Hacker Newsnew | past | comments | ask | show | jobs | submit | snowwrestler's commentslogin

If I say that I think you are Satoshi, what are the ethical implications of that? Should I not speak or write opinions that you find annoying or inconvenient? How does that scale to everyone?

This is why the first item in the U.S. Bill of Rights is freedom of speech and of the press. Who knows what objections anyone will have to any given statement, and forcing everyone to accommodate everyone leads to a claustrophobic dystopia.


The glove was there for a reason: it made it a lot easier for the U.S. to get what they want.

Appeals to “transparency” are just an attempt to distract from worse outcomes.

The fatal flaw of this administration is that they care more about looks than substance. They would rather look tough and lose than look meek and win. It doesn’t even occur to them that it is possible to win while looking meek.


To start, I am NOT an expert on the underlying technologies. But I have some exposure to the topic at let’s say more like an ecosystem level.

There are tons of hypothesized applications for quantum computing based on the expectation it will provide better simulation of quantum effects for e.g. chemistry, and offer major speedups of highly parallel simulation problems like nuclear plasma or some things in finance. Easy to Google to learn more about these.

But keeping the focus squarely on the military and intelligence services, one answer to your question is that everyone is not going to switch to post-quantum cryptography instantaneously. It’s going to take a while, especially for a long tail of “infrastructure” type things like networking gear, “internet of things,” industrial sensors, etc. Things that national intelligence services might like to break into to enable breaking into other things.

Quantum breaks may also still succeed against stored encrypted data from before the switch to PQ. And for at least a couple decades, national intelligence services have been scaling up their storage resources. So they might have a “backlog” they can work through.

Finally, things don’t have to last forever. Everything the military / government builds has an expected lifespan, and it only has to be valuable during that life span. And risks can be rare but huge in national security. So if quantum code-breaking computers only help the NSA learn a few very important things for a limited time, that still might be “worth it” to them. Or if a quantum computer doesn’t break any important cryptography, but helps advance the engineering and enables better quantum computers in the future for other anpplications—again, still might be worth it.


> I agree with you that one must prepare for the transition to post-quantum signatures, so that when it becomes necessary the transition can be done immediately.

Personally, my reading between the lines on this subject as a non-expert is that we in the public might not know when post-quantum cryptography is necessary until quite a while after it is necessary.

Prior to the public-key cryptography revolution, the state of the art in cryptography was locked inside state agencies. Since then, public cryptographic research has been ahead or even with state work. One obvious tell was all the attempts to force privately-operated cryptographic schemes to open doors to the government via e.g. the Clipper chip and other appeals to magical key escrow.

A whole generation of cryptographers grew up in this world. Quantum cryptography might change things back. We know what papers say from Google and other companies. Who knows what is happening inside the NSA or military facilities?

It seems that with quantum cryptography we are back to physics, and the government does secret physics projects really well. This paragraph really stood out to me:

> Scott Aaronson tells us that the “clearest warning that [he] can offer in public right now about the urgency of migrating to post-quantum cryptosystems” is a vague parallel with how nuclear fission research stopped happening in public between 1939 and 1940.


> Since then, public cryptographic research has been ahead or even with state work.

How can we know that?

> Who knows what is happening inside the NSA or military facilities?

Couldn't have NSA found an issue with ML-KEM and try to convince people to use it exclusively (not in hybrid scheme with ECC)?


Couldn't NSA have not known about an issue with ML-KEM, and thus wanted to prevent its commercial acceptance, which it did simply by approving the algorithm?

What's the PQC construction you couldn't say either thing about?


> Couldn't NSA have not known about an issue with ML-KEM, and thus wanted to prevent its commercial acceptance, which it did simply by approving the algorithm?

Could, but they did not do that. So, the question is to be stated: Why?


I think you may have missed my point.

Follow nsa suite-b and what the USA forces on different levels of classification.

Kyber/ML-KEM-only is exactly the suite b (CNSA 2) recommendation.

Depends on the client, PR agencies end up building a lot of little sites where they are also managing most of the content for the client. Wordpress was huge for this because the software cost was zero and basic WP engineers were not expensive to hire. Now they’re paying for AI licenses so they might as well use those instead.

Wordpress specifically ended up in no man’s land for us. Not powerful enough for big sites with complex content types and design systems, and too big of a pain for ephemeral microsites. For the latter we switched to Squarespace years ago, and are now exploring AI options.

The White House website is rebuilt by each administration. So in that case, it was quite a recent decision.

> The White House website is rebuilt by each administration.

The Federal government is very large bureaucratic organization with more inertia than most. (And probably long-term contracts in this realm!)


Yes, it was a huge mistake to allow any random app developer to claim such a prominent and limited piece of screen real estate. But it’s been an option for so long now that everyone will scream bloody murder if they try take it away.

Apple’s opinion seems to be: running out of space happens to only a few people running tons of menu-bar-loving apps, so if you are dorky enough to run into this problem, you should be dorky enough to solve it yourself.


I believe the Google equivalent would be one of the “Google Product Graveyard” websites, sadly.

I think the 4 was really where it took off. It’s remembered for the antenna PR mess, but it was the first mix of speed and features that made me and many many colleagues say “this could be better than my BlackBerry.” And it was!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: