▲ | v3xro 5 days ago | |
What I see is that it's trivial to 'self-host' locally - go buy a product from Synology/QNAP etc. - they have an ecosystem, easy setup, apps, everything. Three issues from my perspective: 1) cost and 2) security+privacy 3) not so easy to integrate networking (visibility from internet side) for things like email hosting. I can also see it possible to 'self-host' things once you use a cloud where you can do 'confidential computing' stuff aka. the hosting provider does not have access to whatever it is you're running. That functionality is there on the major clouds now (EC2, Azure, GCP) all have the Intel/AMD/Arm TME/SEV/RME stuff implemented but finding it on a device that you can self-host in your little storage cupboard is impossible right now (EPYC 9004 seems to be the lowest available with that technology). At a minimum you want secure boot + attestation + memory encryption if you are not in control of the hardware space itself. | ||
▲ | tryauuum 4 days ago | parent [-] | |
> at a minimum you want secure boot + attestation + memory encryption that's an interesting statement. These all feel like patches to mitigate the evil maid problem, but they can never solve it fully |