P—01
Black-box teardown
Static and dynamic analysis of closed binaries — tracing call graphs, recovering protocols, and documenting undocumented behavior.
Your IP
resolving…
◇Reverse engineering · software design lab
We take things apart for a living. Including you.
Ponzi Labs is a workshop for reverse engineering and software design — a rotating bench of projects pulled apart, instrumented, and rebuilt. To prove the point, this page has already read you. Everything below is your client, resolved live.
Located
triangulating…
Carrier
probing…
Integrity
verifying…
acquiring fix…
Your position · --.---°, --.---°
◇Live client telemetry
Everything you handed over
FILE 01 / SUBJECT: YOU
› Network & Route standby
Public IP
› Geolocation standby
Region
› Client Identity standby
Browser
› Authenticity & Anonymization Analysis standby
ANALYZING
Cross-checking IP reputation against client signals…
Spoofing / anonymization risk—
Statuscollecting signals…
› Display & Hardware standby
Screen
› HTTP Request Headers standby
intercepting request…
› Device Fingerprint standby
Canvas Hash
computing…
A stable signature derived from how your GPU rasterizes a test image — distinctive enough to single you out in a crowd.
Installed Fonts
Plugins / Modules
Nothing here is stored or transmitted to us — it is resolved in your browser and on public lookup endpoints, then forgotten on refresh. The point is simply how much a single page request gives away.
◇Passive deep probe · zero prompts
What we pulled without asking
FILE 02 / DEEP PROBE
› Display Signature measured
Refresh Rate
Monitors
Desktop
Window Pos
Color Gamut
Dynamic Range
› Media Pipeline captured
Decode
Pointer
Audio Fingerprint
computing…
A hash of how your audio stack renders a test tone — a second independent signature alongside the canvas hash.
› Peripherals & Inputs no prompt
Connected Media Devices
enumerating…
Keyboard
Locale / TZ
› Storage & Session captured
Quota
In Use
Session
Writable Stores
› Local Network standby
Internal / LAN Address
Edge Latency · physical triangulation
pinging…
› System Preferences measured
› Installed Speech Voices enumerated
Your installed text-to-speech engines — they leak your OS, region, and every language pack you've added.
› Behavioral Biometrics live profiling
Motion signature entropy0 / 100
awaiting input…
Move your mouse or type — we're building a behavioral signature in real time.
None of the above triggered a single permission prompt. This is the baseline a website silently reads the instant you arrive — before you click anything.
◇Selected work
On the bench
FILE 03 / PROJECTS
P—02
Protocol reconstruction
Capturing, decoding and re-implementing proprietary wire protocols into clean, documented client libraries.
P—03
Systems design
Designing software from the metal up — clean architectures, careful interfaces, and tools that respect the people using them.
P—04
Client instrumentation
Fingerprinting, telemetry and tracking research — like the readout above. Understanding exposure in order to defend against it.
◇Questions
Frequently asked
FILE 04 / FAQ
What is Ponzi Labs?
Ponzi Labs is a reverse-engineering and software-design lab at ponzi.io. It takes software apart — black-box teardowns, protocol reconstruction, systems design, and client-instrumentation research — and rebuilds it cleanly.
What does Ponzi Labs work on?
Black-box teardowns and binary analysis, device firmware reverse engineering, proprietary protocol reconstruction, systems and API design, and client fingerprinting and privacy research.
Does ponzi.io store the visitor data it shows?
No. The live readout is resolved in your browser and at the Cloudflare edge, then forgotten on refresh — nothing is stored or sent to a server. It exists to show how much a single page request reveals.
How do I contact Ponzi Labs?
Reach Ponzi Labs through the contact section at ponzi.io. The lab is open to reverse-engineering and software-design work.
◇Open a channel
Got something worth taking apart?
Reverse engineering, software design, or just a hard problem that needs a second set of eyes. The lab is open.
Inquiry received.
Thanks — your message is in. We'll reply by email, usually within a couple of days.