Head of Data Science at @BlackDuck_SW, Treasurer at @bsidesBelfast & @OpenGovNI; @infosecni Steering Group, (also @bolster@nitech.online & https://xitter.cf/t.co/6o9mendWlF)

Belfast, Northern Ireland
Joined August 2007
Andrew Bolster retweeted
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works already-clean.goodfire.com/
856
2,594
1,415
19,573
4,287,933
Andrew Bolster retweeted
imagine having decades of engineering experience... and this is what it all comes to now
19
120
14
1,527
72,257
Andrew Bolster retweeted
Get ready for PyCon Ireland 2026, coming to Dublin on Saturday, 21 November! Experience three insightful talk tracks, two engaging workshop tracks, and the ever-popular "hallway track." Secure your spot and grab your tickets now at 2026.pycon.ie/
1
3
8
556
"The sum paid to Public Digital is the highest single expenditure noted by the Executive Office on consultants in the last ten years." Oof.
112
Andrew Bolster retweeted
It's true. The principle of least privilege, separation of duties, input sanitization, logging & monitoring, defense in depth -- all apply to AI.
20
129
8
580
17,631
#BsidesLDN2026 ticket sorted! 🎉 – at Belfast, Northern Ireland
Today is the second ticket release for #BSidesLDN2026 The release will be at 1337hrs! Please read out Ticket FAQs for full details: bsides.london/ticketsfaqs #BSides #London #Tickets
4
154
Andrew Bolster retweeted
Today is the second ticket release for #BSidesLDN2026 The release will be at 1337hrs! Please read out Ticket FAQs for full details: bsides.london/ticketsfaqs #BSides #London #Tickets
7
4
12
2,422
Andrew Bolster retweeted
since tomorrow is October 1, this is my annual reminder to please stop using CSAM as the acronym for cybersecurity awareness month
32
115
6
904
33,605
You heard it here first; 'minor' updates to 'the big long website' Yes, it's all claude, but do you really care? howlonghasnorthernirelandnot… #justincase
3
78
For anyone wondering when/if/how this will be updated; the convention is, when either @alaninbelfast or @dmcbfs tells me, so I'll check if I have Davids contact details on the other sites :D
6
311
Andrew Bolster retweeted
Apparently all of these “AI is escaping containment” stories are actually just AI researchers not knowing jack squat about the absolutely most basic security practices.
267
912
96
9,557
186,261
My hot take is that if your company builds software that it cannot stop from hacking into other systems, your company is a malware company and should be treated as such
130
5,116
109
42,692
355,599
Andrew Bolster retweeted
I really need more big names in cybersecurity to come forward and state the obvious: cybersecurity is real and works and yes we absolutely can contain an AI even if it’s extremely good at finding zero days.
135
197
64
1,390
280,824
"We've almost turned war into an app" - @pkedrosky Oof. open.spotify.com/episode/3Uh… – at East Ham, London
76
Andrew Bolster retweeted
as with so much dev, we seem determined to choose between “regulate AI into the ground” and “ship it and figure out the consequences later.” there is, in fact, a third option. regulatory sandboxes let us test the technology and the law before scaling either one. wild concept.
7
6
1
58
7,589
Andrew Bolster retweeted
Common themes I've noticed: - AI is "totally different" than software, so cybersecurity doesn't apply - Cybersecurity slows everything down, it's a legacy way of thinking in the AI age - AI will replace cybersecurity through iterative self-improvement They are speedrunning 30+ years of cybersecurity learnings through repeated public failures. It's both horrifying and hilarious at the same time.
For as much as the big AI labs talk about cybersecurity, they make zero attempt to engage with the cybersecurity community. That should tell you something about their motivations.
12
48
1
280
18,657
So, I'm in Hammersmith, supposed to be in Silvertown in 15 minutes. What could go wrong. – at Hammersmith, London
2
2
286
2pm arrive Dublin Airport, get rebooked on 4pm flight to Heathrow 520 landing, 530 on the lizard line Event starts in 7 minutes now, but runs for an hour and a half so I guess I might make an appearance... – at Hammersmith, London
1
2
95
Also for the record, made it! Only 20mins late 🫠🤣 – at East Ham, London
1
20