Valid HTML 3.2!

Peter Ferrie
("qkumba" on HackZApple, Pouet, EXETools, and CSA2)
("peterferrie" on OpenRCE, DOSBox, Reddit, and GitHub)
("peter ferrie" on MAME Dev, Tuts4You, StackExchange, Bannister, and CFFA)
("san inc." on Asimov)

Distinguished Engineer, Symantec Corporation
virus researcher, reverse-engineer and software preservationist

Wizard of Oz


August 30: From Diversi-DOS to Directi-DOS and the creation of 4LIVE (Oz KFest 2017).
July 23: Porting games from booter to ProDOS (KansasFest 2017).
March 7: I've been upgraded at work.
January 10: Half SipHash in 142 bytes.
January 10: Poly1305 in 332 bytes.


If Uli had called it the Air Guitar, instead of the Sky Guitar, then it might have been more popular. :-)
Never see a movie which features your field of specialty. You'll find so many things that are wrong, you won't enjoy it.
Buffets are for when one (dish) is not enough and two is too many ($$$).
Your ability to guess the word that someone is mis-pronouncing, is inversely proportional to your fluency in that language.
Among the members of the Cervidae family, the 'S' deer is probably the most helpful, but the 'O' deer is probably the most famous.
If people in Holland spoke a dialect of Dutch, they could call it Hollandaise.
Why doesn't H like A? Because A be seedy E effigy.


Peter Ferrie began working with computers in 1981.
In 1986, he began developing anti-virus software for Apple II PCs.
From 1992-1998, he worked for an Australian distributor of anti-virus software for IBM PCs, first McAfee Viruscan then Frisk F-Prot.
From 1998-2000, he worked for Frisk Software International in Iceland.
From 2000-2003, he worked for Symantec Corporation in Australia.
From 2003-2008, he worked for Symantec Corporation in the USA.
From 2008-2016, he worked for Microsoft Corporation in the USA.
In 2016, he rejoined Symantec Corporation.

Ferrie specialises in the analysis of Win32/Win64/Linux/script malware, reverse engineering code on multiple platforms, and development of (anti-)emulators, (anti-)unpackers, (anti-)debuggers, and anti-rootkit technologies.
He has been a speaker at various conferences. He is the most frequent contributor ever to the Virus Bulletin journal, supplying over 100 articles in 13 years.
He joined CARO (Computer Anti-virus Research Organisation) in 2001.
He received the Virus Bulletin 2010 award for greatest contribution to anti-malware in the last 10 years.


2011 2010 2009 2008 2007


From Diversi-DOS to Directi-DOS and the creation of 4LIVE (slides with audio) - Oz KFest, August 2017, Brisbane
Porting games from booter to ProDOS (slides) - KansasFest, July 2017, Kansas City

2010 2008 2007 2006 2004 2001


2016 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001


2011 2004


Crypto: AES-256, Bel-T, BLAKE2s, ChaCha, DES, Half SipHash, HC-256, Kuznyechik, Modular exponentiation, Poly1305, Rabbit, RC6, Salsa20, Serpent-256, SHA-3/Keccak, Twofish-256

Shellcode: x86/x64 Shellcode development

Advisories: 2011 2010 2009 2008 2007 2005 2004 2002 2001


2015 2014 2013 2011 2010 2009 2007


The "Life In ..." series
My favourite demos
My favourite games
Compatibility fixes for demos and games
Old games that I finally beat
My Brøderbund info
My Infocom info
My Mindscape info
Scan of the Month 33


Apple II stuff
Old coding stuff
Intel stuff
Every potentially executable field in a PE header


painters: 007, Angel, Aster, Banish, Bizar, Chams, Custom, Droogie (gallery), Dys, Kagent, Kaine, Kerupt, KOS, Mister E, Orsam, RCF, Ree, Rize, Sink, TPee, Unique (Sinz, Spice)
Apple II: Colwyn, Home Hacker, Maz, Prototype (not the ex-virus writer on IBM PCs) (Bandits, Plasmania), Rebel, San Inc (Karateka side A, Karateka side B), Seroster, TCS, TTT


Painters: 50mm Los Angeles
Apple II: Asimov (ftp), HackZApple
Comics: 9 Chickweed Lane, Baby Blues, General Protection Fault, Liō, Sinfest, User Friendly
Other: Oldskool, Old School ;-)

Is your HTML standards-compliant? Find out

Copyright (c) 1998-2017 Peter Ferrie
All rights reserved
Virus Bulletin article copyrights are held by Virus Bulletin Ltd,
but made available on this site for personal use free of charge
by permission of Virus Bulletin

This site is hosted by

I'm a Technical Advisor for "Silent Runners.vbs" - use it to find out what starts up with Windows!

Free web hostingWeb hosting