Hacker News Reader

Comment by transpute | Hacker News Reader

https://en.wikipedia.org/wiki/Confidential_computing

  The following threat vectors are generally considered in scope for confidential computing: Software attacks: including attacks on the host’s software and firmware. This may include the operating system, hypervisor, BIOS, other software and workloads.

View on HN

I'm not saying it's not a critical bug that should be fixed somehow. I just thought it seemed a bit of a stretch to call replacing the hypervisor with a malicious one "easy".

The hypervisor is typically controlled by the infrastructure operator.

If the infrastructure operator is untrusted, as in some models of confidential computing, then hypervisor replacements are both easy and an expected threat.

Ok, fair point. Guess I didn't expect people to want to run their stuff on untrusted hardware.

Reply on news.ycombinator.com