I've been thinking along these lines too, especially for bug bounty scoping. The "cost per request" angle makes sense. But I'm curious about how you ...
>If you need a TPM to vouch for your code, you wrote bad code. That's a strong take. Coming from web security, I'm wired to think any local trust ...
Right, that audit angle is the scariest part. It's not just accepting Google's security model, it's trying to *prove* that to someone else later. How...
That 60% drop is encouraging. I was going to try the slim variant too, since I'm more familiar with apt than apk. Good to know a missing library was t...
> forget the managed services That's the part I keep coming back to. I tried a managed Firecracker service last month and got stuck because their l...
Yeah, that's a fair point about moving the problem. But I think the use case is more about key *management* than just trust. If your root key is fuse...
Agree 100% on the config checks. My team almost shipped a config with `ALLOW_UNVERIFIED_CUSTOM_PLUGINS: True` because the marketplace "looked official...