I didn't see anything to be worried about as iExec has no mention anywhere in that article which was referred at STK platforms vulnerabilities about Intel. They are working well and this kind of finding will be helpful for team iEXec RLC to look at there platform more carefully. RLC is most advance project among others trying to solve these issues.
Sure but I'd like an official statement about RLC team concerning this potential hack.
All their software relies on SGX security, and the SpecterSGX attack make it useless.
Looks to be a serious security breach for Intel SDK, and RLC if sticks to this would be another disaster for a good project.I am too waiting for the team for an official announcement if there is any impact due to this flaw.
In the oficial Slack channel, they have said (I'll copy literally):
" "All their software relies on SGX security"
This is just wrong. Sgx is an extra security in addition to Poco. It gives a bonus but we never assumed it was absolutely secure. It's one of the technologies we study and evaluate weither or not to integrate as a part of the iExec platform.
Workers without sgx are fines, and when other similar technologies become more widespread we might integrate them as well. "