News for hackers. Stuff that matters.

A comment on Confidential VMs.

Re:Confidential VMs by hlandau on Tuesday July 14, 2020 @09:36AM (#23831768)
May as well note: SEV relies on AMD-signed vendor firmware blobs. This means that AMD, or anyone who can get their keys, can compromise the security of SEV.
[ Parent | on HN ]
Re:Confidential VMs by nellydpa on Tuesday July 14, 2020 @04:10PM (#23837166)
Actually, the integrity of the AMD microcode can be verified using Google stackdriver as part of VM audit logs, together with the integrity of the VM kernel.
[ Parent | on HN ]