Gennady "Ari" Medvinsky Email & Phone Number

Seattle, Washington, United States

Singapore, Sg

Headquartered in Singapore with offices in Seattle, Ethlas is a powerhouse of Web3 and AI innovation, specializing in the development of proprietary technology in cybersecurity and gaming.FailSafe is a groundbreaking on-chain wallet firewall that safeguards digital assets – by monitoring pending transactions globally, FailSafe swiftly identifies any attempt to transfer your assets and rapidly fires a counter-transaction that moves your assets to your self-custody FailSafe wallet.Battle Showdown is a mobile shooter game that’s enriched by interoperability of blockchain-enabled IPs and AI-powered game asset generation.

Singapore, Sg

Developed by Ethlas, FailSafe is a groundbreaking wallet firewall designed to proactively guard digital assets in the most critical scenarios: from sophisticated phishing attacks and stolen devices to private key theft and smart contract hacks.The service works by monitoring all pending transactions globally – across public and private transaction pools – ensuring rapid response ahead of potential attackers. Upon detecting an unauthorised or malicious transaction, FailSafe instantly initiates a counter-transaction, moving the user’s assets to a secure self-custody smart contract. This global, swift, and vigilant defence system offers users unrivalled security and peace of mind in their digital transactions.

Mountain View, Ca, Us

Confidential Computing/Cloud Security & Privacy

Singapore, Singapore, Sg

Grab is Southeast Asia’s leading ride-hailing platform and mobile payment company, using data and technology to improve transportation, payments, food delivery and logistics across a region of more than 640M people.As head of IAM engineering org:-- Founded the IAM engineering team in Seattle. Starting with two engineers grew the team to 20+ engineers spanning several development centers, responsible for all identity and access management scenarios for Grab. This includes external use cases (for passengers, drivers, merchants and wallet holders) as well as for internal (Grab employees).-- Architected and led the IAM team to build the Grab Identity platform for 3rd parties (based on OAuth 2.0 & OpenID Connect). Some fun facts: Our solution achieved certification by OpenID Foundation. Powers Grab Financial Group online payment acceptance for 3rd parties (over $million daily & growing). Powers 3rd party integration via the Grab Supper app for movies, tickets, travel and much more.-- Grab IAM next-gen offering. Formulated & led a set of complementary initiatives that form a comprehensive IAM platform for 1st and 3rd parties. This includes Adaptive Policy-Driven Auth (dynamic MFA), utilization of on-device biometrics, auth session enrichment and adaptive user agent selection. Achieved buy-in through tech talks, presentations and collaboration with partner stakeholders and leadership team.

Mountain View, Ca, Us

Lead a team of six developers responsible for on-boarding and integration of Cloud Identity and Access Management Service with all Google Cloud Platform Services.

Designed, implemented and shipped a service to service authentication and access controlsolution for the Nest Cloud. The solution accommodates a heterogeneous deployment ofservices (across AWS and GCP), leverages GCP IAM Key management infrastructureand replaces Nest’s legacy authn/authz solution with one that is based on a least privilegemodel.In support of enabling Nest consumers to use their Google credentials, contributed todesign and prototyped a system that links Nest and Google accounts and facilitates atransition to a single account system for Nest products based on GAIA.Implemented a token management and pin encryption library for the Nest iOS client foran upcoming consumer product offering.

Centrify offers a unified identity management (SaaS) solution to 5000+ enterprise customers. As a development lead, I shipped a number of key offerings, including multifactor authentication, integration with Office 365, account provisioning for 3rd party SAML apps and a reverse proxy for access to on premise applications.

xWish Studios is building disruptive Next-Gen Social Location services. The xWish app is somewhat like a personal Genie that is focused on automated location sharing, discovery and communications with friends. The xWish service is live and the app is available for iPhone and Android phones as well as over PC browsers.Implemented an innovative cloud/mobile phone architecture where core mobile functionality such as proximity/location, local & remote notification (push) areimplemented in native code (Java for Android, Objective C for iPhone) while all UI is done in HTML/CSS/Javascript through the use of Webview/UIwebview, thus enabling a single UI code base to be shared across three platforms Android, iPhone and Web. Implemented a scalable, fault resilient set of cloud services on Ubuntu using Node.js and the accompanying open source (github) packages such as Express & MongoDB.Development Expertise in Android (Java), iPhone (Objective C), Cloud Services(Node.js), Web (Javascript)

Redmond, Washington, Us

In collaboration with Microsoft research designed a novel anti-piracy solution for PC and console gaming. Implemented a prototype of the system using Windows Azure and filed 3 patent applications. Implemented a certificate boot strapping mechanism for a PlayReady (DRM) server that was shipped in 2011 fall release.

Redmond, Washington, Us

Owned the overall security architecture/design for the KIN V1 phone. Personally coded the following features:Implemented provisioning of device secrets at manufacturing time via NCIPHER’s HSM product (Hardware Security Module).Integrity protected registry. Using keying material in the device’s TPM, modified the Windows CE6 registry to foil un-authorized side-loading of apps via the registry.Achieved 20X performance improvement by converting AES encryption done via .NET to AES computation in the device’s hardware module (for all communication with KIN Edge).Coded all new functionality available via the (TPM) on the device: implemented a secure replacement for DPAPI and device authentication using TPM to the cloud (via X509 cert/private key).

Redmond, Washington, Us

PM ownership of Authentication, Authorization & DRM Licensing for the Live Service of the Xbox Game Console platform. Shipped: DRM Licensing for Xbox Live, Zune integration and NetFlix offering on Live in 2008.

Redmond, Washington, Us

Areas of ownership included: OS security components (SSL, Cred SSP, Kerberos, SSPI). Shipped numerous features in these areas. Lead multi-vendor interop initiatives for federated identity and TLS.

Us

My primary focus at Liberate was on e-commerce and security solutions that enable MSOs (TV cable operators) to monetize the Liberate interactive television platform. Initiated and led development effort for PayementHub – a micro payment system geared for the ITV environment. Implemented “SSL light”. In lieu of severe resource limitations in DCT2000 settop box, designed a light-weight approach for establishing a secure channel.

Responsible for all security and e-commerce related projects at Keen.com (Ingenio). Keen.com integrates telephony and internet content to offer phone based connectivity among web users. Keen is a transactional site where revenue is derived from per minute phone charges. To provide this capability I lead the effort to develop a number of payment alternatives including credit card clearance (via Cybersource/Verisign), online check clearance (via Telecheck) and direct phone billing (LEC via ILD). I also owned the development of Keen's authentication, access control and speaker background verification systems. All development was done on Windows using COM+, ASP and SQL Server technologies.

Architect and engineering manager for URS group (Unified Registration and Authentication). The URS system provides registration, authentication, account management and SSO services for all Excite products (i.e., mail, chat, planner, etc.). Owned integration of URS with third parties (e.g., WebMD, Pogo, tickets.com) as well major internal integration efforts of @Home’s portal with Excite.com

Longford, Middlesex, Gb

The TrustBroker solution won the best product of the year award (1998) from Network Magazine on the basis of an innovative approach for integrating public key and Kerberos technologies. My contributions:Laid foundation for the product by co-authoring the PKINIT IETF draft - a standards track spec for integrating public key (X.509 and PGP) and Kerberos.Evangelized the project to management, put a development team together (4 people) and led the PKINIT design and development effort to completion.Designed and developed smartcard support (via PKCS11) for TrustBroker. Added Virtual Smartcard support as a TrustBroker 1.1 feature.Promoted the product at security conferences (CSI 97 and RSA 98), made sales presentations to CyberSafe customers and evangelized it to media.The PKINIT approach was later adopted by Microsoft in Windows 2000.

Ph.D., Computer Science

Hbs Grab Executive Leadership Program

Master Of Science (M.S.), Computer Science

Bachelor Of Arts (B.A.), Computer Science