Hackbot R&D

I’m a researcher working at the intersection of artificial intelligence and computer security. I work at Dreadnode training and evaluating the hacking capabilities of agents. I’ll be working in this field until we see hacking’s move 37.

Twenty Billion Tokens of What, Exactly?

Looking at the data and letting it look back at us.

Pretraining at home: 20B tokens from 222 hours to 12

Optimizing training a Llama 3.2 1B model so we can pretrain in a day without going broke.

Offsec Evals: Growing Up In The Dark Forest

If you contribute a public benchmark, are you giving free capability to your competitors?

The Input Sanitization Perspective on Prompt Injection

So, you mixed user input and instructions.

Deep Reinforcement Learning for Security: Toward an Autonomous Pentesting Agent

A manifesto on RL in cybersecurity, from when deep RL was the thing.

An ML Eng's Review of OSCP

Because you shouldn’t try and automate anything you can’t do yourself.