The creator of the world\u2019s first 3D-printed gun<\/a> claims he\u2019s developed a way to thwart government-mandated software meant to block 3D printers from making firearms<\/a>. It\u2019s an opening volley in what\u2019s shaping up to be an evolving battle between regulators trying to stem the tide of ghost guns and individuals trying to create workarounds.<\/p>\n<\/div>\n Cody Wilson, who claims to have made the detection-defying tool, is calling it \u201cHochulization\u201d<\/a> as a direct jab at New York Gov. Kathy Hochul, who pushed through the nation\u2019s first law mandating gun file detection software<\/a> on new printers earlier this year. \u201cNew York is trying to reach into the internet and police how open-source 3D printing is done,\u201d Wilson, who\u2019s based out of Austin, Texas, told The Verge<\/em>. \u201cI think of it as a self-defense measure.\u201d<\/p>\n<\/div>\n The tool is designed to break a relatively simple approach to a 3D-printed gun ban. Wilson\u2019s company, Defense Distributed, runs DEFCAD<\/a>, the world\u2019s largest 3D gun file repository, which he says hosts over 200,000 files of gun designs and components, such as suppressors. Each of those files can be identified by a hash, a unique string of numbers that\u2019s created by running the file through an algorithm. In theory, a gun file detection system that uses a hashing-based identification method would look for those exact hashes to determine whether a file is a potential gun, flag it, and prevent it from printing.<\/p>\n<\/div>\n Hochulization mucks up that process by automatically changing those hashes. It adds a series of bytes to each file that changes the hash without altering the function of the end product. A 3D-printed suppressor or gun, in other words, would still work as intended. \u201cHochulizaiton is a de minimis policy to change the hash of every file that gets created and downloaded to where there is never going to be a complete library of hashes,\u201d Wilson says. <\/em><\/p>\n<\/div>\n Wilson says he wants to apply the Hochulization treatment to all files hosted on DEFCAD by default as a means of \u201cself-defense\u201d against growing calls for gun detection software, which he describes as invasive digital surveillance. Wilson says he will make the tool available to DEFCAD users, though he says he also intends to make it open source, which would let an individual user with a gun file apply the tool to scramble the hash and potentially sidestep detection.<\/p>\n<\/div>\n \u201cI think all the files in the repository, the 3D files anyway, should be Hochulized,\u201d he adds. \u201cAnd so that is what we\u2019ll do.\u201d He claims he has begun this process.<\/p>\n<\/div>\n Wilson\u2019s approach is an early indicator of the resistance to 3D-print-blocking tech. In this case, the momentum is coming from a Second Amendment advocate, but that might not always be the case. Groups of makers, digital rights experts<\/a>, and members of the entertainment industry who aren\u2019t focused on guns have all spoken out against the tech<\/a>, expressing fears that requiring file scanning on printers introduces a new level of digital surveillance into the process that could limit what everyone can create.<\/p>\n<\/div>\n 3D-printed firearms are growing in number but remain an evolving public threat. In 2021, the New York Police Department confiscated just one 3D-printed gun<\/a>. That jumped to 109 in 2024. Prominent gun policy group Everytown found similar upticks<\/a> across 20 other cities. Still, when compared with the percentage of conventional firearms confiscated around the country, 3D-printed models remain comparatively small<\/a>. The total number of firearms in the US has been estimated<\/a> to outnumber people<\/a>.<\/p>\n<\/div>\n But 3D-printed gun technology has also come a long way since Wilson first printed his single-shot \u201cLiberator\u201d in 2013<\/a>. Today, models like the FGC-9 can fire multiple high-velocity rounds without breaking and have been found in the hands of neo-Nazi cells<\/a> in Europe and rebel groups fighting Myanmar\u2019s military junta<\/a>. 3D-printed gun components, like switches that can turn a single-fire conventional firearm into a machine gun or suppressors that make shots easier to conceal, are arguably even more dangerous. These tools are typically illegal or require special licenses to acquire. 3D printing offers a workaround. Luigi Mangione<\/a>, who admitted to shooting and killing UnitedHealthcare CEO Brian Thompson and is awaiting sentencing, allegedly used a partially 3D-printed Glock-style pistol frame<\/a> and a 3D-printed suppressor.<\/p>\n<\/div>\n Policymakers and gun control advocates argue cases like this demonstrate a glaring gap in the legal system. People with prior felony convictions and others who aren\u2019t legally allowed to own guns can do so anyway with the help of a 3D printer. And while many states regulate the making and selling of so-called \u201cghost guns,\u201d actually enforcing those laws is notoriously difficult. This new approach, which requires 3D printers to install mandatory file-blocking software, attempts to close that gap by stopping a print before it ever starts. Industry experts are still debating whether that\u2019s technically feasible at scale. Gov. Hochul, who pushed through the country\u2019s first law mandating print-blocking software on new printers as part of the state\u2019s FY 2027 budget<\/a>, says it\u2019s necessary to close what she calls a black-market \u201cplastic pipeline<\/a>.\u201d<\/p>\n<\/div>\n Hochul\u2019s office did not respond to our request for comment regarding Wilson\u2019s Hochulization workaround.<\/p>\n<\/div>\n New York isn\u2019t alone. A similar bill in California, AB 2047<\/a>, is gaining momentum and is advancing to the Senate floor for a vote. Like in New York, this bill would require new printers manufactured or sold in the state to be equipped with print-blocking software. The state Department of Justice would publish a roster of compliant printer models, and those not on the list would be banned from sale or transfer in the state starting in December 2029.<\/p>\n<\/div>\n A spokesperson for California Assemblymember Rebecca Bauer-Kahan, who introduced and coauthored AB 2047, declined to comment when asked about Wilson\u2019s project.<\/p>\n<\/div>\n Neither of these efforts explicitly details what print-blocking software should look like. That\u2019s being left up to groups of industry experts with backgrounds in manufacturing technology, artificial intelligence, firearms regulation, and other relevant fields. A purely hash-matching approach would limit the number of non-guns mistakenly identified as guns, but as Wilson\u2019s project shows, it may be trivially easy to bypass. More expansive approaches that use AI to analyze a file\u2019s geometry and predict whether it\u2019s a gun would almost certainly prevent more guns from being printed, but they also risk introducing more false positives.<\/p>\n<\/div>\n Wilson\u2019s hoping his tool will make its way into those working group conversations. By showing just how simple it is to complicate a purely hashing-based approach, he\u2019s essentially trying to force policymakers\u2019 hands into choosing between a more aggressive scanning scheme or the status quo of nothing.<\/p>\n<\/div>\n \u201cYou are going to have to do more than create a database of known files and check against hashes because that\u2019s too easy to defeat,\u201d Wilson says.<\/p>\n<\/div>\n Dartmouth College associate professor of engineering Solomon Diamond<\/a> told The Verge <\/em>Hochulization would likely work on a technical level to bypass a hash-based detection model. Still, he said that doesn\u2019t necessarily make the approach useless as a policy path. In reality, it\u2019s not clear that every 3D printer user would go the extra step to change a hash. Downloading gun files from DEFCAD also requires setting up an account and linking an email address, which is another barrier to entry. The hashing approach, in other words, is better than nothing and might stop the casual, less motivated user from downloading a gun.<\/p>\n<\/div>\n Moving beyond hash matching, Wilson says his team found other ways to bypass more sophisticated detection using \u201cadversarial noise.\u201d To do this, his team first created their own AI detection model designed to classify guns and gun parts, trained partly on both public and non-public files from DEFCAD\u2019s database. They based their model on claims made by other companies, such as the Spain-based Print&Go<\/a>, which is working with lawmakers in New York and California.<\/p>\n<\/div>\n Wilson claims he was able to get files past their own system using techniques like re-saving the same gun part as a slightly different mesh (a digital representation of the object\u2019s surface) or adding \u201ca small extra lump of unused geometry.\u201d Overall, Wilson says their gun detection system, even when trained on high-quality data, still had a 30 percent false positive rate. He says that false positives speak to issues inherent to more prediction-based systems.<\/p>\n<\/div>\n Wilson approaches the scanning debate as a self-described crypto-anarchist<\/a> and an aggressive Second Amendment advocate. He\u2019s a leading voice in arguing that gun files should be considered constitutionally protected speech<\/a> under the First Amendment. He also created the platform Hatreon as an alternative to Patreon to thwart its speech policies, a platform that attracted extremists, white supremacists<\/a>, and neo-Nazis<\/a> until it was shut down in 2018<\/a>.<\/p>\n<\/div>\n But concerns over this proposed change to the way 3D printing works aren\u2019t limited to gun owners. Makers and hobbyists previously told The Verge<\/em><\/a> they fear this new paradigm will falsely label non-guns, like this e-reader case<\/a>, as dangerous weapons and limit their freedom of expression in the process. Others are concerned a process that earnestly starts with gun file increments could be expanded by corporations looking to enforce IP and copyright protections.<\/p>\n<\/div>\n Wilson isn\u2019t new when it comes to picking fights over 3D-printed gun laws. After posting the first Liberator files online, the State Department ordered him to remove them<\/a> and threatened him with jail time<\/a> for allegedly violating ITAR export-control rules. Wilson and Defense Distributed sued the agency, claiming they attempted to stop him from publishing computer code, which he says is constitutionally protected under the First Amendment. That set in motion a complex web of legal fights over the broad claim that the gun file codes aren\u2019t constitutionally protected speech, an issue that\u2019s still being debated in courts.<\/p>\n<\/div>\n![\"Image:](\"https:\/\/platform.theverge.com\/wp-content\/uploads\/sites\/2\/2026\/08\/IMG_9601.jpg?quality=90&strip=all&crop=0%2C0%2C100%2C100&w=2400\"\/)
<\/a><\/div>\n<\/div>\n<\/div>\n\n