Barrett Lyon

1. Key Themes

The Network Is Being Asked to Solve Problems It Was Never Designed For

Lyon argues that regulators and carriers are pushing identity, age-gating and geo-blocking onto the network layer, which is the wrong place in the stack. The result is brittle policy with unpredictable blast radius, which is part of why he thinks a purpose-built alternative network is needed.

Barrett Lyon: "a lot of times they're asking the network to solve an identity problem. And the network doesn't do identity." 00:10:12

Barrett Lyon: "An IP address is not your driver's license. And asking people to do network restrictions based off of age and things like that, it makes a lot of sense, but in a different place in the stack." 00:10:25

He cites a concrete failure: "Google or a Cisco umbrella broke for like a major carrier because they classified that carrier as France... they said, no, we're going to go scorched earth. We're just going to block France." 00:10:54

VPNs Are Thin Wrappers Over Rented Servers, and Ownership Determines Policy

The central critique of the VPN market is that most providers are just entry/exit points on leased bare metal, so "no logs" claims are unverifiable. Controlling policy requires owning the hardware and the interconnect.

Barrett Lyon: "So a lot of the VPNs, I would say, are just entry and exit points. So they lease a server from a landlord and set up their software on it." 00:12:53

Barrett Lyon: "People look at the policies for the VPNs, like, oh, no logs, no this. And the question is, like, okay, well, whose servers are those? Are they owned by big brand VPN or are they leased? And if they're leased, who are they leased from? And what are those people doing with the data?" 00:20:13

Barrett Lyon: "if it's not your equipment, you can't set policy. It's just, you can't. And then the next layer of policy is the carriers and interconnect beyond your cage." 00:20:36

A Parallel, API-Programmable Internet for Humans and Agents

DoxNet uses VPN protocols only as the on-ramp. Inside is a full mesh network with its own domains, addressing and policy, all controllable via API, and designed with agents as first-class users.

Barrett Lyon: "those networks are real time adjustable. You could apply APIs to everything... here's an API that your agent can use that can build an entire network." 00:13:17

Barrett Lyon: "we built an entire mesh network, 196 different domains that don't exist on the internet. You can register domains. You can lease IP addresses. You can lease mesh addresses or public addresses. Create policy. All within like milliseconds." 00:13:45

On the agent angle: "it's a little bit for bots too. There's actually a lot of agentic networking components to it." 00:34:22

Eliminating the Middleman Server: Phones as Servers

Mainstream messengers "disguise themselves" as direct sends but are server-mediated. DoxNet's applications go phone-to-phone after a cryptographic trust handshake, removing upload bottlenecks and file-size limits.

Barrett Lyon: "All of those applications disguise themselves as you sending something to somebody else. But you're really sending something to a server. And then the server is then having the other person pull that." 00:00:22

Barrett Lyon: "It's really no middle man, no server in the middle. And your phone becomes a server to your friend... You can send 20 gigabyte file to each other." 00:16:45

Lyon says it has "three layers, four layers of encryption" and is "post-quantum." 00:17:01 Identity is minimal: "No phone numbers, no email addresses, no names, no nothing." 00:14:14

Ad Tracking + Cheap LLMs = Compounding Surveillance Risk

The hosts and Lyon argue the real threat isn't any single data point but aggregation, now cheaply analyzable by AI. Intelligence agencies are also adopting data-broker and ad-tech techniques.

Barrett Lyon: "When you combine all of the tracking that's being done on every different app that you're using or every different website and it accumulates, and then it's being stored by who knows who where and being sold. And then when you aggregate all those data points together, you could know if you're a coffee drinker, what time you wake up in the morning, what your income is." 00:29:08

Joel De La Garza: "we're really at an inflection point because you have the birth of essentially coin operated intelligence at scale." 00:00:00

Barrett Lyon: "You can take all of that and just dump it into an LLM and say, tell me about this person. Yeah. You get an answer." 00:31:01

Internet Protocol Stagnation and the Carrier-Grade NAT Problem

Lyon's technical thesis is that protocol innovation has stalled, with CGNAT a particular drag on peer-to-peer applications, and that modern edge Wi-Fi and mesh techniques create an opening to redo the stack.

Barrett Lyon: "the internet has really kind of stagnated a bit from protocol design. There's like not a lot of new stuff. All of it's built on top." 00:00:07

Barrett Lyon: "one of the biggest stains of the entire internet is carrier grade NAT. It's just destroying applications' ability to do really cool stuff. And erasing that is kind of what I'm trying to go for." 00:09:07

AI-Run Infrastructure Shrinks the Insider-Threat Surface

DoxNet runs 26 global sites with essentially no human ops staff, using AI for network administration and keeping inference on its own metal.

Barrett Lyon: "we built, so far, it's like 26 sites around the world with redundant routing." 00:21:57 Headcount: "the people involved is 12... we have no network administrator, no sysadmin. That's all done by AI." 00:22:07

Barrett Lyon: "we don't have a thousand employees with access to this network... the blast radius of just the corporate structure is very minimal." 00:22:07

Joel De La Garza: "the thing we very rarely talk about, because it's kind of uncomfortable, is just how great an extent insider threat is... the most crippling, catastrophic cyber attacks are always sort of the insider threat angle." 00:22:40

Corporate Governance and Jurisdictional Separation as a Privacy Feature

Lyon treats legal structure and transparency as part of the product: a US entity, a separate Swiss entity for European operations, and open disclosure of ownership and motives.

Barrett Lyon: "DoxNet's U.S.-based, but we also have a Swiss company that handles all of European operations. So there's separation between the operations between the two regions... corporate governance actually matters in these types of situations." 00:18:30

Barrett Lyon: "we've made a very, very conscious decision that we're very open about what we're doing, who's involved, why the decisions have been made those ways." 00:18:56

2. Contrarian Perspectives

The Data Center Backlash Is Manufactured, Not Organic

Lyon, who has visited roughly 20+ data centers recently, argues public hostility is built on fabricated or misdubbed content and that the facilities are mundane and economically positive. Joel De La Garza goes further, speculating it is a coordinated influence operation.

Barrett Lyon: "I see videos where people are watching videos and it's audio from inside being dubbed and people aren't smart enough to know that. That it's fake." 00:25:17

Barrett Lyon: "especially like the big data center park in Virginia, you know, you just see bunny rabbits in the field. It's nothing. It's just a big building and a bunch of parking lot." 00:26:02

Joel De La Garza: "it's going to come out that this was all just some sort of like very interested group of organizations or interests." 00:25:34 Lyon on the water claim: "It's like, come on... they need water when they break and you have to replenish some of the water and there's some evaporation, but it's not like they're running off of water." 00:24:37

"Free" Privacy Tools May Be Honeypots, and Even Signal Is Distrusted by Some Targets

The FBI-built secure messenger story is used to show that the trust problem is structural: criminals avoided Signal as an NSA tool and migrated to a trap. For Lyon, anything free with opaque ownership is suspect.

Joel De La Garza: "the FBI had built a secure messaging app and then marketed it exclusively to organized criminal groups... don't trust Signal because that's the NSA. Okay, let's use this app because this is safe and only five people use it. And it turned out that they all got indicted." 00:17:52

Barrett Lyon: "if it's free, there's nothing free... if you're not paying for it, you are the product." 00:18:30 On mainstream messengers: "by the way, Telegram is creepy." 00:15:47

The Real Privacy Threat Is Advertisers, Not Spy Agencies

The conventional narrative focuses on CIA/NSA. The hosts argue commercial surveillance is more sophisticated and is now feeding government use.

Joel De La Garza: "people like to think the NSA is incredibly sophisticated, but you know, advertisers are probably far ahead of what they're doing. And I think you're seeing now where intelligence agencies are actually using data brokers and using the techniques of ad agencies." 00:28:21

Lyon says the data aggregation means "They probably know these events sooner than your spouse would." 00:29:51

Blocking Telemetry Doesn't Break Apps, So the Tracking Is Pure Extraction

A usability objection to privacy tools is that blocking trackers breaks things. Lyon claims the opposite.

Barrett Lyon: "WhatsApp has DIT.whatsapp.net. Apple even has Apple telemetry... you can block them. It doesn't break the app. Most websites don't have any problem with that telemetry data breaking because the rest of the site was still low[ading]." 00:28:42

The Value of Owning Everything Down to the Hardware, Even for a 12-Person Team

Conventional wisdom says startups should rent cloud and avoid physical infrastructure, especially amid GPU and power shortages. Lyon went the other way and built it quickly.

Joel De La Garza: "GPUs are in shortage. Power is hard to get. Everybody's anti-data center now. Like, how did you pull that off in probably six months?" 00:21:31 Lyon: "Very efficiently." 00:21:57

3. Companies Identified

DoxNet

Privacy-first parallel network and app suite founded by Barrett Lyon (named for his teenage hacker handle "Docs"); runs 26 sites, a mesh network, and P2P comms apps. Why mentioned: The subject of the episode and the thesis for rebuilding the internet around user privacy. Quote: Barrett Lyon: "DoxNet is kind of like this giant toolkit for freedom of speech, I guess." 00:17:01 Joel De La Garza: "Freedom from surveillance." 00:17:19

Prolexic (now Akamai Prolexic)

DDoS mitigation company Lyon founded, one of the first cloud-delivered security services. Why mentioned: Lyon's earlier success, built on the insight that defending against big attacks requires big scale that can be leased. Quote: Barrett Lyon: "you need big scale. You need to have the biggest, most expensive stuff and not everyone could afford that. So we'll turn that into kind of a leased service as a one of the first cloud services to exist... Still exists today. It's Akamai Prolexic." 00:33:23

DefenseNet (now F5 Silverline)

Lyon's later DDoS/security company, acquired and became F5 Silverline. Why mentioned: Part of Lyon's track record in network security. Quote: Barrett Lyon: "we did DefenseNet later on, which became F5 Silverline." 00:33:54

BigGravity

Lyon's video-centric CDN focused on big file and big object delivery. Why mentioned: Another scaled-infrastructure company that used technology to cut bandwidth costs for media delivery. Quote: Barrett Lyon: "Big Gravity. And that was one of the first or the first video centric CDNs... people didn't realize it hit play and just downloading a progressive file... you're just wasting bandwidth just to scroll into the middle of a video." 00:33:54

Akamai

CDN and security company that acquired Prolexic. Why mentioned: Current owner of Prolexic, retaining the brand. Quote: Barrett Lyon: "Still exists today. It's Akamai Prolexic. Yeah. Absolutely. They even kept the name." 00:33:23

F5

Application delivery and security company; owner of Silverline. Why mentioned: Acquirer of Lyon's DefenseNet. Quote: Barrett Lyon: "DefenseNet later on, which became F5 Silverline." 00:33:54

Anthropic / Claude

AI lab whose registration process flagged and then unblocked DoxNet. Why mentioned: Example of a classification/gating system that mislabeled DoxNet but resolved properly through the correct process; also relevant as the type of large AI provider Lyon distrusts for sensitive inference. Quote: Barrett Lyon: "we got flagged, I think, with Claude. And then we applied with, you know, the proper means to go through their registration process. And they opened up everything for us." 00:12:02

Cirrus (aircraft)

Manufacturer of the plane Lyon flew (with a ballistic parachute). Why mentioned: Anecdote about a plane engine failure that prompted Lyon to stop flying. Quote: Barrett Lyon: "I put 1,300 hours on a Cirrus." 00:02:40

Signal, WhatsApp, iMessage, Telegram

Mainstream messaging apps. Why mentioned: Contrasted with DoxNet as server-mediated rather than truly direct. Quote: Barrett Lyon: "All of those applications disguise themselves as you sending something to somebody else. But you're really sending something to a server." 00:00:22

Switch (Switch Data Centers)

Data center operator with facilities in Las Vegas and near Reno. Why mentioned: Cited as a famously secure/impressive data center and as the origin of the "drinks a lake" myth. Quote: Joel De La Garza: "the switch data centers in Las Vegas. You know, they got the Jeeps with the 50 cal machine guns on them." 00:23:44 Lyon: "there was this switch data center built near Reno and they built this big like lake out there... people think that it lives off the lake." 00:26:51

Starlink

Satellite internet service. Why mentioned: Changed communications logistics at Burning Man. Quote: Barrett Lyon: "when you're organizing a camp or dealing with, you know, oh, we ran out of water on the art car. It helps cause you can communicate." 00:42:54

Mayan Warrior

Famous Burning Man art car created by Lyon's partner Pablo, with a camp Lyon created. Why mentioned: Example of passion-driven projects becoming global phenomena. Quote: Barrett Lyon: "that car went from like, you know, this fun project to like a whole global phenomenon. Like it, you know, people paid money to go see it." 00:41:40

MoMA / Boston Museum of Science

Museums that exhibited Lyon's Opte Project internet map. Why mentioned: Validation of Lyon's art; permanent collection. Quote: Barrett Lyon: "that ended up in not just MoMA, but like Boston Museum of Science, uh, all over the world and different traveling exhibits." 00:36:59

Cisco Umbrella / Google (geo-classification)

Security and geo-IP classification providers. Why mentioned: Example of misclassification causing a major carrier to be blocked as "France." Quote: Barrett Lyon: "Google or a Cisco umbrella broke for like a major carrier because they classified that carrier as France." 00:10:54

ChinaNetCom / ChinaTelecom

Chinese state-aligned carriers. Why mentioned: Example of a chokehold on a population's internet access. Quote: Barrett Lyon: "it's a pretty good chokehold of the entire population using that network as an opportunity to force people into different decision-making processes." 00:08:41

Target.com

Retail website. Why mentioned: Used by Lyon in a hypothetical on why aggregated tracking matters. Quote: Barrett Lyon: "Someone will, won't know that I purchased a underwear off of target.com. And then I'm like, well, it's not really that one. It's all of them." 00:29:08

SANS

Security training organization. Why mentioned: Where Lyon presented his DDoS survival list, which led to inbound demand. Quote: Barrett Lyon: "somehow I presented that at SANS and then it got in, in Google and then people started calling me." 00:32:33

4. People Identified

Internet infrastructure pioneer; founder of Prolexic, DefenseNet, BigGravity and now DoxNet; creator of the Opte Project internet map in MoMA's permanent collection; former pilot; Burning Man veteran. Why mentioned: Guest and subject; repeated builder of scaled infrastructure who is now applying it to consumer privacy. Quote: Joel De La Garza: "Barrett Lyon, perhaps one of the most interesting people in tech... you tell me a new story that just puts everything I've ever done in alien comparison." 00:01:38

Joel De La Garza

a16z partner and host, with a security background (early-2000s DDoS bot research). Why mentioned: Host; an investor in Lyon's previous company and a DoxNet user. Quote: Joel De La Garza: "I am a incredibly happy DocsNet user and thank you for building it. It's good to get that old internet vibe back." 00:43:51

Pablo (Mayan Warrior creator)

Lyon's partner who created the Mayan Warrior art car and is bringing two art pieces to Burning Man. Why mentioned: Collaborator on a project that became a global phenomenon. Quote: Barrett Lyon: "Pablo created the Mayan Warrior and I created the Mayan Warrior Camp. And so we were partners in that whole crazy thing for a while." 00:41:40

Event Surf (as transcribed; the Opte Project's historian contact)

Person Lyon was able to speak with about the internet-mapping project. Why mentioned: Access to a figure connected to internet history. Quote: Barrett Lyon: "I was lucky enough to be able to talk to EventSurf about it and, you know, have opportunities to ask my questions to him." 00:37:25

5. Operating Insights

Run Infrastructure With AI Agents and a Tiny Team to Cap Blast Radius

Lyon runs 26 sites with 12 people involved and no sysadmins, which doubles as a security architecture: fewer humans with access means less insider risk. Barrett Lyon: "we have no network administrator, no sysadmin. That's all done by AI. And it's actually working quite well." 00:22:07

Package Cryptography Inside Normal-Looking UX

Lyon hides a cryptographic key exchange behind an "invite friend" button, and Joel notes the PKI lesson that naming the mechanism kills adoption. Barrett Lyon: "You just have to prove you're human by doing a little puzzle. Once you do that, you get a token... It just says, you know, invite friend and it looks kind of like normal. But it's actually doing a cryptographic exchange with each other." 00:15:10

Turn Flagging Friction Into a Process Win

DoxNet's name trips classifiers (double X, "doxing"), yet following the official registration path with a lab opened access. Barrett Lyon: "we applied with, you know, the proper means to go through their registration process. And they opened up everything for us." 00:12:02

Publish Ownership and Motive as a Trust Strategy

Lyon contrasts opaque VPN ownership with deliberate transparency about who is involved and why, which he says also drives community. Barrett Lyon: "we're very open about what we're doing, who's involved, why the decisions have been made those ways. And it's also kind of to drive community, too." 00:18:56

Turn a Personal Pain Point Into a Product Playbook

Lyon's DDoS business came from defending his own servers, documenting the defense list, and presenting it publicly so inbound demand found him. Barrett Lyon: "I started writing... my list of what you would do to survive. And then somehow I presented that at SANS and then it got in Google and then people started calling me." 00:32:33

6. Overlooked Insights

Corporate Network Reach vs. Consumer Network: The Same Skills Applied to People

Said almost in passing, Lyon frames DoxNet as inverting his career: taking enterprise-grade scale, long reserved for corporations, and pointing it at individuals. That implies a largely unserved market of "prosumer infrastructure," where defense-grade networking becomes a consumer product. Barrett Lyon: "now it's kind of like twisting it instead of doing this for corporations, we're doing it for people. And I haven't really seen a lot of that being done at least well." 00:34:52

The Next Attack Surface Is Inside the Private Network

Lyon notes in one throwaway line that privacy infrastructure inherits the abuse problem: once a network is anonymous and trusted internally, bad actors can use it from within, bypassing the perimeter defenses Lyon built a career on, and legal compliance still applies regardless of privacy. How a privacy network polices abuse without breaking its guarantees is the hard, unresolved product and legal problem. Barrett Lyon: "what happens if somebody gets onto my network and starts using it inside and not have to deal with those, those silly people... even if you have privacy, there's still laws and you need to at least follow them as much as you can." 00:35:22