4 ms·
Why only Macs? If we think of all PCs and mobile phones running idle, the potential is much larger.
by DeathArrow 6mo ago
Why only Macs? If we think of all PCs and mobile phones running idle, the potential is much larger.
- stryakr 6mo agosimple first target, PCs have more variability
- btown 6mo agoFrom the paper: https://github.com/Layr-Labs/d-inference/blob/master/papers/dginf-private-inference.pdf https://github.com/Layr-Labs/d-inference/blob/master/papers/... > Apple’s attestation servers will only generate the FreshnessCode for a genuine device that checks in via APNs. A software-only adversary cannot forge the MDA certificate chain (Assumption 3). Com- bined with SIP enforcement (preventing binary replace- ment) and Secure Boot (preventing bootloader tampering), this provides strong evidence that the signing key resides in genuine Apple hardware.
- saagarjha 6mo agoI am not entirely sure they understand that System Integrity Protection and Secure Boot can be turned off.
- deleted 6mo ago[deleted]
- btown 6mo agoMy understanding from the paper is that doing so should cause certain things in Apple's hardware security enclaves to break a signing chain, and a server-side MDM system integrated with Apple servers can detect this. But I'm not familiar with the underlying technology, so not sure if underlying assumptions are incorrect.
- saagarjha 6mo agoAFAIK that just ensures the SEP is present but perhaps they are signing the boot state now
- nl 6mo agoThey use the Apple TEE which they claim also protects GPU memory (I wasn't aware of this). NVidia data center GPUs have a similar path, but not their consumer ones. Not sure about the NVidia Spark. It's possible AMD Strix Halo can do this, but unlikely for any other PC based GPU environments.
- MrDrMcCoy 6mo agoEpyc has that VM encrypted memory thing, which comes pretty close. It does raise an interesting question, though: would a PCIe card passed through to a VM be able to DMA access the memory of neighboring devices?