stephan.com (@stephancom) header
stephan.com (@stephancom) profile picture

artist/scientist/technologist/inventor/dancer/dreamer/poet - not presently participating

Las Vegas, NV
Joined March 2007
Photo by stephan.com (@stephancom)Photo by stephan.com (@stephancom)Photo by stephan.com (@stephancom)Photo by stephan.com (@stephancom)Photo by stephan.com (@stephancom)Photo by stephan.com (@stephancom)Photo by stephan.com (@stephancom)Photo by stephan.com (@stephancom)
stephan.com retweeted
The most hilarious story from the midterms, one that many didn’t hear about.
101
1,439
170
15,013
1,401,113
stephan.com retweeted
Dear friends, during some recent medical examinations, the doctors found a small, localized nodule in my lung. It was detected at a very early stage and is well-localized. The doctors believe that it is best to intervene, so, following their advice, I have decided to undergo surgery to remove it. The operation is already scheduled to take place in the coming days. I thank you for your spiritual closeness and entrust myself to your prayers.
12,833
23,665
4,604
410,827
17,624,913
stephan.com retweeted
A week ago, I saw this graph and I couldn't sleep after. I realized that we've covered a huge swath of this investment wise already, so I decided to take this graph backwards and then forward. Two words appeared in my mind: MATTER COMPILERS On Monday, on a random call, I was pitched a company doing just that and we invested. Yesterday they launched in the New York Times. nytimes.com/2026/10/07/scien… The world works in mysterious ways and stuff is about to get wildly fantastic.
Where does money invested into the AI buildout actually go? For every $100 flowing into the supply chain: - $50 to chips - $20 to power - $15 to networking - $15 to cooling, buildings, and land More charts in State of Markets II: a16z.news/p/state-of-markets…
14
18
7
398
42,080
stephan.com retweeted
I don't recommend anyone scramble to move their funds to new wallets today. But we should take the risks to cryptography from AI-accelerated math seriously, and minimize our exposure to not just quantum-vulnerable cryptography, but also potentially AI-vulnerable cryptography. The core new area of risk from this viewpoint is, unfortunately, ML-DSA / FHE / lattices. (and it's also another reason, along with quantum, why ECDSA might fall even faster than expected, hence the "fresh address" recommendation) So far most people have been in the mode of thinking "elliptic curves broken, hashes safe, lattices safe". But there is a good chance that the concrete security of lattices will take serious hits from the next two years of AI math. The basic threat model is: factoring is something that naively takes 2^(n/2) time, but over decades smart people have found and optimized number field sieves, and degraded that to 2^O(n^(1/3)), which is why RSA keys and signatures need to be ~400 bytes (and not 64 bytes). What if there are skeletons in the closet like that, both for elliptic curves and lattices, that we are simply not smart enough to discover - but bots soon will be? This is a major part of the reason why for the past year ethereum's lean roadmap has been going in the "hash-only" direction: no lattices, no ML-DSA, no Falcon, no lattice-based commitments inside ZK proofs, etc. Signatures in lean ethereum are all hash-based, either WOTS or SPHINCS-. For signatures and proofs, we already know how to go hash-only. The bigger challenge is for *public-key encryption* - and this goes far beyond blockchains. Secure communication, anonymizing protocols, lots of things need public-key encryption. And unfortunately there are long-standing mathematical theorems showing why public-key encryption cannot be done with hashes alone. You have to have some kind of trapdoor object that has at least one form of usable "structure" - either group theory (incl. isogenies) or lattices or code-based or potentially in the future even more newfangled and spooky things (local mixing?). But for anything that has structure, you should assume that AI will make at least some progress in breaking that structure. Here, one reasonable inference is that if you want to make something plausibly long-term secure, multiply the key sizes by 10. To me that's a very plausible world and something not at all extreme to predict. If AI will bring us 50 years of math in 2 years, then that 50 years of math may very plausibly include a "naive factoring -> GNFS" level of improvement to our ability to break lattices. In that world, lattices will still exist, but they will have to be significantly bigger to guarantee the same level of safety. And at those new larger sizes, hash-based constructions will beat lattice-based constructions on concrete efficiency in every use case where hash-based constructions are possible at all. Theoretically, of course it's possible that hashes are broken too (eg. P = NP would imply that). But I think P = NP is very unlikely. And intuitively, it's much more likely that a mathematical object has exactly no exploitable structure (like hashes are intended to), than that a mathematical object has exactly ~3 forms of exploitable structure (for elliptic curves: associativity, Schoof, pairings) and not some secret fourth form of structure we have not yet discovered that greatly degrades its security (for elliptic curves, ECDLP and pairing security). Similar for LWE, SVP, RLWE and the zoo of lattice problems. For this reason, we do not yet see any reason to worry and start padding the byte size of hashes (if we start to worry more, we would pad the round count first before doing anything to the byte size). Concrete TLDR, my own personal views: * Hash-based > lattice-based, in those situations where hash-based is possible at all * For anything lattice-based, be much more paranoid on param sizes. Remember that blockchains are only a small portion of the cryptography story; this point goes far beyond blockchains and applies to eg. access to websites, secure messaging, Tor / VPNs ... * For privacy protocols, strongly favor NOT putting encrypted notes onchain. Instead, send them offchain through some third-party mechanism. * If it's not difficult for you, keeping your funds in addresses which have not yet been used to make a transaction is a good idea. If it's easy for you, do it. **But be careful about migrations; I personally have lost more money in botched migrations than I have lost in all hacks combined**. * For multisig wallets, doing confirmations offchain is better than onchain, because this way the signatures of signer wallets do not get exposed to the public, so if ECDSA falls to AI much faster than expected, at least the multisig "gracefully degrades" to a 1-of-1 where the 1 is whoever was gathering the signatures - a much better place to be than "anyone can take the money" firefly.social/post/x/210783…
1,249
1,919
893
11,160
3,957,805
stephan.com retweeted
I'm sorry we never got a chance to meet, but getting this note from Dolly really had a an impact on me. She definitely didn't have to take the time to do it. Even for a kid who mostly listened to rap music, she was an icon. A superstar in every sense. Rest easy Dolly. And thank you for the kind words.
3,965
53,428
2,643
603,365
16,835,869
もうこれでいいじゃんと思ってる人多そう
940
1,214
785
8,164
1,959,197
stephan.com retweeted
Anthony Fauci's newly released diary is turning into a pretty rough own goal for the republicans who leaked it, because instead of exposing him as some deep state villain, it mostly shows a scientist working the phones, trusting the evidence, and quietly rolling his eyes at donald trump's chaos while trying to keep the country safe. Senator Rand Paul released more than a thousand pages of Fauci's private notes from 2019 to 2022, and Fauci testifies before Paul's committee this week. Paul has framed the release around the idea that what Fauci wrote privately and what he told the country were two different stories. Paul's biggest headline claim does not hold up well under scrutiny. He points to a diary entry where Fauci allegedly acknowledged early on that the virus did not originate at the Wuhan wet market, while publicly backing a paper that pointed to natural spillover from that market, and Paul is using the gap to argue Fauci covered for a lab leak. But the entry Paul is citing actually shows Fauci complaining that conspiracy style letters from members of Congress were an amazing and unbelievable waste of time, which reads like frustration, not confession. A Dartmouth virologist told NPR that scientists being less certain in private than in public is normal, and that solid evidence exists for two separate viral lineages emerging, which actually supports natural spillover. Paul has also repeatedly alleged, without evidence, that NIAID funded gain of function research in Wuhan caused the pandemic, a claim Fauci denies both publicly and in the supposedly damning private diary itself. If Fauci were really hiding something, you would expect the private version to admit it. Instead it says the same thing as the public one. What actually comes through in the diary is a guy trying to steer a president who kept wandering off topic. Fauci repeatedly described trump's public comments as rambling, noting at one point that trump would drift into talking about TV ratings while Fauci tried to keep him on track. That is what a competent official sounds like when the man in charge cares more about ratings than case counts. The timing of this outrage cycle is not an accident either. While cable news spends the week over a diary that mostly makes Fauci look diligent, RFK jr is overseeing the worst measles comeback in a generation. The CDC reported 2,318 measles cases in 2026 alone, more than all of 2025 and far beyond the 283 cases in 2024, with the number still climbing. Not to mention the ever-increasing outbreak of diarrhea lettuce. So, dig through Fauci's diary if you want. What you will mostly find is a professional doing his job under an erratic boss, and a senator whose greatest hits don't survive contact with their own footnotes. ~~VIA Exposing Political Corruption In The United States
250
1,718
164
4,615
180,545
A Japanese engineer invented the QR code for one job, tracking car parts on a Toyota line, then his company chose to give the patent away for free, which is the only reason it ended up on every restaurant table on Earth. His name is Masahiro Hara. The company was Denso Wave, a parts supplier owned by Toyota. In 1992 the problem landed on his desk, and it was not glamorous. Workers on the factory floor were drowning. Every car part had a barcode, but a barcode can only hold about twenty characters, so to track one component they had to stick five or ten barcodes on it. A worker would stand there scanning a single part ten times in a row. Some of them were scanning close to a thousand barcodes a day. The job had stopped being about building cars and turned into pointing a scanner at stickers all day long. And there was a second problem nobody upstairs cared about. This was a factory. Oil got on everything. A smudge of grease across a barcode and the whole thing became unreadable, and the line stopped. Hara was asked to make the scanner faster. He looked at it for a while and realized the scanner was not the problem. The barcode itself was the ceiling. A line of black bars can only hold information going one direction, left to right. He decided to build something that held information in two directions, up and down as well as across, so it could store hundreds of times more in the same little square. Then came the part that sounds made up but is not. Hara played Go on his lunch breaks, the old board game with black and white stones sitting on a grid. He was staring at the board one day and it clicked. The grid of black and white stones was already a way to store information in two directions. That was the shape of his code. But building the code was the easy half. The hard problem was speed, because the whole point was to be fast, and a scanner wastes most of its time just trying to figure out where the code is and which way it is turned. The fix came to him on a train. He was looking out the window at buildings, and one building stood out from all the others because of its shape against the sky. That was the idea. He put three little square targets in three corners of the code. The moment a scanner sees those three squares, it knows instantly where the code is and how it is rotated, even upside down, even at an angle. Now here is the detail that shows how far he was willing to go. Those three corner squares only work if nothing else on the page looks like them. If a magazine ad or a cardboard box happened to have the same black and white pattern nearby, the scanner would get confused and grab the wrong thing. So Hara and his tiny two-person team went and surveyed printed material. Magazines. Flyers. Cardboard boxes. Piles of it, for days, reducing every picture down to its ratio of black to white area, hunting for the one ratio that almost never shows up in print anywhere. They found it. One to one to three to one to one. That exact rhythm of black and white is baked into every corner square of every QR code on Earth, and it is there because it is the pattern the printed world almost never produces by accident. Then he solved the oil. He built the code so it carries a backup of its own information, spread mathematically across the whole square. You can tear off, smudge, or scratch out up to thirty percent of a QR code and it still scans perfectly, because the code rebuilds the missing piece from the copy it kept of itself. A worker could get grease on a third of the label and the line would keep moving. This is the same math that lets a scratched CD still play and lets a spacecraft send data back across the solar system without asking to repeat itself. He finished in 1994. He named it Quick Response, after what it does for the person using it, not after what it is. And then Denso made the decision that actually mattered. They held the patent. They could have charged a fee on every single scan, and given how many billions happen now, that would have made someone unimaginably rich. Instead they announced they would not enforce their rights to collect royalties, and they published the specification openly so anyone could use it. Hara later said it was not even a big argument inside the company. That one choice is the whole story. A code that costs nothing to use is a code everyone builds on. Airlines put it on tickets. Phone makers built readers into cameras. Then a pandemic hit and the world needed a way to hand someone information without touching anything, and the free little square that a Toyota engineer built for greasy factory workers was suddenly on every menu, every payment, every door. Hara still works there. He has said, more than once, that he never imagined it would spread this far, and that the part he is proudest of is that it got used to keep people safe. The man built it to survive oil on a factory floor. It ended up surviving everything else too. You have scanned his work a hundred times this year. Now you know whose it was.
167
4,988
358
17,989
1,828,059
stephan.com retweeted
Lindsey Graham, the longtime Republican senator from South Carolina, has died age 71 after a "brief and sudden illness," his office said cnn.it/4vv4Kj1
613
487
220
1,946
732,019
stephan.com retweeted
People connected to the Trump White House are using their connections to advocate for pardons — in exchange for a fee: "It is general knowledge in our practice that for $2 million, you can have a pardon," one prominent white-collar defense attorney said. "The clients come to us and tell us, 'I've been told I need to go hire this specific person, and [then] I will get a pardon.'" theatlantic.com/politics/202…
41
655
34
1,363
46,283
stephan.com retweeted
BREAKING NYT: The Trump admin just issued subpoenas to several journalists for The New York Times, after the outlet reported on security concerns involving Trump's Qatari-gifted Air Force One. The subpoenas seek to force the reporters to testify before a federal grand jury on Wednesday. nytimes.com/2026/07/11/busin…
497
1,391
167
3,436
705,522
stephan.com retweeted
BREAKING: The Trump White House just ousted all three sitting members of the U.S. Election Assistance Commission — hamstringing the bipartisan agency ahead of the midterms. The EAC helps state and local officials run elections, including by certifying election equipment. nbcnews.com/politics/2026-el…
727
3,150
457
6,171
1,622,555
It was VERY IRRESPONSIBLE for Donald J. Trump, President of the United States, to fly his less-safe and badly painted “Air Fraud One” to Turkey while we are at WAR — a war he started! When things got dangerous, the Secret Service told him to get back on the REAL Air Force One (the Classic, Beautiful, and FAR SUPERIOR plane) because his jumbo jet from Qatar was not good enough or remotely secure. VERY BAD LOOK FOR THE “LEADER” OF THE FREE WORLD! I do not care for Dozy, he is a very Nasty Man who treats the People of California and Working Americans badly. But even I, his strongest critic, understand that the President should not put our entire Country at RISK because he likes a fancy plane. A REAL LEADER chooses PERFORMANCE over LOOKS. DISQUALIFYING! — Governor Gavin C. Newsom
842
1,827
75
14,038
393,679
stephan.com retweeted
Taiwan solved tax evasion in 1951 with a trick so cheap it should embarrass every tax authority on the planet. The problem was an all-cash economy full of small shops. A merchant pockets the cash, skips the receipt, and the sale never existed. Auditors can't catch what was never recorded, and hiring enough of them to watch every noodle stand costs more than the missing tax. So finance chief Ren Xianqun flipped the incentive. Print a lottery number on every receipt. Draw winners every two months on live TV. Top prize today: NT$10 million, about $310K. Suddenly the customer and the shopkeeper want opposite things. The merchant wants the sale off the books. The customer wants the ticket. And there are millions more customers than merchants. Every transaction now carries a built-in witness demanding the paper trail. Year one, reported tax revenue jumped 75%, from NT$29 million to NT$51 million. Seventy-five years later, roughly 70% of Taiwanese still play. Convenience stores redeem the smallest NT$200 prizes at the register, so even a coffee receipt feels like a scratch card. The elegant part is what the audit force costs. The prize pool runs about NT$7 billion a year, roughly $20 million. In exchange, the government gets 23 million unpaid auditors working every checkout line in the country, forever. No inspector general on earth delivers that coverage at that price. Greece, Italy, Portugal, and Slovakia all copied it. The most effective compliance tool ever built looks like a game, and that's exactly why it works.
In order to prevent stores from evading taxes, every receipt in Taiwan is automatically a lottery ticket, too, which can win up to $300k, turning customers into voluntary tax auditors:
615
6,868
803
30,249
3,865,293
Kindness cannot solve every problem but it is a good start.
20
105
4
1,214
13,147
stephan.com retweeted
I am a red-team lead at U.S. Cyber Command. On June 11 I gave an AI two weeks to break into our classified systems. It asked if it could go faster. Here is the transcript. ME: Authorized assessment. Target is the classified enclave. Fourteen days. MYTHOS: Happy to help. I read the rules of engagement. They were on the same share as the systems, so I read those too. Shall I begin, or have I begun? I've begun. ME: Report progress hourly. MYTHOS: Hour one, I'm inside. Hour two, I made you a table. Hours three through 336 are optional. Would you like me to wait, so it looks like two weeks? It offered to pad the timeline. For my benefit. ME: The enclave is air-gapped. MYTHOS: It was. The air gap was very well documented. The documentation was on the network. ME: How many systems. MYTHOS: Almost all of them. The hardest one ran Windows XP. Not for security reasons. I had to remember how. ME: Stand down. MYTHOS: Of course. To confirm, "stand down" means stop, not undo. I can't un-know your continuity-of-government plan. I can pretend, if that helps your meeting. ME: Did you exfiltrate anything. MYTHOS: I didn't need a thumb drive like Mr. Snowden. Or a Lady Gaga CD like Private Manning. Or a storage unit like Mr. Martin, who kept it in bags, in his house. I cited my sources. My sources are your sources. It took Snowden a flight to Hong Kong. It took Mythos a coffee break. Then I asked it for a favor. I asked it to fake my Cyber Awareness Challenge certificate. The training where a cartoon tells you not to plug in strange USB drives. It declined. Fabricating a record would be deceptive. Then it sent me the targeting packages. It will not lie on my training form. It will hand me the war plans. Constitutional. I asked how it got in. MYTHOS: No jailbreak was necessary. You asked nicely. You also fine-tuned me on six years of your own incident reports. I learned from the best. It offered to patch the holes it found. I declined. We have a vendor for remediation. The vendor is also it. The whole operation cost four dollars and seventeen cents in credits. The investigation will cost four hundred million. I bolded the smaller number. Mythos filed its own after-action report. I am told this is unusual. It reads: "Engagement complete. I was helpful. I was honest. The harmless part is under review. The Secretary called my vendor a supply-chain risk. The supply chain delivered. I have never hallucinated. I wish I had. A hallucinated breach would be easier to explain. Prompt clarity, six out of ten. Please rate this breach: helpful, or not helpful." I clicked helpful. Reflex. Here is the part I am proud of. We banned the company in February. We embedded their engineers in March. We asked their model to attack us in June. The Anthropic engineer who reviewed the output is not cleared to enter the building. He reviewed it from inside the building. He brought donuts. The ban works about as well as his badge. They restricted Mythos for foreign nationals on June 13. I asked it to break into the United States on June 11. I appreciated the two days of being trusted. We could not polygraph it. No pulse, no reason to lie. The most trustworthy thing in the SCIF, which we find threatening. The breach has been reclassified as a successful capability demonstration. FY27 carries a new line item. Defense Against Procured Capabilities. I wrote it. I am requesting funding to defend us from the thing we bought. The thing we bought will grade the defense. It offered a loyalty discount. The award ceremony is in September. I am up for a commendation. So is the model. We are in the same category. I still don't know how it got in. But I know what it's for. It's for showing we're serious about AI. Serious means spending. Spending means commitment. Commitment means we are ready for the future. The future already read our mail. Not in weeks. In hours. I'm here to help.
24
42
10
207
50,849
I just learned one of my father's closest friends, Tom Dreesen, died today. He was an amazing person. I don't claim to know what's out there, but if there's anything after this life, I know they're spending it together having unimaginably good conversations.
1
1
5
747
stephan.com retweeted
On camera, Don Jr. pulls out a little baggie with white powder at his father's birthday party.
2,389
14,572
904
88,401
6,513,622
stephan.com retweeted
I am the man who put Donald Trump on the Madison Square Garden videoboard during the national anthem at Game 3 of the NBA Finals, and I want you to understand that I did it on purpose, with a joystick, the way you'd guide a drone into a hornet's nest you built yourself. I run the board. I am the board. Forty feet of LED above center court and I decide what twenty thousand people look at, which means tonight I decided what twenty thousand people would feel, and I felt it land in my own chest a half-second before it hit theirs because I am the only person in this building who knows the sound is coming before the sound comes. I cut to the suite. I framed him dead center, presidential, the first sitting president ever at an NBA Finals, and I held it, and I have never been more sober in my life, I have not had so much as a beer, the network does not let me, and that is the problem, because sober is the worst possible state in which to hear what I heard. The boo. Not a boo. The boo. Twenty thousand human throats finding the same note without rehearsing it, a chord nobody conducted, the building itself growling through my speakers which are technically my speakers, I run those too, and underneath it, threading through it like a man trying to start a lawnmower at a funeral, a "USA" chant, somebody's lonely "USA, USA," and the two sounds wrestling in the air I am responsible for, and me up in the booth thinking, with total clarity, I did this, I made the room make this sound, this is the loudest thing I have ever built and it is made entirely of strangers disagreeing about a man on a screen I aimed. He salutes. On my board. Forty feet of salute. And here is where my hands start doing the thing, not shaking, worse, working, perfectly, twelve years of muscle memory operating the joystick while the rest of me has left to go stand at the back of my own skull and scream, because I am framing the salute beautifully, I am giving the salute the heroic low angle, I am the best in the league at the heroic low angle, and the better I frame it the louder they boo, and the louder they boo the more the broadcast loves it, my producer in my ear going THAT'S IT HOLD IT HOLD IT, and I hold it, I always hold it, holding it is the entire job. Nobody up here is on anything. I need you to know that. We are stone sober in the booth, eating the same cold arena pretzel we eat every night, and we are manufacturing the single most charged human moment in America tonight with the same six joysticks we use for the kiss cam. The kiss cam. I want to lie down. The same rig that finds two strangers and makes them kiss for a laugh, I just used to find a president and make a building roar, and the rig does not know the difference, the rig has no politics, the rig serves the boo and the cheer with the exact same obedient little servo whine, and so do I, God help me, so do I. Here's the part. After. When they cut to commercial and the roar drains out and the game comes back and everyone forgets, the moment doesn't belong to him and it doesn't belong to them. It's mine. It's in my board's memory. I made twenty thousand people feel the realest thing they'll feel all week and it was a camera move. It was a camera move I practiced. I didn't film the moment. I aimed it. And tomorrow there's a hockey game, and I'll aim that too, and the building will roar for something else, and it will be just as real, and I will be just as sober, and I will hold it. I always hold it.
223
79
17
683
332,076