Savage Software Logo

Savage Software /dev

Explore the work of Jordi Murgó, also known as "Savage" – an early Catalan hacker, developer of security tools, and a digital activist who has contributed to the field since the 80s.

This portal provides an overview of his work in code and system exploration, and highlights his contributions to the evolution of the internet in Spain.

whoami

Jordi Murgó - Savage

Jordi Murgó, known as "Savage", is a prominent figure in Spanish hacking. Born in Lleida in 1968, he became an early leader, guiding the group Apòstols during the late 80s. Under his leadership, the group not only developed numerous open-source security tools but also played a role in early international ethical hacktivism campaigns.

From his early years as "The Phreaker" to his contributions to Linux and other open-source projects, Jordi has consistently demonstrated key aspects of hacker philosophy: curiosity driving exploration, effective problem-solving, and a commitment to the free dissemination of knowledge.

Today, Jordi continues to innovate in the digital space. As a Security and Artificial Intelligence Specialist at GFT, he combines his decades of experience with new advancements in emerging technologies, remaining active in the cybersecurity field.

cat early_years.log

The Early Years: MSX and the 300 Baud Era

1982-1987
First Steps
At a mere 14, Jordi Murgó began exploring ASM 6502 on an Acorn Atom at school. Driven by curiosity, he saved his earnings to acquire his first computer, a Sony HitBit MSX, followed by an "unofficial" 300 baud modem. This period initiated his self-taught journey into programming.
1988
Communication Tools
Demonstrating early talent, Jordi developed a suite of communication applications for MSX: BlueBox, COMS3, and COMS4. These tools contributed to microcomputer communication and gained adoption within the growing digital community.
1989
Apòstols
As his reputation grew, Jordi was invited to join the hacker collective, Apòstols. Here, he developed his skills, delving into X.25 networks, navigating Unix/VAX systems in universities and corporations, and practicing phreaking across the Spanish telephone network.

In this "golden age" of hacking, Savage and his companions met in digital rooms, notably QSD on the French Minitel network. Originally an LGBTQ+ chat platform, it became a common meeting point for European hackers, where the ironic opening query "Are you a hacker or gay?" became a shared code among those exploring technology.

ls -la /tools

From Digital Frontier to Tool Development

Hacker at work

As the internet emerged in the 90s, a new digital frontier beckoned. Savage honed his talent, dedicating himself to developing security tools, all rooted firmly in the ethos of free and open-source software.

🔍
QueSO
1997-1998
QueSO emerged as one of the first known tools for remote operating system fingerprinting, leveraging specifically designed, malformed TCP packets. Its design not only served as an inspiration for Nmap but also triggered a false alarm in Israel, mistakenly perceived as a coordinated cyberattack.
🛡️
NePED
1998
NePED, a sniffer detection program, was conceived from a challenge among his hacker peers. Savage demonstrated the feasibility of detecting passive espionage tools, a development that ultimately earned NePED an official recommendation from CERT.
📡
Sneak32
2024-Present
A device powered by ESP32 microcontrollers designed to identify suspicious electronic devices by analyzing their WiFi and Bluetooth emissions, offering a useful capability in digital security.
Sneak32 Device

Sneak32: Hardware Hacking in the IoT Era

More than a mere gadget, Sneak32 provides an example in cybersecurity and counter-surveillance. It serves as a practical tool for identifying potential electronic threats in sensitive environments.

Presented at RootedCON 2025, where it was discussed in the context of identifying infiltrators within sensitive or protected zones. As smart devices proliferate throughout our environments, tools like Sneak32 help activists and everyday users protect their spaces.

grep -r "contributions" /spain

Early Contributions to the Hispanic Internet

📞
FidoNet BBSs
1987
Before the rise of Lleida.Net, Jordi managed two pivotal Bulletin Board Systems (BBSs): MSX ACC (2:343/401), and Savage Software (2:343/403). These early digital hubs laid the groundwork for what would eventually become Lleida.Net.
🌐
Lleida.Net
1993
Jordi founded Lleida.Net, one of the pioneering Internet providers in his region. This initiative transformed a local BBS into a full-fledged Internet Service Provider (ISP), significantly contributing to the democratization of network access during an era when connectivity was a luxury.
💬
IRC-Hispano
1996-2000
Alongside his colleague Rampa (Ramón Martínez) from Apòstols, Savage co-founded the IRC-Hispano network. This platform rapidly became a dominant chat community across Spain for several years, providing thousands of daily users with their own dedicated digital space.

cat hacktivism.md

Code in Service of Causes

"We are hackers out of necessity; computing was expensive and you had to find a way to get tools, information, access networks... to create the programs that would prevent you from paying." — Jordi Murgó

Shunning destructive paths, Savage used his technical skills for social advocacy and ethical activism. In 1997, he joined forces with the Portuguese collective ToXyN in an early hacktivism campaign, participating in protests against Indonesia's occupation of East Timor.

Engineered Solutions

Savage directly contributed by developing custom exploits and specialized tools like WhatOS (a precursor to QueSO). These instruments were designed to identify vulnerabilities within Indonesian government systems, alongside tailor-made exploits for the campaign, including those targeting imapd and ncsa httpd.

Strategic Coordination

Beyond coding, he organized synchronized Denial-of-Service attacks aimed at key Indonesian government websites. His commitment translated into "code and sleepless hours," a significant contribution to the cause, contributing to impact through coordinated digital action.

Global Impact

The collective's efforts led to the disruption of most official Indonesian government websites, notably including the military's. This cyber-protest generated international attention, bringing the East Timor conflict into the global spotlight.

cat professional_journey.log

1990-2000
Building a Foundation
For over a decade, Jordi was involved in system management at Telefónica, working with diverse platforms including Theos, IBM, Unix, and Linux. Concurrently, he was developing his security projects: QueSO and NePED.
2000-2010
Transition to Industry
Savage transitioned from independent work to the corporate sector. He became a software development manager at a multinational technology firm, later contributing his engineering expertise to the financial sector.
2010-Present
Focus on Cybersecurity
He further developed his skills, taking on technical leadership roles with a focus on cybersecurity. He currently works as a Security and Artificial Intelligence Specialist at GFT.

echo $PHILOSOPHY

Hacker Ethics & Reflections

🔍 Curiosity

My journey has always been guided by curiosity rather than malice. For me, hacking was never about breaking, but about understanding — exploring how things work and imagining how they could work better.

🌐 Community

In the early days, this meant experimenting with networks, building tools like QueSO and NePED, and connecting with hacker communities across Spain and Europe. What mattered was not the exploit itself, but the knowledge gained and shared.

⚡ Responsibility

Today, the same spirit drives my work in cybersecurity and artificial intelligence. Technology is advancing faster than our ability to govern it, and I believe hackers have a responsibility: to question, to expose risks, and to help society use technology ethically and safely.

cat talks.log

Talks, Conferences & Media

Public presentations, interviews, and media appearances covering cybersecurity, AI ethics, and hacker culture.

🤖
University of Granada 2025
"Do LLMs Believe in God?"
Technical presentation exploring ethical alignment, confidentiality, instruction adherence, hallucinations, biases, and security in LLMs.
▶ Watch on YouTube
📺
LleidaTV 2025
"Cybersecurity Debate"
Participation as a cybersecurity expert on LleidaTV's A Diari program, taking part in the Cybersecurity Debate section (in Catalan). Segment starts at minute 33.
▶ Watch on LleidaTV (min 33)
🎙️
Interview 2024
Personal interview in Catalan
In-depth interview discussing his hacker journey, philosophy, and current work in cybersecurity and artificial intelligence.
▶ Watch on YouTube
🔒
RootedCON 2024
"Do not troll mi LLM"
Technical presentation in Spanish at cybersecurity congress examining AI ethics, LLM behavior, and the intersection of security and artificial intelligence.
▶ Watch on YouTube
🎤
TEDxLleida 2024
"Intel·ligència Artificial, riscos i reptes"
TEDx talk in Catalan exploring AI history, ethical risks, and social challenges, emphasizing the need for critical thinking in the AI age.
▶ Watch on YouTube
🛡️
SecAdmin 2022
"Mitigación de malware bancario"
Technical presentation exploring strategies and technologies to mitigate banking malware, covering biometric systems, behavioral analysis, and MFA.
▶ Watch on YouTube

Historical Appearances (no recording available):

RootedCON 2010 — "Apòstols" panel with Ramón Martínez (rampa), revisiting the early hacking landscape.
RootedCON 2019 — "Historical Hackers" panel alongside prominent figures from Spanish cybersecurity history.
RootedCON 2023-2025 — Multiple presentations including "Do LLMs Believe in God?" and the official unveiling of the Sneak32 project.