JOHN FLOWERS▊
- IDENT
- John S. Flowers — b. Topeka, 1970, per his own account to The Pitch. Not to be confused with any other John Flowers. ATTRIBUTED
- ALIAS
- "Erstwhile hacker" — Information Security Magazine's headline, annotated at length by attrition.org [3]
- OPERATION
- Hiverworld → nCircle Network Security (founded 1998) · Kozoru (Overland Park, KS, founded 2004)
- HABITAT
- Venture pitch rooms, entrepreneurship seminars, the Kauffman Foundation Conference Center
- RECORD
- Degrees claimed in Kozoru's state funding application: "The degrees do not exist" — The Pitch's finding, May 2006 ATTRIBUTED
- STATUS
- KOZORU DEFUNCT — "Kozoru can't find answer, shuts down," per attrition.org's index, Oct 2006 ATTRIBUTED
The specimen, observed 1998–2010 across two coasts and one Kansas office park, raising money on stories. The stories were excellent. The registrars were consulted anyway.
What you are about to witness is the courtship display of the funding round: a creature that feeds not on prey but on belief, and whose plumage is entirely narrative — a monastery in Thailand, a teenage brush with the FBI, a trophy shelf of hacking contests. The display is not decoration on the animal. The display is the animal.
Then a weekly newspaper in Kansas City did the one thing the ecosystem never does. It called the registrar. That is why the archive exists. Every event below carries its receipt. Both sides get the microphone.
the drama timeline
ACT I — THE BACKSTORY YEARS (1998–2003)
Every display structure needs a foundation. This one's is real — a genuine company, genuinely founded — which is what makes the ornamentation so hard to spot against it.
-
1998
A real company
Flowers founds Hiverworld, a Berkeley network-security firm offering audits and penetration testing. It is later renamed nCircle Network Security and raises $11.3 million in venture capital in August 2001. This part checks out.
-
NOV 2001
The profile, with footnotes it didn't ask for
Information Security Magazine profiles Flowers: phone phreak at 13, six months' juvenile detention for wire fraud, and "the dubious distinction of taking first place in the Capture the Flag intrusion contests at DefCon 1 and 2, and second place at DefCon 3." Attrition.org mirrors the article and annotates it line by line: the first CTF contest was held at DEF CON 4, and the "white hat" character he cites from Neuromancer does not exist in the novel.
Observe the ornament under magnification. The contest he won three times had not yet been invented. In this field that is called a molt error.
ACT II — THE STATE WRITES A CHECK (2003–2005)
The specimen migrates inland, to habitat where its plumage has no natural predators: a state economic-development agency spending lottery and race-track proceeds.
-
2003–2004
Kozoru
Flowers moves to Johnson County, Kansas, and founds Kozoru — a natural-language search engine, conceived, he says, after studying Buddhism at a temple in Thailand. He raises $3 million in total and recruits engineers from the Bay Area and Austin. Ask Jeeves co-founder David Warthen and QuickBooks creator Ridgely Evers join the board.
-
2004
The record-setting investment
KTEC fund manager Mike Peck, impressed — "it was pretty apparent that he was an exceptional individual and had an exceptional vision" — steers the agency to a $500,000 direct investment, double the size of any it had ever made, plus $372,000 in tax credits to Kozoru's private investors. The funding application describes the management team. It is in this section that the Berkeley and Texas degrees appear.
Note the selection pressure, or rather its absence. The agency's due-diligence instinct, by the account of its own officials, ran to talking with the believers.
ACT III — THE REGISTRAR IS CONSULTED (2006)
Peer review arrives, as it so often does, not from the industry but from a free weekly newspaper with a telephone.
-
MAY 2006
"A Million Little Pixels"
David Martin's investigation runs in The Pitch. Berkeley's spokeswoman: no record of a John S. Flowers attending in the past 25 years. UT Austin: no record of a John Flowers born in 1970. The passport promised as proof of Thailand: never produced. The FBI-run juvenile detention center of his origin story: "the FBI does not run detention centers," and a Bureau of Prisons spokeswoman calls the tale "kind of fishy." Flowers, asked about the degrees: "That's bizarre. I don't know what to tell you. That's pretty strange. Maybe I should give them [Berkeley] a call and figure out what's going on." The Kansas City Star reports the same day that the questions have prompted a KTEC assessment; VentureBeat carries the story to the Valley.
-
OCT 2006
Kozoru winds down
Five months after the story, attrition.org's index logs it: "Kozoru can't find answer, shuts down" (October 20), followed a week later by "KTEC let its seat on kozoru's board sit empty." The state's record-setting investment ends with the company.
-
EPILOGUE
Tracked, then gone
Attrition.org tracks Flowers through employer changes from 2001 to 2010; its last dated entry is April 2010. The research file's status column reads: unknown. No criminal charge, no civil judgment, and no formal KTEC finding appears in the record we hold. The archive keeps the tape running.
both sides, on the record
The application: Kozoru's KTEC funding application — open to public records law — claimed Berkeley bachelor's and master's degrees and a UT Austin master's. Berkeley found no record of him in 25 years; Texas found no student by his name and birth year. The Pitch's finding: "The degrees do not exist" [2] [4].
The money: $500,000 of state investment — the agency's largest ever, doubled — plus $372,000 in tax credits, raised on that application [4].
The corroborating pattern (attrition.org's, theirs not ours): CTF victories at DEF CONs that predate the contest's existence; a passport promised and never produced; an FBI juvenile facility the Bureau of Prisons has never heard of; "caught in lies about all aspects of his life" [1] [2] [3].
Flowers's response, verbatim: "That's bizarre. I don't know what to tell you. That's pretty strange. Maybe I should give them [Berkeley] a call and figure out what's going on" [2] [4]. He never conceded the degrees were invented.
The real record: Hiverworld/nCircle was a genuine company he genuinely founded; it raised $11.3 million and, per The Pitch's own reporting, employed 300 people by 2006 [2] [3]. People who worked with him vouched on the record: Ridgely Evers — "he is interested in, maybe only interested in, solving big problems"; David Warthen — "very strong technical knowledge… a very creative thinker"; KTEC's own fund manager still called the investment "the right opportunity at the right time" [2].
Scope of the record: everything here is a newspaper investigation and a watchdog archive — no court, agency, or prosecutor has adjudicated any of it. A failed startup is not a fraud finding; Kozoru built a real product with a real team, and plenty of honestly-run search companies died trying the same thing.
YOU DECIDE
Scoped to the claims, never the man. The claim "Berkeley and Texas degrees, as stated in a state funding application" was checked by both universities at The Pitch's request, and neither found him. The $500,000 was real and record-setting. Nothing was ever adjudicated, anywhere.
Weigh the costly signals: asked for one document — a passport — he produced nothing. Asked about the degrees, he suggested the registrars had erred. The registrars declined to.
The archive does not judge. The archive merely keeps the tape running.
evidence locker
PRIMARY RECORD
PRESS
The Pitch (Kansas City) — "A Million Little Pixels," David Martin (May 4, 2006) ATTRIBUTED — the investigation itself, still live at the paper's own domain.
thepitchkc.com/a-million-little-pixels/
THE DISCOURSE
The standard. Everything above is sourced to the attrition.org documentary archive and named press reporting, with the key findings resting on named university and Bureau of Prisons spokespeople. Facts are stated as facts; findings are stated as the investigator's findings and wear their investigator. Nothing here has been adjudicated by any court or agency, and the page says so. The defense is presented at full strength, including his verbatim response and the parts of his record that check out. No motive is asserted, no private character diagnosed. The burden of proof is on us, not the subject. If it couldn't survive a defamation challenge, it wouldn't be on this page.