8 ms·
Dumping VM memory contents is pretty trivial.
by the_rectifier 5y ago
Dumping VM memory contents is pretty trivial.
- deleted 5y ago[deleted]
- 10000truths 5y agoAMD's SEV and Intel's SGX should protect from this. Of course, you still have to take the VPS provider's word that they've enabled them on their CPUs.
- closeparen 5y agoThat is for applications specifically written to compute on the secure element, no?
- gruez 5y agoThe parent poster probably got his terminology confused. AFAIK SGX runs on the secure element, SEV is for isolating the VM from the host.
- gruez 5y ago...which is approximately zero VPS providers. I haven't seen them advertised outside of specialty azure/aws instance types.
- d110af5ccf 5y ago> you still have to take the VPS provider's word that they've enabled them No, you don't. Both of those implementations provide hardware attestation via vendor keys securely embedded in the CPU. I have no idea if any providers currently make such features available though.