News for hackers. Stuff that matters.

A comment on Signal Server code on GitHub is up to date again. Parent comment

Re:Signal Server code on GitHub is up to date again by eptcyka on Wednesday April 07, 2021 @11:18AM (#26726154)
Except SGX enclaves are horribly broken.
[ Parent | on HN ]
Re:Signal Server code on GitHub is up to date again by monocasa on Wednesday April 07, 2021 @11:23AM (#26726240)
Like, does an SGX enclave attest that meltdown is patched in microcode? That's one way to pull the keys out.

The recentish work to get read write access to some Intel CPU's microcode can probably break SGX too. I wouldn't be surprised if the ME code execution flaws could be used that way too.

[ Parent | on HN ]