Tim FerrissOne of The Scariest Hackers I’ve Ever Met — Pablos Holman
CHAPTERS
- 0:00 – 0:34
Extreme risk tolerance and optimizing for “cool” over safety
Pablos Holman opens by describing how he has repeatedly prioritized working on what he finds interesting, even when it caused him to go broke. He questions why so many people optimize for safety by default and frames his approach as something others could replicate.
- •He describes having an extreme risk tolerance and repeatedly going broke from working on things that were “too soon” or “too expensive.”
- •He says he optimizes for what’s cool or interesting over everything else.
- •He challenges the impulse to choose careers primarily for safety.
- •He suggests this orientation toward risk and interest is replicable for others.
- 0:34 – 3:41
Tim’s first onstage “hacker magic show” encounter and early insecurity demos
Tim Ferriss recounts seeing Pablos demonstrate real-world security weaknesses onstage, framed through a Wired write-up. The segment establishes Pablos’s reputation for making abstract vulnerabilities feel immediate and unsettling.
- •Tim quotes an account of voicemail hacking via caller ID spoofing during a conference demonstration.
- •The Wired description includes quick physical lock bypassing and browser manipulation via JavaScript.
- •Tim recalls an RFID-enabled credit card demo using an inexpensive reader.
- •Pablos characterizes that era as “wild times.”
- 3:41 – 6:45
What “hacker” means: reverse engineering, puzzles, and hacking beyond computers
Pablos explains how growing up in Alaska with early access to an Apple II pushed him into reverse engineering as a way to learn. He defines a hacker as someone drawn to puzzles and says he now wants to redirect hacker talent toward problems outside computer security.
- •He learned by breaking things and observing outcomes because he had no local guidance.
- •He links hacking to a puzzle-solving mindset and the “bottomless pit” of computer security puzzles.
- •He describes his career as moving from computers toward “hacking everything but computers.”
- •He says he wants to “rescue” hackers from security work and apply them to bigger problems.
- 6:45 – 11:49
Off-label thinking: “What can I make this do?” (Samy Kamkar and playful exploitation)
Pablos contrasts how most people ask what a device does with how hackers ask what they can make it do. He uses Samy Kamkar as an example of boundary-pushing experimentation, including manipulating systems by feeding them false data.
- •He frames the hacker mindset as off-label use and dismantling assumptions.
- •He describes Samy Kamkar as violating the warranty immediately and embodying the mindset.
- •He recounts Samy manipulating traffic visualization by sending fake location/traffic signals.
- •He argues you can’t invent new technology by “reading the directions.”
- 11:49 – 15:10
Rodney Mullen as an inventor: zero-to-one vs craft, and why inventors aren’t recognized
Pablos describes skateboarder Rodney Mullen as a prototype for invention: imagining something unproven, then grinding for months until it’s real. He draws a sharp line between the difficulty of doing something the first time and the relative ease of repeating it, and laments that “inventor” isn’t treated as a legitimate creative identity.
- •He calls Rodney Mullen the “godfather of street skating” and credits him with foundational tricks.
- •He highlights Rodney’s isolated upbringing and self-driven experimentation.
- •He contrasts invention (zero-to-one) with craft (iterations after the first).
- •He argues inventors are an essential creative class but lack cultural recognition.
- 15:10 – 18:10
Hackerbot: the “cute” password thief robot and why framing matters
Pablos tells the origin story of building Hackerbot with Eric Johanson, initially just for fun after seeing youth robotics competitions. They turned it into a roaming Wi‑Fi/password demo to communicate security risks—using a mediagenic robot to get attention when people didn’t want to hear warnings from hackers.
- •He and Eric Johanson built a robot outside any competition, then asked what it should do.
- •They made it triangulate Wi‑Fi users, drive up, and display cracked passwords on a screen.
- •He notes a laptop could do the same thing, but the robot made the message more compelling.
- •He says Hackerbot helped raise awareness about widespread insecurity when audiences were indifferent.
- 18:10 – 22:06
Hacker self-defense: why sophisticated attackers win and how zero-day markets work
Tim asks whether nontechnical targets can defend themselves against top-tier attackers, and Pablos says sophisticated state-level actors can be extremely hard to stop without major lifestyle changes. He explains why zero-days are hoarded and outlines a brokered marketplace where exploits are vetted and sold primarily to governments.
- •He describes security as an escalating arms race between attackers and defenders.
- •He distinguishes opportunistic mass attacks from targeted, sophisticated campaigns.
- •He explains why valuable exploits are saved for rare use to preserve “zero-day” status.
- •He outlines a sales path: discover exploit → sell to broker → broker sells to government buyers.
- 22:06 – 25:15
Where hackers cluster: centers of excellence and the role of conventions and community
Pablos discusses why certain places become dense with hacking talent: deep technical culture (like strong math traditions) and institutional magnets (like Microsoft importing security talent). He names major gatherings and emphasizes that hacker communities thrive on connection and shared spaces.
- •He attributes hacker density to technical excellence and centers of gravity that attract talent.
- •He describes the Chaos Computer Congress in Germany as a major benchmark gathering.
- •He recounts Seattle becoming a hub as Microsoft imported hackers for security work.
- •He mentions DEF CON as very large, ShmooCon ending, and suggests CCC as a standout event.
- 25:15 – 27:30
Geopolitics as an escalation game: energy underpins chips, AI, and competitiveness
Pablos frames technology competition as something you can’t “win,” only lose by not participating. He connects semiconductor and AI progress to energy constraints and argues hyperscalers are catalyzing renewed focus on energy—especially nuclear fission—to meet surging demand.
- •He says technology competition is a war of escalation that punishes non-participation.
- •He identifies semiconductors and AI as major, generally applicable strategic technologies.
- •He links compute growth to energy needs, noting hyperscalers’ increasing energy focus.
- •He claims hyperscalers will help drive nuclear’s resurgence because the world needs more energy.
- 27:30 – 38:00
Case for nuclear fission now: regulatory shifts, borehole reactors, and sequencing priorities
Pablos argues the highest-leverage national priority is energy, and within energy, fission reactors. He describes regulatory change as pivotal, explains a borehole reactor concept he’s excited about, and stresses that solving energy first makes many other problems easier or feasible later.
- •He says fission is the top priority and urges making deployment easier and scalable.
- •He describes a reactor designed to be buried deep underground with water cooling and simple retirement by filling the hole.
- •He contrasts advanced designs with regulatory hurdles and emphasizes creating a workable approval track.
- •He uses recycling and carbon capture examples to argue for solving energy first and ordering dominoes correctly.
- 38:00 – 44:52
Deep tech investing: 10X breakthroughs, technical vs market risk, and giant ignored TAMs
Pablos defines what he looks for in deep tech: technologies that are an order of magnitude better than the status quo and can transform large, traditional industries. He contrasts Silicon Valley’s market-risk obsession with deep tech’s front-loaded technical risk and argues that once a breakthrough works, market demand is often obvious and massive.
- •He says he gets involved when a technology appears “ten times better” on key metrics.
- •He critiques venture’s focus on apps and SaaS relative to hard tech like reactors or space solar.
- •He contrasts market-risk frameworks (MVP, product-market fit) with deep tech’s technical-risk focus.
- •He argues many trillion-dollar industrial markets dwarf software and represent deep tech’s opportunity space.
- 44:52 – 49:56
Autonomous sailing cargo ships: disruption, labor/regulatory friction, and why incumbents won’t build them
Pablos describes a team developing autonomous cargo ships that sail, using electric backup when needed. He argues incumbents won’t pursue the innovation despite its feasibility—similar to how taxi companies didn’t build ride-hailing apps—and he frames the opportunity as building a new shipping giant rather than selling to existing ones.
- •He describes autonomous ocean shipping as feasible and sailing as a key fuel-cost breakthrough.
- •He claims shipping spend is dominated by fuel costs and sailing reduces that dependence.
- •He says incumbents often resist building disruptive tech even when they could.
- •He discusses port congestion dynamics and why smaller, more numerous ships could change logistics.
- 49:56 – 55:14
Identity and persona: hacker handles, indestructible glasses, and being a “possible-ist”
Tim asks about Pablos’s name and signature glasses, leading into a broader view of optimism. Pablos explains his handle’s origins, describes his long-running titanium Oakley frames, and defines his outlook as believing an awesome future is possible but not guaranteed—dependent on what people choose to build.
- •He says “Pablos” is a longstanding hacker handle from childhood; the last name is real.
- •He explains his titanium alloy glasses and why they’ve lasted for decades.
- •He rejects Pollyanna optimism and describes himself as a “possible-ist.”
- •He emphasizes that the future depends on deliberate building with available technologies.
- 55:14 – 1:02:03
From Silicon Valley to Seattle: dot-com “sock puppet attack,” Neal Stephenson, and Blue Origin’s origin
Pablos explains leaving Silicon Valley after the dot-com collapse, which he jokes about via the pets.com sock puppet reference. A connection to Neal Stephenson leads him to a machine-shop-like lab exploring alternatives to rockets, which becomes the start of Blue Origin, including experiments that eventually nudged the team toward rockets.
- •He describes the dot-com crash as shutting down even serious technical work, prompting his move.
- •He explains “sock puppet attack” as a reference to pets.com and bubble-era hype.
- •He recounts being recruited via mutual friends to a lab with Neal Stephenson and others focused on space ideas.
- •He describes early experiments including a frightening vertical-lift craft that helped prove concepts before shifting focus to rockets.
- 1:02:03 – 1:21:33
Why he gets hired: T-shaped generalism, permission to ask “dumb” questions, and long time horizons
Pablos explains his value as a deep generalist with enough depth in computing to interface with experts across domains. He credits the freedom of being a “hacker” with asking naive questions without professional constraints, and he highlights learning from Jeff Bezos’s long-horizon thinking—then compressing it into 10-year executable plans.
- •He describes himself as a canonical T-shaped person with deep computer roots and broad range.
- •He says not being formally trained lets him ask basic questions without reputational risk.
- •He argues teams—not lone heroic founders—build world-changing companies, and founders should hire for their weaknesses.
- •He describes adopting long time horizons (e.g., 100 years) and then asking how to do it in 10 years.
- 1:21:33 – 2:18:29
Community as infrastructure: MARS conference, Newlab, social engineering jokes, and China/AI governance contrasts
The conversation moves through Jeff Bezos’s MARS conference as a model for cross-pollinating elite experts, then to recording at Newlab as a hub for deep tech startups. They also touch on social engineering versus hacking, and Pablos contrasts China’s engineering mindset and execution speed with U.S. legalism—arguing AI tools may improve decision-making and governance over time.
- •He describes MARS as a small, Bezos-run event bringing together experts in machine learning, automation, robotics, and space.
- •He says deep tech lacks a single geographic center and needs intentional community-building.
- •They discuss Newlab in the Brooklyn Navy Yard as an incubator with machine shops and labs for deep tech teams.
- •He argues U.S. leadership over-indexes on lawyers and suggests AI tools will increasingly help decision-making, while noting China executes quickly but doesn’t make room for renegade creativity.
