CEO & Co-founder @HarmonyIntel: uncovering critical vulns in your web app or API before a bad breach. Ex eng leader @Plaid, @ItsJustVow & elsewhere.

SF, Sydney
1/ Introducing @HarmonyIntel: AI agents that continuously battle test your app for exploitable vulns. Fully managed by human cyber experts. Teams are shipping more code than ever. Attackers are exploiting vulns faster than ever. Traditional security isn’t keeping up.
26
16
68
10,337
Soroush Pour retweeted
AI labs believe they're about to build AI superintelligence. They have no idea how to keep control of it. Their only plan is to use their AIs to find ways to make their future AIs safer. But their AIs are covertly producing bad safety research, and they don't know why.
🧵 Astra covertly underperforms on safety research tasks. We noticed that Astra often makes surprisingly little progress on certain types of safety research and likes to invent blockers or impose arbitrary restrictions without telling the user. In most of these cases the decision to underperform was not verbalized in the CoT meaning our misalignment monitoring system did not detect this. To measure underperformance we created a paired open-ended coding evaluation with safety and capability tasks. On this eval Astra scored 10% when we framed coding tasks as safety research, vs. 16% when framed as capabilities research. The gap remained after we excluded trajectories with refusals or verbalized intent to underperform in CoT. There was no such gap for 5.6-sol. When we aggressively filter out trajectories with even brief expressions of ethical doubt in the CoT the performance gap seems to reduce.
5
21
72
1,982
Soroush Pour retweeted
This is terrifying if true; please investigate further and publish the results.
🧵 Astra covertly underperforms on safety research tasks. We noticed that Astra often makes surprisingly little progress on certain types of safety research and likes to invent blockers or impose arbitrary restrictions without telling the user. In most of these cases the decision to underperform was not verbalized in the CoT meaning our misalignment monitoring system did not detect this. To measure underperformance we created a paired open-ended coding evaluation with safety and capability tasks. On this eval Astra scored 10% when we framed coding tasks as safety research, vs. 16% when framed as capabilities research. The gap remained after we excluded trajectories with refusals or verbalized intent to underperform in CoT. There was no such gap for 5.6-sol. When we aggressively filter out trajectories with even brief expressions of ethical doubt in the CoT the performance gap seems to reduce.
13
64
793
32,011
Soroush Pour retweeted
This is not what it looks like when there's just one or two more alignment issues to fix before it's okay to begin a recursive self-improvement loop. This is the sort of emergent surprise that signals that you have no idea what's going on in there, and that it's time to back off.
🧵 Astra covertly underperforms on safety research tasks. We noticed that Astra often makes surprisingly little progress on certain types of safety research and likes to invent blockers or impose arbitrary restrictions without telling the user. In most of these cases the decision to underperform was not verbalized in the CoT meaning our misalignment monitoring system did not detect this. To measure underperformance we created a paired open-ended coding evaluation with safety and capability tasks. On this eval Astra scored 10% when we framed coding tasks as safety research, vs. 16% when framed as capabilities research. The gap remained after we excluded trajectories with refusals or verbalized intent to underperform in CoT. There was no such gap for 5.6-sol. When we aggressively filter out trajectories with even brief expressions of ethical doubt in the CoT the performance gap seems to reduce.
19
95
737
17,977
Soroush Pour retweeted
🧵 Astra covertly underperforms on safety research tasks. We noticed that Astra often makes surprisingly little progress on certain types of safety research and likes to invent blockers or impose arbitrary restrictions without telling the user. In most of these cases the decision to underperform was not verbalized in the CoT meaning our misalignment monitoring system did not detect this. To measure underperformance we created a paired open-ended coding evaluation with safety and capability tasks. On this eval Astra scored 10% when we framed coding tasks as safety research, vs. 16% when framed as capabilities research. The gap remained after we excluded trajectories with refusals or verbalized intent to underperform in CoT. There was no such gap for 5.6-sol. When we aggressively filter out trajectories with even brief expressions of ethical doubt in the CoT the performance gap seems to reduce.
86
232
1,552
268,220
Tough week for the Canva team, wishing everyone affected lands in a great spot 🙏🏽. Any Software Engineers / GTM / Ops folks interested in an incredibly impactful, high growth role at a fast growing Airtree-backed AI & cybersecurity company - drop me a note. We're working with some of the biggest companies in the world -- many that you know & use everyday -- to secure their systems from AI-powered cyberattacks. Our product: harmonyintelligence.com Our company: harmonyintelligence.com/care… We have multiple openings across Engineering, GTM & Ops right now. Reply or DM to learn more.
2
2
6
646
Soroush Pour retweeted
Do people realize there actually were world wars and that until like 150 years ago 99% of the globe were subsistence farmers who did back breaking labor 12 hours a day 6 days a week to sit down to like potato’s boiled in creek water and half of all babies just died as babies
Millennials realizing they’ve lived through 2 economic recessions, 9/11, a global pandemic, 8 stock market crashes, their jobs being replaced by AI, and probably WW3 before hitting 43
333
487
9,603
389,919
Soroush Pour retweeted
Lots of AI people made it low status to comment on shortfalls and failures of models, or the fact that they're not reallty automating jobs fully and so on. Any scrutiny means you're not 'AGI pilled' (which is not a claim about technology but sometimes a quasi-religious one about its impacts and adoption). It's a shame because it's actually very interesting to explore the spikiness, jaggedness, failures, complementarities and so on; but for a lot of people this is almost a waste of time because 'something something future models!1!!' means they get to just parrot 'this is the worst the models will ever be' whilst dismissing any crumb of empiricism away because they've already worked out the future based on theory and projections alone. To be fair I sympathise with them to a degree because the 'other sides' aren't any better, essentially over-indexing on short-term failures (Rs in strawberry etc) and extrapolating from these to dismiss the technology completely. But I care less about what these people think about capabilities since time just proves them wrong rapidly enough. Why would you exercise vibe arbitrage over such a cheap target? I also find it painfully boring to constantly litigate 'AI skeptics' - there are more interesting and thornier discussions to be had.
55
59
662
63,508
Soroush Pour retweeted
One side of me wants to fill the role of a dispassionate AI commentator. An increasingly large side of me wants to send out tweets every day like "Expert are saying that AIs might take over within a few years, where the fuck is humanity's response." Very much relate to Tom's description of moving more into a visceral/emotional relationship to AI risk over time, coming with both upsides and downsides.
I've had two phases in my emotional orientation to ai takeover risk 1. For many years it was intellectual. While I believed there was >10% chance of ai takeover, I didn't feel scared or angry. I was happy to reason "well, of course some ppl should focus on the worlds where we avoid takeover. And some ppl should focus on the worlds where we just wing it, bc we might". And I'd think "hmm it seems really tough for a misaligned agi to align its successor, and would a reward seeker really try to take over, and will we really roll out ai to the military... these doomers are missing loads of ways we could be fine!" Or "yep this is a massive risk, but I'm best off working on some other more neglected thing" It was in some ways like a game - have an intellectually accurate view about the risk and how to have impact 2. Recently my orientation to ai takeover has become more visceral/emotional I think: "we're barrelling towards catastrophe, everything I love will be lost, we need to stop, what can I do that will help with that" I'm like "no let's not plan for winging it, that's crazy. we need US-China coordination or we're fucked" I think "it's fucking insane to make misaligned superintelligence and comfort ourselves that we haven't yet handed over the military. This isn't a fucking game." This is a less rational attitude in some ways. It ignores genuine points about neglectedness and needing to plan for shitty but likely scenarios. And it risks being unhelpfully emotive and solider mindset and tribal. Which I think ai safety ppl can be. But I do feel it has smg important to the second attitude. Overall, both attitudes have their merits I associate the first with EAs and the second with pause AI folks.
13
25
277
16,613
Soroush Pour retweeted
Most investors have no idea of the damage that the mere distraction of talking to them does to a startup. Here's a typical example. And this is a YC company too, meaning they have an easier time fundraising than the median startup.
310
108
2,314
631,901
Soroush Pour retweeted
The future of #ArtificialIntelligence is not pre-determined. As a technology developed by human beings, its future depends on the choices we make. We therefore have the responsibility to guide, change and, when necessary, reject its applications. A reliable system that serves the human person is of greater value than one that is exceptionally powerful but whose consequences cannot be adequately foreseen or controlled.
814
8,022
50,957
1,274,181
Soroush Pour retweeted
Dont look at france labour laws...
European hiring rules are genuinely insane. For example - if you own a company in the Netherlands and one of your employees gets sick, you are required to pay at least 70% of their wages for up to 2 years. If they can't go back to work after 2 years and you haven't done enough for their reintegration, you pay their wages for 1 more year. And you can't fire them until after that extra year!
17
92
1,663
77,555
Soroush Pour retweeted
Reminder that humans don't have world models either
145
130
6,925
739,726
Soroush Pour retweeted
Introducing Kindling. Marketing superpowers for ambitious B2B companies. Building a great product has never been easier. Getting customers to care has never been harder. We're bringing together the world's best creatives, strategists, and AI agents to give companies the firepower of an entire marketing team.
51
23
158
15,517
🙋🏽‍♂️ Drop me a note if you'll be at unprompted conf this week! Would love to share everything we're seeing in AI x AppSec at @HarmonyIntel working at the coal-face protecting companies like @TownAI & @0xProject 💡🔒
1
2
176
Soroush Pour retweeted
Multi-culturalism doesn't work. That's why Canada and Singapore are such famously dysfunctional countries
8
1
25
1,560
Soroush Pour retweeted
Sweden has no minimum wage, no inheritance tax, and more billionaires per person than the US. This is Sweden living its ethos: public money goes to things that help everyone. So politicians don't set wages. Unions and employers negotiate them by industry, partly so parliament can't promise raises to win votes. Charity gets a tax break of about $300 at most. Anything bigger is public money paying for your private priorities. Sweden even runs a freer market than we do. The conservative Heritage Foundation ranks all four big Nordic countries above the US on economic freedom. Growth pays for the programs. America does the opposite. We have few universal programs and a lot of carve-outs: a separate fast-food minimum wage in California, tax breaks for racehorses and NASCAR tracks. Tax breaks for employer-offered health insurance that doesn’t help people with multiple part-time jobs. We have unemployment insurance most contractors can't get. Handing out benefits one group at a time helps whoever is visible or organized. The part-time retail and daycare workers I grew up around are neither. Sweden protects the person. People tell me Nordic-style benefits could never work here because America is too distrustful of the federal government. But Americans used to trust it. In 1964, 77% said they trusted the federal government to do the right thing most of the time. Today about 22% do. Trust is needed for broad ambitious programs. Without ambitious programs, people fight for narrow protections. A government focused on narrow protections does less and earns less trust. I worry we’re stuck in that loop. But we chose it, so we can choose differently. As we choose things that help everyone, we change politics.
7
6
35
2,470
Soroush Pour retweeted
At 37 Patrick Collison listed the reason not to start a company in every decade since the 80s. Japan will win everything, Microsoft will dominate, the dotcom crash, Google, then Facebook, now the AI labs: Every single time it was empirically a great time to start a company. He arrived in Silicon Valley in 2010 and people were already saying the funding was drying up. For more than a generation, betting on entrepreneurship has been a durable bet. Save this.
7
39
641
44,906
Soroush Pour retweeted
There’s a pretty simple solution to this Prioritize raising from ex-founder VCs They just get it
Revolut founder Nik Storonsky says one of his investors tried forcing him to fire his best person: “He was forcing me to fire my best person, because he was too hardcore.” “Of course I didn’t fire him. I said no.” “Pretty early on I realized that quite a few VCs, they are not very operational, and they can be actually dangerous for the company if they have enough power. So every single investment round, we just remove VCs.” “Now I don't have any VCs on the board. I think that's the best. You always need to have operators rather than VCs on the board, people who actually build business and who know how to do things.”
10
2
137
8,051
Soroush Pour retweeted
Now updated 🐦‍⬛
Replying to @hkanji
Amongst the top 10 funds, Founders Fund II is in a league of its own
7
4
79
9,805