Ask HN: What has quantum computing achieved so far? (2024)

You might like this interview on Lex Fridman with:

Guillaume Verdon (aka Beff Jezos on Twitter) is a physicist, quantum computing researcher, and founder of e/acc (effective accelerationism) movement.

https://www.youtube.com/watch?v=8fEEbKJoNbU

Quantum computing seems very special-case.

I wonder if it is sucking up all the oxygen in the room for “quantum” and “computing” in a sentence together. Classical computing that uses quantum effects seems more useful IMO. Quantum computing algorithms are too hard, let’s do quantum dot cellular automata instead.

I'm not even sure that a quantum computer has incontrovertibly outperformed a classical one at this time on anything. Some have claimed it, on problems that have no practical utility. Classical results have also been improved on response.

Arguably then the only concrete achievement of quantum computing to date has been improvements to classical algorithms. However, I fully expect that we will eventually have powerful quantum computers.

Practical applications for those are things like modelling chemical reactions or quantum systems, or optimisation.

No discussion on quantum computing would be complete without a link to Scott Aaronson's blog. Worth a read to get a better understanding of the subject.

https://scottaaronson.com/

Interesting. What are the motivations behind this funding? What is to gain?

As far as i can see there is quite a lot of "quantum safe" encryption so what kind of historical data exists lying around with lots of value?

Practically, how much real world value is there going to be?

I assume all the big nations spy on each other. Have a very good idea on the broad strokes total number of personnel, planes, ships, bombs, and where they are all located. Potential for novel military insight seems low.

There is probably lots of stupid human gossip to be found: mistresses, politically embarrassing failures, self-dealing schemes, etc. Maybe there are a few tantalizing useful nuggets: attached are the full schematics for the planetary weather control machine, where we buried that crashed ufo, location of the archive holding all the kompromat, etc.

I have no doubt intelligence agencies would decrypt anything and everything, but it seems more like they would just because vs perceived need.

> As far as i can see there is quite a lot of "quantum safe" encryption so what kind of historical data exists lying around with lots of value?

I find this statement funny, not at your expense.

In public discourse, speak about quantum encryption too early – such as within the last five years – and the common opinion on say Stack Overflow/HN/Reddit/among the outer circles of cybersecurity is "don't model a threat before you get there".

Now apparently there is a lot of quantum-safe encryption - not true, NIST barely came to a standard in the last year, which failed quickly, even though there are quantum-resistant strategies which have gained tentative adoption in companies like Signal and MullvadVPN. But interesting that this is a perception someone has now, and suddenly quantum computers are being put under popular scrutiny again, perhaps driven by advancements in inner circles and higher tiers of tech.

It's tiresome to see these discourses out of sync

Most asymmetric encryption is not quantum safe and has to be designed to be so.

Symmetric encryption is safer, but you still need to double the key lengths at least.

The utility of breaking old classically encrypted messages isn't really an existential problem for anyone, and there are no lost great secrets buried in encrypted intercepts that yield disruptive power if they are discovered today or anything like that.

Think of it as a control plane vs. data plane, where you have the state as a control plane, and if data can escape its purview, or worse the data plane can generate control messages that subvert it - you get existential uncertainty and risk. It will never let itself be reduced to a dumb pipe. Encryption represents a limit on the absolute sovereignty of that control plane, so the resources to contain it are a constant need.

Maybe whoever will break current state of encryption landscape will also gain privilege to build new and benefit from it?

In my opinion if breaking AES is to serve military (and hunt for secrets) then it would be done in secret.

Some interesting science results, but essentially nothing in the way of economically-valuable computations. I think we'll eventually get there in the next decade or so, but even before that, there are immediately useful spinoff technologies coming out of the effort like quantum sensors and greatly improved RF and photonics products.

Even if/when these things are working on a useful scale, quantum computing is going to be more comparable to special-purpose accelerators like GPUs, or perhaps akin having a re-programmable physics lab-on-a-chip. It will be advantageous for the subset of problems that can be cast in the form of Schrodinger's equation, of which there are many. For example, you can use the quantum computer to generate high-fidelity solutions of the electronic structure of some classically intractable molecule, and use those solutions as the training set for a classical AI model that then goes and performs the bulk of the computation on whatever it was you were trying to do.

Factoring 15 while using the fact that 15 = 5 x 3 to build the circuit.

(IIRC this is still the best; all the hype-y 2^xxx+1 PR ones aren't really using Shor's algorithm and also use some number theoretic short-cuts).

Factoring 15 with quantum computers happened nearly 22 years ago[1]. The current record for factoring, with just Shor's and no minimization, is 21. Like you said, a lot of the hyped ones aren't practical. It's not that hard to pretend to factor large numbers on a quantum computer [2]. There have been a few newer algorithms can work with larger numbers, but they have scaling issues and so aren't useful for cryptography.

[1]https://research.ibm.com/blog/factor-15-shors-algorithm[2]https://arxiv.org/abs/1301.7007

I think it's misleading calling these things "computers". They are no more "computer" than the analog computers, like MEDA: https://www.analogmuseum.org/english/collection/meda/43/

I've worked with analog computers, they were used in control systems. I understand that Moon landing used analog computers along digital ones as well.

Basically you can do PID (proportional, integrative, derivative) calculus on them using plain analog electronics. Very specialized and nothing to get overexcited about.

It's like calling these biological machinery "computers": https://en.wikipedia.org/wiki/File:Human_computers_-_Dryden....

Bottom line "quantum computing" has nothing to do with the classic field of digital computers (personal PCs), it's a stupid, deliberate misuse to borrow from the legitimacy and respectability of an established field.

The term should die in a fire. "quantum crap putting" is a lot more appropriate given all the crap they put in the headlines to fool the guillible.

And yet you refer to analog computers in your very comment.

There’s nothing special about Boolean logic as a way to solve problems that require, wait for it, computation of some sort.

It's not misleading: Quantum computers ARE computers.

(Or WILL BE when we build proper ones...)

David Deutsch formalized universal quantum computers -in analogy to a universal classical computers in the 80s.

The starting point is basically noticing the mismatch between the classical theories of computing and quantum physics.

From the abstract of 'Quantum theory, the Church-Turing principle and the universalquantum computer':

>It is argued that underlying the Church-Turing hypothesis there is an implicitphysical assertion. Here, this assertion is presented explicitly as a physical principle: ‘every finitely realizable physical system can be perfectly simulated by auniversal model computing machine operating by finite means’. Classical physicsand the universal Turing machine, because the former is continuous and the latterdiscrete, do not obey the principle, at least in the strong form above. A class ofmodel computing machines that is the quantum generalization of the class of Turing machines is described, and it is shown that quantum theory and the ‘universalquantum computer’ are compatible with the principle. Computing machines resembling the universal quantum computer could, in principle, be built and wouldhave many remarkable properties not reproducible by any Turing machine. Thesedo not include the computation of non-recursive functions, but they do include‘quantum parallelism’, a method by which certain probabilistic tasks can be performed faster by a universal quantum computer than by any classical restrictionof it.

The abstract seems to make the concept more profound than it actually is... and I daresay is prone to confuse the uninitiated.

For one I don't think there's understood to be an implicit physical principle in Church-Turing thesis. The core idea of the thesis is that human thought can be modeled by a Turing-complete machine.

It is silly to say that the thesis implies an assertion that the classical(non-quantum) physical system popular at the time, now known to be flawed (and possibly inconsistent), could be simulated by a Turing-complete machine. What I'm trying to say is, if the best known physical system known by science could be wrong or flawed or inconsistent (and it always has been, we haven't cracked all the secrets of the physical universe yet), it seems silly to assert that some computing system could perfectly simulate it.

IMHO those ideas would be relevant only if there is evidence that human thought is capable of performing computation that cannot be simulated by a classical Turing machine because the human mind uses some features of the physical universe that the machine did not use. But on that front, AFAIK, classical computers can simulate quantum computers albeit with an exponential slowdown.

My take on the origins of the field is that defining Quantum Computers was an outgrowth of trying to get at a "quantum observer" to make some headway in "understanding" quantum physics.

I also feel it's a way to make the many-worlds interpretation of Quantum Physics more substantial - I mean, when you have a working QC, if the results of the computation isn't arising from interference between the many worlds, where are the calculations being done?

You probably ought to be more skeptical about nuclear fusion than quantum computing, to be perfectly honest: https://lucian.uchicago.edu/blogs/atomicage/2022/12/17/clean...

tl;dr: Quantum computers are not only interesting for their practical applications, but also for furthering our understanding of Quantum mechanics.

I had a similar feeling until I took a course on 'Theory of Quantum Information'.It cleared up some reservations I had about problems of Quantum Computing, e.g. error correction, and showed, that these are solvable (at least in theory).

But more important, the lectures made it clear for me, that information is a physical quantity not less real than e.g. energy and that treating it as a non-physical "auxiliary" variable is core to many of the perceived paradoxes of QM.Also Quantum Computers try to make Quantum coherence work outside of closed laboratory systems, which not only pushes the boundaries of experimental physics, but also leads to interesting theoretical problems, since open systems don't exhibit a unitary time translation and are therefore not governed by the Schrödinger equation.

These things together helped to spark a new interest in looking at the foundational questions of Quantum mechanics after decades of "Shut up and calculate".

Watrous's notes are the best resource I know for learning quantum computing: https://cs.uwaterloo.ca/~watrous/QC-notes/QC-notes.pdf

Yes, using the Shor algorithm and this was achieved in... 2012 ([1], from Wikipedia).

Larger cases of quantum factorization since then used non-scalable algorithms.

[1] https://arxiv.org/abs/1111.4147

Intel reported being able to factor 35 three out of ten times or thereabouts in spring, iirc

noise is hell in QC, sadly

Honestly, you also have to consider the sculptures they are.

I’m joking, but they absolutely had a different designer than the colliders

They really are quite beautiful. At least when they aren't submerged in liquid nitrogen. I like this picture since you probably can see what it also looks like when enclosed:

https://spectrum.ieee.org/media-library/less-than-p-greater-...

Think of quantum computing progress like this. There were fundamental problems keeping it from working, and those have been largely overcome. Now we have a path and we are really just improving the technology until it’s useful, and that path is very clear. It’s just a matter of going down it, which is what’s really happening.

The general consensus is that there will be a fault tolerant quantum computer by 2035-2040. So like silicon, it is going to take us a while to get there, but we are only talking about 11-16 years or so according to the best experts in the field (remember AI has similar longer terms before it rapidly accelerated).

And quantum computers are profoundly powerful — as in civilization changing computer power.

Quantium computers feel like they are in the mechanical computer era, they still need the equivalent of the electronic, thermionic and semiconductor revolutions to be useful.

My gut tells me they may never end up being very useful. something about the intrinsic downsides to any analog computer. which if you are not familiar, is that analog computer components must be far more precise than their digital counterparts.

If you really wanted to get pedantic you could call our everyday semiconductor based computers "quantum" as they operate on a distinctly quantum phenomena. However the term appears to be reserved for devices that are able to exploit analog quantum outcomes.

My gut tells me they may never end up being very useful. something about the intrinsic downsides to any analog computer. which if you are not familiar, is that analog computer components must be far more precise than their digital counterparts.

Counterpoint: some of the most interesting classical algorithms, such as transformer-based neural nets, appear to work well with far less precision than expected. For that matter, the first perceptrons were analog... and of course, so is the one that everybody is trying to emulate.

As a measure of signal-to-noise ratio, numerical precision in the classical domain may correspond to other attributes in other domains. It may not be a productive thing to focus on.

> and that path is very clear

How is the time of this clear path measured? I actually have the exact same question about fusion reactors (such as ITER with results planned decades ahead of time)

What could speed up those decades? Letting more people work on it at the same time? Throwing more money at it? (e.g. for ITER, are we just waiting for them to pour concrete faster?)

Or are these decades of planning also waiting for other technologies to appear in 10, 20, ... years? (Which would be some kind of unclear uncertainty after all)

One area in quantum that’s getting a lot of attention is dealing with noise. (Basically you want to decrease the number of qubits needed to make a reliable logical qubit to a reasonable number.)

This has turned out to be a big problem (with some calling it potentially intractable.) But a lot of progress is being made in this area. There’s a good article in the current issue of Technology Review.) This is one area that could lead to outsized advances.

More money and people can usually move but there’s a limit to which just throwing money at a problem can accelerate the outcome in part because of all the complex interconnection, some not even appreciated. Think ML with GPUs.

With ITER (and tokomaks more generally), the original assumption was that scaling laws would enable you to reach breakeven just by making the thing big enough. The problem is that "big enough" means throwing $25B at it, and when that's spread across a committee of a dozen countries, that's not a recipe for getting anything done quickly.

With quantum error correction, we're not talking a $25B facility with many competing hands in the pie. Instead, we're talking about improving the spatial and timing precision of RF, optics, and photonic hardware. Unlike fusion, where basically everything needs to be a custom job, there are established industries around these quantum-adjacent technologies with decades of accumulated know-how and plenty of low-hanging fruit to get most of, if not all of the way there.

Well one important metric is this one:

https://www.scmp.com/news/china/science/article/3246752/chin...

Read the quotes. Global financial systems are trying to harden themselves with quantum computers in anticipation of forecast technology advancements.

Maybe this piece by 60 minutes is worth watching too to get a better sense:

https://youtu.be/K4ssT6Dzmnw?si=FseoJawRowldaaPH

It directly addresses technology progress and explains the basics.

But that is just hedging the bets - it does not show that the path to practical quantum computers at scale to handle real problems is feasible.

We see customers getting requirement requests for using PQ safe crypto algorithms to be used in systems that will be used 30+ years. But that too is also just hedging the bets.

Quantum Key Distribution is feasible - esp for systems that don't need to move and where you own the medium. And can spend the 1000+ kUSD these machines costs. For most use cases (for example between a client and a server setting up a secure session over Internet) these machines does not solve anything. But they sure are very cool to own and deploy.

Assuming it's true that there's some clear path in the quantum computing case, then ITER is rather different because there's currently no clear path to commercially viable nuclear fusion.

ITER itself isn't even intended to achieve that. It's a research facility to test and demonstrate large-scale fusion in a tokamak. It's not even designed to generate electricity as output - just heat energy.

If ITER ends up demonstrating that its approach could be further improved in the direction of a commercial design - which is not at all clear (see reference below) - they'll have to start a new project to achieve that. And you can expect that project to take even more money and quite probably a longer time, since there will be a lot of advances that will still need to be made.

You might be interested to read "ITER is a showcase … for the drawbacks of fusion energy": https://thebulletin.org/2018/02/iter-is-a-showcase-for-the-d... . I recommend reading the whole article.

> Letting more people work on it at the same time? Throwing more money at it?

There are 6500 people all told that work on ITER, and its total funding is projected to reach as much as $65 billion. More people and money for ITER is almost certainly not the answer.

But other groups are also working on it, including 30+ fusion startups (see e.g. https://app.dealroom.co/lists/25184). However, ITER's funding is about 10-15 times that of all those startups combined. The problem with the startup approach is they're more likely to be killed if they don't achieve results.

> Or are these decades of planning also waiting for other technologies to appear in 10, 20, ... years?

For fusion, that's certainly the case. Despite the existence of startups, which perhaps reflect the existence of either altruistic and/or gullible VCs, fusion power is still very much a research project. It's not even certain that commercial fusion power will ever be viable - the article I linked helps explain that.

This sounds very interesting, and at least to me very much news. Can you please provide some links that show that the path from what we have today in terms of number of qubits, handling of noise at the number of qubits, and keeping the qubits in a entanglement state long enough to, for example, factor a RSA 4096 key is clear and straight forward.

We are talking 4,5,6 orders of magnitude for several vital physical properties. Silicon scaling the last 40 years seems to me as being much easier - and that have required enormous amount of R&D including physical theory, and is bumping into physical limits. We have gone from say 500 nm to 5 nm, basically three orders of magnitude.

What makes it so clear that quantum computer technology are even possible to scale?

And yes, Quantum computers may be profoundly powerful someday, for a set of problems. Not in general.

And quantum computers are profoundly powerful — as in civilization changing computer power.

How so?

The main promise/fear I hear about is breaking cryptography, but then it sounds like we can switch to new post-quantum encryption and we’ll be essentially in the same place as before.

As I understand it, quantum computers will offer tremendous speed on the "traveling salesman" problem, and otherwise vastly improve questions of efficient resource scheduling and optimization.

https://en.m.wikipedia.org/wiki/Travelling_salesman_problem

As that article says, approximate classical algorithms "can find solutions for extremely large problems (millions of cities) within a reasonable time which are with a high probability just 2–3% away from the optimal solution."

Although faster quantum algorithms for the exact solution exist, I see no reason why this would result in "vastly" improved efficiency.

AFAIK, this is basically the opposite of how it probably will pan out.

Some organsations MAY someday have Quantum Computers capable of cracking some asymmetric keys (RSA). All of us will have access to cryptographic algorithms (inlcuding open source implementations) that can't be cracked by the Quantum Computers. These algorithms are executed on our normal, classical computers.

We already have a first set of post quantum computer cryptographic algorithms. See the NIST competition for example. Their implementations still looks immature (some have fallen against classical attacks, including side channel issues). But we'll get there. We will also have to (yet again) deal with having algorithm agility, which adds complexity.

Quantum Computers are not magical things. We can (and do) know type of problems, algorithms, operations they should be better than classical computers to solve (called quantum supremacy). Shor's algorithm, which provides exponential speedup of cracking RSA key is an example of such an algorithm.

What we so far don't consider that much is the feasibility to perform these algorithms in reality. That is, we look at the asymptotic speedup, not the practical speedup.

There is a really good paper by people from the MS PQ team that looked at this. Highly recommended:

https://cacm.acm.org/magazines/2023/5/272276-disentangling-h...

Shor's algorithm also solves the discrete logarithm problem, so it also theoretically breaks Elliptic Curve Diffie-Hellman. That is, it breaks both of the main types of key-exchange algorithms (as well as SRP) in use today with TLS. (Not PSK, although that in turn isn't usable in a limited-trust environment like the broader internet.)

My understanding is that any use of post-quantum crypto today is layered on top of existing crypto (so breaking one is insufficient to compromise the channel), in large part due to the relative immaturity of the field that you've mentioned.

The threat model here is not necessarily that we expect anyone to have sufficiently capable quantum computers (and/or algorithmic breakthroughs) in the immediate future, but that a potential adversary might store some encrypted comms that they can later decrypt. Perfect forward secrecy doesn't protect you against an algorithmic break.

No, post-quantum cryptography is focused on methods where encryption can be done with classical computers.

Post-quantum methods have other disadvantages, primarily that they haven't been studied as deeply as traditional methods (especially RSA) so they may be vulnerable to classes of attack we haven't thought of yet.

https://en.m.wikipedia.org/wiki/Post-quantum_cryptography

Fusion is now a reality. Commercializing it is the next challenge, but we have working fusion:

https://www.energy.gov/articles/doe-national-laboratory-make...

You can buy a quantum computer today. They are reality:

https://quantumzeitgeist.com/how-to-buy-a-quantum-computer/

They will likely only get better from here. Too early to take that promise to the bank, but human progress isn’t generally made by pessimists.To what level, we’ll see. They don’t call it the frontiers of innovation because of the security of outcome involved.

Public transportation is a public good and doesn’t need to be profitable. If it needed to be profitable we have a word for that: private transportation. Maglev trains are obscenely expensive to build and may never be profitable.

Brightline is showing that profitable high speed rail may be a commercial reality worth pursuing however. People bag on them, but they have already launched their first line and are working on their second. Tons of people betting against them and my goodness were there so many naysayers from day one, yet they are getting it done.

Also:

AI is a reality. That was science fiction.

Wearable computers are a reality. Dick Tracy stuff. Also science fiction.

Virtual reality is a reality. Also science fiction.

Electric cars were a fantasty that had so many headwinds and scaling problems they were called impractical, but now in just a decade or so they are commonplace.

Fully automated electronic pilots for both fixed wing and helicopters was science fiction just a few decades ago. Not autopilots but pilot replacements. Today: commercial reality.

Just in time factories with robots running the lines were science fiction until just a few decades ago. Now people use old ones for making art and many factories are deeply automated headed towards even greater automation.

Drones were also science fiction (the first cameras were on kites). Now they are so common we have to ban them from places.

Everyone dogs on the progress these days, especially big projects, but we keep making progress in big ways and the negativity is just unjustified. It’s just that the progress is adsorbed into society in such a way that people don’t realize how remarkable their every day things are.

We have actually had working fusion since the 1960s, it just doesn't reach break-even.

https://en.m.wikipedia.org/wiki/Fusor

I have been confused by Quantum Computing and have been reading and watching as much as possible on the topic. I can never seem to grasp the potential. I keep thinking about classical problems. Like what if I multiply a real number by a number consisting of qbits? Or what happens to bitwise operations with qbits?

Then, something I read to the effect that we need to stop thinking of QC as solving classical problems but solving different problems at least reassured me I wasn't too dumb to get it.

The biggest application of quantum computers is simulating quantum processes - so physical and chemical simulations. Simulating superposition and entanglement on a classical computer is extremely demanding, on a QC it comes naturally.

It most probably will never replace classical computers.

I recommend this book: Q is for Quantum https://www.amazon.co.uk/dp/0999063502?ref=ppx_pop_mob_ap_sh...

Direct answer, QC's are shown to exist at some scale in our universe. They may not get larger than 1000 qbits, but they also might.

However so far the most practical thing that QC has done is inspire new classical algorithms for some problems, notably in recommendation.

It's early. And companies and governments achieving some sort of competitive advantage would be playing these applications close to their chest to keep their advantage.

QC has led to significant prevention of loss-of-life, loss-of-equipment, and territory gains in battlefield applications. Encrypt/ Decrpyt was already mentioned as a use case. None of these dual-use practical applications are public.

QC is good at "analog" computing: applications where you are more interested in potentials than in 0s and 1s. That lends itself to material design problems. There are applications in battery design and catalytic converter. F1 teams have some interesting fluid dynamics and laminar flow problems where QC was instrumental to test hunches fast. It's not so much about exact compute of solutions, but how to verify a first guess fast to then use traditional software. One could argue this is a niche application, but not if you consider marketing and streaming rights and advertisem*nt impact. A similar approach is used for drug discovery.

None of these "practical" applications are talked about - they are a competitive advantage of commercial enterprises. But if you care for a proxy you could look at any significant hires 1-2 years ago with PhDs, compute, math experience in relevant QC fields. And you would be surprised to see some companies hiring more than 20-30 people in that field (and not just Google or Amazon etc.). That's an FTE expense that could just be hedging of a large company; but could also be product design; and is definitely more than a test balloon or R&D pet project. Some of these companies are known for industrial adhesives, specialty cement, or "green" base oils for lubrication and cooling and cutting. so not all tech companies or big pharma.

I don't think Quantum Computing has any significant practical applications yet.*

But then again I'd say that it doesn't need to.

From a theoretical perspective QC improves our understanding of the physics of computation by bridging the gap between our classical theories of computation and our quantum theories of physics.

QC gives us access to "quantum observers" to allow us to take our understanding of what Quantum Physics "means" further.

QC lends some support to the many-worlds interpretation of Quantum Physics - Where else is the computation being done if we are retrieving answers from their interferences?

From a physical perspective we are learning a lot tackling the hard challenges of realizing them.

Even if we never build "practical" Quantum Computers, experimentally it would still be worth building them as physics experiments.

And if we can build real practical machines they might have significant advantages in some practical fields like quantum physics simulations.

* Unless somewhere the NSA (or their Chinese equivalent) are breaking cryptography using some moonshot machine.

This was posted recently here and i found it very interesting

https://spectrum.ieee.org/quantum-computing-skeptics

Related HN discussion

https://news.ycombinator.com/item?id=38745970

Quantum supremacy: https://en.wikipedia.org/wiki/Quantum_supremacy

"Scott’s Supreme Quantum Supremacy FAQ" (2019) https://news.ycombinator.com/item?id=21053405 https://www.scottaaronson.com/blog/?p=4317

/? quantum supremacy 2024: https://www.google.com/search?q=quantum+supremacy+2024

/? practical quantum advantage: https://www.google.com/search?q=quantum+advantage

if one compares quantum computer progress to normal computer progress, then we

a) just barely exited the era of theoretics-only (19th century, Babbage)

b) just barely entered era of analogue devices-only (1900s, beginning of vacuum lamps)

c) still a decade away from barely practical computers (1940s, Turing and germans)

if you want to learn "what will be practical once usable quantum computer appears", look at https://quantumalgorithmzoo.org/

> The 2022 Nobel confirms reality is non-local

No, it doesn’t do that, the public presentations around it are a bit misleading. What Bell’s theorem says is that QM is incompatible with local hidden-variables theories. In the Many Worlds theory, however, local realism is retained despite Bell’s theorem: https://physics.stackexchange.com/a/573382. My guess is that Einstein would have come around to that view, as it fits his philosophical thinking.

That being said, the 2022 Nobel price was for the experiments conducted over a time span from 1972 to 2015, confirming Bell’s 1964 theorem. As such, there aren’t any recent major new insights. The latest experiments closed some remaining loopholes, but basically only confirmed what had already been generally assumed for a long time.

All of this doesn’t change what QM predicts. It just limits the space of possible underlying theories that would explain QM.

Post-quantum cryptography.

Even if QC hasn't achieved anything tangible yet, the side effects ofit looming are pushing things on.

Nothing conventional or practical in your daily use.

However there are scientific scenarios where superpositions and qubits come into play. They can also decrypt any form cryptology faster than any conventional computer system. The problem is that they are not as energy efficient as a conventional system.

it got people to finally move away from RSA.

besides that, it's mostly quackery by pretending code to impossible low temperature calibration and sensors don't exist.

The RSA thing requires further exposition. If someone invents a quantum computer that can do Shor's algorithm, exponential curves would be the most at risk. Exponential curves are fairly popular right now.

Not that there is anything really wrong with RSA...

This isn't intuitive to me. Isn't RSA actually more difficult to break with quantum computing than comparable ecc key strengths, simply due to the larger amount of data involved?

Put differently, I assumed that factorization of a 3072 bit number has a higher security margin than discrete logarithm on a 256 bit point on a curve. Is that not so?

It’ll be like AI.

Where it’ll be under active development for 50+ years, without any major application.

Then “ChatGPT” will come along and be the big unlock for its area.

Quantum annealing

https://en.wikipedia.org/wiki/D-Wave_Systems

Quantum annealing > D-Wave implementations : https://en.wikipedia.org/wiki/Quantum_annealing#D-Wave_imple... :

> In December 2015, Google announced that the D-Wave 2X outperforms both simulated annealing and Quantum Monte Carlo by up to a factor of 100,000,000 on a set of hard optimization problems.[35]

Timeline of quantum computing and communication > 2023: https://en.wikipedia.org/wiki/Timeline_of_quantum_computing_... :

> 14 June [2023] – IBM computer scientists report that a quantum computer produced better results for a physics problem than a conventional supercomputer.[365][366] :

"Evidence for the utility of quantum computing before fault tolerance" (2023) : https://www.nature.com/articles/s41586-023-06096-3 :

> Quantum advantage can be approached in two steps: first, by demonstrating the ability of existing devices to perform accurate computations at a scale that lies beyond brute-force classical simulation, and second by finding problems with associated quantum circuits that derive an advantage from these devices. Here we focus on taking the first step and do not aim to implement quantum circuits for problems with proven speed-ups.

Quantum Algorithm Zoo lists speedups by algorithm; https://quantumalgorithmzoo.org/

https://westurner.github.io/hnlog/#q-tequila ctrl-f "tequila" :

From "Computational Chemistry Using PyTorch" https://news.ycombinator.com/item?id=36825353 :

> Tequila wraps Psi4, Madness, and/or PySCF for Quantum Chemistry with Expectation Values: https://github.com/tequilahub/tequila#quantumchemistry

And from https://github.com/tequilahub/tequila#quantum-backends :

> Quantum Backends currently supported by tequilahub/tequila: Qulacs, Qibo, Qiskit, Cirq (SymPy), PyQuil, QLM / myQLM

tequilahub/tequila-tutorials: https://github.com/tequilahub/tequila-tutorials

- tequila-tutorials/BasicUsage.ipynb: https://github.com/tequilahub/tequila-tutorials/blob/main/Ba...

- tequila-tutorials/Quantum_Calculator.ipynb : https://github.com/tequilahub/tequila-tutorials/blob/main/Qu...

Practical Q12 QIS STEM learning exercise ideas: https://news.ycombinator.com/item?id=38687045#38801630

The Bombe was used to break the encryption and read German army and navy cypher traffic. It was kept secret at all costs, up to and including sometimes _not using its results_ for fear of tipping off the Germans, even if this resulted in loss of life and shipping in the Atlantic.

Anyone far enough ahead to have a functional quantum computer powerful enough to mine all the Bitcoin, would instead keep it secret and use it to read foreign government encryption etc...

Emptying the blockchain into your bank account doesn't move the needle for anyone at that level.