julesdrean

6 ms·

1. 1.▲
   by julesdrean 7mo ago

   Apple does something very similar with Apple Private Cloud Compute. It's interesting cause their isolation argument is different. For instance, memory is not encrypted (so weaker protection against physical attacks), but they measure a
2. 2.▲
   by julesdrean 7mo ago

   The provider cannot chose the attestation that is sent, the hardware assembles the attestation through mechanisms that it cannot control. That why it's called "trusted hardware" technology, you only need to trust the hardware
3. 3.▲
   Masquerade MCP: Redact. Replace. Retain Control(github.com)

   1 points by julesdrean 1y ago|0 comments
4. 4.▲
   by julesdrean 1y ago

   Love Open Titan! RISC-V all the way babe! The team is bunker: several of my labmates now work there
5. 5.▲
   by julesdrean 1y ago

   Azure and GCP offer Confidential VMs which removes trust from the cloud providers. We’re trying to also remove trust in the service provider (aka ourselves). One example is that when you use Azure or GCP, by default, the service operator ca
6. 6.▲
   by julesdrean 1y ago

   Check out incredible work by Bunnie to make this possible at home https://www.bunniestudios.com/blog/2024/iris-infra-red-in-si...
7. 7.▲
   by julesdrean 1y ago

   Yes Azure has! They have very different trust assumptions though. We wrote about this here https://tinfoil.sh/blog/2025-01-30-how-do-we-compare