3 ms·
https://en.wikipedia.org/wiki/Confidential_computing https://en.wikipedia.org/wiki/Confidential_computing The following threat vectors are generally consider
by transpute 1y ago
https://en.wikipedia.org/wiki/Confidential_computing https://en.wikipedia.org/wiki/Confidential_computing
The following threat vectors are generally considered in scope for confidential computing: Software attacks: including attacks on the host’s software and firmware. This may include the operating system, hypervisor, BIOS, other software and workloads.
- magicalhippo 1y agoI'm not saying it's not a critical bug that should be fixed somehow. I just thought it seemed a bit of a stretch to call replacing the hypervisor with a malicious one "easy".
- transpute 1y agoThe hypervisor is typically controlled by the infrastructure operator. If the infrastructure operator is untrusted, as in some models of confidential computing, then hypervisor replacements are both easy and an expected threat.
- magicalhippo 1y agoOk, fair point. Guess I didn't expect people to want to run their stuff on untrusted hardware.