Viewing profile — costan

Thank you very much for this feedback! Re: 1 - I re-read the relevant SDM sections, and saw that there is no requirement that the new upgrade version exceeds the current microcode …

SGX serves a good purpose, at least in theory. Many people, myself included, wanted it to turn out to be good. So, I don't think many Intel folks objected to it. Instead, I think t…

But enclaves are worthless without attestation. If the OS is evil and you don't do attestation, it can emulate SGX and run your code in a simulated enclave environment where EGETKE…

Do you happen to know if the Launch Enclave has the debug flag set? If so, you can't use it to launch production enclaves.

There's some support in Intel's Management Engine for DRM, called Intel Insider (the successor of PAVP). One of the SGX papers mentions plans for hooking up SGX enclaves with PAVP.…

TXT requires an ACM, which is essentially a small signed BIOS subset. At least ACMs are freely downloadable from Intel, and they don't look into what you'd like to run under TXT. h…

It gives Intel control over developers. In general, a computer will execute what you ask it to. SGX will not let you run production enclaves without Intel's permission. This is lik…

Sadly, leaking the key is not the answer. You'd give independent developers the freedom to use SGX, but at the same you'd make SGX worthless. Details: if the key used to sign archi…

I expect this to play out like the W3C EME standard. Software attestation separates debug from non-debug enclaves, so your kernel will need to load production enclaves for you to w…

Perhaps it means they're trying to be thorough? A Xeon implementation would have to secure the QPI links between the CPU chips. These run at significantly higher speeds than DRAM, …

I'm terrible at writing. I am trying to say that SGX cannot restore things from the SSA, and it has to use some protected area. To the best of my knowledge, they're using the non-a…

If SGX becomes successful, Intel becomes the Verizon+ATT+Tmobile+Sprint of hardware security. No signed enclave, no security.

Thanks! Platform for 6.470 day 1? (html / css / js)

I can't promise anything, but I can assure you that we're well-aware of the pains of the current authentication model.

Did you try using Prey? Do you know when and how is the GPS used?

Flashed the Insyde BIOS using http://hexxeh.net/?p=328117655 and got Ubuntu 11.04 at it, when it was just an alpha. Filing bugs since. Will switch to the 11.10 dev version when the…

I wouldn't expect performance to be a problem. For computational tasks, Ruby works just as fine on Windows as on a UNIX platform. Windows perf suffers because (1) in some rare case…

Censorship is horrible. But if you think it's restricted to China... think about what would happen if 10,000 people would tweet something sensitive on 9/11. My guess is something a…

Spam-following people on twitter to promote your app: bad idea. I reported you as a spammer.

I like the nice succinct description of claims. Thanks!

Zipped source code: http://6.470.scripts.mit.edu/lectures/security/security_in_w... Live source code: http://github.com/costan/security_in_webapps_slides