Holy crap! I find this way, WAY more surprising than the 3-SUM and APSP results, which I already found extremely surprising. "Just" SETH would have already been gigantic if somewhat less surprising.
A few comments:
An internal model at OpenAI has produced a claimed refutation of ETH! Russell Impagliazzo, Mohan Paturi, and I have been asked to help organize an open and independent examination of this claim. 1/4
Skimming this new PDF, I feel some similarities to the sub-n*lg(n) FFT writeup by David Harvey.
It's all like breaking the n^3 matmul bound: instead of doing many independent mat-vec-mul units of work, do them all at once, exploiting structure to save a few operations.
bsky.app/profile/curi...
An internal model at OpenAI has produced a claimed refutation of ETH! Russell Impagliazzo, Mohan Paturi, and I have been asked to help organize an open and independent examination of this claim. 1/4
OpenAI has claimed a refutation of the Exponential Time Hypothetis (ETH). Russell Impagliazzo, Mohan Paturi and Ryan Williams (@rrwilliams.bsky.social) have been asked to organize a community-led effort to evaluate this claim. More here:
docs.google.com/document/d/1...
h/t @gautamkamath.com
Once this works on Linux... maybe I should clip on a mic and do my hour+ walking-around-in-circles-thinking sessions out loud??? And just put it all into some per-project THOUGHTS.md file that my LLM reads/indexes so it's easy to search?
Or like, record all your whiteboard discussions?
Just got my first real sale for @avette.eu ✨ super super happy about it.
It's a dictation app for macOS, the productized version of what I've been using for a year.
It's really very good, I encourage you to download and try it out, should be fresh air after whisper/parakeet/apple stuff x)
I regularly internally narrate possible blogposts to myself but they never end up on paper because putting things down and making them coherent takes time...
But then also all the one-off good thoughts are gone and tedious to recover...
Aletsch Glacier
2021 | 2026
Over these 5 years, it has lost 25 m in thickness at Konkordiaplatz (2900 m asl) 🧊🔥
And likely more than 50 m over the section shown here (1800-2200 m asl) 😱
All this melting is entirely caused by human activity! 🏭
Pfff, not sure what to think of this.
Derivative is a crate to derive Add and such on simple types and it works but has now been given a Rust advisory which triggers rustsec warnings for all 600 dependents... Do we really need this churn for something that isn't broken?
rustsec.org/advisories/R...
How did the grid react as Storm Austen and Storm Boelo passed through over the weekend?
I pulled this together over the weekend. It's part of a new video format that I'm exploring to better explain what's going on within the energy system and the wider context surrounding it (such as the weather).
that's the part where they tell you that that bit about rust restricting mutation is actually completely wrong and rust does almost nothing to restrict normal mutability (which they call✨interior mutability✨) and rust just has a second mutation mechanism on top of that if you have a unique reference
"How do we kill vibe coding and AI slop?"
Vibe coding and AI slop are bad. Applying these terms dishonestly or lazily is also bad (though not in the same way).
combine-lab.github.io/blog/2026/10...
"Both bugs resided in the respective languages' C code. So any advice like 'move away from PHP' is misdirected. What is needed is a push away from C." @joaxcar.bsky.social
Indeed, this article is a really really nice read!
Without knowing much about this topic, the first 10-15 pages give a really nice hand-holding whiteboard-style exposition of some of the ideas.
Unfortunately, the conclusion:
So just to summarize we’ve got:
- eMudhra keys leaked (“4”)
- RCE in PHP since 2012
- RCE in gitlab since 2016
- Java CVE (probably eMudhra)
- HTTP3 compression bomb
- PingCAP just utterly beyond 0wned
Anything else?
A good friend, a very serious algebraic geometer, is having his work from the past decade swooped upon by a person with AI; said person is pushing out AI-generated proofs of the parts my friend exposed to the world. Fortunately not everything was revealed, but this is utterly gross. #MathSky#LLM
I agree that proper disclosure was disrupted because of embargo-breaking. The PHP Foundation's writeup has the details on that and it's not a good look that a security company broke embargo 👇
Genuinely curious: what could/should OpenAI have done differently?
thephp.foundation/blog/2026/10...
This is an absolutely astounding press release from eMudhra. No apology, a suggestion that the researcher who found their private keys must have used AI, and an attempt to shift blame to auditors... wow.
emudhra.com/en/press-release/emudhra-statement-distrust-global-tls-intermediate-root-ca
My thoughts on the current state of AI driven software development, why I'm no longer concerned about a runaway intelligence explosion, and what I think is a far worse outcome we could be walking into
maevyn.codes/decoherence
details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest
yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.
BTW knowledge of the existence of this vulnerability enables a well financed malware group to use AI to find it, if you run PHP anything you should be taking the service down NOW until a patch is available. And then patch before bringing the service back up.
details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest
yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.
To reflect on how this plays out in mathematics: Editing, especially by a senior coauthor, should include re-thinking the content at a technical level and not just polishing tone. E.g. adjusting lemmas to the minimal hypotheses to show *why* they are true.
The details are now public, as of two hours ago.
bugzilla.mozilla.org/show_bug.cgi...
The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits.
All not-updated software can be MITM'ed now.
IOT boxes that can't or don't update are now trivially MITM'able forever.
If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today.
If you run Go:
go get go@1.27.3
If you run Homebrew:
brew update
brew install ca-certificates
If you run Linux, maybe stay off the internet for now.
Very good essay. You can read it in 5 minutes. I wrote some of my own thoughts on this over the weekend.
What Counts as Impact? doi.org/10.59350/006...
Some of my thoughts about the surge in AI-generated papers, why this feels like a completely new kind of problem, and what this means for how we evaluate science in biology.
Out now in PLOS Biology:
journals.plos.org/plosbiology/...
"AI can't create anything new because it just blends existing discoveries"
well
1. practically this is not true, the entire math community is dealing with a crisis of AI competently making discoveries
2. I don't think our set of discovered work is convex, "just blending" can still go to new places
Our P99 CONF keynotes feature top engineers and system architects like @dorlaor.bsky.social, @curiouscoding.nl, Georg Kreuzmayr, and @reconditerose.bsky.social. Plus, you get to interact with each at our free and virtual event on October 21-22. www.p99conf.io?latest_sfdc_...#ScyllaDB#P99CONF
Uploading one-shotted AI "expositions" of one-shotted AI-generated papers is totally bonkers to me. What value do you think this has? And what do you think your contribution is, "access to buttons?"
2019 video of Heidi the Octopus, captured by Dr. David Scheel, a professor of marine biology at Alaska Pacific University in Anchorage & aired on PBS Nature program "Octopus: Making Contact".
We think the color changes are the results of Heidi dreaming as she sleeps. Let's talk about it.