameworks
- a number of anti-detection decryptor-launchers, written in different languages
- last stage fully-fledged trojans for C2 communications and lateral movement


Alternative ways to detect mimikatz
by: Balazs Bucsay / @xoreipeip
Download Slide | Watch Video

mimikatz is detected by AVs and EDRs in different ways, mostly based on signatures and behavior analysis. These techniques are well known, but we looked into a few other things to find more exotic ways. Turns our that mimikatz by default talking to USB devices, so I created an emulated device as a user-mode driver for Windows, which is capable to detect most mimikatz variants out-of-the-box. Other technique was implemented and will be part of the presentation, where the console communication is "sniffed", but this technique can be applied to other malware as well. Both techniques will be published and code will be opensourced after the con.


AWSGoat : A Damn Vulnerable AWS Infrastructure
by: Jeswin Mathai, Shantanu Kale, and Sanjeev Mahunta
Download Slide | Watch Video

Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since cloud is relatively new, many developers are not fully aware of the threatscape and they end up deploying a vulnerable cloud infrastructure. When it comes to web application pentesting on traditional infrastructure, deliberately vulnerable applications such as DVWA and bWAPP have helped the infosec community in understanding the popular web attack vectors. However, at this point in time, we do not have a similar framework for the cloud environment.

In this talk, we will be presenting AWSGoat, a vulnerable by-design infrastructure on AWS featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfiguration based on services such as IAM, S3, API Gateway, Lambda, EC2, and ECS. AWSGoat mimics real-world infrastructure but with added vulnerabilities. The idea behind AWSGoat is to provide security enthusiasts and pen-testers with an easy-to-deploy/destroy vulnerable infrastructure where they can learn how to enumerate cloud applications, identify vulnerabilities, and chain various attacks to compromise the AWS account.


Building defensive playbooks from others misfortune
by: Chester Wisniewski
Download Slide | Watch Video

Building defensive strategies is difficult at the best of times and too often is confused by what we read in the headlines, instead of from real hands-on experience. The problem with getting the experience is that you must be victimized to gain the experience necessary to craft your defensive plans. We must learn from others to gain the experience we need before it happens to us.

Sadly, most victims don't share their stories as they are often embarrassing or show some level of negligence in keeping their data secured. This talk will condense the experience of those victims into actionable advice for defenders to use in creating their own up-to-date defensive strategies. Using the data from 144 distinct attacks in 2021, I will demonstrate the most common tools, tactics, and procedures (TTPs) used to gain access to networks and the behaviours to watch for that indicate compromise. This information was gathered by the Sophos Rapid Response team, a group of incident responders who are called in to assist victims during attacks worldwide.


China’s Cyber Capabilities: Espionage, Warfare, and Implications
by: Aaron Aubrey Ng
Download Slide | Watch Video

Over the past decade, there has been an alarming rise in the frequency and sophistication of China’s state-sponsored and state-affiliated cyberespionage activity, as well as its scope of targeting. China-Nexus Adversaries have deliberately and aggressively pursued targets across a spectrum of industries, including technology, defense, energy, healthcare, education, and other key sectors in pursuit of trade secrets and of sensitive information.

Of note, in early 2021, the China-Nexus Adversaries rapidly and effectively exploited a series of vulnerabilities in Microsoft Exchange — now collectively known as ProxyLogon and ProxyShell — to compromise email servers and consequently the sensitive information of tens of thousands of organizations around the world. Over the duration of the pandemic, Chinese cyberespionage campaigns continue to target hospitals and research institutions for data that could confer competitive advantages in science and technology, and at the same time, demonstrating emphasis on COVID-19 related research.

Coupling these recent prolific intrusions with the longstanding campaign of targeting a wide swarth of industries, including insurance, travel & hospitality, government, for the purpose of acquiring sensitive personnel data, the threat that China-Nexus Adversaries pose to organizations today cannot be understated.

This session will provide insight into China’s intent and capabilities for cyberespionage and importantly what organizations can do to address this challenge effectively.


DDexec
by: Carlos Polop (@carlospolopm) and Yago Gutiérrez
Download Slide | Watch Video

Running binaries in memory from a reverse shell on the target machine is very common in Windows environments, there are dozens of different ways to achieve this and many of them very simple. However, in Linux environments it is not so common, nor so easy to load things into memory from a simple bash session, for example.

In this talk we will present and show a novel technique for loading binaries and shellcodes into memory from a linux session without the need to touch the disk, allowing not only to be potentially more stealthy, but also to bypass measures such as mounting the filesystem protected with read only and/or noexec.


Gazing into the Crystal Ball - The Fog of Cyberwarfare Escalations
by: Harshit Agrawal (@harshitnic)
Download Slide | Watch Video

Every new technology presents the possibility of new weapons, and for every new weapon, there’s a soldier hoping it will yield the ultimate advantage, although few ever do. The nature of war is never gonna change. But the character of war is changing before our eyes–with the introduction of a lot of technology, a lot of societal changes with urbanization, and a wide variety of other factors. In order to have a robust discussion about how emerging technologies may affect the proliferation of modern cyberwar, it is vital to understand these technologies. In this session, ISR techniques (intelligence, surveillance, reconnaissance), and counter-drone security serve as productive examples of technologies that we have witnessed in recent conflicts playing the role of a potential tool of exploit and will be greatly escalated in the future as well. This session provides the background and context required to assess potential challenges to this emerging cyber threat. As will be demonstrated with case studies, advancements in these areas are especially relevant because they have made it increasingly easy for Infosys to leverage these technologies to achieve its objectives and threaten the global IT/ICS ecosystem.


How Did I Get Here? I still don’t know what I’m doing: Getting into The Lifelong Adventure of Learning Cybersecurity & Incident Response
by: James Kainth (@j3st3rjames)
Download Slide | Watch Video

Where will your journey take you? My adventures have taken me from feeling confident about knowing what is normal for our computers or in our networks, to never feeling that way again and daring to innovate. Incident Response is an ever-growing field, with not enough people who can do the work. Heck, most jobs that require some form of cybersecurity are suffering from lack of support. The skills gap is REAL! If you want to learn and stay up to date with the ever-expanding world of cybersecurity, then this talk is for you. In digital forensics/incident response (DF/IR) you can peek behind the scenes of technology and learn about an entire world you never even knew was there! Think you’ve cleaned up after your ultimate hack? Think again! By starting your adventure into DF/IR you get to sleuth and learn about the artifacts attackers leave behind! Join me on this journey of self-improvement as we discover the potential cyber detectives we know we can be! Learn what the necessary skills are to get into DF/IR with James Kainth who works on a Fortune 50 Incident Response Team! Develop an action plan to get started on your journey learning DF/IR Today! While attending this session, folks will:

* Learn about the field of digital forensics & incident response
* Learn about ways to stay up to date in the cybersecurity industry
* Learn skills to tackle the imposter syndrome that comes along with being in any technical field
* Realize that Imposter syndrome can be a productive feeling if managed well
* Learn about free/open-source resources like Wazuh, ZimmermanTools, Autopsy, FTK Imager, Elastic Stack, Wireshark, and more!
* Generate an action plan and outline next steps to continue learning DF/IR
* Don’t delay … Start threat hunting today!


Human-Controlled Fuzzing With AFL
by: Maxim Grishin / Igor Korkin (@IgorKorkin)
Download Slide | Watch Video

Early detection of new bugs is crucial for all modern software products. Fuzzing techniques are applied to reveal different types of bugs and vulnerabilities. American Fuzzy Lop (AFL) is a free most popular software fuzzer used by many other fuzzing frameworks. However, AFL has some disadvantages, the key one is that AFL verifies the program code without human intervention. However, involved security expert can make the fuzzing process more focused. On the one hand, AFL simplifies applying fuzzing systems, but, on the other hand, the flexibility of AFL is limited. Fuzzing is based on sending generated data as input to the target application and recording how the instrumented app processes this data. Using the output of the instrumented app, AFL can regenerate new input data to go deep inside the application into the next step.

As a result of such an autonomous mode of operation, a fuzzer spends a lot of time analyzing minor code sections. To solve this question, the paper proposes a new approach that can fuzz only the specified functions. As a result, the chosen ones will be inspected more meticulously by a fuzzer, without wasting the time on inspecting minor code sections. Another new feature is to provide feedback about the inspected functions and controls, so that an expert can change which code functions need work in runtime. The developed module has been integrated with AFL and successfully responds to this challenge. This expert-controlled fuzzing with AFL shows positive test results.


Microsoft Defender Will Be Defended: MemoryRanger Prevents Blinding Windows AV
by: Igor Korkin (@IgorKorkin) and Denis Pogonin
Download Slide | Watch Video

Windows OS is facing a huge rise in kernel attacks. An overview of popular techniques that result in loading kernel drivers will be presented. One of the key targets of modern threats is disabling and blinding Microsoft Defender, a default Windows AV. The analysis of various attackers’ techniques that can disable and blind Microsoft Defender will be given. One of the recently published attackers’ techniques abuses Mandatory Integrity Control (MIC) and Security Reference Monitor (SRM) by modifying Integrity Level and Privileges for the Defender application via syscalls. However, this user-mode attack can be blocked via the Windows “trust labels” mechanism.

The presented research discovers the internals of MIC and SRM, including the analysis of Microsoft Defender during malware detection. We show how attackers can achieve the same result using a kernel-mode driver. The driver modifies the fields of the Token structure allocated for the Microsoft Defender application. The experiments prove that Microsoft Defender is disabled without triggering any Windows security features, such as PatchGuard. The customized MemoryRanger was used to protect the Windows Defender kernel structures. The experiments show that MemoryRanger successfully restricts access to kernel data from illegal access attempts with affordable performance degradation.


Pwnppeteer - Phishing Post {Exploi/Automa}tion at Scale
by: Joffrey Czarny aka Sn0rkY
Download Slide | Watch Video

Phishing is well know attack but more and more company have implemented countermeasure to limit the efficiency of this kind of attack. For example, Multi-Factor Authentication (MFA) is being adopted to make password spraying and standard phishing ineffective. Countermeasures adopted raise the exploitation bar, for attacker.

But what happens if you can easily tamper MFA too? If you can proxy all traffic, directly steal sessions and automate malicious actions before the credentials are changed or the attack detected? What do you think if you phish an SSO portal and then you're able to instrument all applications granted with a SSO token...

The goal is to share my experience of a massive phishing campaign, how you can use Muraena/Necrobrowser at scale and show how we can phish and get a temporary access to steal enough data or add some persistents access in order to come back later. And of course before being detected and losing access.

Mureana/Necrobrowser tool and concept have been already presented in several conferences but what I plan to present here is Pwnppeteer - Necrobrowser Lambda implementation https://github.com/muraenateam/pwnppeteer. The focus will be done on targeting SSO portal and how this attack can be efficient.


Security Like the 80's : How I stole your RF
by: Ayyappan Rajesh
Download Slide | Watch Video

The issue about convenience vs. security has been spoken about for years now, with most devices having wireless capability now, it invites trouble, especially when it is not encrypted or secured. Right from our tap-to-pay cards to even unlocking and starting out car.

This talk discusses CVE-2022-27254 and the story of how we came about discovering it. The CVE exploits an issues wherein the remote keyless system on various Honda vehicles, allowing an attacker to access the cars, and potentially even let them drive away with it!


Signs, Signs, Everywhere There are Signs of a Ransomware Intrusion
by: Allan Liska
Download Slide | Watch Video

Threat hunting is great way for organizations with even a limited security budget to look for indications that a ransomware actor is in your network. However, there is an assumption that threat hunting is challenging and requires a large, well-funded security team to carry out. That is not always the case. There are some low-cost things organizations can do to conduct effective threat hunting missions in your network. This presentation will review some effective, relatively easy threat hunting missions that defenders can carry out to look for signs of a ransomware actor. Some of these include:
1. Alerting when security tools are disabled
2. Looking for remote desktop tools
3. Hunting through PowerShell logs
4. Traffic to mega.nz or one of its other domains
5. Looking for common file copy tools.


Streamline security with shift left: A cloud approach
by: Avinash Jain
Download Slide | Watch Video

In the agile world, continuous iteration of development and testing happens throughout the software development lifecycle involving constant collaboration with stakeholders and continuous improvement and iteration at every stage, engineers release their changes very frequently. All this makes the chances of potential security loopholes more and more real.

According to the most recent Secure Code Warrior report, more than 50% of organizations are still following reactive security practices, such as using tools on deployed applications and manually reviewing code for vulnerabilities. Even the DORA 2021 Accelerate State of DevOps report suggests that security can no longer be an afterthought. Top performers who have implemented security practices earlier in the software development life cycle are likely to exceed their reliability targets by 2x.

Companies often have the high-quality security scanning and detection signal for application security issues only once the app is running in production, but increasingly need to understand issues when the code is written so that they can have a scalable pipeline for identifying and preventing attacks early before they get into production and also when it is less expensive to fix them in terms of overall efforts and cost. Attacks like Solarigate (Zod) demonstrate how security hardening later in supply chain is shifting attacks earlier. This trend of moving towards prevention by including security from the early stages of SDLC with a proactive mindset is known as “Shift Left” and securing the development environment with DevSecOps controls. Here I seek to build the right framework to get a much-earlier security scanning and detections built within the CICD pipeline in a scalable way to productize testing, monitoring, and response to support security drift detection.

By integrating security in CICD, one can deliver secure and compliant application changes rapidly while running operations consistently with automation. In order to do this well, the most logical place security can be checked are code reviews. But now the series of questions raised -

How can it be achieved?

How can we make sure every release that goes to production has proper security sign-off?

How can we scan and test every piece of code that is changed from not just DAST or SAST point of view but also including wide custom and flexible security test cases?

Here we will talk about building such a solution and framework to integrate security in CICD and automating the complete process for continuous scanning of different kinds of potential security issues on every code change in Azure Pipeline.

Some of the improvements it brings -

Wide Variety of Security checks — Integration of standard and custom checks

Early Checks — Now security checks are performed as soon as any PR is raised or code is modified

Highly Flexible —The security checks are very modular. We can add more checks as we want and configure them to perform response-based action

Completely Automated — Automation is the key/let the machines do the work

Alerting - Integration of alerts for check success or failure

Reporting - Scan reports are shared across different communication channels

Framework as code - Any company having their CICD over Azure can use this framework by just running in-house built cloud formation template

Vulnerability Management - All the vulnerabilities and findings are logged in a single place - Azure Security Center


The Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack
by: Yehuda Galb
Download Slide | Watch Video

Security teams nowadays are struggling to contain the risk of software supply chain attacks on their organizations, implementing control of that sort varies from internal controls hardening CI services /hardening developer workstations to demanding compliance to standards from vendors\contactors.

However, one of the places security teams having harder time is in the field of open-source software.

The use of third-party software components is part of the modern software development culture with over 90% of engineering teams worldwide building and shipping software that uses external code. While facilitating extreme agility, it also increases the attack surface of organizations as seen in the spike of recent major incidents .

It’s known in cybersecurity that you must understand the threat you are facing with. In this session, we will do an overview of the software supply chain flow and deep dive into each one’s weak spots.

We will also demonstrate the ease of conducting this sort of attack and our point of view as a defenders.


Uncovering 0-days in Healthcare Management Applications
by: Aden Yap Chuen Zhen, Sheikh Rizan and Muhammad Ali Akbar
Download Slide | Watch Video

OpenEMR is the most popular open-source medical practice management, electronic medical records, prescription writing and medical billing application used by Healthcare Professionals. Security researchers from Project Insecurity and SonarSource had reported numerous vulnerabilities in OpenEMR application prior to 2021.

However, BAE Systems Vulnerability Research team took up the challenge to uncover more vulnerabilities in the same application. To our surprise, we still found a huge number of high impact vulnerabilities inside the application recently. These vulnerabilities could potentially expose medical records and other sensitive patient data, to tampering of the billing information and administrator functionalities by unauthorized personnel. The security flaws were discovered by combining both manual source code analysis and white box testing.

In this talk we will share our experiences of uncovering over 60 vulnerabilities resulting in 8 public CVEs. We will share the key findings (subject to pending patch rollout) and challenges in hunting for OpenEMR VDP. It is our hope that this talk will enable other researchers to get involved in Vulnerability Research and help make the Internet a safer place.


Understanding and Re-creating Process Injection Techniques through Nimjector
by: Ariz Soriano / ar33zy
Download Slide | Watch Video

Process injection is one of the prominent techniques used by threat actors to execute malicious code and gain access inside the target’s system. It mostly aids in stealth and evasion to avoid common security defenses such as endpoint detection & response (EDRs) and antivirus (AV) softwares.

From a red teamer's perspective, being knowledgeable with different process injection techniques can be handy when crafting payloads that evade such defenses. On the other hand, blue teamers would understand better how a payload interacts and establishes a foothold inside a compromised machine. When either teams are unacquainted with this technique, they could have a hard time producing a working payload or improving the defenses of an organization by detecting indicators of compromise (IOCs).

Nimjector is a payload creation framework written in Nim which enables Penetration Testers and Red Team Operators to easily re-create or simulate process injection techniques based on a template. This tool also allows Security Operations Center (SOC) Analysts or Incident Responders (IRs) to understand and learn how different process injection techniques run and execute.

Inspired by existing repositories crafted with Nim such as OffensiveNim, Nimcrypt2, and NimHollow, this new tool was created to help both teams understand and learn more about Process Injection. It aims to open a collaboration between template creation from malware samples used by threat actors and using these to feed or tune security tools as well to detect such a technique.


Wild IoT Tales: from power grids to oil pipelines
by: Barak Sternberg
Download Slide | Watch Video

In this talk, we will analyze 3 of the wildest IoT attack stories happened last year - who was targeted? What Malware was used? What was the impact? First, We will dive & explore the recent attack over Ukranian power grids and show how it (almost) caused blackout for over 2 million people in Ukraine! We will further technically analyze "Industroyer2", the unique malware used in this attack, its unique ways of operation & cool techniques. Afterwards, We will describe the Conti-ransomware attack over Public Health Systems in Ireland (HSE) & see for how long attackers stayed hidden in their IT networks! Finally, we will shortly describe the Colonial Oil Pipelines Attack in US, the damage was done & how the FBI got involved in all that!? we will explore some of the unique technical techniques, attack vectors and lateral movement involved! This systematic review conclude the wild IoT attacks of the year, and will be based on multiple both-technical & public-reports!

Speakers

Aaron Aubrey Ng

Aaron Aubrey Ng serves as Strategic Threat Advisor at Crowdstrike. He is responsible for CrowdStrike’s Threat Intelligence business across Asia-Pacific and the Middle East & North Africa regions. Aaron focuses on helping customers operationalise and integrate threat intelligence within their organisation's cybersecurity strategy. Additionally, he represents the Crowdstrike Intelligence ecosystem and frequently speaks at Security Conferences, sharing insights into the latest threat trends and developments.

Aaron got his start in Security and Threat Intelligence in the Singapore Armed Forces as a Military Intelligence Officer. He concluded 12 years of Active Duty in 2019 and has served in multiple Command Appointments in classified Intelligence Units, and garnered staff experience in the areas of Strategic Planning and Policy Development. In his penultimate tour of duty, Aaron was instrumental in establishing the Defence Cyber Organisation (DCO), which is akin to Singapore’s Cyber Command.

ROOTCON 17 Archives

January 1, 0001

ROOTCON 17

---

ROOTCON 17
Theme: (Surveillance, Technology and Privacy)

September 27, 28, 29, 2023
Taal Vista Hotel, Tagaytay City

Presentation Decks

---

Main Tracks Presentation Decks (TAR)
Village Tracks Presentation Decks (TAR)

Recorded Videos

---

Main Tracks Videos (YouTube RC17 Main Tracks)
Village Tracks Videos (YouTube RC17 Village Tracks)

Speaker Profiles

---

RC17 Speakers Profile (PDF)

ROOTCON 18 Archives

January 1, 0001

ROOTCON 18

---

ROOTCON 18
Theme: Interconnected Realities

September 25, 26, 27, 2024
Taal Vista Hotel, Tagaytay City

Presentation Decks

---

Main Tracks Presentation Decks (TAR)
Village Tracks Presentation Decks (TAR)

Recorded Videos

---

Main Tracks Videos (YouTube RC18 Main Tracks)
Village Tracks Videos (YouTube RC18 Village Tracks)

Speaker Profiles

---

RC18 Speakers Profile (PDF)

ROOTCON 19 Archives

January 1, 0001

ROOTCON 19

---

ROOTCON 19
(Augmented Threats)

September 24, 25 & 26, 2025
Royce Hotel & Casino, Clark, Pampanga

Presentation Decks

---

Official Tracks Presentation Decks
TRACK 01 - (TAR)
TRACK 04 - (TAR)

Village Tracks Presentation Decks (Check back later)

Recorded Videos

---

ROOTCON 19 YouTube Playlist (YouTube)

Speaker Profiles

---

RC19 Speakers Profile (PDF)

Contest Winners

---

Capture The Flag: Viettel CyberSecurity
WiFinders (New): Shinigami.ph War Drivers
Hacker Karaoke (New): Chrysvel Chiong
Hacker Jeopardy: Balls Deep

ROOTCON 2 Archives

January 1, 0001

ROOTCON 2

---

ROOTCON 2

April 04, 2009 TOSH, Makati City
Media direct downloads

Talks

Penetration Testing - A Structured Approach by: TheStare
(PDF)
Provide a meaningful perspective regarding penetration testing service.

The Waledac Botnet by: Bandit
(PDF)
Before its eventual take down the Waledac botnet consisted of an estimated 70,000-90,000 computers infected with the "Waledac" computer worm. The botnet itself was capable of sending about 1.5 billion spam messages a day, or about 1% of the total global spam volume.

Unconventional Privilige Escalation by: Tikbalang
(PDF)
Traditional ways are scanning targets for information, finding vulnerability and exploits available. At times MITM attacks, rootkits, keyloggers and the old school Back Orifice are used to elevate privilege.

ROOTCON 3 Archives

January 1, 0001

ROOTCON 3

---

ROOTCON 3

December 12, 2009 BayView Hotel, Manila City
Media direct downloads

Talks

Øwning the K00bface Botnet: by Bandit and Team
(PDF)
Koobface spreads through social networking sites, most prevalently through Facebook. Generally, Koobface relies on social engineering in order to spread. The Koobface message is designed to trick recipients into clicking through to a fraudulent website and either (a) enter their Facebook (or other social networking) credentials or to accept the installation of malware disguised as a video codec or Flash update. .

Hashes N Hi-Res by: wewitsky
(PDF)
Unleashing the GPU beasts via CUDA.

LockPicking: Fingering Locks for Fun by: JollyMongrel (arf arf )
(PDF)
- This presentation is intended to educate and describe the inner workings of common lock mechanisms, methods useful to manipulate locks owned by or under full control of the person taking part of this con, and means to protect themselves from intruders possessing bypass techniques contained herein. The presenter/author makes no claims as to the accuracy of the following information, nor endorses or encourages activities of malevolent intent.

Trusting OpenDNS by: Tikbalang
(PDF)
The Basics of OpenDNS, Pros and Cons.

Wireless Security on the Philippine Setting by: encrypted, aphro and wewitsky
(PDF)
The algorithm WEP uses requires complete synchronization, but data loss is expected in wireless, making it difficult to keep both ends in sync.

ROOTCON 4 Archives

January 1, 0001

ROOTCON 4

---

ROOTCON 4

October 23, 2010 Congo Grill, Ortigas, Pasig City
Media direct downloads

Talks

ROOTCON 101: by semprix and encrypted
(PDF)
Get to know what the folks at ROOTCON has been upto, the mission, the basics and all that cool stuffs.

Your Tweet is my command by: Bandit
(PDF)
Twitter as Botnet C&C.

Øwning your InfoSec Career by: Tikbalang
(PDF)
Who I want to be? The Good The Bad and the Ugly. To be or not to b. Deciding your InfoSec career path.

Hacking and the Philippine E-Commerce Act by: Atty. Al Vitangcol
(PDF)
Know the laws before breaking something, discussing E-Commerce Act of the Philippines.

PGP Key Signing Party Introduction by: r4kista
(PDF)
There are two kinds of cryptography in this world: cryptography that will stop your kid sister from reading your files, and cryptography that will stop major governments from reading your files.

ROOTCON 5 Archives

January 1, 0001

ROOTCON 5

---

ROOTCON 5

September 9-10, 2011 Parklane Hotel, Cebu City
Media direct downloads

Talks

ROOTCON 101: by semprix and encrypted
(PPTX)
Get to know what the folks at ROOTCON has been upto, the mission, the basics and all that cool stuffs.

Keynote: IPv6 Security Foiling The Hackers by: Lawrence Hughes of InfoWeapons
(PPT)
Security offered on IPv6 How to Foil Hackers

Console (In)Security: The Oncoming Storm by: Chris "@PaperGhost" Boyd
(PPTX)
Increasingly, videogame consoles (and their creators) are becoming a primary target for individuals taking part in everything.

Zeus: The God of All... Cyber-Theft by: Roland Dela Paz and Jasper Manuel
(PPT)
When Zeus entered the threat arena, it quickly became eminent and has been the crimeware of choice for a wide range of cybercriminals.

Reversing Android Application by: Jonell "Jonez" Baltazar
(PDF)
With the introduction of Google Android driven smartphones, a lot of Android App markets emerged offering free and commercial applications where Google Android Market is unavailable..

Cyber Terrorism: Is the Philippines Ready For It? (Pending Presentation Upload) by: Atty. Al Vitangcol
Osama Bin Laden is dead. However, terrorism is still alive and kicking. As older groups are defeated or exhausted, more radical and more violent successors often take their place. Terrorism continually reinvents itself in new and more dangerous forms – including cyber terrorism.

Cyberwarfare and National Security in the Age of #Anti-Sec by: Sven Herpig
(PPTX)
Knowing CyberWarFare and National Security in the age of AntiSec.

Introducing TDL4, a Sophisticated Fraudster's Rootkit by: Berman Enconado
(PPT)
Stealth—such is the nature of rootkits: those nifty little software that quietly slips inside systems without anyone noticing. They're dubbed as one of the most—if not the most—difficult pieces of programming ingenuity to be seen lurking on technologies that even the most powerful detection applications rarely spot.

Lock Exploitation Techniques by: Jolly Mongrel
(PDF)
This presentation is intended to educate and describe the inner workings of common lock mechanisms, methods useful to manipulate locks owned by or under full control of the person taking part of this con, and means to protect themselves from intruders possessing bypass techniques contained herein.

Sp0tting Web Vulnerability by: SunGazer
(PPTX)
Spotting Web Vulnerabilities and few other stuffs ^_^.

Penetration Testing Web Application by: Whizkah
(PDF)
Pentesters use different approaches in pentesting web applications, some rely heavily on automated scanners, others on checklists and a few more on combined automated and manual testing. This presentation will present an approach on how to conduct web application penetration tests that allows the tester to align the tests and results to the clients goals and expectations.

Evilution Of Telephony by: PCr4ck
(PPTX)
On these presentation it will give you a basic VoIP security, Evilution that emerge on the telephony.

ROOTCON 6 Archives

January 1, 0001

ROOTCON 6

---

ROOTCON 6

September 7-8, 2012 Parklane Hotel, Cebu City
Media direct downloads

Talks

AdverGaming The System: by Chris "PaperGhost" Boyd
(PDF)
In game advertising is becoming more visible (and in some cases, more intrusive) in the world of console, PC and mobile gaming. In many cases, disclosure related to what's happening with your PII is as bad (if not worse) than the poor practices of the Adware industry prior to clean ups brought about by the FTC and the NYAG.

Where is your data going? What are you consenting to when installing that "free" app? Which advertising networks are serving you "relevant" targeted advertising while playing the latest FPS?

From the first in game ad from 1978 to the present day where as many as 40+ EULAs compete for your attention while installing a "free" game, this presentation will look at the history, development and current state of in game advertising and how it affects you.

A Brief View In Prioritizing Website Security + Demo: by N1tr0b
(PDF)
The talk is about the importance of prioritizing website security in different points of views. It provides "you" the audience enough information about the damages of exploitation of a website and how to put an end to it. Also a short security code work for the following attacks:

XSS ( Cross Site Scripting )

LFI / RFI ( Local File Inclusion / Remote File Inclusion )

SQLi (SQL Injection)

CSRF ( Cross Site Request Forgery)

RCE ( Remote Code Exploitation )

Keynote ++ Cyber Espionage - How to sell a country: by Morris Fedeli
(PDF)
Morris Fedeli is a former ACS vice chair and PCS committee co-chair, holding diplomatic status, and a former ASIO recruit working with NBI operatives and Interpol on exposing Cybercrime activities within South East Asia.

A pioneer of public wireless in the Philippines and real time collaborative platforms, he possess degrees in Computer Engineering, Science and Masters in Business/Technology and is the CEO/Director of a number of companies with business interest in China, HK, Australia, Italy and Philippines since 2002.

A humanist, he is an expert witness, magistrate, consultant/advisor and former International cyber bank director who travels up to 30 countries a year sharing his wisdom with others.

With a background in the legal field, he is here today to provide us a business perspective to Cyber Espionage and How to Sell a Country!

Espionage in Cybertopia: A Government's Tale: by Sven "zedian" Herpig
(PDF)
Where once upon a time our coporate assets would be guarded by kevlar embodied and armed security guards, today our vaults are filled with the confidential information about our patents and designs, our secret recipes and technical knowhow as well as personal information about you - our client - what are your likes and dislikes, your favourite foods, movies and amusements, shopping habits, reading materials and recreational habits, right down to your secret desires!

Crypto and PKI - Weapons For Mass Liberation: by Lawrence Hughes
(ZIP)
Crypto is your FRIEND. With even a low end PC you can do crypto that is provably impossible for even NSA to crack, IF you know what you're doing. One of the fundamental tools for living in cyberspace. Like the Colt .45, crypto is a great EQUALIZER. The combination of crypto, PCs and the Internet is one of the things the statists fear the most, and with good reason. Between you and me, the end-to-end nature of IPv6 will make it essentially impossible for the government to monitor or control the flow of information - combined with crypto that's a Weapon of Mass Liberation. A tool that should be in everyone's personal arsenal.

Understanding Sandboxes: by Paul Sabanal
(PDF)
In the last couple of years we have seen how the introduction of sandboxing into some of most used software in the world has changed the software exploitation landscape. Since the release of Adobe Reader X, for example, there has been no publicly released exploit for it. However, most of us are not familiar with how these sandboxes work. Knowing how they work makes us understand their limitations, and makes us aware of what they can and they can't do to protect us.

Mac Binary Analysis: A Sn3ak Peak: by Christopher Daniel So
(PDF)
With the increasing popularity of Mac OS X comes the increase in number of the malware that target the platform. Thus, it is imperative for reverse engineers to have basic knowledge in code analysis for this new platform. In this presentation, techniques of code analysis of Mac binaries for reverse engineers and additional background information will be presented.

Malware 101: by Berman Enconado & Reginald Wong
(PDF)
We already know the impact of malwares in server systems. Understanding what malwares are in the general scope is not enough. We need to know how it looks like and what it really does. This paper aims to give an in-depth analytic perspective on different types of malwares. Most of the discussions here will identify malicious codes and show what those codes do.

SOUL System: by Joshua Lat
(PDF)
The SOUL System is a secure online authentication system which involves a two-factor authentication scheme using a password and an ordinary hardware device as a security to- ken. The three main parts of the system are the website, the ordinary hardware device, and trusted third party. The website must first be integrated with the web API provided and then registered to the trusted third party website to allow two-factor authentication. The security token is any ordinary hardware digital container that contains ordinary files such as BMP and PNG files where the user's data are hidden. Examples of possible containers include a USB flash drive, a laptop, a cellular phone, and even a Dropbox folder. It must be registered to the trusted third party so that it can be used to register and login to SOUL System integrated websites. The trusted third party stores and provides the public keys of both the two-factor login enabled websites and the registered security tokens.

Surviving ROOTCON (ROOTCON 101): by Encrypted84
(PDF)
The presentation will deal on how to survive at ROOTCON as CON-Goers. How ROOTCON was planned, how to contribute, how to be ub3rAw4s()me during the CON.

Encrypted with the Goons participation will also be discussing the on the day mechanics of the activities, such as Hackista Challenge, WiFi Warrior etc...etc....

Taking Down a Botnet - The Story Behind Rove Digital's Takedown: by Ryan Flores
(PDF)
Last November 2011, the FBI has publicly announced the takedown and arrest of a cybercrime gang operating in Estonia. This presentation gives details on how Trend Micro was able to help the FBI in the take down and arrest, while also giving insight on the time span, scale and complexity of an operation of this nature.

Virtualization, A New Risk: by Tikbalang
(PDF)
Virtualization may very well be one of those revolutionary paradigms that could fundamentally change the way we think about and approach computing. Benefits:

Vulnerability assessment of commonly available personal safety boxes in the Philippines: by Jolly Mongrel
(PDF)
Personal safety boxes usually contains sensitive information such as, but not limited to; personal details in government registry forms, bank details, personal letters, memos, diaries, company documents and a lot more. The problem with these boxes stems from fundamental errors that could have been remedied at design conceptualization level. Moreover, lack of quality testing (adversarial pen-testing) and skewed functional priorities resulted in some boxes that could be opened surreptitiously; hence, compromise of its contents and further privilege escalation is possible beyond awareness. This presentation is done for research and consumer awareness purposes only.

ROOTCON 7 Archives

January 1, 0001

ROOTCON 7

---

ROOTCON 7

September 13-14, 2013 Parklane Hotel, Cebu City
Media direct downloads

Presentations

CyberCrime Act of 2012: Issues and Concerns by: Atty. Al Vitangcol III, C|HFI, C|EI
(PPSX)
The revolution in information technologies has changed society fundamentally. It has given rise to unprecedented economic and social changes. With it comes the emergence of new types of crimes.

These new types of crimes, based on new technologies, challenge existing legal concepts. The Convention on Cybercrime of the Council of Europe, known as the Budapest Convention, is the only binding international instrument on the issue of cybercrimes. Its main objective is to pursue a common criminal policy aimed at the protection of society against cybercrime, especially by adopting appropriate legislation and fostering international cooperation. It is a guideline for any country developing comprehensive national legislation against Cybercrime.

Republic Act No. 10175, known as the "Cybercrime Prevention Act of 2012", was signed into law by the President on September 12, 2012. It took effect on October 3, 2012.

The presentation will focus on the provisions of the law and its compliance vis-a-vis the requirements of the Budapest Convention. It will discuss the various offenses punishable under the law. More so, the presentation will likewise touch on the aftermath of the enactment of the law, including various pros and cons on its implementation. Finally, the law's current status shall be presented and suggestions on the way forward shall be made.

Diving to Recon-NG by: Primarch Victus
(PDF)
Recon-ng is a Web Reconnaissance framework written in Python which focuses on Reconnaissance, Discovery, and Reporting which are steps 1, 2 and 4 of the Web Application Penetration Testing Methodology. It is also a Metasploit like framework and that there are separate module branches within the module tree for each methodology step. In this topic we will cover the Recon-ng introduction, framework information and basic usage.

Getting to know SmartTV by: Joey Costoya
(PDF)
Smart TVs are the next evolutionary step of our beloved household appliance, transforming this living room mainstay into yet another Internet-connected computer, albeit with a much better screen. This transformation exposes to the TV to the same attack vectors that has plagued personal computers for years. This presentation will give an overview of the Smart TV technology and its corresponding ecosystems. It will also explore what's under the hood of a popular Smart TV brand, exposing some possible attack entry points.

JAVAlicious: Malicious Java in the wild by: Maersk Chastine Menrige
(PDF)
Java is recognized to be the most popular programming language in the world. It is a portable object-oriented programming language that could be used in any platform. Its syntax is easy and similar to the C programming language. The Java virtual machine (JVM), its code-executing component, enables it to run on any platform. However, JVM is a prime target for cybercriminals because if its flaws. In Q1 2013, several Java vulnerabilities have been disclosed, some of took a while to be patched. Java vulnerabilities are known entry points used by exploit kits, which run on Windows machines. Other malware that used Java vulnerabilities also run on platforms, such as the Flashback malware that spread on Mac operating systems.

In this presentation, we explore the Java programming language and its environment. In our exploration, we review the Java programs used by cybercriminals, and how these programs are used in exploiting the early vulnerabilities in Microsoft Virtual Machine's Java bytecode verifier. We also review the latest methods used in exploiting Java. The review and discussion includes a list of exploit packs known to use Java vulnerabilities in spreading malware. In addition, we demonstrate how to analyze a malicious Java applet from one exploit kit to show its capabilities. To conclude the presentation, we provide recommendations to prevent infections from Java malware.

Mobile Malware Evolution by: Jesmond Chang
(PDF)
It was in June 2004 when Kaspersky Lab first got hold of a sample virus designed for mobile phones.

A few years later and we've witnessed how the number of mobile threats exploded specifically targeting Android OS notably in the year 2012. It was also within that year when the most scandalous mobile espionage events transpired such as the detection of a mobile version of the spyware module FinSpy, developed by the British firm Gamma International as well as the disclosure of technical details of cyber intelligence operations dubbed Red October.

The latest development in mobile malware evolution is happening today where mobile threats have already gone international. What's next?

My Experiments with truth: a different route to bug hunting by: Devesh Bhatt
(PDF)
The Best way to improve the security of your systems is to hire hackers. Unfortunately, companies can't hire all best hackers, so the companies has chosen another best way to improve their system security, "Bug Bounty Program”

Google, Facebook, Mozilla, PayPal, Etsy and many other companies pay a good amount to hackers for responsible disclosure and recently it is being started as a service in the form of “bugcrowd” Security Researchers have submitted bugs ranging from configuration issues to SQL injections.

This topic is not about what is a “Bug Bounty” program, who all is paying what amount and the scope of testing. This paper is basically focused on the approach to finding simple and yet devastating vulnerabilities, earn hefty amounts and share space with the top researchers from around the globe.

Ouroboros by: Chris Boyd & Jovi Umawing
(PDF)
Preemptive strikes against attackers. Mobile Malware on the rise. Government spyware. Printer shenanigans. Cybersecurity lobbying. It sounds like a round-up of the top news stories of the last couple of months - in reality, it's a sample of news stories from 2005 to 2008, when Antispyware companies and security forums clashed over legal battles, death threats, pr spin, Botnet monetisation and more at the height of the old Adware industry's power and ambition.

Was so much time spent firefighting the Adware industry that many of our current security concerns were allowed to develop and grow largely unaddressed? What factors could have encouraged this security groundhog day? Why did the Adware industry's passing encourage a form of "security fatigue" on Infosec blogs? Why did so many security researchers burn out? What might have happened if the old guard of Adware vendors hadn't gone bust or been sued into oblivion? What legacy have the ghosts of those long dead and acquired technologies left behind?

Package Tampering: Injecting jack in the box. by: Jolly Mongrel
(PDF)
Often overlooked for being too common (ubiquitous), boring and dispensable (unsexy), little have we thought that product packages are potential vectors of attack. For a progressive security mind, it can be considered as one of the weakest links in the product supply chain.

Examples of targets are (but, of course, not limited to) personal letters and/or memos, communication equipment, and computer software and/or hardware among others. In bypassing the packages, access to the aforementioned items can lead to gathering of vital information or “trojaning” the software and installation of alien hardware components or replacement thereof in the communication and computer equipment to conduct snooping, remote admin, or other parasitic activities.

This topic aims;

1.) to introduce a new subject on physical security for RootCon
2.) to provide a general view on tampering, giving special attention to package tampering for this presentation
3.) to set the stage for more tampering topics in the future.

Social Network Analysis as Internet Security Tool by: Wilson Chua
(PDF)
Security devices (firewalls, IDS, IPS) produces a huge amount of data by posting each security incident/event into a Syslog database. This (big) data enables the system administrators to identify the source of the largest attacks, and the most frequently victimized/targeted server.

However, due to massive number of records generated by Syslogs, a quicker and more timely analysis is needed. Social Network analysis is presented here as an optimal way to quickly analyze and create actionable insights from this huge amount of data - by converting (big) data into graphics format.

Stealth by Legitimacy by: Jeffrey Bernardino
(PDF)
Nowadays, its commonplace for cybercriminals to create complicated malware. But as part and parcel of any trade, cybercriminals update themselves by continuously uncovering new techniques to improve malware stealth. Misuse of legitimate services is one of probably hundreds of ways to cover cybercrime tracks. Trend Micro has discovered this with BKDR_VERNOT malware. In this presentation, Trend Micro discusses malicious routines of a particular BKDR_VERNOT malware. We also dive deep into the advantages and disadvantages of using legitimate services by malware - how BKDR_VERNOT used legitimate Evernote C&C, and how this technique will influence future attacks.

The VOHO Campaign - an in-depth look by: Christopher Elisan
(PDF)
In July of 2012, we discovered an emerging malicious code and content campaign spreading at a rapid rate within very specific geographic theaters. These clusters were confined to ten geographic areas and involved thousand of hosts. To the untrained eye, this looks like a common “drive-by” attack mechanism but additional analysis and research show it to be otherwise. This presentation sheds light in the new attack, which we termed “Watering Hole.” The talk will cover the deployment method used to spread the malware and the malware’s behavior once it reaches the target system.

Unpackers in a World of Signature-less Malware Detection by: Frederic Villa
(PDF)
Malware authors use packers to keep their software undetectable without changing the code. Malware from other families also use these packers to exploit the limitation of AV software until AV companies started creating unpackers.

Unpackers are created in order to expand their detection coverage. Once an unpacker is created, packing the malware seems to have become a futile task.

As the antimalware industry move towards signature-less detection, one may think that packers will cease serving its purpose. In this talk, we'll discuss how unpackers can still play an important role in malware analysis and the various tools that make unpackers easier to use.

ROOTCON 8 Archives

January 1, 0001

ROOTCON 8

---

ROOTCON 8

September 26-27, 2014 Parklane Hotel, Cebu City
Media direct downloads

Talks

ROOTCON 101: by semprix and encrypted
(PPTX)
Get to know what the folks at ROOTCON has been upto, the mission, the basics and all that cool stuffs.

Keynote: IPv6 Security Foiling The Hackers by: Lawrence Hughes of InfoWeapons
(PPT)
Security offered on IPv6 How to Foil Hackers

Console (In)Security: The Oncoming Storm by: Chris "@PaperGhost" Boyd
(PPTX)
Increasingly, videogame consoles (and their creators) are becoming a primary target for individuals taking part in everything.

Zeus: The God of All... Cyber-Theft by: Roland Dela Paz and Jasper Manuel
(PPT)
When Zeus entered the threat arena, it quickly became eminent and has been the crimeware of choice for a wide range of cybercriminals.

Reversing Android Application by: Jonell "Jonez" Baltazar
(PDF)
With the introduction of Google Android driven smartphones, a lot of Android App markets emerged offering free and commercial applications where Google Android Market is unavailable..

Cyber Terrorism: Is the Philippines Ready For It? (Pending Presentation Upload) by: Atty. Al Vitangcol
Osama Bin Laden is dead. However, terrorism is still alive and kicking. As older groups are defeated or exhausted, more radical and more violent successors often take their place. Terrorism continually reinvents itself in new and more dangerous forms – including cyber terrorism.

Cyberwarfare and National Security in the Age of #Anti-Sec by: Sven Herpig
(PPTX)
Knowing CyberWarFare and National Security in the age of AntiSec.

Introducing TDL4, a Sophisticated Fraudster's Rootkit by: Berman Enconado
(PPT)
Stealth—such is the nature of rootkits: those nifty little software that quietly slips inside systems without anyone noticing. They're dubbed as one of the most—if not the most—difficult pieces of programming ingenuity to be seen lurking on technologies that even the most powerful detection applications rarely spot.

Lock Exploitation Techniques by: Jolly Mongrel
(PDF)
This presentation is intended to educate and describe the inner workings of common lock mechanisms, methods useful to manipulate locks owned by or under full control of the person taking part of this con, and means to protect themselves from intruders possessing bypass techniques contained herein.

Sp0tting Web Vulnerability by: SunGazer
(PPTX)
Spotting Web Vulnerabilities and few other stuffs ^_^.

Penetration Testing Web Application by: Whizkah
(PDF)
Pentesters use different approaches in pentesting web applications, some rely heavily on automated scanners, others on checklists and a few more on combined automated and manual testing. This presentation will present an approach on how to conduct web application penetration tests that allows the tester to align the tests and results to the clients goals and expectations.

Evilution Of Telephony by: PCr4ck
(PPTX)
On these presentation it will give you a basic VoIP security, Evilution that emerge on the telephony.

ROOTCON 9 Archives

January 1, 0001

ROOTCON 9

---

ROOTCON 9

September 18-19, 2015 Taal Vista Hotel, Tagaytay City
Media direct downloads

Talks

How to Shot Web: Better Web Hacking in 2015
by: Jason Haddix
(PDF)
2014 was a year of unprecedented participation in crowdsourced and static bug bounty programs, and 2015 looks like a trendmaker. Join Jason as he explores successful tactics and tools used by himself and the best bug hunters. Practical methodologies, tools, and tips make you better at hacking websites and mobile apps to claim those bounties. Convert edge-case vulnerabilities to practical pwnage even on presumably heavily tested sites. These are tips and tricks that every tester can take home and use. Jason will focus on philosophy, discovery, mapping, tactical fuzzing (XSS, SQLi, LFI, ++), CSRF, web services, and mobile vulnerabilities. In many cases we will explore these attacks down to the parameter, teaching the tester common places to look when searching for certain bugs. In addition he will cover common evasions to filters and as many time saving techniques he can fit in.

ROOTCON®20

January 1, 0001

Safety Waiver

January 1, 0001

General Safety Waiver

---

Agreement and Release of Liability

By participating in ROOTCON Events, you acknowledge and agree to the following terms and conditions. Please read this waiver carefully.

1. Assumption of Risk
I, the undersigned, understand that participating in ROOTCON Events, including but not limited to workshops, villages, contests, and other activities, involves certain risks, hazards, and potential for personal injury or property damage. I willingly assume all risks associated with my participation in the Event, whether foreseen or unforeseen.

2. Release of Liability
In consideration of my participation in ROOTCON Events, I hereby release, waive, and discharge ROOTCON, its organizers, sponsors, volunteers, vendors, and venue from any and all liability, claims, demands, or causes of action that may arise from my participation in the Event, including but not limited to injury, illness, or damage to personal property, whether caused by negligence or otherwise.

3. Medical Treatment
In the event of injury or illness, I authorize ROOTCON staff, volunteers, or medical personnel to administer necessary medical treatment or assistance. I agree to assume all costs of medical care, and I release ROOTCON from any liability resulting from such treatment.

4. Code of Conduct
I agree to abide by the ROOTCON Code of Conduct and understand that violation of the rules may result in my removal from the Event without refund. I acknowledge that the safety and security of all participants are paramount and agree to behave in a responsible and respectful manner at all times.

5. Photographic Release
I understand that ROOTCON may record or photograph the event and its participants for promotional purposes. By participating in ROOTCON Events, I consent to being photographed or filmed and authorize ROOTCON to use such recordings for future promotion, marketing, or documentation without compensation.

6. Indemnification
I agree to indemnify and hold harmless ROOTCON, its staff, sponsors, volunteers, and venue against any claims, damages, losses, or expenses (including legal fees) arising from my actions, negligence, or violations of this waiver during the Event.

7. Governing Law
This waiver and any disputes arising from my participation in ROOTCON shall be governed by the laws of the Philippines.

Updated: Sat May 30 20:28:20 PST 2026
Revisions: 59397869d4f5174764d5dcc409082cdfc92f7480

Sponsors

January 1, 0001

ROOTCON 19 Sponsors

---

Established in 2015, Pentera is the market leader in Automated Security Validation, empowering companies to proactively test all their cybersecurity controls against the latest cyberattacks. Pentera identifies true risk across the entire attack surface, guiding remediation to effectively reduce exposure. The company's security validation capabilities are essential for Continuous Threat Exposure Management (CTEM) operations. Thousands of security professionals around the world trust Pentera to close security gaps before threat actors can exploit them.

www.pentera.io

Terms and Conditions

January 1, 0001

Terms & Conditions

---

Readme

TERMS AND CONDITIONS

1. Introduction
These Website Standard Terms and Conditions written on this webpage shall manage your use of this website. These Terms will be applied fully and affect to your use of this Website. By using this Website, you agreed to accept all terms and conditions written in here. You must not use this Website if you disagree with any of these Website Standard Terms and Conditions.

Minors or people below 18 years old needs to have adult supervision when visting the site.

2. Intellectual Property Rights
Other than the content you own, under these Terms, ROOTCON and/or its licensors own all the intellectual property rights and materials contained in this Website.
You are granted limited license only for purposes of viewing the material contained on this Website.

3. Restrictions

You are specifically restricted from all of the following:

- publishing any Website material in any other media;
- publicly performing and/or showing any Website material;
- using this Website in any way that is or may be damaging to this Website;
- using this Website in any way that impacts user access to this Website;
- using this Website contrary to applicable laws and regulations, or in any way may cause harm to the Website, or to any person or business entity;
- engaging in any data mining, data harvesting, data extracting or any other similar activity in relation to this Website;
- using this Website to engage in any advertising or marketing.

Certain areas of this Website are restricted from being access by you and ROOTCON may further restrict access by you to any areas of this Website, at any time, in absolute discretion. Any user ID and password you may have for this Website are confidential and you must maintain confidentiality as well.

4. Content
In these Website Standard Terms and Conditions, “Your Content” shall mean any audio, video text, images or other material you choose to display on this Website. By displaying Your Content, you grant ROOTCON a non-exclusive, worldwide irrevocable, sub licensable license to use, reproduce, adapt, publish, translate and distribute it in any and all media.

Your Content must be your own and must not be invading any third-party’s rights. ROOTCON reserves the right to remove any of Your Content from this Website at any time without notice.

5. No warranties
This Website is provided “as is,” with all faults, and ROOTCON express no representations or warranties, of any kind related to this Website or the materials contained on this Website. Also, nothing contained on this Website shall be interpreted as advising you.

6. Limitation of liability
In no event shall ROOTCON, nor any of its officers, directors and employees, shall be held liable for anything arising out of or in any way connected with your use of this Website whether such liability is under contract. ROOTCON, including its officers, directors and employees shall not be held liable for any indirect, consequential or special liability arising out of or in any way related to your use of this Website.

7. Indemnification
You hereby indemnify to the fullest extent ROOTCON from and against any and/or all liabilities, costs, demands, causes of action, damages and expenses arising in any way related to your breach of any of the provisions of these Terms.

8. Severability
If any provision of these Terms is found to be invalid under any applicable law, such provisions shall be deleted without affecting the remaining provisions herein.

9. Variation of Terms
ROOTCON is permitted to revise these Terms at any time as it sees fit, and by using this Website you are expected to review these Terms on a regular basis.

10. Assignment
The ROOTCON is allowed to assign, transfer, and subcontract its rights and/or obligations under these Terms without any notification. However, you are not allowed to assign, transfer, or subcontract any of your rights and/or obligations under these Terms.

11. Entire Agreement
These Terms constitute the entire agreement between ROOTCON and you in relation to your use of this Website, and supersede all prior agreements and understandings.

12. Governing Law & Jurisdiction
These Terms will be governed by and interpreted in accordance with the laws of the Philippines, and you submit to the non-exclusive jurisdiction of the courts located in Philippines for the resolution of any disputes.

The Fork Meister

January 1, 0001

semprix

---

The Fork Meister

Key Fingerprint: 98A6 CD93 8512 03FA E8D0 9073 2FE2 DF9C 5600 117C
semprix [at] rootcon dot org

  -----BEGIN PGP PUBLIC KEY BLOCK-----
Comment: 98A6 CD93 8512 03FA E8D0  9073 2FE2 DF9C 5600 117C

xsFNBF3dk8YBEAC4q/U8Jl0f4KrJf+CeEUXHpwhXaGBvReksxT5bXEcPTLiegpWj
JQC/8Z8B7C6yjfdN8KI8BVDnpNNNMOZ2Z7P84TrGl9kkKW3pYSW8Cjq6J5EgA+Yr
69wZd6pYuzYB2zJHSH2hVjdr4L9RjawgbBDyO7L55y3FpSeUxO59EEhwyq8eHiUv
hnLOtjQKB3+ODiSotlmmrJRqxFOoF9+7jgasXbiLNRAGAkaOajLhqXJdFvBn9Q0L
y6s7Pb9eJrDOtrnorIk5HzkK/6rAHPjUZ++WR3F8IVXJpIGxWXbGBskkWP1UUmdd
tGBjFz2dcKUC98H7mcPF8Yc+NnpPQs//OGqHT4oRPGTbN+c/a/dvsjBiGw/zOyxF
WqbbQWA9q2H6bEQbqCYLHsV57zzC8ZN8Yj0pSMfvUpM4rZ9wP/65BbadtA4z1mqh
qRAvEcA+N5TgOeFYyyimZaroc2goeoouzRRZBSeKX+TkmxrCiiMHv3Nj8ffk9xu4
gQFc5R0lJ36SXsIs7/Cq/tbZWbEKMMLzAClzsvk3vKdf9xw+HhsYAWSYhDiltAf4
RWhZOYAVgbSKrE4ESiHfNEwQ5/U2J4FZodV105SRsUbeZ2MUROPSXv9+PgHnwObS
eKHw+hawDjdvRK0ZG+eRMnJAQWKkuHDT5WE8d7laX8uhvqdsI16YKtnR5QARAQAB
zR5EYXggTGFicmFkb3IgPGRheEByb290Y29uLm9yZz7CwYsEEwEKADUCGwMDCwkH
AxUKCAIeAQIXgAMWAgEWIQSYps2ThRID+ujQkHMv4t+cVgARfAUCZv+YVQIZAQAK
CRAv4t+cVgARfMLKD/4oT6sn187AiL1OGxyyMVUHVIUQexMSYoW5zEAkfXLZya2e
DGAsctoDamTO3oVfiqxT3T+g3w0fJ0mjtASOlZeZV/IpNTNkFUM1W5a+H41eCNeH
iBJPMjNAmrjDxTKahUSkpvjyY7LX47ColzsonXS8L4iM6r22EjTbfOKISzfPSsir
pyY+f+VbPUc2sEoRyVYHAitKbDhd5mOO2swAy7ABEiJmHJZkBEYqwVx+Ws92+HgL
T8+lqYiC7LlX0RcXF1LSo102OP6Jvp3g3hnds0Ig0rt+pLS6pcOwmvO+1czZc698
bdWWWpV752EqIBmktQ5BMa3jmqr3Om9m6Ao6nZz3V3q1IoWNM7MSxDsbP7AX1hD/
CkZuw0Vsmpq3JZnP0mMGrSIZrUFqiz2GTpN4c9QTCNN1OTbr4QZAHtqZtdsvXNQK
VtuVUFteqYiHofJshKWOl88fMLWSjEvsPit4iaWzR7u42RSNEWNAmXughauKMgkc
5qEoRTOa6a62rp5IL5bckxIvkYGQUXfQSdm/HKCz+pI4Zw5Yd5sh85L6dilpAIHI
wPMlEBhrqZaBlv4/P+oskI9NAVTf2h2LQNwq5t/acJUZpqmjGR26rpoVxCvKzt/G
dfwOybeLDE/U/SO1CaL/AZwGdmcGkYde3pELhP1bifN7YMLCEIxT1U3Hy6cXv8LB
iwQTAQoANQIbAwMLCQcDFQoIAh4BAheAAxYCARYhBJimzZOFEgP66NCQcy/i35xW
ABF8BQJm/5FoAhkBAAoJEC/i35xWABF8tMMQAKyt6/n/OYBg2WDTcKgdOlywc/HI
SlFiwGIBOTa9YOtXQsjNjaeMkaktcU13Vmj/eLM1W+v6Yfk40bV3NwXu9ApfgZY4
2jmYaBWVeEGgJLYRLlWf2iNTR7NJl83MDPCL6c5GQcmKBDcLsq33w773RcKOjSVT
8cff5KJY58br4lgGEEy26HMxxMPLZvdq9go37fozPkffKbd6qlnEXkvVxOGEycfI
YXhoPal+kVEofEcp6ZtWnihmOCQUIXJPe9J/O8GNCJcp4WNi5u8GgfmeBZcBVn8v
XAxVQ3kPl3p3JtYAbILTyy/djt0Dk7CDKFuJlm1T/Xgh6Vzd7fntVL28a7DIli6c
GvtEB1qI+ousviiSXbh7VhAeWbq9Nq62hkd4Wq21VZwTR1uMG061KOYDT4+Js7Lb
W2uhi+RRurf/Fdn7UXUr0BICkJWbNJDaNMYLlsEYXpZQhVz19Qaw9GbKVIt5sefs
r8cEmBP34mEnq+eCZ+klPoRWw0snOUAvgD3Ytrs25eIiTLAWnIceRpoNIGVGsMgM
D0my4FVPFRIR0KXyhgnrRyNc4YxWWskbstr6UEeasSubQNyWCgW6N1PEeYXF5f9E
lfBVHarhGeDKP+MPtk6KqAmKF/StgXX9m0mLirGh0BZnOCEuWNLIOEzwOYSllk7x
Z228g/sL3LoRh+3UwsGIBBMBCgAbBQJd3ZPGAhsDAwsJBwMVCggCHgECF4ADFgIB
ACEJEC/i35xWABF8FiEEmKbNk4USA/ro0JBzL+LfnFYAEXzuXRAAuEgQmycEyk20
hE/cMv9gelcQYNwCzaf46j4Fq7qY5tRniz8fNkkwBF+SfemT/bz6DNLvfDi5IJYg
txt//OIOsPPjaDz8xq5qFv91zX9q9uwxghIPG6bcI1+FrrMXIMdvRDm4lftV6ObJ
iGaUbEAHXg/ODLbGXqVHzMMmE0Rsbr1Y1tQRTGnJin7gISlj0IAudUsCPUAp8zEz
K84MDJhWIoyrOA1s3UxJiu7ev6TkbQeo2uMRZ0rK/CCpd+IGQw/4/+67iJIy+72B
XVPK+vjO56HSd/Rlz1WttpA8ZZknoY1fkRGEWB7KNN4BuJvxJ496JSnG8dj2rlVo
+7A7AQJhP9aTzbeGde0mSFOoWtIs3Xw8+b/y4S8a7oZHPmxv0AH8XCQlSKL1O91f
eKNQnNwWe0IqO69/ahr5Qm5H6raCwxwXLpkykIBm3XuinOOmIZXdrPNC+6JYbsM3
q0NincKoZ25n1kE8W7UFzPfl9C14iLPTYSIFTLkTFDW3GSJ+tjjF4Sd/FpQs/nBt
GA7a6gTJS8syWKUAyaDt/q7OUtKc3WHlZHmGTpipNK3dJXHp0nLlHLKeUlgyFQJB
81ir4Okdclie4vsdxYvekR0TDgT5HmFTZjYLM8hUUIH88XQkD8X0Wygcdc9K0Gv6
MoXB6Q9B+JgQ50YfwkaOU7MZY0DeqaLNIkRheCBMYWJyYWRvciA8c2VtcHJpeEBy
b290Y29uLm9yZz7CwYgEEwEKABsFAl3dk8YCGwMDCwkHAxUKCAIeAQIXgAMWAgEA
IQkQL+LfnFYAEXwWIQSYps2ThRID+ujQkHMv4t+cVgARfEE3D/44htec8Wh+QQZx
954DRF1M4TmurrVTy0EXeOrmJt5BALCTFrSW6dqxbZQNcbgQb6yE5zmnwbaKiTOm
2aVsThFGFPh333P+tiWuYi+z1eczkkn/VJwGwZZEsZUyS7KGTzpLaLomjXG9km/k
hrV+EfMMy+iSvBplqhQjv5EmO05tje0jw1rLQWceP5cGf637hzYf5+8Knb9TkAdA
96LOPTI0cimya8bDdlZWZ9oPL2nxu6YNjLafPji/eafL1IFR2dd1EbmpYlNnUrLC
HMXGXgbPusAswvqx/kFSYvoKcIe0m0xe1jUYRuRrqOtqASTXbsySlCG8KEhfTstq
g/ntj/r8XnwU5SJ8TvFo8w+xulSK1Qn7SKBy5E4J/W+iDi/jW42gW0/bzA/vOoB0
vguNFTnT6NYcGRyw9eDnQgkwQ8CujoMoipUkkcdjkXAQ1A86U2CQv2phS8bZ+8Op
Vg7CzI0bwoBo65AReE4uPUnNsJfX4kCyhWaZom5iUNVGYU4AkVd/O4pE088mSGPf
HzR1rnWMsw3VAMHkgbPmgv1nAnaCGPJVx0hKUD4YOu66X3s2kUBmwrA5BqJfdy/b
zqhJibZXl3R931atmEx343QSxqL+Moua+YFgr0kiFqODPckTNbiinIqAZ3tDEIhG
pYcCahnjjMp5h3i3u74SP9/90QsmLc7ATQRd3ZPGAQgA4Gn9OUpK2XSEsYRgX7hO
BulZ2CbdPjlc7BPub2D069G0DgH8QIAlIoIkXriX50RPeC/jpS3RnmXTsq/GCrqm
g2F7SWa3QUzl3b8JQAuSrVI7QBqiYlF5pSglb3JiL87RaCeGW6UMCdaXQtLA97el
K1++AX+O3vzSrc+94zEmcMmNPRGJe2HRe559uVeqUngi+s6KqvC5TqrY4PjZU6Gk
OiJGmzIIaRC45RU1DoCqXRKjNZSbm1BxKZZXcgsd4pDR6y7b5j79qhQ4730dy6/8
FIKTUsd6iihHK9wk9vOArvtQ5/3Auk9DlPxcT5fvmUePdMiRikYh2TuwuI5e1dC5
GQARAQABwsKVBBgBCgAgAhsMFiEEmKbNk4USA/ro0JBzL+LfnFYAEXwFAmb/mUoB
KQkQL+LfnFYAEXzAXSAEGQEKAAYFAl3dk8YACgkQjUjTuvLXuzZEswgAiqguqrV7
BebJOXaqSIPPvDOwaLDC28isHsMimXLUhf4aJ4kh08tT66plE6SpOaYIHBsnuTmx
bVlSwn2VLv7irEF8PVB5Ri3osGH5Ug5/BRbs3WMx0QxBq9Em1JBRPI/hJwl6DVaS
WCsw30s+Hujcf1e7nBmyKXryS3shuugNhPutL1PunoI6ZbfiP3wIhaFZD7Emg0mS
rugQD5As4OUtOEWdMmtItsHCb3ebb1zfBSqDY2pyH3THVAJ62fD7JyeERQI5Hlk8
6mhfp+y5VZRE1H7CovIjQGAPSFZaNKSGzIJI8tj59hOEH1xvlwtcr1000m7pf8ML
XNKZ1L0JdyidlDA2D/9xGHZmKonli4RqNfiuhfs5RarujDYfz906iPyUFDVWZgbE
xO9ovv0QryuGOHagjNd+mdi73Be50wFk1oPQKWErBTP0D3LjEBRN+KcE7840FukM
+leM/suX2oFRhw47NhL+ro5qTHbdvQvYUFLT2ahICR0VLFL3QKe/Qc/oLm/Ua9W7
3c7JbSxKA46HzGkRLz0dMPb/Is8b23+Cy8wi2mTvmWRLGdtlsgpqYuwsdMVVAnUU
IRJQSzy+/P++0Pfr/wtB3QiEx4Bcpf8UGWjSTvVzZELJMquZI6j8u4D2LYEd3QkS
CKEgByHVBcBVP05wdKQRGdZMwpdK+xZY6g2dagGs/wam6GqaF75nMU/HPImI6NTV
SyaIKBGKbrrViIPdQQ6RjB3kdGv1TxELugwcDej8zqXnXMEBbROkq/9wJIfOfloY
PqnAq23fSy5+geom87Kjz/bThi3s2T3XfCWi6yThFM2P9fSPm/Ytlt5YFYocSHHW
0UsgHhGzAdMDoPnJ5u/GVwWx34UETbTuTKJxZmlCWr+Ym5Iuz4pO5ktu0mSuWAlc
95fDXg+rqR5DZS7eNuyxwHXzMUfzSc7Q3YDSQ6Yo4qu5jht9qNs+EqyqXoNamoNA
j3gotstbjRDmDTSld3D14qi9nweuDDYbaHT3/N1HiC2Tw4mYWDPC1CddWyeIpsLC
mwQYAQoADwUCXd2TxgUJDwmcAAIbDAFACRAv4t+cVgARfMBdIAQZAQoABgUCXd2T
xgAKCRCNSNO68te7NkSzCACKqC6qtXsF5sk5dqpIg8+8M7BosMLbyKwewyKZctSF
/honiSHTy1PrqmUTpKk5pggcGye5ObFtWVLCfZUu/uKsQXw9UHlGLeiwYflSDn8F
FuzdYzHRDEGr0SbUkFE8j+EnCXoNVpJYKzDfSz4e6Nx/V7ucGbIpevJLeyG66A2E
+60vU+6egjplt+I/fAiFoVkPsSaDSZKu6BAPkCzg5S04RZ0ya0i2wcJvd5tvXN8F
KoNjanIfdMdUAnrZ8PsnJ4RFAjkeWTzqaF+n7LlVlETUfsKi8iNAYA9IVlo0pIbM
gkjy2Pn2E4QfXG+XC1yvXTTSbul/wwtc0pnUvQl3KJ2UFiEEmKbNk4USA/ro0JBz
L+LfnFYAEXx0sBAApjR2Tv9e81+pXh9PlfBMmInc3mYP11rJ5b/MR7NhbK6rTDoI
SmqMbjP4A3NVRhb8ZLjwkMEuxzWNeTVFObr6Ph8GMWxq4Iwq8DuKAttmUMcXor92
pVo9OO2yjKId+DPB42kBrrNYJ4HJKuugkrNMUTSxd7JyU29vAdDeW9ZGQAP+P9D8
n1879d0TQBT2WUl+Ssrdm8oUdKU2Lwg2K5AORvMuA6eiRjYvAK1HWfLY6fRanIkF
RHFmJ7E05yClYooIt+4magLqjAFGdFk1jdtEAR5uKrJMlq91KZmEyXUmk+yUv+co
VOV+SiXb8A2d+DVgnC4p82IlBHJGwe2Ubaf/IhtXKzN3ddjJoZ/iyerVpzZ4ZFgI
cY2UiniY9yh7su6m4QykBDYVDtHkTjjsD6dbbwo1fNFNaLgumpZlCPkJQNBM61s1
UFuA8IArNDo4APwc7klOhMjTBxgDG5GjaM9efOHj2IQFG3jy4qsRz12+9DupeT7S
/YvkeJWwlJHYErMzDpRVUKt+Sg5hXSmmgItPW0HxnQm2i6xdgx/kuoTEPv0oE4W4
EqqPu23uONiHaxRIwxehwL1CThbz+gQ9X9wDSxGyHI7Od+R63/ZZVzpVj3ohBVGf
dJmwhA4dM3DEPVCJ0t82Ce81NeO9Z3vp2kh3YItFw3ZFk+vNFG0gbldlt6HOwE0E
Xd2TxgEIAOJsyz3juPpPKVbMHVgUPdf2BddloeHOsApprZk+FB0aZz4KhtBh1+Zm
oQjSdY0awEbeptVw2esAcQcD1t9owlpUCntuyxfkRO4njwxlW6ODY3NWVvS+0n7P
k5AyIqSSk1BnmdUEG3BX9vbzll7v1U3PNv8hHEJs+ZJXLyHvy7xWtlUwNb3OdVUW
CGEaqLI7FYLZagRdUTs6hDYlKd95O+KHAJDEjORsYBQMpN3AHQijiqXp8dMtQt8K
6ExFxm9jxaqRKkLbEJAigCtKlPVPbO9Ksf20n6uZYeFsbhyTT0Qo6SWBndEt64Qx
XKtZCN2sDj1HlG7E1ETWuEN7t+4WaHEAEQEAAcLClQQYAQoAIAIbIhYhBJimzZOF
EgP66NCQcy/i35xWABF8BQJm/5lZASkJEC/i35xWABF8wF0gBBkBCgAGBQJd3ZPG
AAoJEP3+NjFXG3/HS5AH/2sP1mpQSUiLGHOM18LVPP1M41VcxllD6WIesCkjs+yz
ZxVFdGlEezynxG6P/7JLXYZVk46Ms63bg0RbYHR8LHm8nOZ7ZpeaEu0uC0he+EJq
Bdq+LW4Wh0l6Vb8cYp1YzZ5oYMBXWPP1nqQunYxTFSK8TS0/XOi3mreJShBNr3U9
J11bOxXpjnocLazc9zEkU6Pxy9SfG5otBaJQPkE1gNmW+F5rGkk27xltI61g2nkN
EPZQwi17yW+cO+1qrDhUWHqUpqi1ogpZLRo5hAHN7p8bLeLnspBXjGUL69JI7LJF
bQyb9+0HW0pdDFebVpRCGFZBY6w/2pSnwLOI7JvuOUXJmQ/+NKUKclPap5GGX8IG
WpQmDOtZvk4AU4GIMXzHFvCJKLSPk/X4WGDZly2EUZPaO4CcBpoeCWVN8jusnFQ3
DfZRvUHGD3qKrvnfcu+5bLYOsF2rgH8IgPu1dFZ34pJEO4gW07LU+MGNQiOtC8sL
gCAqnTw75XPsFhMRLg1MRH8l9b178gp0LTSBP9ABPoRxW7KOrmKOMmaPGkCtIj8v
yn5B6OCqwVbXSUIUAtgxlsA3GpKpkmMO6DFf9EJVRT6HVOvoRiPlGdWUjS2rNIEZ
mLvmihXSLOvt1T3qIo/V8ZSJ9noU4U3tuIdSqdR1H9JAJZvf/Ay4aZfobsvUiY/H
9Ws1W5zCxqeC5+tsafT0m9c6svATTSJyvYil3AaeHs6A5LtPaunscqXYdR2boWUW
crvnYE0ynTmAkytVVSNeQd1QfDyCgHo2K1yJeLG2h5wagMUkiJ97itrs1hrZ50wn
Z7xkVmh5KgAX8Fb8TojBCbzVM63119GY5dJ7QhIDzOg3izAXx3YqOQ5KKhzWL+8Q
ovcC6e2ZExMxabSOmLyCFal+s3Ngw4sxK7oCZHxIGigv4kv44kbguUYc1vPWinGM
H/yyDSHJdisKuizOQGomn3dG53jPARyjvJdkOJXWXWj4HX1YlwIBigHrlq9RqI1J
gnrR3/tZvtfclJUUzdwUPMek3kDCwpsEGAEKAA8FAl3dk8YFCQ8JnAACGyIBQAkQ
L+LfnFYAEXzAXSAEGQEKAAYFAl3dk8YACgkQ/f42MVcbf8dLkAf/aw/WalBJSIsY
c4zXwtU8/UzjVVzGWUPpYh6wKSOz7LNnFUV0aUR7PKfEbo//sktdhlWTjoyzrduD
RFtgdHwsebyc5ntml5oS7S4LSF74QmoF2r4tbhaHSXpVvxxinVjNnmhgwFdY8/We
pC6djFMVIrxNLT9c6Leat4lKEE2vdT0nXVs7FemOehwtrNz3MSRTo/HL1J8bmi0F
olA+QTWA2Zb4XmsaSTbvGW0jrWDaeQ0Q9lDCLXvJb5w77WqsOFRYepSmqLWiClkt
GjmEAc3unxst4ueykFeMZQvr0kjsskVtDJv37QdbSl0MV5tWlEIYVkFjrD/alKfA
s4jsm+45RRYhBJimzZOFEgP66NCQcy/i35xWABF8migP/2cItxUqSMl5n12dU9mS
dyb5a147skXmiCJOlMbFQaIgFVNy/qIiOeQcd+rlbjrUuqcnuddxScKa1hlD1t+w
Iyb6ftDG41Q4k37EthE6ixdKTqwhMu8YoKL332bp+CmloJCOXtmeGqRkuqdJZZX/
Rh0CR9ig9l76hQNV7FFO5qnvhp02fAoB5ZaRDP6lXI2tmFvY2+RfL/54qh1rxiBI
5c3Hqo796ftIJb/lVTpE+zmShgEDk25kkgNyaNQ+3DVQn6fgyRBQq9NhZ6q06H+G
fHlHoJsHitrW+0/iDULselbTLhZO+aEYUtfoV9RPwXpM2QsAEALPJr5v2Jb/Z6pw
76Z27LsoheYBGya2fHfIC4NIfpiDIxxU+qTpiLtW/CL32A6jGUeZAYxzdv5FKlAy
gfkVYo+7Xo5MF13qV23FHIxppijmQnVPn2T9cjlEZ4VOYo9+AHIO6Wt7ZI+LLozM
2JZmDAI9U945pzIS7X3kp98KPo4zkiP0FeNVty3DCBLBOngdbnr0x8iE+khnqNxW
m9RYgwyKrFDjl28QFfB0SGeG2nD3K17GoS37eKYXLf5HyduMwdkW8vND4zGbFkhf
fIiqV9O0q32dbytDkb7ODzJOKJGcYGeOVG1OCHoZ1T+Zl6uXI+aMh2HdMP+glPSB
NODJQEUgkz/2+kaujvdQT5jb
=dmSC
-----END PGP PUBLIC KEY BLOCK-----