News for hackers. Stuff that matters.

A comment on AlphaProof Code.

Re:AlphaProof Code by 0o777 on Tuesday November 10, 2026 @08:14AM (#50439852)
Do I understand correctly that they verified the entire libsignal Rust library and not just a human-written spec of the Signal protocol?

Also I noticed something in the libsignal protocol:

>attest: Functionality for remote attestation of SGX enclaves and server-side HSMs

https://github.com/signalapp/libsignal

How trusted are Intel's (SGX) and AMD's hardware level security features?

Cloudflare runs their edge network in random ISP datacenters and in shady jurisdictions and promise AMD's TSME is enough to keep things secure.

[ Parent | on HN ]
Re:AlphaProof Code by buckle8017 on Tuesday November 10, 2026 @08:28AM (#50439999)
SGX is certainly completely broken.

Use s real password with the signal account thing.

[ Parent | on HN ]
Re:AlphaProof Code by fragmede on Tuesday November 10, 2026 @08:28AM (#50440011)
I mean, you setup a webcam at the top of your rented Colo rack space so that you know when the feds come to take your server to hack the SGX/equivalent.
[ Parent | on HN ]