Founder @wraithwatch. Previously CIO @anduriltech / Cyber @SpaceX, @palantirtech / Special Reconnaissance @ JSOC. Views are your own.
- Tweets 550
- Following 214
- Followers 5,129
- Likes 1,141
Pinned Tweet
Wraithwatch has been selected for a $30M contract to parallel deploy our AI cyber defense platform to multiple USG entities with critical national security missions. If you want to be part of the magic, you know how to get a hold of me. Let’s fucking go.
9
7
94
32,790
Monday was my last day as @anduriltech’s CIO, almost 4 yrs after I started as its first security engineer. Proud of the team of hitters that will carry the org forward in my absence.
I’m a builder at heart, and with some SpaceX friends and VCs in tow, to building I return. LFG
42
4
515
116,690
Palmer and Elon jamming on supersonic performance envelopes for Anduril fighter aircraft.
We are so back.
2
13
289
22,115
I’m looking for AI / ML engineers interested in working at the intersection of generative AI and cyber defense. Especially those with evolutionary / genetic computing experience.
We are Anduril / SpaceX alumni backed by Tier 1 VCs and you will be employee number 4.
LFG.
22
24
218
68,132
Thinking through multi-agent AI architectures that need to make autonomous decisions together. May need a consensus mechanism powered by a decentralized and immutable data stru….oh no….no no no…
16
17
196
74,345
Lessons here for those working with sensitive trade secrets.
> No amount of compliance is going to save you against the CCP. Get to actual work.
> Disable personal cloud storage and iCloud. Work stays on work infra.
> Telemetry + analysis at the edge is critical. See next post.
1
23
163
28,996
If you're a Gundo defense tech company and have upcoming work with USG or DOD, I will - for free - walk you through getting your cyber compliance in order, so you don't make the same mistakes I made @mttgrmm suffer through. DMs open.
7
9
167
34,067
There is a certain class of IT engineer you can tell to HALO jump into the arctic to setup infrastructure, and they’ll give you a wordless nod and 24 hours later people in igloos are watching Netflix. A rare gift of a human.
3
4
84
8,376
“We don’t do Elon-type mandates” is populist kayfabe. Everyone secretly desires Apollo 13 we-need-to-make-this-work-with-this-using-nothing-but-that moments.
This is funny to me because I’ve interviewed at a few startups made up of mostly SpaceX alums and they’ve all listed “no crazy Elon mandates” as an upside of working there … but that seems to be the secret sauce
3
6
85
10,517
SF hotel @ 5 AM. Gym full of people crushing workouts. Lobby full of people crushing code. We might be back.
5
2
84
9,241
Congrats to everyone at @PalantirTech and @anduriltech who burned on all engines for years to make this happen.
The @USArmy has awarded Palantir a prime agreement for the Prototype Maturation Phase of the Tactical Intelligence Targeting Access Node (TITAN). As the Army’s first AI-defined vehicle, TITAN is a milestone capability for America’s warfighters.
Learn more: bwnews.pr/49VhPYm
1
3
74
9,716
.@FilArons was gracious enough to show me the demo. Not only is it the obvious future of manufacturing software - he's also just an overall awesome dude.
Exciting News! After months in stealth, we're introducing Dirac's BuildOS - the first AUTOMATED Work Instruction platform.
It's time to change the way manufacturing engineers draft work instructions.
Get access to BuildOS here: form.typeform.com/to/ofkt4RX…
1/9
5
3
50
10,919
Fortunately, first hand experience is that SpaceX Legal is the SEAL Team 6 of lawyers.
disclose.tv/id/3a8x9u5kqz/
1
3
49
6,655
Hi, excuse me. Sorry to break this to you but secretly no one likes turkey and everyone just wants some Grade A USDA Ribeye on Thanksgiving.
12
45
4,388
The veteran VC community is just the best. Thirty seconds of social proofing through an indecipherable-to-civilians exchange of task force colors, numbers, or units usually followed by "hell yeah brother - whatcha building..."
3
50
5,402
Deeply appreciative of the barrage of inbound interest regarding the new company. Please bear with me while I work through all the messages. Candidates - psyched to speak with you. Investors - please note our round is closed but would love to get to know you anyway. Thanks!
3
44
9,866
Enough with this. USG needs to get @anduriltech cUAS around every FOB, MSS, OP, and otherwise. Now.
The number of U.S. Servicemembers that were Injured last night during the Drone Attack on the Tower 22 Patrol and Operations Base in Northeastern Jordan has now Risen from 25 to 34, with a Majority being Evaluated for Traumatic Brain Injuries (TBIs).
2
3
42
5,801
Dear former SpaceX interns. Space fighters and nuclear pulse engines plz. My future dropship trooper progeny thank you.
2
32
2,744
Perhaps someone should start a company to defend against such emerging threats...
So I want to talk real quick about the recent announcements from OpenAI.
Without hyperbole, I think what they announced represent both the greatest boon for business and the biggest problem for security that we’ve seen injected in a single day in many decades.
There were many announcements, and many of them, such asupdates to the models, are wonderful but relatively inert.
But what is not harmless, is the unbelievably massive expansion of API calling capabilities.
On this front they announced two main things: 1) custom GPTs, and 2) assistants.
Custom GPT’s are basically a front end version of assistants. And importantly, they both have the same functionality of being able to call code, interpreter, browse the web, and call arbitrary APIs.
Let me say that again – they can call any API.
I’ve been saying for a long time that the number one threat AI security, from a cyber security standpoint, is AI agents having the ability to call APIs.
What they did yesterday was open that up to the entire world.
I just heard an interview from the show where they talked to the head of API’s at Zapier, and they expanded their capabilities even more. So they are fully integrated with open AI so everything that you can do in Zapier you can now do inside of an assistant.
And just to refresh everyone, you can basically do ANYTHING in Zapier.
No, just to be clear this is extraordinarily awesome for humanity, and for business and for the economy and for developers, and for so many people going forward, it was a amazing conference and an amazing set of announcements.
But for security, we better get ready.
The amount of prompt injection we’re about to see propagate across the Internet is going to be staggering. we are talking about injections on websites being crawled automatically by agents consumed by the agents executed by the agents sent onto other APIs, which then connect to other APIs, which ultimately land on sensitive data back ends.
The possibilities for attack just became endless.
And again, I’m not saying they shouldn’t have done it. I’m not saying this is bad. I’m just saying as security people, get ready.
1
32
5,151
Anyone breathlessly extolling defense tech investments - please read this excellent thread for a dose of what your founders are in for when navigating defense acquisition bureaucracy.
@anduriltech and @SpaceX have proven it’s possible, not easy.
1/Worthy of a much longer and more detailed storm in the future BUT one of the core reasons defense tech is soooo hard is that you need to find three different product market fits instead of one.
32
5,645
> This person's behavior (Notes -> PDF -> GDrive) left a trail on MacOS that you don't need fancy tools to detect. In this case, a cupsd process followed by CGPDFService followed by a connection Google Drive.
> Is that normal for your org? Maybe. Maybe not. Someone should know.
1
24
1,581
Flying from SF to LA and spotted the DZ near Monterey I would jump at on the weekends while going to DLI as a young Staff Sergeant. Would make a few bucks driving the bus to retrieve the tandems every now and again between jumps. Simpler times.
3
25
3,914
Big lesson for me scaling Infosec @anduriltech through hypergrowth was although units of work grew linearly or sub-linearly, the complexity of each unit grew exponentially. Ideally I should have optimized the department early on to be a complexity-killing machine.
3
1
23
A massive counteroffensive to TikTok is needed immediately, and every federal institution postured to do it is asleep at the wheel. Best they wake up, for all our sake.
1
25
2,697
> All the "zero trust" controls in the world didn't save Google from this dude. Your org's network is a living organism and it is impossible to detect weak points unless you put it through constant stimulus / response cycles that model possible threats.
1
22
1,209
Every time I realized this in the military it was like “are you shitting me” and then we got on with the job. Whenever I doubt that SOF service prepares anyone for startup life I am reminded of this.
1
22
.@subtee - looks to be detectable by creating a Sysmon 10 include rule such that GrantedAccess covers 0x1F0FFF through 0x1FFFF. The resulting Sysmon 10s indicate csrss as the source image along with a couple of conhost threads. Legit spawns have the actual source image.
1
5
19
> Yes your execs (and everyone) will complain when you want to shut off stuff like personal file storage. Convey the ROI, enable them to make a risk-based decision for the business, then either execute or develop compensating controls. Don't be that security neckbeard.
1
17
1,363
A case study in why internal applications - especially those that meld atoms and bits - must be treated as first-class citizens subject to the same antifragility standards as customer facing systems.
wsj.com/articles/southwest-a…
1
1
19
2,440
Indians everywhere know that Rishi Sunak will still have to explain to his parents why he didn’t become a doctor.
2
1
19
With zero pushback. Next crisis.
Anduril has prohibited TikTok/ByteDance from all devices used to access Anduril systems, including personal devices.
Two reasons:
1) The No TikTok on Government Devices Act requires this of defense contractors. It should have gone further.
2) TikTok is nation-state warfare.
1
18
4,409
This is why at Anduril I named the internal tools and applications teams Arsenal and gave them the mission of powering the internal arsenal that builds the real one.
2
18
Well this blew up. For the most part I've touched base to coordinate with everyone who reached out. Ping me if not.
If you're a Gundo defense tech company and have upcoming work with USG or DOD, I will - for free - walk you through getting your cyber compliance in order, so you don't make the same mistakes I made @mttgrmm suffer through. DMs open.
19
2,767
If you didn't understand anything I said but run a company doing critical shit, feel free to contact me.
1
15
1,235
11. Daily remembrance rituals. Everyone at
@SpaceX walks past a mural in the mess hall depicting Mars going through terraforming cycles, culminating in a lush planet with blue ocean.
What allows @SpaceX to build at such a large scale and so quickly?
The culture and execution. And it starts with @elonmusk
Here are 10 principles
2
3
15
> It took 7 minutes in my testing for these logs to ship to Microsoft's cloud for alerting. Other tools are similar. Your data is long gone in those 7 minutes. Push analysis to the edge so you can detect instantly. If you don't know how, hire someone that does.
1
1
14
1,174
Boosters separating without a synchronized pirouette back to their landing pads is now officially weird.
1
2
16
Claude 3 Opus + LllamaIndex = a battering ram of an analytical engine. Mind is blown right now.
3
1
16
1,982
@tfeldmann is gmi because whenever he tweets I get to learn things like the geopolitical power balance implications of cadmium telluride vs polysilicon based solar panels.
1
1
16
One wonders how many civilization-changing capabilities we missed out on simply because nobody stepped up to be an Admiral Rickover.
1
1
16
1,781
Wild. In my RC-135 aviating days the biggest threat was the microwave not working for the frozen pizzas.
13
1,943
"He's a hot dog. Graduate school, Marine Corps. Taken down some heavy crews. Lieutenant in Robbery-Homicide, major crimes unit. Divorced twice. Means he's one of those guys out there, prowling around all night, dedicated."
- Heat, '95
Happy Friday Night Grind to The Dedicated
1
11
971
In other words, while Five Eyes has been focused on local optima in the form of ensuring “fair” defense industrial bases, a globalist free market has been relentlessly pursuing tech dominance with little regard to fairness.
medium.com/@ssankar/innovati…
3
13
1,946
"American Strength."
Is it HIMARS sales and drone strikes? Or is it a society with values worth emulating, a techno-industrial base worth envying, and combat power projection worth not fucking with?
We knew the correct answer once.
If Vivek gives Vladimir Putin everything he wants, he will just take more.
Dictators respond to American strength, not weakness.
1
2
13
2,949
Nothing like McKinsey corporatespeak for a mission statement that could have been "DEATH FROM ABOVE."
1
12
1,739
Manhattan. Apollo. One a blinding darkness. The other a beacon in the darkness. Frame your efforts appropriately.
1
10
1,202
Incredible that some LinkedIn PM actually looked at this feature and said "yep, nailed it."
2
1
13
1,015
As per usual, the fatal flaw with most Elon commentary is lensing him as billionaire dilettante instead of ruthless-but-humanist engineer.
1
11
Learning the eternal battle between father and children over AC temperature can only be won via stealth and trickery.
1
1
11
2,202
It's Monday morning anon. Western civilization is crumbling around you. Get up, grit your teeth, and build something worthy of the long line of ancestors that got you here.
1
10
1,273
This manufacturer probably did not put out performative feelgoodisms about not weaponizing their systems.
10
When conducting offensive cyber operations, step 1 is probing the configuration of the target network’s perimeter to figure out what will pass through, what won’t, and what elicits network defender response. Extrapolate to air defense.
2
10
995
Signed up for a student loan forgiveness program 20 years ago. Came with guns, helicopters, and free housing overlooking the water in Monterey, CA. Would recommend.
1
9
And don’t have the time to dig around and find the research from some random blog that mentions the one log line from an esoteric subsystem on the device that would confirm compromise.
9
2,563
Hands down the best technical breakdown of what happened with the recent Microsoft breach. @SpecterOps on fire as usual.
The most crucial sentence to understand in Microsoft's post:
"The threat actor then used the legacy test OAuth application to grant them the Office 365 Exchange Online full_access_as_app role"
I explain why here: piped.video/e1meQ3_yRIo?t=2187
1
1
8
1,691
Not sure these young bucks know that, statistically, taking a FIVE EYES citizen hostage in such a public manner is highly correlated with green eyed gorillas falling from the sky, heavily armed and likely unhappy they had to cancel their weekend barbecue.
bbc.com/news/world-asia-6456…
7
1,011
Top engineers are omnidirectional nuclear reactions. Leaders must channel those reactions towards the trivial or the world-saving.
8
Independence Day laid out the UAP response playbook years ago: pre-assault cyber / electronic warfare with kinetic follow through. Seems we’ve forgotten the first part given the lack of RC/EC/WC-135 racetracks around the latest incidents.
2
8
1,413
Please yes. And if you’re good as the big league products without charging the 200-500% security tax your enterprise sales cycle will be measured in days.
1
8
They should make a plugin to VSCode that plays the Interstellar docking theme when you hit a debug breakpoint.
8
915
Conversations with houseguests in spaces not arrayed around a television (kitchen island etc) seem to have 10x information density / signal-to-noise ratio.
8
778
