Hackbot R&D

I’m a researcher working at the intersection of artificial intelligence and computer security. I work at Dreadnode training and evaluating the hacking capabilities of agents. I’ll be working in this field until we see hacking’s move 37.

Offsec Evals: Growing Up In The Dark Forest

If you contribute a public benchmark, are you giving free capability to your competitors?

DiLoCo: Data Parallelism for the Datacenter Poor

Distributed training sans datacenter.

RL Needed LLMs Because Agency Requires Priors

We tried RL once. It didn’t work. I’m confident it will this time.

The Input Sanitization Perspective on Prompt Injection

So, you mixed user input and instructions.

Deep Reinforcement Learning for Security: Toward an Autonomous Pentesting Agent

A manifesto on RL in cybersecurity, from when deep RL was the thing.

An ML Eng's Review of OSCP

Because you shouldn’t try and automate anything you can’t do yourself.