Jan 2, 2019 · 47m · a16z
a16z Podcast | Crypto, Security, CS, Quantum Computing, and More with Our New Professor-in-Residence
0:00 / 0:00
▶ Watch on YouTube →
gold bands on the timeline = statements, start to end. Hover to read, click to jump. CC turns on captions
In this episode of the a16z Podcast, hosts Sonal Chokshi and Michael Copeland interview Stanford professor Dan Boneh about his role as a16z's professor-in-residence, exploring critical developments across cybersecurity, applied cryptography, zero-knowledge proofs, quantum computing, and computer science education.
How this conversation actually went
Every chapter scored 0–10 on four independent dynamics. Hover any point for the reasoning behind the score. The host holds 15% of the talking time here. How this is scored →
The host as informed peer 3.1 Guest teaching 3.3 Guest disagreement 0.7 The host pushing back 1.6
speaking balance: gold is the host, purple is the guest (3 minute bins)
Sharpest disagreement ▶ 37:52 Dan corrects Michael's assumption about enterprise security battles
Dan directly interrupts and corrects Michael's inference that security tension is no longer a battle, clarifying 'No, no, I didn't say that' before distinguishing big companies from startups.
Hardest push from the host ▶ 27:47 Sonal challenges the core premise of mathematical trustSonal directly questions Dan's fundamental premise, asking if it is naive to trust math given state-level resources like the NSA and historical hedge fund failures.
Biggest teaching moment ▶ 29:05 Dan explains why faster computers actually help encryption defendersDan delivers a counterintuitive lesson showing that exponential mathematical difficulty means increasing computer power benefits system security far more than attackers.
The host holds their own ▶ 9:30 Sonal details advanced spear-phishing tacticsSonal demonstrates detailed domain knowledge by breaking down social graph profiling and cloaked phishing messages crafted without telltale typos.
the scores for every segment, with the reasoning behind each
| Chapter | Topic | The host as informed peer | Guest teaching | Guest disagreement | The host pushing back | Why |
|---|---|---|---|---|---|---|
| Dan Boneh's Background and Growing Importance of Cybersecurity | 2 | 3 | 1 | 1 | Sonal asks whether political environment shifts around cybersecurity stem from the Snowden leaks. Dan gently reframes the issue, explaining that Snowden is a minor part compared to the massive trend of everyday life and personal data shifting online. | |
| Computer Science Education Trends and the CS+X Initiative at Stanford | 1 | 2 | 0 | 0 | The hosts inquire about computer science growth trends at Stanford. Dan explains the expansion of CS majors and introduces the CS+X initiative, while hosts maintain an open, inquisitive tone. | |
| Demystifying Applied Cryptography versus Theoretical Cryptography | 3 | 4 | 0 | 1 | Dan contrasts theoretical and applied cryptography before discussing how research projects convert into companies. Sonal demonstrates subject knowledge by identifying UI/UX design as a key missing component for technical research adoption, which Dan enthusiastically confirms. | |
| The Vulnerabilities of Passwords and Evolution of Second-Factor Authentication | 4 | 3 | 0 | 1 | Dan explains the mechanics of multi-factor authentication. Sonal adds specific expertise by explaining spear-phishing mechanics, social network profiling, and cloaked messaging without typos. | |
| Biometric Insecurities and Institutional Adoption of Second-Factor Authentication | 3 | 5 | 2 | 2 | Sonal proposes biometric authentication, but Dan corrects the premise by highlighting how easily fingerprints are stolen via water glasses and their non-revocable nature. When Sonal reacts that a 6 percent 2FA adoption rate sounds tiny, Dan politely reframes it as a remarkable success for security tech. | |
| Invisible Security, Central Repository Breaches, and Zero-Knowledge Solutions | 4 | 4 | 1 | 2 | Sonal advocates for effortless, invisible security based on behavioral patterns referenced from PARC and Stanford research. Dan educates on the limits of implicit security due to social engineering vulnerabilities and explains central repository breach risks. | |
| Blockchain Innovation and Zero-Knowledge Solvency Proofs for Bitcoin Exchanges | 4 | 4 | 1 | 3 | Dan presents zero-knowledge solvency proofs for Bitcoin exchanges. Michael pushes back with an informed query, asking how users can trust zero-knowledge math compared to FDIC institutional guarantees, prompting Dan to explain mathematical hardness. | |
| Evaluating Mathematical Trust and Mitigating the Quantum Computing Threat | 6 | 5 | 2 | 5 | Sonal directly challenges the premise of trusting pure math, pointing to state actors like the NSA and failed mathematical hedge funds. Dan counters by revealing the counterintuitive fact that growing compute power actually favors cryptographic defense due to exponential key difficulty scaling. | |
| Proactive Threat Modeling and Security Culture for Software Startups | 3 | 3 | 1 | 2 | Dan describes proactive security testing and threat modeling for software. When Michael assumes that speed versus security tension is no longer a battle in tech, Dan explicitly corrects him, clarifying that this progress applies mainly to tech giants while startups still rush vulnerable code to market. | |
| Transforming Higher Education with MOOCs as 21st-Century Interactive Textbooks | 3 | 3 | 0 | 1 | Sonal highlights how traditional universities resist giving away core lectures for free. Dan clarifies that MOOCs serve as interactive 21st-century textbooks that enhance rather than replace campus learning. | |
| Conclusion and Future Collaboration with Andreessen Horowitz Startups | 1 | 0 | 0 | 0 | The conversation concludes with brief wrap-up remarks where Dan expresses enthusiasm for evaluating startup pitches with Andreessen Horowitz. |
Statements from this episode (19)
Boneh: Shift to online life drives cybersecurity focus more than Snowden
“I think Snowden might be actually a small part of it. I think the bigger issue is that more and more of our lives are going online, and as more of our data is available on computers, it's obviously, obviously also available to be hacked and stolen, and so comp…”
Boneh: Computer science is now the largest major at Stanford University
“The computer science major at Stanford is, is exploding in the sense that we are now the largest major on campus and it's continuing to grow.”
Boneh: Computer science is a top-two major for women at Stanford
“It's kind of interesting that we're even the largest either largest or second largest major for women on campus. So if you literally count number of women, computer science is now either the largest or the second largest on campus.”
Boneh: Cryptography uniquely bridges deep theoretical math with global real-world deployment
“It's one of the few areas, I have to say, where you can do deep mathematics, and at the same time, it would be extremely applied and deployed and used by billions of people all over the world.”
Boneh: Advanced security technology will fail to deploy without strong user interfaces
“You could have the best technology, but if it's not wrapped in a nice user interface that people have fun and, you know, they're comfortable using, it's never gonna get deployed. It's never gonna work.”
Boneh: Smartphone-based 2FA fails when users browse directly on their mobile devices
“Unfortunately today all second factor authentication schemes are essentially based on, well, the smartphone. And what happens if you only interact with the website through your smartphone, right? So in fact, we're hearing more and more of people that the only …”
Boneh: Smartwatches are ideal 2FA mechanisms because they stay on the body
“The direction we'd like to go at, to move to, is where the second factor is something that's always on the human body. So, one of the beautiful applications for smart watches is exactly a second factor, right? My smart watch, my watch actually, is always on me…”
Boneh: Unlike passwords, compromised biometric fingerprints cannot be revoked or reset
“If your fingerprint, if you suspect that your fingerprint has been somehow compromised, there's no way for you to revoke your fingerprint.”
Boneh: Only 6% of Gmail users had enabled second-factor authentication in 2018
“There was just a paper published last summer that claims something like six percent of Gmail users.”
Boneh: The most impactful security technology operates invisibly to the user
“So the best security technology that has had the most impact in the world is security technology that is, is invisible, that people don't even know that it's there.”
Boneh: Implicit authentication false positive rates remain too high for mass adoption
“The false positive rates on that are still a little too high for it to be massively and widely used, but that is definitely a very interesting direction.”
Boneh: Security technology's ultimate goal is narrowing attacks strictly to social engineering
“Is to make it so that the only attack that's possible on you is a social engineering attack.”
Boneh: Stanford researchers developed a zero-knowledge solvency proof for Bitcoin exchanges
“So what we designed is basically A mechanism that allows you to prove solvency, but do it in a way that's called zero knowledge. So you can prove that you're solvent, so an exchange, can prove that the amount of bitcoins it has is more than the obligations tha…”
Boneh: Faster computers help cryptographic defenders more than they help attackers
“And the reason is because as computers get faster we can you know, end, end user machines can actually handle larger and larger numbers. But if you just make the number, like, twice as big, Factoring it is not twice as hard. Factoring it becomes exponentially …”
Boneh: Functional quantum computers would break modern internet cryptography and Bitcoin
“All the world of crypto that we use on the internet today, and for Bitcoin as well, ah, would be well, would be broken if someone was able to build a quantum computer.”
Boneh: An operating quantum computer will likely be built within his lifetime
“I would speculate that in my lifetime, We'll probably see some sort of a, of operating quantum computer.”
Boneh: Big tech security teams possess the authority to delay product launches
“In big companies like Microsoft, Apple, Google security teams in fact are involved in the process from the design phase, which is really important. And then if a product is about to ship out and a security, the security team discovers a big vulnerability, they…”
Boneh: Post-launch UI security fixes face severe user adoption friction
“Cause once your product is out there, once you build a user base, your users are used to using the product in a particular way. If it turns out that you have to make changes in the user interface because of security concerns, ah, that actually would make it ha…”