this post was submitted on 01 Nov 2026
234 points (97.6% liked)

Technology

89355 readers
3167 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
234
Firm that lets you rent out your idle Mac for AI inference workloads warns of plummeting token costs — Darkbloom network sees earnings drop to $1.23 a day as Anthropic tokens fall 77%. (www.tomshardware.com)
submitted 20 hours ago by eicker@lemmy.world to c/technology@lemmy.world
68 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] ozymandias117@lemmy.world 1 points 4 hours ago* (last edited 3 hours ago) (1 children)

Attesting is very different from protecting

The binary performing the inference isn't running in the TEE, because the TEE runs on a weaker processor. The TEE is validating that the binary running on the main processors hasn't been tampered with

That's decent, but doesn't match the statement that inference is happening in the TEE

[–] 0x0@lemmy.dbzer0.com 1 points 3 hours ago (1 children)

I think the phrase "running in the TEE" is the idiomatic way to describe a program running on the main CPU, attested by the TEE processor, and protected/isolated from other processes on the system (modulo exploits, lol). I'm vaguely familiar with AMD's SEV-SNP, mainly from reading security papers rather than any hands-on experience. I make no claims about Apple's Secure Enclave, though.

[–] ozymandias117@lemmy.world 1 points 3 hours ago (1 children)

I very much disagree with

think the phrase "running in the TEE" is the idiomatic way to describe a program running on the main CPU

In the Confidentiality/Integrity/Availability triangle, a secondary process running in another operating system gives you integrity, but not confidentiality

[–] jivandabeast@lemmy.browntown.dev 1 points 2 hours ago (1 children)

You both should just read the docs

https://docs.darkbloom.dev/security/overview

They lay out all the protections they have in place to ensure private prompt execution. The TEE is used to validate the integrity of the binary, and they use other protections like E2EE, SEV-SNP on the coordinator, MacOS security protections (hardened runtime, SIP, kernel protections, etc), plus (from what i can tell an optional enrollment from providers) in Apple's MDM which makes Apple verify the integrity of the system.

[–] ozymandias117@lemmy.world 1 points 2 hours ago

That's literally what I said, and why I disagreed with the other poster saying it ran in the TEE

Whether the protections of the main binary are sufficient I've made no comment on