← back to explore
Dan Kaminsky
Milestone (age 26)
Used novel DNS cache snooping techniques in November 2005 at age 26 to demonstrate that the Sony BMG rootkit had infected at least 568,000 networks worldwide, bringing global attention to the scale of the scandal.
Kaminsky was born in San Francisco and taught himself to code by age 5 after his father gave him a RadioShack computer. At 11, he hacked into military computers, attracting government attention. He attended Santa Clara University and worked at Cisco, Avaya, and IOActive as a penetration tester and security researcher. He was a regular speaker at Black Hat and DEF CON for years before the Sony rootkit scan. In 2008, he discovered the fundamental DNS cache poisoning vulnerability that made him widely known.
Think your path resembles Dan Kaminsky's?Compare the visible ingredients, then see exactly where the comparison stops working.
Am I the next Dan Kaminsky? →Starting point
Born in 1979 in San Francisco; father bought him a computer at age 4; mother defended his early hacking activities against government threats.
Current position (2021 · deceased)
Died April 23, 2021 at age 42 in San Francisco from complications of diabetic ketoacidosis; final role was co-founder and chief scientist of Human Security (formerly White Ops).
How this path compounded
01 Starting advantages
8/24 starting-position score
Strongest documented signals: Family financial platform, Parent / family domain, Elite institution pipeline.
Describes the starting position, not what the person later made of it.
Cohort percentile: 74
02 Built or converted leverage
15/25 multiplying-capacity score
Strongest observed levers:Domain proximity, Started serious reps before 20, Prior reps.
Measures what was present, not whether it was inherited, earned, self-built, external, or mixed.
Cohort percentile: 83
03 Compounding trajectory
4 documented steps
The timeline below shows the sequence of work and transitions around the selected early milestone. It is evidence of a path, not proof that every step was necessary.
Milestone at age 26
04 Observed career standing
T3 · Domain-recognized
Notable and widely recognized within the domain. The tier summarizes documented career recognition through the data cutoff—not Dan Kaminsky's worth or future potential.
Question four · where did the leverage come from?
Dan Kaminsky's leverage provenance
Each non-zero lever gets a best-supported origin, evidence signals, and confidence. Unresolved is the honest default when the biography cannot distinguish self-built, advantage-enabled, earned, external, or mixed.
Started serious reps before 201/1
Mixedmedium confidence
Mapped starting advantages and self-directed-building language are both documented.
Parent / family domain (1/2)Rare early tools (1/2)Elite institution pipeline (1/2)Early online platform (1/2)
Domain proximity2/2
Advantage-enabledmedium confidence
One or more documented starting advantages plausibly enabled this lever.
Direct domain exposure (1/2)Parent / family domain (1/2)Frontier geography (1/2)Elite institution pipeline (1/2)
Prior reps2/3
Mixedmedium confidence
Mapped starting advantages and self-directed-building language are both documented.
Parent / family domain (1/2)Rare early tools (1/2)Elite institution pipeline (1/2)Early online platform (1/2)
Scarce skill depth2/3
Mixedmedium confidence
Mapped starting advantages and self-directed-building language are both documented.
Parent / family domain (1/2)Rare early tools (1/2)Elite institution pipeline (1/2)Early online platform (1/2)
Elite ecosystem network2/3
Advantage-enabledmedium confidence
One or more documented starting advantages plausibly enabled this lever.
Parent / family domain (1/2)Elite institution pipeline (1/2)Frontier geography (1/2)
Structural wave / timing2/3
Externalmedium confidence
A structural wave is external to the person, even when their position improved access to it.
Frontier geography (1/2)Early online platform (1/2)
Concentration intensity2/3
Mixedmedium confidence
Mapped starting advantages and self-directed-building language are both documented.
Family financial platform (1/2)
Capital safety1/2
Advantage-enabledmedium confidence
One or more documented starting advantages plausibly enabled this lever.
Family financial platform (1/2)Elite institution pipeline (1/2)
Native distribution1/3
Mixedmedium confidence
Mapped starting advantages and self-directed-building language are both documented.
Early online platform (1/2)Elite institution pipeline (1/2)
This is a bounded inference from the current annotations—not a claim about private effort, merit, or the percentage of Dan Kaminsky's outcome attributable to any origin.
Luck is not a leftover score.Structural luck, Encounter luck, Event luck, Outcome variance can change every arrow in the path. This successful-only dataset cannot observe the near-identical paths that did not break through, so luck stays visible and unscored.
Within Researchers / independent engineers, Dan Kaminsky's starting-advantage total is at the 74th percentile. Separately, their built or converted leverage total is at the 83th percentile. Other T3 profiles average 7.0 / 24 starting advantage and 11.7 / 25 leverage. Similar scores appear in other tiers, so these figures describe positioning—not a cause.
Trajectory
- 2005 · age 26
Used DNS cache snooping to demonstrate that the Sony BMG rootkit had infected at least 568
000 networks worldwide.
- 2008 · age 29
Discovered the fundamental DNS cache poisoning vulnerability
Coordinated a global multi-vendor patch effort.
- 2010 · age 31
Named by ICANN as one of the Trusted Community Representatives
For the DNSSEC root.
- 2021 · age 42
Died on April 23, 2021 in San Francisco
Complications of diabetic ketoacidosis.
Primary leverage engine
Technical depth
Scarce technical / intellectual depth
Secondary engine
Distribution / audience
Built/converted leverage
15 / 25
evidence: Medium
Built or converted leverage
Multiplying capacity documented later in the path. Measures what was present, not whether it was inherited, earned, self-built, external, or mixed.
Started serious reps before 20
1/1
Elite ecosystem network
2/3
Structural wave / timing
2/3
Concentration intensity
2/3
Starting-advantage scores (0–2 each)
Access or conditions documented near the beginning of the path. Zero means "no clear evidence in reviewed sources," not "advantage was absent."
Family financial platform
1/2
Parent / family domain
1/2
Inherited audience / network
0/2
Elite institution pipeline
1/2
Dedicated mentor / coach
0/2
Exceptional peer / cofounder
0/2
Direct domain exposure
1/2
Prodigy / innate ability
1/2
Adversity / constraint catalyst
0/2
Family context
Born in San Francisco to Marshall Kaminsky and Trudy Maurer. Father bought him a RadioShack computer at age 4. Mother defended him when government officials threatened to cut their internet after he hacked military computers at 11.
Parent / family domain
Father bought him a computer at age 4, enabling early coding. Mother was supportive and protective of his early hacking activities. No evidence of formal technical domain expertise in the family.
Archetype & tags
Self-created domain repetitionearly-computer-accessDNS-expertiseSony-rootkit-scanBlack-Hat-speakerpenetration-testing
Evidence summary
Kaminsky used DNS cache snooping at 26 to demonstrate that the Sony BMG rootkit had infected at least 568,000 networks, bringing global attention to the scandal. He taught himself to code by age 5 after his father bought him a RadioShack computer, and hacked military computers at 11. He was a regular Black Hat speaker for years before the Sony rootkit work. His most famous achievement, the 2008 DNS cache poisoning vulnerability discovery, came at 29. He died in 2021 at age 42.
advantage confidence: Medium · source count: 4 · audit: not_independently_audited · status: subagent_researched_beta
Sources
Related — same primary engine