I think the promise of nix a few years ago is that it would be harder to do something once, but you would never do it twice.
Turns out there is nothing hard anymore but it's easier to get stuck in fixing the same thing over and over. NixOS has never been so valuable
@KristijanZic I agree :)
Before I used to fix my Arch Linux setup every few weeks. Took me one year to get something I really like on NixOS, and indeed I never had to redo anything again. I still eventually moved to macos because it was too time consuming to add new things.
That era is over
We've come a long way in a short time for formal verification—one of our strongest tools for putting the S in CROPS—to become a new normal. Here, verity formally verified EIP-8282 and in doing so found real discrepancies for researchers to address.
Thanks for the work @Veritylab
You can now run NixOS on your macbook with airdrop & secure enclave supported. Proprietary software is technical debt.
Thanks @dhh
https://t.co/R6NZ1C3RXS
Announcing a major milestone achieved by my team @GoogleDeepMind: we have proven key security properties of the machine code underlying the Signal messaging protocol. This is the first time the actual production code of a widely deployed protocol has been formally verified – by any method, with or without AI – and at this depth.
More than a research breakthrough, it’s a prime example of how frontier AI can be a force multiplier to counter the speed and scale of modern cyber threats.
Formal verification offers a higher standard of security; however, it’s extremely complex and time consuming, which is why in many cases it’s considered to be impractical. Similar efforts could take teams decades of combined effort. We did it in a month’s time.
Using AlphaProof Code, Google DeepMind's new agentic framework for formal verification that runs on LLMs including Gemini Carbon, we verified the Signal protocol down to the actual code running on devices. This milestone lays the groundwork for a future in which vital systems, from medical device firmware to power grid software, ship with mathematical proof that their protections work.
Reaching that future will take continued research from our community. In that spirit, we're open-sourcing our formal specifications and verification artifacts so others can build on this work.
On a personal note, this moment is of deep significance to me. I started my own research journey more than two decades ago as an intern working on checking the consistency of complex software systems. Seeing this grand challenge made practical with modern AI is extraordinary.
I'm extremely proud of my team members: Swarat Chaudhuri, Andrew Ferraiuolo, Anton Kovsharov, Tej Chajed, Sam Schlesinger, Karn Seth, Jonathan Katz, and Charles Sutton for taking on this grand challenge and delivering, and grateful to the Signal team for their partnership.
https://t.co/kN1eRYQ8fF
We saved 82.81 ETH on Starknet last week using a fleet of obliterated agents.
This isn't an isolated case; we believe far more funds sit in legacy protocols, and agents make stealing them cheaper every month.
Full write-up 👇