36,896 karma · joined March 8, 2009
- CoinFabrik: Web3, R&D in decentralization, and security audits. Blockchain (Bitcoin, Ethereum, Solana, Algorand, etc) and language agnostic (Solidity, Rust, etc)
- Nektra: security, application virtualization, reverse engineering, Windows system internals
- BitVMX <https://bitvmx.org/>: BitVMX framework provides the foundations to run any CPU on Bitcoin, with a focus to run a fully-compliant RISC-V processor programmable using a standard compilation toolchain.
Blogging at https://blog.coinfabrik.com @coinfabrik, https://blog.nektra.com @nektra, and https://blog.databigbang.com @databigbang
meet.hn/city/ar-Buenos-Aires
Greg Kroah-Hartman showed [1] how thousands of AI reported bugs can shrink to a handful after maintainer review. How many of your 948 LPEs have been independently confirmed upstream, and do you expect similar consolidation?
Are there plans to make these cyber capabilities more accessible to independent security researchers? Current restrictions risk putting legitimate defenders at a disadvantage.
"If I have seen further, it is by standing on the shoulders of giants". Including AI.
[1] https://www.reddit.com/r/hackintosh/comments/1uboij0/arm_is_...
What I observed in the rising cybersecurity attacks happening around me:
(i) There are organizations thinking that they have [complete] backups and being aware they don't once the cyberattack if effective.
(ii) Even in organizations with complete backups they don't have a [good] process to recover them, and the operations suffered a lot.
Corollary: backups are, in general, not battle tested.
[1] https://docs.aws.amazon.com/snowball/latest/developer-guide/...
Since then I tried it for experimenting on diverse fields. For example, this week there was a discussion here in HN about the non-continuation of Python funding on the JIT, so I "played" again to removing the GIL and moving to the JIT in Python, it did it. I played with many other things, even the Riemann Hypothesis (it just removed their rational parameter rounding only moves 0.875 towards 0.87495702, nothing significant though).
Many other relatively great things were done this week in parallel. I have some budget for research.
I think the difference is that those endless technologies will probably be used by other agents without people's explicit knowledge.
Actually, integer factorization already has subexponential-time algorithms, such as the General Number Field Sieve (GNFS).
I am one of those: bought the M1 Max with 64gb thinking in running VMs, afterward bought a lighter Air with less memory and ended up using the M1 Max as a kind of luxury for LLMs and multicore computing.
It was submitted via the public /compete endpoint while PR #43 is pending merge into the official AI policy registry.
> On the full benchmark of 31 audited revisions, GPT-5.6 Sol High reached a weighted recall of 38.27% and GLM-5.3 High reached 30.86%. On a common subset of 12 projects, Claude Fable 5.1 High reached 65.70%, against 42.98% for GPT and 35.54% for GLM.
[1] https://github.com/CoinFabrik/soroban-audit-harness/blob/mai...
Not "never again", it would be extremely difficult but science and math are also built on random, trial and error, and intuitions that could not arise from AI.
[1] https://www.simonsfoundation.org/news/from-trust-to-verifica...