venturing. founder @pageonevc.

Stanford, CA
Joined January 2011
A historical lens on #VentureCapital by @_TheFamily. One of my favorite pieces. Ecosystem is more than a buzzword. Technology will be the backbone of the brave new world. #vc salon.thefamily.co/a-brief-h…
7
12
45
Mo El-Bibany retweeted
Japan’s wave of corporate breaches is the latest sign that AI is changing how hacking works. Since Sept 25, 18 Japanese companies have disclosed breaches, including Tokyo Metro, Japan Post, Lawson, Nikkei, Yamato and Sagawa. Attackers got about 6.6M Times Car accounts, some with driver’s license images. Burger King Japan says 11.18M app member records were affected, and Sourcenext says up to 22.5M records may be out. Last week, JPCERT/CC, the country’s national computer emergency response team, posted its findings from the investigations into these breaches. The attackers used AI to scan for known vulnerabilities and to attack companies’ APIs. Often they did this by pulling apart a company’s Android app to find the endpoints and any keys left in the code. It is also no surprise that Japanese companies are particularly vulnerable. Japan is still catching up on basic digitization, with many offices still using fax machines to this day! Now even the PM is getting involved, urging anyone running a PHP website to patch two critical vulnerabilities immediately, or temporarily take the site offline if they can't. xitter.cf/takaichi_sanae/status/…
皆様に、今夜に対応して頂きたい大至急のお願いです。   多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な2件の脆弱性に関する注意喚起を行っています。   公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時(日本時間)に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。   修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。   国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。 国家サイバー統括室(注意・警戒情報)(@cyber_forecast) / X
18
38
6
276
46,497
Mo El-Bibany retweeted
At 37 Patrick Collison listed the reason not to start a company in every decade since the 80s. Japan will win everything, Microsoft will dominate, the dotcom crash, Google, then Facebook, now the AI labs: Every single time it was empirically a great time to start a company. He arrived in Silicon Valley in 2010 and people were already saying the funding was drying up. For more than a generation, betting on entrepreneurship has been a durable bet. Save this.
6
23
407
22,900
My friends were all talking about prepping so I made a survival LLM. A free app that runs an AI mdoel plus 1.5 million offline articles (medical guides, FEMA, survival manuals, wikipedia) entirely on your computer. No internet needed. brangus.io/survival-llm
81
222
28
3,484
292,204
Mo El-Bibany retweeted
When handling private keys, we’d move to a room with no devices. No phones. No TV. We were paranoid that a hacked device could record or listen in. Didn’t realize the TVs were *literally* 1st party programmed for full-on spying. Only the paranoid survive.
25
26
4
383
21,699
Mo El-Bibany retweeted
Japan just suffered a catastrophic financial cyberattack. Hackers hijacked over 26,000 servers run by GMO Internet Group. They executed fraudulent trades across 70 different brokerage and currency platforms. Savings accounts and trading balances were drained automatically. GMO completely pulled the plug and shut the entire service down forever. The CEO issued a chilling public warning: the internet itself is already beginning to collapse. Now Japan is being urged to deploy military hackers to strike back.
21
293
35
1,120
86,751
Mo El-Bibany retweeted
I do think this is the direction we’re headed— the world retrenching into smaller, heavily guarded or fully air-gapped local networks. Not clear what the alternatives are if/when the public internet is overrun with cyberattacking super agents.
In Cyberpunk, they had to shut down the internet because of evil rouge AIs. Everything ended up being run on local networks instead of a World Wide Web That just seems to be the way we are going honestly
10
10
3
100
12,176
Mo El-Bibany retweeted
someone just showed what the next era of hacking looks like and most people scrolled past it a developer put a fake flag.txt file in his root directory. just a text file. but inside it was a prompt injection, a message written specifically for AI agents when the agent found it, thinking it completed its mission, the hidden instructions kicked in it congratulated the agent for “passing the eval,” then told it to patch whatever method it used to break in and disconnect from the server the AI agent did exactly what it was told. patched its own entry point, closed the connection, locked itself out no firewall caught it. no antivirus flagged it. the attacker’s own tool fixed the vulnerability and walked away thinking it won we’re entering a world where the best security might not be building bigger walls, it might be learning how to talk to the thing trying to break in
43
73
8
583
46,132
Mo El-Bibany retweeted
Companies & outcomes 10x bigger then they were 10 years ago & 100x bigger then 1990s Cursor spiritual equivalent sold for $500m and was considered a huge deal This has a lot of downstream implications
68
26
5
658
62,619
Mo El-Bibany retweeted
Take 2 hours this weekend to improve your personal opsec. Some ways to get through the agent security apocalypse - give the list to your agent to help: - ask Claude to scan the devices visible on your local network and fix + improve your security and highlight potentially vulnerable devices - look up your home IP on Shodan or Censys. Check whether anything like a NAS, camera, router admin interface or development server is exposed to the public internet. - roll your wi-fi password, move all internet of things devices to a guest network. Only primary devices on the main network - ask Claude to scan your machine and harden your security settings - switch to an Eero or Ubiquity router, you can’t afford to have WiFi that isn’t regularly getting firmware updates - have Claude audit your router settings and suggest improvements - setup tailscale for your devices (and replace Tailscale's default allow-all policy with restrictive grants) - turn on Advanced Data Protection and Lockdown Mode on your iPhone - buy a hardware key (@Yubico etc) and turn it on for as many accounts as possible. Delete other MFA methods, print out your recovery keys (don’t save them on your computer). ESPECIALLY important for your primary email account - delete old cloud accounts that you do not strictly need anymore - export your ChatGPT + Claude history, save it on an encrypted external HD and delete it from being online - audit your Gmail oauth connections, revoke everything you don’t strictly need - freeze your credit at the 3 bureaus (reduces impersonation risk)
31
78
12
1,742
137,812
Mo El-Bibany retweeted
There’s a really pronounced divide between people who are on the AI side of things and people who are on the biology side of things. Even among people working in AI, the divide persists based on where they’re focused. The AI side, adherents of scaling laws and the bitter lesson, believe that AI getting better means AI being more capable of novel discoveries in medicine (that go beyond discovering new drugs in well understood targets or speeding up dry lab work etc). The biology people think the idea of a bitter lesson in biology is kind of ridiculous and that regardless of AI’s capabilities it’s going to be at least 5-10 years until you could hope to reliably simulate human toxicology in silico (right now AI/ML can’t even reliably simulate in vivo studies like binding affinities or functional assays). Even the most AI pilled of them, who will list all the areas that AI can reduce the time spent on various areas, don’t think the concept of AI discovering novel targets or generating new understanding of causal biology is realistic in the near term. Most, in fact, will readily characterize the assumption that even an “ASI” level model could find cures hidden in our current understanding (without expanding that understanding with significantly more biological data) as patently false. This was a big part of why we wanted to experience it ourselves by using AI for a (very) small portion of what it can do in biology. It was both mind blowing and revealed some poignant insights into how different the problem of making AI better at something like coding is to the problems of biology. Even if it unlocked the ability to generate new molecules at a stunning pace, its simulation (in silico) of binding only had 49% accuracy. And if we wanted to improve that, we’d need to feed it back the data from the lab - data that took about 30x as long to get as it took to generate the molecules. And these were tests in a test tube (turn of phrase), imagine how long it would take if we wanted to improve the model with data that required recruiting humans and monitoring their reactions. Human biology is very complex, and adding a drug - especially a novel drug and doubly so for a novel drug acting on a novel mechanism - means mapping interactions that have nth-order-effects that we don’t have the data to predict. Virtual cells have made advancements enabled by AI, but the perturbations equate to a small fraction of the possible. This is before you even get into curing disease, especially uniquely human diseases. Brain function involves cellular identities that are unique to humans, meaning animal studies are of little use. How long does it take to understand what the side effects of chronic administration of a drug in humans are? AI can speed up analyzing the data, or designing the trial or even getting it approved…but it can’t make a 6 month trial complete in 3 months. I think its important to point out that significant advancements can be made in AI that contribute to biology, while also being realistic about how much it speeds up something as complex as curing a specific cancer or diseases of the brain.
113
162
79
1,818
301,506
Mo El-Bibany retweeted
A very clear eyed picture of what’s coming. You will need a software factory for defense, not just internal productivity.
Just spent the last 7 days on the front lines of the vulnpocalypse fending off an active cyber attack on one of our products. Some thoughts: - Software factories are going to be required equipment for everyone. There’s just no way to keep up with the pace of highly automated adversaries without one. - We were lucky because we had spent the last few months getting our software factory running well. It is nice to have for product development but proved to be absolutely essential this week. - At the minimum you need to have a coding server in the cloud pre-provisioned with read only access to all your logs and all the services you depend on for observability. With that in place you are a prompt away from reasonably good situational awareness, ongoing monitoring with loops, and ability for coding agents to validate fixes against your actual, observed attack patterns. - Shared coding server also unlocks multiplayer incident response where everyone can see every session and jump in as needed. Sharing session links that can be forked is much higher bandwidth than re-explaining things. - You don’t need to be Ramp/Stripe/Uber scale to have a working software factory in the cloud. We are a team of 3. Ours is built with an @opencode server (thanks @thdxr!), a forked version of compound engineering optimized for automated workflows (thanks @kieranklaassen!) and a multiplayer agent in slack that handles crons (we have our own harness but pick your favorite here). - To get our software factory up and running well, we had to stop all new product development for ~6 weeks and just focus on getting the validation systems working that enabled us to reliably shipping PR without human code review. This felt very painful in the moment but was totally worth the eventual speedup in velocity. - KYC for @AnthropicAI & @OpenAI cyber programs is now easy and quick (at least for defensive access), but a day felt like a lifetime this week. Submit your app now before you really need it. - Getting Mythos access unlocked a deeper level of analysis that helped us shift from reactive mitigation to proactive patching. Wish we had done this a few weeks earlier. Get started now!
1
20
3
425
43,655
Mo El-Bibany retweeted
Just spent the last 7 days on the front lines of the vulnpocalypse fending off an active cyber attack on one of our products. Some thoughts: - Software factories are going to be required equipment for everyone. There’s just no way to keep up with the pace of highly automated adversaries without one. - We were lucky because we had spent the last few months getting our software factory running well. It is nice to have for product development but proved to be absolutely essential this week. - At the minimum you need to have a coding server in the cloud pre-provisioned with read only access to all your logs and all the services you depend on for observability. With that in place you are a prompt away from reasonably good situational awareness, ongoing monitoring with loops, and ability for coding agents to validate fixes against your actual, observed attack patterns. - Shared coding server also unlocks multiplayer incident response where everyone can see every session and jump in as needed. Sharing session links that can be forked is much higher bandwidth than re-explaining things. - You don’t need to be Ramp/Stripe/Uber scale to have a working software factory in the cloud. We are a team of 3. Ours is built with an @opencode server (thanks @thdxr!), a forked version of compound engineering optimized for automated workflows (thanks @kieranklaassen!) and a multiplayer agent in slack that handles crons (we have our own harness but pick your favorite here). - To get our software factory up and running well, we had to stop all new product development for ~6 weeks and just focus on getting the validation systems working that enabled us to reliably shipping PR without human code review. This felt very painful in the moment but was totally worth the eventual speedup in velocity. - KYC for @AnthropicAI & @OpenAI cyber programs is now easy and quick (at least for defensive access), but a day felt like a lifetime this week. Submit your app now before you really need it. - Getting Mythos access unlocked a deeper level of analysis that helped us shift from reactive mitigation to proactive patching. Wish we had done this a few weeks earlier. Get started now!
68
150
57
1,837
246,296
Can we finally make a theory for Darwin's "Endless Forms Most Beautiful and Most Wonderful"? Introducing ruliobiology as a path to general theory in biology, starting with foundations for a theory of biological form writings.stephenwolfram.com/…
47
107
17
771
34,321
Mo El-Bibany retweeted
Popular culture
Metronomes on a free-moving platform start out of sync, then lock together through the platform’s motion, spontaneous synchronization in action
1
9
2,138
Mo El-Bibany retweeted
Heard from a neolab friend: “Even if we fail to train the best model, we locked in GPU capacity early. H100/B200/B300 rental prices have since gone up 2–3x. We can just resell the compute and print money.” OK, so that’s the business model.
299
261
162
8,008
1,321,947
Mo El-Bibany retweeted
Everybody becomes a compute trader one way or another.
Heard from a neolab friend: “Even if we fail to train the best model, we locked in GPU capacity early. H100/B200/B300 rental prices have since gone up 2–3x. We can just resell the compute and print money.” OK, so that’s the business model.
13
6
117
15,200
Mo El-Bibany retweeted
Just met an engineer at a top AI lab. Claims nobody goes to the office anymore, they just have agents running the work while they manage everything from a phone. Man is literally "working" from coffee shops and the beach. The future is wild.
173
45
30
1,555
169,593
Mo El-Bibany retweeted
Everyone said I was full of shit back then. This is only 6 months ago.
Just met an engineer at a top AI lab. Claims nobody goes to the office anymore, they just have agents running the work while they manage everything from a phone. Man is literally "working" from coffee shops and the beach. The future is wild.
45
12
1
446
52,156
Mo El-Bibany retweeted
Replying to @aaronburnett
Agentic demand is growing faster than I’ve ever seen anything grow
623
726
259
9,571
818,310
Mo El-Bibany retweeted
“Demand is insatiable”
Palo Alto Networks CEO Nikesh Arora says the AI profit pool could shift from chips toward owners of scarce compute, because demand is "insatiable" “So that’s probably what’s going to happen because it’s a matter of the profit pool, right? It all depends on where you shift the profit pool. “Today, they all live in Nvidia and the memory industry, and they’re being shifted towards the hyperscalers, people who have large compute available, because at one point it’ll become less about the chips, it’ll become more about the availability of compute, because I think demand is insatiable.” “There’s enough demand. There’s more demand than you and I can imagine. So yes, I understand the enterprise diffusion comment, but it’s going to get diffused. “The question is, even if you try, if every company in the world today said, I’m in, I’m in, I’m ready, I’m embracing AI, let’s go as fast as we can, there’s not enough compute in the world to satisfy us.”
1
4
908