HNHacker News
TopNewBestAskShowJobs

borski

7,420 karma · joined May 27, 2008

Just a hacker in the SF bay area who likes technology of all sorts; cyber security expert, founder, angel, advisor/mentor, and singer/musician. :)

I run the Agentic Red Team at Google DeepMind.

I have always been more interested in why and how things worked, rather than just being content that they did.

20+ years in offensive software security, eight patents (I hate them but tell that to the VCs who love them)

Sold Tinfoil Security, after 9 years of building it, to Synopsys, in January 2020. Hell of a ride.

My (last) startup: https://www.tinfoilsecurity.com acquired by https://www.synopsys.com

Twitter: @borski

borski@owlpost.lol -- get in touch! I'm always up for meeting interesting people.

[ my public key: https://keybase.io/borski; my proof: https://keybase.io/borski/sigs/-cfyFmMrqV_tAh69m5bO-EY3t_gllRR0ODZqOa7E0E4 ]

submissionscomments
borski··on Anthropic's open-source framework for AI-powered vulnerability discovery
If you are a W2 employee in the US, you are almost certainly in violation of your PIIA if you take anything off the company-issued computer and keep it.
borski··on Anthropic's open-source framework for AI-powered vulnerability discovery
You're definitely right for most agencies; most will let you use it in a portfolio or something, but not necessarily retain the rights to the work.

Some agencies do, however; it's dependent on the contract specifics.

borski··on Anthropic's open-source framework for AI-powered vulnerability discovery
Again: it depends. It is all about how the contract is written.
borski··on VoidZero Is Joining Cloudflare
I agree, but I'm not sure how that's relevant?
borski··on VoidZero Is Joining Cloudflare
Maybe. It would require courts and nuance; cloudflare is in a lot of businesses nowadays. It rarely comes into effect regardless because people rarely spend less than a couple years at the acquirer, but regardless.
borski··on VoidZero Is Joining Cloudflare
Dropbox never had any intention of running Zulip. But the team wanted Zulip to continue existing, so they worked that into the agreement with Dropbox.

That is my understanding.

borski··on VoidZero Is Joining Cloudflare
Dropbox did it for Zulip.

It entirely depends on how much the seller cared to ensure continuity. It’s not like VoidZero didn’t have plenty of leverage; they weren’t a dying open source project.

borski··on VoidZero Is Joining Cloudflare
Sometimes it does work out. For example, Zulip was acquired by Dropbox, spun out as an open source project, and now has its own foundation backing it, along with a board, etc.

Most of the time, it doesn’t. But it can.

borski··on VoidZero Is Joining Cloudflare
> However, non-compete enforcement against individuals have been declawed in California, where VoidZero is headquartered

Not in M&A.

https://www.freshfields.com/en/our-thinking/blogs/a-fresh-ta...

borski··on VoidZero Is Joining Cloudflare
That’s not quite actually true and it is a bit more nuanced than that. For example, while non-competes and non-solicits are unenforceable in CA for employment agreements, they absolutely are enforceable for mergers and acquisitions.

The laws governing employment are a subset of the laws governing M&A.

borski··on Anthropic's open-source framework for AI-powered vulnerability discovery
Depends. If you are a contractor, like most craftspeople, your tools are your own.
borski··on Anthropic's open-source framework for AI-powered vulnerability discovery
I agree with this wholeheartedly.
borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
Boredom and ADHD are comorbid (maybe obviously), but ADHD is a real thing.
borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
Not sure, since that's not what we were discussing.
borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
Data without context is not useful.

  Data (alone) = Noise
  Data + Context = Information
  Experimentation + Error = Experience
  Information + Experience = Knowledge
  Knowledge + Humility = Wisdom
borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
Which country? (Curious)
borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
The problem is that just like students, teachers are not all created equal.

My 3rd grade teacher wanted to fail me for “discipline” problems. In reality, she simply didn’t like me; I had no discipline complaints in other years.

I had undiagnosed ADHD and was gifted. She did not know how to deal with that, and actively disliked me.

Activist teachers are also a thing.

borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
Most of the people I know who work two or more jobs also do not get SNAP. Sometimes, it’s pride, and sometimes, it’s logistics.

My sister is on SNAP; it took hours, literally, for me to sign her up, and I’m quite “technically savvy” lol

And every year the renewal takes at least two hours in NYC.

borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
> I think there may be more realization up here that "gifted education" is a type of "special" education, in the same way remedial classes for delayed children are. Kids who need spec ed. and who don't get it can have very bad outcomes in life.

> When the topic has come up I've often pointed out that if you are a parent: you really don't want those evil geniuses in your child's class, poking holes in everything the teacher says, taking up all the teacher's time talking about things over your kids' head, and probably initiating your kid into inappropriately adult concepts. Such children need specialists who know how to deal with that kind of abnormality.

YES. I could not agree more.

borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
Have you ever lived below the poverty line? In order to enroll, you’d have to know about it and manage logistics.

Working 14 hours a day so you can clothe and feed your kid doesn’t leave much time for that.

That doesn’t mean you don’t give a shit.

borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
It’s not actually that unpopular; there are plenty of gifted programs, though the tide has turned to controversy around them more in recent years.

I continue to believe that gifted kids are special needs kids, and that they shouldn’t be in the same classroom as those who are struggling for all of their classes.

People don’t like to talk about gifted kids, except to imply that being “too smart” is somehow bad or unfair, and I think it does them a disservice.

Gifted kids get very, very bored, and lose interest quickly, when they aren’t challenged.

borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
> A child from a wealthy family will reach their potential, where one from a poorer family will not.

may not. I’m not just being pedantic; it’s very important to recognize that being impoverished is not the same as being incapable.

But it does mean you’re living life on hard mode.

borski··on Citing 'severe' math deficits, UC faculty demand a return to SAT tests for STEM
Surely it’s possible that a family might value education but not have the literal time, if they are working non stop, to take the kids to a further school? Or to take care of them afterward?

You’re avoiding the point by saying “anyone who cares can,” and avoiding the economics entirely.

Economics can force choices against your own best interests. If you have an hour between shifts and the school is 45 minutes away, you may have no choice.

This is separate from groups of people who don’t value education. This is about where others make that choice for them.

borski··on Don't Subscribe So Casually
Nope. I've never had one decline. Nor have I ever had any of the $1 cards fail to be authorized for a trial, no matter how much the service costs.
borski··on Don't Subscribe So Casually
Privacy.com solved this problem for me. I just sign up for trials with a $1 card, and I sign up for memberships with a unique card number and a “use once” flag.
borski··on The Eternal Sloptember
I’m not entirely convinced that’s true. Is there evidence that someone well-read would also be a bad writer?
borski··on The Eternal Sloptember
Precisely. It is faster than I am at the easy part of writing the code; but the decisions about what to write (at least at a high level) are still my own.
borski··on The Eternal Sloptember
The ability to read code doesn’t decay at nearly the same rate. Neither does your experience.
borski··on Jira Is Turing-Complete
Sounds like the IOCCC[0] of APIs

[0] https://en.wikipedia.org/wiki/International_Obfuscated_C_Cod...

borski··on Greg Brockman interview [video]
Short term, that’s definitely true. Long term, I’m not so sure.
← PreviousPage 3 of 34Next →