MatteoFrigo

8 ms·

31.
by MatteoFrigo 1y ago
An alternative would be some secure chip in a credit-card size plastic document, but nobody seems to like that idea. We (Google) don't make these choices.
32.
by MatteoFrigo 1y ago
Yes, a malicious wallet could leak your information. This is why some governments will insist on using only blessed wallets. However, wallet+zk is strictly better than sending the plaintext MDOC to the relying party. There are no solution
33.
by MatteoFrigo 1y ago
Yes
34.
by MatteoFrigo 1y ago
No. Using the MDOC requires a signature from a hardware security key in the phone, and a lot of the complexity is how to avoid leaking the private key, which would identify you.
35.
by MatteoFrigo 1y ago
It depends on local regulations. As far as I can tell Europe will require some sort of blessing of the wallet. To be clear, governments will develop their own apps and it's not clear that Google will be blessed. We (Google) are giving
36.
by MatteoFrigo 1y ago
The specifics depend on local regulations, but roughy speaking: the government gives you a document in a standard format (eg MDOC). Your phone stores the document, with cooperation from a secure element that binds the document to the phone
37.
by MatteoFrigo 1y ago
The post does not present a solution to that problem. Governments around the world, especially in Europe, have legislated the solution, and the solution they have picked is a privacy nightmare. This post solves the privacy problem, which
38.
by MatteoFrigo 1y ago
Author (of the code) here. The context is the US mobile drivers licenses and the forthcoming digital identity documents in the EU. The government gives you an electronic document stored in your device, and now the problem is, why would you
39.
by MatteoFrigo 1y ago
Nope, no blockchain involved.
40.
Opening up 'Zero-Knowledge Proof' technology to promote privacy in age assurance(blog.google)
2 points by MatteoFrigo 1y ago|0 comments
41.
Implementation of the Google Zero-Knowledge Library for Identity Protocols(github.com)
3 points by MatteoFrigo 1y ago|0 comments
42.
by MatteoFrigo 1y ago
Speaking as one of the implementors of the ZKP system described in the article. The identity document (e.g. driver's license) is granted by an issuer (e.g. department of motor vehicles) and stored in the user's device only. Googl
43.
by MatteoFrigo 1y ago
I could not find a description of your algorithm, which makes it hard to give you feedback. However, here are a few questions that come to my mind from a cryptography/ZK perspective. 1) elliptic-curve cryptography cares about 256-bit
44.
by MatteoFrigo 3y ago
I think that there are two cases of practical importance, which have incompatible requirements. The first case is where you have a N-dimensional vector space where all dimensions have the same units. The standard example would be the Newto
45.
by MatteoFrigo 3y ago
FWIW, they start counting function arguments from 0, so _2 is indeed the velocity. But I do agree with your main point that the order of arguments is irrelevant, and it is a mistake to make it a first-class citizen of the notation.
46.
by MatteoFrigo 4y ago
The Bank of England explains why the fractional reserve mental model of banking is not really accurate. See https://www.bankofengland.co.uk/-/media/boe/files/quarterly-...
47.
by MatteoFrigo 4y ago
If you are interested in this topic, the book "The Anatomy of a High-Performance Microprocessor: A Systems Perspective" by Bruce Shriver and Bennett Smith describes the architecture of the AMD K6 processor (late '90s) in deta
48.
by MatteoFrigo 4y ago
My reading of the paper is that the new 4x4 algorithm only works in Z/(2), where there are no issues of roundoff errors. (Z/(2) is the field of integers modulo 2.) The paper seems to say that for real numbers, Strassen is still
49.
by MatteoFrigo 4y ago
I actually went down this path about 25 years ago, and I learned the hard way that CO2 hides in organic materials in a way that mostly invalidates the calibration. I had a semi-sophisticated device consisting of a lightweight plastic cylind
50.
by MatteoFrigo 4y ago
The usual convention is that the accuracy refers to full-scale measurements. I.e., your device has an error of +-3%*5000ppm = +-150ppm. At ~400ppm you are about 37% off. Human exhaust breath contains about 5000ppm CO2, so this device is d
51.
by MatteoFrigo 4y ago
Knuth's "Concrete Mathematics" book claims to be a blend of CONtinuous and disCRETE mathematics. Thus, Knuth is using the suffix "-crete" incorrectly as well. If I were you, I would send an email to Knuth reporting
52.
by MatteoFrigo 4y ago
Speaking of SVD doctors, I heard many years ago (from Alan Edelman) that Gene Golub's license plate used to be "DR SVD". Later he switched to "PROF SVD". I couldn't confirm the DR SVD part, but the PROF SVD st
53.
by MatteoFrigo 4y ago
FWIW, I would encourage you to read the leaked text. I have read a few opinions of the Supreme Court over the years. I have no specific background in law, and I am not even a native English speaker, but I have found them uniformly accessib
54.
by MatteoFrigo 4y ago
I don't think the bloomberg explanation is right, because the net effect of imports on GDP is zero. Assume you import $1 of goods, which are consumed. Then the GDP reflects $1 consumption (either private or government) minus $1 import
55.
by MatteoFrigo 4y ago
The way I read it, the comma "," means "given", so what they write p(a, b) would be written as the conditional probability p(a|b) in contemporary CS/math literature. h <- e means (h OR (NOT E)), which is the usu
56.
by MatteoFrigo 4y ago
Yeah, now that I think more about it, I think I was confused myself. Specifically, I think I got the math right but the example wrong (and I confused you too). Let me try again. I think that Deutsch is saying that h is the proposition &qu
57.
by MatteoFrigo 4y ago
You have a hypothesis h = "it's raining somewhere in England" and evidence e = "it's raining in London". You have an empirical theory that e implies h, which may or may not be true depending on whether London
58.
by MatteoFrigo 4y ago
Here is my understanding of what Deutsch and the paper by Popper/Miller are trying to say. There are three concepts involved: an evidence "e", for example "I extracted 1 black ball"; a hypothesis "h", for
59.
by MatteoFrigo 4y ago
It depends upon where you think calculus starts. If you take the position that calculus is the concept of limit and all its consequences, then things like exp() and log() are calculus and it's hard to get anything done in CS without th
60.
by MatteoFrigo 4y ago
To be fair, the male/female nomenclature for connectors has been a mess for decades. One old convention, mostly originating with radio-frequency connectors, is that the gender of the connector is the gender of its innermost contact. T

More ›