Coder, angel investor, unicorn founder @material_sec. Can only really communicate through analogies.
Mountain View, CA
Joined March 2009
- Tweets469
- Following721
- Followers847
- Likes1.4K
Ryan Noon retweeted
Socket now protects the world's largest company. That makes two of the Fortune 5 and ten of the Fortune 100.
Developers, build servers, and AI agents install packages faster than anyone can review them. Socket checks what each one does before it's installed.
Absolutely correct from esr
The only way out is through.
They're calling it the Bugpocalypse. LLMs are being used to find long-hidden cracks in the software infrastructure, and it's happening at a furious rate. 3% of all compromises in computing history happened in the last week, claims one source? I believe it.
There are people saying public access to the frontier models ought to be locked out, or heavily guardrailed, over this. The problem with that idea can be summed up in one sentence: when lockpicks are outlawed, only outlaws will have lockpicks.
The lockpicks will be Chinese open-weight models, if nothing else. There's no way to stop those from becoming ubiquitous.
There are two futures in front of us. One in which only the bad guys have lockpicks, and security holes go undiscovered until they're exploited. Another in which everybody has lockpicks and is aggressively red-teaming their own software so it gets fixed before the holes are exploited.
The corpus of human code is huge but finite. The number of defects in it has to be finite too. We can fix those defects now; we have a million friendly robots to do it with.
The only way out is through.
Ryan Noon retweeted
Bringing cyber resilience to Space.
Method is proud to announce a $30M STRATFI award (Strategic Funding Increase) to equip the U.S. Space Force with the autonomous cyber infrastructure it needs to win in a contested space environment.
We鈥檙e looking for the country鈥檚 best engineers and cyber operators to join us in support of this mission.
Ryan Noon retweeted
If you think it's hard to keep the models under control in a sandbox, you should try using them in real-world cyber ops.
Safely wielding intelligence for security is now the most important problem in applied AI.
people on here are thinkers so they assume that reasoning about alignment is the hard part and making sure millions(1) of task types, environments, and their respective virtual machines are configured correctly is the easy part but it鈥檚 essentially the opposite. you need to have worked in a large technology organization to appreciate the complexity and unreliability of this intuitively
(1) made up order of magnitude
Why can't a user add a third person to ChatGPT or Claude chat conversations in the main product surface?
