Re:Confidential VMs
by nitrogen on Tuesday July 14, 2020 @10:16AM
(#23832219)
Is there something special that happens when a legit remote cloud user logs in that doesn't happen when a rogue remote Google admin logs in? Something that prevents a modified web client from stealing the creds during a user's web console session?
[ Parent
| on HN ]
Re:Confidential VMs
by theevilsharpie on Tuesday July 14, 2020 @10:29AM
(#23832373)
SEV protects against physical attacks. A rogue admin logging in through a management console would have to go through whatever controls and auditing the console's access control functionality provides.