Oh.
https://arstechnica.com/information-technology/2018/03/a-raft-of-flaws-in-amd-chips-make-bad-hacks-much-much-worse/
<<Secure enclaves like the one found in iPhones are intended to be impenetrable fortresses that handle tasks too sensitive for the main CPUs they work with. AMD's version of that co-processor contains a raft of critical flaws that attackers could exploit to run malware that's nearly impossible to detect and has direct access to a vulnerable computer's most sensitive secrets, a report published Tuesday warned.>>
@Angle This is why I don't think "protected enclaves" are going to work in the Cloud either.
Where they're already being hyped as the way to protect your corporate secrets from being trivially exposed by the owner of the hypervisor (eg: Amazon, who have a $600 million contract with the CIA, who as of today are going to be run by a blacksite torturer, but surely will never ask companies to do anything illegal like scrape cloud RAM for domain credentials and private keys).