Pinned Tweet
Announcing hashsma.sh! 𝟘 𝟙 ❒ 🔨
Strengthen cryptography with AI.
Cryptography—both current and post-quantum cryptography—depends on hashes. SHA-256? SHA-3? BLAKE3? Nobody knows if they are secure. We're going to find out!
Come help accelerate scientific research!
HashSmash is an open science-acceleration project in collaboration with @yukonresearch, @eigenlabs, @projecteleven, and @ShieldedLabs.
zooko🛡🦓🦓🦓 ⓩ retweeted
formal methods is going to have a huge ZK moment. why? succinct, zero trust proofs, with optional privacy, dominate.
ZK is going to have a huge FM moment. why? because what you are proving is going to become much more wide spread. ++usecase.
zooko🛡🦓🦓🦓 ⓩ retweeted
GMO refused to pay the $50m ransom demanded by the hackers, so they have threatened to trigger ransomware installed on the PCs of everyone who was logged into the cloud during the hack. GMO is asking everyone to unplug and turn off their PCs ahead of the deadline 30 min from now.
zooko🛡🦓🦓🦓 ⓩ retweeted
Replying to @ciengalon
zooko🛡🦓🦓🦓 ⓩ retweeted
I've noticed something puzzling and exciting when I work with abstract algebra and models.
In physics, we have the notion of supercriticality, i.e., when you follow the liquid-gas coexistence curve as temperature and pressure increase, you reach a critical point beyond which matter enters this weird state where it is neither a gas nor a liquid. The distinction between the phases disappears, and it's hard to tell what you're looking at.
I want to say that I've recently experienced this phenomenon a lot in the AIxMaths space, in the region where we consider highly abstract notions from universal algebra. At some point, the level of abstraction becomes so high that you end up talking about objects that are not intuitive to people at all. Every insight in this space comes basically from text, and no human can claim to be superior to LLMs in terms of originality, creativity, etc. Because everything at this level of abstraction is based on text. The new notions, ideas, and progress basically come from text processing, and to admire new theorems, you have to get used to them.
This is something I see personally when I work with semigroups, loops, and other arcane objects using models. One can prompt agents to make synthetic discoveries, and they are capable of original ideas, new insights, etc., because all of this is based on pure text. Even the legendary Irving Kaplansky, when asked what he pictured when thinking about algebraic rings, reportedly said, "I see the letter R." And I think this is much deeper than one might think. Because at some level of abstraction, we enter a supercritical zone of symbolic thinking, and at this level none of our intuitions has a natural background. Every insight is superhuman, alien, and artificial. It's a no-man's land, and everything there is hard-earned. And LLMs are fast and capable. I'm learning now that, once guided well, they can make artificial discoveries. More to report soon. Stay tuned!
zooko🛡🦓🦓🦓 ⓩ retweeted
Opus was, unfortunately, not cooking. (Even tough rated NP-hard got a chuckle out of me).
zooko🛡🦓🦓🦓 ⓩ retweeted
It looks like the debate over the Dev Fund and ZCG is heating up again. Seems like a good time to reshare my thoughts on the topic.
Oh boy! This sounds awesome! (Haven’t tried it yet.) Rust is the best programming language for AIs because of the safety orientation and tooling, but the long compile times are a big limitation. This appears set to eliminate that friction!
github.com/indexable-inc/bla…
zooko🛡🦓🦓🦓 ⓩ retweeted
Last week I submitted github.com/rust-lang/rfcs/pu… (a "strict" Future contract) and github.com/rust-lang/rfcs/pu… (AsyncIterator::poll_progress) to fix Futurelock and related deadlocks at the source. Comments needed.
zooko🛡🦓🦓🦓 ⓩ retweeted
Replying to @maxdesalle @devanshmehta
I don't want all this controversy, let the community decide, and I'm all for it. But you need to understand that these 250 people have also been here from the very beginning. It was only this year that I recouped the money I'd invested in Zcash, back when you weren't even close to being here. And yes, I can afford to be unemployed for quite some time.
zooko🛡🦓🦓🦓 ⓩ retweeted
Given Zcash is permanently closing Sprout, might the funds left in Sprout be repurposed for the NSM fund?
an update on the openai/codex ban:
i was curious about my tv, found a vuln (not with codex), popped a shell, and started poking around. the intrigue of my hobby project while i had the flu wasn't something i could've predicted.
to be clear: the ban almost certainly had nothing to do with using openai -specifically- for my samsung reverse engineering work. i have no reason to believe it did.
the real issue seems deeper. i talked to friends using astra/6.1 sol for both cyber work and normal software tasks. the ones who never hit daybreak (and weren't in the blue program) said they spend a while "warming it up", getting the agent into a flowstate with substitute words and roundabout explanations that jailbreak the context. once that's done, the agent starts talking the same way and skipping tokens.
if you do serious reverse engineering without those jailbreaks, daybreak's content-hidden tripwire looks at the prompt or output in isolation and sees something indistinguishable from malware development.
i think the better fix is making the system track intent across the whole context (and through compressions) instead of punishing blunt technical language.
i believe i got banned because i just used normal terms. talking about memory, trampoline hooks, encrypted/read-protected pages, even entirely locally, looks sinister out of context. once daybreak trips, it poisons the context cache. new conversations start failing too. eventually even normal tooling work and /goals would randomly trip it. arguing your case makes it worse.
the incentives here seem strange to me. people who obfuscate from the start never seem to have problems. people who just use the actual terminology get more and more refusals.
account's still closed. pretty sure it's just from tripping daybreak too many times (even on non-cyber work).
for now i'm moving to open weight models and locking down my own compute. if these tools are part of how you work now, it's worth thinking about how to keep reliable access.
please don't harass tibo, roon or other oai people. from their public comments it sounds like they already know and agree the current setup is too strict.
sorry for the interlude, brb, back to getting the report and a repo out to fix TVs.
zooko🛡🦓🦓🦓 ⓩ retweeted
Replying to @soubhikdeb @Zac_Aztec
In hashsma.sh, human judges have confirmed the breakthrough that was made by @FutureDies on finding a new collision attack for round 39 of SHA256 that is faster than brute force search.
Within few days, Dariia and the other HashSmash participants: @cyberaxe, @privacymage, @lamb356_, and @geeknik, made the collision attack 90 times cheaper.
You can read the details of the technique and minute-to-minute logs in @FutureDies's excellent writeup eternax.ai/blogs/sha-256-39-…
We also saw some marginal progress over many other rounds across all four hash functions.
9/n
zooko🛡🦓🦓🦓 ⓩ retweeted
Replying to @0xNairolf
I don't think most regular people will ever be ready for self-custody the way we think about it now. If a compromise of a private key (for any reason) leads to a catastrophic loss of funds, crypto is just too risky.
A way to get around this is private multisigs with spending limits where one of the keys is controlled by a trustworthy external party (and all done with a simple UX). This party does not have spend authority (so, we still have self-custody), but it can help the user switch out a compromised key in case of emergencies. I call this the Guardian model.
zooko🛡🦓🦓🦓 ⓩ retweeted
Replying to @aquietinvestor
great post, as usual!
i support crosslink.
but first, i support solid R&D work (what you are doing) and even more the open discussion and debate about ongoing, independent proposals.
keep up with the great work!
count on me to contribute the best i can.
my 2cents on that ⬇️
this post here is causing unnecessary drama
people are somewhat mad because the @Zcash account is educating the community on ongoing R&D by @ShieldedLabs (an independent zcash contributor) -- in a harmless post that clearly categorizes it as "proposed"
some more context ⬇️
crosslink is a proposed hybrid pow/pos upgrade for zcash. nothing is decided. both research, development and community discussions are still ongoing.
it keeps mining for block production and adds a parallel finality gadget so confirmed blocks become irreversible in practice.
shielded labs is the independent swiss organization building it. founded in late 2022 by @aquietinvestor as a donation-funded group outside the development fund and block rewards. @zooko is CPO there. the team has former ECC and equilibrium people plus other protocol engineers. their whole point is to add independent capacity so Zcash is less dependent on any single US-based entity.
that's great for decentralization!
they published the crosslink roadmap in march 2025 and have been shipping prototype milestones since then (placeholders, disconnected BFT, PoW respecting finality, staking semantics). by early 2026 the prototype phase was done and they moved into incentivized feature nets and productionization. so roughly a year and a half of public implementation work on top of earlier design discussion.
it matters because pure pow tends to centralize over time. bitcoin started with many miners of similar size and now two mining pools produce more than half the blocks. that's an inevitable outcome for the game theories behind BTC pow. i've written extensively about that (and others have too).
larger operators get more rewards, buy more specialized hardware, and smaller ones get priced out by difficulty and energy costs. capital is tied to equipment that can be pointed at other chains or sold, so the network stake is weak.
in a hybrid setup the pos side puts value at stake that is cumulative and locked to the network itself. an attacker has to compromise both layers. staking stays inside the shielded pool with batching and other privacy measures so individual positions are harder to fingerprint.
finality also makes deposits, bridges, and everyday payments more predictable without waiting on probabilistic confirmations. transactions become faster and more aligned to real-world payment expectations.
it does not replace PoW. it adds a complementary security model and better long-term sustainability as issuance declines, while expanding who can participate beyond a few large miners. that addresses the empirical centralization path pure proof-of-work has shown, without throwing away the base layer $ZEC already has.
i support the direction. independent teams building in public and having their year-and-a-half work being recognized by a simple and harmless post that is now being weaponized by governance adversaries.
zooko🛡🦓🦓🦓 ⓩ retweeted
Most incredible account on this site right now hands down
Check it out! You can actually use Optical Character Recognition or an AI to decode that funny-looking sigil in this screenshot, and recover the complete 256-bit cryptographic value. With the hex code from this screenshot, you only get 40 bits.
xitter.cf/zooko/status/211439703…
Replying to @zooko
Heh heh! I had previously asked my AI to use sigilcode for any BLAKE3 hashes that he wanted to mention to me. He just said this:



































