4 ms·
Enarx/wasmcloud are pretty similar to this, and are being supported by the Linux Foundation. This design also doesn't solve supply chain issues: fundamentally y
by chc4 3y ago
Enarx/wasmcloud are pretty similar to this, and are being supported by the Linux Foundation. This design also doesn't solve supply chain issues: fundamentally you don't have a way of telling if the bytes you're running in the enclave, even though they were attested to be what was supplied by the developer, are free of supply chain backdoors. You would have attestations that you are running SolarWinds, not that the SolarWinds software you're running is free of vulnerabilities. Transiently hacking machines is also really APTs need for network penetration, since once you do that you achieve network persistence on different boxes or escape the attested services to some priviledged Exchange server on the LAN.
- mike_hearn 3y agoThe idea here is that SolarWinds itself would have used it to verify that their TeamCity instance is in fact running unmodified TeamCity with configs that track back to versioned files. They could then provide a static proof of that to their customers, who then build them into their own chains of attestation. Yes, if all you need to do is an SSRF on some intermediary server to pivot to some other server, it doesn't help ... unless the target server is also being attested and regularly rebooted back into a clean state. It's all just bricks in the wall, at the end.