Viewing profile — m1ghtym0

Exactly, attestation is what matters. Excluding the inference provider from the prompt is the USP here. Privatemode can do that via an attestation chain (source code -> reproducibl…

Love it \o/

An alternative to using own servers, which are not feasible for every company would be isolated and encrypted GitLab/GitHub deployments as described here: https://dev.to/flxflx/set…

Yes and no. It's a technological problem in the sense that there is a technological solution to this. See the Delos Cloud for example: https://www.handelsblatt.com/technik/it-inter…

Maybe they should deploy it via Constellation https://github.com/edgelesssys/constellation

What's your favorite take-away?

I hear that argument a lot. The key aspect here is remote attestation. Often enough CC is only seen from a memory encryption angle. It's maybe not straight forward, however remote …

You are correct, KMS implement important aspects of key management. The conclusion of the article is not replacing KMS with Confidential Computing. Instead, the idea is to combine …

The thing you're looking for is called remote attestation. That means there is a direct channel from the hardware to the user that attests the confidentiality and integrity of the …

BYOK was a lie because it was only protecting keys at rest. When the environment in use becomes accessible to so many actors, customers lose control of their keys and identities on…

Applying Kata for TEEs and bringing Confidential Computing to Kubernetes is an awesome concept. I'm less sold on the original reverse idea of using VMs instead of containers for en…

A deep dive into how Hashicorp, Confluent, Databricks, and CockroachDB grew their communities in the early days.