lobsters score: 1 · tags: osdev, security, virtualization
You must log in or register to comment.
In the first paragraph should it be
Since the host isn’t controlled by Tinfoil, it is untrusted under our threat model
instead of “the host is controlled”?
score 1 · canonical
It’s a unique threat model, the host is both controlled by Tinfoil and untrusted by the guest - it’s a unique threat model! Even if Tinfoil wanted to, it cannot access the guest - the post is about hardening the guest even more so a malicious host has even less attack surface to exploit
score 1 · canonical