Nate Sales

systems + security + applied physics

[Nate Sales @natesales]

This is really cool.

@TinfoilAI excited to add the "Hardware Memory Tagging" entitlement on iOS 26 + iPhone 17/Air: https://t.co/nq5xSenljm

[Ivan Krstić @radian]

🔺iPhone models announced today include Memory Integrity Enforcement, the culmination of an unprecedented design and engineering effort that we believe represents the most significant upgrade to memory safety in the history of consumer operating systems. https://t.co/ule9gaXzc1

[Nate Sales @natesales]

Step #1: reproducing "One Glitch to Rule Them All" https://t.co/jDwRE93a0b

[Nate Sales @natesales]

Can an attacker with physical access break TEEs? Let's find out.

[Nate Sales @natesales]

@sachaservan @rohanpaul_ai Interesting that training risks are weighted the most, even over transparency and 3rd party data sharing

[Y Combinator @ycombinator]

Tinfoil (@TinfoilAI) lets you build verifiably private AI applications in the cloud.

Replace legal agreements, PII redaction, and “pinky promises” with fully verifiable end-to-end security powered by NVIDIA’s hardware-backed confidential computing mode.

https://t.co/EdjwNIZwmt

Congrats on the launch, @t0nyav, @julesdrean, @sachaservan and @natesales!

[Nate Sales @natesales]

@traviscline @sachaservan @grittygrease @projectsigstore Reproducibility is rough. It shouldn’t block “softer” supply chain security in the interim, but will always be stronger than deferring trust to the build environment.

[Nate Sales @natesales]

@traviscline @SachaServan @grittygrease Secure enclaves + in-band verification needs to be the standard.

Reproducible builds and TLS channel binding need to happen too, but TEEs and @projectsigstore are here today to link source code to a running service.

[the tiny corp @__tinygrad__]

We switched from AMD's driver to our AM driver...and now 4 GPU Llama is faster on red box than green box!

[Nate Sales @natesales]

SEV-SNP isolates a VM from the hypervisor and encrypts VM memory with a key stored on the CPU. This prevents host based attacks on private data within a VM. (2/n)

[Nate Sales @natesales]

@ntdvps There are also a few convenience features that depend on real-time access to BIRD - automatic rollbacks, annotated error logs, and a status command that combines the authoritative config with the current session state.

[Nate Sales @natesales]

@ntdvps You could run Pathvector without BIRD and copy the configs over externally, but the primary use case is to run it directly on the network device. It can do route optimization and such so needs to be on device.