Hacker News: julesdrean

New comment by julesdrean in "How an inference provider can prove they're not serving a quantized model"

julesdrean — Sat, 21 Feb 2026 21:48:25 +0000

Apple does something very similar with Apple Private Cloud Compute. It's interesting cause their isolation argument is different. For instance, memory is not encrypted (so weaker protection against physical attacks), but they measure and guarantee integrity (and need to trust) all code running on the machine, not just inside the secure enclave.

Good question is how many lines of code do you need to trust at the end of the day between these different designs.

New comment by julesdrean in "How an inference provider can prove they're not serving a quantized model"

julesdrean — Sat, 21 Feb 2026 21:41:24 +0000

The provider cannot chose the attestation that is sent, the hardware assembles the attestation through mechanisms that it cannot control. That why it's called "trusted hardware" technology, you only need to trust the hardware (how it was implemented), and you don't need to trust the provider operating it.

Masquerade MCP: Redact. Replace. Retain Control

julesdrean — Tue, 24 Jun 2025 18:42:37 +0000

Article URL: https://github.com/postralai/masquerade

Comments URL: https://news.ycombinator.com/item?id=44369402

Points: 1

# Comments: 0

New comment by julesdrean in "Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI"

julesdrean — Thu, 15 May 2025 21:00:36 +0000

Love Open Titan! RISC-V all the way babe! The team is bunker: several of my labmates now work there

New comment by julesdrean in "Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI"

julesdrean — Thu, 15 May 2025 19:37:49 +0000

Azure and GCP offer Confidential VMs which removes trust from the cloud providers. We’re trying to also remove trust in the service provider (aka ourselves). One example is that when you use Azure or GCP, by default, the service operator can SSH into the VM. We cannot SSH into our inference server and you can check that’s true.

New comment by julesdrean in "Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI"

julesdrean — Thu, 15 May 2025 18:49:47 +0000

Check out incredible work by Bunnie to make this possible at home https://www.bunniestudios.com/blog/2024/iris-infra-red-in-si...

New comment by julesdrean in "Launch HN: Tinfoil (YC X25): Verifiable Privacy for Cloud AI"

julesdrean — Thu, 15 May 2025 18:44:25 +0000

Yes Azure has! They have very different trust assumptions though. We wrote about this here https://tinfoil.sh/blog/2025-01-30-how-do-we-compare