2 ms·
UX is definitely an issue. One interesting thing coming up is confidential computing (where basically the RAM and registers of the workload are encrypted so th
by rwmj 3y ago
UX is definitely an issue. One interesting thing coming up is confidential computing (where basically the RAM and registers of the workload are encrypted so they hypervisor cannot see them). The hardware implementations are all based around VMs, so they require you to run a full kernel, even if what you're doing is basically a confidential container workload. We think there might be a niche for unikernels here.
- blueflow 3y ago> where basically the RAM and registers of the workload are encrypted so they hypervisor cannot see them I call BS. There is no way to hide code from the platform it runs on.
- osigurdson 3y agoOther than homomorphic encryption of course. https://en.wikipedia.org/wiki/Homomorphic_encryption https://en.wikipedia.org/wiki/Homomorphic_encryption
- rwmj 3y agoI didn't say "from the platform", I very specifically said they're encrypted so the hypervisor or other VMs cannot see them. Believe it or not, that's how Intel TDX, AMD SEV and other systems do work, and these are real world implementations you can buy right now.
- immibis 3y agoIndeed, it's defense in depth. The hypervisor shouldn't be compromised, and other VMs shouldn't be able to read your VM's data, but if they are or can for some reason, it's encrypted.