Joe Grand—also known in hacker circles as Kingpin—is a computer engineer and hardware hacker whose career took shape through curiosity, mischief, community, and a later commitment to sharing what he learned. In a September 25, 2024 profile, SecurityWeek’s Kevin Townsend recounts Grand’s path from childhood computer experiments and teenage troublemaking to Boston’s L0pht hacker collective, vulnerability disclosure, and teaching hardware security.
Who is Joe Grand?
Grand is a computer engineer and hardware-security specialist, a former member of the Boston hacker collective L0pht, and the proprietor of Grand Idea Studio. SecurityWeek describes the Portland, Oregon-based firm as a technology development, licensing, and consulting business founded in 2002. That is the profile’s description, not confirmation of the company’s current operations or services.
Grand’s story is not simply one of technical skill. In Townsend’s account, the defining shift is from using curiosity for risky teenage exploits to applying it through research, information sharing, and teaching.
How did Joe Grand get started?
Grand recalls that his interest in technology began at age seven, with an Atari, games, and bulletin board systems. As a teenager, he moved from exploring computers into phone phreaking and credit-card fraud. The profile recounts that he was arrested; those details are Grand’s recollections as reported by Townsend.
Recommended Free Tools
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
An invitation into L0pht became a turning point. Rather than treating technical knowledge as something to keep to himself, Grand says the group helped him understand how researchers could share what they knew and build on one another’s work.
What did L0pht change for him?
L0pht was a Boston hacker collective that grew from informal gatherings around shared space and equipment. In the profile, Grand describes its influence less as a single technical breakthrough than as a change in how he thought about knowledge and community.
“I learned very quickly about the importance of sharing information, sharing what you know, and learning from other people.”
Rank #2
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
That ethic connects the profile’s account of Grand’s early life to his later work: discovering a weakness matters, but so does how that knowledge is communicated and used.
What does Joe Grand say about vulnerability disclosure?
Grand supports disclosing vulnerabilities, but questions the phrase “responsible disclosure.” His concern is practical: researchers may not know what will happen when they report a flaw, particularly if the manufacturer has no clear disclosure policy or does not respond constructively.
“There’s always a fear of what’s going to happen when this information comes out.”
Rank #3
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
On the label itself, he asks, “What does it mean?” This is Grand’s perspective in an interview, not legal advice or a universal disclosure procedure. The profile presents L0pht as a group that championed responsible disclosure while also describing why Grand sees the terminology and vendor response as unresolved concerns.
What does Joe Grand do now?
SecurityWeek describes Grand Idea Studio as Grand’s technology development, licensing, and consulting firm. Grand also says he teaches organizations hardware hacking and hacker-style problem solving:
“I do a lot of training, going to organizations and teaching them about hardware hacking and how to think like a hacker to solve a problem.”
Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
The profile does not establish current course availability, enrollment details, or pricing. It portrays his teaching as an extension of the curiosity and knowledge-sharing that became central to his work.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What was the Trezor wallet hack?
The profile recounts that someone who had lost access to cryptocurrency funds contacted Grand, and that he hacked a Trezor hardware wallet to help. Townsend reports the funds as around $2 million in Theta currency. The story’s video, “How I hacked a hardware crypto wallet,” had almost 8.5 million views when SecurityWeek published its profile on September 25, 2024; that is a dated snapshot, not a current view count.
The profile does not identify the wallet model or provide independently verified transaction details, nor is it a step-by-step tutorial. Its relevance here is as an example of Grand applying hardware-security expertise to a real recovery problem—not as evidence that every lost wallet can be recovered or that a particular Trezor model has a general vulnerability.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How does Grand describe neurodiversity?
Grand reflects on his own possible neurodivergence, describing both difficulties that can be disabling and the possibility of sustained focus. He explicitly does not claim to speak for everyone. The profile offers no population-level study or statistic establishing how common neurodiversity is among hackers, so his personal account should not be generalized into a claim about the field.
Source and scope
This account is based on Kevin Townsend’s interview profile of Joe Grand, published by SecurityWeek on September 25, 2024: “Hacker Conversations: Joe Grand – Mischiefmaker, Troublemaker, Teacher.” The article reports Grand’s recollections and views; it is not a technical guide to wallet recovery, a legal guide to vulnerability disclosure, or a comparison of hardware wallets or training programs.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
