Documented path
Kaminsky was born in San Francisco and taught himself to code by age 5 after his father gave him a RadioShack computer. At 11, he hacked into military computers, attracting government attention. He attended Santa Clara University and worked at Cisco, Avaya, and IOActive as a penetration tester and security researcher. He was a regular speaker at Black Hat and DEF CON for years before the Sony rootkit scan. In 2008, he discovered the fundamental DNS cache poisoning vulnerability that made him widely known.
Born in 1979 in San Francisco; father bought him a computer at age 4; mother defended his early hacking activities against government threats.
Died April 23, 2021 at age 42 in San Francisco from complications of diabetic ketoacidosis; final role was co-founder and chief scientist of Human Security (formerly White Ops).
Where the conditions came from
Each is placed on a −1 to 3 scale from documented evidence, and the three are never added together. A combined total would rank Dan Kaminsky against other people. Held apart, they explain why this path ran differently from another one—which is the only comparison this project supports.
The marble itself
+3Tailwind
What capability, drive, or early skill is documented in the person rather than their surroundings?
Father bought him a RadioShack computer at 4; taught himself to code by 5. Hacked into military computers at 11, attracting government attention. Prodigy-level early ability in computing and security from an exceptionally young age.
Where it was dropped
+1Tailwind
What money, family standing, network, or permission was already in place before the work began?
Born in San Francisco to Marshall Kaminsky and Trudy Maurer. Father bought him a computer at 4, showing early support for technology. Middle-class family; mother fiercely defended him when government threatened to cut internet access. Supportive but not domain-specific.
The shape of the track
+1Tailwind
What place, timing, institution, or peer group made the next step available?
Early computer access at 4 (1983, rare), San Francisco tech-adjacent geography. Black Hat and DEF CON community as professional network. Santa Clara University (business computing, not elite CS). Cypherpunks/security community provided peer environment, but no elite institutional pipeline.
A −1 is a documented headwind, not a missing value; a 0 means the sources record nothing notable either way. Annotation confidence: Medium. These are analyst readings of what the sources record, not measurements of merit, talent, or effort. The twenty-two scored dimensions remain available inside the deeper research detail.
What moved through the conditions
Silence in a biography is not evidence that perseverance was absent.
This is an unchosen opening or condition in the record, not an estimate of how much luck caused the outcome.
Strongest documented signals: Family financial platform, Parent / family domain, Elite institution pipeline.
Describes the starting position, not what the person later made of it.
Strongest observed levers: Domain proximity, Started serious reps before 20, Prior reps.
Measures what was present, not whether it was inherited, earned, self-built, external, or mixed.
The timeline below shows the sequence of work and transitions around the selected early milestone. It is evidence of a path, not proof that every step was necessary.
Notable and widely recognized within the domain. The tier summarizes documented career recognition through the data cutoff—not Dan Kaminsky's worth or future potential.
Question four · where did the leverage come from?
Each non-zero lever gets a best-supported origin, evidence signals, and confidence. Unresolved is the honest default when the biography cannot distinguish self-built, advantage-enabled, earned, external, or mixed.
Mapped starting advantages and self-directed-building language are both documented.
One or more documented starting advantages plausibly enabled this lever.
Mapped starting advantages and self-directed-building language are both documented.
Mapped starting advantages and self-directed-building language are both documented.
One or more documented starting advantages plausibly enabled this lever.
A structural wave is external to the person, even when their position improved access to it.
Mapped starting advantages and self-directed-building language are both documented.
One or more documented starting advantages plausibly enabled this lever.
Mapped starting advantages and self-directed-building language are both documented.
This is a bounded inference from the current annotations—not a claim about private effort, merit, or the percentage of Dan Kaminsky's outcome attributable to any origin.
Structural luck, Encounter luck, Event luck, Outcome variance can change every arrow in the path. This successful-only dataset cannot observe the near-identical paths that did not break through, so luck stays visible and unscored.
Multiplying capacity documented later in the path. Measures what was present, not whether it was inherited, earned, self-built, external, or mixed.
Access or conditions documented near the beginning of the path. Zero means "no clear evidence in reviewed sources," not "advantage was absent."
Born in San Francisco to Marshall Kaminsky and Trudy Maurer. Father bought him a RadioShack computer at age 4. Mother defended him when government officials threatened to cut their internet after he hacked military computers at 11.
Father bought him a computer at age 4, enabling early coding. Mother was supportive and protective of his early hacking activities. No evidence of formal technical domain expertise in the family.
Kaminsky used DNS cache snooping at 26 to demonstrate that the Sony BMG rootkit had infected at least 568,000 networks, bringing global attention to the scandal. He taught himself to code by age 5 after his father bought him a RadioShack computer, and hacked military computers at 11. He was a regular Black Hat speaker for years before the Sony rootkit work. His most famous achievement, the 2008 DNS cache poisoning vulnerability discovery, came at 29. He died in 2021 at age 42.
advantage confidence: Medium · source count: 4 · audit: partial_source_verification · status: subagent_researched_beta