EdgelessDB: A Database Designed for Confidential Computing | Hacker News Reader

EdgelessDB: A Database Designed for Confidential Computing

techcommunity.microsoft.com

64 pointsjabo20 comments

Note: while it is based on MariaDB, it replaces InnoDB (the MariaDB/MySQL storage engine) with MyRocks (which is based on RocksDB), and as a consequence it is missing some features (such as foreign keys[1]) that prevent it from being usable in many applications.

[1] https://github.com/facebook/mysql-5.6/wiki/MyRocks-limitatio...

> Enclaves can protect against threats like malware or rootkits and even rogue administrators and physical intruders.

What will they do when the government comes knocking with a subpoena?

Run “SELECT * FROM table” on the client side and give the results to them.

Trace them enclaves with some side-channels. These things are not as secure as people think.

In Rome (US) do like the romans (Google). They just give them Bing to search telemetry data.

The title is a bit misleading: EdgelessDB was not developed by Microsoft but by a German startup (Edgeless Systems, https://www.edgeless.systems/ and https://github.com/edgelesssys/edgelessdb).

The announcement is about its availability on the Azure Marketplace.

Fixed above. Thanks!

Ouch, the guys at edgedb are going to be sad about the name competition from microsoft.

If the reverse happened, no doubt Microsoft would be sending cease and desists to edgedb.

Has Microsoft been particularly litigious of late? Pearl clutching over Microsoft’s use of telemetry (which Google never uses, by contrast) has turned into full-blown Slashdot-style insanity.

What you call insanity, I call keeping check on power abusers, and MS has decades of track record of that. The fact they started to play nicer the last few years doesn't magically erase lying, cheating, corrupting and trolling for 20 years. Also google gets it fair share of criticism.

In fact, I think we don't make enough noise given the few people outside of our bubble that knows about it.

There are roughly as many comments here about subpoenas, litigation, and naming everything with "Edge" as there are total comments on

"Android phones are sending significant amount of user data with no opt-out"

https://news.ycombinator.com/item?id=28830328

That performance is really impressive. I'm no expert in this space, but I was expecting somewhere around 30% the throughput of a regular DB. They are way higher than that.

I wonder how practical this is in reality. Production databases need Day 2 operations and capabilities like backups, replication, etc. Enclaves aren’t connected to the network, so you can’t practically back them up, nor can you replicate them for HA or DR purposes.

Why are they trying to compare the required manifest to blockchain? Seems like an unnecessary comparison for SEO

Not bad. Runtime protection of the data is really good/useful. Lets see where this project will go :)

this is genuine question

but why lately everything is Edge?

Edge Computing, Edge Devices, Edge Infrastructure, Edge Browser, Edge yada yada.

Corporate marketing types have to justify their existence by rebranding everything, and they're like sharks in a never ending feeding frenzy.

Because we’re seeing the tock, to the Cloud’s tick. Many aspects of compute are moving out of the data center and closer to the end user.

The natural cycle between centralisation and decentralisation.

Reply on news.ycombinator.com