Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Private Cloud Compute: A new frontier for AI privacy in the cloud

security.apple.com

Post reply on HN
Print view View original

101–110 of 393 posts

Re: Private Cloud Compute: A new frontier for AI privacy in the cloud

#101

Post by gigel82 »

Shank wrote: post #13

> In a first for any Apple platform, PCC images will include the sepOS firmware and the iBoot bootloader in plaintext, making it easier than ever for researchers to study these critical components. Yes! > Software will be published within 90 days of inclusion in the log, or after relevant software updates are available, whichever is sooner. I think this theoretically leaves a 90-day maximum gap between publishing vul…

Well, a 89-day "update-and-revert" schedule will take care of those pesky auditors asking too many questions about NSA's backdoor or CCP's backdoor and all that.

Re: Private Cloud Compute: A new frontier for AI privacy in the cloud

#102

Post by wslh »

loteck wrote: post #23

Some good comments on this from cryptographer Matt Green here: https://x.com/matthew_d_green/status/1800291897245835616?t=C... (I wonder if Matt realizes nobody can read his tweets without a X account? Use BlueSky or Masto man) Edit: here's his thread combined https://threadreaderapp.com/thread/1800291897245835616.html?...

Beyond all the hardware complexity, another attack vector is the network infrastructure.

Re: Private Cloud Compute: A new frontier for AI privacy in the cloud

#104

Post by gigel82 »

The only way to trust this is them selling "cloud compute" servers that folks can deploy and monitor in their own infrastructure. Nothing else can be guaranteed to not include malicious code to exfiltrate the data.

Or better yet, make the APIs public and pluggable so that one can choose an off-device AI processor themselves if one is needed.

Re: Private Cloud Compute: A new frontier for AI privacy in the cloud

#106

Post by capybara_2020 »

unshavedyak wrote: post #93
BenFranklin100 wrote: post #79

Earlier quoted context omitted.

If he really wanted no one to be reading his tweets he’d be using BluSky or Masto…

Is there more to that thread? I can't read it if it exists, not sure if that is what the parent is talking about? But i don't have a Twitter account anymore, so maybe it's locked?

Without being logged into X, you can only see the first post in a thread.

Re: Private Cloud Compute: A new frontier for AI privacy in the cloud

#107

Post by [deleted] »

unshavedyak wrote: post #93
BenFranklin100 wrote: post #79

Earlier quoted context omitted.

If he really wanted no one to be reading his tweets he’d be using BluSky or Masto…

Is there more to that thread? I can't read it if it exists, not sure if that is what the parent is talking about? But i don't have a Twitter account anymore, so maybe it's locked?

[deleted]

Re: Private Cloud Compute: A new frontier for AI privacy in the cloud

#109

Post by GrantMoyer »

cherioo wrote: post #25

Can some ELI5 how remote attestation is supposed to work? It feels like asking a remote endpoint “are you who you say you are”. What’s stopping remote endpoint always responding “yes”

My understanding is that it's similar to TLS authentication.

The remote endpoint has special hardware which keeps secret signing keys (similar to a TLS server's signing keys). The hardware refuses to reveal the private keys, but will sign certain payloads under certain conditions. In addition, Intel or AMD or whoever also has super duper mega secret master keys (similar to a CA's signing keys), which they use to sign the device's signing keys. The certificate signing the device keys is also stored on the device.

So, each time the endpoint is asked to attest its software, it says yes and signs its response with its keys, and it also sends a certificate showing its keys are signed by the master key. That way, the client knows the special hardware really said yes and that Intel or AMD or whoever said that particular special hardware is legit.

Re: Private Cloud Compute: A new frontier for AI privacy in the cloud

#110

Post by jachee »

tiffanyh wrote: post #105

I wonder who Apple will be colocating with for data centers. And what the PCC chassis looks like for these compute devices (will it be a display-less iPad)?

Apple’s rich enough to build and own their own datacenters. Savvy enough, too. I’d imagine the chassis are custom Apple-NOC-specific M-chip powered servers.
Post reply on HN