back
user profile
rdl
39,335karma·10,537submissions·July 8, 2008
about
Working on stuff at the intersection of cryptocurrency and computer security. Also a Puerto Rico resident (Act 20/22); happy to help people move to Puerto Rico to take advantage of the federal tax exemption, 0% capital gains rate, and 4% business income tax rate. Also FFL07/SOT02.
Chief Security Officer for Evertas Insurance -- the world's first cryptoasset insurance carrier. https://evertas.com/
Previously, CEO and Co-Founder of CryptoSeal (YC S11), which was sold to CloudFlare on 2 June 2014. CISO/Board Member of Tezos Foundation 2018-2020.
Previous startup founder (HavenCo, a couple ecash projects, distributed colo, and DoD/Iraq contracting, new thing), too. Deeply interested in computer security, infrastructure, security, conflict zones, and making the world a better place.
Aside from living on a Caribbean island during crypto export controlled 1990s, I've lived on a tiny artificial platform in the North Sea, plus more reasonable places like London, Amsterdam, Iraq, Afghanistan, Kuwait, and spent 6 months diving in Thailand.
"I, the greengrocer XY, live here and I know what I must do. I behave in the manner expected of me. I can be depended upon and am beyond reproach. I am obedient and therefore I have the right to be left in peace."
Email: ryan@venona.com (etc) Twitter: @octal https://twitter.com/octal LinkedIn: http://www.linkedin.com/in/ryanlackey
Top color: aaaaaa
recent activity (10,537 total)
comment
Didn't the US basically tech-transfer most of ASML's tech to it for some reason?
comment
A lot of them -- the whole "phishing" thing happens to crypto users with regularity, and often for surprisingly large amounts. Usually not the single-victim/cause $100mm+ hacks, but l…
comment
I live ~10m away from my territory's biggest airport so I guess I'm spoiled on local rentals that way. But I was mainly thinking about the long-distance road trip use case for a vehicle, in …
comment
Lockdown prevents new enrollment in MDM/adding profiles, but you can use an MDM you're already enrolled in. It's pretty good from a security perspective. What I dislike is that it appl…
comment
I rent cars approximately all the time (I live on an island, so when I go anywhere, it's by air, and except for NYC, I always get a car wherever I go). Maybe 20 rentals/yr, a few years it wa…
comment
I just got my "configure your Cybertruck" email. Unfortunately, I have an outdoor parking spot in a rented apartment and running power to charge there would be difficult/impossible. Yet…
comment
Screwed up thing is the hiring conditions today are almost the opposite of 2020, so it would work great now (lots of entry to mid level jobs open, more comfort with remote than in <2020, etc.)
comment
I know a fair number of people who have had no problem after (old) drug or DUI or violence convictions, but I usually hear about them in the context of "15 years ago I...". I don't kno…
comment
The complexity of deployed identification/auth chain/secrets management/ec. is pretty terrifying; even if you can somehow understand it for one OS and hardware platform, if your service…
comment
Device bound is to a specific piece of hardware (whether it supports reinstallation at some level is debatable but I wouldn't use the term for it; Signal is essentially single-concurrent-device-l…
comment
Don't they work pretty portably within Apple iCloud keychain or Google equivalent (but only one)? I think some of the legacy password managers are supporting this as well, although my preferred …
comment
Is Amazon equity still backloaded as much as it was before (10% after year 1, 20% after year two, 30%, 40%, vs the 4/1 standard at most other companies)?
comment
Working at a tech giant for 1-4 years and then going off to do your own startup (or jump to another startup) doesn't seem bad in anyway. Different from spending a 20-40 year career at one place,…
comment
Or piracy.
comment
Main thing induction seems actually worse for is being able to lift the pan above cooking surface and differentially heat different parts of the pan, particularly useful for Chinese/wok cooking.
comment
I was at ACM Copenhagen although more downstairs at ASHES (which my company sponsored) and DeFi. Ryan Hurst who was there is probably the best person to ask about the specific certification use cases…
comment
Qty 1, $80 seems tolerable for a dev device. They should explicitly list 10 for $500 and 100 for $3000 or something though. This is competing with $5-30K HSMs as well as $30-400 "hardware wallet…
comment
I'd put a key inside my app which then talks out of band to multiple devices (including maybe a trusted one?) -- e.g. "run app on the device, request input using the directly-connected PC, m…
comment
If they could add some hardware tamper-evidence/tamper-response (design-to-meet FIPS 140-3 level 3 or EAL whatever, although no need to actually get certified), this could be super useful as a ch…
comment
I mostly stopped reading it in ~2021/2022, but from ~2015-2021 it was getting progressively more hostile to tech, fearful of anything new, etc. I skimmed the online list of articles for the past …
comment
As sad as this is, what's sadder is that Wired still exists and is diametrically opposed to the values it had when created.
comment
While I agree if he were doing anything questionable, IDK, my reading is that he's exporting software development services from Japan and paying taxes in Japan correctly on both business income a…
comment
It seems like work-from-home is going to be more of a thing over the next 30+ years than it was over the past 30 years (leaving the past 3 years as an exception to both). Work from home also seems to…
comment
Even before taking over as President at YC, he was incredibly helpful to a bunch of YC founders and others doing startups -- a combination of willingness to help, and knowing what to do/how to do…
1 pts
comment
Tether/USDC and other centralized stablecoins are really "their own thing", not "crypto" in the cypherpunk sense.
comment
Actually worse than that, former employee phished for credentials, per Ledger themselves. Underlying cause is utter incompetence by company, 4th strike.
comment
1) They are using some phishable auth (SMS? TOTP? password only?) to secure super high value repo? For fuck's sake, they're a HARDWARE KEY VENDOR which also supports U2F/FIDO2 as an app…
comment
LOL https://twitter.com/Ledger/status/1735326240658100414 FINAL TIMELINE AND UPDATE TO CUSTOMERS: 4:49pm CET: Ledger Connect Kit genuine version 1.1.8 is being propagated no…