3 ms·
Arm Confidential Compute Architecture/Realms seem like both a potentially significant security tool and a good way to keep a device owner from daring to look at
by nieve 6y ago
Arm Confidential Compute Architecture/Realms seem like both a potentially significant security tool and a good way to keep a device owner from daring to look at their own data or what their device is doing.
- titzer 6y agoThis is more aimed at cloud providers, specifically so they can offer customers who don't want their cloud provider spying on them some privacy. Clients could be governments who want to outsource their datacenters but run sensitive computations.
- judge2020 6y agoSure, but hopefully this isn't enabled for consumer CPUs anytime soon. This is like how EPYC processors (IIRC since Zen 2) have 'platform secure boot' where, once a CPU is in a certain motherboard, the CPU can't be used on a different vendor's boards. This definitely increases security for the cloud providers who don't want to have some 0-day compromise a bunch of customers, even if it means the market for used EPYC cpus will be smaller and/or require sellers list the specific board the CPU used to be in. https://www.servethehome.com/amd-psb-vendor-locks-epyc-cpus-for-enhanced-security-at-a-cost/ https://www.servethehome.com/amd-psb-vendor-locks-epyc-cpus-... https://blog.cloudflare.com/anchoring-trust-a-hardware-secure-boot-story/ https://blog.cloudflare.com/anchoring-trust-a-hardware-secur...