Why One Internet Pioneer Thinks the Original Model Broke
Barrett Lyon, founder of DoxxNet, explains why he believes the internet's protocols are due for another wave of experimentation and why traditional VPNs only address part of the privacy problem. He describes a mesh network where users communicate peer-to-peer without central servers, the company's owned infrastructure and locally run AI, and the growing threat of ad tracking combined with AI aggregation. The conversation also covers lessons from DDoS defense, internet mapping, and a career spanning networking and art.
The Case for Rebuilding the Internet’s Protocols
Barrett Lyon argues that we are at an inflection point where cheap, scalable AI meets an internet already saturated with tracking data. His central complaint is that the internet has stagnated at the protocol level: ‘The internet has really kind of stagnated a bit from protocol design. There’s like not a lot of new stuff. All of it’s built on top.’ Most innovation has happened in layers above the foundational protocols, and he sees carrier-grade NAT as one of the biggest obstacles, because it breaks the peer-to-peer applications the original internet was meant to support. Erasing that constraint is the goal behind DoxxNet.
A Detour: The Engine Failure Over Oakland
Lyon opens with a story that frames his attitude toward risk and redundancy. He was commuting by plane from the Bay Area to the Tahoe region, which he preferred to a 45-minute drive that used to take 15. Over Oakland, the engine began to misbehave, and shortly after he thought he had stabilized it, it lost nearly all power. He messaged friends that he was declaring an emergency, looked for a field, weighed deploying the ballistic parachute, and ultimately landed at Buchanan Field. The root cause was a cascade of three unrelated failures: a broken control valve lever that ended up crushed in the cylinders, a fault in the electronic ignition system, and a backup magneto that also failed under higher RPMs. His takeaway is simple: ‘If there’s ever another plane in my life, it will have less moving parts.’ The episode is a useful metaphor for his broader engineering philosophy, which values fewer single points of failure.
Origins: From High School Shell Accounts to a Parallel Network
The name traces back to Lyon’s teenage hacker handle and a high school business called DocsNet, which rented shell accounts for $5 a month to around a thousand users before cloud computing made that model obsolete. He kept the domain and his fascination with protocol design. Two forces pushed him toward building something new: the steady erosion of privacy and the rise of censorship, and the realization that VPNs were the most visible response to both. He reflects that the original internet was shaped by free speech maximalists, and that control has since concentrated in a few hands, citing state-controlled telecom networks as an example of how a whole population can be funneled into specific decision-making processes.
Censorship Is Creeping Into the United States
Lyon sees censorship increasingly appearing within the US, through know-your-customer rules and access blocks justified by age or content category. His objection is architectural: the network is being asked to solve an identity problem, and ‘an IP address is not your driver’s license.’ Restrictions that depend on who a user is belong at a different layer of the stack, not in the network itself. He also describes a geolocation failure where a carrier was misclassified as being in France, after which a blocking policy aimed at piracy sites hit a much broader population. Similar misclassification problems appear in content filters, which flagged a companionship chatbot as adult content. DoxxNet itself was briefly caught by filters, reportedly because of the name’s letters and its association with doxing, and was later resolved through the proper registration process.
Why VPNs Are Not Enough
Lyon’s critique is that most VPNs are essentially entry and exit points. They lease servers from landlords, install their software, and route traffic through a node, which changes the apparent IP address but leaves the underlying infrastructure opaque. Users assume security that depends on who owns the servers, what policies apply, and what the leasing parties do with the data. DoxxNet treats the VPN protocol as a way into something larger. The team built a mesh network spanning 196 domains that do not exist on the public internet, where users can register domains, lease addresses, and set policy within milliseconds. On top of that, they run peer-to-peer phone calls, video, and chat as best-in-class applications that do not depend on a central server. The system requires no phone numbers, email addresses, or names.
Transient Identity and Direct Connections
The onboarding flow is designed to avoid visible cryptographic complexity. A user creates an account by solving a puzzle that proves they are human, receives a token, and can later delete the account and start again. To connect with a friend, they exchange a certificate, which they experience simply as an invitation, though it performs a cryptographic exchange underneath. Lyon notes a lesson he learned about PKI: ‘if you tell people it’s PKI it’s not going to work,’ so the abstraction has to hide the layer completely. Once trust is established, phones on the mesh talk directly to each other, which enables file transfers with no size limit. He claims it can move a 20 gigabyte file point-to-point with low latency, protected by three or four layers of encryption, including post-quantum protections.
His critique of mainstream messengers is pointed. He argues that WhatsApp, Signal, iMessage, and Telegram present themselves as direct communication while sending data through a server, which then holds the message until the recipient pulls it. The upload path can be slow and geographically awkward. In his model, ‘your phone becomes a server to your friend,’ removing the intermediary entirely. He also says Telegram is ‘creepy’ and that intermediary servers are where the real questions of ownership and policy live.
Ownership, Infrastructure, and Operating Without a Sysadmin
A defining feature of the company, in Lyon’s view, is that it owns everything from software to wire. The network runs on its own metal across about 26 sites worldwide with redundant routing, and the AI components that handle routing and inference run locally rather than through third-party providers. Lyon says the team of roughly 12 people has no network administrator or systems administrator, and that much of the operation is handled by AI. The blast radius is small because few people have access, which he sees as a direct answer to insider threats, a risk he believes is consistently underrated in discussions of catastrophic cyber incidents. Physical security involves cameras, motion alarms, and even a discarded idea for laser tripwires, which turned out to conflict with data center lighting practices.
Lyon also explains that corporate structure matters. DoxxNet is US-based, while a Swiss company handles European operations, and the regions are kept separate. He emphasizes transparency about who is involved and why decisions were made, arguing that users should not have to trust a company that refuses to explain who owns it and why it exists.
Commercial VPNs, Intelligence Agencies, and the Criminal Underbelly
Lyon describes the hidden risks in the VPN market. Many services lease bare metal from hosts whose policies and jurisdictions are unclear, and he admits that building infrastructure worldwide quickly was harder than expected because, without owning the equipment, you cannot set policy. Beyond the carriers and interconnects lies what he calls ’the creepy underbelly’ of bare-metal-as-a-service. He also recounts the FBI-built messaging app marketed to organized crime, which led to arrests and indictments after members trusted it over Signal. The broader point he and his interviewer draw is that the most immediate threats are often not nation-state actors, but low-level exploitation by commercial operators and criminal networks that intersect with the intelligence apparatus. Free VPNs, in his framing, have an obvious business model.
Data Centers, Misinformation, and Public Opinion
Lyon is frustrated by the public discourse around data centers. He points out that they are largely boring, closed systems that use water mainly for cooling and occasional replenishment after failures, not as an ongoing consumption model. He says he has visited more than 20 facilities recently and has never seen protesters, only bunny rabbits in the fields of Northern Virginia, one of the richest counties in the country thanks to data center tax revenue. He reads the framing of data centers as a campaign, arguing that commercial or political interests may be shaping public opinion through viral content on Instagram and TikTok. The interviewer adds that this is a dangerous moment for technology policy, because decisions are being made on framing rather than facts. Lyon’s position is that building infrastructure now matters, and that crippling it would produce bad decisions.
Tracking, Telemetry, and Aggregation at Scale
The discussion turns to advertising technology, which Lyon sees as the deeper problem. He notes that many apps embed trackers, including WhatsApp and Apple’s telemetry, and that blocking them generally does not break apps or websites. Individually, a single data point might seem harmless, as one wealthy critic argued about purchases at a retailer. The danger comes from aggregation. Combined across apps and sites, these signals can reveal caffeine habits, wake times, income, shopping frequency, and life events such as a pregnancy or a divorce, often sooner than a spouse would know. Lyon is particularly concerned about what happens when that data meets AI. The interviewer describes it as ‘coin operated intelligence at scale,’ where an LLM can be asked to ’tell me about this person’ and returns a profile. He suggests this could also enable targeting of movements, including the public campaigns against data centers. For Lyon, removing trackers is a core function of the network, a way to recover the older internet’s ability to connect and create without surveillance.
Early DDoS Defense, Prolexic, and Scale
Lyon’s background in network defense began when attackers targeted his high school servers, forcing him to learn how to survive denial-of-service attacks. He wrote a list of defensive techniques, presented it at SANS, and soon found himself dealing with real extortion, including attacks timed to Christmas sales or Super Bowl gambling traffic. This led to Prolexic, which he describes as one of the first cloud services, offering enterprise-scale protection as a leased service. Later projects included DefenseNet, which became F5 Silverline, and Bit Gravity, one of the first video-centric CDNs, which saved customers bandwidth by solving the problem of progressive downloads wasting data when users scrubbed into the middle of a video. He describes his love of big infrastructure, and the shift from building for corporations to building for individuals as a twist on the same expertise. He expects DoS attacks on DoxxNet’s own network and sees agentic networking components as a major area of development.
Mapping the Internet and an Unexpected Art Career
Lyon studied philosophy, focusing on aesthetics and theoretical AI, before becoming a penetration tester. His mapping work began with network diagrams, which he saw as the easiest way to case a target. After a lunch bet that he could map the entire internet with the same technique, which he was fairly sure he would lose, a bicycle accident left him unable to walk, and he used the time to write the code that became the OPI project. The resulting visualizations have appeared at MoMA, which holds two pieces in its permanent collection, and at the Boston Museum of Science and other traveling exhibits. He recalls the surreal experience of the MoMA opening and the imposter syndrome that followed.
He also wrote a book about the Prolexic years and the pursuit of Russian cybercriminals who extorted clients and caused major outages. The conversation touches on Burning Man, where he and a partner built the Mayan Warrior and the Mind Warrior camp, and where Starlink now helps with coordination, though he suggests it has become a poor use case if it is only for streaming. Throughout, Lyon’s throughline is that passion creates momentum, and that the internet’s original spirit of openness is still worth pursuing with modern resources.