Locked-Down Software
coolperuguy2@dolphinrider2
The idea
My belief is that sensitive software stops living on personal devices entirely. Either it runs remotely in a data center and streams video or state changes back to you, or it stays local but locked inside encrypted chips that even the device owner can't access. To express this I hold the chipmakers building encrypted computing, the smaller hardware security and root-of-trust suppliers, the clouds hosting remote software, and the networks that stream and gate access to it.
What it owns
- Smaller security chips and designs verify that devices haven't been tampered with, forming the foundation that makes locked-down software trustworthy. · RambusProvides root-of-trust designs and security building blocks that other chipmakers integrate into processors to keep code and keys locked inside the hardware., Lattice SemiconductorSmall programmable chips verify that server firmware remains untouched before any code runs, providing hardware-enforced proof of integrity at the foundation of trust., NXP SemiconductorsManufactures secure elements, tamper-resistant chips that hold cryptographic keys and run protected code inside cards, vehicles and connected devices., STMicroelectronicsMajor supplier of trusted platform modules, security chips that store encryption keys inside personal computers and servers to prove hardware integrity., Microchip TechnologySells trusted platform modules and secure authentication chips that allow hardware to cryptographically prove it has not been tampered with.27%
- Software that once ran on personal computers now runs in remote data centers and streams back to users, requiring massive cloud infrastructure to deliver and secure. · MicrosoftOperates Azure data centers that stream entire desktops to users and run workloads in confidential virtual machines where even the cloud operator cannot see the data., AmazonAWS hosts streamed desktops through WorkSpaces and runs isolated computing through Nitro Enclaves, delivering both remote execution and encryption for sensitive workloads., AlphabetGoogle Cloud runs confidential virtual machines that keep data encrypted during processing and offers browser-based access to software hosted in its data centers., OracleHosts sensitive databases and business software in its own cloud infrastructure, shifting customers away from on-premise servers to centralized encrypted environments.26%
- Processors that can run software in sealed, encrypted areas protect data even while it's being processed, making remote execution genuinely private. · Advanced Micro DevicesServer processors with SEV encryption allow software to run in data centers in a sealed state that the cloud operator cannot access or read., NVIDIAData center GPUs support encrypted computing modes that allow AI models and software to run on remote machines while keeping data sealed from operators., Arm HoldingsLicenses chip designs used in most phones and growing server deployments, including realm features that allow software to run isolated from the device owner., IntelServer processors with TDX allow software to run in sealed enclaves where code and data remain encrypted even during execution.26%
- Networks and platforms that deliver remote software to users and enforce access control decide who can reach sensitive applications. · CloudflareRemote browser isolation executes web pages on company servers and streams only the visual result to users, embodying the principle of running software remotely and returning only the picture., ZscalerActs as a security gate between users and remote software, inspecting every connection to verify who is allowed to reach an application.13%
- Cash8%