hnssearch 🤝

I already wrote a thread breaking down Google Quantum AI's paper on breaking Bitcoin's elliptic-curve signatures. This blog post goes deeper. It covers what the thread couldn't fit. Taproot's specific exposure window: P2TR addresses leak tweaked public keys on-chain, giving an attacker indefinite offline time. The full hardware gap: 446x more qubits than anything that exists today. And where post-quantum migration actually stands across Bitcoin, Ethereum, Algorand, Solana, and QRL. The paper is real science. Most headlines are not. This piece walks through what the numbers actually say. encryptorium.medium.com/googles-quantu…

1/10: Google Quantum AI published a whitepaper estimating the resources a future fault-tolerant quantum computer would need to break the elliptic-curve cryptography (secp256k1) used by Bitcoin and other cryptocurrencies. The reaction has been predictable. "Bitcoin is dead" headlines, alert emojis, panic. The paper is real science. The panic is not. Here is what it actually says, what it does not say, and what is already being done about it.

12/12 Particularly interested in feedback from people thinking about ZK system design, deployment constraints, recursion, FRI / Fiat–Shamir / QROM, and real migration paths. encryptorium.medium.com/post-quantum-z…

1/12 I’ve been working on a paper about the post-quantum security of modern zero-knowledge proof systems. Progress on the full paper will slow for a while as I focus on the CISSP, but I didn’t want the core ideas to disappear into private notes.

What AI tool combination do you like most for coding right now? Examples: ChatGPT + Cursor, or Claude + VSCode + Copilot, etc. What does each one do best in your workflow?

zk-mutant v0.1.0 is live🎉 I’ve wanted to ship “mutation testing for Noir” for a while — and today I finally pushed the first public version. This is an early release (lots of rough edges and room to improve), but I really wanted to get it out so people can try it, break it, and tell me what’s missing. Blog post: mutorium.com/blog/announcin… If you’re building with Noir and care about test quality, I’d love feedback. This is only the beginning. 🧪⚡️ @NoirLang #MutationTesting

Here are resources that really shaped my own zero-knowledge journey. If I missed your favourite ZK resource, please drop it in the replies so others can learn from it too 👇 🧱 Fundamentals / intuition (no heavy math required) Zero Knowledge Proofs: An Illustrated Primer by @matthew_d_green – story-style intro, super readable. A Non-Mathematical Introduction to Zero Knowledge Proof by @krinza Zero-Knowledge Proofs for Engineers (Dark Forest blog) by @darkforest_eth – ZK from an engineer/game dev perspective. 📚 Deeper theory (when you’re ready for polynomials & commitments) Zero-Knowledge Book by @RareSkills_io – structured path from basics to building circuits, one of the best resources I’ve seen. MoonMath Manual to zk-SNARKs by @LeastAuthority – the mathy reference I keep coming back to when I want to really understand what’s going on. Blog posts by @VitalikButerin – especially the SNARK/STARK / QAP posts for intuition about design trade-offs and where these systems are heading. 🧠 Whiteboards / concept deep dives ZK Whiteboard Sessions by @__zkhack__ – from “What is a SNARK?” to PLONK, lookups, zkVMs & rollups. If you like learning by watching someone draw on a board, start here. Learn tracks by @0xPARC – Halo2, Circom and more. Great if you want to go a bit closer to the protocol layer. 🛠️ Hands-on circuits & frameworks Circom / Halo2 / Noir and friends – pick one stack and actually build a few circuits. Reading is great, but nothing beats wiring constraints and debugging your first proving error 🙂 🎓 Courses (if you like structured learning) zk-learning MOOC – modern ZK, taught by people deep in the space. MIT IAP “Modern Zero Knowledge Cryptography” + BIU Winter School on Zero Knowledge – more intense, but amazing once you have the basics. 🎧 Podcasts & staying up to date Zero Knowledge Podcast by @zeroknowledgefm – long-form convos with researchers, infra teams, and protocol devs. Follow @__zkhack__ for hackathons, puzzles & more whiteboards. 🧪 Applications & inspiration @zkemail – “prove something about your email in a circuit” is such a cool mental model for real-world ZK. @darkforest_eth – still one of the best examples of ZK powering an actual game, not just a paper. Again: this is not a complete list – just the things that helped me a lot. 👉 What did I miss? Which ZK resources helped you the most when you started?

How is everyone doing?

🔒 Protect your online presence with Handshake! Explore a censorship-resistant domain name system, accessible via the MASQ Web3 store, and take control of your digital identity.

Do you use fuzzing in your smart contract development or auditing? #smartcontract #auditing #SmartContracts

Have you heard of Shift Left Security? #cybersecurity

🚀 New 2-Part Blog Series 🚀 I just launched a two-part series on #ActiveDirectory and how to secure/check it with #PingCastle 🔐 What is Active Directory? AD is the backbone of your IT network, managing users, permissions, and resources. This post explains AD in detail for newcomers or refreshers. encryptorium.medium.com/active-directo… 🛡️ Securing AD with PingCastle Knowing AD is critical, but securing it is even more important. The second post explores PingCastle, a powerful tool for assessing and strengthening AD security. encryptorium.medium.com/an-introductio…

Hey smart contract auditors! 🛠 If you use audit tags (and you should; they're awesome), check out Audit Tag Collector. I created a Python script that scans your repo and generates a clean report of all your notes and questions from audit tags. It's quick and easy to use. Give it a try, and let me know if it helps! #web3 #web3security #SmartContracts #smartContractSecurity github.com/Encryptorium/a…

The index of @hnssearch has been updated 🤝

I find this picture fascinating. What are your first thoughts when seeing it? 🤔😊 #CyberSecurity #web3 #smartcontractsecurity

New blog post out 🥳 Ever wondered what different #CyberSecurity teams exist beyond Red and Blue Teams? Learn more about Red, Blue, Green, White, Yellow, Orange, and Purple Teams! 🌐💻 encryptorium.medium.com/understanding-…

Checking out findings on @SoloditOfficial is awesome! But with so many, how do you pick which ones to read? Any tips? 🤔📚

What is account abstraction in one sentence? aka, ERC-4337? "Account abstraction is allowing you to sign a tx with whatever the hell you want instead of a private key" In two sentences: "In a smart contract, you code what you to sign txes, and you can code anything." 👇

@hnsbroker @AndiR16 The frontend is already available and the backend is done with @meilisearch 😀 Crawler so far not but would be an option 🤝 github.com/hnssearch/hnss…

@AndiR16 @hnssearch Open source it 🙏

Thinking about the future of @hnssearch