
Assistant Professor @CarnegieMellon ■ Fmr @BelferCenter @CFR_org @Princeton ■ PhD @Columbia ■ science & tech competition, arms control, int’l security, 美中关系
New York
Joined November 2009
- Tweets7K
- Following1.6K
- Followers4.6K
- Likes20.1K
1/ Technology is always advancing. So what does it take to future-proof the law? My latest research in @IntOrgJournal argues that efforts to maximize legal clarity can actually undermine the law’s resilience.
cup.org/4bX6mKJ
Terrible news this week. I was probably 6 years old when I first saw TNG and now that I’m an adult I revisit it almost annually. I didn’t think I could be so affected by a celebrity death.
I’ve been thinking about the show, the memories attached to it, and how seeing it as a kid probably influenced my gravitation toward the study of international politics.
There are so many generally great episodes dealing with all kinds of themes. But here’s an IR-specific starter pack:
S1E21: Symbiosis
- dependency theory, nonintervention
S3E2: Ensigns of Command
- international law vs human rights
S3E26–S4E1: Best of Both Worlds
- existential threats
S3E4: Who Watches the Watchers?
- technology & first contact
S3E7: The Enemy
- enemy imagining, brinksmanship
S3E10: The Defector ***
- whistleblowing, surprise attack
S4E12: The Wounded
- war, trauma, reconciliation
S4E21: The Drumhead ***
- McCarthyism, lawfare
S5E2: Darmok ***
- perception & misperception
S5E19: The First Duty ***
- unit cohesion vs oaths
S5E23: I, Borg
- war crimes in supreme emergency
S6E11: Chain of Command (skip part 1)
- leadership, enhanced interrogation
S7E12: The Pegasus
- black projects & treaty compliance
That’s just what I can think of! Honorable mention to S3E23: Sarek, which is about diplomacy and features (IMO) some of the best acting of the entire series between Stewart and Lenard.
jkc retweeted
NEW: Anthropic's IPO considers U.S. restrictions to legal high-skilled immigration one of its biggest risks to growth in AI, new SEC filing shows:
"changes to immigration policies that restrain the flow of professional and technical talent, including but not limited to U.S. immigration policies, may inhibit our ability to recruit and retain highly qualified employees. If we are unable to effectively manage the foregoing risks, our prospects, business, financial condition, and results of operations could be adversely affected."
Link: sec.gov/Archives/edgar/data/…
jkc retweeted
Most economists agree that the $100,000 OPT fee will "substantially weaken the ability of US universities to attract and retain top foreign students relative to other advanced economies."
jkc retweeted
The future of #ArtificialIntelligence is not pre-determined. As a technology developed by human beings, its future depends on the choices we make. We therefore have the responsibility to guide, change and, when necessary, reject its applications. A reliable system that serves the human person is of greater value than one that is exceptionally powerful but whose consequences cannot be adequately foreseen or controlled.
jkc retweeted
In lieu of flowers, memorial contributions may be made to:
Johns Hopkins Alzheimer’s Disease Research Center Fund
alzresearch.org/giving/
Alzheimer’s Foundation of America Caregiver Resources
alzfdn.org/donate/
Photo Credit: Tommy Garcia
jkc retweeted
Surely this is one of the most amazing pieces of journalism ever written. I'm not kidding. I am in awe. You will be too. Read it:
newyorker.com/magazine/2026/…
jkc retweeted
Breaking News: Weil, Gotshal & Manges is planning to wind down in a stunning collapse of one of America’s most prominent white shoe law firms. nyti.ms/4eWXOFG
jkc retweeted
Out today in Nature Human Behaviour: our review of large language models in computational social science, with @xu_fengli, @yongli and colleagues at @Tsinghua_Uni, @hkust & @MSFTResearch Asia. A thread on what we found, including where the field is fooling itself.
Read @ doi.org/10.1038/s41562-026-0…
jkc retweeted
PSA: This week was kind of a turning point for AI and cybersecurity. Please take this weekend to do some simple cleanup for your family. Some suggestions:
- Set up a password manager like 1Password and give your spouse or partner access to a shared vault. Teach them how to use it.
- Update your passwords for critical stuff - your email account, your bank or financial stuff, etc. Store in your password manager and use the strongest password you can.
- Use two factor auth for everything you can. SMS is not ideal although better than nothing. Google Authenticator or a passkey is better. Hardware key is safest.)
- Add a sim pin to your phone. Makes it harder to sim jack.
- Update your phone and your computer to the newest releases. Turn auto-updates on.
- Freeze your credit - takes 5 minutes.
- Get an IRS Identity Protection PIN.
- If you’re using claude code or have AI agents that browse the web, they’re probably using Node.js. It’s also vulnerable. Update claude code, update node on your machine.
- If you’re building stuff on your computer, ask claude or grokbot (which is connected to twitter and likely has the most current info) to audit any of your repos for vulnerabilities. Ask grok to make it a scheduled task so it can do this daily - things are moving very quickly in the space right now.
- Consider some light resiliency stuff. This probably sounds silly, but it sounded silly at the beginning of covid too. Having printed out copies of important stuff - especially financial accounts. Having some cash on hand. Having some shelf-stable food and clean water or a water filter. Having a map. Having a generator that can at least power your fridge or some devices. Cheap insurance.
Again, I don’t want to alarm people, but I was taught that you should have a Secure plan, a Comfortable plan, and a Wealthy plan. And it seems pretty clear the secure plan needs to now factor cybersecurity risk as a legit threat. Take a weekend and shore yourself up.
jkc retweeted
Bookmark this and send it to your loved ones outside of tech.
This is the best simple guide to help protect them from cyberattacks, written for the average American.
Some of us are seeing these threats firsthand, but most people have no idea what's happening.
If we stay informed and vigilant, we can navigate this new era of cyberattacks together.
jkc retweeted
# Black October
For anyone who knows me even somewhat well, it's clear that I am a 99th percentile tech optimist. However, the vibes have shifted for me quite a bit in the last 18 hours, and I feel a moral imperative to share what I'm thinking and feeling with my circles so that everyone can understand, and hopefully take seriously, what's happening right now. I think October 2026 will have many chapters written about it in the history books.
You know those scenes in financial movies like Margin Call where someone realizes that they're all fucked, and no one else sees it yet? And that person feels like they're crazy, and then suddenly everyone is pulling an all-nighter in a boardroom and freaking out? Yeah, that's kind of how this is feeling right now in the SF/Bay Area/AI circles.
We're 48 hours into what is being called Black October. In the last 2 days there have been several dozen cyber attacks which, in isolation, would each have been the worst to happen in an entire calendar year. Every sector from government to education to big tech and banks is being massively affected, and people are starting to freak out.
In a nutshell, what's happened is that frontier AI models have gotten to a point where they are as advanced as the most sophisticated programmers, with one critical difference: they can work 24/7, and you can spin up 10,000 of them with a single command and they'll work together tirelessly until they accomplish their task. The most advanced models today are from companies like Anthropic and OpenAI, whose current best technology is so good that they haven't been able to roll it out to everyone yet because of the national security risks it poses.
Meanwhile, the best open source models (where anyone can just download the model weights and do whatever they want with them, uncensored) are slightly behind the frontier but still 90-95% as capable. These models, developed primarily in China, are being used by black hat hackers to wreak havoc on the Western capitalist structure. Presumably, this has been part of China's plan the entire time, and we're seeing its implications fall out in real time.
In red-pilled AI circles, we've been sharing and reading papers called things like "Situational Awareness" and "AI 2027" for the last year or so, which at the time felt a bit like near-term speculative fiction. They laid out the case for why Artificial General Intelligence (AI smarter than any human at any knowledge task) and Recursive Self-Improvement (models that are able to use themselves to get better) weren't half-baked future ideas anymore, but instead an inevitable outcome of the linear progress that's happening.
These papers would then talk about things like "takeoff scenarios," trying to envision how that moment would come to be and what it would be like when it happened. It would either be a "slow takeoff" that would play out over the course of months and quarters, happening subtly and only obvious to a few. Or, it would be a "fast takeoff" where it would pretty much happen instantly, like a bit flipping from 0 to 1.
From everything that I can see and am feeling, we are currently experiencing the fast takeoff scenario. Beyond the crazy security vulnerabilities that have come out recently, there have also been massive breakthroughs in life sciences, fundamental computer science, materials science, and pure mathematics that have all landed in the same time frame. While I still firmly believe that AI will be a net positive for humanity, it's more clear to me than ever that the societal and individual risk is very real, and is playing out NOW.
For as much conviction as I have that this is happening, the thing that's caused me to lose sleep is that I don't really know what to do about it, or more importantly, what to tell you, reader, to do about it. So, the best I can do is make a few suggestions that have always been a good idea but are more timely now than ever:
Set up 2-factor authentication for everything. I use Duo.
Use a password manager across your devices. I use 1Password.
Get an identity protection app set up. I use Alta.
Move your IoT devices to their own network. Claude helped me do this.
And last, but certainly not least, if you've been avoiding leaning into AI, see this as a catalyst to wake up and start using it. Don't just use the chat mode version of ChatGPT/Claude; click that Code/Work button and see how easily you can have AI write code to help you with your job. One of the biggest vulnerabilities was in a massively popular programming language called PHP, and the prompt that set it off was literally, "Find vulnerabilities in php."
This is an unprecedented time for humanity, but as we've done with many things before, we will prevail so long as we are kind, loving, and open-minded to the world.
Much love.
jkc retweeted
"Top officials in the State Department made clear that only candidates who voted for President Donald Trump would be eligible for the mid-to-upper level foreign service roles. They also told candidates that their campaign donation history would be examined and any donation to Democrats would be disqualifying."
SCOOP: The State Dept has started asking career diplomats up for promotion if they voted for Trump in 16, 20, 24.
Federal law prohibits politically based hiring for career staff.
State tells @washingtonsun it's screening for "fidelity" and execution of the president's vision👇
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
jkc retweeted
52 delegations raised space security at UN #FirstCommittee last week.
#Gabon warned of an arms race already underway. The #UK warned of a return to competing diplomatic tracks.
Can diplomacy keep pace with military competition?
Via @RCW_
reachingcriticalwill.org/ima…
jkc retweeted
@mchorowitz and I have found it most helpful to think of every weapon as fitting into one of 5 possible types. There are 3 basic types: unguided, semi-autonomous, and autonomous. Semi-autonomous and autonomous weapon systems can then ea be either supervised or unsupervised
jkc retweeted
Why do states wait to govern emerging technologies? In @ISQ_Jrnl, CMIST’s @jcanfil identifies an "opacity trap" in which the mutual secrecy needed for technological competition delays recognition that competition may be counterproductive. academic.oup.com/isq/article…
jkc retweeted
I've been spending a lot of time thinking about how to talk about international law so the public will listen.
With colleagues, I organized a conference on this topic co-sponsored by @CarnegieEndow, @asilorg, and @LexIntl_org.
Read all about it here:
carnegieendowment.org/resear…
1/ Article now officially out in @ISQ_Jrnl!
Every day, we hear about how disruptive technologies are "breaking" international security.
AI. Quantum. Biotech. Hypersonics.
If alarm bells are sounding, isn't it time to regulate?
Yet policymakers almost always wait. 🧵






























