Thread
Stories related to "Converting untrusted PDFs into trusted ones: The Qubes Way (2013)" across the full archive.
Intel manual on SGX (pdf) : [link](https://software.intel.com/sites/default/files/managed/48/88/329298-002.pdf)
A good friend of mine did this work, and finally got it into a shape they felt was worth sharing.
They're also looking for work, so if you like what you see, you should contact them. ;)
Abstract: "Extended Berkeley Packet Filter (eBPF) is a Linux subsystem
that allows safely executing untrusted user-defined extensions inside the kernel. It relies on static analysis to protect
the kernel against buggy and malicious extensions. As the
eBPF ecosystem evolves to support more complex...