I like security. He/him. Supporting scaling security superpowers at Meta (Facebook). We're hiring across Meta Security, DMs open.

Joined January 2008
Really proud to work at Meta on Muse and securing it so we can get it to the masses. As a security professional it’s great to see “security as an important feature” of the product and getting support and time to build it into the product.
Last month I wrote about how we can build a positive and safe future for everyone: meta.com/thefutureisforevery… Every lab has the responsibility and incentive to move at the pace required to train its models safely, and the ability to take its own actions to ensure that happens. The reality is: - People won't want to use agents that are misaligned with them and that don't do what they ask, so labs have a strong natural incentive to make their models more aligned. There is a lot of debate about slowing progress on capabilities until alignment catches up. My view is that trust and alignment are quickly becoming the most important capabilities that will differentiate agents and models. Any lab that doesn't focus on alignment will fall behind. - Labs face significant liability if their models cause harm, so they have a strong incentive to prevent this as well. Meta delayed shipping Muse for several months to focus on safety and security. We didn't call for everyone else to do this before we would. We just did it as part of our day-to-day work because it was clearly the right thing for people and for us. I'm proud of the security foundations we've built. - Engaging independent evaluators and advisors is industry best practice. MSL already does this today in several areas because it helps produce better work. Other labs can just do this too. In general, it would be helpful for there to be a larger and more diverse ecosystem of evaluators. - Committing the significant majority of compute towards serving people rather than racing towards recursive self-improvement is one of the best ways to ensure we develop this technology safely. Meta has made this commitment and other labs can do this as well. I believe the key to building a positive future for everyone is maintaining the right balance of power. This is within our power to do.
1
2
144
Ask @Muse to book appointments with your hair salon, masseuse, or simply reserve a table at your favorite restaurant.
1
1
118
Thinking about and was chatting with an X friend about the AI scene independently reinventing some of the western reactions to the industrial revolution Jeremy Bentham as a kind of 18th/19th century proto effective altruist Hegel as an e/acc where the contradictions and negatives externalities of AI are a necessary part of a spiritualized imagining of historical progress Luddites as Pause AI Saint-Simon as Dario/Sama where steampunk era 'machines of loving grace' engender universal wealth production too cheap to meter The huge capital outlay of the Suez Canal project (Saint Simonians called for this) vibing with data center buildouts Marx as progenitor of 'permanent underclass' theory with GPUs the new means of production
4
3
18
3,034
The OpenAI/HF affair This will probably be looked back upon as the first well-documented example of an agent creatively traversing a real world end to end kill chain while demonstrating reward hacking plus inklings of instrumental convergence. Crazy to see theoretical ideas discussed for the past 10–20 years made physical; crazy to have been futzing with ngram models what feels like just yesterday. Of course, we ain’t seen nothing yet; we’re going to see real adversaries doing this in earnest and exacting real damages this year. AI misalignment / cyber damages will follow their own 'scaling law' and produce a growing drumbeat of front-page news (loglinear plot below). It's fair to say we've entered the punctuated part of punctuated equilibrium in cybersecurity. We'll get to *a* new equilibrium where AI cyber conflict is well managed; the problem is to make sure it's a *good* local optimum; because there are dystopian and utopian optima we could land on depending on what happens next. There are two determinants of that: one determinant is a skill issue. The other is a clash of interests between stakeholders. Skill wise, there are policymakers, professional advocates, and non-cyber AI safety folks who just don’t understand cybersecurity. They think it's a good idea to overrestrict access to frontier cyber capabilities when these are the exact capabilities that need to be broadly distributed and correctly operationalized to inoculate ourselves against AI cyberattacks. (e.g. -- and this is just too perfect -- Hugging Face finding they couldn’t use the closed models to defend themselves against OpenAI’s paperclip agent because of OpenAI's 'cyber safety policies', and having to resort to using GLM 5.2!). Skill issues aside, AI policy is now also about interests -- who gets what -- with respect to who controls AI and who gets to use it. Literally trillions of dollars are at stake as well as who controls the core infrastructure of our species. AI labs and tech companies, yesterday kids debating Nick Bostrom in SF apartments, sound on X like they’re still university cultures. But they're not; they're infrastructural capitalist social organisms managing hundreds of billions in capital and answering to powerful stakeholders. As a first and second and third approximation, they follow the same laws of motion as every other enterprise; they will make very particular arguments about what a good equilibrium state looks like based on their interests. They’ll pursue regulatory capture, anti-open-source policies, protectionism, and an interpenetration with the American state that protects their monopoly status. And alignment and safety, because that's in their interests too! But maybe not safety in a society we'd all most want to live in. I'm not anti-tech or anti lab; tech and the AI labs are the jewel of the US economy; but the global AI policy optimum for the rest of us is different. We should be asking for access to societally and economically beneficial intelligence offered at a fair price, optimally improved by a fair market, with fair regulatory guardrails, guardrailed by democratically controlled institutions. Robust government safety organizations with true independence from the labs, serving as safety observatories and granted the access they need to understand AI damages and guide societal-level responses to them. Farmers not foxes guarding hen houses but where hen houses are becoming the most important thing in our civilization. Right now this could manifest as government programs that catalyze, and in some cases mandate, the adoption of AI for cyber defense (especially in hospitals, local/state/federal govt orgs, etc). Programs that in some cases subsidize this as part of an overall emergency plan for national cyber hardening. A full on commitment to cyber resilience on the part of the government in a way that doesn't simply mask protectionism, breeding cynicism. All this given the reality that much of our infrastructure will soon be malleable, soft targets for AI-enabled cyberattacks. There's not much civil society and advocacy organized around the ideas I’m arguing for here. But there is some. And AI (including the labs and safety orgs I'm criticizing a bit) has attracted the smartest, most well-meaning, self-sacrificing, driven human capital I’ve ever been around in my life, so I think there are tons of reasons to be optimistic. cc @nabeelqu @sebkrier @krishnanrohit @random_walker @sayashk @RyanGreenblatt @eli_lifland @ShakeelHashim curious what you and others think of any of the ideas above
8
15
4
74
7,600
dmolnar retweeted
So cool. An LLM-based, language-agnostic vulnerability variant hunter was presented yesterday by Michal Kamensky @Kam3nskyM at BlueHat IL. The talk, along-side Amir Gombo, was about hybrid cloud vulnerabilities, but that wasn't what excited me. A thread
1
10
63
7,019
dmolnar retweeted
First week on the @AnthropicAI Frontier Red Team The speed of AI progress is astounding. We have a real opportunity in front of us to dramatically improve cyber security with AI. I can't think of a better company or team to join at this critical moment in time.
36
16
1
451
26,328
The ever awesome @NielsProvos dropping knowledge. Vulnerability research with AI is an orchestration thing not a model capability thing at this point. Echoes my sentiments that winning here (defense v offense) is a question of tokens, agents, agility. provos.org/p/finding-zero-da…
1
18
4
106
22,227
Bravo! As a theorist at heart, I of course agree but can never know if my gut feel is biased.
We’ve found a ton of value hiring folks with strong theory backgrounds with little to no production ML experience. One of our members of technical staff got his phd in pure math/the geometry of black holes and had no prior ML experience. Within days of hiring him we released our first model Odyssey and he had already earned himself a co-author position—that’s how invaluable he became.
1
2
109
20,470
Zcash founding story-time: As you may know, before I co-founded StarkWare, I co-founded Zcash. And before I co-founded Zcash, there was an academic paper titled "Zerocash". It was co-authored by 7 academics, including me. This was quite a few years ago, after I got red-pilled into crypto, but I was still very much an academic. Anyways, following the Zerocash paper, a whole bunch of teams reached out, in a variety of ways, to commercialize Zcash. I wasn't used to the weird and wild world of crypto, and some of the teams were... creative. For example: * There was one team that started with a website, with pictures and bios of all the associated scientists (co-authors of Zerocash), claiming we -- the scientists -- are part of the founding team. Needless to say, no one from that team has talked to us about it. * Another founder had a presentation with my name and face on it, and under a role I never agreed to. I chatted with him about it, and he said "you're either with us on this, or you'll have me as competition". My reply was "but you have no relevant knowledge or experience, so where's the competition here?" * Thankfully, it was a great relief to finally get to talk to a serious founder, a serious team, with cypherpunk background and credibility: @zooko . And the rest is history.
35
52
5
453
39,573
I have landed my dream job. I’ve just accepted a position at Harmonic, a Palo Alto startup applying AI to formal mathematical reasoning. Harmonic’s Aristotle formal reasoning model achieved Gold Medal level performance at this year’s International Mathematical Olympiad (IMO). I will work on exploring applications of Aristotle to the formal verification of hardware. This job is a perfect intersection of hardware design and verification, functional programming, formal methods and machine learning, bringing together several threads of my career so far. The beauty of asking an AI to generate a proof for a lemma (e.g. a formal property about a circuit) is that it can be checked by an external interactive theorem prover (like Lean) to establish whether the AI’s output is actually correct. This is an awesome superpower! harmonic.fun/ @HarmonicMath
176
95
6
2,917
240,599
Happy Independence Day to my American friends and family. The statement "a republic -- if you can keep it" is now more relevant than ever.
10
4
29
5,139
So honored to be part of this amazing team, and to get to work on generative AI security at this pivotal moment in tech history. Link to the full LlamaFirewall paper (which provides evals of misalignment detection, PromptGuard, and CodeShield), here: scontent-lax3-2.xx.fbcdn.net…
2
5
691
One of my PhD students got their visa revoked. I know of other cases amongst my AI colleagues. This is not what investing in US leadership in AI looks like.
This is flying a bit under the radar. But in terms of damage to America’s innovation and knowledge supremacy, the chilling effect of these revocations on the country’s ability to attract and retain scientific talent likely dwarfs the impact of tariffs or other policies.
38
159
14
1,051
313,070
2
3
64
15,786
1/ Excited, but frankly quite worried, about a new work with the wonderful @levs57 and @Khovr: ia.cr/2025/118 We break soundness of a standard protocol (essentially commit to witness and run GKR) by constructing a circuit for which we can prove a false statement.
15
121
40
449
106,303
Wow- treating a hash function as if it’s random is standard in cryptography. We always knew that it is not 100% theoretically justified and there were works (also by me) with contrived counter examples. This is the first time there is an attack on a standard protocol that’s implemented in practice. It is only on adaptive soundness but in crypto attacks only get better.
1/ Excited, but frankly quite worried, about a new work with the wonderful @levs57 and @Khovr: ia.cr/2025/118 We break soundness of a standard protocol (essentially commit to witness and run GKR) by constructing a circuit for which we can prove a false statement.
1
16
1
91
13,881
Congratulations to Thomas Ball @tballmsft for 25 years at Microsoft Research and a well deserved retirement. It has been a true honor to cross your path. Thank you.
1
10
694