Draft:Dan Guido

American cybersecurity researcher From Wikipedia, the free encyclopedia

Daniel Guido (born 1984) is an American cybersecurity researcher who co-founded Trail of Bits, a New York City software security firm, in 2012.[1] He created iVerify, an iOS security app later spun off as an independent company to counter mercenary spyware,[2][3] and Algo, an open-source VPN server recommended by The New York Times.[4] The Cybersecurity and Infrastructure Security Agency inducted him into the Scholarship for Service Hall of Fame in 2021.[5]


Born1984 (age 4142)
OccupationCybersecurity researcher
KnownforCo-founder of Trail of Bits
Quick facts Dan Guido, Born ...
Dan Guido
Born1984 (age 4142)
Alma materPolytechnic University (BS)
OccupationCybersecurity researcher
Known forCo-founder of Trail of Bits
TitleCEO, Trail of Bits
Close

Early life and education

Guido grew up in Williston Park on Long Island.[6] As a teenager, he was banned from using computers at his high school after reporting vulnerabilities in its IT systems.[7] At Polytechnic University (now NYU Tandon School of Engineering), he studied computer science through the CyberCorps: Scholarship for Service program, which included internships at the National Security Agency.[8][5] As an undergraduate, he co-organized CSAW, a student cybersecurity competition at the university.[9][8] He graduated in 2008; his first job was at the Federal Reserve Bank of New York.[5]

Career

Trail of Bits

Before founding Trail of Bits, Guido worked as a security analyst at iSEC Partners and researched how attackers exploit software vulnerabilities.[7] His paper in IEEE Security & Privacy analyzed real-world exploit data and found that a small number of vulnerabilities drove the vast majority of large-scale attacks.[10] He co-founded Trail of Bits in 2012 with Dino Dai Zovi and Alexander Sotirov; CSO Online described the founders as "infosec heavyweights," noting Guido's research on the concentration of exploit activity.[1] The firm conducts security audits and builds open-source analysis tools. In 2020, its audit of Voatz, a mobile voting app used in several U.S. elections, found 16 high-severity vulnerabilities, including bugs that could let an attacker alter or cancel votes; West Virginia dropped the app after the report.[11][12] In 2022, DARPA commissioned the firm to study whether blockchain networks are decentralized; the report concluded that a few entities controlled most Bitcoin mining and network infrastructure.[13][14] Trail of Bits placed second in DARPA's AI Cyber Challenge in August 2025, winning $3 million.[15][16]

iVerify

In 2019, Guido created iVerify, an iOS app that detects compromised iPhones. He told Vice the tool used "side channels" to detect anomalies, "like sending up smoke signals out and you're looking at the clouds in the sky through a tiny little window in your room where you've been locked."[2] The project was spun off as an independent company in 2023.[3]

NYU Tandon

Guido spent eight years as adjunct faculty and the first Hacker in Residence at NYU Tandon, where he helped establish the student-run OSIRIS Lab and taught vulnerability analysis and application security.[8][17][18] He wrote a Capture the Flag Field Guide to train military academy cadets in software security.[8] He also organized the THREADS conference, an annual research event held during CSAW from 2012 to 2014.[19][20]

Government advisory roles

Guido spoke at the Federal Trade Commission's Mobile Security Forum in 2013.[21] From 2023 to 2024, he co-chaired the Cybersecurity Subcommittee of the Commodity Futures Trading Commission's Technology Advisory Committee.[22]

Public commentary

Apple–FBI encryption dispute

During the FBI–Apple encryption dispute in February 2016, Guido published a technical analysis arguing that Apple could comply with the FBI's court order to unlock an iPhone 5C used by one of the San Bernardino shooters, because that model lacked Apple's Secure Enclave processor.[23] His analysis dubbed the hypothetical custom firmware "FBiOS," a term ProPublica and other outlets adopted in their coverage of the dispute.[24][25] He called the request "completely doable and reasonable" but said Apple should make changes to prevent such orders in the future.[26][27][28]

Crown Sterling controversy

At Black Hat 2019, Crown Sterling CEO Robert Grant gave a $115,000 sponsored talk promoting a proprietary encryption scheme called "Time AI."[29] Guido stood up and challenged the presentation. He told Vice: "They're scamming people. They're here to use Black Hat to trick people into giving them money. It's fraud."[30] He was removed from the room, and Black Hat pulled the talk from its website.[30][29] Grant later told Ars Technica: "One person in particular, a Mr. Guido, stood up and started screaming." Guido responded: "I spoke up because I felt [the presentation] was insincere and conducted in bad faith."[31] Crown Sterling sued Black Hat's parent company Informa; the case settled on confidential terms in 2020.[32]

ELUSIVE COMET

In April 2025, Guido was targeted by ELUSIVE COMET, a group behind millions of dollars in cryptocurrency theft. The attackers posed as journalists for "Bloomberg Crypto" and attempted to gain remote access to his computer through Zoom's remote control feature during a scheduled interview. Guido recognized the social engineering attempt and published an analysis of the group's methods.[33][34]

Projects

Algo VPN

In 2016, Guido created Algo, an open-source personal VPN server released through Trail of Bits as an alternative to commercial VPN services.[35] The New York Times recommended Algo in 2021, with technology columnist Brian X. Chen reporting it "worked flawlessly." In the same article, Guido argued that modern HTTPS encryption had made commercial VPNs unnecessary for most users: "It's very difficult to find cases where people were harmed by signing on to the airport, coffee shop or hotel Wi-Fi."[4]

References

Related Articles

Wikiwand AI