derpsteb
Joined 5 years ago
Karma
17
Submissions
9
Member since
Aug 16
Recent submissions
Comment · 9 months ago
My experience is that neither has a good UX for what I usually try to do with coding agents. The main problem I see is setup/teardown of the boxes and managing tools inside them.
Comment · 1 year ago
I was part of a team that does the same thing. Arguably as a paid service, but source availability and meaningful attestation.
Service: https://www.privatemode.ai/ Code: https://github.com/edgelesssys/privatemode-public
Comment · 1 year ago
Edgeless Systems | Software Engineer - Confidential Computing and AI | REMOTE (EU) - Office in Berlin & Bochum (GER) | Full-time
We are a team of ~20 people, building open source software to make confidential computing more usable. To achieve this we have built multiple products, most of which you can find on our Github page (https://github.com/edgelesssys/). You won't find our AI product there, best way to learn about it are the docs (https://docs.privatemode.ai/).
Our products span unusually far across the tech stack, starting at measured boot, through Kubernetes operators, finishing somewhere in our JavaScript frontend. We don't expect you to do all of it - these are just possibilities.
Tech stack: Go (mostly), Rust (some), JavaScript (some), Nix / NixOS, Kubernetes, Terraform, vLLM, AMD SEV-SNP, Intel TDX.
Website: https://www.edgeless.systems/ Contact: Apply via the posting on our careers page and please mention that you come from HN. Also feel free to email me via ob [at] edgeless.systems in case of any questions.
Comment · 2 years ago
There are startups building solutions like PCC. They all leverage confidential computing to do so. Decentriq, Opaque, Anjuna, Edgeless Systems (multiple OSS projects) come to mind.
disclaimer: I work for one.
Comment · 2 years ago
Apple's secure enclave docs also mention memory encryption. The PCC blogpost mentions that the server hardware is built on secure enclaves. And since they are claiming that even Apple can't access it, I am currently assuming that there will be memory encryption happening on the servers. At which point you have have the main ingredients of CC: memory encryption & remote attestation.
EDIT: and they mention SGX and Nitro. Other CC technologies :)
Comment · 4 years ago
Constellation (a Kubernetes distro) [1] on Azure would give you this attestation feature. You could then run sth like HashiCorp's Vault in that cluster. You will know that all nodes of that cluster are in the state that you expect them to be through the attestation statement.
[1] https://github.com/edgelesssys/constellation
Disclaimer: I work for Edgeless Systems.
Comment · 4 years ago
5mins later: WAIT, YOU FORGOT ALL THESE 20 RUNS!!!!