Joanna Rutkowska

@rootkovska ↗

Deleted No

Hibernated No

Last Checked Nov. 19, 2022

Created

Mon Sep 19 11:21:01 +0000 2016

Likes

Retweets

Source

TweetDeck

View Raw Data

JSON Data

View on Twitter

Likely Available

Joanna Rutkowska @rootkovska

@veorq I wonder what scripts you use to fetch, verify, and create a build env for SGX apps *securely*? — PolitiTweet.org

Posted Sept. 19, 2016

Preceded By

Joanna Rutkowska @rootkovska

Just a reminder that this issue still doesn't seem to be resolved(?) See the thread between @jessfraz and me below: https://t.co/s5lsG9RnJQ — PolitiTweet.org

Is there a way to enforce signature verification of the image used by docker for env bootsraping? e.g. Dockerfile: "FROM ubuntu:16.04"?

Posted Sept. 19, 2016

Followed By

Joanna Rutkowska @rootkovska

@veorq E.g. so that some MitM attack not serve you a backdoored SDK files, or the Ubuntu image used as the build env? — PolitiTweet.org

Posted Sept. 19, 2016