> subject to key-dumping Not if you are running a skylake CPU with the new SGX instructions that encrypt RAM. https://software.intel.com/en-us/blogs/2013/09/2

> subject to key-dumping Not if you are running a skylake CPU with the new SGX instructions that encrypt RAM. https://software.intel.com/en-us/blogs/2013/09/26/protecting-application-secrets-with-intel-sgx https://software.intel.com/en-us/blogs/2013/09/26/protecting... 6, Enable software vendors to deliver trusted applications and updates 8. Enable applications to define secure regions of code and data that maintain confidentiality even when an attacker has physical control of the platform and can conduct direct attacks on memory. By "trusted", Intel almost certainly means "trusted computing"/"trusted execution environment". It took a decade, but Palladium (NGSCB) is here. Firefox already caved and ships the EME plugin, so obviously they would cave to an image-DRM plugin as well. /* this is why it's so incre4dibly important to take a hard-line stance against DRM; it's a lot harder to reverse course once you cave and start accepting some DRM */