Interview, Podcast
a16z Podcast | The Hard Things about Security
- Sweden is projected to maintain high innovation output despite cultural tendencies toward frugality, leveraging a combination of flat organizational hierarchies and healthy disagreement.
- The security industry is expected to shift from software and biometric reliance to hardware tokens and hardware roots of trust to resolve the limitation where software cannot adequately protect itself.
- A superior security model involving hardware authenticators combined with passwords or biometrics is anticipated, as hardware tokens generate unique, non-copyable passcodes that mitigate the irreversible nature of compromised biometric data.
- Cell phone numbers are predicted to remain insecure for authentication due to portability risks, contrasting with physical keys that can be secured in safes.
- The FIDO standard is expected to become the universal authentication protocol, enabling a single key to access multiple services, with full functionality for banks and US government services targeted for implementation by the end of the current year.
- Authentication and encryption protocols are forecast to expand into payments, the Internet of Things (IoT), and user-owned identities, with no centralized entity or service provider expected to own or control the associated keys.
- Security architecture is trending toward the hardware layer, evidenced by special-purpose chips on separate dies, such as Google's Titan, to isolate sensitive components in an environment where full trust in software and networks is deemed impossible.
- Hardware specialization is predicted to disrupt the service sector, with future iterations of the FIDO protocol enabling passwordless authentication through combinations of hardware keys, biometrics, and geolocation.
- Adoption of new standards is expected to be gradual due to cultural barriers, behavioral changes, and the time required for standards maturation, though big banks and legacy businesses will eventually integrate these standards into browsers without requiring special hardware.
- The future of security will rely on open standards and transparency rather than "black box" models, with open-source initiatives driving early adoption among technical communities.
- Security features are projected to become ubiquitous and integrate into everyday objects like credit cards due to miniaturization of chips, mirroring the integration of mobile phones into daily life.
- The convergence of Swedish R&D capabilities with Silicon Valley boldness is expected to yield optimal results, provided internal team communication barriers are overcome, as these remain a primary source of startup friction.
- Startups that demonstrate profitability and strong customer traction are anticipated to attract investor interest organically rather than requiring founders to pursue capital actively.