Re:TPM–Fail: TPM Meets Timing and Lattice Attacks
by jgalt212 on Tuesday November 12, 2019 @10:24PM
(#21520933)
Is there a good reason for a security conscious hi value target shop to use VMs or docker when they don't control the whole box?
[ Parent
| on HN ]
Re:TPM–Fail: TPM Meets Timing and Lattice Attacks
by munchbunny on Tuesday November 12, 2019 @11:22PM
(#21521151)
That depends on what you are protecting, but in general if you are high-value enough that it's worth it for somebody to try to attack you through VM instances sharing the physical machine, you should be managing your own hardware and using physical HSM's to protect keys.