Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by DerSaidin | Hacker News Reader

Full thread

DerSaidin·

> Cybersecurity looks like proof of work now

Imo, cybersecurity looks like formally verified systems now.

You can't spend more tokens to find vulnerabilities if there are no vulnerabilities.

View on HN

I misread the title as "proof work" not "proof _of_ work." The analysis makes sense, but has kinda always been true. So mostly depressing rather than insightful.

But part of me has been wondering for a while now whether proofs of correctness is the way out of the NVIDIA infinite money glitch. IDK if we're there yet but it's pretty much the only option I can imagine.

Every formal verification depends highly on requirements. It's pretty easy to make a mistake in defining the task itself. In the end, you'd want to verify system behavior in real world, and it's impossible to completely define real world. You always make some assumptions/models to reason within, and it impossible to verify the assumptions are correct.

I think there's definitely more scope for ruling out vulnerabilities by implementing simpler designs and architectures.

good luck formally verifying everything

I declare ~bankruptcy~ formal verification

If the alternative is "burn more tokens on finding issues than the attackers do", formal verification starts to look comparatively feasible cost. Think of it as setting an upper bound on cost, vs just burning more and more tokens.

AI assistants would reduce effort of verification too.

Reply on news.ycombinator.com