Comment by traceroute66
2 hours ago
> See the sibling comment, tinfoil added scanning inside the enclave.
Clearly I'm not defending tinfoil regarding scanning but I think its only fair that you do not make the statement out of context[1].
People should read the context[1] and come to their own decisions.
Also recall that given how attestation works, Tinfoil are forced to publish what they run in the enclave in their GitHub account[2] so you can verify the statement on their blog against their repo. You do not have that luxury with the closed-source "ZDR" brigade.
[1] https://tinfoil.sh/blog/2026-09-14-safety-without-compromisi... [2] https://github.com/tinfoilsh
You're making a fair point-- but I think it's important to reflect on what it says about tinfoil's values: They believe that they are ultimately in charge of computing you purchased from them, rather than you. I agree, It's an improvement that the structure forces them to be somewhat more transparent about their actions and doesn't necessitate the hard privacy loss computing other approaches to subjugating third parties to control over their use of computing. But coercively controlling other parties use of the private computing that they bought and paid for is both unnecessary and unethical, and demonstrates harmful paternalistic and authoritarian tendencies on the part of the companies management.
Depending on the balance of your concerns a ZDR that is lying about their privacy might still be an improvement because they can't both safely conceal the violation of their promises AND tamper with the output.
When one factors in the lack of absolute protection provided by secure enclaves-- that they're reliably bypassable with advanced techniques and thus mostly serve the purpose of keeping honest people honest, I think it would be better to avoid doing business with any enclave provider that has already demonstrated such leanings.