Re:How we built EGo
by m1ghtym0 on Thursday July 22, 2021 @09:17AM
(#27918463)
AMD SME protects against physical access attacks. To my knowledge no process-based enclave solution was presented by AMD based on SME.
Instead AMD went the route of VM-based enclaves in the form of SEV. Intel is following this direction with TDX.
The concept of VM-based enclaves is slightly different and trades a larger Trusted-Computing-Base (TCB) for better lift-and-shift.
You could run unmodified Go applications in your SEV/TDX VM so there is no need for EGo in this context.
Potentially we'll add attestation features for SEV/TDX for our enclave- and client-libraries that are part of EGo.
Here is a (slightly outdated comparison) of SGX and SME/SEV: https://caslab.csl.yale.edu/workshops/hasp2018/HASP18_a9-mof...
Re:How we built EGo
by dmitriid on Thursday July 22, 2021 @10:18AM
(#27919166)
The people who are trying to sell you "confidential computing" are somehow unaware about data collection on Medium and use dark patterns to make you agree to collecting analytics.
Re:How we built EGo
by veonik on Thursday July 22, 2021 @12:41PM
(#27921120)
On the flip side, are you missing out on some fundamental privacy knowledge by not knowing and sharing information about confidential computing? You are evangelizing privacy (a great thing) but seem to have determined one aspect is crucial, regardless of the possible importance of this other aspect. What I'm saying is: what if avoiding Medium is a drop in the privacy hygiene pond and confidential computing is the pond itself?
I don't think I am knowledgeable enough to answer my question or even validate its premise, but I do think it's unfair to dismiss this information simply because it was published on Medium. And when it comes down to it, we have tools like archive.is which I believe avoids any privacy related qualms with Medium: https://archive.is/wUCRe
Re:How we built EGo
by dmitriid on Thursday July 22, 2021 @01:33PM
(#27921815)
> but seem to have determined one aspect is crucial, regardless of the possible importance of this other aspect.
No. I haven't determined one aspect crucial. It's kinda "bathrooms at a restaurant" thing: if the bathrooms at an otherwise spotless restaurant are dirty, are we to assume that it's just "not all aspects of cleanliness have to be solved"?
"Confidential computing" uses a cookie popup that only has "save" and "accept all" options, with "analytics" enabled by default.
What else are they unaware of?
Or to not use Medium.
If you claim to care about "confidential computing" and what not, one would expect that you have basic hygiene in other places outside your claim.
I don't think I am knowledgeable enough to answer my question or even validate its premise, but I do think it's unfair to dismiss this information simply because it was published on Medium. And when it comes down to it, we have tools like archive.is which I believe avoids any privacy related qualms with Medium: https://archive.is/wUCRe
No. I haven't determined one aspect crucial. It's kinda "bathrooms at a restaurant" thing: if the bathrooms at an otherwise spotless restaurant are dirty, are we to assume that it's just "not all aspects of cleanliness have to be solved"?