Co-authored the Carlini & Wagner adversarial attack paper, posted to arXiv in August 2016, which became a landmark result in adversarial machine learning.
Carlini earned a BA in Computer Science and Mathematics from UC Berkeley in 2013 and continued directly into a PhD under David Wagner. By 2016, as a PhD student, he developed the Carlini & Wagner (C&W) attack, which defeated defensive distillation and most other adversarial defenses, becoming one of the most cited papers in adversarial ML.
Each is placed on a −1 to 3 scale from documented evidence, and the three are never added together. A combined total would rank Nicholas Carlini against other people. Held apart, they explain why this path ran differently from another one—which is the only comparison this project supports.
The marble itself
What they brought
+1Tailwind
-10+1+2+3
What capability, drive, or early skill is documented in the person rather than their surroundings?
UC Berkeley BA in CS and Mathematics (2013), PhD under David Wagner. Received NSF Graduate Research Fellowship. Developed the landmark Carlini & Wagner adversarial attack at ~25-26. Strong academic trajectory but no evidence of prodigy-level early achievement.
Where it was dropped
What they were handed
0Neither way
-10+1+2+3
What money, family standing, network, or permission was already in place before the work began?
Parents mentioned in dissertation acknowledgments (Susan Rendina and Giuliano Carlini) but no notable family wealth, domain connections, or professional network documented.
The shape of the track
What surrounded them
+2Tailwind
-10+1+2+3
What place, timing, institution, or peer group made the next step available?
UC Berkeley provided both undergraduate and graduate education. David Wagner, a leading computer security researcher, served as his PhD advisor. The NSF Graduate Research Fellowship provided funding. Berkeley's security and ML research groups placed him at the intersection of two frontier fields.
A −1 is a documented headwind, not a missing value; a 0 means the sources record nothing notable either way. Annotation confidence: Medium. These are analyst readings of what the sources record, not measurements of merit, talent, or effort. The twenty-two scored dimensions remain available inside the deeper research detail.
What moved through the conditions
Perseverance and luck stay visible—not scored.
Documented perseveranceCarlini earned a BA in Computer Science and Mathematics from UC Berkeley in 2013 and continued directly into a PhD under David Wagner.
This records repeated behaviour or recovery described by sources; it is not a grit or merit score.
Structural luckBerkeley's security and ML research groups placed him at the intersection of two frontier fields.
This is an unchosen opening or condition in the record, not an estimate of how much luck caused the outcome.
Measures what was present, not whether it was inherited, earned, self-built, external, or mixed.
Cohort percentile: 19
03 Compounding trajectory
6 documented steps
The timeline below shows the sequence of work and transitions around the selected early milestone. It is evidence of a path, not proof that every step was necessary.
Milestone at age 26
04 Observed career standing
T3 · Domain-recognized
Notable and widely recognized within the domain. The tier summarizes documented career recognition through the data cutoff—not Nicholas Carlini's worth or future potential.
Each non-zero lever gets a best-supported origin, evidence signals, and confidence. Unresolved is the honest default when the biography cannot distinguish self-built, advantage-enabled, earned, external, or mixed.
Prior reps2/3
Advantage-enabledmedium confidence
One or more documented starting advantages plausibly enabled this lever.
One or more documented starting advantages plausibly enabled this lever.
Direct domain exposure (1/2)Frontier geography (1/2)Elite institution pipeline (2/2)
Concentration intensity1/3
Advantage-enabledmedium confidence
One or more documented starting advantages plausibly enabled this lever.
Dedicated mentor / coach (2/2)
This is a bounded inference from the current annotations—not a claim about private effort, merit, or the percentage of Nicholas Carlini's outcome attributable to any origin.
Luck is not a leftover score.
Structural luck, Encounter luck, Event luck, Outcome variance can change every arrow in the path. This successful-only dataset cannot observe the near-identical paths that did not break through, so luck stays visible and unscored.
Within Researchers / independent engineers, Nicholas Carlini's starting-advantage total is at the 56th percentile. Separately, their built or converted leverage total is at the 19th percentile. Other T3 profiles average 5.3 / 24 starting advantage and 11.0 / 25 leverage. Similar scores appear in other tiers, so these figures describe positioning—not a cause.
Trajectory
2013 · age 23
Earned BA in Computer Science and Mathematics
UC Berkeley.
2016 · age 26
Co-authored the Carlini & Wagner adversarial attack paper
Posted to arXiv in August 2016, becoming a landmark result in adversarial ML.
2018 · age 28
Completed PhD at UC Berkeley
Demonstrated audio adversarial attacks on Mozilla DeepSpeech and showed 7 of 11 ICLR adversarial defenses could be broken.
2020 · age 30
Won the IOCCC Best of Show for an obfuscated Tic-Tac-Toe game written
A single printf call.
2022 · age 32
Joined Google DeepMind as a research scientist.
2024 · age 34
Moved to Anthropic as a research scientist.
Primary leverage engine
Technical depth
Scarce technical / intellectual depth
Secondary engine
Elite academic mentorship
Built/converted leverage
11 / 25
evidence: Medium
Built or converted leverage
Multiplying capacity documented later in the path. Measures what was present, not whether it was inherited, earned, self-built, external, or mixed.
Started serious reps before 20
0/1
Prior reps
2/3
Scarce skill depth
2/3
Native distribution
0/3
Elite ecosystem network
2/3
Complementary team
1/2
Structural wave / timing
2/3
Concentration intensity
1/3
Capital safety
0/2
Domain proximity
1/2
Starting-advantage scores (0–2 each)
Access or conditions documented near the beginning of the path. Zero means "no clear evidence in reviewed sources," not "advantage was absent."
Family financial platform
0/2
Parent / family domain
0/2
Inherited audience / network
0/2
Elite institution pipeline
2/2
Frontier geography
1/2
Rare early tools
0/2
Dedicated mentor / coach
2/2
Exceptional peer / cofounder
1/2
Early online platform
0/2
Direct domain exposure
1/2
Prodigy / innate ability
0/2
Adversity / constraint catalyst
0/2
Family context
Not documented in reviewed sources. No information about family background, parental occupations, or financial status was found.
Parent / family domain
Not documented in reviewed sources. No evidence of parental domain expertise in CS or security.
Archetype & tags
Mentor-acceleratedBerkeley PhDDavid Wagner advisorNSF fellowshipadversarial ML pioneer
Evidence summary
Nicholas Carlini was born in 1990 (per Wikidata) and earned his BA in CS and Mathematics from UC Berkeley in 2013. He pursued a PhD under David Wagner, a leading computer security researcher, and received an NSF Graduate Research Fellowship. In August 2016, at approximately age 25-26, he posted the Carlini & Wagner attack paper to arXiv, which became a landmark in adversarial ML with thousands of citations. The paper was later published at IEEE S&P 2017. No family background information was found in reviewed sources. His early advantage was primarily driven by elite institutional access (Berkeley) and sustained mentorship from David Wagner.