4 ms·

I am interested in what Yishan has to say about Amazon AWS https://www.reddit.com/r/yishan/comments/4cub02/transparency_reports_and_subpoenas_eli5/ https://www

• regularfry 11y ago
  Until we get workable homomorphic encryption, the bit about encrypted machine images is (charitably) optimistic. I wrote about this a year ago: http://blackkettle.org/blog/2015/02/19/youve-got-to-trust-your-vm-host/ http://blackkettle.org/blog/2015/02/19/youve-got-to-trust-yo...
  • anonymousDan 11y ago
    Unless you're willing to trust the hardware manufacturer, at which point something like Intel SGX could be a runner.
    • regularfry 11y ago
      You also have to trust your VM host not to provide an emulated SGX (which is what https://github.com/sslab-gatech/opensgx https://github.com/sslab-gatech/opensgx is, unless I'm very much mistaken).
      • anonymousDan 11y ago
        I think you're mistaken. Intel provides infrastructure to ensure you're talking to an enclave running on an actual Intel machine, and you can then do a remote attestation to verify the contents of that enclave.
• CaptSpify 11y ago
  I thought this was well known already? if you send your data to someone else's server (even if you are renting it), there is no way you can be reasonably sure it will remain untouched.