Earlier quoted context omitted.
Publicly inspectable how? Are you saying their entire server stack will be open source and have reproducible builds?
No, but the binaries executed will be available for download.
Security research on Private Cloud Compute
121–124 of 124 posts
Re: Security research on Private Cloud Compute
#122Looks like they are really writing everything in Swift on the server side. Repo: https://github.com/apple/security-pcc
I hope this helps people to consider Swift 6 as a viable option for server-side development, since it offers many of the modern safety features of Rust, including simpler memory management through ARC, compared to Rust’s more complex ownership system and more predictable than Go's garbage collector.
Re: Security research on Private Cloud Compute
#123Earlier quoted context omitted.
> it feels like a foundation built on quicksand. You depend on so many turtle layers and only one of them has to be adversarial and game over Interesting. Please elaborate. Here's how I see it. Reproducible builds: I think we'll eventually see Linux distributions like Debian make reproducible builds mandatory by enforcing it in apt-get's trust policy. The trust policy could be expressed as "I will only trust .deb pac…
sadly linking to youtube this week is like linking to xitter earlier. i cannot see any of the content as google now requires me to create an account. ironically when talking about losing control of cloud compute.
Re: Security research on Private Cloud Compute
#124Something similar published by samsung, but sad that they are not as agile as apple in this area https://research.samsung.com/blog/The-Next-New-Normal-in-Com...
This doesn't look to be the same. Apple's talking about performing computation in their cloud in a secure, privacy-preserving fashion. Samsung's paper seems to be just on local enclaves (which Apple's also been doing since iPhone 5S in the form of the Secure Enclave Processor (SEP)).
"From a computational perspective, a trusted end-to-end data path will be established, ensuring the security of the entire process. This encompasses data collection on user devices and data processing on servers as well as the processing of privacy-sensitive data directly on user devices."