ciot1CDM
Yes, the bar is low in VPS land, but you could certainly do much better at presenting yourselves properly.
The ideal security mechanism would provide us with a per cpu key from Intel, which we use to update our own user key to the cpu, and only user signed firmware is loaded.
The exact mechanism of this can be handled in many ways.
Right now, we locked out, and primed for being snooped on without our consent.
I like Intel's engineering, but everything else I could do without.
And ARM is no better. I'd say worse actually, but I'm not going to defend that.
Please, please, AMD do the "right thing" with Zen. Allow us to be in command of our security, so we may delegate it to those we trust with the technical know how, be it OS vendors, or our IT departments, or our own selves.
I believe building reliable, internet-scale services on such hardware is impossible. Having single bit errors, which are hardly rare [0], silently propagate is a recipe for disaster.
I applaud Scaleway for the foresight of building custom, sale-out hardware, however, that this is their second effort and still lacking in ECC use is very, very, disappointing.
I would love to use this hardware, it's almost the perfect design, but it's tragically flawed as is.
[0] DRAM Errors in the Wild: A Large-Scale Field Study http://research.google.com/pubs/pub35162.html
I shouldn't have assumed ECC, but if you have a group designing your own hardware then routing another 8 wires shouldn't be a problem.
I'm disappointed.
Unums: A Radical Approach to Computation with Real Numbers
Introduction to Directed Self-Assembly (video, 2013)
This is equivalent to one person expending 500 years solely to learn Go.