HN user

quantumgarbage

149 karma
Posts4
Comments30
View on HN
[dead] 6 months ago

"it is a shot across the bow of the entire software industry"

Loved it, understanding and working through your vulnerabilities is super hard but ultra rewarding. Bold but very altruistic move to publish this

Sure, that does not mean all models are equal.

Economics both describe and prescribe, so those models should be evaluated on their predictive power and on whether they have actually done any good.

That isn't a vague strawman, that's a great point. Economists work from assumptions, which can be flawed in two ways: they can be blatantly wrong (see the work Kahneman and Tversky did on the rational individual hypothesis) and they can be unfalsifiable (you can't always gather data about the assumption itself). There is a good essay on this from Tirole (yet a very mainstream economist) here: https://www.tse-fr.eu/sites/default/files/TSE/documents/doc/...

This is not an attack on hash functions in general. In this paper, the authors build a statement (or "circuit") which should, by construction, not have any accepting claim. Yet, they show that when using GKR along the FS transform, you can still get accepting proofs.

This has to do with "how an hash function behaves" in the sense that, in the context of a specific protocol (GKR), it is possible to bake in the circuit the ability to predict the randomness obtained from hashing the statement itself and the public values satisfying it.

The protocol is in charge of producing the proof. Fiat Shamir is a heuristic, some kind of rule of thumb, which consists in using a hash function as a source of randomness.

Cryptographic protocols often feature coin tosses. The idea is that if we replace a hash function in place of the protocol coin tosses, it should still be hard for a malicious prover to craft a false statement with an accepting proof - making the protocol unsound.

Roughly, the meat of the attack consists in baking in the statement being proven the ability for the prover to predict upfront how the hash function is going to behave - hereby breaking the Fiat Shamir heuristic and making the prover able to craft a false statement with an accepting proof.

That’s it, this is “How to Prove False Statements“!

Yes, what you are missing is that attacks on Fiat Shamir were very contrived up to now.

However the paper shows that there in fact exists a pretty simple way to break the Fiat Shamir heuristic, for a protocol operating in the RO model. And such kind of efficient attacks are rather concerning in cryptography land.

So this isn't about the attack per se, rather it's about the existence of such an easy one.

A modern sparse Transformer, for instance, is not "conscious," but it is an excellent engineering approximation of two core brain functions: the Global Workspace (via self-attention) and Dynamic Sparsity (via MoE).

Could you suggest some literature supporting this claim? Went through your blog post but couldn't find any.

Look for the "Fiat Shamir heuristic" to understand the non interactive part.

It basically consists in the prover getting its random challenges from hashing public inputs, rather than from the verifier's coin tosses.

Like anyone, I'm always impressed by geniuses displaying hollywood cliché traits. But that's even more impressive when they are great humans too.

Yes, this list reads like one a Midwestern high schooler would go through to impress his failed literature teacher, who will write him a nice recommendation letter for the ultra-conformist university of his dreams, dooming him to 25 years of debt and a miserable life working as a consultant

[dead] 1 year ago

Only 30% of americans voted for him. Yes, that's quite a share of people ready to vote for a convicted criminal, but not to the point where I would say that the U.S. population showed actual agency in this election - and that might be the crux of the problem.

The mistake this post makes is thinking that sole engineering effort is what makes startup win.

Most of the things you build will end up in the trash can anyway. But what matters is what you get while doing them, like domain knowledge, improved processes, actual customers..

If you are ok to scrap your code in order to integrate a better model then fine. Since your model is better and does not need all the software around it, it will take 10x less time to re-do what you have, leaving you more time for things that also matter, like sales.