Live data from Hacker News

Security research on Private Cloud Compute

security.apple.com

121–124 of 124 posts

Re: Security research on Private Cloud Compute

#121

Earlier quoted context omitted.

Publicly inspectable how? Are you saying their entire server stack will be open source and have reproducible builds?

No, but the binaries executed will be available for download.

Then shouldn't they allow us to self-host the entire stack? That would surely put me at ease; if I can self-host my own "Apple private cloud" on my own hardware and firewall the heck out of it (inspect all its traffic), that's the only way any privacy claims have merit.

Re: Security research on Private Cloud Compute

#122
post #4
post #2

Looks like they are really writing everything in Swift on the server side. Repo: https://github.com/apple/security-pcc

I hope this helps people to consider Swift 6 as a viable option for server-side development, since it offers many of the modern safety features of Rust, including simpler memory management through ARC, compared to Rust’s more complex ownership system and more predictable than Go's garbage collector.

There are lots of sane alternatives to Go. Also don't bet on ARC for performance.

https://github.com/ixy-languages/ixy-languages

Re: Security research on Private Cloud Compute

#123
post #86

Earlier quoted context omitted.

> it feels like a foundation built on quicksand. You depend on so many turtle layers and only one of them has to be adversarial and game over Interesting. Please elaborate. Here's how I see it. Reproducible builds: I think we'll eventually see Linux distributions like Debian make reproducible builds mandatory by enforcing it in apt-get's trust policy. The trust policy could be expressed as "I will only trust .deb pac…

sadly linking to youtube this week is like linking to xitter earlier. i cannot see any of the content as google now requires me to create an account. ironically when talking about losing control of cloud compute.

Mmm. These kind of project should really post videos on or even host a PeerTube instance

Re: Security research on Private Cloud Compute

#124
post #68

Something similar published by samsung, but sad that they are not as agile as apple in this area https://research.samsung.com/blog/The-Next-New-Normal-in-Com...

This doesn't look to be the same. Apple's talking about performing computation in their cloud in a secure, privacy-preserving fashion. Samsung's paper seems to be just on local enclaves (which Apple's also been doing since iPhone 5S in the form of the Secure Enclave Processor (SEP)).

Re read the article again, it's exactly same idea with open source

"From a computational perspective, a trusted end-to-end data path will be established, ensuring the security of the entire process. This encompasses data collection on user devices and data processing on servers as well as the processing of privacy-sensitive data directly on user devices."

Post reply on HN