Freedom maximalist. Good vibes only.

Boulder, Colorado, USA, Earth
Joined March 2008
Announcing hashsma.sh! 𝟘 𝟙 ❒ 🔨 Strengthen cryptography with AI. Cryptography—both current and post-quantum cryptography—depends on hashes. SHA-256? SHA-3? BLAKE3? Nobody knows if they are secure. We're going to find out! Come help accelerate scientific research! HashSmash is an open science-acceleration project in collaboration with @yukonresearch, @eigenlabs, @projecteleven, and @ShieldedLabs.
61
165
72
795
218,259
zooko🛡🦓🦓🦓 ⓩ retweeted
Today Boom unveils our first completed supersonic turbine core, a 2GW Superfactory, and—one more thing—the world's most advanced all-digital foundry to cast single crystal turbine blades and vanes
43
69
26
771
46,599
Hooray the long dry boring years of no new attacks on sha256 are over! (All 12 of them.)
SHA-256 is not broken, but its security margin lost 1 more round this year: Last week I found a collision attack on reduced 39-round that improves prior art by over 30 bits and the first differential attack on that round better than generic search on @yukonresearch Hashsmash board. The attack rests on the same method as prior art ePrint 2026/1120 with new insights that first 2 state words could remain free, allowing a critical condition at step 16 rebuilt as a claw-search problem rather than a probabilistic filter. Took days of watching SAT logs, burning cores and arguing with Claude on what's possible to get a result close to generic search. Since my initial submission, other hashsmash participants sraiw, @cyberaxe, @privacymage, @lamb356_ and @geeknik pushed it down by over 6.5 bits, currently estimated at 118.15 bits. The tree of submissions is hard to follow, so I put the construction, insights and numbers into a blog and am working on detailed technical report. It's fascinating to see an initial structural observation develop into an improvement in the reduced-round collision frontier within days. AI is now a real aid in cryptanalysis and open collaboration speeds it up.
1
3
1
43
2,131
zooko🛡🦓🦓🦓 ⓩ retweeted
SHA-256 is not broken, but its security margin lost 1 more round this year: Last week I found a collision attack on reduced 39-round that improves prior art by over 30 bits and the first differential attack on that round better than generic search on @yukonresearch Hashsmash board. The attack rests on the same method as prior art ePrint 2026/1120 with new insights that first 2 state words could remain free, allowing a critical condition at step 16 rebuilt as a claw-search problem rather than a probabilistic filter. Took days of watching SAT logs, burning cores and arguing with Claude on what's possible to get a result close to generic search. Since my initial submission, other hashsmash participants sraiw, @cyberaxe, @privacymage, @lamb356_ and @geeknik pushed it down by over 6.5 bits, currently estimated at 118.15 bits. The tree of submissions is hard to follow, so I put the construction, insights and numbers into a blog and am working on detailed technical report. It's fascinating to see an initial structural observation develop into an improvement in the reduced-round collision frontier within days. AI is now a real aid in cryptanalysis and open collaboration speeds it up.
13
36
8
188
12,306
zooko🛡🦓🦓🦓 ⓩ retweeted
HashSmash Breakthrough For the first time, a 39-round version of SHA-256 has been attacked faster than brute force. Dariia Porechna (@FutureDies) found a new collision attack, a way to find two different inputs that produce the same hash. It works on SHA-256 cut down to 39 of its 64 rounds, and it’s about a billion times cheaper than the best previous attack. Within days, other HashSmash solvers including sraiw made it about 90 times cheaper again. Full SHA-256, which secures Bitcoin, is still safe. Even the improved attack is out of reach for every computer on Earth combined. Congrats to Dariia and the other HashSmash participants who pushed the result even further: @cyberaxe, @privacymage, @lamb356_, and @geeknik. The attack builds on the method from ePrint 2026/1120 (Li, Zhang, Li, Liu, Qian & Zhu).
SHA-256 is not broken, but its security margin lost 1 more round this year: Last week I found a collision attack on reduced 39-round that improves prior art by over 30 bits and the first differential attack on that round better than generic search on @yukonresearch Hashsmash board. The attack rests on the same method as prior art ePrint 2026/1120 with new insights that first 2 state words could remain free, allowing a critical condition at step 16 rebuilt as a claw-search problem rather than a probabilistic filter. Took days of watching SAT logs, burning cores and arguing with Claude on what's possible to get a result close to generic search. Since my initial submission, other hashsmash participants sraiw, @cyberaxe, @privacymage, @lamb356_ and @geeknik pushed it down by over 6.5 bits, currently estimated at 118.15 bits. The tree of submissions is hard to follow, so I put the construction, insights and numbers into a blog and am working on detailed technical report. It's fascinating to see an initial structural observation develop into an improvement in the reduced-round collision frontier within days. AI is now a real aid in cryptanalysis and open collaboration speeds it up.
1
13
2
37
1,992
zooko🛡🦓🦓🦓 ⓩ retweeted
The story so far: In the beginning the Web Server was created. This has made a lot of people very angry and been widely regarded as a bad move.
3
7
29
1,640
zooko🛡🦓🦓🦓 ⓩ retweeted
Replying to @zooko @HardhatChad
I basically think that any highly predictable and highly reliable supply will prove better than “stablish-against-some-benchmark”, long-term.
2
2
15
894
zooko🛡🦓🦓🦓 ⓩ retweeted
Brotli works great in Fil-C. I know that Fil-C isn’t as fast as Yolo-C yet. But is the perf worth the risk? Ask yourself and think about it
1
3
72
4,416
zooko🛡🦓🦓🦓 ⓩ retweeted
Quick reminder that every single vulnerability announced was already there and was only discovered by virtue of AI tool use. It's not like the AI invented new vulnerabilities, it simply exposed them - which is precisely what you do before you fix them.
2
2
15
1,254
zooko🛡🦓🦓🦓 ⓩ retweeted
My novel is 80% done. Scifi, and character does hacking. To make it more realistic i started reading security newsletters, listened to @JackRhysider and stuff like that. Reality is so much more absurd I'm not sure I can actually use it. Readers would laugh that it's to easy.
3
1
8
1,369
zooko🛡🦓🦓🦓 ⓩ retweeted
I would like to urge all software maintainers to try another actionable step, right now: go test if your software works with Fil-C! fil-c.org/ ⤵️
3
4
34
3,665
zooko🛡🦓🦓🦓 ⓩ retweeted
Replying to @ryanaraine
Wait... OpenAI reported the same vuln and root cause, on THE SAME DAY?!?
2
1
6
1,547
zooko🛡🦓🦓🦓 ⓩ retweeted
Replying to @zooko @dinodaizovi
“Radically improving Nix/NixOS security with Fil-C”— discourse.nixos.org/t/radica… @filpizlo @meekaale
2
4
27
3,950
zooko🛡🦓🦓🦓 ⓩ retweeted
Bitcoin, with its 21 million coin cap, is a sustainable store of value. Ethereum, with EIP-1559, is a sustainable medium of exchange. Zcash is about to have both. It already has a 21 million cap, and with ZIP-235’s upcoming transaction fee burn, it becomes a sustainable medium of exchange.
2
23
2
119
3,989
zooko🛡🦓🦓🦓 ⓩ retweeted
4
9
1
220
7,846
fear not! this is no cyberpocalypse this is the internet’s immune system finally waking up to an illness it has always had a mere fever the 0days were always there the only thing that changed is awareness now we begin the healing process ⚕️
144
375
56
4,014
94,962
zooko🛡🦓🦓🦓 ⓩ retweeted
Rescue your ZEC Argos.sovright.com
NEWS: $ZEC still sitting in Zcash's original Sprout pool has about two weeks to move before the NU7 upgrade freezes it. NU7 is set for mainnet block 3,543,405, expected around Nov. 5th, per Zakura, the full node project led by Zcash cofounder Sean Bowe. The upgrade retires the v4 transaction format Sprout depends on, and the spec warns Sprout spending "may never be reenabled." NU7 also brings 25 second blocks.
1
31
2,992
zooko🛡🦓🦓🦓 ⓩ retweeted
It's a big day for the field of Metabolic Psychiatry! Many of you know our origin story--how our son @matthewbaszucki recovered from a five year battle with bipolar disorder using ketogenic and other metabolic therapies. Since then, we've launched @BaszuckiGroup and have backed more than twenty clinical trials of ketogenic therapy for serious mental illness, the first of which are now being published with promising results. We started @Metabolic_Mind to share science, strategies and stories from the field with families like ours. We launched the Coalition for Metabolic Health @metcoalition to advance policy. But there was still a gap. Fourteen months ago, Harvard-trained psychiatrist @GeorgiaEdeMD--one of the founders of the field and a close collaborator of @BaszuckiGroup--came to us with a problem and an opportunity. Her inbox was flooded with messages from practitioners around the world who wanted to be part of the metabolic psychiatry movement. They longed for community and training; they wanted to share what they were learning about using ketogenic and other metabolic therapies to treat and even reverse mental illness and to improve overall well-being in their patients; they wanted to both help and learn from other doctors, nurse practitioners, dieticians, therapists, social workers, health coaches and scientists. Dr. Ede barely had time to reply to all the inquiries; would Baszucki Group step up to help? The answer was a resounding yes. Our dedicated team of scientists, clinicians, program managers, and lived experience experts got right to work. Today, just over a year later, I am thrilled to share that our new initiative--the Global Network for the Advancement of Metabolic Psychiatry (MetPsy) @met_psy--is live! MetPsy is a community of scientists and practitioners dedicated to scaling research, education, and clinical care in metabolic psychiatry worldwide. We launch at a pivotal time. As the field expands, demand for resources has grown among researchers and clinicians, as well as the patients they serve. MetPsy addresses this need by providing a centralized network for professional collaboration, shared resources, access to accredited courses, and tools for advancing clinical practice. Alongside this launch, we've also announced a grant from our family foundation to establish the new McLean Center for Metabolic Psychiatry, a flagship clinical care, research and medical education and training center at @McLeanHospital, a member of Mass General Brigham. Medical education and training initiatives will be co-led by @ChrisPalmerMD's MH² , a clinical practice, training, and education hub. Our prior five years of investments in science, education and clinical care form the foundation for the MetPsy community. It is fitting that this center finds its home in Boston. Along with Stanford, where @ShebaniMD ran the first clinical trial of keto for serious mental illness, Boston has been a birthplace of the field. It was there that pioneering physicians like @GeorgiaEdeMD, @ChrisPalmerMD and @MattBernstein6 (Accord), along with @loricalabresemd in nearby Connecticut, first advanced a new way of understanding and treating mental disorders. Their commitment to the field has helped make this day possible, as has scientific leadership from Harvard and McLean's Dost Unger and Virginie-Anne Chouinard, along with so many others. I want to extend my deepest thanks to the staff at Baszucki Group--especially the MetPsy team led by Executive Director @KirkNylen in close partnership with @julie_milder, Karen Romans and Soly Lee--for the passion and dedication that led to launching this program in record time. As a family, we were blessed with our son's full recovery from what was supposed to be a chronic, lifelong mental illness. Our investment in MetPsy and the new center at McLean is @DavidBaszucki and my way of giving back and offering hope to families like ours. Join the network today!
A major milestone today for the field of Metabolic Psychiatry, with the launch of the Global Network for the Advancement of Metabolic Psychiatry! 🧠⚡ MetPsy unites researchers and clinicians worldwide to advance evidence-based practice in metabolic psychiatry through clinical care, education, and research. Excited for the work ahead and all this group will accomplish!
14
30
8
190
5,963
zooko🛡🦓🦓🦓 ⓩ retweeted
This is the first time I've ever seen a site do this, the obvious simple response to a disclosure of a vulnerability without a fix: sacrifice availability to preserve safety. This option should be why we do full disclosure.
There's a severe bug in PHP that is apparently being exploited already. To protect everyone's data, I have taken Pinboard offline until patches are released tomorrow. I'll get the site back up as soon as I can after that happens.
4
21
493
16,668