@david_chisnall@infosec.exchange
Post #1833338
2026-04-22 07:46 UTC
@bms48 @downey
MPK and SGX are unrelated features. SGX is largely dead at this point, Intel decided TDX is the future because the programming model for SGX was awful and Intel can’t do software.
Replies (2)
-
@bms48@mastodon.social 2026-04-22 07:49
@david_chisnall @downey I was trying to avoid going there, but we went there: Mu. Yeah, I haven't fully unpacked AMD's SEV TSME/SME feature sets either. We are all waiting for CHERI. Enclaves still don't solve for pointer based enforcement and in many ways CHERI recapitulates some ideas being the Plessey PP250 as used by the British Army from the 80s onwards.
-
@bms48@mastodon.social 2026-04-22 07:51
@david_chisnall @downey I think we could deal with less user trust betrayal when installing agentic coding tools of any kind though, but there appears to be an industry wide lemmming run, even Opencode.ai is affected by things like this: https://www.thatprivacyguy.com/blog/anthropic-spyware/