HackerTrans
TopNewTrendsCommentsPastAskShowJobs

patch_cable

no profile record

Submissions

AWS announces EC2 instance attestation

aws.amazon.com
22 points·by patch_cable·10 個月前·9 comments

comments

patch_cable
·2 個月前·discuss
I don’t think it is so binary.

If there is more friction to communicate with me I expect to hear from people less often.

As an example, my friends that only use Discord and not SMS or Signal definitely hear from me less frequently. It doesn’t mean we’re not friends, but we do communicate less frequently.
patch_cable
·2 個月前·discuss
That’s a bit uncharitable. It made perfect sense to me. I also learned something about Japanese lacquer.
patch_cable
·5 個月前·discuss
In the exact same configuration? Yes.
patch_cable
·6 個月前·discuss
The date of the notice is October 28th. The separation dates given in the letter are 90 days out from the date of the notice (for some technical reasons, some employees had a separation dates a bit further out.)
patch_cable
·6 個月前·discuss
The books are also physically really pleasant to hold and look at.

I’ve read each book they’ve published and enjoyed them all.
patch_cable
·10 個月前·discuss
I think they’re saying anyone could order “secure” checks with your account number on them.
patch_cable
·10 個月前·discuss
Excited to say I worked on this feature! (Standard disclaimer: thoughts and opinions are my own and may or may not be shared by my employer.)

To give an idea of the kinds of things you can do now:

  - Keys or other secrets can only be decrypted (via KMS) by an EC2 instance if it is running an approved AMI. 
  - You could build a certificate authority (CA) which only issues a certificate to an instance running an approved AMI. 
This is similar to the functionality that was available in Nitro Enclaves. However, enclaves came with restrictions (such as only being able to communicate through a vsock) that made them not a great fit for all use cases.