buildOne report1 publisher Syft and Trivy list under half of JavaScript lockfile packages in a 3,326-repository study
Syft and Trivy reported 43.78% and 32.71% of lockfile packages across 2,050 JavaScript repositories in an Inria and ANSSI study, against 98.72% for cdxgen. The tool, its version and its flags decide what an SBOM lists, so that recipe belongs under version control.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence50
Google's orbital compute paper needs Starship to lift 370,000 tons to reach $200-a-kilogram launches, about 180 flights a year for a decade. Its first TPU in orbit will run in 15-minute bursts while Google tests whether a satellite can supply a kilowatt of steady power and keep the chip cool.
Perspective Coverage
6 publishers
- Builder
- Builder 40%
- Operator
- Operator 31%
- Investor
- Investor 29%
Reality
- Evidence72
- Adoption8
- Hype gap+22
- Incentives62
- Confidence68
buildOne report1 publisher Steve Weis factors RSA-896 in ten days with Claude and idle GPUs
Anthropic engineer Steve Weis factored the 270-digit RSA-896 in ten days with Claude and up to 2,048 idle GPUs. Cognition estimates that factoring one 1024-bit number costs about $30 million, a sum a hyperscaler could spend.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap0
- Incentives60
- Confidence50
Forging a 1024-bit RSA signature through an HSM costs under 0.3% of factoring the key
UC San Diego and Inria researchers forged a 1024-bit RSA signature through an HSM in 1,380 core-years, against at least 500,000 to factor the key. The attack only works with raw, unpadded signing access, so how exposed a custodian is depends on how its HSM is configured.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+12
- Incentives
- Not scored
- Confidence52
Researchers forge RSA signatures from a hardware security module by making it sign 4 billion raw numbers
UC San Diego and INRIA researchers forged RSA signatures on a 1,024-bit key inside a hardware security module after about 4 billion signing requests. The key stayed inside the device throughout, so for custodians the exposure is in signing settings, starting with the FIPS mode the researchers switched off.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence40
Google certified a quantum attack on elliptic curve cryptography without disclosing the algorithm
The zero-knowledge proof in the March 2026 white paper turned out to certify false statements too, and Scientific American reports the algorithm Google was protecting stayed secret for only a few days.
Reality
- Evidence55
- Adoption30
- Hype gap+30
- Incentives50
- Confidence58
New four-color theorem proof buys planar-graph insight with more computation
Six researchers spent nearly a decade building a third computer proof of the four-color theorem, one that runs longer than the proofs that came before it. Their return was a much faster coloring method plus new structure in planar graphs.
Reality
- Evidence58
- Adoption20
- Hype gap+15
- Incentives40
- Confidence55
A 130-digit number posted on X moves the factoring record ten digits past RSA-250
Eric Lu published a 130-digit factor of RSA-260. Anyone can confirm it divides evenly. The method behind it is still undescribed, and that method is the part that would say anything about deployed key sizes.
Reality
- Evidence60
- Adoption10
- Hype gap+20
- Incentives55
- Confidence62