Hacker News
points by gpderetta 22 hours ago | 0 comments
you might have an untrusted sandboxed workload that is not supposed to communicate externally handling secrets, and a different sandboxed workload able to communicate with the external world, not handling secrets.
[–] gregwebs 21 hours ago
The solution is to not have an untrusted workload handle secrets.
[–] usrusr 20 hours ago
One workload with observed radio discipline handling secrets, the other workload with a haystack of chatter that's not supposed to know about any of the secrets. When supply chain attack is in scope, trust only ever goes as far as misbehavior is observable. Cooperating workloads could be quite a powerful tool to make misbehavior less observable.