a16zWhy One Internet Pioneer Thinks the Original Model Broke
a16z
A near-fatal engine failure in flight 1:30
Barrett Lyon describes commuting by small plane between the Bay Area and the Tahoe region, logging around 1,300 hours of flying time. On one return flight from San Carlos, the engine lost power over Oakland airport after a cascading mechanical failure, a broken piece of metal got sucked into the air intake, crushed two cylinders, and knocked out both the primary ignition and the backup magneto at the same time. He chose not to pull the plane's ballistic parachute, since it would destroy the aircraft, and instead glided to a landing at Buchanan Field. He later sold the plane and says any future aircraft he flies will need fewer moving parts and more redundancy.
Introducing Docs and its origins 6:30
The conversation turns to Lyon's new venture, called Docs, a name that traces back to his childhood hacker handle and a high school business called DocsNet, where he and a friend sold shell account access for five dollars a month to about a thousand users. He says he kept the domain for years out of a long-standing fascination with protocol design, noting that the internet has stagnated at that level, with almost everything new just built on top of old foundations rather than changing the underlying protocols. That interest, combined with rising censorship and eroding privacy, pushed him toward building an alternative network designed from the ground up to protect people from advertisers, trackers, malware, and foreign adversaries.
Censorship creeping into the open internet 8:30
Lyon and his host reflect on how the internet's original promise, an open, uncensored marketplace of ideas built by free-speech-minded founders, has shifted as control concentrated in a few hands, pointing to China Telecom and China Netcom as examples of state-controlled chokepoints. They note this creep is no longer just foreign, citing a US state with a know-your-customer rule that blocks access to certain websites, sometimes even health sites, under vague definitions of inappropriateness. Lyon argues the real problem is a mismatch, networks are being asked to solve identity and age-verification problems they were never built for, since an IP address is not a driver's license. He also describes a recent incident where Cisco Umbrella misclassified a carrier as being based in France, triggering an overreaching block of piracy sites that affected unrelated users caught in the same geographic misidentification.
Why Docs goes beyond standard VPNs 13:01
Lyon explains that most VPNs are simply entry and exit points, leasing a server and routing encrypted traffic through it to mask a user's IP address, which only partly addresses the identity problem. Docs instead builds a full mesh network with 196 domains that do not exist on the public internet, letting users register domains, lease IP or mesh addresses, and set policy almost instantly through APIs. On top of this parallel network, Docs has built peer-to-peer applications, phone calls, video calls, and chat, that run fully encrypted across the mesh without requiring phone numbers, email addresses, or names.
Encrypted mesh messaging without servers 15:30
The conversation describes a messaging system where creating an account only requires proving you are human through a small puzzle, after which you get a token you control and can delete or replace at will. Instead of relying on public key infrastructure jargon, the system hides that complexity so two friends can simply exchange a certificate that looks like a normal invite but actually performs a cryptographic handshake. Once trusted, phones connect directly over a mesh network rather than through a company server, unlike WhatsApp, Signal, iMessage, or Telegram, which all route messages through a middleman server. This direct connection removes upload bottlenecks and allows transferring files as large as 20 gigabytes between phones with low latency and multiple layers of post quantum encryption.
Why many privacy tools are not trustworthy 20:00
The speakers point out that plenty of VPNs marketed as private are themselves creepy, citing a case where the FBI built and marketed a secure messaging app directly to organized criminal groups, leading to mass arrests after users trusted it over Signal. Free VPNs are treated with particular suspicion, since without payment the user becomes the product. Docset is based in the United States, with a separate Swiss company handling European operations, and the team argues that being transparent about ownership and governance is what should set a privacy tool apart from vague, unaccountable VPN operators. They note that real risk often comes less from famous intelligence agencies and more from low level actors, including cases where crypto accounts were drained through services run in countries where intelligence agencies and organized crime overlap.
Owning the infrastructure, including AI 24:00
Docset owns its full stack from software to the physical wire, running its own AI systems for routing instead of depending on outside inference providers, built out to 26 sites worldwide in about six months with only twelve people involved and no network administrator, since AI handles that work. This small footprint is framed as sharply reducing insider threat, a risk the speakers say is rarely discussed despite being behind many serious cyber attacks. The talk shifts to public misconceptions about data centers, dismissing claims that they constantly drink water or fake background noise, and suggesting that opposition to data centers may be driven by commercial interests manipulating public opinion, much like targeted advertising and data brokers now mirror the techniques once associated with intelligence agencies.
Data tracking and AI combined 30:01
Advertisers and governments collect countless small data points from every website you visit, and once aggregated, those points can reveal whether you drink coffee, when you wake up, what you earn, and even whether you are expecting a child or going through a divorce, sometimes before people close to you know. Feeding that accumulated data into a large language model lets anyone ask for a profile of a person and get a surprisingly complete answer. The goal behind the new network is to strip away that kind of tracking entirely and bring back an internet that lets people connect and create without being watched by advertisers or governments.
From DOS defense to cloud services 32:30
The guest's path into cybersecurity started in high school, when attacks on his own servers pushed him to develop techniques for surviving denial of service attacks, which he later presented at a SANS conference. That work led to Prolexic, one of the first cloud-based services for protecting businesses from attacks tied to extortion and even rival companies sabotaging each other during peak sales seasons. He later built Defense.net, which became F5 Silverline, and Bit Gravity, an early video-focused content delivery network that saved customers money by fixing wasteful bandwidth use during video streaming.
Art, a book, and Burning Man 36:02
While studying philosophy and theoretical AI in college, he began mapping networks for penetration testing, which turned into a bet that he could map the entire internet, a project he finished after a bicycle accident left him immobile; it became the Opte Project, later exhibited at MoMA, the Boston Museum of Science, and other venues worldwide, and MoMA still holds two of his pieces in its permanent collection. A book also exists about the Prolexic years, covering the hunt for Russian cyber criminals who were extorting and attacking clients, a chase that once sent him to Moscow before he was warned to leave. He also co-created the Mayan Warrior art car for Burning Man with his partner Pablo, though this year marks the first time it will not appear on the playa, and he noted that Starlink internet there helps with logistics but works against the spirit of the event if used for entertainment.
AI-generated summary. It can be wrong or incomplete - check anything that matters against the original.
