frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Tesla Roadster

https://www.tesla.com/roadster
698•shekhar101•18h ago•1312 comments

Claude reveals ECDSA curve origins

https://www.anthropic.com/research/ecdsa-curve-origins
206•ahlCVA•56m ago•87 comments

The NIST Elliptic Curves Seeds Bounty Has Been Claimed

https://words.filippo.io/seeds-solved/
29•aburan28•49m ago•2 comments

Llama.cpp on a jailbroken PS5: run any GGUF model natively on the console

https://github.com/cobanov/PS5LM
52•Anon84•1h ago•8 comments

JPEG XL vs. AVIF for web use-cases

https://jakearchibald.com/2026/jpeg-xl-vs-avif/
122•farlight•3h ago•89 comments

90% of US working hours are spent on tasks not covered well by AI benchmarks

https://www.mercor.com/research/labor-index/benchmark-map/
245•speckx•2h ago•209 comments

Waymo in Toronto

https://waymo.com/blog/2026/10/waymo-in-toronto/
132•ChrisArchitect•5h ago•252 comments

eBay Restricts Listings of Radio Equipment, but Exempts Ham-Band-Only Gear

https://www.arrl.org/arrlletterissue?issue=2026-10-15#eBay-Restricts-Listings-of-Radio-Equipment_...
84•7402•1h ago•60 comments

Apple ML Research: Muse Spark Open with MLX on Mac Studio

https://machinelearning.apple.com/research/mlx-distributed-inference
211•antipaul•6h ago•100 comments

Designing more efficient quantum circuits with Claude

https://www.anthropic.com/research/designing-efficient-quantum-circuits
39•pretext•1h ago•6 comments

Piramidal (YC W24) Is Hiring

https://job-boards.greenhouse.io/piramidalinc/jobs/4443102009
1•dsacellarius•2h ago

The Fatal Flaw of 911

https://www.themarshallproject.org/2026/10/16/911-book-policing-mental-health
8•plunge•19m ago•3 comments

How the Claude Code team does code review

https://claude.dev/blog/solving-code-review-at-anthropic/
40•pretext•47m ago•33 comments

/dev/null: social network for developers

https://dev-null.sh
55•mnapoli•2h ago•75 comments

Show HN: Gemini 4 Argon plays StarCraft

https://starskirmish.com/bench/v0-2/
148•__cayenne__•5h ago•69 comments

Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD

https://calif.io/research/big-fish
136•rs_rs_rs_rs_rs•5h ago•36 comments

C++26: The New Debugging Header

https://www.sandordargo.com/blog/2026/09/30/cpp26-debugging
9•jandeboevrie•1h ago•0 comments

What on Earth Is Dekton?

https://www.worksinprogress.news/p/porcelain
102•wawayanda•5h ago•35 comments

Stolen Renoir paintings found hidden, and damaged, behind cinder block wall

https://www.cbsnews.com/news/stolen-renoir-paintings-found-behind-wall-france/
82•ohjeez•3d ago•53 comments

Anthropic assigned highest junk credit rating in June

https://www.ft.com/content/5a310aee-f555-4266-874c-b1b4db20186d
81•JumpCrisscross•1h ago•22 comments

GifCities

https://gifcities.org/
14•augury•2h ago•0 comments

I Love Software Rendering

https://www.jamesfmackenzie.com/2026/10/13/i-love-software-rendering/
252•speckx•7h ago•175 comments

Show HN: Stoke Money – Personal finance app built around a cash flow forecast

https://stoke.money
7•_wesley•57m ago•1 comments

Woman who rescued injured crow keeps getting 'thank-you gifts' from birds [video]

https://www.youtube.com/watch?v=sjNpfz4UzqU
785•johnnyApplePRNG•3d ago•234 comments

Monte-Carlo Simulations

https://eli.thegreenplace.net/2026/monte-carlo-simulations/
9•ibobev•3d ago•0 comments

RFC8950: Announce IPv4 with an IPv6 next-hop

https://anuragbhatia.com/post/2026/06/rfc8950-announce-ipv4-with-ipv6-next-hop/
76•porridgeraisin•6h ago•38 comments

Is Liquid Metal Killing Our PCs? Scientific Analysis and a 2-Year Test [video]

https://www.youtube.com/watch?v=eF6bMSjPepM
66•zdw•20h ago•41 comments

Making 1,750 programmable PCB badges for Canada's biggest hackathon

https://va3ndf.com/blog/hacker-badges/
33•va3ndf•2d ago•8 comments

Yet another way to invoke functions without parentheses

https://blog.ikaes.de/yet-another-way-to-invoke-functions-without-parentheses/
232•aragonite•3d ago•101 comments

US Rep Announces Congressional Legislation to Protect Video Game Ownership

https://ritchietorres.house.gov/posts/rep-torres-announces-power-to-the-players-act-legislation-t...
155•DeepLogin•3h ago•85 comments
Open in hackernews

Claude reveals ECDSA curve origins

https://www.anthropic.com/research/ecdsa-curve-origins
199•ahlCVA•56m ago

Comments

sweis•50m ago
13 years of tinfoil hats for srand48(time(NULL)
217•36m ago
But the friends we made along the way!...
bayarearefugee•27m ago
> 13 years of tinfoil hats for srand48(time(NULL)

Probably not quite this given the timestamps span over almost a year (but have some clustering in August 1997).

Given that the spread suggests they weren't just now() timestamps it would actually be interesting to know what the significance of the timestamps is, if any. Though it could be something boring like randomly sampling some local file creation times.

tptacek•40m ago
This is devastating news... for an entire generation of NIST cryptography conspiracy theories.
EGreg•39m ago
This is huge. It means the Bitcoin and Ethereum communities can now confidently ship the opcodes and precompiled contracts to check ECDSA signatures on P-256 in addition to K-256 curves, and stop worrying about possible NSA backdoors based on the chosen seeds (quantum computers are another story).

I turned out to be right in my advocacy years ago, here is my post: https://ethereum-magicians.org/t/eip-7212-precompiled-for-se...

tptacek•36m ago
Nobody conversant with elliptic curve cryptography research believed there was a backdoor based on these seeds; for a number of reasons, best articulated by Koblitz and Menezes (who took on the question directly).

But it's nice to be able to shut the whole unproductive debate down directly.

ReptileMan•29m ago
But what if there is a backdoor and just looped the RNG until they find the seeds that will match it. Just in case. /s
jerf•21m ago
Taking the question seriously (when I wrote this there was no /s), since I think it is still a question some people legitimately have, it is still extremely implausible that such tight dates and such a small number of iterations are all backdoored. For backdoors to be that dense would indicate some sort of serious flaw in the algorithm as a whole as well, something so serious that it should be fairly obvious. If these were initialized from dates, each separated by some billions of years and with the iteration parameters also in the millions or billions or trillions for no apparent reason it would be time to be suspicious.

Is it impossible? It is hard to prove impossible. But this is not what I would expect backdoors to look like.

In fact this makes me think that the information about how these were generated must have been lost very early in the process, or over-compartmentalized away from the wrong people. It seems like the NSA should have been positively delighted to show that these were the origins of the seeds as they are decent "nothing up my sleeve" numbers: https://en.wikipedia.org/wiki/Nothing-up-my-sleeve_number Advertising that fact should have been advantageous to the NSA if that is indeed how they were generated, so my best guess is that the parts of the NSA that should have been showing us that must not have themselves known.

slowin•38m ago
This neat and all but I think there's a bigger issue here. Anthropic (and whoever Anthropic wants) can do this kind of work with Claude, but if you or I try to do it, we will get blocked. This is a fun exercise, but extend this to something much more nefarious and you can see a moat widening between the model providers, their government partners, and the public.

The only thing that bridges this moat is continued advancement of open models.

ronsor•37m ago
I know Anthropic models have a lot of insane, paranoid filters, but I don't remember them blocking cryptography work last I checked (some 3 months ago now).
AkshatJ27•23m ago
3 months ago is like years ago in the current AI landscape
AtNightWeCode•15m ago
The cyber filter blocks really basic stuff all the time. People who are pro that bs should be forced to only eat with a spoon for the rest of their life.
therein•4m ago
If you have a variable `const char *shellcode` in a fizzbuzz function, it is enough for it to lose its mind.
vessenes•4m ago
I routinely get rejected on elliptic curve related requests; often I can talk Claude back into some work on it. But it is surprisingly sensitive to talking about research cryptography in my experience. I’m not in their cyber program.
jamienk•37m ago
More and more it is the relentlessness of the models that strikes me. Leave no stone unturned! Go through ALL of these old boxes. Someone said they thought maybe it was over there somewhere >>shrug<<
JumpCrisscross•35m ago
“In under half an hour, Claude discovered the origins of the NIST P-192, P-224, P-256, P-384 and P-521 seeds. None of them were the results of any hash algorithm at all, but rather the output of the C library’s lrand48 random-number generator, seeded with a Unix timestamp!”

Gorgeous. I wonder if the NSA employee who did this suffered a head injury or has been quietly giggling to themselves for the last quarter century.

tptacek•31m ago
Someone just posted this:

https://www.youtube.com/watch?v=eOQfNT6Jdkg

JumpCrisscross•29m ago
Genuine question, how many days of your life have you had to spend on this particular tinfoil convention?
weakfish•14m ago
Video is meant as a joke, it’s common to edit the subtitles of this video to alternate ones
sweis•11m ago
[delayed]
hybrid_study•27m ago
understanding Spanish throws it off, but this is hilarious either way. LOL
myth_drannon•34m ago
Not entirely related to the topic, but did someone spent some tokens trying to figure out the origins of the "Wow! Signal" (https://en.wikipedia.org/wiki/Wow!_signal) ?
ecshafer•34m ago
Interesting. So there was no humorous phrase, and its probably safe from backdoors. They do look pretty random.
selfmodruntime•31m ago
> None of them were the results of any hash algorithm at all, but rather the output of the C library’s lrand48 random-number generator, seeded with a Unix timestamp!

Could they not be both?

lanternfish•26m ago
Extremely unlikely - these are very sparse domains.
baggy_trough•30m ago
Stochastic parrot truthers in shambles.
adastra22•30m ago
> This is not a cryptographic break, new attack, or weakness in the ECDSA curves. In fact, this makes us more confident the curves were chosen without any backdoors or intentional weaknesses.

Uh… did you talk to any cryptographers? This is EXACTLY what a weak curve would look like. Imagine that 1 in a thousand, or one in a million keys, selected at random, are vulnerable to some withheld attack. This approach lets you vary the timestamp or number of iterations until a weak key is found, then have plausible deniability afterward. This is why modern systems choose constants in a way with no free choice of parameters (e.g. sqrt of 2 for first constant, cube root for second constant, etc.).

They even note later in the article that viable curves in the generator sequence seem to have been skipped.

mapmeld•26m ago
This is discussed in the post - since the NSA never mentioned how these seeds were created, it seems unlikely that they would develop a cover story that would not be shared and only opened to scrutiny many years later
john_strinlai•17m ago
>Uh… did you talk to any cryptographers

google some of the names under the "Who we are" heading

JumpCrisscross•16m ago
> Imagine that 1 in a thousand, or one in a million keys, selected at random, are vulnerable to some withheld attack

That's not how math works!

entrope•28m ago
> is it suspicious that such an obvious thing wasn’t discovered in 25 years?

Ouch. The implied judgment of us humans stings there.

fidotron•28m ago
While this confirms the method of production it doesn't say anything about their selection, especially since they were, apparently, generated over a period of months. Specifically you cannot see those candidates that were generated and discarded.

"It is still conceivable that these curves were selected to have a specific property in principle by searching over timestamps to the random number generator."

Yes.

"However, you would only need to do that if you were going to disclose the timestamp as some evidence that the seed was innocuously generated."

Does not logically follow when "doing and saying nothing" will completely suffice.

tptacek•25m ago
God bless you for keeping this alive.
fidotron•19m ago
It doesn't prove anything about the core part of the suspicion, which is they were selected using some undisclosed criteria, which may make them weaker or stronger than some other random numbers.

You are entirely familiar with the precedent of the DES s boxes of course, where that is exactly what happened.

JumpCrisscross•17m ago
> which may make them weaker or stronger than some other random numbers

Are there weaker and stronger seeds for this category of elliptic curves?

fidotron•14m ago
Exactly.

When they made the changes to the s boxes for differential cryptanalysis resistance the entire concept of that was essentially secret, so who knows what they know about elliptic curves.

cloudfudge•27m ago
Makes me wonder if any implementations will do the cute trick of dispensing with the seed constants and deriving them at startup from the unix timestamps. :)
egl2020•25m ago
Setting aside the use of "an internal research model", how would one go about prompting an LLM to do this?
john_strinlai•19m ago
probably something like:

"read this: https://words.filippo.io/seeds-bounty/ then find the solution to the bounty"

hoten•24m ago
Would it have been feasible for a FOIA to reveal the origin from the primary source?

EDIT: ah, one of the linked authors tried that. They had no documentation on it. https://saweis.net/posts/nist-curve-seed-origins.html

teddyh•24m ago
> The fifth binary seed, B-163, fits nothing Claude has tried and remains unexplained.

The simplest explanation would be that it was generated the same way as the others, but somebody mistyped a digit somewhere along the way to publishing, and therefore a solution could not be found with the assumption that the number is correct.

lukeify•6m ago
This is also why one of the Zodiac ciphers remained unsolved for so long. The dude made a mistake in his transcription.
129-adn•20m ago
"It is still conceivable that these curves were selected to have a specific property in principle by searching over timestamps to the random number generator."

Indeed! And we guess that OpenAI was gagged by the NSA because the massive proof dump on Oct. 6th did not contain cryptographic results.

I assume that Anthropic faces similar restrictions, so this seems kind of approved.

ArcHound•20m ago
Seems to me like a nothing burger? As long as there is no weakness, why should I care which PRNG shuffled bytes?
Havoc•20m ago
>“seed” parameter

>provided by the NSA with no explanation or justification.

Really? Nobody is concerned about the NSA just cheerfully dictating that? Smells very rainbow-table-y

I_am_tiberius•19m ago
I find it so ridiculous that they (seemingly) forcefully try to state references to dedicated researchers who devoted much of their lives to the problem, while the LLM does not even know which trained papers were effectively used. That means likely many researchers not listed were heavily influencing this achievement, and Claude does not even know that they helped. And the world doesn't know.
baggy_trough•17m ago
Sounds entirely reasonable to me. They tried to give some credit. The main contribution is the solution that Claude came up with.
I_am_tiberius•11m ago
> The main contribution is the solution that Claude came up with.

That's an argument that must be infuriating to all researchers who ever published a paper on that topic, because most likely Claude was trained with all of them.

baggy_trough•10m ago
I suppose so, but it's still the case.
nicce•5m ago
Maybe someone already figured it out, but it is well covered somewhere. And Claude just used it. I wonder if we ever know for sure.
howunfortunate•12m ago
This happens in academia all the time. You read a ton of papers, chat with tons of people about tons of ideas.

Later you come up some idea, you do the experiment, write the paper, search for relevant citations when you write the intro.

Honestly I think this is actually desirable. For a mind to work well and do things creatively and efficiently it can't be a simple search engine, it needs to blend and meld and reform the information.

And that means the output can't be cleanly deterministically linked to the input. Unless you just keep a log then cite everything you've ever read in your life (and all the conversations and talks too).

andyjohnson0•12m ago
On the face if it, the big leap here was Claude autonomously envisioning, and deciding to pursue, the "ancient prng + date" angle - - rather than working backwards from the premise of deliberately weakened seeds or some other popular starting point. To me that shows creativity, and modelling of the situation and method of the people at the NSA.

So two questions:

1. TFA mentions the "humourous phrase hash" theory, but Claude's trajectory seems to be a long way from that. To what extent was Claude prompted in the ultimately successful direction?

2. Whats with all the "hmm..." in the internal reasoning process log? Do models really do that? And if so, why? Some weird emergent language thing, or just mimicry?

reaperhulk•8m ago
As one of the original bounty sponsors, I'm thrilled to pay my portion to ISRG. :)
CGMthrowaway•6m ago
Why did they specifically skip other apparently suitable curve candidates? The B-163 seed and the base point origins of several other curves are still not explained
theandrewbailey•3m ago
I think it's only a matter of time before we decrypt the Voynich manuscript and the fourth message of Kryptos.

https://beinecke.library.yale.edu/beinecke/collections/beine...

https://allthatsinteresting.com/kryptos

clipsy•30m ago
If there’s one thing everyone knows about conspiracy theorists, it’s that they’re willing to accept concrete disproof of their theories. /s
comex•36m ago
I'm skeptical that this particular task would get blocked, though I could be wrong. But I agree that the moat is a problem in the general case.
richwater•34m ago
It doesn't matter what is blocked today, it matters what is blocked tomorrow.

If we allow these providers to promote regulatory capture they become the arbiter of what anyone is "allowed" to do

A_D_E_P_T•32m ago
I don't know about cryptography, but if you try anything in organic chemistry or biology, you virtually always get flagged and downgraded.

As this is going on, Anthropic has opened up their own biology lab.

> https://www.reuters.com/world/anthropic-quietly-sets-up-biol...

There is very much a situation where people in frontier labs have access to exceptional capabilities that are being kept from the rest of us, and they're using it to strip-mine technical and scientific problems.

derwiki•27m ago
Strip mining is a great phrase here, thank you
Bluestein•22m ago
Agree.-

They sure as hell ain't stripteasing :)

handfuloflight•6m ago
The strip teasing is all of their capability gating.
A_D_E_P_T•11m ago
I can't take any credit for it. I believe Terence Tao coined it first. He also wrote a bit about it here: https://mathstodon.xyz/@tao/117237320796901560
akersten•31m ago
At minimum we don't have access to "Claude thoughts" like the ones the article highlighted, right? That's part of the hidden reasoning?
mike_d•23m ago
I have access to Claude's "defensive" cyber model and it appears to take no issue with the prompt, but I suspect that is because it uses today's publication as the basis for an answer.

In the past my attempts to work on crypto related problems have been met with needing the higher tier of "offensive" access.

jcomp•20m ago
Broadly, the downgrading is still way too heavy-handed and clumsy. As of yesterday “How easy to crack is WPA2” downgraded to opus 4.8. Granted I could probably have phrased it differently and gotten a response, but the point is I shouldn’t have to. It can’t simultaneously be smart enough to reverse the ECDSA curve seed and not smart enough not to destroy the world by answering a trivial question with a scary word in it.
petesergeant•16m ago
Fable 5.1 has downgraded me in the past week alone for the crimes of describing a coordinating server as "the C&C server" ([cyber]), for doing some statistical analysis on some toy Vigenère-ciphered text ([cyber]), and for asking it to help me find patterns in some semi-random text ([bio]), so it is fair to say I am not skeptical.
antics•30m ago
JFYI, this is not true. I do stuff like this all the time.
st3fan•26m ago
Anyone can do this kind of work with a model as simple as GLM 5.3 or Kimi K3
randomblock1•25m ago
Maybe, but that's what the cyber program is for. Nobody knew if the seed was fine or a backdoor. If it was a backdoor, and Claude helped you find it as a normal person, Anthropic would get bad PR. If you're a verified security researcher, actually that's fantastic and Anthropic would get good PR and everybody claps.

Anthropic wants to IPO, they don't want another Fable shutdown situation.

To be clear I would prefer the cyber safeguards to be less restrictive, I think they're currently too much. I often go to open models because of it. But there are likelier reasons to restrict cyber than world domination.

petesergeant•23m ago
> Anthropic would get bad PR

I think the current administration would delight in harsher penalties

areoform•10m ago

    > Maybe, but that's what the cyber program is for
Why?

    > and Claude helped you find it as a normal person, Anthropic would get bad PR
Why?

Why are we celebrating and encouraging the walling off of the global intellectual columns?

The idea that you can't reverse engineer things, make things, learn about biology or physics without permission is strange to me. These machines have been trained on the sum intellectual output of humanity, the global intellectual commons, and are being used to close off that commons?

I would be OK with their right to create such restrictions if they weren't lobbying the Government to restrict others, thereby ensuring that they control humanity's intellectual commons well into the future.

Who are they to say what I can learn or can't learn? Who are they to control what I can or can't do with these tools?

Perhaps I'm naive, but I think it's better for humans and the machines if we can all think, learn and build. But then again, I'm the kind of person who rejects the doomer pill.

Reject this.

saghm•7m ago
> But there are likelier reasons to restrict cyber than world domination.

I mean, greed alone would seem to be enough, and it would be fully worth calling out as bullshit.

Retr0id•25m ago
I worked on this specific task myself, using Claude, and I was not blocked (although I did not succeed!)
tptacek•25m ago
Same!
novia•16m ago
A form of being blocked is sandbagging the models
Retr0id•12m ago
I saw no evidence of sandbagging. And since it was an open problem, there'd be no reasonable way to "steer away" from the correct solution.
nxobject•19m ago
> moat widening between the model providers, their government partners, and the public.

Part of me wonders whether the NSA/other TLA has either (a) an unrestricted model from a lab with less scruples like SpaceX, or (b) an in-house model, either abliterated or with data they've bought themselves.

jamienk•18m ago
I feel like history is repeating itself - to many people AOL, Compuserve, MSN, et al seemed superior to "the web" in the early 1990s because they dumped money into making it slicker, licensed content, provided guardrails, made it easy for non-tech people... They had slick ads, were cultural phenoms, and people would take sides with the companies and think their arguments were strong and even obvious!
novia•17m ago
Anthropic gets zero of my money because their favorite word is no. I cannot figure out how to as an individual or a small startup request elevated permissions for the purposes of anything that they think might potentially be dangerous for someone who is not me to access. I have a background in cybersecurity. I have a background in life sciences. Can I put those skills to use to benefit humanity? Who knows.
arionhardison•17m ago
How do you know this to be true? I am not disagreeing; I genially need to understand why or if others are seeing blockers that I don't see or if I am seeing blockers that they do not see.

Are their guardrail benchmarks or anything of the sort that we can use to see where the bifurcation of permission/capability occurs?

lp92•11m ago
Compute has always been gated. This is nothing new. If we look at the HPC space, many of the largest clusters were restricted access and used by governments organizations. Even the ones with "public" access, not just anyone could get access to it.
guelo•4m ago
I understand Spanish being from Latin America but for a long time I couldn't understand a single thing he said because of the Spaniard accent and crazy laughter, and I enjoyed the memes just fine. But then few years ago I watched it with the real subtitles and something clicked in my brain so now when I watch it I mostly understand him fine. But now the memes are ruined because it's hard to hear and read two speeches at the same time. Just an annecdote about our weird brains.
mrguyorama•4m ago
That's one of the best executed implementations of that joke I've seen in years.
sweis•31m ago
The two people were Bob Reiter and Jerry Solinas. Jerry wrote in a 2015 email to Daniel Bernstein that he thought it was a hash of the passphrase. I corroborated that story with 4 people, including two ex-NSA folks off the record.

Everyone was wrong!

I wasn't able to reach Bob. He was working in private industry as of 2018, but never responded.