ADD / XOR / ROL

My father passed recently, and he was twice my age.

After a number of Twitter discussions, and repeating myself a lot in these discussions, it is time to write a short note on the economics of advancing LLM capabilities through RL, about principles of propaganda and coining new words, and about my stubborn…

I have seen a lot of public discussion around supply-chain attacks on the Python ecosystem, prompt injection risks when using coding agents, and general worries about the security implications of "vibe coding" for the development machine.

I recently embarked on a small toy project/experiment: How well can I equip Claude Code to automatically analyze and triage crashes in a C++ code base?

In a series of previous blogposts [1, 2, 3, 4] I ran some experiments drawing the boundaries of the polytopes generated by a fully-connected leaky ReLU network while it was getting trained on reproducing an input image.

In many discussions where questions of "alignment" or "AI safety" crop up, I am baffled by seriously intelligent people imbuing almost magical human-like powers to something that - in my mind - is just MatMul with interspersed nonlinearities.

After the previous blog posts here, here, and here, a friend of mine pointed me to some literature to read, and I will do so now :-).

What is this?

In this post, I will explain my current thinking about neural networks.

Welcome to one of my political posts.

Hey all, I have written about the various drags on the European tech industry in the past, and recently been involved in discussions on both X and BlueSky about what Europe needs.

The last few years have seen a wave of hysteria about LLMs becoming conscious and then suddenly attempting to kill humanity.

While I have been a sceptic of using ML and AI in adversarial (security) scenarios forever, I also quite like the fact that AI/ML has become important, if only to make me feel like my Math MSc (and abortive Math PhD) were not a waste of time.

Hey all, == tl;dr == Today is my last day at Elastic.

This post is an adaption of a Twitter thread where I listed the various factors that in my experience led to a divergence of the trajectories of the US tech industry around Silicon Valley (SV) and the tech industry in Europe.

This blog post is a review of the book "This Is How They Tell Me the World Ends" by Nicole Perlroth.

Preface: When I joined Google in 2011, I quoted a quip of a friend of mine: "There are roughly one and a half computers in the world, and Google has one of them."

Twitter is great, and Twitter is terrible.

It has become painfully evident over the last decade or so that social media has a somewhat corrosive effect on "truth" and "discussion".

Hey everybody, During my years doing vulnerability research and my time in Project Zero, I frequently encountered proposals for new security mitigations.

In a world of changing technology, there are few constants - but if there is one constant in security, it is the rhythmic flare-up of discussions about disclosure on the social-media-du-jour (mailing lists in the past, now mostly Twitter and Facebook).

First off, an apology to the reader: I normally spend a bit of effort to make my blog posts readable / polished, but I am under quite a few time constraints at the moment, so the following will be held to lesser standards of writing than usual.

During my long sabbatical in 2015-2016 I had plenty of time to think about random things and come up with strange ideas.

After a long hiatus on this blog, a new post!

I am a huge fan of Wikipedia -- I sometimes browse Wikipedia like other people watch TV, skipping from topic to topic and - on average - being impressed by the quality of the articles.