News for hackers. Stuff that matters.

A comment on Confer – End to End Encrypted AI Chat. Parent comment

Re:Confer – End to End Encrypted AI Chat by habinero on Wednesday January 14, 2026 @03:15AM (#46613591)
That's insufficient. Code signing doesn't do anything against theft or malfeasance by internal actors. Or external ones, I suppose.

If the software can modify data legitimately, it can be tampered with.

[ Parent | on HN ]
Re:Confer – End to End Encrypted AI Chat by Stefan-H on Wednesday January 14, 2026 @11:30AM (#46618118)
The point of measured environments like the TEE is that you are able to make guarantees about all the software that is running in the environment (verified with the attestation). "If the software can modify data legitimately, it can be tampered with." - the software that makes up the SBOM for these environments do not expose administrator functions to access the decrypted data.
[ Parent | on HN ]