2016.04.13 00:47:15 (720020483677298688) from Daniel J. Bernstein:
Goldwasser and Kalai claimed X1. I gave easy counterexample to X1. Apparently they then switched to X2. But X2 is just as easy to disprove!
2016.04.13 00:49:50 (720021136239628289) from Daniel J. Bernstein:
Clearly Goldwasser and Kalai have also managed to confuse Chatterjee, Koblitz, Menezes, and Sarkar. C'mon, people, this is not a hard issue.
2016.04.13 00:54:41 (720022355888762881) from Daniel J. Bernstein:
Take, e.g., discrete logs in the multiplicative group of \Z/m where m+1=2^2^k. This problem has full worst-case-to-average-case reductions.