A Partnership in Security: The Origins of CopperheadOS

Daniel Micay is a mobile security researcher currently working on the GrapheneOS privacy tool. His online presence is limited, primarily consisting of an X account, a LinkedIn page, and discussions on platforms like Reddit and HackerNews. The GrapheneOS team has stated they respond to inquiries collectively rather than through individual members, and Micay declined an interview request for this article, citing safety concerns.

James Donaldson, a self-taught hacker, registered the domain Copperhead.co in 2014 and incorporated the company in 2015 with Micay. The company's product was CopperheadOS, an open-source operating system focused on Android hardening. According to Donaldson, the partnership agreement involved equal shares, with Donaldson as CEO and Micay as chief technology officer.

Differing Accounts of a Partnership's Start

The two founders offer differing recollections of their initial meeting.

• James Donaldson stated he first met Micay between 2011 and 2013 through Toronto Crypto, a cryptography discussion group. He described Micay as guarded with an off-kilter sense of humor, primarily engaging in technical discussions.
• Daniel Micay, through his team, disputes this, stating they met in 2014 and he never officially joined the Toronto Crypto group.

Donaldson recalled an incident where Micay decrypted messages from a troll who infiltrated the group's chat. Micay, through his team, claims no recollection of this event.

"I have a knack for figuring out people very early on, and I knew this guy was brilliant," said James Donaldson.

The Business and the Code

According to court filings, Micay has claimed he was working on Android hardening before meeting Donaldson and agreed to the partnership with the understanding he would retain control over the resulting operating system.

Donaldson's view of the partnership extended beyond pure technical skill. He also stated, "It's cool being smart. But if you can't pay your bills, you're a dumbass."

Today, Micay's work continues with GrapheneOS. Dave Wilson, community manager for the project, offered a characteristically sparse detail: "All I can tell you about Daniel is that he lives in Canada."