Stale job access lingers because nobody owns removal
The author says role transfers should trigger a deletion review, with named owners and expiry dates on extra rights.
Stories per day · 30 days
1 RSS
Relatedaccess-management1amutable1authentication1checkpointing1confidential-computing1fido1firmware1identity1least-privilege1linux1measured-boot1merkle1offboarding1ovmf1passkeys1plcs1post-quantum1secure-enclaves1
18 stories, newest first · one card per story
Stories tagged #attestation
AMORT-V1 reduces post-quantum attestation costs for industrial controllers
Checkpointed protocol cuts signing and commitment overhead by up to 878 times versus per-report methods.
Amutable opens private preview of Foundations Linux without SSH
Machines must send signed, hardware-backed reports of their images before receiving secrets or rejoining a cluster.
Tinfoil replaces OVMF with about 300 lines of assembly
The company moved enclave boot measurement out of a million-line C firmware so an untrusted host cannot load arbitrary guest code.
1
Debate over whether passkey attestation could lock out users
Critics say sites could later reject non-attested passkeys; Apple and FIDO participants say consumer attestation is not the goal.
Mission-Aware Attestation Envelopes for Time-Critical Autonomous Action: A Hardware-in-the-Loop V2I Study
Researchers define mission-aware attestation that rejects stale or late integrity evidence on a hardware-in-the-loop V2I platform.
Resource-Optimized and Energy-Aware Agentic AI Framework Anchored on Blockchain for Secure Software Supply Chains
Researchers propose a blockchain-anchored agentic AI framework that attests SDLC security checks before release.
Trusted Model Environment for Private Semantic Computations
Researchers propose trusted model environments that run generative models inside TEEs for private semantic computation.
rApp/xApp Attestation: A New Security Use Case for O-RAN
Researchers propose runtime rApp and xApp attestation for O-RAN, with a prototype under 40 milliseconds.
DDRop Attack Forces Intel TDX Confidential VMs Into Debug Mode and Exposes Memory
KU Leuven and ETH Zurich researchers released DDRop PoC hardware that forces Intel TDX confidential VMs into debug mode and exposes plaintext memory.
2
Fresh-Challenge VDF Attestations for Model-Relative Response Latency
Fresh-Challenge VDF Attestations bind verifiable delay functions to unpredictable public challenges, yielding succinct evidence of model-relative response latency.
Session Attestation for Unmodified TLS Services in Confidential Virtual Machines
SessionLatch adds session attestation to unmodified TLS services in confidential VMs, cutting short-upload latency 63.1% versus TNG on Hygon CSV.
Has anybody seen my keys? A key-hierarchy strategy for rack-level security
Oxide's RFD 0301 proposes a rack-level key hierarchy using Shamir secret sharing and a trust quorum to protect data-at-rest keys.
1
How to secure edge AI in customer-owned environments
Microsoft outlines security architecture guidance for edge AI, urging runtime attestation, artifact provenance, and deterministic mediation of model actions.
3
Linux Foundation Introduces TRACE Standard for AI Runtime Evidence
The Linux Foundation introduced TRACE, an open standard providing hardware-attested runtime and compliance evidence for AI agents.
Linux Foundation takes on TRACE, a hardware-backed runtime evidence specification for AI agents
The Linux Foundation adopts TRACE, an OPAQUE-contributed spec giving AI agents hardware-attested, cryptographically verifiable runtime and compliance evidence.
2
New TCG guidance gives buyers a way to test PQC-ready TPM claims
Trusted Computing Group published PTP 1.07-based requirements defining PQC-ready and PQC-upgradable TPM designations to guide buyers assessing quantum-safe hardware.
2
VU#431093: TCG TPM 2.0 reference code found vulnerable to information leakage and timing side-channel attacks
CERT/CC discloses two TPM 2.0 reference code flaws allowing RSA key decryption and forged TPM attestations via crafted commands.