People
The people the corpus records - the ones who wrote the tools everyone still runs, founded the conferences, went to prison, testified before senates, or connected a country. Each name links to its entry.
The year beside each name anchors the work that entry describes. It is not a birth year and not the span of a career: Faraday did not stop in 1831.
148 people
- The pioneers of electricity21 people from the voltaic pile to the transistor, the physics every later entry stands on.
- The builders of computing15 people who made the machine: the logic, the languages, the architectures.
- The people who built the internet43 people from the first ARPANET link to the protocols the whole world now runs on.
- Security, cryptography and hacker culture50 people who broke things, protected things, and wrote the ciphers in between.
- Brazil19 Brazilians, from the national micros of the market reserve to the people building the internet here now.
Showing 148 of 148
1780s
- 1780Luigi GalvaniThe physician who saw dead frog legs twitch at the touch of dissimilar metals in 1780 and called it animal electricity.His explanation was wrong and his observation was not, which is the useful shape of the story. Volta disputed the theory - arguing the twitch came from the contact of two metals rather than from anything in the animal - and that disagreement is what drove him to build the pile. A mistaken interpretation of a correct experiment produced the first steady current, and the word galvanic survived attached to the idea he got wrong.
- 1785Charles-Augustin de CoulombThe French engineer who turned the torsion balance into an instrument for measuring charge, and proved the electric force follows an inverse square law.Before him there were devices to generate, store and detect static electricity and no easy way to say how much. He did not invent the balance - John Michell had used a similar one for gravity - but he was the first to point it at charge, and measurement is what turned electricity from a phenomenon people demonstrated into a quantity people could reason about. The field became a science when it acquired a number.
- 1788James WattThe engineer who in 1788 put a spinning-weight governor on a steam engine, creating the mechanical ancestor of every control loop in computing.The attribution deserves care: Huygens had built centrifugal governors in the seventeenth century for windmills, and Watt adapted one rather than inventing it - though the adaptation mattered enough that he is often credited anyway. What the device is, precisely, is a closed loop with no human in it: the engine's speed raises the weights, the weights close the throttle, the throttle slows the engine. James Clerk Maxwell turned it into mathematics in 1868, and everything from congestion control to autoscaling to a datacentre's cooling is a descendant of that paper rather than of the hardware.
1800s
- 1800Alessandro VoltaThe physicist whose 1800 pile - stacked zinc and copper discs separated by brine-soaked cloth - produced the first steady electric current.Static electricity had been known for centuries and was useless for communication: a discharge is an event, not a signal. The pile gave a current that keeps flowing, and only then is there something to modulate, switch or send. Everything on this timeline after him depends on that one change of kind, from a spark to a supply. His name became the unit, which is a rarer honour than a prize.
1820s
- 1820André-Marie AmpèreThe physicist who turned Ørsted's observation into electrodynamics, and who first drew the distinction between current and voltage.Ørsted's experiment was reproduced at the Paris Academy in September 1820; Ampère presented his first reflections on it a week later and spent the following six years turning it into mathematics. The speed matters less than the difference in kind: Ørsted observed that a current deflects a needle, and Ampère produced a theory that predicted by how much. Separating current from voltage is the distinction every practical electrical measurement rests on, and the unit of the first carries his name.
- 1820Hans Christian ØrstedThe Danish physicist who observed in 1820 that a current-carrying wire deflects a compass needle, showing electricity and magnetism to be one phenomenon.Every motor, every transformer and every read head over a disk platter is this observation applied on purpose. So is every signal induced onto the wrong pair in a cable bundle: crosstalk is Ørsted's experiment happening when nobody asked for it. Cable design has spent two centuries arranging conductors so that his effect helps rather than interferes.
- 1827Georg OhmThe German physicist whose 1827 law relates voltage, current and resistance - the first thing anyone learns about circuits, and the last thing they stop using.The law was poorly received when published and he waited years for recognition, which is a recurring pattern in this timeline rather than an anecdote. What it gave the field was a design tool: with three quantities related by one equation, a circuit can be reasoned about before it is built. Every cable length calculation, every power budget and every fault involving a bad connection is downstream of it.
1830s
- 1831Michael FaradayThe experimenter who showed in 1831 that a changing magnetic field induces a current - the reciprocal of Ørsted, and the basis of generation and of every inductive coupling problem since.It is also, directly, why twisted pair works. Twist the two conductors and the interference induced into each is roughly equal; the receiver reads the difference between them, and the difference is largely clean. A cabling standard is Faraday's law turned into a manufacturing tolerance. He had almost no formal mathematics, which did not stop him from being right, and Maxwell spent the next three decades writing his results down as equations.
- 1834Jean-Charles PeltierThe clockmaker who found in 1834 that passing current through a junction of two dissimilar metals heats one side and cools the other, depending on direction.He was a watchmaker who retired at thirty to do science, and what he found is the only way to move heat with no moving parts and no working fluid. It stayed a curiosity for about 120 years, because it needs semiconductors to be efficient enough to matter - which makes it a clean case of a correct discovery waiting for a material that did not exist yet. The devices built on it now hold laser temperatures steady inside optical transceivers, so a discovery from 1834 is what keeps a wavelength where the specification says it should be.
1840s
- 1841James Prescott JouleThe physicist who showed that electrical energy, heat and mechanical work are the same quantity in different forms.Establishing that energy is conserved across electrical, thermal and chemical processes is what makes a power budget possible: the watts that enter a device leave it as work and heat, and none of them disappear. Every cooling calculation in a data centre is his result applied at scale, and the reason a dense rack is a thermal problem before it is anything else. Joule heating is also why a bad connection warms up, which is one of the oldest diagnostic signs in the trade.
- 1843Ada LovelaceThe 19th-century mathematician often called the first programmer for her notes on Babbage's Analytical Engine.In 1843 she translated a paper on Charles Babbage's proposed machine and added notes far longer than the original, including what is often described as the first published algorithm intended for a computer. She also grasped that such a machine could manipulate symbols, not just numbers - an insight ahead of its time.
- 1844Samuel MorseThe portrait painter whose code turned electricity into a message, sent from Washington to Baltimore on 24 May 1844.Cooke and Wheatstone built a working telegraph in England at the same time, using moving needles; Morse used sound, and encoding is what made his version travel. The choice is the first appearance of a decision this whole field keeps repeating - that the encoding matters more than the medium. His code is also the older half of a partnership rarely stated: Alfred Vail and Leonard Gale worked on it and are usually left out, which makes this the first attribution problem on the timeline rather than the last.
1850s
- 1851Léon FoucaultThe physicist who demonstrated the Earth's rotation with a pendulum in 1851, discovered eddy currents, and gave the gyroscope its name.The pendulum is what he is remembered for and the eddy currents are what the industry actually pays for. Currents induced in a conductor by a changing magnetic field are the loss that every transformer and motor is designed to minimise, and the effect that induction heating, metal detectors and magnetic braking are designed to exploit - the same phenomenon counted as waste in one application and as the product in another. He also belongs to a recurring pattern: he built his own instruments, including the knife-edge test still used on telescope mirrors, and people who make their own tools tend to see what the users of those tools cannot.
- 1854George BooleThe mathematician who in 1854 built an algebra of logic, ninety years before anyone had a machine to run it on.He was describing reasoning, not circuits. The connection was made by Shannon in 1937, and the gap between the two is the point: a piece of pure mathematics sat unused for three generations and then turned out to be the exact description of how switches behave. Every conditional, every access-control rule and every packet filter is his algebra with an implementation.
1860s
- 1865James Clerk MaxwellThe theorist whose 1865 equations described electricity, magnetism and light as one field, and predicted that electromagnetic waves travel at the speed of light.The order matters: the prediction came two decades before anyone demonstrated it. Radio existed on paper long before it existed in a laboratory, which is worth remembering whenever a standard is dismissed for having no implementations yet. Every wireless specification is an engineering treatment of this result, and propagation, attenuation and antenna design are applied Maxwell whether the engineer knows it or not.
1870s
- 1875William CrookesThe chemist whose partially evacuated tube let cathode rays be seen and studied, and which every later display and vacuum device descends from.Pumping most of the air out of a glass tube and passing a current through it produced something nobody could account for, and the instruments built to study it produced the electron, the X-ray and the cathode ray tube. The apparatus outlived every theory offered to explain it. That is the ordinary sequence in this field and it is worth stating: a tool built to investigate a puzzle usually turns out to be more durable than the answer it was built to find.
- 1876Alexander Graham BellThe teacher of the deaf whose 1876 patent on transmitting speech electrically created the network that every later one was built on top of.The telephone matters here for an unglamorous reason: it produced the wires. Decades of digital communication ran over a plant built for voice, which is why modems, leased lines and the first broadband all had to work within constraints set by a nineteenth-century speech circuit. His work with deaf students is what led him to the mechanics of speech and hearing in the first place - the machine came out of teaching rather than out of telegraphy. His name is now attached to the medal given for contributions to communications engineering, which several people in this catalogue have received.
1880s
- 1887Heinrich HertzThe physicist who in 1887 built a spark-gap transmitter and a loop receiver and demonstrated the waves Maxwell had predicted, turning radio from mathematics into an engineering problem.He reportedly saw no use for the result, which is the most useful thing about the story: the distance between a demonstration and an application is not a measure of the demonstration. Within fifteen years the same effect was carrying messages across the Atlantic commercially. His name is the unit every spectrum plan, channel width and clock rate is quoted in.
- 1888Edward WestonThe engineer who made electricity measurable in the field, with the first accurate portable direct-reading meters and a cell stable enough to calibrate them.He did not set out to sell instruments. He was working on dynamos and found the available meters too clumsy and slow for his own experiments, so he built better ones - and they worked well enough that in 1888 he abandoned everything else. The list of what he had to invent to get there is the real story: permanent magnets that stayed permanent, conductors that ignored temperature, springs with low resistance and no magnetism, and pointer damping from Foucault's eddy currents. His 1893 cell then served as the international standard for electromotive force from 1911 until 1990, which means the volt was defined by a wet chemical cell for most of the twentieth century. An industry cannot be billed, tuned or trusted until it can be measured, and this is the man who closed that gap.
1890s
- 1891Nikola TeslaThe engineer whose alternating-current systems and 1891 resonant transformer made high frequency and high voltage into tools rather than curiosities.Direct current loses too much over distance to serve a city, and alternating current can be transformed up for transmission and down for use - which is why the grid every data centre draws from is his design rather than his rival's. The resonant coil matters here for a second reason: producing and tuning high-frequency oscillation is the same problem radio had to solve, and the work fed straight into it. He is also the clearest case on this timeline of reputation and reward diverging completely from contribution.
1900s
- 1901Guglielmo MarconiThe engineer and entrepreneur who turned Hertz's laboratory effect into a transatlantic service, claiming reception of a signal across the Atlantic in 1901.His technical contribution is contested and his commercial one is not: he built the company, the shore stations and the ship contracts that made wireless a business rather than a demonstration. The pattern is familiar to anyone who has watched a standard win - the person who makes something deployable is frequently not the person who made it work. The claim about the 1901 signal has been questioned on physical grounds ever since, which the record should carry rather than smooth over.
- 1906Lee de ForestThe engineer who added a third electrode to a vacuum tube in 1906, producing the first device that could amplify a signal.He built it as a detector and did not grasp what he had; its amplifying capability was only realised after 1912. Amplification is the property that made long-distance telephony, radio and eventually computing possible, because a signal that can be rebuilt at intervals can travel indefinitely - which is the same argument as a repeater, a regenerator and, later, a router. The pattern is worth marking: the inventor of the most consequential component of the era spent six years not understanding its most important property.
1920s
- 1926John Logie BairdThe engineer who demonstrated working television to the Royal Institution on 26 January 1926, to an audience that did not appear to realise what it had seen.Not one attending member published a comment afterwards. The only first-hand account was a short item in The Times two days later, and a prospective investor visiting that April concluded it would be an error of judgment to bring the equipment to market. The date is now treated as the birth of television and was, on the day, unremarkable to the experts in the room - which places it beside Kao being ridiculed and Ohm being ignored. Baird's mechanical system then lost within a decade to all-electronic television built on the cathode ray tube, whose lineage runs back to Crookes: first to a working demonstration, and not the design that won.
1930s
- 1936Alan TuringThe mathematician whose 1936 paper defined what computation is, and what no machine can compute - the boundary every computer since has been built inside.The paper was about the limits, not the possibilities: he described a machine in order to prove that some questions have no algorithmic answer. That the description turned out to be a blueprint is one of the field's larger accidents. His wartime cryptanalysis is better known publicly and less foundational technically, and the treatment he received afterwards is part of the record too.
1940s
- 1945John von NeumannThe mathematician whose 1945 EDVAC draft set out the stored-program architecture - instructions held in the same memory as data - that almost every computer still follows.The draft circulated with his name alone on it, which is why the architecture carries it; the EDVAC group's work is in there too, and the attribution has been argued over ever since. The design decision that matters is the one people forget is a decision: code and data share a memory, which is what makes software possible and what makes buffer overflows possible, and the same property does both.
- 1948Claude ShannonThe author of the 1948 paper that founded information theory, and, a decade earlier, of the thesis showing that Boolean algebra describes switching circuits.Two contributions, either of which would have been a career. The 1937 thesis made digital logic a design discipline rather than a craft. The 1948 paper defined information as a measurable quantity and gave the ceiling on what any channel can carry given its bandwidth and noise - which is why capacity planning is arithmetic rather than opinion, and why every claim about a faster link eventually meets a number Shannon wrote down. Compression, error correction and modulation are all consequences.
1950s
- 1952Grace HopperThe mathematician and US Navy rear admiral who built one of the first compilers, coined the word, and drove the English-language programming that became COBOL.Born in 1906, she joined the Naval Reserve in 1943 and was assigned to Harvard's Mark I, then wrote the first computer manual in 1946 - the first extensive treatment anywhere of how to program a machine. At Eckert-Mauchly from 1949 she designed a compiler and named the category; her 1957 division produced Flow-Matic, the first English-language data-processing compiler, which is the direct ancestor of COBOL. The argument she had to win was not technical but cultural: that a machine could usefully translate words into instructions, and that programmers need not be mathematicians. She retired from the Navy in 1966, was recalled in 1967, and retired again in 1986 as the oldest officer on active US naval duty, aged 79.
1960s
- 1961Leonard KleinrockThe queueing theorist whose early-1960s work on delay in networks of nodes underpinned ARPANET performance analysis, and whose UCLA laboratory hosted the first node.His mathematics is what lets anyone reason about waiting: how long a queue grows, what delay a given load produces, and why a link at ninety per cent utilisation behaves nothing like one at fifty. Every capacity conversation is downstream of it. His claim to have originated packet switching is disputed - by Baran, by Davies and by historians who note that the early reports address queueing and delay rather than message blocks - and the honest record keeps the dispute rather than resolving it in either direction.
- 1963J.C.R. LickliderThe psychologist who ran ARPA's Information Processing Techniques Office from 1962 and addressed his memos to the Members and Affiliates of the Intergalactic Computer Network.He did not build the network; he funded the people who did, and described what it should be before the hardware existed. The joke in the name hides a serious specification: an electronic commons open to all, and the main medium of informational interaction for governments, institutions, companies and individuals. That is close to what happened. His other contribution was structural - the money he directed created computer science departments at several universities, which is why the field had people in it a decade later.
- 1964Paul BaranThe RAND engineer who designed the distributed network - no central switch, messages cut into blocks routed independently - in studies published from 1960 and collected in 1964 as On Distributed Communications.He was asked to find a way for communications to survive a nuclear attack, and the answer he reached was to remove the thing that could be destroyed: the centre. He described taking inspiration from a brain routing around damaged tissue. Two details are worth carrying. The idea was resisted by the telephone company's circuit-switching engineers, who regarded it as unworkable, so the network that replaced theirs was rejected by them first. And the survivability argument is why the internet has no master switch, which is the same property that makes it hard to shut down and hard to govern.
- 1965Gordon MooreThe Fairchild and later Intel co-founder whose 1965 article observed that the number of components per integrated circuit was doubling on a regular cadence.It was an observation about economics with a horizon of about a decade, and it became a planning assumption for fifty years - and then, quietly, an industry roadmap that vendors organised themselves to meet, which is a different thing from a law of nature. The useful reading for anyone sizing infrastructure is that the curve was always about cost per transistor rather than speed, and that the two stopped moving together long before anyone announced it.
- 1966Robert TaylorThe research director who started the ARPANET in 1966 and then used his agency's budget leverage to conscript the man who built it.He wanted Larry Roberts to run the project and Roberts declined. Taylor then established that the Defense Department supplied fifty-one per cent of Lincoln Lab's funding, and asked the agency's director to inform the lab's director that sending Roberts would be in everyone's interest. Roberts, by his own account not particularly eager, was at the Pentagon within months. The most consequential networking project of the century began with a program manager who did not want the job, which is worth remembering against every account of invention driven purely by enthusiasm. Taylor's stated objective was plainer than the later mythology: to let people separated geographically discover and exploit common interests.
- 1967Donald DaviesThe National Physical Laboratory scientist who arrived at the same idea independently in the mid-1960s, named it packet switching, and built a working network at NPL to prove it.Baran had the concept and Davies gave it the word, which is not a small contribution: the term packet is what let engineers, funders and standards bodies talk about the thing without arguing about what to call it. He also did what the theory needed - an actual node, running, at Teddington - and the ARPANET design took from both men, with the terminology coming from him and the resilience argument from Baran. Independent arrival at the same answer, on two continents, is the strongest evidence that the idea was ready rather than lucky.
- 1967Larry RobertsThe ARPA programme manager who decided in 1967 that the network would be packet switched, then funded, designed and managed it into existence.The decision is the contribution. Two people had proposed the technique and neither could deploy it; Roberts chose it over circuit switching, coordinated the contractors who built the hardware and the university that hosted the first node, and revised the design to take from both proposals rather than picking a camp. This is the role that rarely gets a monument: not the person who has the idea, and not the person who writes the code, but the one who selects among ideas and then carries the consequences of the choice.
- 1968Douglas EngelbartThe engineer who demonstrated the mouse, hypertext, windows, word processing and video conferencing in a single session on 9 December 1968 - the presentation now called the Mother of All Demos.The audience of professionals had never seen a cursor moved by a hand, and the machine driving it sat twenty-five miles away. Almost everything in that ninety minutes is now furniture, which is the strange part: the demonstration is more famous than any product he shipped. His stated aim was not convenience but augmentation - computers as tools for people to handle problems too complex to hold in one head - and he had written that argument down years before he had the hardware to show it. The Turing Award reached him in 1997, twenty-nine years after the demonstration.
- 1969Howard FrankThe engineer who decided where the ARPANET's links should actually go, treating network shape as an optimisation problem.Somebody had to choose which sites connected to which, and how many links were enough to survive failures without paying for redundancy nobody needed. He came to that question from work on the survivability of national assets in wartime and from optimising pipeline networks, which is why the answer arrived as operations research rather than as engineering intuition. The topology of the first network was a calculation, and the discipline he founded - designing a network by analysing it before building it - is the one every capacity plan since has been an instance of.
- 1969Ken ThompsonCo-creator of Unix and joint recipient of the 1983 Turing Award, and author of the Turing lecture that showed a compiler can hide a backdoor no source review would ever find.The lecture is the part that belongs on a security site. He described a compiler modified to insert a backdoor into a program, and to insert the same modification into any compiler it compiles - so the malicious code disappears from every source file while surviving in every binary. The conclusion he drew is the uncomfortable one: you cannot trust code you did not totally create yourself, and reading the source is not enough, because the thing that reads the source is also code. Reproducible builds and supply-chain attestation exist because of an argument he made in 1984.
- 1969Margaret HamiltonThe director of the Software Engineering Division at the MIT Instrumentation Laboratory, who led the on-board flight software for the Apollo Guidance Computer, and who argued for calling the work engineering at all.She was the first programmer hired for Apollo at MIT, and the naming fight is part of the contribution: software was not treated as a discipline, and insisting on the term software engineering was a claim that it needed the same rigour as the hardware it flew on. The technical legacy is priority scheduling that sheds load rather than failing: during the lunar descent the computer discarded lower-priority work under overload instead of stopping. That is the ancestor of every system designed to degrade rather than die.
- 1969Steve CrockerThe author of RFC 1, published 7 April 1969, and the person who chose to call the series Requests for Comments rather than standards.He later called it a modest and entirely forgettable memo, and the modesty was the design. A graduate student had no authority to declare a standard, so the documents invited disagreement instead of announcing decisions - and that framing is why the series survived the arrival of everyone with more authority than him. The internet's technical documents are still called requests for comments sixty years on, by organisations that could rename them any time they liked.
1970s
- 1970James EllisThe GCHQ researcher who conceived non-secret encryption around 1969-70, several years before the public discovery of public-key cryptography, and could tell nobody.The idea existed inside a British intelligence agency and did nothing, because a classified insight changes no protocol, ships in no product and teaches no one. The comparison is the argument for open research stated as an experiment that actually ran: two groups had the same idea, one could publish and one could not, and the entire public-key infrastructure descends from the one that could. Recognition came only after declassification in the late 1990s, by which time he had died.
- 1971Ray TomlinsonThe BBN engineer who in 1971 made a message reach a person on a different machine, and picked the at sign to say which one.Nobody asked him to. A colleague's description is that it was not an assignment at all - he was fooling around, looking for something to do with the ARPANET - and he built it by grafting code from his own file transfer program onto a local messaging tool. The addressing convention he improvised in an afternoon has outlived every system designed to replace it, and the mailbox went on to become the recovery path for nearly every other account a person owns, which is a role no specification ever assigned it.
- 1972Dennis RitchieThe creator of the C programming language and co-creator of Unix, and joint recipient with Ken Thompson of the 1983 Turing Award for the development of generic operating systems theory and the implementation of Unix.The decision that made both last was rewriting Unix in C. Before that, an operating system was written for a machine; afterwards it could be moved to another one, and portability stopped being a research topic and became an expectation. Nearly everything since inherits from that pair: the descendants of C run the kernels and the network stacks, and the shape of Unix - a hierarchy of files, small tools composed together, processes forked from other processes - is still the mental model behind systems that have never run a line of his code.
- 1972Elizabeth FeinlerThe information scientist who ran the Network Information Center from 1972 to 1989 - the Host Naming Registry for the whole internet - and whose group devised the .com, .edu, .gov, .mil, .org and .net scheme and built the first WHOIS server.Before DNS, every machine on the network was listed in one file that her group maintained and published, updated almost daily by hand. That is the fact worth sitting with: the internet's entire naming authority was a directory service run by a team at SRI, reachable by telephone and post as well as by network. She joined Douglas Engelbart's Augmentation Research Center in 1972 and stayed until the year the registry became too big for a file. She called the NIC the prehistoric Google of its day, and in retirement she organised over 350 boxes of the Engelbart and NIC archives so the record would survive.
- 1973Bob MetcalfeThe inventor of Ethernet, at Xerox PARC in 1973, and recipient of the 2022 Turing Award for its invention, standardization and commercialization.The 1973 memo described a broadcast communication network for connecting PARC's Alto computers, and the first Ethernet ran at 2.94 Mbps - roughly ten thousand times faster than the terminal networks it replaced. The word that mattered was in the name: Metcalfe wrote of communication over an ether, which left the medium unspecified and is why the same design later survived twisted pair, fibre and radio. David Boggs, who died in 2022, co-invented it and co-authored the 1976 paper. The third word in the citation is the one engineers skip: after leaving Xerox, Metcalfe drove DEC, Intel and Xerox to a shared 10 Mbps specification rather than keeping it.
- 1973Clifford CocksThe GCHQ mathematician who in 1973 worked out an implementation of Ellis's idea - equivalent in substance to what became RSA - four years before RSA was published.He is reported to have done it in an afternoon and then filed it, because there was nothing else to do with it. The work stayed secret until the late 1990s, so it influenced nothing: no standard cites it, no library implements it, and the industry that grew up around the same mathematics grew up entirely on the published version. The episode is the cleanest available answer to whether secrecy or publication produces more capability, and it is not close.
- 1973Danny CohenThe engineer who put real-time voice and video onto a packet network in 1973, by adapting a flight simulator.The ARPANET was built to move files and messages, where arriving late is an inconvenience. He adapted a visual flight simulator to run across it, which requires the opposite property: a packet that arrives late is worse than one that never arrives at all. That is the first application of packet switching to real time, and every argument since about jitter buffers, quality of service and whether the internet can carry a phone call descends from someone attaching a simulator to a research network to see what would happen.
- 1974Bob KahnThe co-designer of TCP/IP with Vint Cerf, and the 2004 Turing Award co-recipient, cited for the design and implementation of the internet's basic communications protocols.The Turing citation is specific about what the pair actually did: they formulated the design principles of internetworking, specified TCP/IP against those requirements, prototyped it, and coordinated the early implementations. That last verb matters more than it looks. A protocol that one team implements is a program; a protocol several teams implement compatibly is a standard, and getting there is coordination work rather than design work. Kahn's later decades went into the institutions around the technology rather than the technology itself, which is the less celebrated half of why any of it still functions.
- 1974Ralph MerkleThe third name on the public-key patent with Diffie and Hellman, who arrived at the idea independently as a student, and the inventor of the hash tree that carries his name.His undergraduate project proposed a way for two parties to establish a secret in public, and was rejected by a reviewer who did not believe the problem was worth solving. The Kanellakis award in 1996 lists him with Diffie, Hellman, Rivest, Shamir and Adleman for the conception and first effective realisation of public-key cryptography. The tree structure he described later became the standard way to prove that one item belongs to a large set without shipping the set, which is why it turns up in certificate transparency, in backups and in ledgers.
- 1974Vint CerfThe co-designer, with Bob Kahn, of TCP/IP - the protocols that turned separate networks into one internet - and joint recipient of the 2004 Turing Award for the work.Cerf and Kahn did not invent a network; they invented the agreement that lets networks that were never designed for each other exchange packets, which is why the citation reads for internetworking rather than for a protocol. Born in New Haven in June 1943, Cerf has had a hearing impairment since early life and has attributed part of his interest in networking to its promise as another channel for people who cannot use a telephone easily - a detail worth keeping, because the most consequential communications protocol of the century was partly motivated by someone who found the existing one hard to use. He has spent the decades since as the most public advocate the internet has, which is a job nobody appointed him to. He was inducted into the Internet Hall of Fame in its inaugural class of 2012, as a Pioneer.
- 1976Martin HellmanCo-author of New Directions in Cryptography and of the key-exchange method that carries his name with Diffie's; joint recipient of the 2015 Turing Award.His citation is worth reading closely: it credits inventing AND promulgating, which is the pair of verbs this history keeps requiring. The exchange lets two parties agree a shared secret over a channel someone else is listening to, and it is still the thing happening at the start of a TLS session decades later - which is why forward secrecy is available at all. He spent much of his later career on nuclear risk rather than cryptography, which the record should mention rather than tidy away.
- 1976Whitfield DiffieCo-author, with Martin Hellman, of the 1976 paper New Directions in Cryptography, which proposed public-key cryptography and digital signatures; joint recipient of the 2015 Turing Award.Before that paper, encryption assumed the two parties had already met, or that a courier had. The paper's move was to separate the key that locks from the key that unlocks, which makes it possible to communicate privately with a stranger - the requirement every subsequent commerce protocol rests on. It described the idea without a practical construction; three people at MIT supplied one the following year. He later spent decades arguing the policy side in public, testifying to both houses of the US Congress on cryptography.
- 1977Adi ShamirThe S in RSA, joint recipient of the 2002 Turing Award, and the author of the secret-sharing scheme that splits a key so that any k of n holders can reconstruct it.The RSA work is what he is cited for, and the secret sharing may be the more widely deployed idea: it is how a root key can exist without any one person holding it, which is the arrangement used at the ceremonies that sign the DNS root. He also did foundational work on differential cryptanalysis, which is the other half of a cryptographer's job - the field advances as much by breaking constructions as by proposing them.
- 1977Leonard AdlemanThe A in RSA and joint recipient of the 2002 Turing Award, later the founder of DNA computing.His role in the trio was largely to attack the constructions the other two proposed, which is how the surviving one earned confidence: the published algorithm is the one that outlasted its own co-author trying to break it. That division of labour - propose, attack, keep what survives - is the method the whole field runs on, and it is easier to describe than to practise inside a group of three people who have to agree on a paper afterwards.
- 1977Ron RivestThe R in RSA: co-author of the 1977 paper that turned public-key cryptography from a proposal into something implementable, and joint recipient of the 2002 Turing Award.Diffie and Hellman had described what was needed and said plainly that they had no realistic way to build it. Rivest, with Shamir and Adleman at MIT, produced one within a year, and the trio founded RSA Data Security in 1982 - which is how the algorithm reached the products rather than the journals. The Turing citation is precise about the contribution: making public-key cryptography useful in practice. He also wrote the MD and RC families of algorithms, several of which the field later had to retire.
- 1978Leslie LamportThe 2013 Turing Award recipient for imposing order on distributed systems: logical clocks, distributed snapshots, Paxos, Byzantine fault tolerance, the safety and liveness distinction - and LaTeX.His 1978 paper on time, clocks and the ordering of events is among the most cited in computing, and its point is that in a distributed system there is no global now - only causality, which you can order without a shared clock. Everything downstream depends on that: consensus, replication, and every database that must decide which write happened first. His own line describes the field better than any textbook: a distributed system is one in which the failure of a computer you did not know existed can render your own computer unusable.
1980s
- 1980Jon PostelThe RFC Editor from 1969 until his death in 1998, author or editor of the RFCs that define IP, ICMP and TCP, and the first director of IANA - a job he volunteered for and at first did by hand.For almost three decades one person shepherded the documents that define the internet, and the numbering authority that keeps addresses and protocol parameters unique began as him keeping a list. That is the part worth sitting with: the global registry now argued over by governments started as a volunteer's clerical habit. His most quoted line, from the 1980 IP specification, is the robustness principle - be conservative in what you send, liberal in what you accept - which shaped protocol design for forty years and has since been argued against from inside the IAB, on the grounds that tolerated errors become entrenched and eventually become the specification.
- 1980Susan Headley (Susy Thunder)The Los Angeles phone phreak of the late 1970s and early 1980s who was among the first true masters of social engineering - talking her way into telephone company systems and military networks by voice alone, at a time the technique had no name.She ran in the same circle as the young Kevin Mitnick, testified against her associates, and then left the scene entirely, later working as a poker dealer and a librarian. Her erasure is itself instructive: she appears in the 1991 book Cyberpunk and in scattered interviews, but the histories that made her contemporaries famous mostly wrote her out. The method she perfected - authority in the voice, homework before the call - is now the foundation of an entire industry's training.
- 1981David FarberThe organiser of CSNET, and one half of the 1981 agreement that let one network's traffic cross another's without anyone counting it.CSNET existed because most computer science departments were not eligible for the ARPANET, and the arrangement he negotiated with Robert Kahn let CSNET traffic ride ARPANET infrastructure on a statistical, no-metered-settlements basis. That phrase is worth pausing on. Two organisations agreed to carry each other's traffic without measuring or billing it, because measuring would have cost more than it was worth - and that principle, invented as an accounting convenience between two American agencies, is how networks interconnect worldwide to this day. His CSNET software is also what Karlsruhe used to bring Germany online three years later.
- 1981Ira FuchsThe CUNY administrator who built the academic network for everyone the ARPANET had left out, starting with one link to Yale in 1981.He gave the motive himself, without dressing it up: he was envious of ARPANET users. The ARPANET served defence-funded mathematics and physics, and the rest of the university - the humanities, the liberal arts, everyone without the right grant - had nothing. So he built a network whose entry condition was that you agree to connect the next institution along. It reached 1,400 universities in 49 countries and was the first academic network to reach Japan, Israel, the USSR and most of western Europe. The name began as Because It’s There and became Because It’s Time, he said, because it sounded better. And the origin is the detail worth keeping: he traced the whole idea to being a teenager with a ham radio in Queens, talking to strangers across the world from his bedroom - the same article of faith, applied to institutions instead of individuals.
- 1981Marisa BellisarioItalian executive who, from 1981, turned the state telecommunications manufacturer Italtel from what the press called a national scandal into a profitable company, and whose planned merger into a group of European scale was cancelled, her foundation records, because a partner would not have a woman as chief executive.She came up through Olivetti in its electronic years, went to America in 1965, ran Olivetti's American company from 1979 and repaired its balance sheet, and in October 1980 accepted the state holding's offer of the hardest job in Italian industry. Italtel had six plants, twenty-nine thousand employees, very low productivity, high absenteeism and heavy losses; the press called it a nightmare and a national scandal, and she wrote later that it was worse than described. Co-general manager from the start of 1981, sole managing director from that August, she replaced the management, started new projects, and carried the plan through against the unions and part of the press. In three years turnover went from 503 billion lire to 1,300 billion, with a substantial profit, and the share of women among the company's graduates went from five per cent to twenty-seven. The merger with Fiat's Telettra that would have made an Italian equipment group of European scale did not happen; the foundation that bears her name states plainly that Fiat would not give her the chief executive's chair because she was a woman, and that the sector's growth stalled with it. She died in office in August 1988, at fifty-three. The Italtel entry records what became of the company; this is the person who gave it the decade it had.
- 1981Wau HollandThe co-founder of the Chaos Computer Club in 1981 and the author of its ethic - Levy's hacker principles extended with two German additions: do not litter in other people's data, and use public data, protect private data.Holland's club proved its point by doing rather than saying: in 1984 the CCC exploited the Btx videotext system to transfer 134,000 Deutschmarks from a Hamburg bank overnight, then returned it in public with the press watching, forcing the Bundespost to admit a flaw it had denied. That is the CCC method still - technical proof deployed as civic argument - and it is why Germany's hacker scene has spent forty years closer to constitutional politics than to the underground.
- 1982Jim McKieMember of the Amsterdam team that put Europe on Usenet, who in 1982 told the continent's Unix users that the Mathematical Centre would call anyone, and who later worked at Bell Labs on Plan 9, the successor to Unix.The first link across the Atlantic, from Digital's decvax to Amsterdam's mcvax, was held up into 1982 by something small: an autodialling modem that satisfied European telephone standards was hard to get. Once it worked, somebody had to tell Europe, and that was McKie. At the European Unix Users Group meeting in Paris in the spring of 1982 the Mathematical Centre announced it was connected to Usenet and would call, or be called by, any group site on the continent - the moment, the record says, that began the transformation of the European Unix community into a networked one. He wrote it up as Where Is Europe for the 1983 Usenix conference in Toronto, and a posting of his from that August survives in the archives, signed mcvax!jim, on the cost of sending news to aliens - the aliens being Europeans, and the cost being the phone bill. He was one of the small team under Hagen, with Akkerhuis, Beertema and Karrenberg, that did the institute's networking. Then he went to the source: Bell Labs lists him among the department that built Plan 9, the system Ritchie, Pike and Thompson's group designed from the late 1980s for a world of networked machines rather than one shared one. He had spent the early eighties making Unix machines talk across an ocean, and spent the next decade at the lab that made Unix, building the system that assumed the network from the start.
- 1982Teus HagenDutch computer scientist who ran the networking team at Amsterdam's Mathematical Centre and in 1982 started EUnet, the first public wide-area network in Europe, as a dial-up service of the Unix user group he chaired.He ran the Computer Laboratory's small networking team at the Mathematical Centre - Akkerhuis, Beertema, McKie and Karrenberg - and that team is why Amsterdam became the junction of European networking before the internet reached it. Hagen founded the Dutch Unix user group and then the European one, chaired the European group through the whole decade from 1980, and in 1982 started EUnet as its dial-up service: store-and-forward mail and news over UUCP between four countries at first, the United Kingdom, the Netherlands, Denmark and Sweden, with the Dutch node at the institute. It was the first public wide-area network in Europe, and it grew to a thousand sites in twenty-one countries by 1989 - a working continental network built by a user group, on telephone lines, before any of the official research networks that were supposed to provide one. It was one of his own people who wrote the report arguing that Europe should adopt TCP/IP, and the institute that opened the first connection to the American network in 1988. From 1992 to 2008 he chaired NLnet, which grew out of EUnet into the first Dutch ISP and now funds free internet research; the Hall of Fame inducted him in 2013. The pattern is the volunteer one: the network that connected Europe first was nobody's job.
- 1983Richard Stallman (rms)The MIT AI Lab hacker who, watching the lab's culture dissolve into proprietary software in the early 1980s, launched the GNU Project in 1983, founded the Free Software Foundation in 1985, and wrote the four freedoms and the GPL.The origin story is a printer: denied the source code to fix a jam notification, he concluded that a program you cannot change is a program that controls you. He then wrote foundational software - GCC, GNU Emacs, GDB, much of the toolchain the world compiles with - which is why the argument had teeth. Uncompromising to the point of alienating allies, and controversial in later years over public remarks, he remains the reason the movement is framed as ethics rather than engineering convenience.
- 1984Emmanuel Goldstein (Eric Corley)The editor of 2600: The Hacker Quarterly since 1984, host of the radio programme Off The Hook, and founder of the HOPE conferences - the closest thing the American underground has to a permanent institution, named for Orwell's fictional dissident.2600 published what the mainstream press would not, organised the monthly Friday meetings that gave isolated teenagers a physical community in dozens of cities, and paid for its principles in court: the magazine was sued by the film industry for linking to DeCSS, losing a landmark case on whether a hyperlink is speech. Corley's constant argument across four decades is that the right to understand technology is not conditional on permission from its owners.
- 1984Jun MuraiThe Keio professor who built Japan's first inter-university network in 1984 and the research consortium that followed it.JUNET came first, then WIDE, which carried the country's first real internet traffic over leased lines. The detail worth keeping is the route: Japan's international link to the United States was established through Hawaii, with help from the University of Hawaii - the same institution that had put a packet radio network across four islands thirteen years earlier because it could not lay cable. The place that solved its own isolation ended up being how somebody else's was solved.
- 1984Werner ZornThe Karlsruhe professor who connected Germany to the internet in 1984, and China three years later.He had been proposing the connection since 1982, and the first message - received by his colleague Michael Rotert on 3 August 1984 - was a welcome from MIT, making Germany the second country outside the United States to be reached. What he did next is the part usually left out: in 1987 he connected China to the same network through Germany. A national connection is normally told as a national achievement, and this one was performed twice by the same man for two countries, one of which was not his.
- 1984Yvonne Marie AndrésCalifornia schoolteacher who, given a computer with no software in 1984, wrote her own and built a store-and-forward network that connected twelve thousand schools before the web existed.She was teaching low-achieving children in Oceanside when Apple gave every California school a computer with nothing on it. So she and Al Rogers, another San Diego teacher, wrote what was missing: a free word processor first, then FrEdMail - Free Educational Electronic Mail - built from a bulletin-board program a teenager had written and lent them. It ran on an Apple IIe and worked the way FidoNet and the African store-and-forward links in this catalogue worked: children wrote in class, the work went to a floppy, and in the middle of the night, when the school's one phone line was free and the rates were lowest, the machine dialled the next school and passed it on. A story could take days to cross the country, but it was affordable, which was the point. In 1991 the network was gatewayed onto the NSFNET; at its peak it joined twelve thousand schools through three hundred and fifty nodes. In 1993 it became Global SchoolNet, the 1992 Global Schoolhouse having already put students in four places on two continents onto a shared watershed study over desktop video. She wrote the first teacher's guide to the internet. The pattern recurs among the pioneers - the tool did not exist, so the person who needed it built it - with the difference that the person was a primary-school teacher and the network was made of a donated computer, a borrowed program and the night rate.
- 1985Radia PerlmanThe engineer who invented the spanning tree algorithm at Digital in the 1980s, making bridged Ethernet survivable, and who wrote the algorithm's poem.Her 1985 paper let bridges of arbitrary topology agree on a loop-free tree without a central authority, and the IEEE standardised it in 802.1D in 1990. Every switched network since has run a descendant. She wrote the specification with a poem attached, Algorhyme, whose first lines answer Joyce Kilmer: I think that I shall never see a graph more lovely than a tree. She also did the link-state work behind IS-IS. The nickname she is given, mother of the internet, obscures the actual contribution: not that she connected things, but that she made a redundant network safe to build, which is a different and harder problem. She was inducted into the Internet Hall of Fame in 2014 and the National Inventors Hall of Fame in 2016.
- 1986Cliff StollThe Berkeley astronomer turned accidental investigator who, told to reconcile a 75-cent accounting discrepancy in 1986, followed it to a West German intruder selling access to US military systems to the KGB - and wrote it up as The Cuckoo's Egg.Stoll invented working incident response by having no idea it did not exist: he kept a paper logbook, printed sessions, built the first documented honeypot out of a fake defence project, and spent months persuading agencies that the case was real. Everything modern practice does - timeline, evidence handling, attribution caution, patient monitoring instead of instant disconnection - he improvised first. He then went back to astronomy and glassblowing, which the field finds delightful.
- 1986Stephen WolffThe programme director who built the American research backbone and, from the start, planned for it to stop needing him.Taking over NSFNET in 1986, he identified two needs at once: infrastructure for the academic community, and a strategy to put that infrastructure on a footing ultimately independent of federal funding. The mechanism was to push the regional networks toward commercial customers so that scale would lower everyone's costs. Federal support for the backbone ended in April 1995, on purpose. A public official whose stated objective was to make his own programme unnecessary is rare enough in any field to be worth recording, and the commercial internet is what that decision produced.
- 1986The Mentor (Loyd Blankenship)The Legion of Doom member who, hours after his 1986 arrest, wrote the short essay published in Phrack as The Conscience of a Hacker - universally known as the Hacker Manifesto - and who later, by coincidence of employment, wrote the cyberpunk game manual the Secret Service seized in the Steve Jackson Games raid.The Manifesto is the most reprinted text the culture produced: a defence of curiosity as a crime of the mind, written by a teenager and quoted ever since in films, talks and courtrooms. Blankenship's second brush with the law is the more instructive one - his GURPS Cyberpunk manuscript was confiscated as a supposed hacking manual, and the fiasco helped bring the Electronic Frontier Foundation into existence.
- 1987Douglas ComerThe Purdue professor who wrote the books that taught a generation how the internet actually works.His citation is worth reading carefully, because of what it honours. A hall of fame otherwise full of people who invented protocols admitted someone for EXPLAINING them: the first series of textbooks setting out the scientific principles under the design, and the earliest formal guidance for building things that use it. The three volumes appeared in 1987 and went into sixteen languages. He did plenty besides - an original Internet Architecture Board member, an early network offering connections before ISPs existed, Cisco's first head of research - but the record puts the teaching first. One detail measures what those editions spanned: the first was written when the internet connected about five thousand computers, and by the fourth it was over fifty-six million. The same book, revised across four orders of magnitude of the thing it described.
- 1988Barbara LiskovThe 2008 Turing Award recipient, cited for practical and theoretical foundations of programming language and system design, especially data abstraction, fault tolerance and distributed computing.The substitution principle that carries her name is the one most programmers meet: a subtype must be usable anywhere its supertype is, without the caller needing to know. That is a statement about interfaces rather than about inheritance, and it is why abstraction survives contact with a large codebase. Her distributed systems work matters as much and is credited less - she and her student Brian Oki arrived at view-stamped replication at about the same time as Paxos, independently, which is the second time in this history that two groups reached the same answer without knowing.
- 1988Jaap AkkerhuisDutch network engineer who helped build Europe's first international internet gateways at CWI in Amsterdam, later steered the .nl registry, and now sits on the body that assigns the world's two-letter country codes.He began in 1977 at the Mathematical Centre in Amsterdam, in the small team under Teus Hagen that did most of the actual networking as the institute became the hub of European computer networks, and he spent the nights and weekends setting up and debugging the first international gateways, reaching as far as Australia by way of Japan and Korea. One detail says how he worked: before the first official public connection between Europe and America existed, he persuaded Jon Postel to allocate him a range of addresses in advance, so that when the connection came there would be no collisions. Seven years in the United States followed, at Carnegie Mellon, mtXinu and Bell Labs, and then the first independent Dutch ISP in 1995, and from 1999 the .nl registry, where the domain count passed a million and his applied work made signing names cryptographically at scale a practical thing. He is now Vice-Chair of the agency that maintains ISO 3166, the list of two-letter country codes - the codes beneath every national domain, and the ones this site's own statistics page uses to name where readers are. Inducted into the Internet Hall of Fame in 2017, the fourth Dutch member; knighted in April 2026.
- 1988Kanchana KanchanasutThe computer scientist credited with bringing the internet to Thailand, and with obtaining the country's domain.Securing a country-code domain sounds administrative and is closer to foundational: it is the point at which a country stops being a set of hosts inside somebody else's namespace and becomes an addressable place with its own registry, its own policy and its own dispute over who runs it. Nearly every national internet story in this catalogue has that moment in it, and it is almost always accomplished by one or two academics doing paperwork nobody else understood the importance of.
- 1988Kees NeggersThe Dutch network director behind the first European backbone, and behind the exchange that made Amsterdam a place traffic goes.Ebone, which he led in 1991, was Europe's first cross-border backbone, and its founding idea is the one worth carrying: Open Exchanges - neutral places where any network could meet any other, rather than a hierarchy of who buys transit from whom. The exchange point entry for Glenn Ricart describes that room in the abstract; he is a large part of why Europe ended up with several, and why Amsterdam in particular became somewhere the world's traffic passes through rather than around. The list under his name is almost entirely institutions - RARE, TERENA, the RIPE registry, the Amsterdam exchange, a fibre consortium - which is the same shape as the other entries here whose work was making arrangements between organisations hold.
- 1988Liane TaroucoThe researcher who built the Rede Sul de Teleprocessamento, the first initiative to connect Brazilian universities, wrote the first book on computer networks published in Brazil, and contributed to the country's first internet backbone. Inducted into the Internet Hall of Fame in 2021.Her inclusion corrects a familiar distortion. Founding histories are usually told through the people who negotiated with ministries; Tarouco's work was the teaching and the regional plumbing - the textbook a generation learned from and the southern network that proved inter-university connection was practical before there was a national one. She spent her career at UFRGS, and the education side of her contribution is why the field in Brazil had trained people ready when the backbone arrived.
- 1988Paul VixieThe engineer behind BIND and much of the operational practice around DNS, founder of the Internet Systems Consortium, author of Vixie cron, and creator of the first successful commercial anti-spam service.Born in 1963, he has spent a career on the parts of the internet that only get attention when they break. BIND is the name server most of the internet ran on; Vixie cron is on nearly every Unix system alive; and the anti-spam reputation lists he built established the pattern - a list distributed as DNS, so it needed no new software anywhere - that later produced response policy zones, which he specified with Vernon Schryver in 2010. The through-line is the same each time: put the new capability inside machinery operators already run, because the adoption problem is harder than the design problem.
- 1988Piet BeertemaSystem administrator at Amsterdam's Mathematical Centre who ran the machine at the junction of European network traffic, registered .nl, and on 17 November 1988 at 2:28 in the afternoon received the message that put Europe on the internet.He met his first computer at the aerospace laboratory in 1965, joined the Mathematical Centre in 1966 and never left. The machine he ran there, mcvax, was the junction through which most of Europe's mail and news passed to and from America, which made him the person who registered .nl in 1986 and, after years of preparation, the one who received the confirmation on 17 November 1988 that the institute was on the American research network - the first institution outside North America, a short while after INRIA in France. The other thing he is remembered for happened four years earlier and says something about the network he ran. On 1 April 1984, seven months after a Korean airliner had been shot down, he posted from a fictitious Moscow machine, as the Soviet general secretary, that the USSR was joining Usenet. It was the first online April Fool with international reach; he revealed himself two weeks later, by which time, he said, it had worried the Pentagon. When a real Moscow site joined in 1990, readers needed convincing it was not another prank, and its administrator named the gateway kremvax - a joke made true after the fact. A machine in Amsterdam was, in 1984, well enough connected that a message from it could alarm a superpower; four years later the same machine connected the continent.
- 1988Randy BushThe operator who spent forty years helping other countries build their own networks, and who later went after the routing system's security.He was in the inaugural Hall of Fame class, and not for inventing anything: the citation is for the Network Startup Resource Center, which began in 1988 as volunteering when engineers in Africa and Latin America asked for help getting connected. His account of the motive is unsentimental - there were capable scientists going out of date because they were isolated - and so is his description of the era: the internet then was scientists and non-governmental organisations, not social media.
- 1988Van JacobsonThe author of Congestion Avoidance and Control, the 1988 work that gave TCP the algorithms - slow start, congestion avoidance, fast retransmit - that stopped the internet collapsing under its own load.In the mid-1980s the network suffered congestion collapse: throughput between two sites fell by three orders of magnitude, because every sender responded to loss by retransmitting harder. His fix was to make each sender infer the state of a network it cannot see, from the only evidence it has - the timing and loss of its own packets - and to back off. That inference is still what every TCP connection does. It is also why a link can be busy while nothing feels fast, and why bufferbloat took decades to be recognised as the same problem wearing a different hat. He was in the inaugural 2012 class of the Internet Hall of Fame, inducted as an Innovator - the category for people whose contribution was a new use rather than the underlying architecture, which is a fair description of making an existing protocol survive its own success.
- 1989Glenn RicartThe man who built the first place where separate networks met as equals, and who led the first TCP/IP implementation for the IBM PC.An exchange point is an unglamorous room where networks that do not own each other agree to hand over traffic, and it is the physical form of the interconnection principle. Before one exists, every pair of networks needs its own private arrangement; afterwards, joining once reaches everybody present. Every internet exchange since - and the entire peering economy that decides how traffic actually flows between continents - is that room repeated. The second achievement is easy to underrate: TCP/IP on the IBM PC is what moved the protocol off institutional machines and onto desks.
- 1989Steven BellovinCo-author of the 1994 firewall book, an IETF Security Area director, a member of the National Academy of Engineering, and one of the creators of Usenet years earlier.His standing description of his own field is the most useful sentence in it: he works on networks, security, and especially why the two do not get along. That is not a joke about culture. Networking optimises for reachability and security for restriction, and almost every operational argument between the two teams is a rediscovery of that. His early papers on weaknesses in the TCP/IP protocol suite named attacks - sequence number prediction, DNS spoofing - years before anyone was running them at scale.
- 1989Tadao TakahashiThe founder of Brazil's National Education and Research Network (RNP) and the coordinator who turned scattered academic links into a national backbone - inducted into the Internet Hall of Fame in 2017. He died in April 2022.His decisive move was political as much as technical. When the state telecommunications monopoly proposed becoming the single access point for all Brazilian users, with everyone holding one company's email address, Takahashi and colleagues argued the government into a hierarchical, many-provider model instead. That argument is why Brazil got a competitive internet rather than a state portal, and it was won in 1995 in a meeting rather than in a protocol.
- 1989Tim Berners-LeeThe author of the 1989 CERN proposal that became the World Wide Web, and of the first browser, server and page - and the 2016 Turing Award recipient for it.He wrote three things that had to exist together for any of them to be useful: an addressing scheme, a transfer protocol and a markup language. The decision with the longest consequences was not technical: CERN put the specification into the public domain in 1993, and the web spread because nobody had to ask permission or pay a licence. Compare any contemporary networked hypertext system that did neither, and the difference in outcome is almost entirely that.
1990s
- 1990Karen BanksThe GreenNet engineer whose gateway carried mail for sixty partner organisations across three continents, using the wrong technology on purpose.GnFido ran on store-and-forward - fidonet and uucp - rather than a permanent internet link, because for most of its correspondents no permanent link existed or could be afforded. It was the inferior technology by every measure except the one that mattered, which was that it worked where the better one did not, and for thousands of people it was the only affordable electronic communication available. In 1995 the programme she helped found took forty women to the UN conference in Beijing and gave ten thousand delegates email and web access, some of them for the first time in their lives; the same group then got communications written into the Beijing Platform for Action, the first intergovernmental policy to treat women's access to these technologies as a matter of rights. Her own summary of thirty years is the line to keep: it is one thing to have access to the technologies and the pipes, but it is the people who make the network.
- 1990Kevin PoulsenThe hacker who seized a radio station's phone lines to be caller 102 and win a Porsche, then became a security journalist.In June 1990, Poulsen and friends took over the incoming lines of Los Angeles station KIIS-FM so that he would be precisely the 102nd caller, winning a Porsche 944 S2; his deeper exploits against phone-company systems earned him years as a fugitive and, after capture, one of the era's heaviest hacking sentences. Barred from computers on release, he reinvented himself as an investigative journalist and became a senior editor at Wired, breaking major cybercrime stories. The full arc, phreak to felon to Fourth Estate, made him the redemption template his generation cites.
- 1990Phiber Optik (Mark Abene)The New York phone-switch specialist who left the Legion of Doom to found Masters of Deception, became the most visible hacker of the early 1990s, and served a year in federal prison in 1994 for conspiracy.Abene mattered because he argued in public. He taught, gave interviews, and insisted that exploring systems was not the same as damaging them, at a moment when prosecutors were making the opposite case. New York magazine named him one of the city's hundred smartest people the year he went in; the city threw him a party when he came out. His case, more than any other, is why the field still distinguishes curiosity from harm when it writes its own history.
- 1991Al GoreUnited States senator, later vice president, whose 1991 legislation funded the research network and the supercomputing centre from which the commercial internet emerged; better known for a sentence he did not say.Two facts sit on either side of the name. The first is what the legislation did. As a senator in the 1980s Gore pushed to join several dozen unconnected federal networks into one, and in January 1991 he introduced the bill that became the High Performance Computing Act, signed that December. It authorised about six hundred million dollars, funded the National Research and Education Network that carried the internet out of computer science into universities at large, and strengthened the supercomputing centres - among them NCSA in Illinois, where a group of students then wrote Mosaic, the browser that made the web a public thing. Andreessen, who led that group, said that left to private industry it would not have happened for years. The second fact is the quotation. On CNN in March 1999 Gore said he had taken the initiative in creating the internet - a claim about legislation, and an accurate one - which was cut down to the word invented and became a joke that outlived the facts. The people who wrote the internet's protocols answered it: Cerf and Kahn wrote in 2000 that no elected official had made a greater contribution over a longer period. The second fact is the one everybody knows. The first is the one that happened.
- 1991Demi GetschkoThe engineer on the team that made Brazil's first internet connection, at FAPESP in São Paulo, and the person most associated with the country's naming and governance ever since - administrative contact for the .br domain since 1989, member of the Brazilian Internet Steering Committee since its creation in 1995, later an ICANN board member and chief executive of NIC.br.He was inducted into the Internet Hall of Fame in 2014, the first of seven Brazilians so far. His durable contribution is structural rather than technical: he helped define the shape of the .br name tree and the rules of the registry, and then stayed for three decades to operate them. When people ask why Brazil's internet governance looks unusual - multi-stakeholder, with the registry, the incident response team and the exchange points under one civil body - the answer runs through the choices this generation made and defended.
- 1991John MarkoffThe New York Times technology reporter whose front-page coverage in the 1990s turned Kevin Mitnick into the world's most famous hacker, and who co-wrote Cyberpunk (1991) and Takedown (1996), the account of Mitnick's capture written with Tsutomu Shimomura.His reporting is the standing case study in how press framing becomes legal reality: descriptions of Mitnick as a threat to national infrastructure fed a prosecution and years of pretrial detention that the underlying facts did not support, and the Free Kevin campaign was aimed as much at the coverage as at the courts. Markoff also chronicled the personal-computer revolution with genuine authority, which is what makes the episode a caution rather than a dismissal - accurate technology journalism and a distorted narrative can come from the same desk.
- 1991Linus TorvaldsThe Finnish student who announced a free operating-system kernel on the comp.os.minix newsgroup in August 1991 - 'just a hobby, won't be big and professional like gnu' - and who, in 2005, wrote Git in about ten days after the kernel lost access to its proprietary version-control system.Two artifacts, both now infrastructure for the entire industry: the kernel that runs most servers, all Android phones and most of the cloud, and the version-control model every developer uses daily. His method is as influential as his code - merciless public review on a mailing list, a benevolent-dictator model of governance, and a famous temper he publicly stepped back to address in 2018. Where Stallman argued ethics, Torvalds argued engineering, and between them the movement got both halves.
- 1991Phil ZimmermannThe author of PGP, who released strong encryption free to the public in 1991 and spent three years under US criminal investigation for munitions export because the software left the country.His defence became a landmark of legal creativity: since exporting a book is protected speech, PGP's source code was published as a printed volume by MIT Press, exported lawfully, and scanned back in abroad. The investigation was dropped in 1996 without charges. Zimmermann's stated motive was never commercial - he built it for activists and for people who should not have to justify wanting a private letter, an argument he has repeated for three decades.
- 1992Carlos Afonso and AlternexThe co-founder, with sociologist Herbert de Souza (Betinho) and Marcos Arruda, of the Brazilian Institute of Social and Economic Analyses (IBASE), and the man behind Alternex - the first internet service in Brazil open to the public, years before commercial providers existed. Inducted into the Internet Hall of Fame in 2021.Alternex came out of civil society rather than industry or academia, which is the point: Brazil's first public network access was built by an organisation whose purpose was social justice, and it served non-governmental organisations before it served anyone else. Its defining moment was the 1992 Earth Summit in Rio, where Alternex, riding infrastructure assembled with the nascent RNP, provided internet mail to conference participants - the country's first large public demonstration that the network was for everyone.
- 1992Daniel KarrenbergGerman network engineer who helped build EUnet, wrote the report that argued Europe should run TCP/IP, co-founded RIPE, and in 1992 set up the world's first regional internet registry - intending to be finished with the internet a year later.A network administrator at Dortmund from 1981, he helped set up EUnet the following year and joined the Amsterdam team in 1987, where he built the links to the American network and wrote the report arguing that European networking should run on TCP/IP rather than the standards the continent's institutions preferred - one of the decisions on which everything since depended. In 1989 he co-founded RIPE, the forum where European operators coordinate, and in April 1992 he set up the RIPE NCC, the first regional internet registry in the world, the body that has handed out Europe's addresses ever since; the four other registries copied the model. His own account of the plan is the best part: he meant to establish the registry and, by April 1993, be done with the internet and move on to something interesting, and instead ran it until 2000 and served as its chief scientist until 2013, building the measurement systems - the routing information service, the Atlas probes, the DNS monitors - through which the internet's operators observe the internet. Inducted in the Hall of Fame's first class in 2012, he used the speech to say the point of a hall of fame was to name the people who actually built the thing before the history books were written, and pledged to push for it. The entries around this one are, in part, that pledge kept.
- 1992David ClarkThe architect who put the internet's governing philosophy into one sentence in 1992: no kings, no presidents, no voting - rough consensus and running code.It is the most quoted line in internet governance and it is usually read as a slogan about openness. It is more useful read as a description of a decision procedure, and one with consequences that recur: a system that advances by rough consensus and working implementations will adopt any improvement one party can deploy alone, and will stall on every improvement that requires everybody to agree at once. Secure routing, DNSSEC and email authentication all waited decades for exactly that reason. The sentence explains both why the internet could be built without permission and why parts of it cannot be repaired.
- 1992Jude Milhon (St. Jude)The self-taught programmer and civil-rights activist who helped build Community Memory - the first public computerised bulletin board, in 1970s Berkeley - coined the word cypherpunk, and wrote as St. Jude in Mondo 2000.Milhon insisted that hacking was 'the clever circumvention of imposed limits', a definition that covers code, bodies and laws with equal force, and she spent her life pushing back on the scene's boy-club default - her advice to women entering it was blunt, funny and widely reprinted. She is the corrective to a history told as a list of young men: the culture's vocabulary, its earliest public network and a good part of its politics came from her.
- 1992Mike JensenThe engineer who spent decades connecting the organisations nobody was going to connect commercially.His networks served the nonprofit sector first, which is an unusual starting point: most connectivity arrives because somebody expects to bill for it, and his did not. The Association for Progressive Communications, which he helped found in 1992, exists on that premise still. And the method in the citation is worth noting because it is so unglamorous - he travelled the continent, organisation by organisation, helping each one get online or get a better link. There is no protocol here and no product. It is the observation that a network reaches wherever somebody was willing to go and do the work, which is why coverage maps have always tracked effort as much as economics.
- 1992Tarek KamelEgyptian engineer who established his country's first internet connection in the 1990s, built the regional gateway through which neighbouring countries first reached the network, and served as minister when the state switched it off.An engineer with a Munich doctorate who grew up between German and Egyptian cultures, he ran the networking department of the Egyptian cabinet's information centre from 1992, established the country's first connection to the internet, brought in commercial service, and founded the local chapter of the Internet Society - and because Egypt became the gateway, several neighbouring Arab countries reached the network through the link he built. He helped found AFRINIC, the region's address registry, and joined the ministry at its formation in 1999, becoming minister of communications from 2004 to 2011. The hard part of the record is January 2011: in the final weeks of the Mubarak government the state shut down internet access across the country, and he was the sitting minister. The head of ICANN later stated that he had not been responsible for the shutdown and had worked, at real risk to himself and his family, to restore service as fast as it could be restored. Both facts stand. A state's decision and a minister's conduct inside it are not the same question, and the record does not resolve them into one. He went on to ICANN in 2012 as the first senior advisor from the developing world, and was inducted into the Internet Hall of Fame in 2025, six years after his death. He is, among other things, the case of the person who built the switch being in the room when it was thrown.
- 1993Jeff Moss (Dark Tangent)The founder of DEF CON, which began in 1993 as a farewell party for a friend's bulletin-board network and became the largest hacker gathering in the world, and of Black Hat, its commercial sibling for the people who had to expense the trip.Moss's real achievement was building an institution that the underground would still accept: DEF CON is deliberately cash-only at the door, structurally suspicious of surveillance, and run by unpaid Goons rather than an events company. He later served on the US Homeland Security Advisory Council and as ICANN's chief security officer, becoming the field's most credible translator between hackers and governments - the same bridge the L0pht walked into the Senate in 1998.
- 1993Nii Narku QuaynorThe Ghanaian scientist recognised for pioneering internet development across Africa.The technical work of connecting a country is largely the same everywhere; what differs is how much of the surrounding apparatus you have to build yourself. Where a European or Japanese pioneer could assume universities with budgets, existing leased circuits and a regulator that had heard of data, the equivalent work across much of Africa meant assembling the institutions alongside the infrastructure. That the person who connected Germany and the person who connected Japan are far easier to name than the person who did comparable work for a continent is itself worth noticing.
- 1994Bill CheswickCo-author of Firewalls and Internet Security in 1994, one of the first books on the subject, written from running AT&T's internet gateway - and the author of the account of watching an intruder inside a deliberately prepared environment.An Evening with Berferd is the piece people remember, and it is where the honeypot argument enters the literature: rather than eject the intruder, he watched, recorded and learned what the attacker was actually trying. The book's most durable line is a warning against its own subject, and the authors made it themselves - in many of the access arrangements they studied, the only secure component was the firewall, which attackers simply went around to reach the machines it was said to protect.
- 1994Bruce SchneierThe cryptographer and writer whose 1994 book Applied Cryptography taught a generation of programmers how ciphers work, who designed Blowfish and Twofish, and who then spent decades arguing that the hard problems in security are human and economic rather than mathematical.He gave the field several of its most-used ideas: security theatre for measures that perform safety without providing it, the observation that security is a process and not a product, and Schneier's law - anyone can design a cipher they themselves cannot break. His newsletter has run since 1998 and remains one of the few places where the policy, economic and technical sides of the field are argued together.
- 1995Craig NewmarkProgrammer whose 1995 email list of San Francisco events became Craigslist, the site that moved classified advertising onto the internet and, by the same act, out of the newspapers.The training is the part usually left out. A computer-science master's thesis on information security, seventeen years at IBM, then a move to San Francisco in 1993 as a systems security architect at a brokerage - and in 1995, from that job, an email to friends listing what was on in the city. People asked to be added; then they asked for jobs, apartments and things for sale, and he added those. By 1999 it was a company, and it became one of the most used sites on the internet by running on almost nothing: mostly free listings, a tiny staff, and a stated reliance on the users themselves to police what was posted. Two facts stand against each other and both are recorded. The site is widely held to have taken from newspapers the classified revenue that local journalism ran on, and the resulting news deserts are laid at its door; and its founder has since given, by his own account, some six hundred million dollars, first to journalism and then, increasingly, to cybersecurity and to military families. A security engineer built a trust system, watched what it did to an older one, and has spent the proceeds on the two things his thesis and his conscience pointed at.
- 1995Kevin MitnickThe 1990s hacker whose social-engineering exploits made him the era's most famous computer intruder.Mitnick broke into corporate networks largely by manipulating people rather than machines, became a fugitive, and was arrested in 1995 after a high-profile hunt. He later reinvented himself as a security consultant and author, making 'the human is the weakest link' a lasting lesson.
- 1995Tsutomu ShimomuraThe San Diego Supercomputer Center researcher whose own machines were broken into on Christmas Day 1994 using TCP sequence-number prediction and IP spoofing - and who then led the technical hunt that ended with Kevin Mitnick's arrest in February 1995.The intrusion itself was a landmark: a textbook demonstration that a TCP connection could be hijacked by guessing the sequence numbers of a trusted host, which is why sequence-number randomisation exists today. The chase, written up with journalist John Markoff as Takedown, made both men famous and remains fiercely disputed - Mitnick's supporters read it as self-mythologising and see the press coverage itself as part of the punishment.
- 1995Wietse VenemaThe author of Postfix and TCP Wrapper, and, with Dan Farmer, of SATAN - the scanner that made the argument for testing your own systems the way an attacker would.The 1993 paper that announced SATAN was called improving the security of your site by breaking into it, and the reaction was the story: a newspaper compared releasing it to handing out rocket launchers at the local library. The tool shipped anyway, and the position it defended - that defenders need the attacker's view, and that withholding the tool protects nobody who is already being scanned - is now the assumption behind every vulnerability scanner sold. Postfix, written later, is the other half of the same instinct: rebuild the mail server with privilege separation because the existing one could not be made safe.
- 1996Aleph One and Smashing the StackThe 1996 Phrack article by Elias Levy, writing as Aleph One, that explained the stack buffer overflow completely and clearly - stack frames, return addresses, shellcode, NOP sleds - and taught an entire generation how memory corruption actually works.It is probably the single most influential technical text the underground produced. Before it, overflows were folklore known to a few; after it, they were a discipline with a curriculum, which is exactly why the paper is also the standing exhibit in the disclosure argument. Every defence built since - stack canaries, non-executable memory, address randomisation, memory-safe languages - is a response to what this article made common knowledge.
- 1996Daniel J. BernsteinThe cryptographer and programmer behind qmail and djbdns, and of the curve and cipher designs now widely deployed - and the person who put money behind a security guarantee for his own software.The guarantee is the part that changed practice: he offered a cash reward for a verifiable security hole in qmail, which was an unusual claim to make in the 1990s and a workable one because the software was small enough to reason about. His designs are opinionated in the same direction - fewer moving parts, less privilege, no configurability that can be misconfigured. He is also a lasting argument in the field about tone: the technical positions and the public disputes with other implementers arrive together in the record, and both belong in it.
- 1996Solar Designer (Alexander Peslyak)The Russian researcher behind John the Ripper, the password cracker that has been the standard auditing tool since 1996, and behind Openwall - along with early defensive work on non-executable stacks and the return-to-libc attack that showed why that defence alone is not enough.He is the clearest example of a researcher who moves attack and defence in the same career: publishing the technique that defeats a mitigation, then shipping hardening that addresses it. He also runs the oss-security mailing list, which is where a large share of the open-source world's vulnerabilities are coordinated in public. Quiet, rigorous, and enormously influential without the conference-stage persona.
- 1997Cristine HoepersThe general manager of CERT.br, Brazil's national incident response team, where she has worked on incident handling since 1999 - and the researcher most responsible for the country's honeypot measurement work and for helping new incident response teams get founded across Latin America.She received M3AAWG's Mary Litynski Award in 2020 for work reducing online abuse, and in 2024 became the first Brazilian woman inducted into FIRST's Incident Response Hall of Fame, a list that also carries Dan Kaminsky. The through-line of her career is capacity building rather than headline findings: teams that did not exist, best practices that had no local text, and long-running measurement published openly - the unglamorous work that determines whether a country can respond at all.
- 1997Fyodor (Gordon Lyon) and NmapThe author of Nmap, published in Phrack in 1997 and still the standard port scanner and host-discovery tool - the program that taught the industry what its own networks actually expose.Nmap's contribution goes beyond scanning: OS fingerprinting by TCP/IP stack quirks, service and version detection, and a scripting engine that turned it into a small vulnerability scanner. It is also a rare piece of security software with cultural reach - it appears on screen in The Matrix Reloaded, which Fyodor documents proudly on the project's Movies page. He also maintains the seclists archives, where much of the field's public discussion has been preserved for decades.
- 1997Nelson MuriloThe author of chkrootkit, the rootkit detector that has been part of the Unix security toolkit since the late 1990s, and one of the three founders of the ISTS podcast and the YSTS conference.Very few conference founders anywhere have their own code still installed on other people's servers decades later. chkrootkit is still being released - version 0.57 shipped in January 2023 - which is an unusual thing to be able to say about any security tool, let alone one written before the industry had a name for the category. He is also one of the three voices on the podcast that has been recording since 2006, and the event grew out of that rather than the other way round.
- 1998Mudge (Peiter Zatko)The L0pht member who wrote L0phtCrack, published early and widely read work on buffer overflows, and led the 1998 Senate testimony - later a DARPA programme manager, and head of security at Google's Motorola division and at Twitter.Mudge is the clearest single example of the underground-to-institution arc: the same person who told senators under a handle that seven people could take the internet down in half an hour later ran DARPA's Cyber Fast Track, funding hacker-scale research on hacker-scale timelines. In 2022 he became a whistleblower against his own employer, telling US regulators that Twitter's security was misrepresented - the hacker ethic of disclosure applied, at personal cost, at the top of the industry.
- 1998Space Rogue (Cris Thomas)The L0pht member who founded the Hacker News Network, testified alongside the rest of the crew before the US Senate in 1998, and has spent the decades since as one of the field's most consistent public voices on research ethics and vendor behaviour.HNN mattered because it was journalism by practitioners at a moment when mainstream coverage of hacking was mostly panic; it set the tone for the security press that followed. He later wrote the L0pht's own history, arguing against the tidy legend the industry prefers, and remains a fixture at DEF CON and Black Hat - proof that the underground's institutional memory is carried by people, not archives.
- 1999DVD Jon (Jon Lech Johansen)The Norwegian teenager who in 1999 co-released DeCSS, the program that decrypted DVD content scrambling so films could be played on Linux, and who was prosecuted twice in Norway and acquitted both times.The case became the defining fight over whether code is speech: DeCSS circulated as a haiku, a T-shirt, a dramatic reading and a prime number, precisely because the courts were being asked to ban a number. Johansen's defence - that he was making a legally purchased disc play on his own computer - is the ancestor of every right-to-repair and interoperability argument since, and the affair fixed reverse engineering as the pivotal issue in the digital-rights debate.
2000s
- 2000Mafiaboy (Michael Calce)The alias of Michael Calce, the Montreal fifteen-year-old whose February 2000 denial-of-service spree - Project Rivolta - knocked Yahoo!, Amazon, eBay, CNN, Dell and E*Trade offline using university machines he had compromised.The attacks landed at the peak of dot-com optimism and detonated it: the idea that a teenager with borrowed computers could switch off the internet's biggest brands reached the White House, drove emergency summits and helped make distributed denial of service a permanent line item in every risk register. Calce was sentenced in youth court to eight months of open custody, and, in the pattern the field keeps repeating, grew up into a security consultant and author.
- 2001Aaron SwartzThe programmer and activist who co-authored the RSS 1.0 specification as a teenager, helped build Reddit and the Creative Commons technical infrastructure, co-created SecureDrop, and led the campaign that stopped the SOPA copyright bill - and who took his own life in 2013 at twenty-six while facing federal charges.The charges followed his bulk download of academic articles from JSTOR over the MIT network. JSTOR declined to pursue it; prosecutors did not, bringing multiple counts under the Computer Fraud and Abuse Act with a threatened sentence out of all proportion to the conduct. His death turned the CFAA's elasticity from a researchers' grievance into a public scandal, produced repeated attempts at reform known as Aaron's Law, and remains the strongest argument in the field for prosecutorial restraint. Note: this entry touches on suicide; the topic is handled here only as historical record.
- 2001Federico KirschbaumCo-founder of Ekoparty (2001) and, with Francisco Amato, of Infobyte - the Argentine research company behind Faraday, the collaborative penetration-testing platform.Kirschbaum represents the pattern that makes the Argentine scene distinctive: the conference and the research companies grew from the same group of people, so talks, tooling and commercial work reinforce each other instead of competing. He has continued presenting original research internationally, including at Black Hat, which is the practical rebuttal to the assumption that serious offensive research happens only in the northern hemisphere.
- 2001Francisco AmatoCo-founder of Ekoparty and of Infobyte, and the author of Evilgrade - the framework that demonstrated how software update mechanisms could be abused to deliver attacker-supplied code to a victim who was doing exactly what security advice told them to do.Evilgrade landed at the point where the industry was telling everyone to keep software updated, and showed that an update channel without signature verification is a distribution system for whoever controls the network path. The work is a good example of research from the region setting an international agenda: update integrity is now assumed, and part of the reason is that someone built the tool that made the failure undeniable.
- 2001Leonardo PigñerCo-founder and chief executive of Ekoparty, the Buenos Aires conference that became Latin America's largest hacking event - one of the five who started it in 2001, alongside Juan Pablo Daniel Borgna, Federico Kirschbaum, Jeronimo Basaldua and Francisco Amato.Pigner is the founder who stayed operational: he runs the conference as an organisation rather than an annual event, with year-round community programmes, a publishing arm and training. With Basaldua he also built the security firm Base4. The Ekoparty model - a commercially sustainable conference that never stopped being a hacker gathering - is the template most Latin American organisers now study, and it is why the region has an independent circuit rather than franchised editions of northern events.
- 2002Adrian LamoThe itinerant intruder of the early 2000s - working from libraries and cafes, breaking into Microsoft, Yahoo!, WorldCom and the New York Times, then telling the victims how he did it and offering to help fix it.Lamo is the awkward case the field cannot file cleanly. His method was intrusion followed by unsolicited disclosure, which some read as public service and courts read as crime; the Times added him to its expert source database, then pressed charges. In 2010 he reported Chelsea Manning to the US Army after she confided the WikiLeaks disclosures to him in chat, and much of the hacker community never forgave him. He died in 2018 at thirty-seven, remembered as the era's most contested conscience.
- 2002Gary McKinnonThe Scottish systems administrator who between 2001 and 2002 wandered through dozens of US military and NASA computers looking, by his own account, for suppressed evidence of free-energy technology and UFOs - and who found his way in largely through blank and default passwords.American prosecutors called it the biggest military computer hack of all time and sought extradition; a decade-long legal fight followed, and in 2012 the UK Home Secretary blocked it on human-rights grounds after McKinnon was diagnosed with Asperger's syndrome. The case is studied twice over: as the definitive argument about extradition and proportionality in computer crime, and as an uncomfortable audit finding - the world's most sensitive networks were entered by someone who mostly just tried empty passwords.
- 2003Adiel AkploganThe Togolese engineer who helped bring the first TCP/IP connection to his country, then built the registry that allocates addresses for a continent.The Quaynor entry notes that connecting Africa meant assembling the institutions alongside the infrastructure. This is what that looked like in one career. He helped establish Togo's first TCP/IP connection in 1996, worked on several of the earliest West African providers, advised the internet development strategy of half a dozen countries, and then in 2003 helped found AFRINIC - the body that decides who gets which addresses across Africa - and ran it for a decade. He intended to stay two years. The origin is worth keeping because it is so unlike the usual founding story: an intern, promised a permanent job if he could fix what others could not, who worked three days and nights and produced a working prototype on French Minitel technology. He called that the start of the journey to the internet in Togo.
- 2003HD MooreThe creator of Metasploit, the open-source exploitation framework released in 2003 that turned exploit development from artisanal one-off code into a shared platform with modules, payloads and a common interface.Metasploit did for offence what a package manager did for software distribution, and the argument about it has never fully settled - it lowered the barrier for defenders and attackers on the same day. Moore also ran the Month of Browser Bugs, publishing a flaw a day to force vendors to move, and later scanned the entire public IPv4 internet repeatedly to measure what was actually exposed. Both projects share his method: make the uncomfortable truth impossible to ignore.
- 2005Albert GonzalezThe Miami carder who stole roughly 170 million payment-card numbers between 2005 and 2007 - TJX, Heartland Payment Systems, Dave and Buster's and others - while working as a paid informant for the US Secret Service.The technique was mundane and therefore damning: war driving to find shops running weak wireless encryption, then SQL injection against payment processors. The scale rewrote the rules - it is a direct cause of the PCI DSS regime's teeth, of end-to-end encryption in payment terminals, and of the modern assumption that card data must never sit readable on a retailer's network. He is serving twenty years, the longest sentence yet handed down in the United States for computer crime.
- 2006Luiz Eduardo dos SantosThe founder whose idea the ISTS podcast was, and who spent months insisting the three of them record a pilot; co-founder of the YSTS conference that grew out of it.The detail worth keeping is the insistence. The three worked in information security, lived in different cities - he in a different country - and had an affinity for the subject that sometimes converged and sometimes did not. Nothing about that arrangement produces a podcast without somebody pushing, and he pushed for months. Nearly twenty years of continuous recording, and one of the most selective conferences in Latin America, exist because of that.
- 2007George Hotz (geohot)The New Jersey teenager who in 2007, at seventeen, performed the first unlock of the original iPhone from AT&T, and who in 2010 published the root keys of the PlayStation 3 after Sony removed its Linux feature.Sony's lawsuit against him produced one of the largest backlashes in the history of the industry: Anonymous launched Operation Sony, and the PlayStation Network breach that followed weeks later cost the company a hundred million accounts and a reported hundreds of millions of dollars. Whatever the direct causal chain, the episode is the standard case study in how suing a researcher can cost far more than the bug ever would. Hotz went on to work in artificial intelligence and self-driving cars.
- 2007Max Butler (Iceman)The security researcher turned card thief who, as Iceman, hacked and forcibly merged the rival carding forums of the mid-2000s into his own CardersMarket - a hostile takeover of an entire criminal marketplace - before receiving a thirteen-year sentence in 2010.His arc is the field's sharpest cautionary tale because both halves were real: he wrote intrusion-detection signatures and ran a respected security list while also stealing roughly two million card numbers. Kevin Poulsen's book Kingpin reconstructs it in detail. The case is also where the underground economy's structure became legible to outsiders - forums, reputation systems, escrow, vendor ratings - which is the moment researchers stopped treating cybercrime as hacking and started treating it as an industry.
- 2007Rodrigo Rubira Branco (BSDaemon)The Brazilian vulnerability researcher who has led malware and vulnerability research at Qualys, headed research at Check Point in Israel, worked on IBM's Advanced Linux Response Team, and has published dozens of flaws in widely used products - one of the country's most visible names on the international conference circuit.His significance for Brazil is the demonstration effect: low-level security research - kernels, firmware, exploit mitigation - was assumed to happen elsewhere, and a generation of Brazilian researchers followed a path he helped make visible. The local conference culture that grew alongside it, notably the Hackers to Hackers Conference in São Paulo, is where much of that community still meets.
- 2007Willian CaprinoOne of the three organisers who created You Sh0t the Sheriff, and the person who has most often explained the event's history and its unusual format in public - a career of more than twenty years in Brazilian information technology and security.The YSTS founders describe the origin as a reaction: Brazilian security events were becoming either vendor showcases or purely technical gatherings, and they wanted the room where the two audiences argue with each other. Deliberately capping attendance was the mechanism. Caprino is the clearest example of the organiser-as-infrastructure that this scene runs on - people who keep an event alive for two decades while holding a full-time job elsewhere.
- 2008Dan KaminskyThe researcher who found the 2008 DNS cache-poisoning flaw that affected every resolver at once, and then coordinated the simultaneous multi-vendor patch rather than publishing it.The weakness was in the protocol, not in one product: DNS matched answers to questions using a 16-bit query identifier, and he showed how to win that race reliably. What makes the episode a landmark is the handling. He was 29, working as a penetration tester, and he took the finding to competing vendors, who shipped a coordinated patch on 8 July 2008 - a month before he presented the detail at Black Hat. Source-port randomisation was the mitigation; DNSSEC was always the real answer. The uncomfortable footnote is that the fix had been proposed years earlier and not adopted, and that patched resolvers were shown to be poisonable in hours. He died in 2021.
- 2008Filipe BalestraCo-organiser of the Hackers to Hackers Conference in Sao Paulo alongside Rodrigo Rubira Branco, founder of PRIDE Security, and a researcher whose published work includes automated teller machine jackpotting. He took sole leadership of H2HC from 2025.The handover is worth recording because succession is where volunteer conferences usually die. After twenty-one years Branco announced publicly that he was stepping away from the organisation and that Balestra would carry it, and the conference continued - a deliberate, announced transition rather than an event quietly ending. Latin America's oldest security research conference surviving its founder's exit is a governance achievement as much as a technical community's.
- 2009Jaime Andrés Restrepo (DragonJAR)Founder of DragonJAR, the Colombian security company and the largest Spanish-speaking security community of its era, and creator of the DragonJAR conference in Manizales - recognised with Ekoparty's lifetime achievement award.His strategic choice was language. DragonJAR was built in Spanish, for a region whose practitioners were expected to consume security knowledge in English, and the community and forum that grew around it trained a generation that had no other local reference. His own research - notably work on attacking the connected systems of cars sold in Latin America - made the point that regional targets deserve regional researchers, since nobody in the northern hemisphere was testing those particular vehicles.
2010s
- 2010Barnaby JackThe New Zealand researcher whose 2010 Black Hat talk 'Jackpotting Automated Teller Machines' made two ATMs spray cash across the stage on command - the single most-cited demonstration in conference history, and the origin of jackpotting as a term.He went on to show that insulin pumps could be commanded from hundreds of feet away and that implantable defibrillators could be made to deliver a lethal shock - work that pushed medical-device security into regulation and reportedly influenced how the US Vice President's own device was configured. He died in 2013, days before a DEF CON talk on pacemakers, at thirty-five. The showmanship was the method: he proved that a stage demo moves an industry that a hundred advisories cannot.
- 2010Julian Assange (Mendax)The Australian hacker who as a teenager, under the handle Mendax, was part of the International Subversives and pleaded guilty in 1996 to intrusions including Nortel - later the founder of WikiLeaks and the most disputed figure of the disclosure era.Before WikiLeaks he co-authored the cryptographic deniable-storage tool Rubberhose and researched the book Underground, which remains the definitive account of the Australian scene. His later career - the 2010 military and diplomatic leaks, the Ecuadorian embassy, extradition proceedings and a 2024 plea deal - divides the hacker community as sharply as any subject in it, along the same fault line the culture has argued since the 1980s: whether releasing information is inherently a public good.
- 2010Rodrigo Montoro (Sp0oKeR)Brazilian researcher known as Sp0oKeR, long associated with intrusion detection and detection engineering, and the author of one of the two 2010 lists - his own roster of Brazilian security people on Twitter - that first mapped the community.He belongs to the detection side of the field rather than the offensive one, which is under-represented in hacker history everywhere: the people who write the rules that catch the attack rarely get the conference legend treatment. His long presence in the Brazilian scene, and the fact that two independent practitioners felt the need to index the community in the same month of 2010, says something about how invisible the scene was to itself before that.
- 2010Sandro SüffertOne of the earliest Brazilian security bloggers - his SSegurança blog compiled the first substantial index of Portuguese-language security blogs in 2008 - and a long-running figure in digital forensics and threat intelligence in Brazil.His 2008 blog index and Anchises's 2010 profile list were the two documents that let the Brazilian community see itself for the first time: before them, practitioners knew their own city's people and nobody else's. That is a recurring pattern in this scene - the infrastructure that mattered most early on was not technical but bibliographic, built by people who decided to keep lists.
- 2011Anchises MoraesOne of the founders of Garoa Hacker Clube, Brazil's first hackerspace, where he holds the ceremonial title of Supreme Chancellor; founder and organiser of Security BSides Sao Paulo; director of the Brazilian chapter of the Cloud Security Alliance; and author of the long-running blog AnchisesLandia.He is the connective tissue of the Brazilian scene rather than a researcher known for one finding: the hackerspace, the free community conference, the professional association chapter, the threat-intelligence work and two decades of writing that documents the local calendar year by year. Communities need someone who keeps the record and introduces people to each other, and in Brazil that role has largely been his - which is why his blog is a primary source for the history of these events.
- 2011Deviant OllamThe physical security researcher and TOOOL member whose lockpicking talks put the discipline in front of network audiences that had never considered the door.At the fifth edition of YSTS, in May 2011, he opened the event with the basics of lockpicking and sold kits to the room afterwards - which is the whole argument in one gesture, since a lock is a control whose failure mode you can hold in your hand. Physical access defeats most of what the rest of a security programme buys: a server room door, a rack lock and a badge reader sit underneath every network control, and they are usually the least examined part of the estate.
- 2011Fabio AssoliniThe Brazilian malware analyst on Kaspersky's Global Research and Analysis Team whose published work is the main public record of how Brazilian banking fraud actually operates - boleto manipulation, overlay attacks and the families that became known as the Tetrade.His significance is documentary. Brazilian banking malware was for years a phenomenon everyone in the region experienced and almost nobody outside it could read about, because the analysis existed only in Portuguese or not at all. Publishing that research in English, with samples and technique names, is what turned a local nuisance into an internationally understood threat class - and it is why the rest of the world eventually recognised Brazilian crews as innovators rather than imitators.
- 2011Nelson BritoThe creator of T50, the packet injection and stress-testing tool, and the only Brazilian to have presented at PH-Neutral in Berlin, in 2011.T50 is the kind of tool that gets used far beyond the people who know who wrote it, which is the usual fate of a good one. His research has been published under names like Permutation Oriented Programming and SQL Fingerprint, and his speaking record runs through the Brazilian circuit - IME, CNASI, CONIP, SERPRO, ITA, H2HC, BSides Sao Paulo and YSTS - as well as that one Berlin appearance, which is worth noting because PH-Neutral was small and did not hand out invitations widely.
- 2012Peter EckersleyThe EFF technologist who co-founded Let's Encrypt, and so removed the price of encrypting a website.Two threads meet in one person. The certificate article argues that encryption stayed off most of the web because it was a budget line and a chore, and that removing both changed the security posture of the internet more than any protocol did - he is who removed them, beginning with a conversation at a conference in 2012 about automating the thing everyone did by hand. And the site's own fingerprint demonstration belongs to a genre he invented at the EFF, where showing a person exactly what a tracker could read about them turned out to argue the case better than any explanation. He died in 2022, at 43. An obituary put the first achievement plainly: deprecating a billion-dollar industry overnight, and leaving better security behind for everyone.
- 2013Edward SnowdenThe NSA contractor who in 2013 handed journalists a large archive of documents on US and allied signals-intelligence programmes, then left for Hong Kong and eventually Russia, where he remains beyond the reach of American prosecution.For this field the significance is technical rather than political: the documents turned longstanding suspicions about bulk collection, tapped inter-datacentre links and weakened cryptographic standards into sourced fact. The industry response was immediate and durable - encryption between datacentres, HTTPS as a default rather than a feature, certificate transparency, and free certificates at scale. The disclosure itself was filmed in the Hong Kong hotel room and released as Citizenfour, which doubles as a record of operational security practised under real threat.
- 2013Katie MoussourisThe researcher who created Microsoft's bug bounty programme and helped create the first one at the US Department of Defense, and who has spent the years since arguing about how they should be run.The contribution is institutional rather than technical, and it is the harder kind: persuading a company that paying outsiders to find its defects is cheaper than not knowing about them. Her later argument is the one worth carrying - that a bounty is not a security programme, and an organisation that cannot fix what it already knows about will not be helped by learning more. Bounties reward finding; nothing in them rewards repairing, which is why the mature version pairs them with a disclosure policy and a fix pipeline.
- 2013Michal Zalewski (lcamtuf)The Polish researcher who wrote American Fuzzy Lop, the coverage-guided fuzzer that made automated bug-hunting genuinely effective, and the books Silence on the Wire and The Tangled Web on passive reconnaissance and browser security.AFL changed the economics of finding memory-corruption bugs: instrument the target, mutate inputs, keep whatever reaches new code, and let a laptop discover crashes that skilled humans missed for years. Nearly every modern fuzzer descends from it, and large parts of open source were audited by it before anyone was paid to. His writing has the same quality as his tools - patient explanations of how information leaks from systems that look silent.
- 2017Marcus Hutchins (MalwareTech)The young British researcher who stopped WannaCry in May 2017 by noticing an unregistered domain in the malware and buying it for about ten dollars - which turned out to be the worm's kill switch, halting a global outbreak within hours.Three months later he was arrested in Las Vegas leaving DEF CON, charged over banking malware he had written years earlier as a teenager. He pleaded guilty, and in 2019 a judge sentenced him to time served, explicitly weighing what he had since done for the world against what he had done as a kid. The arc - accidental hero, defendant, and now respected researcher - is the most modern version of the field's oldest story, and it is why the community argues so hard about second chances.