Comment

Comment by hedora

How so? Isn’t this just the xkcd authorization model?

https://xkcd.com/1200/

I tried to read the article, and know what all the words mean (sel4, enclaves, virtualization primitives, etc.).

It all seems very complicated and error prone, but I couldn’t figure out what the attack model is, or what the security objectives are.

Eg, what sorts of things run in exclaves, and under what circumstances will a persistent kernel level compromise on my laptop protect those things?

parent hedora 1 year ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton