e., a GPU, and bootstrap a safe channel to it. A malicious host program could generally do a man-in-the-middle attack and intercept and change any communication to and from a GPU. Thus, confidential computing couldn't https://honeypotz.net