Edge Rewrite
// HTMLRewriter · presentation

This page was redesigned at the edge.

Cloudflare fetched the original article and streamed it through HTMLRewriter to apply an entirely new visual system without rebuilding the source page.

Jump to content

Draft:Dan Guido

From Wikipedia, the free encyclopedia
Dan Guido
Born1984 (age 41–42)
Alma materPolytechnic University (BS)
OccupationCybersecurity researcher
Known forCo-founder of Trail of Bits
TitleCEO, Trail of Bits

Daniel Guido (born 1984) is an American cybersecurity researcher who co-founded Trail of Bits, a New York City software security firm, in 2012.[1] He created iVerify, an iOS security app later spun off as an independent company to counter mercenary spyware,[2][3] and Algo, an open-source VPN server recommended by The New York Times.[4] The Cybersecurity and Infrastructure Security Agency inducted him into the Scholarship for Service Hall of Fame in 2021.[5]

Early life and education

[edit]

Guido grew up in Williston Park on Long Island.[6] As a teenager, he was banned from using computers at his high school after reporting vulnerabilities in its IT systems.[7] At Polytechnic University (now NYU Tandon School of Engineering), he studied computer science through the CyberCorps: Scholarship for Service program, which included internships at the National Security Agency.[8][5] As an undergraduate, he co-organized CSAW, a student cybersecurity competition at the university.[8] He graduated in 2008; his first job was at the Federal Reserve Bank of New York.[5]

Career

[edit]

Trail of Bits

[edit]

Before founding Trail of Bits, Guido worked as a security analyst at iSEC Partners and researched how attackers exploit software vulnerabilities.[7] His paper in IEEE Security & Privacy analyzed real-world exploit data and found that a small number of vulnerabilities drove the vast majority of large-scale attacks.[9] He co-founded Trail of Bits in 2012 with Dino Dai Zovi and Alexander Sotirov; CSO Online described the founders as "infosec heavyweights," noting Guido's research on the concentration of exploit activity.[1] The firm conducts security audits and builds open-source analysis tools. In 2020, its audit of Voatz, a mobile voting app used in several U.S. elections, found 16 high-severity vulnerabilities, including bugs that could let an attacker alter or cancel votes; West Virginia dropped the app after the report.[10][11] In 2022, DARPA commissioned the firm to study whether blockchain networks are decentralized; the report concluded that a few entities controlled most Bitcoin mining and network infrastructure.[12] Trail of Bits placed second in DARPA's AI Cyber Challenge in August 2025, winning $3 million.[13][14][15]

iVerify

[edit]

In 2019, Guido created iVerify, an iOS app that detects compromised iPhones. He told Vice the tool used "side channels" to detect anomalies, "like sending up smoke signals out and you're looking at the clouds in the sky through a tiny little window in your room where you've been locked."[2] The project was spun off as an independent company in 2023.[3]

NYU Tandon

[edit]

Guido spent eight years as adjunct faculty and the first Hacker in Residence at NYU Tandon, where he helped establish the student-run OSIRIS Lab and taught vulnerability analysis and application security.[8] He wrote a Capture the Flag Field Guide to train military academy cadets in software security.[8] He also organized the THREADS conference, an annual research event held during CSAW from 2012 to 2014.[16]

Government advisory roles

[edit]

Guido spoke at the Federal Trade Commission's Mobile Security Forum in 2013.[17] From 2023 to 2024, he co-chaired the Cybersecurity Subcommittee of the Commodity Futures Trading Commission's Technology Advisory Committee.[18]

Public commentary

[edit]

Apple–FBI encryption dispute

[edit]

During the FBI–Apple encryption dispute in February 2016, Guido published a technical analysis arguing that Apple could comply with the FBI's court order to unlock an iPhone 5C used by one of the San Bernardino shooters, because that model lacked Apple's Secure Enclave processor.[19] His analysis dubbed the hypothetical custom firmware "FBiOS," a term ProPublica and other outlets adopted in their coverage of the dispute.[20] He called the request "completely doable and reasonable" but said Apple should make changes to prevent such orders in the future.[21][22][23]

Crown Sterling controversy

[edit]

At Black Hat 2019, Crown Sterling CEO Robert Grant gave a $115,000 sponsored talk promoting a proprietary encryption scheme called "Time AI."[24] Guido stood up and challenged the presentation. He told Vice: "They're scamming people. They're here to use Black Hat to trick people into giving them money. It's fraud."[25] He was removed from the room, and Black Hat pulled the talk from its website.[25][24] Grant later told Ars Technica: "One person in particular, a Mr. Guido, stood up and started screaming." Guido responded: "I spoke up because I felt [the presentation] was insincere and conducted in bad faith."[26] Crown Sterling sued Black Hat's parent company Informa; the case settled on confidential terms in 2020.[27]

ELUSIVE COMET

[edit]

In April 2025, Guido was targeted by ELUSIVE COMET, a group behind millions of dollars in cryptocurrency theft. The attackers posed as journalists for "Bloomberg Crypto" and attempted to gain remote access to his computer through Zoom's remote control feature during a scheduled interview. Guido recognized the social engineering attempt and published an analysis of the group's methods.[28]

Projects

[edit]

Algo VPN

[edit]

In 2016, Guido created Algo, an open-source personal VPN server released through Trail of Bits as an alternative to commercial VPN services.[29] The New York Times recommended Algo in 2021, with technology columnist Brian X. Chen reporting it "worked flawlessly." In the same article, Guido argued that modern HTTPS encryption had made commercial VPNs unnecessary for most users: "It's very difficult to find cases where people were harmed by signing on to the airport, coffee shop or hotel Wi-Fi."[4]

References

[edit]
  1. 1 2 Brenner, Bill (February 14, 2012). "Trail of Bits: An Alliance of Infosec Heavyweights". CSO Online. Retrieved February 22, 2026.
  2. 1 2 Franceschi-Bicchierai, Lorenzo (November 14, 2019). "This App Will Tell You If Your iPhone Gets Hacked". Vice.
  3. 1 2 "Trail of Bits Spinout iVerify Tackles Mercenary Spyware Threat". SecurityWeek. 2023.
  4. 1 2 Chen, Brian X. (October 6, 2021). "It's Time to Stop Paying for a VPN". The New York Times.
  5. 1 2 3 "CyberCorps: Scholarship for Service Hall of Fame". CISA. Department of Homeland Security.
  6. ↑ Leising, Matthew (January 10, 2022). "Q&A with Trail of Bits Co-Founder Dan Guido". Decential.
  7. 1 2 Lim, Dawn (August 17, 2010). "A Brooklyn lab's deviant magic". Greenpoint Star.
  8. 1 2 3 4 "NYU Tandon Alum and Mentor Dan Guido Elected to Scholarship for Service Hall of Fame". NYU Tandon School of Engineering. 2021.
  9. ↑ Guido, Dan (November–December 2011). "A Case Study of Intelligence-Driven Defense". IEEE Security & Privacy. 9 (6): 67–70. doi:10.1109/MSP.2011.163.
  10. ↑ Freed, Benjamin (March 16, 2020). "Audit finds severe vulnerabilities in Voatz mobile voting app". StateScoop.
  11. ↑ Westrope, Andrew (March 17, 2020). "Detailed Audit of Voatz' Voting App Confirms Security Flaws". GovTech.
  12. ↑ "Cryptocurrency tech is vulnerable to tampering, a DARPA analysis finds". NPR. June 21, 2022.
  13. ↑ "Alum-run Cybersecurity Company Trail of Bits Wins Big at DARPA's Artificial Intelligence Cyber Challenge". NYU Tandon School of Engineering. September 15, 2025.
  14. ↑ Kapko, Matt (August 8, 2025). "DARPA's AI Cyber Challenge reveals winning models for automated vulnerability discovery and patching". CyberScoop.
  15. ↑ Grauer, Yael (April 28, 2026). "Attack of the killer script kiddies". The Verge.
  16. ↑ "Dan Guido: THREADS Mobile Security Conference". NYU Tandon School of Engineering. 2012.
  17. ↑ "Mobile Security: Potential Threats and Solutions". Federal Trade Commission. June 4, 2013.
  18. ↑ "CFTC Technology Advisory Committee Announces Subcommittee Members". Commodity Futures Trading Commission. July 14, 2023.
  19. ↑ Guido, Dan (February 17, 2016). "Apple can comply with the FBI court order". Trail of Bits Blog.
  20. ↑ Angwin, Julia (February 24, 2016). "What's Really at Stake in the Apple Encryption Debate". ProPublica.
  21. ↑ Zetter, Kim (February 18, 2016). "Apple's FBI Battle Is Complicated. Here's What's Really Going On". Wired.
  22. ↑ Benner, Katie; Apuzzo, Matt (February 22, 2016). "Narrow Focus May Aid F.B.I. in Apple Case". The New York Times.
  23. ↑ Nicas, Jack; McMillan, Robert (February 17, 2016). "Newer Phones Aren't Easy to Crack". The Wall Street Journal.
  24. 1 2 Claburn, Thomas (August 26, 2019). "Biz forked out $115k to tout 'Time AI' crypto at Black Hat. Now it sues organizers because hackers heckled it". The Register.
  25. 1 2 Franceschi-Bicchierai, Lorenzo; Cox, Joseph (August 10, 2019). "Black Hat Talk About 'Time AI' Causes Uproar, Is Deleted by Conference". Vice.
  26. ↑ Gallagher, Sean (August 29, 2019). "Snake oil or genius? Crown Sterling tells its side of Black Hat controversy". Ars Technica.
  27. ↑ Stone, Jeff (April 22, 2020). "Crown Sterling and Black Hat settle lawsuit, promise to never speak of it again". CyberScoop.
  28. ↑ Toulas, Bill (April 22, 2025). "Hackers abuse Zoom remote control feature for crypto-theft attacks". BleepingComputer.
  29. ↑ Dillet, Romain (April 9, 2017). "How I Made My Own VPN Server in 15 Minutes". TechCrunch.
[edit]

Category:1984 births Category:Living people Category:People from Queens, New York Category:American chief executives in technology Category:Computer security specialists Category:New York University Tandon School of Engineering alumni Category:American technology company founders Category:People from Williston Park, New York