Great article about how TEEs are providing much less security than folks believe they will. https://arstechnica.com/security/2025/10/new-physical-attacks-are-quickly-diluting-secure-enclave-defenses-from-nvidia-amd-and-intel/
Discussion
Loading...
Post
“From a user perspective, I don’t even have a way to verify where the server is. Therefore, I have no way to verify if it’s in a reputable facility or an attacker’s basement.”
Vielleicht ein weiteres Argument einige Sachen nicht in die Cloud zu stellen...
@matthew_d_green ah, so the @signalapp secure contact enclave is weakened?
@matthew_d_green I don’t see it as “less security”
It’s more that they handle one attack vector very well and another vector very badly.
It’s then becomes a discussion about threat models.
If people have physical access to the server then all bets are off, but that’s not top of the threat model for most people.
@matthew_d_green deterministic encryption strikes again!
bonfire.cafe
A space for Bonfire maintainers and contributors to communicate
Automatic federation enabled