Halvar Flake

I will have to print & frame this tweet :-))

@BenevOrang I think my thoughts are still evolving...

@halvarflake I would love to read your slightly more translated thoughts for the lay person who read and enjoyed your rec for The Story of Magic. Is it surmountable by your assessment due to tech debt? Any timelines?

People say CUDA is a moat, but if you stare into this moat, it's an abyss with lovecraftian horrors in it. People say the moat is deep, and man, technically it is a great old one.

Qiang Liu, Chris Oates, and I are writing a monograph on Probabilistic Inference and Learning with Stein’s Method, and we’d love to get your feedback on the first draft

@HostileSpectrum Like economics!

The only real test of theories of war is in operational practice. It follows then that when so many seek despite all other reasons to avoid acknowledgment of live cases, the theory in question cannot be sustained. But they are just hoping you won’t notice, and that events will remain opaque for long enough to bury what would otherwise be very public failure.

Wonder what I mean? Well, for one, even with seamless tool integration, the frontier models are still pretty poor at debugging for xdev purposes. It makes sense — the public training data for that is inexistent…

@halvarflake All real moats contain lovecraftian horrors.

The number of OS primitives that CUDA breaks is pretty impressive. :-)

I love this. Tests are a class of “embarrassingly parallel” computer problem and scaling out makes so much sense. Next step: GitHub Actions replacement

Attention is all we have: a conjectural theory of cognitive inequality — I never expected this to become the most-liked piece of my Substack, thank you everyone🥰! davidbessis.substack.com/p/attention-is…

@seanhn I'm one of these sceptics ;)

@halvarflake ?

Using CC/Codex in interactive sessions has given me more empathy for scepticism about their use in hard exploit dev scenarios. You are working with a fundamentally diff category of system when you treat agents as a primitive for building search algorithms versus interactive tools

🚨𝘽𝙍𝙀𝘼𝙆𝙄𝙉𝙂: European Commission President Ursula von der Leyen unveiled EU–INC, a new framework that lets you launch a company in 48 hours for under €100 Starting a company across the EU today = 27 legal systems, 60+ company structures 🤯 That might be about to change… The European Commission just introduced 𝗘𝗨 𝗜𝗻𝗰., a new optional corporate framework designed to make Europe actually function like one market. Here’s what stands out: → Set up a company in 48 hours → Cost: < €100 → Fully online, no minimum capital → One single framework across all EU countries → Easier share transfers & fundraising → EU-wide employee stock options (huge for talent) Especially the EU-wide stock option plans, taxed only when employees actually sell (instead of when granted) is huge. This makes it far easier for startups to attract and retain top talent, finally putting Europe closer to the US playbook. Source/More info: ec.europa.eu/commission/pre… In short: This is Europe trying to compete with the simplicity of a Delaware C-Corp 🇺🇸 And honestly… it’s long overdue. For years, European founders had 2 choices: 1. Stay local and deal with fragmentation 2. Move to the US to scale 𝗘𝗨 𝗜𝗻𝗰. is trying to remove that trade-off. If executed well, this could be one of the most important structural changes for European startups in decades. What do you think?

@eeyitemi @thegrugq It is almost always possible to express almost anything in any language, sometimes more cumbersome, sometimes more easily.

@eeyitemi @thegrugq So I think the questions for any terminology or language are: (1) Does it help me understand something better? (2) Does it help me connect it to something else so I can understand both better? (3) Does it improve the way I am doing it?

Olá 👋 @halvarflake @thegrugq I have a question that I fear may be badly posed, but I think you both are the right people to ask. I’ve been doing a bit of pressure-testing on whether ideas borrowed from measure theory can actually sharpen vulnerability research methodology, or whether they mostly give elegant language to something that is still fundamentally craft, intuition, and situational judgment. What keeps pulling me toward the analogy is that a lot of serious bugs I’ve found and reported recently seem to survive in interestingly low-coverage, high-consequence, but still reachable regions of behavior, especially where a lot of assumptions are relied on but never actually enforced. So concepts like observability, rarity, and shifts in sampling pressure somehow feel pretty relevant. But then, the more I try to operationalize it, the more I worry the formal vocabulary creates fake precision. So I’m curious: where do you think the analogy genuinely produces sustainable, scalable vuln research leverage, and at what point does it collapse into intellectual decoration?

We built one hell of an 0day printer already, $40M will take us even farther

I'm at this DARPA expMath (AI for math) program kickoff and the lineup is legendary. Like, at the level of a truly historical meeting, held at a historical time. Makes me feel way more important than I actually am lol

Exclusive: AI cybersecurity startup RunSybil, founded by OpenAI’s first security hire @adversariel, raises $40 million led by Khosla Ventures fortune.com/2026/03/18/exc…

@ShaneHuntley @HostileSpectrum Enjoy the conversations and technical excellence at RSA. I have heard the best way to enjoy it is to have multiple AEs compete to set your entertainment agenda...but it requires control over significant budget.

@halvarflake @HostileSpectrum If you are not paying for the security product you are the security product?

I used to live 45 mins from RSA conference and never went. Now I'm flying 14 hours to attend. I predicted years ago if I ever went it would cause me to leave the security industry for good. Always good to test predictions...

My friends at @zymtrace are looking for Rust engineers 🦀 They're building the platform that makes GPUs go brr — fully remote, early stage, real impact DM me for an intro, or email team@zymtrace.com I can vouch that the team is top notch.

@HostileSpectrum @ShaneHuntley The subtle distinction between the security and the "security product" industry...

@ShaneHuntley If you are going to RSAC, are you really even still in the security industry? Or have you transitioned to some adjacent marketing and finance space that uses the industry as a skin suit?