That’s literally what I said, and why I disagreed with the other poster saying it ran in the TEE

Whether the protections of the main binary are sufficient I’ve made no comment on

I very much disagree with

think the phrase “running in the TEE” is the idiomatic way to describe a program running on the main CPU

In the Confidentiality/Integrity/Availability triangle, a secondary process running in another operating system gives you integrity, but not confidentiality

Attesting is very different from protecting

The binary performing the inference isn’t running in the TEE, because the TEE runs on a weaker processor. The TEE is validating that the binary running on the main processors hasn’t been tampered with

That’s decent, but doesn’t match the statement that inference is happening in the TEE

There’s no way that’s possible

My reading of this is the TEE is used to validate the binary hasn’t been tampered with, but the TEE is definitely not powerful enough to do any inference.

The provider process is hardened against common local inspection paths, including debugger attachment and external memory inspection. The integrity of the running binary is also part of the trust model, helping ensure that the software serving requests matches what the network expects.

The system also uses hardware-backed attestation rooted in Apple’s security architecture. Secure Enclave keys, attestation signals, and recurring challenge-response checks are used to verify that a participating node is running with the expected protections and software state.

Hey now. Unlike Pedophile Trump, a cunt has both depth and the capacity to give pleasure

eBPF does run in kernel mode.

Maybe better than a module, but I wouldn’t say “the kernel doesn’t include any new code”

It’s also why they have to use “integrity” mode of kernel lockdown

If they used “confidentiality” mode, their eBPF code would be untrusted by the kernel and couldn’t be loaded

Impossible. The elite want to know where every penny you spend goes, and it’s too hard with cash

You’re more likely to see credit cards only allowed through Google Pay or Apple Pay than going back to cash

They’ll claim it’s having to support so many third party’s in the chain causing the problem, so we need 2 “trusted” entities

They now use Proton, but they removed the native Linux client and Proton wasn’t integrated yet at that time

Rocket League was one

I believe it was delisted on steam as well, but it still removed support for players at the time

They were purchasing studios and removing Linux clients from games that already had native clients