Skip to main content
13 events
when toggle format what by license comment
Mar 25, 2019 at 0:22 comment added forest In general, unless your threat model is really, really specific E.g. If you are a reverse engineer who expects to be infected with malware performing secret computations and which does not run privileged and while you have no access to log the infection vector (network, etc) then SGX might not be a great idea because you wouldn't be able to analyze the malware (but you would know it exists and know what overt actions it takes on your computer). Otherwise, you have absolutely nothing to worry about and SGX is harmless.
Mar 25, 2019 at 0:20 comment added forest A threat model is an abstract model of a person's adversaries, the assets the adversaries are attempting to compromise, and various other salient factors. For example, SGX, as Steffen Ullrich says, makes it possible for malware to hide its exact computations, but it does not allow someone to escalate privileges.
Mar 24, 2019 at 21:00 history tweeted twitter.com/StackSecurity/status/1109922982661623808
Mar 24, 2019 at 13:52 history edited Vlastimil Burián CC BY-SA 4.0
re-tagged + grammar
Mar 24, 2019 at 13:09 comment added Vlastimil Burián @forest I'm not sure what your question means. You might want to put it in layman's terms for me. Thank you.
S Mar 24, 2019 at 13:06 history suggested mmv-ru CC BY-SA 4.0
Add links to SGX technology
Mar 24, 2019 at 13:03 history became hot network question
Mar 24, 2019 at 12:58 review Suggested edits
S Mar 24, 2019 at 13:06
Mar 24, 2019 at 9:55 vote accept Vlastimil Burián
Mar 24, 2019 at 9:54 history edited Vlastimil Burián CC BY-SA 4.0
added 202 characters in body
Mar 24, 2019 at 9:34 answer added Steffen Ullrich timeline score: 5
Mar 24, 2019 at 9:33 comment added forest What is your threat model?
Mar 24, 2019 at 9:04 history asked Vlastimil Burián CC BY-SA 4.0