Halvar Flake

I will have to print & frame this tweet :-))

@halvarflake All real moats contain lovecraftian horrors.

The number of OS primitives that CUDA breaks is pretty impressive. :-)

People say CUDA is a moat, but if you stare into this moat, it's an abyss with lovecraftian horrors in it. People say the moat is deep, and man, technically it is a great old one.

I love this. Tests are a class of “embarrassingly parallel” computer problem and scaling out makes so much sense. Next step: GitHub Actions replacement

Attention is all we have: a conjectural theory of cognitive inequality — I never expected this to become the most-liked piece of my Substack, thank you everyone🥰! davidbessis.substack.com/p/attention-is…

@seanhn I'm one of these sceptics ;)

@halvarflake ?

Using CC/Codex in interactive sessions has given me more empathy for scepticism about their use in hard exploit dev scenarios. You are working with a fundamentally diff category of system when you treat agents as a primitive for building search algorithms versus interactive tools

🚨𝘽𝙍𝙀𝘼𝙆𝙄𝙉𝙂: European Commission President Ursula von der Leyen unveiled EU–INC, a new framework that lets you launch a company in 48 hours for under €100 Starting a company across the EU today = 27 legal systems, 60+ company structures 🤯 That might be about to change… The European Commission just introduced 𝗘𝗨 𝗜𝗻𝗰., a new optional corporate framework designed to make Europe actually function like one market. Here’s what stands out: → Set up a company in 48 hours → Cost: < €100 → Fully online, no minimum capital → One single framework across all EU countries → Easier share transfers & fundraising → EU-wide employee stock options (huge for talent) Especially the EU-wide stock option plans, taxed only when employees actually sell (instead of when granted) is huge. This makes it far easier for startups to attract and retain top talent, finally putting Europe closer to the US playbook. Source/More info: ec.europa.eu/commission/pre… In short: This is Europe trying to compete with the simplicity of a Delaware C-Corp 🇺🇸 And honestly… it’s long overdue. For years, European founders had 2 choices: 1. Stay local and deal with fragmentation 2. Move to the US to scale 𝗘𝗨 𝗜𝗻𝗰. is trying to remove that trade-off. If executed well, this could be one of the most important structural changes for European startups in decades. What do you think?

@eeyitemi @thegrugq It is almost always possible to express almost anything in any language, sometimes more cumbersome, sometimes more easily.

@eeyitemi @thegrugq So I think the questions for any terminology or language are: (1) Does it help me understand something better? (2) Does it help me connect it to something else so I can understand both better? (3) Does it improve the way I am doing it?

Olá 👋 @halvarflake @thegrugq I have a question that I fear may be badly posed, but I think you both are the right people to ask. I’ve been doing a bit of pressure-testing on whether ideas borrowed from measure theory can actually sharpen vulnerability research methodology, or whether they mostly give elegant language to something that is still fundamentally craft, intuition, and situational judgment. What keeps pulling me toward the analogy is that a lot of serious bugs I’ve found and reported recently seem to survive in interestingly low-coverage, high-consequence, but still reachable regions of behavior, especially where a lot of assumptions are relied on but never actually enforced. So concepts like observability, rarity, and shifts in sampling pressure somehow feel pretty relevant. But then, the more I try to operationalize it, the more I worry the formal vocabulary creates fake precision. So I’m curious: where do you think the analogy genuinely produces sustainable, scalable vuln research leverage, and at what point does it collapse into intellectual decoration?

We built one hell of an 0day printer already, $40M will take us even farther

I'm at this DARPA expMath (AI for math) program kickoff and the lineup is legendary. Like, at the level of a truly historical meeting, held at a historical time. Makes me feel way more important than I actually am lol

Exclusive: AI cybersecurity startup RunSybil, founded by OpenAI’s first security hire @adversariel, raises $40 million led by Khosla Ventures fortune.com/2026/03/18/exc…

@ShaneHuntley @HostileSpectrum Enjoy the conversations and technical excellence at RSA. I have heard the best way to enjoy it is to have multiple AEs compete to set your entertainment agenda...but it requires control over significant budget.

@halvarflake @HostileSpectrum If you are not paying for the security product you are the security product?

I used to live 45 mins from RSA conference and never went. Now I'm flying 14 hours to attend. I predicted years ago if I ever went it would cause me to leave the security industry for good. Always good to test predictions...

My friends at @zymtrace are looking for Rust engineers 🦀 They're building the platform that makes GPUs go brr — fully remote, early stage, real impact DM me for an intro, or email team@zymtrace.com I can vouch that the team is top notch.

@HostileSpectrum @ShaneHuntley The subtle distinction between the security and the "security product" industry...

@ShaneHuntley If you are going to RSAC, are you really even still in the security industry? Or have you transitioned to some adjacent marketing and finance space that uses the industry as a skin suit?

@HostileSpectrum Albeit one that can in theory be solved unilaterally by the US by printing USD?

One does not expect default, given what remains a contested budget process that recognizes the consequences of such outcomes. If we were to talk about debt instruments, however: an apportioned clawback of EU member state holdings set at the figure where each did not meet NATO defense commitment each year, as base percentage minus where operational capabilities were not in readiness (with interest), would be one means of settling accounts. (We shall leave aside Marshall Plan matters). If strategic autonomy really meant something other than another assertion to avoid burden sharing. But when even formally raising the idea or anything like it (under whatever formula one would offer), remains unthinkable then yes, it is a free rider problem.

I do not point out the catastrophic weakness of the EU military posture to flex on the poors, as the kids these days are wont to say. Rather it is because this is the last chance for blunt honesty, where long deferred hard choices will either be made, or the world becomes a very different place. Because a regulatory superpower determined to exert extraterritorial influence over the most competitive economic sectors is not going to mean anything at all after the wars to come, if they cannot even handle their own commerce escort, air defense, & cyber missions. But it is only their critical energy, chemical, manufacturing, and transportation industries that will cease functioning (tech industries there remaining essentially negligible, with rare exceptions now being rebuilt in Texas). Because the American decisionmaker and public are long past tolerating endless free riders and reflexive opposition, in every crisis and for every capability mix.

@DanielMiessler @pmarca Some people say "I used the wrong word", tho.

This whole controversy with Marc Andreessen @pmarca and introspection is quite silly. It seems extremely clear to me what he meant. He just used the wrong word. What he meant was rumination. Great people introspect all the time, but they don’t turn their failures into traumas and use them as excuses not to move forward. That’s the difference: whether you’re introspection is learning and optimization or trauma and obstacle creation.

... the US just prints money to repay the debt, the creditors *will* have paid for it. In the event of a US-China conflict, we also have one country fighting another using equipment financed by borrowing from the adversary. Modern finance is truly glorious.

An interesting thought experiment: The US spends a lot of money on it's military capabilities, largely financed by debt from abroad. It would like other countries to stop freeloading. But if the USD devalues vs other currencies or if the US defaults on debt repayments, or if ...