Live data from Hacker News

Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

news.ycombinator.com

31–40 of 106 posts

Re: Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

#31
post #27

So impressive - cloud AI that is verifiable with zero trust assumptions is going to be game-changing regardless of the industry application. Looks like it could be used by anyone for making anything trustworthy.

> with zero trust assumptions It's not that though. Not close. You are trusting the chip maker, whose process is secret (actually worse, it's almost certainly shared with the state).

We do have to trust the chip maker until open hardware catches up [1].

[1] https://news.ycombinator.com/item?id=43997856

Re: Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

#32
The only way to guarantee privacy in cloud computing is via homorphic encryption.

This approach relies too much on trust.

If you have data you are seriously sensitive about, its better for you to run models locally on air gapped instances.

If you think this is an overkill, just see what happened to coinbase of recent. [0]

[0]: https://www.cnbc.com/2025/05/15/coinbase-says-hackers-bribed...

Re: Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

#33
post #31
post #27

Earlier quoted context omitted.

> with zero trust assumptions It's not that though. Not close. You are trusting the chip maker, whose process is secret (actually worse, it's almost certainly shared with the state).

We do have to trust the chip maker until open hardware catches up [1]. [1] https://news.ycombinator.com/item?id=43997856

Even if you had open hardware, how would you even know a chip you have sitting in front of you was fabricated correctly?

Re: Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

#34
post #32

The only way to guarantee privacy in cloud computing is via homorphic encryption. This approach relies too much on trust. If you have data you are seriously sensitive about, its better for you to run models locally on air gapped instances. If you think this is an overkill, just see what happened to coinbase of recent. [0] [0]: https://www.cnbc.com/2025/05/15/coinbase-says-hackers-bribed...

Yeah, totally agree with you. We would love to use FHE as soon as it's practical. And if you have the money and infra expertise to deploy air gapped LLMs locally, you should absolutely do that. We're trying to do the best we can with today's technology, in a way that is cheap and accessible to most people.

Re: Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

#35

How large do you wager your moat to be? Confidential computing is something all major cloud providers either have or are about to have and from there it's a very small step to offer LLM-s under the same umbrella. First mover advantage is of course considerable, but I can't help but feel that this market will very quickly be swallowed by the hyperscalers.

This. Big tech providers already offer confidential inference today.

Yes Azure has! They have very different trust assumptions though. We wrote about this here https://tinfoil.sh/blog/2025-01-30-how-do-we-compare

Re: Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

#36
post #31

Earlier quoted context omitted.

We do have to trust the chip maker until open hardware catches up [1]. [1] https://news.ycombinator.com/item?id=43997856

Even if you had open hardware, how would you even know a chip you have sitting in front of you was fabricated correctly?

Check out incredible work by Bunnie to make this possible at home https://www.bunniestudios.com/blog/2024/iris-infra-red-in-si...

Re: Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

#37

How large do you wager your moat to be? Confidential computing is something all major cloud providers either have or are about to have and from there it's a very small step to offer LLM-s under the same umbrella. First mover advantage is of course considerable, but I can't help but feel that this market will very quickly be swallowed by the hyperscalers.

This. Big tech providers already offer confidential inference today.

Last I checked it was only Azure offering the Nvidia specific confidential compute extensions, I'm likely out of date - a quick Google was inconclusive.

Have GCP and AWS started offering this for GPUs?

Re: Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

#38
Looks great. Not sure how big the market is between "need max privacy, need on-prem" and "don't care, just use what is cheap/popular" tho.

Can you talk about how this relates to / is different / is differentiated from what Apple claimed to do during their last WWDC? They called it "private cloud compute". (To be clear, after 11 months, this is still "announced", with no implementation anywhere, as far as I can see.)

Here is their blog post on Apple Security, dated June 10: https://security.apple.com/blog/private-cloud-compute/

EDIT: JUST found the tinfoil blog post on exactly this topic. https://tinfoil.sh/blog/2025-01-30-how-do-we-compare

Re: Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

#39
Is there a frozen client that someone could audit for assurance, then repeatedly use with your TEE-hosted backend?

If instead users must use your web-served client code each time, you could subtly alter that over time or per-user, in ways unlikely to be detected by casual users – who'd then again be required to trust you (Tinfoil), rather than the goal on only having to trust the design & chip-manufacturer.

Re: Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI

#40
This is an incredibly robust solution to a really pressing problem for a lot of individuals/orgs who want to use/deploy reasonably powerful LLMs without paying through the nose for hardware. Others have mentioned the hyperscalers have solutions that make some amount of sense (Azure confidential computing, AWS nitro enclaves) but if you read a bit more about Tinfoil, it is clear they want to operate with far less explicit user trust (and thus much better security). This team is setting the standard for provably private LLM inference, and to me, it makes other solutions seem half-baked by comparison. Props to this talented group of people.
Post reply on HN