3 ms·
Is there a frozen client that someone could audit for assurance, then repeatedly use with your TEE-hosted backend? If instead users must use your web-served cl
by gojomo 1y ago
Is there a frozen client that someone could audit for assurance, then repeatedly use with your TEE-hosted backend?
If instead users must use your web-served client code each time, you could subtly alter that over time or per-user, in ways unlikely to be detected by casual users – who'd then again be required to trust you (Tinfoil), rather than the goal on only having to trust the design & chip-manufacturer.
- FrasiertheLion 1y agoYes, we have a customer who is indeed interested in having a frozen client for their app, which we're making possible. We currently have not frozen our client because we're in the early days and want to be able to iterate quickly on functionality. But happy to do so on a case-by-case basis for customers.
- ignoramous 1y ago> rather than the goal on only having to trust the design & chip-manufacturer If you'd rather self-host, then the HazyResearch Lab at Stanford recently announced a FOSS e2ee implementation ("Minions") for Inference: https://hazyresearch.stanford.edu/blog/2025-05-12-security https://hazyresearch.stanford.edu/blog/2025-05-12-security / https://github.com/HazyResearch/Minions https://github.com/HazyResearch/Minions