Re:The paranoid #! Security Guide
by pavs on Sunday July 14, 2013 @09:22AM
(#6040812)
I think its very difficult, if not impossible to have "paranoid level" security for a machine that someone else has full physical access. The assumption here is that amazon also have paranoid level security and their employees are 100% honest and will do nothing to compromise your machine.
[ Parent
| on HN ]
I am working on securing virtual machines against physical attacks (which yes, does sound impossible). Our approach requires code changes on the hypervisor level, which currently rules outs Amazon but is viable for bare-metal cloud providers. It also requires some specific CPU features and a TPM.
Re:The paranoid #! Security Guide
by alexwright on Sunday July 14, 2013 @02:05PM
(#6041582)
> The assumption here is that Amazon also have paranoid level security and their employees are 100% honest..
Add 100% competent to that too. I expect a bug is much more likely that a dishonest sysadmin or dev.