#confidentialcomputing — Public Fediverse posts

Sommerferien, Sonne und 29°C ! Bestes Wetter für das Freibad !
Und was machen die #IT Interessierten? ...
Die Treffen sich freiwillig zu einem Vortrag über #ConfidentialComputing. 🤩

Danke an die Teilnehmer, danke an Felix Schuster und Edgeless Systems für den Vortrag, den Raum und die Verpflegung und danke das es so viele Interessenten gab, dass wir sogar eine Warteliste für die Anmeldung einrichten mussten.

#usergroup #dortmund #ai #confidentionalcomputing

Sommerferien, Sonne und 29°C ! Bestes Wetter für das Freibad !
Und was machen die #IT Interessierten? ...
Die Treffen sich freiwillig zu einem Vortrag über #ConfidentialComputing. 🤩

Danke an die Teilnehmer, danke an Felix Schuster und Edgeless Systems für den Vortrag, den Raum und die Verpflegung und danke das es so viele Interessenten gab, dass wir sogar eine Warteliste für die Anmeldung einrichten mussten.

#usergroup #dortmund #ai #confidentionalcomputing

Turns out, #Apple is just trash. Hardly even worth a 'trash panda.'

https://404media.co/apples-private-relay-is-exposing-users-real-ip-addresses

@linmob #ConfidentialComputing #tor

I'm happy to announce our work has been accepted at ESORICS 2026, going to be held at Rome, Italy in September later this year!

"A Systematic Look at Quality-of-Service Feature Effects on Side Channels in AMD SEV-SNP"

In our work, we show that AMD CPUs' Quality of Service features introduce and amplify side channels, especially concerning in the confidential computing / trusted execution paradigm of computing.

We show that a malicious hypervisor can use allocation and monitoring features to leak and amplify what's going on in an AMD SEV-SNP confidential VM. The hypervisor can mount keystroke detection attacks, website fingerprinting attacks, Bleichenbacher attacks on RSA, and covert channels.

We reported our findings to AMD, who said that "side channels are not in their threat model for SEV-SNP"... 🙂.

I have a blog write up here (there's a logo of a cat wearing a business tie - no AI): https://snee.la/posts/amd-qos-side-channels/

You can read the paper at: https://snee.la/pdf/pubs/amd-qos-side-channels.pdf

Thanks to Carina Fiedler, @Rayiizzz, @supersingular, @misc0110 and @lavados for the fun collaboration! :1000:

#esorics2026 #confidentialcomputing #amd #security #cloud #computing #cloudcomputing

I'm happy to announce our work has been accepted at ESORICS 2026, going to be held at Rome, Italy in September later this year!

"A Systematic Look at Quality-of-Service Feature Effects on Side Channels in AMD SEV-SNP"

In our work, we show that AMD CPUs' Quality of Service features introduce and amplify side channels, especially concerning in the confidential computing / trusted execution paradigm of computing.

We show that a malicious hypervisor can use allocation and monitoring features to leak and amplify what's going on in an AMD SEV-SNP confidential VM. The hypervisor can mount keystroke detection attacks, website fingerprinting attacks, Bleichenbacher attacks on RSA, and covert channels.

We reported our findings to AMD, who said that "side channels are not in their threat model for SEV-SNP"... 🙂.

I have a blog write up here (there's a logo of a cat wearing a business tie - no AI): https://snee.la/posts/amd-qos-side-channels/

You can read the paper at: https://snee.la/pdf/pubs/amd-qos-side-channels.pdf

Thanks to Carina Fiedler, @Rayiizzz, @supersingular, @misc0110 and @lavados for the fun collaboration! :1000:

#esorics2026 #confidentialcomputing #amd #security #cloud #computing #cloudcomputing

[July - now not possible (except possibly with higher RAM)]

Wow! Congratulations!
Live Virtualization is possible in Kicksecure!

https://www.kicksecure.com/wiki/Dev/user-sysmaint-split
(Live | Persistent | Testing)
https://www.kicksecure.com/wiki/Grub-live

Development for greater stability needed #fundinternetfreedom
liblxqt5networka5t64
https://pkgs.org/download/libqt5-network
* [ALERT] Lxqt gui conflicts with Security-Misc!
(disable if upgrading and keep disabled if updating Trixie)
* Have you allocated enough disk space?
Size of Trixie upgrade appears to overwhelm resources.
recommend targeted updates:
apt install –only-upgrade <package>
* comment out non-free in Kicksecure repo
* consider disabling repo until “dummy” dependencies and other issues are cleared up

#Debian #tech #Privacy #Security #ConfidentialComputing #tor #Linux #Qemu #grub #virtualization
@debian @whonix

Wow! Congratulations!
Live Virtualization is possible in Kicksecure!

https://www.kicksecure.com/wiki/Dev/user-sysmaint-split
(Live | Persistent | Testing)
https://www.kicksecure.com/wiki/Grub-live

Development for greater stability needed #fundinternetfreedom
liblxqt5networka5t64
https://pkgs.org/download/libqt5-network
* [ALERT] Lxqt gui conflicts with Security-Misc!
(disable if upgrading and keep disabled if updating Trixie)
* Have you allocated enough disk space?
Size of Trixie upgrade appears to overwhelm resources.
recommend targeted updates:
apt install –only-upgrade <package>
* comment out non-free in Kicksecure repo
* consider disabling repo until “dummy” dependencies and other issues are cleared up

#Debian #tech #Privacy #Security #ConfidentialComputing #tor #Linux #Qemu #grub #virtualization
@debian @whonix

http://mastodon.archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion/@textfiles

What if there were a

rumble. . . archive.onion

projectgutenberg. . . archive.onion

nitter. . . archive.onion

etc.

#fundinternetfreedom #mastodon #archivedotorg #ConfidentialComputing #Privacy #Library #tech

@textfiles

http://mastodon.archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion/@textfiles

What if there were a

rumble. . . archive.onion

projectgutenberg. . . archive.onion

nitter. . . archive.onion

etc.

#fundinternetfreedom #mastodon #archivedotorg #ConfidentialComputing #Privacy #Library #tech

@textfiles

Physical security has become an important aspect of protecting confidential computing workloads. Physical access is typically excluded from hardware vendors' CVM attack models, leaving physical and relay attacks largely unaddressed.
Flashbots and Intel have each been working independently on solutions to help bridge this physical-access gap: https://writings.flashbots.net/mind-the-gap-tee-poc

#ConfidentialComputing #CloudSecurity #TPM

Physical security has become an important aspect of protecting confidential computing workloads. Physical access is typically excluded from hardware vendors' CVM attack models, leaving physical and relay attacks largely unaddressed.
Flashbots and Intel have each been working independently on solutions to help bridge this physical-access gap: https://writings.flashbots.net/mind-the-gap-tee-poc

#ConfidentialComputing #CloudSecurity #TPM

Reproducible builds are a valuable property for remote attestation workflows but often hard to maintain. We faced a special challenge building reproducible artifacts that contain signatures.

Together with @Euler I wrote a blog post about how we used ECDSA public key recovery to generate signatures that match exactly one artifact, can be reproduced by a verifier, and are secure, without anyone ever knowing a private key.

https://katexochen.aro.bz/posts/reproducible-secure-signatures/

#ReproducibleBuilds #RemoteAttestation #Cryptography #ConfidentialComputing #Infosec

Reproducible builds are a valuable property for remote attestation workflows but often hard to maintain. We faced a special challenge building reproducible artifacts that contain signatures.

Together with @Euler I wrote a blog post about how we used ECDSA public key recovery to generate signatures that match exactly one artifact, can be reproduced by a verifier, and are secure, without anyone ever knowing a private key.

https://katexochen.aro.bz/posts/reproducible-secure-signatures/

#ReproducibleBuilds #RemoteAttestation #Cryptography #ConfidentialComputing #Infosec

Ubuntu 26.04 Security Shift

https://beitmenotyou.online/ubuntu-26-04-security-shift/

Cool, KVM-based AMD SEV-SNP support was recently added to Cloud Hypervisor! Including support for Google's oak stage0 firmware and IGVM image format.
https://github.com/cloud-hypervisor/cloud-hypervisor/pull/7942

#ConfidentialComputing #virtualization #KVM #CloudHypervisor

Cool, KVM-based AMD SEV-SNP support was recently added to Cloud Hypervisor! Including support for Google's oak stage0 firmware and IGVM image format.
https://github.com/cloud-hypervisor/cloud-hypervisor/pull/7942

#ConfidentialComputing #virtualization #KVM #CloudHypervisor

Fabricked, a new attack on AMD SEV-SNP presented: software-based attack that manipulates memory routing of inter-component communication within the SoC to trick the secure processor into improperly initializing the RPM table. The root cause is a missing check in the secure processor firmware to enforce the Data Fabric is locked down.

https://fabricked-attack.github.io/

#ConfidentialComputing #CloudSecurity #AMD

Fabricked, a new attack on AMD SEV-SNP presented: software-based attack that manipulates memory routing of inter-component communication within the SoC to trick the secure processor into improperly initializing the RPM table. The root cause is a missing check in the secure processor firmware to enforce the Data Fabric is locked down.

https://fabricked-attack.github.io/

#ConfidentialComputing #CloudSecurity #AMD

RE: https://infosec.exchange/@trailofbits/116363081880526734

Trail of Bits published a really interesting audit report on Meta's confidential computing protection for WhatsApp's AI support. One of the findings is an AML injection attack, which I wrote about in a blog post a few weeks ago: https://katexochen.aro.bz/posts/badaml/

There are many other interesting findings, and a lot to learn from them. I really appreciate that they are sharing the full report.

#ConfidentialComputing #CloudSecurity

RE: https://infosec.exchange/@trailofbits/116363081880526734

Trail of Bits published a really interesting audit report on Meta's confidential computing protection for WhatsApp's AI support. One of the findings is an AML injection attack, which I wrote about in a blog post a few weeks ago: https://katexochen.aro.bz/posts/badaml/

There are many other interesting findings, and a lot to learn from them. I really appreciate that they are sharing the full report.

#ConfidentialComputing #CloudSecurity

FYI: Reddit and Anonym's data deal: no first-party data leaves, ever: Anonym and Reddit today announced a privacy-safe measurement partnership using confidential computing, marking Anonym's fourth major platform deal in under a year. https://ppc.land/reddit-and-anonyms-data-deal-no-first-party-data-leaves-ever/ #Reddit #Anonym #DataPrivacy #ConfidentialComputing #Partnership

RE: https://abyssdomain.expert/@filippo/116358410869265202

Trusted Execution Environments (TEEs) like Intel SGX and AMD SEV-SNP and in general hardware attestation are just f***d. All their keys and roots are not PQ and I heard of no progress in rolling out PQ ones, which at hardware speeds means we are forced to accept they might not make it

#ConfidentialComputing #pqc

RE: https://abyssdomain.expert/@filippo/116358410869265202

Trusted Execution Environments (TEEs) like Intel SGX and AMD SEV-SNP and in general hardware attestation are just f***d. All their keys and roots are not PQ and I heard of no progress in rolling out PQ ones, which at hardware speeds means we are forced to accept they might not make it

#ConfidentialComputing #pqc

ICYMI: Reddit and Anonym's data deal: no first-party data leaves, ever: Anonym and Reddit today announced a privacy-safe measurement partnership using confidential computing, marking Anonym's fourth major platform deal in under a year. https://ppc.land/reddit-and-anonyms-data-deal-no-first-party-data-leaves-ever/ #Reddit #Anonym #DataPrivacy #ConfidentialComputing #PrivacyFirst

Reddit and Anonym's data deal: no first-party data leaves, ever: Anonym and Reddit today announced a privacy-safe measurement partnership using confidential computing, marking Anonym's fourth major platform deal in under a year. https://ppc.land/reddit-and-anonyms-data-deal-no-first-party-data-leaves-ever/ #Reddit #Privacy #DataProtection #Anonym #ConfidentialComputing

Recordings of OC3 2026 (Open Confidential Computing Conference) are now available:
https://www.youtube.com/playlist?list=PLEhAl3D5WVvSqGrHPmtH9aHly3n2bwkYk

#ConfidentialComputing #Cloud #CloudSecurity #AI

Recordings of OC3 2026 (Open Confidential Computing Conference) are now available:
https://www.youtube.com/playlist?list=PLEhAl3D5WVvSqGrHPmtH9aHly3n2bwkYk

#ConfidentialComputing #Cloud #CloudSecurity #AI

ExpressVPN launches ExpressAI, promising private AI chats that even it cannot read

https://fed.brid.gy/r/https://nerds.xyz/2026/03/expressvpn-expressai-private-ai/

ExpressVPN launches ExpressAI, promising private AI chats that even it cannot read

https://web.brid.gy/r/https://nerds.xyz/2026/03/expressvpn-expressai-private-ai/

My colleague Paul (@katexochen) has done a great write-up of how a malicious host (e.g. cloud provider) can trivially compromise confidential VMs, and how we mitigated the attack at Edgeless Systems. Read his blog post: https://lobste.rs/domains/katexochen.aro.bz
#security #confidentialcomputing #firmware

BadAML exploits host-supplied ACPI tables to get arbitrary code execution inside confidential VMs. We reproduced the attack end-to-end against our stack and built an AML sandbox to stop it. I did a writeup on the original paper that published the attack, our reproducer, and our journey to fix it.

https://katexochen.aro.bz/posts/badaml/

#ConfidentialComputing #Security #Linux

BadAML exploits host-supplied ACPI tables to get arbitrary code execution inside confidential VMs. We reproduced the attack end-to-end against our stack and built an AML sandbox to stop it. I did a writeup on the original paper that published the attack, our reproducer, and our journey to fix it.

https://katexochen.aro.bz/posts/badaml/

#ConfidentialComputing #Security #Linux

@OpenCloud

Congratulations. This is another major step forward in the battle to tame the EU AI Act Compliance beast. Accountable Hardware meets sovereign Cloud.

We should have a chat (soon) about structured indexing of large unstructured datasets. I have some novel. and very fast, tools under development right now.

#DigitalSovereignty #EUAIAct #SovereignCloud #OCIS #ConfidentialComputing #DigitalForensics #IPCEICIS #OpenSource #DataIntegrity #StructuredIndexing

We're excited to be working with real-cis. Together, we're building a solid foundation to ensure OpenCloud can be operated securely and transparently even in environments with increased security requirements, from the platform right through to the operating environment.

Find out more on the blog: https://opencloud.eu/en/news/partnership-opencloud-and-real-cis

#DigitalSovereignty #ConfidentialComputing #ITSecurity #KRITIS #OpenSource