Comment by solyin
4 days ago
How do you verify that privatemode.ai or tinfoil.sh are actually running the AI in a secure enclave? If you're the untrusting type, there's no way for them to prove they're not faking it being run on a fake secure enclave. If you're the really untrusting trusting type, "Reflections on Trusting Trust" should be your guidebook on why local hardware won't save you either.
> How do you verify that privatemode.ai or tinfoil.sh are actually running the AI in a secure enclave?
First, the obvious answer, Privatemode.ai has been independently externally audited[1]. So there's that. ;)
Tinfoil have not been independently audited, apparently its "coming soon (maybe)".
Secondly, I quite clearly said "if you can't run your own hardware". But to spell it out: There is no debate to be had that your own hardware will always be best. Preferably in your own private datacentre so as to avoid evil-maid attacks.
However, if we are starting from the position where you CANNOT run your own hardware, then clearly these services are preferable to some "trust me bro" contract clause.
The enclave providers publish their repos on GitHub and you can cryptographically check the attestation change.
Is it perfect ? Of course not.
Is it a million times better than "trust me bro" ZDR ? Hell yes.
The "trust me bro" people don't even publish their runners in GitHub. So you have absolute zero visibility, you cannot even check their claims on a theoretical level, its a complete closed-shop.
[1] https://www.privatemode.ai/security-and-encryption
Yes, company A paid company B to say that company A is safe. Company B is under no duress at all with their findings being what company paid them to find. "Just trust these bros that I've recently paid"
You didn't address my question on reflections on trusting trust. For the AI era, there's https://arxiv.org/abs/2610.13928
> Yes, company A paid company B to say that company A is safe.
Have you ever done business in Germany ?
Privatemode is German, they list the German public sector and medical sector amongst their clients.
The chances of them messing around fudging audits is, well, zero.
Don't make shit up.
I won't be wasting my time with any further replies to you.
1 reply →