Hacker Newsnew | past | comments | ask | show | jobs | submit | ckbishop's commentslogin

It feels like Vance is playing the part of Edith Bolling Galt Wilson in protecting Trump from the 25th amendment (then Article II), but he absolutely sucks at it.


Well, I used 3.5 via Cursor to do some coding earlier today, and the output kind of sucked. Ran it through 3.7 a few minutes ago, and it's much more concise and makes sense. Just a little anecdotal high five from me.


Yeah, I have already done some of this. I hadn't read Wired in years, but rewarded them with a subscription as soon as they revealed the identity of Elon's minions.


The inevitable consequence of misconfigured Watchtower disease, I suppose. I pay for Docker because I like all of their products, and their private registry + scout is good, so I can go on misconfiguring all of the things!


Your default assumption should be ill intent when it comes to information security, my friend.


In this case, DOGE should be quarantined from making further changes until CAT can operate alongside DOGE for auditing purposes. Every change and access should be reviewed.


Yes. But it's not. That's the issue. They have unlocked access to systems to which they can control how they desire, unmonitored.


If this was the case at any point, or is still the case, DOGE should definitely be quarantined until CAT audits DOGE's accesses and changes. There should be two teams operating alongside each other on this. Not just DOGE. I do believe so far they were claimed to have received read-only access...but other reports were that they even had some admin access. Do we know for sure what access they had unmonitored?


RSA in trouble when?


When a company that makes quantum computers is on this page: https://en.wikipedia.org/wiki/RSA_Factoring_Challenge


1 qubit prototype can crack RSA? 1million scaled out qubits is still talk


Not even 1 qubit, just "substantial progress towards the realization of a topological qubit" (from the accompanying Nature paper).


Please someone give input on this. It's extremely important and worrying.


If this is genuinely worrying to you, take some solace in that post-quantum alternatives are undergoing standardization and implementation right now (Signal and iMessage, for example, have already deployed some PQC, as have others).

However, this announcement is a nothing-burger. As I mentioned down-thread, you should view any QC announcement/press-release with extreme skepticism unless it includes replicable (read: open-source targeting hardware other researchers can test on) benchmarks for progress on real-world use-cases (e.g., Shor, Grover, or a newly-identified actually-interesting use-case). OP does not. Nothing to see here.

Worth saying, I am not a cryptographer—I do cryptography-adjacent research engineering. However, given the level of hype going around this industry, I think it's fair to at least expect to see the spec-sheet as it were.

All the best,


Thank you for taking the time to respond. I personally lend at least some degree of credence to their claim, given that this is Microsoft we're talking about and not some startup.

If their claim is true, then would that present an issue to RSA encryption? I find it difficult to find information on this topic that is digestible to a layman.

My understanding is that the benefit of quantum computing is parallelism, and I'm not sure how today's encryption standards would be safe from brute force attacks.


No. If their claim is true, they have a new prototype of a single qubit that they say could enable faster scaling up of qubit arrays (which means asymmetric/public-key cryptosystems like RSA will be in trouble sooner than we thought they might be). However, this work does not demonstrate that scaling potential at all. In the spirit of Betteridge's Law of headlines, if such a thing were easy for them to demonstrate, why would they announce this now, with a single logical qubit, rather than when they've demonstrated at least some scaling potential?

This understanding of QC is common, but isn't quite right. Quantum computation is actually really hard to parallelize (which is why Grover, though a bit frightening since it halves the security of symmetric primitives, is actually kind of damning for QC—because you can't parallelize that search really at all, so halving is the best a quantum adversary can get against things like AES-256).

I stand by my assertion that, until a QC announcement includes replicable benchmarks on actual use-cases, such things can be safely dismissed.

If you continue to be concerned (not necessarily unhealthy), engage cryptographers and security engineers to help your projects build know-how on hybrid (in this case, classical/PQ) cryptosystems, and get them deployed sooner rather than later.

All the best,


Would it be smartest for one to sell crypto right now while normies are still oblivious of what's about to happen?


No. Crypto will be safe against quantum computers.


If by “crypto,” the grandparent meant “cryptography,” this is not true. Most widely-deployed asymmetric/public-key primitives (e.g., RSA, elliptic curve cryptography (ECC), etc.) are quite fragile against an adversary with a cryptographically-relevant quantum computer (CRQC). To clarify how fragile, the general consensus/state-of-the-art as far as I am aware, is that Shor's algorithm (which breaks asymmetric primitives) requires about 2x the number of perfect, logical qubits as the RSA key-size (e.g., ~4000 qubits for factoring RSA 2048); however, because none of our qubit designs have a low enough error rate, you need about 1000 qubits to simulate/error-correct for a single logical qubit—so, currently, it's expected you would need around 4_000_000 physical qubits to factor RSA-2048. Post-quantum cryptography (PQC) is specifically the subset of cryptography that is designed to withstand attacks from quantum-enabled adversaries; it is still being actively designed, studied, standardized, implemented, and deployed.

If instead, the reference was to “cryptocurrencies,” most cryptocurrencies I am aware of depend on non-PQ constructions, and fall into the same buckets as RSA and ECC. Some systems, like Bitcoin, are in significant danger without large overhauls—if a practical CRQC is actually realized. There are efforts underway throughout the cryptocurrency communities to try to prepare for such an eventuality, but to my knowledge, none of them have major adoption yet.

As a final note on investment advice: I don't give out investment advice. :)

All the best,


As I've mentioned to another commenter, Bitcoin relies only on the existence of an arbitrary DSA. Quantum computing-resistant DSAs have been known since the 1970s. I reckon that swapping out Bitcoin's current DSA with a quantum-resistant one would not count as a major overhaul. https://news.ycombinator.com/item?id=43113682


It would probably require a “hard fork,” which is generally considered to be a major change in the Bitcoin world.

All the best,


I am curious as to whether this update would need a hard fork or soft fork. Soft = backwards compatible, meaning nodes on the old code still talk to the network as before, and new nodes have extra features (I think?). This update is adding a layer of complexity to the DSA but not adding a new feature (soft fork) but requiring that the updated DSA be used (hard fork). Maybe allow either to be used in the meantime and then if there is an exploit in the future, we're already half way to consensus on the new fork?


Can you expand on this? I find this topic difficult to find solid information on, for some reason.


I'm not sure about other cryptocoins, but Bitcoin does not use encryption, it only uses authentication, which requires a DSA (Digital Signature Algorithms). Bitcoin's current DSA would in fact be broken by a cryptographically-relevant quantum computer (CRQC). However, there are DSAs - like Lamport signatures and Merkle signatures - known since the 1970s, whose security depends only on the existence of ANY secure hash function. There is no known way to break any widely used hash function using quantum computers. So I reckon that the only change to Bitcoin would be to swap out the current DSA for a different one.

I'm not sure about the downsides of quantum-resistant DSAs.


Chat, is this true?


Kagi is well worth the money. Just converted my monthly sub into an annual. It just flat out works better than any other search engine I've come across. Also, the ability to just filter/weight sites that it returns is incredible. I'm not sure how Google is this far behind at search, but here we are.


This is trite, but the simplest answer is that Kagi's product is search and its customers are users, and Google's product is ad impressions and its customers are advertisers.


It will eventually come when machine eyes are better than human eyes. Replace the eyeballs with a processing unit connected to optics, use the body's energy through a connection to the eye stalk.

Marketing: Your vision will be much better, but the downside is that you're going to need to eat two pints of ice cream every day. Or if you want to lose weight, just eat one pint of ice cream every day.


Obsidian has a spaced repetition community plugin that I use when I write documentation. I add a flashcard for everything that I want to learn.

So you just put #flashcards inline (or whatever you tell it to look for) at the bottom if your file.

And then:

This is a question::this is the answer. This is another question::this is another answer.

I run through my cards about 30 minutes before I start work. It works very well.


I would assume that they have known Elon Musk is a fraud longer than the general public, and want to position themselves in the market before Tesla inevitably collapses.


Ah yes, the fraud who caused the EV revolution and has the highest loyalty car brand in the US, and also created the best-selling car in the world.

I'm not going to pull up the rules, but this breaks at least one. Please argue in good faith.



So, they're pushing hard to get a budget car out, and are still setting records on deliveries. I'm looking forward to this phase.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: