Tell HN: Hardware flaws to confidential AI are probably worse than they let on

A Hacker News post questions how users of private AI inference running in confidential computing environments like Intel SGX/TDX can verify that TDX attestation quotes aren't forged using a key extracted from a processor via a physical attack, as described in tee.fail. The author notes limited expertise on the topic and links to the tee.fail section on recovering attestation keys from Intel machines.