> How many times has SGX been broken now? Quite a few. L1TF/Foreshadow was pretty catastrophic, and Plundervolt was just funny. In name and execution. Plus

> How many times has SGX been broken now? Quite a few. L1TF/Foreshadow was pretty catastrophic, and Plundervolt was just funny. In name and execution. Plus various others. > When (if ever) could a reasonable person think "ok, now they must have got rid of all the vulnerabilities, time to trust this!" ? Never. Nor should one trust Intel chips for sensitive computations, given how badly they leak and how badly Intel seems to be at reasoning about this. I'm getting rid of the last of my Intel systems this month (beyond random compute nodes for BOINC stuff I run them with 'mitigations=off' for max performance because they have literally nothing at all sensitive on them, not even passwords - I use different passwords for them).