←back to thread

Private Cloud Compute Security Guide

(security.apple.com)
295 points djoldman | 2 comments | 06 Nov 24 13:48 UTC | HN request time: 0s | source
Show context
solarkraft ◴[06 Nov 24 15:40 UTC] No.42063965[source]▶
Sibling comments point out (and I believe, corrections are welcome) that all that theater is still no protection against Apple themselves, should they want to subvert the system in an organized way. They’re still fully in control. There is, for example, as far as I understand it, still plenty of attack surface for them to run different software than they say they do.

What they are doing by this is of course to make any kind of subversion a hell of a lot harder and I welcome that. It serves as a strong signal that they want to protect my data and I welcome that. To me this definitely makes them the most trusted AI vendor at the moment by far.

replies(10): >>42064235 #>>42064286 #>>42064293 #>>42064535 #>>42064716 #>>42066343 #>>42066619 #>>42067410 #>>42068246 #>>42069486 #
chadsix ◴[06 Nov 24 16:00 UTC] No.42064293[source]▶
Exactly. You can only trust yourself [1] and should self host.

[1] https://www.youtube.com/watch?v=g_JyDvBbZ6Q

replies(2): >>42064538 #>>42065335 #
remram ◴[06 Nov 24 17:02 UTC] No.42065335[source]▶
Can you trust the hardware?
replies(2): >>42065435 #>>42066950 #
1. killjoywashere ◴[06 Nov 24 17:07 UTC] No.42065435[source]▶
There's a niche industry that works on that problem: looking for evidence of tampering down to the semiconductor level.
replies(1): >>42065691 #
2. sourcepluck ◴[06 Nov 24 17:22 UTC] No.42065691[source]▶
Notably https://www.bunniestudios.com/blog/2020/introducing-precurso...