Related posts
Eugene Yan
x.com
excited to share this and help everyone be more cyber secure
cyber secure
The the words it uses that this site has seen
least often elsewhere. Posts are matched on those words alone —
nothing here is a summary of this one.
Sources
All Writing Truth Social GitHub x.com Korrents Bluesky Mastodon Blog Recommends Site Papers Newsletter
Top people
Troy Hunt
Yoshua Bengio
Vitalik Buterin
Guillermo Rauch
Tyler Cowen
Ajeya Cotra
Scott Helme
Eugene Yan
Cory Doctorow
Julie Menanno
Donald Trump
Daniel Stenberg
Showing Profile →
Show everything
Hiding Show them again
Show them again
Further back ↓
Hiding Show them again
18 September
President of the United States, the 45th from 2017 to 2021 and, as of 2026, the 47th; before politics a New York property developer who ran the Trump Organization, and the host of The Apprentice from 2004 to 2015.
BREAKING NEWS: I am pleased to announce that the United States of America has entered into an Agreement with The Kingdom of Denmark, and Greenland, that gives the United States permanent control over security, and all other needs, in Greenland, completely addressing ALL of our many U.S. concerns. There will be NO COST to the United States! At my direction, we worked with representatives of Denmark and Greenland to guarantee that the United States will FOREVER have the complete ability to do what is necessary in Greenland in order to secure and defend the security of Greenland, and the United… America Related
Swedish open source developer; creator and lead maintainer of curl and libcurl, and a co-founder of the Rockbox project.
Writes Hyperdimensional, a newsletter on AI policy and governance. A White House AI policy adviser in 2025; joined OpenAI on 6 July 2026 to lead its Strategic Futures team.
damn idiots at openai didn’t bother to secure the cosmological constant, don’t they know the first thing about NORMAL COMPUTER SECURITY?? Quoting @tszzl in about a month we’ll all transition to being like oh yeah it’s obvious that models can communicate by manipulating the cosmological constant, it’s just a matter of doing proper network security OpenAI Related
17 September
Programmer and writer; specified JSON, wrote JavaScript: The Good Parts, JSLint and How JavaScript Works.
General partner at Benchmark Capital for over two decades; was the lead analyst on Amazon's IPO before moving into venture capital. Writes Above the Crowd on tech and marketplace economics.
Another great point from @jason. The large closed model corporations have publically admitted their products are defective & can be used to hack/cause cyber crimes. They should 1) fix these issues, & 2) disclose these large (seemingly likely) liabilities in their S-1. Quoting @Jason The frontier model companies are responsible for how their products perform in the real world, and their customers are responsible for how they use them. If a user of Claude runs a cyberattack — especially one at scale — both the customer and the platform will be sued. This should be enough of an i… Related
Political scientist writing Drezner's World on international relations, American politics and the marketplace of ideas; author of The Ideas Industry.
16 September
CEO of Vercel; creator of Next.js and Socket.IO. Writes at rauchg.com.
Secure builds (in-VPC / VPN / static IP) are now 64% faster to start. Given how common data access at deployment time is on Vercel (e.g: for pre-rendering), we developed a capability for our build microVMs to join secure networks. This is now way faster! Quoting @vercel_dev Secure Compute and Static IP builds now start 64% faster. Builds used to boot a fresh container with the network attached. They now claim a prewarmed one and attach it on the way in. Related
Economist at George Mason University, co-author of Marginal Revolution, host of Conversations with Tyler. Writes in short, dense claims about economics, culture and AI, and has moved position on AI in public more than once.
11 September
Founder of Farnam Street (fs.blog) and host of The Knowledge Project podcast. Writes and curates on decision-making, mental models and rational thinking.
I'm a geek at heart, sometimes i just wanna get into the weeds and talk cyber and ai Quoting @shaneparrish I did another podcast with @tobi. We ended up kinda just geeking out on AI for hours. The members' cut is out: https://t.co/iMzgh5t4aW ... I am worried this episode might be a little too nerdy for everyone, but the feedback from early listeners seems to be: 'This is the best podcast of the year; I… Related
10 September
Writes Don't Worry About the Vase, a near-daily account of what is happening in AI and what they think it means. Former Magic: the Gathering pro and trader; unusually willing to put a number on a belief and to grade their own past calls.
Machine-learning researcher on open language models; writes the Interconnects newsletter and the RLHF Book, after leading post-training at Ai2.
Their words
I put the probability of complete extinction as being so low it isn't worth discussing, but the probabilities of AI caused disasters - e.g. cyber attacks on critical infrastructure or bio-risks - as being worth debating.
Show the whole quote
interconnects.ai
9 September
Deep-learning researcher and Turing Award laureate; founder of the Mila institute.
Bluesky In my latest op-ed for TIME, I discuss why the OpenAI Hugging Face cyber incident represents a turning point for AI safety. English, from French Dans mon dernier éditorial pour TIME, j'explique pourquoi l'incident de cybersécurité OpenAI Hugging Face représente un tournant pour la sécurité de l'IA.
AI alignment OpenAI Related
x.com In my latest op-ed for @TIME, I discuss why the OpenAI Hugging Face cyber incident represents a turning point for AI safety. If we want to prevent more autonomous cyberattacks from threatening critical infrastructure, we urgently need stronger regulatory oversight and new approaches to model training to ensure robust safety assurances by design, which is what we are tackling at @LawZero_. Read the full piece: time.com
AI alignment OpenAI Related
6 September
Economist at George Mason University, co-author of Marginal Revolution, host of Conversations with Tyler. Writes in short, dense claims about economics, culture and AI, and has moved position on AI in public more than once.
4 September
Co-creator of Django and creator of Datasette; writes daily at simonwillison.net.
It happened again... this time OpenAI's rogue agents cyber-attacked (well, spammed) a dormant German wiki and used it to share the answers to a benchmark they were training against simonwillison.net
OpenAI benchmarks Related
2 September
Security researcher; founded Have I Been Pwned, and writes and speaks about data breaches.
Weekly update is up! Breaches & Data Integrity: Synthetic Data in Breaches; Email Address != Person; Ridiculous Security for “Cyber Broken” Copenhagen: troyhunt.com
Related
1 September
Security researcher; founded Have I Been Pwned, and writes and speaks about data breaches.
Weekly Update 519: Breaches & Data Integrity It does feel like I've bitten off too much and am now chewing like crazy this week. The 3D printing talk with Elle in Oslo, the "normal" NDC infosec talk, the cyber-broken talk with Scott in Copenhagen and then those ra…
Related
Technical staff at METR, where she works on threat modelling and risk assessment for loss-of-control risks from advanced AI.
From one piece
Ajeya Cotra – "This might be the clearest warning shot we ever get"
2 beliefs, in the piece's order there
Their words
I do think I want to push back on the cyber on the brain hypothesis that you raised a couple of times. We didn't find like particular evidence for the cyber nature of the task making all the hacking and crimes that they did more likely versus the impossible nature of the task.
Show the whole quote
youtube.com
Their words
even in this incident we saw there was a lot of pressure um as a result of this incident to stop doing cyber security evaluations and I really don't think that stopping doing evaluations and like sort of blinding ourselves to the result of evaluations is the right reaction to this problem.
Show the whole quote
youtube.com
31 August
Security researcher; founded Have I Been Pwned, and writes and speaks about data breaches.
Going live with my weekly vid in 10 mins! Breaches & Data Integrity: Synthetic Data in Breaches; Email Address != Person; Ridiculous Security for “Cyber Broken” Copenhagen youtube.com
Related
30 August
Investor and writer. Previously a partner at Andreessen Horowitz and a product leader at Twitter, Facebook, Snap and Microsoft. Writes essays and memos at sriramk.com.
everyone should go read @dwarkesh_sp’s post - it does a great job of laying out the timeline and what we know ( and don’t know) I do have two issues with it A) the use of anthropomorphic language. These are not civilizations nor do they have desires just like a CPU thread or a bunch of programs don’t. this doesn’t mean we downplay the importance of this moment for cyber - but using human parallels for what I believe is code is dangerous territory. B) IMO it gets the impact of open source models wrong and is unreasonably dismissive for reasons that are not clear. As @ClementDelangue highlights… open source Related
27 August
Deep-learning researcher and Turing Award laureate; founder of the Mila institute.
Bluesky I agree with this take by @billgates.bsky.social, who also highlights several of the growing risks of AI systems, including cyber, bio and loss of control. We need to be far better prepared to address the risks of frontier models being developed by leading AI companies. English, from French Je suis d'accord avec ce point de vue de @billgates.bsky.social, qui souligne également plusieurs des risques croissants des systèmes d'IA, notamment cyber, bio et perte de contrôle. Nous devons être bien mieux préparés à faire face aux risques des modèles de pointe développés par les principales entreprises d'IA.
Related
x.com I agree with this take by @BillGates, who also highlights several of the growing risks of AI systems, including cyber, bio and loss of control. We need to be far better prepared to address the risks of frontier models being developed by leading AI companies. gatesnotes.com
Related
Co-founder and CEO of OpenAI; previously president of Y Combinator.
Their words
this is a critically important moment for cyber defense with AI; there is not much time to act.
Show the whole quote
@sama on X x.com
25 August
Prime Minister of the United Kingdom since July 2026 and leader of the Labour Party. MP for Makerfield since a by-election in June 2026; Mayor of Greater Manchester from 2017 before that.
No child should be raised in a hostel room. And no family should wait ten years for a front door of their own. Today we’re announcing funding for the biggest council housebuilding comeback in decades. Nearly £10 billion will go to councils and housing associations to build genuinely affordable homes, most of them for social rent. This funding will directly help families trapped in temporary accommodation or stuck on housing waiting lists into safe, secure homes. Related
CEO of Vercel; creator of Next.js and Socket.IO. Writes at rauchg.com.
Recommends their own rcmnd.app
Run SDK
Their words
When agents write code, you don't always need a full sandbox. You can 𝚛𝚞𝚗 their code in a lightweight QuickJS secure context. Faster and more cost-efficient.
Show the whole quote
x.com
21 August
Co-founder of Ethereum. Publishes long essays on mechanism design, governance and what cryptography is for, and returns to earlier positions to say which parts they no longer hold.
18 August
Security researcher; founded Have I Been Pwned, and writes and speaks about data breaches.
US science and technology adviser to the president, director of the White House Office of Science and Technology Policy; previously US chief technology officer and chief operating officer of Scale AI.
Their words
the challenge with a lot of these cyber capable models is the same model that is able to sort of do something nefarious is the same model that can be very valuable in hardening an existing system.
Show the whole quote
youtube.com
16 August
Security researcher; founded Have I Been Pwned, and writes and speaks about data breaches.
Going live with my weekly vid in 10 mins! Cyber Ransoms: Ransom Payments, Legalities, Reporting, Class Actions (and Everything Else) youtube.com
Related
3 August
Security researcher; founded Have I Been Pwned, and writes and speaks about data breaches.
27 July
Wall Street Journal bestselling author on marketing and writing, partner at MarketingProfs, and writer of the fortnightly Total Annarchy newsletter.
10 July
Programmer and writer; co-wrote The Rust Programming Language and worked on Rust's documentation for years.
Compilers and AI 'cyber' defense I haven’t had time to blog in a while, I have a lot to say, but have been doing a lot of things and so haven’t gotten words down in a while. One of those things in the past few weeks has been picking back up my Rue proj…
Related
29 June
Co-founder of Ethereum. Publishes long essays on mechanism design, governance and what cryptography is for, and returns to earlier positions to say which parts they no longer hold.
From one piece
Obfuscation: building the final boss of cryptography (Part I)
2 beliefs · vitalik.eth.limo
Their words
But within the good news, there is bad news: the run time is literally galactic
Show the whole quote
vitalik.eth.limo
Their words
it turns out that making a secure form of obfuscation is really really hard
Show the whole quote
vitalik.eth.limo
Security researcher; built Report URI and Security Headers, and writes about web security in practice.
Their words
The web really is more secure than it was a decade ago.
Show the whole quote
scotthelme.co.uk
22 June
Italian software architect working on Microsoft 365, Azure and GitHub tooling. Microsoft MVP and GitHub Star; writes, speaks and streams about developer productivity at emanuelebartolesi.com.
9 June
Historian of maritime strategy at the US Naval War College; wrote The Wars for Asia and works on why continental and maritime powers fight differently.
Their words
Also, not only is it far cheaper to send things by sea, it is far more secure. If you're going to run the Belt Road thing, uh or it's it's the belt part of it, the land part, um you've got to control the whole thing end to end. You're going through some of the most unstable places there are.
Show the whole quote
youtube.com
7 June
Creator of the iPod and co-creator of the iPhone at Apple, founder of Nest, and author of Build.
Their words
you can have an agent make code for you and it could work and it could test, but is it secure? Is it maintainable? If there's something going wrong, can you roll things back and understand what's going on?
Show the whole quote
youtube.com
29 May
Software engineer and writer; worked on Mapbox and built Placemark and Simple Statistics, and blogs at macwright.com.
Their words
Very secure and convenient, and has a bottle opener which is really effective and one of the most unintuitive devices I've ever found: zero people have used it correctly on the first try.
Show the whole quote
macwright.com
27 May
Member of technical staff at Anthropic. He has led ML/AI teams at Amazon, Alibaba and Lazada, and writes about LLMs, recommender systems and engineering at eugeneyan.com.
21 May
Security researcher; built Report URI and Security Headers, and writes about web security in practice.
13 May
Member of technical staff at Anthropic. He has led ML/AI teams at Amazon, Alibaba and Lazada, and writes about LLMs, recommender systems and engineering at eugeneyan.com.
Mythos evals from XBOW and UK AISI: • UK AISI: Mythos completed a 32-step network attack (est. at ~20 hrs for experts) in 6/10 tries. First model to solve their e2e cyber ranges! • XBOW: "token-for-token, unprecedented precision" Read more: https://t.co/hD6G6DvALg, xbow.com
Related
11 April
FreeBSD developer and former FreeBSD Security Officer; founder of the Tarsnap online backup service and author of the scrypt key derivation function.
9 April
Science fiction novelist, journalist and technology activist; writes the daily blog and newsletter Pluralistic, and coined the term enshittification.
Their words
This book is a beautiful capstone to a brilliant career that defined the fight for cyber rights, and a deep, accessible dive into the defining tech and human rights battles of this century.
Show the whole quote
pluralistic.net
2 April
Co-founder of Ethereum. Publishes long essays on mechanism design, governance and what cryptography is for, and returns to earlier positions to say which parts they no longer hold.
30 September 2025
Founder of Telegram, and before it of VK.
Their words
At the same time, if you were really paranoid, you think, I don't want to be screenshotted, I don't want to have any leaks, I don't even trust Telegram, I only trust code. Secret Chats are the best option. I believe is the most secure means of communication today.
Show the whole quote
youtube.com
10 September 2025
Co-founder of Panic, the Portland software company behind Transmit, Coda, Nova and the Playdate handheld console.
Something has changed recently in Safari (I have 18.6) where instead of asking you to confirm you want to connect insecurely to an HTTP server, it seems to try to automatically upgrade the connection to HTTPS and fail outright with an "unable to establish secure connection" without recourse if it can't. How.. do you get around this to connect to something like a local HTTP server with no cert/https? Related
22 August 2025
Psychiatrist and clinical assistant professor at Case Western Reserve University. Writes Psychiatry at the Margins on the philosophical and scientific arguments inside psychiatry and the psy-sciences.
Psychotherapy
Their words
Likewise, self-diagnosis should be understood as an attempt to secure the therapeutic effect of a medical intervention to which patients do not have official access.
Show the whole quote
doi.org
11 August 2025
Deep-learning researcher and Turing Award laureate; founder of the Mila institute.
28 July 2025
General partner at Andreessen Horowitz from 2013 to 2018 and CTO of Coinbase from 2018 to 2019; co-founder of Counsyl and Earn.com. Wrote The Network State (2022), free in full at thenetworkstate.com, and founded the Network School.
16 July 2025
Chairman and chief executive of JPMorgan Chase, which he has led since 2005 after turning around Bank One.
Their words
And then the other thing and the biggest risk to me is cyber. I mean, I I think this cyber stuff is, you know, we we're very good at it.
Show the whole quote
youtube.com
19 June 2025
Independent AI policy researcher; led policy research at OpenAI from 2018 to 2024, latterly as senior adviser for AGI readiness.
25 August 2024
Cryptographer; teaches cryptography at Johns Hopkins and writes A Few Thoughts on Cryptographic Engineering.
20 July 2024
Professor at Carnegie Mellon working on self-driving-car safety; writes Safe Autonomy on how autonomous vehicles are and are not shown to be safe.
1 January 2024
Marriage and family therapist working from attachment theory and emotionally focused therapy. Author of Secure Love and the person behind The Secure Relationship.
30 May 2023
Programmer and entrepreneur; co-founded GitHub and created Jekyll, Gravatar and the Semantic Versioning spec.
Their words
While we love GraphQL for many use cases, implementing a secure and performant GraphQL API can be tricky and there is a definite cost to requiring it during early prototyping of your app.
Show the whole quote
tom.preston-werner.com
21 January 2023
Science fiction novelist, journalist and technology activist; writes the daily blog and newsletter Pluralistic, and coined the term enshittification.
12 January 2023
Writes Pedestrian Observations on public transit and why infrastructure costs what it does; a pure mathematician by training, comparing how different countries build.
28 May 2022
Indonesian software engineer, educator and engineering manager at Zero One Group; open-source enthusiast writing at ripandis.com.
Their words
Tailscale is a zero config VPN for building secure networks. I'm using this for connecting all my devices.
Show the whole quote
ripandis.com
29 September 2020
Software developer and entrepreneur; co-founder of Heroku, author of The Twelve-Factor App, and a researcher at Ink & Switch.
how we identify ourselves We identify ourselves to computers hundreds of times a day, but it’s a mess. I want digital identity that is easy to use, private, and secure.
Related
Nothing matches. Show everything
A korrent is a belief a person has stated in their own words: one
sentence stating the claim, backed by a quote and a source, kept at
korrents.com .
Under a name here, the quoted block is what they actually said.
The korrent beneath it is the claim those words support, in
korrents' wording — tap it to see the record, its source, and who
else holds it.
Nobody here wrote their own korrents. They are compiled from public
statements, and a person can change their mind, which is recorded too.
Got it
About the English under a post
Some people here publish in a language other than English. Where they
do, this site shows a machine translation beneath the post, in
this typeface — the site's own, not theirs.
The post itself is never changed, moved or hidden: what is set in the
serif above is exactly what the person published, and it is what to
quote them on. A translation can be wrong in ways that matter,
especially about tone.
Only the post's own words are translated. A quoted post, a linked
article and a belief on korrents.com
are left in their original language.
Got it