←back to thread

132 points cl3misch | 6 comments | | HN request time: 1.014s | source | bottom
Show context
voidbert ◴[] No.40712750[source]
Please consider the risks of the following vulnerability before deciding whether or not to undervolt: https://plundervolt.com/
replies(6): >>40712818 #>>40712825 #>>40712902 #>>40713134 #>>40713189 #>>40713668 #
1. dannyw ◴[] No.40713134[source]
Isn’t SGX mostly used for DRM, remote attestation, and other anti-consumer stuff in practice today?

I haven’t came across a use case of SGX that benefits me.

replies(3): >>40713437 #>>40715703 #>>40717485 #
2. mscrivo ◴[] No.40713437[source]
Here's one: https://signal.org/blog/private-contact-discovery/
replies(1): >>40714745 #
3. RussianCow ◴[] No.40714745[source]
But that's something that Signal implements on their own backend, not something that runs on consumer devices, so it's not really relevant to a discussion about the risks of undervolting your CPU.
replies(1): >>40720742 #
4. AshamedCaptain ◴[] No.40715703[source]
Except when Apple does it (on their server hardware). Then it supposedly benefits you. See the thread for the "Private Cloud" analysis.
5. bobbiechen ◴[] No.40717485[source]
SGX is actually deprecated on client devices like PCs, so it is rather difficult to use it in anti-consumer ways now (and as mentioned in a sibling thread, makes this rather irrelevant to the topic of undervolting your own PC).

In my experience (working in the field at Anjuna), SGX and other Confidential Computing are quietly used on the server-side in enterprises a lot. It's a part of defense-in-depth, often to protect critical secrets and cryptographic keys, or the systems that manage them.

6. mscrivo ◴[] No.40720742{3}[source]
I was directly replying to the parent's question of whether there were any uses of SGX that were not anti-consumer. Signal's use of it, is very much in line with my thinking of what constitutes pro-consumer.

I agree though, we're all getting slightly off topic