father, husband, american abroad. i build companies and software and stuff. optimist 🇺🇸🇹🇭

bkk
Joined December 2011
matthew retweeted
This morning we are releasing the largest proof in the history of mathematics: A formalization of the Classification of Finite Simple Groups (CFSG)! Over 43 million lines of Lean, 715 papers and books, and 100 substantive fixes to the literature, this is truly an enormous theorem. Well done team!
The largest math proof in human history is now computer-verified. Today, Axiom announces a complete Lean auto-formalization of the Classification of Finite Simple Groups, the "periodic table of symmetry." About 15,000 pages, built by over 100 mathematicians across generations.
52
216
28
1,511
69,917
matthew retweeted
The largest math proof in human history is now computer-verified. Today, Axiom announces a complete Lean auto-formalization of the Classification of Finite Simple Groups, the "periodic table of symmetry." About 15,000 pages, built by over 100 mathematicians across generations.
375
1,414
530
5,935
3,187,788
Many of you don't understand how serious this is, so let me break it down. In computer science there is a famous kind of puzzle called 3-SAT. You are given a long list of yes-or-no switches and a set of rules about how they must be arranged, and you have to find a combination that satisfies every rule. The obvious way to solve it is to try every combination, but each new switch doubles the number of possibilities, so a puzzle with a few hundred switches would take longer than the age of the universe to brute force. For decades, the smartest people in the field found clever tricks that made this a little faster, but every trick still hit the same wall: the time required kept exploding as the puzzle grew. About 25 years ago, two computer scientists, Russell Impagliazzo and Ramamohan Paturi, working with Francis Zane, turned that wall into a formal idea. They proposed the Exponential Time Hypothesis, which says this explosion is not a failure of human cleverness but a law of nature. No algorithm, however brilliant, will ever solve 3-SAT without the time blowing up exponentially. Nobody could prove it, but almost everyone believed it, and it became one of the foundations of modern computer science. Researchers used it as a measuring stick. If you could show that solving some other problem quickly would also crack 3-SAT quickly, you had shown that problem was hopelessly hard too. Hundreds of papers, across scheduling, graphs, logic and much more, rest on this one assumption. Now an internal AI model at OpenAI claims to have broken it. It says it found an algorithm that solves these puzzles meaningfully faster than the hypothesis allows, and it has checked the proof in a computer verification system called Lean. And here is the remarkable part: the very people who proposed the hypothesis, Impagliazzo and Paturi, along with MIT's Ryan Williams, are now leading the public review of whether a machine has disproved their own idea. So what happens next? If the disproof holds, a large part of theoretical computer science has to be revisited. Every result that said "this problem cannot be solved faster, assuming ETH" loses its foundation, and researchers will have to work out which of those walls were real and which were simply where we stopped looking. It does not mean everything becomes easy. The new algorithm is still slow in absolute terms and this is not the famous P versus NP problem being solved. But it means our map of what is possible was wrong in a place we were very confident about, and it was an AI that redrew it. If the disproof fails, the hypothesis survives and the field breathes out, but we will still have watched an AI produce serious, checkable work on one of the deepest questions in the discipline, closely enough that the founders of the idea had to take it seriously. Either way, something has shifted.
An internal model at OpenAI has produced a claimed refutation of ETH! Russell Impagliazzo, Mohan Paturi, and I have been asked to help organize an open and independent examination of this claim. 1/4
321
1,547
211
16,275
1,351,856
PCBs made in America. Twice as fast as Shenzhen. Today @CircuitHub is unveiling The Grid, our factory-scale robot in Massachusetts that builds circuit boards on demand. No changeovers, no per-design setup. Prototypes and production batches, fully automated.
347
627
207
6,876
396,532
matthew retweeted
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected. Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions. Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent. But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models? We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem. Read the full report: cohere.com/blog/concerning-b…
960
1,270
1,482
10,958
2,929,567
Poll: consider A: I believe our limited lifespan is good because finitude gives our life beauty and meaning B: I would be sad if the modern human embodiment went extinct and was replaced by something else
25%A and B are true
10%I hold A but not B
30%I hold B but not A
35%I hold neither A nor B
2,226 votes • Final results
115
23
14
172
53,298
Keep in mind that one can cause "harassment, alarm, or distress" in England and Wales by uttering a true statement of fact to someone who doesn't want to hear it, or by offering an honestly-held opinion or belief, spoken or written, which also offends.
🚨 NEW: Respect Orders are now live across England and Wales People who cause harassment, alarm or distress to others can receive bans from town centres, anger management courses or unlimited fines Anyone who breaches an Order can be arrested and jailed for up to 2 years
115
830
30
4,918
69,810
Replying to @joxjeff
This is a very important point. It gets to the interaction between physical embodiment and the ingressing patterns. I say "free lunches" but technically, it isn't free - you need the embodiment (at least, for us to be able to see it) and that always costs. My point is that as much as entropy tries to steal our effort, there's a phenomenon aiming in the other direction which gives us more than we paid for. Upkeep is important, as is metamorphosis and change, but I think it's part of the same overall scheme: making something, maintaining it against entropy, using it as a stepping stone to improve and change, etc. - all cost, and all (I think) get the benefit of something we don't pay for the way we pay costs on our embodiment features. The quality/depth/size/magnificence of the ingressions you're able to host is definitely something - maybe it's the parameter that grows when systems enlarge their cognitive light cone and go up the cybernetic hierarchy. Maybe it's just related to it. Works in progress...
15
17
163
5,035
matthew retweeted
Elon Musk understands something that the political establishment desperately wants people to forget. Government isn’t some magical institution that protects you from concentrated corporate power. It is concentrated power. And unlike corporations, it has the legal authority to use force against you. Now imagine giving that power to a global government. One political hierarchy. Billions of people. No competing jurisdiction to escape to. No meaningful alternative when the people in charge decide your rights are inconvenient. That’s not progress. That’s the blueprint for the most terrifying monopoly in human history. Look at what’s happening across Europe. More authority concentrated in distant institutions. More regulatory power. More restrictions on speech. More decisions made by people ordinary citizens can barely hold accountable. The answer has always been decentralization, private property, free markets, and the freedom to walk away. Yet the political left keeps demanding more centralization, more bureaucracy, and more authority over ordinary people. And somehow they call that liberation. What a fucking joke.
Replying to @Rothmus
Those who are opposed to corporations and favor government do not realize that government is simply the largest, most monopolistic corporation of all and it has a monopoly on violence.
178
862
41
4,498
411,661
matthew retweeted
i own a relatively new (2025) samsung tv. i kept getting weirdly targeted ads. i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic. zero days it is. root shell on new samsung TVs! discovered PRIVACY HORROR. write up?
714
3,864
649
36,654
4,775,361
matthew retweeted
PSA for macOS users: 1. Apple’s supplied SSL certificate bundle at /etc/ssl/cert.pem still trusts certificates attackers can forge using compromised eMudhra keys. 2. I confirmed this on macOS 26.7.1 and 27.0.1 using Apple’s built-in curl and Git. 3. An attacker intercepting connections from tools using this bundle could replace downloads with malware. With commands like curl … | sh, that malware would execute immediately. 4. Removing the roots that authorize those certificates blocks the tested chains. Both OS updates restored roots I’d previously removed, requiring me to remove them again. 4. I’ve submitted the findings to Apple’s security team and am awaiting their response. In the meantime, you can apply a temporary fix as outlined below. 5. To check and fix your machine, give an agent like ChatGPT/Codex or Claude Code the following prompt: “Independently verify whether Apple’s /etc/ssl/cert.pem still permits trust in certificates signed with compromised eMudhra keys. If so, back it up and remove the roots enabling that trust, identified by verified SPKI fingerprints. Confirm Apple’s built-in curl and Git reject those chains while ordinary HTTPS still works. Preserve rollback and never disable TLS verification.” Note that removing these roots can also block legitimate sites. This is a temporary mitigation, not a substitute for a fix from Apple. I’ll share the script I used in a follow-up post if you’d prefer to use that directly.
PSA for Codex CLI users: 1. Codex 0.163.0’s release lockfile pins rustls-webpki 0.103.15 and root bundles that can still trust compromised eMudhra certificates. 2. An attacker intercepting your connection could impersonate a server, steal sensitive data, or alter responses, potentially tricking Codex into running malicious commands. 3. Codex 0.164.0, released October 23 at 12:48 a.m. ET, updates those dependencies to fixed versions. 4. To check your codex version run "codex --version". It should be at least 0.164.0. 5. To patch the vulnerability, run "codex update". 6. Apps that bundle their own Codex copy must also be checked.
53
147
23
1,498
321,384
Apple releases its new portable digital music player, the iPod. It has 5GB of space and 10 hours of battery life.
227
852
132
15,534
396,764
matthew retweeted
25 years ago today, we introduced the iPod. 1,000 songs in your pocket. A small team. An unforgiving deadline. We had months to bring the hardware, software, and music experience together. Proud of what we built and that it means so much to people still today. A device that has been woven in many ways into our lives. People have filled their iPods with road trips, breakups, workouts, special occasions with family and friends. How cool that the iPod has become part of culture and our stories. 25 years, it’s hard to believe! Celebrating the team that made it happen today 👏 @StevenLevy was there from the start @WIRED wired.com/story/im-still-con…
62
274
26
2,203
138,045
matthew retweeted
wow what a colossal fuckup
17
58
11
717
63,944
matthew retweeted
Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next. cfl.re/487DNbG
40
374
62
2,197
244,490
matthew retweeted
The Indian company eMudhra literally made one of their private keys 0x4... the number 4. And another 0x73.
private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends emudhra.we-have-a-problem.co…
43
308
80
3,620
235,442
matthew retweeted
"What are you doing?" - "Oh just playing a Switch game."
272
3,609
258
43,155
1,877,641
J’ai entendu dire que la France était finie, qu’il était trop tard pour la sauver. Mais la France est toujours aussi belle, enviable même. Sa grandeur n’a pas disparu, elle ne demande qu’à renaître. Nous avons surmonté en un an un problème cent fois plus grave, sans avoir les moyens dont dispose la France. La France pourrait y arriver en une semaine.
9,350
55,140
3,951
308,306
8,874,451