BBW22 - Day 1 - Wholesome Crypto
Boston Blockchain Week·Mon, Oct 9, 2023, 12:00 AM
Transcript
[Music] thank you so much everyone thank you again uh for being here this week and thank you Tanner for joining me for joining me today thank you as you can tell I had my hands full today so yeah came along just supporting me too so it feels better now that we're all here um but yeah there's so much to impact from you and what you've done in this space I know you're working you co-founded fio which is a web 3 security cyber security platform for checking your Audits and your crypto platforms and more to come but before we get into what you're doing now with your business I want to know a little bit about who Tammy was before ever even hearing about blockchain or Bitcoin or any of that stuff um Tammy is a Serial entrepreneur I come from a family of entrepreneurs so I I like to to joke that it's just in my blood um but you know I I kind of face planted into technology back in about 2009 when I just was I was actually running a small business and I thought that there was some really interesting use cases for technology around helping small businesses succeed and just businesses in general and from there I kind of worked my way deeper and deeper into the technology rabbit hole and found myself around 2017 in crypto yeah it's hard not to get sucked in once you're in Tech it's like what's this what's that let me find out more about this different aspect of it and just going into it so entrepreneurship runs in your family this is something you kind of felt destined to do run some type of company whatever it is whatever you're passionate about but when did you actually hear about Bitcoin well in my first startup I was I I was mentioning today's team we were talking earlier but in my first startup which was focused on helping small businesses use social media so firmly in the web too I'll never forget some of my Engineers were like there's this thing called the Bitcoin and I told them shut up and get back to work I didn't I didn't understand what it was I said we get paid in real money um you know little did I know it's hard so then you're hearing about the Bitcoin your engineers are talking about it because they're trying to find every any new industry they can uh learn about and at what point did that light bulb click to you this Bitcoin this blockchain Tech this cryptocurrency Industries is actually going to go somewhere and you have to get into it before it's too late when I started to see for it so and this was during the Ico boom and so there was a lot of wild west stuff going on but what was actually really interesting about that is there was a lot of people just trying a lot of different crazy stuff and a lot of it didn't work including some projects I was on early on so you know you learn you learn by doing but what I did see even while I was saying was there a utility for this or utility for that I saw that there was going to be a utility for something and it was in the project that we worked on a small project in 2017 that I met one of my co-founders and um he's my co-ceo now and I said to Brian I'll never forget Ryan I don't know what I'm doing next but you're doing it with me and he said I agree bring me over here that's amazing and then as we were getting into the industry were you already in cyber security at that point no no we owe our cyber security so we actually started our company has a an interesting origin story has an interesting origin story we started off by accident um like most like like the most really good thing so Brian and I were partners in business and my life partner and now business partner which was by accident he was involved in some web 3 stuff and asked me and Brian to join him in a presentation and about blockchain and this was a while ago 2018 and so we were explaining what it is what it isn't and and one guy kind of raised his hands and he said I run a I run a Pulp and Paper fiber company and nobody believes me that I don't I don't Source from the rainforest can blockchain prove that we said it probably can yeah actually and he became our first client and we accidentally formed a company you're solving a problem that someone has and that's how you start companies it's perfect um so this is now your head's starting to spin probably a little bit okay there's some tech around this I'm I can actually build something what what about it really got you more excited other than the monetary value of crypto and this technology that can solve tracking you know where trees come from or any type of any type of um shipping what what really got you hooked on all right we got to build this big and build it in the security space well while we were doing you know our Enterprise clients and we started off actually being called BT block the BT stood for break through the block and using the blockchain to break through it but while we were doing that we realized it's going to be a lot of really smart Builders but uh our fourth co-founder Thomas oliverson is a white hat hacker has been doing you know he's one of those guys that the banks would call to say break this legally and he has some very crazy stories about that but we were called upon at that point clients were coming to us saying we don't need you to build it we need you to check it and that's when we thought okay you know what we have an interesting expertise here let's use this for good and and let's create a consulting company around code audits um with the with the view to eventually create our own products that would help yeah yeah that's an interesting interesting industry to be in is the banking Industries is trying to find out all right where's this money going from and going to and also making sure that it's legitimate money uh and I think that crypto solves a lot of that so that's why we're all here and as you're uh building this company and finding more and more about blockchain was there anything that's stood out differently from web 2 and web 3 to you yes and um the biggest thing is that it is immutable which is great because you always know what happened it's not so great if you deploy code with bugs because there it is everyone can see it and it has bugs um so so there's there's big differences the other thing and I think that I think is actually the most important is the decentralized nature the fact that you could we could move to a world where we're not the product anymore which I think was has been the biggest web 2 problem is that you know somehow there was this thing web one called the internet right and we all jumped on it and then oh it's supposed to be free okay I guess it's supposed to be free oh how are we paying for this oh with our data and I think people have started to wake up to that and that's that's where the web 3 Revolution is really going to come from people just saying I've had enough of this I want to own my data I want to own my security I want just to be a citizen of the virtual world that's true it's tough because when you are using Google Amazon or Facebook other Instagram you are giving your data that is your currency of payment to use our platform and it's hard to say hey everyone start paying for Instagram how many people here would actually pay to use Instagram nobody no no one wants to actually pay any money to use Instagram it's actually I just take my data it's fine and it's hard it's hard to actually break away from that because then they get such a hold on your family and friends and everyone's on there and you want to share your stories but you just don't want to give everything up or money for it and yeah that's true but the web 3 Industry you have to start to own your own data and you do pay a little bit in ethereum or algorithm or whatever currency they're using to start owning your own data and sharing it as you wish as you want to and as platforms are being built I know you're working with cyber security so you have to actually audit these contracts and audit these different systems it's there must be some type of I guess pet peeve in that industry where you're like I did everything I could to make sure your platform was not vulnerable but you still got exploited somehow yeah that is a pet view because we work really hard and I joke sometimes like we give people a perfect alarm system and then they leave their front door wide open and people walk right in and and the biggest issue that's plaguing web through right now is fishing that is uh that is the biggest problem your code can be super secure but if somebody creates a look-alike domain pretends to be you they're going to fish and it's going to be your community of users that gets messed up yeah and it's hard because especially during the Ico boom if anyone was around for that it's a lot of fishing was happening where either send fake links and fake email addresses and just directly message you online saying hey make sure you're part of this ISU don't forget to invest here's the address and so many people would lose their funds because it sends it to the wrong place and it's hard to take care of that human vulnerability but thankfully you can just take care of the technical vulnerabilities and work on that aspect of it yeah and I think what's really interesting is web 2 isn't necessarily helping web free so we find sometimes that the phishing links are actually number one on Google because Google lets the fishing link sponsor it we're like all right there's some problems up oh man and yeah being in this industry it's 24 7 it's a global industry it's hard to keep your mind off of it if you don't look at Twitter crypto Twitter for a week you're kind of left behind but sometimes you do need to just take a break so I'm wondering what does Tammy do to get her head space out of crypto out of work you have a family you have a dog it's not that easy to keep all that ahead of you so what do you do for like your own headspace um well we um no the truth is I mean I was born an entrepreneur so I I do get a lot of joy out of out of my work but I get a lot of joy out of my family which is why my son is in the back and the dog is here the whole family is here man so yeah then I'd love to learn a little bit more also about where you are taking uh file next and what is what are your Visions for that future well while we were doing all the code Audits and again we started just we're getting crazy about you know all this fishing and all the all the breaches and all the vulnerabilities that we just can't protect against with line by line code reviews um we built a platform and the reason we were able to build this platform is one of our our six co-founders um some people collect coins uh he collects data from the dark web and since 2013 he's been making a database and so we now sit on the world's largest database that is in a three-letter agency credentials 23 billion we've cracked two-thirds of them which means that every person in this room their password has been leaked included now why do we do that we're the good guys right thankfully we do that because um the founding team you know obviously we have a business we make money we've self-funded that's great but we're at a point in our careers where we need to just do something something to fix things so our thing is cyber security should be right um it's ridiculous that we're in 2022 and people their legacy passwords that they have or the reason that their bank accounts are being drained um so we're actually it's in beta anyone can test it if they want totally free but we're releasing the world's first truly decentralized free password manager using public private key technology feels like setting up your metamask wallet and we're hoping that if we have Smart Security people not just us there's plenty of great security people in the industry doing the the middle of our code reviews if projects are actually taking phishing seriously and doing ongoing threat monitoring and then if the community of users just stop using their dog's name and their birthday A lot's gonna yeah I know I'm Sorry by the way this is sisu and what year were you born um very good just just asking see if I had a live presentation I would just pull up his password right here right and then hack my bank he's gonna have to download uh fio ID later and you'll be able to pull a report that's the other thing oh that's the other thing we also find that even though you tell people hey your password's been breached they're like me I change it and we're like yeah but you change it change it by like a letter or a number and exclamation point so this is what we found out this is why we crack them we tell people because it's one thing to say I know where you live okay fine you can go on Google street data and find all that up it's a little different when you're like and I know what's in the bedside table drawer so we're not trying to scare people as much as just motivate everyone to stop being the weakest link in this because web3 has such a great future if we can get over kind of the fear the Fear Factor the hype and the fear so if we can get people to just be more secure then they'll be more apt to put their money into this absolutely so we feel like there's going to be a transition period my co-ceo says that we let we want to be the bridge from web 2 to web 3 because to sit there and just think that at this stage everyone's going to jump my mother's not jumping to web3 she's very happy with what I'm doing but she's although my mother did want to buy Bitcoin very early and nobody listens there but before you did yes she was the first that's surprising my dad didn't know and probably gotta get Bitcoin anyway hello yes oh man so then um now is this also going to be like a crypto wallet you'll have to ask the product the product people about that no no it's gonna feel it feels like madamask it feels like men mask I mean I think the the goal is that if we can just get people we don't want to have like a ux problem with this stupid keep it super simple right yeah the kids method so we're starting off just showing people that they're vulnerable having them do it like a metamask wallet but it's for your right density and start using proper you know pass keys thanks to Apple they've recently started talking about pass keys so it's becoming a thing instead of a password the problem is when you deal with the apples and the Googles Apple has passed Keys Google has passed Keys you know what if you have a Chromebook and then yeah so so it's still not that whole vision of a truly decentralized portable identity which is why we're we're doing this and that's like next question wants to bring up is that industry why is that so important to you is there a personal passion behind keeping people safe has something Have you ever experienced a hack or an exploit of your own or a family member we kind of feel like we can look at it as a glass half full or half empty when you think about 23 billion leaked credentials you can wake up and feel pretty gloomy about the state of the world or you can look at it as like a calling like okay what if we can get ahead of the bad guys because my ultimate goal is that if enough people normal people just get smarter about it we'll never beat the bad guys but we'll stay one step ahead of them I mean if your password constantly dynamically changes you don't even know what it is because you have a pass key so what if it gets leaked because it's true by the time they try to log in it's it's not that anymore and I think we're trying to get ahead of it we're trying to get people to crowdsource fishing across all platforms I'd love to see a a time when my son can go on Discord with his friends and not have one of them say oops oops I clicked that I mean that's that's always like the worst sound to you like if someone gets a text one of your friends and like this this text from Amazon came in and they're about to click and like no don't don't do it out of there clock and Tackle I know jump down now actually Thomas Thomas um our CTO and Technical co-founder um he I'm sorry what's up for you is she oh yeah she's spinning out okay um he just was on stage at black hat uh the cyber security conference in Vegas I'm just gonna put her on the ground and see if she'll kind of run around there she's anxious to talk maybe yeah I think she dropped her treat um and he actually on stage using the fact that we have all these leads credentials and we have 500 million phone numbers that were also leaked he bypassed Google 2fa and pretended to be Google and it's called smushing by the way SMS fishing it's wild that you can just do it live so it's kind of like this can be any one of you right now like I have the capability to view your own Google account and it's scary because I happened to me once I got um Sim swapped where out of nowhere my phone just stopped working like no internet no data I was like what what's going on and it was like late at night so I think it was happening in different countries so I fell asleep thinking whatever I'll wake up tomorrow it'll fix itself but no I have to go with the T-Mobile like this my phone's not working anymore then when I finally logged back in I saw my email has been compromised trying to log in attempts but thankfully Google did do a good enough job where they didn't hack into my actual email account you just see they attempted to so that was yeah super scary for me but thankfully nothing came out of it for them so it's tough but um I also want to know a show of hands here how many people actually use a password manager like one password bit Ward and anything like that all right we got like three yeah you got a few customers yeah well I mean there's password managers out there unfortunately uh one of the latest data dumps that we have is one of the password managers so there's the problem um centralized password management is it it makes it easier but it's not using the key here I think is just there's some brilliant technology that's out there and I I'd love to see as many companies as possible just with their own unique expertise how do I take this this concept of truly decentralized of immutable which could be immutably great or immutably bad if you you know didn't deploy very good code but and and how can I use that to improve whatever it is that I'm proficient at yeah and that's yeah stuff I needed in this industry because it is so easy because the more the reason why we love having ownership in our banks or our governments is because they worry about all the household being hacked and if you do get hacked you think so you have FDIC to get money back but in crypto world you don't get a chance to get your money back it's extremely rare especially in exploits when there is a hacker trying to prove a point that they could hack a system but then thankfully they return the money back but sometimes they don't and there's no one there to give it back to get it back for you and it's now more than ever it's important to keep your information secure and yeah and as you're in this industry and as you're seeing more and more and more I want to also your wholesome crypto moment a time where you felt like the industry was good you felt good being in it made you feel happy and excited you guys just let me come and do this with the puppy so I would say this is a pretty wholesome moment but um there's there's so many I mean I I think that when whenever we see something like really Innovative and and I it drives me a little nuts when people like oh the token price it's like whatever who cares is there utility yeah so every once in a while you'll just see something super interesting like oh I didn't realize you could do that or like when that guy early on in our business was like I know where the trees are I'm like oh that's cool um and by the way we did prove it that you can you can use paper it's okay um I can tell you a lot about paper I mean any paper companies here but yes that's amazing and it's definitely appreciated in that in that industry too um and as you're growing more into this have you have there been any companies that you've worked with that you've done everything you can and again like we said before helped with their exploits but they it's it's almost hard to convince them to actually go through with changing that code because sometimes the risk is just worth the reward with ours our team is I don't know how I can say this I we're Jedis and so I think we we proved pretty early on that we know what we're doing um I don't like to say we make the developers cry but sometimes we do because it because you have to you have to be you have to be harsh you have to say your baby's ugly because that's how everyone's safer but the fact is they pay us a lot of money to say that yeah so so it is our job so I don't think we've ever had a project where we've said to fix something and then they just went live without fixing it we have had issues where people have come to us saying oh can you do a code audit and we say well we can but it'll be you know two or three weeks and they've deployed anyway and we've watched them get get hacked right there I kind of want to ask for names but I don't know if I'm allowed to so I'm just not going to and and the biggest problem I think with that is a lot of the nfts because it's really all about the hype you got to get people to be part of a drop yeah so there's just a lot of people pushing forward saying we got to get it out we got to get it out and one thing that Michael Bjorn who is uh the sixth or six of us the sixth co-founder and head of the cyber security research practice says he says you know code review should not be a rubber stamp it should be an ongoing kind of mental change in how you think about how you cope and so he's he's built a team that becomes kind of extensions of people's development team and I think that that's just important because it needs to be a conversation and not a oh we hit under a rock and your code sucks so fix it no it has to you have to work with them together team effort Teamwork Makes a dream work um so one of my last questions I wanted to ask is if it wasn't for crypto it wasn't for blockchain and you still have that entrepreneurial Drive what would Tammy be doing instead of this I that's a good one no idea it's tough time okay I'll say this I think that I would always be doing something that's on the bleeding edge of where technology is going and me not being the technical founder right I am I'm a business girl I mean I'm a marketing girl but when I see how technology can solve real problems I think I'll always be I would always be doing something that helps regular humans use technology to do awesome things that's amazing thank you so much Tammy for joining me I'm excited to see file keep growing and excited to use a password manager and test that outfio.com please we need beta testers free no day no data just tell us tell us how to make it better because we're building it for you guys so thank you Tammy thanks [Music]
Automatic transcript — names and jargon may be misspelled.