# Trustless TEE Salon (colab with Ulyssean)

**URL:** https://collective.flashbots.net/t/trustless-tee-salon-colab-with-ulyssean/5030
**Category:** Trustless TEEs
**Created:** [June 23, 2025, 6:50pm UTC](https://collective.flashbots.net/t/trustless-tee-salon-colab-with-ulyssean/5030 "2025-06-23T18:50:02Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![Quintus](https://collective.flashbots.net/letter_avatar_proxy/v4/letter/q/49beb7/32.png) [@Quintus](https://collective.flashbots.net/u/Quintus)
#### Post date: [June 23, 2025, 6:50pm UTC](https://collective.flashbots.net/t/trustless-tee-salon-colab-with-ulyssean/5030/1 "2025-06-23T18:50:02Z")

</div>

June 20, 2025; San Francisco

### **5:00 PM – 5:15 PM | Social + Sorting Hat Game**

- Mechanic: Guests self-identify interested breakout topic with sticker/badge:
- Opening town hall: what is the state of AI infra security? What are the key use cases of confidential compute in AI infra security?

### **5:15 PM – 6:00 PM | Compass Calibration**

- [Quintus Kilbourn](https://x.com/0xquintus) | Why trustless TEEs? (15min) [[slides](https://docs.google.com/presentation/d/19JC4etCMr0JQ4g8LYitqvBzVZSiYnlEg7kUd9HGrrg0/edit?slide=id.g54dda1946d_6_344#slide=id.g54dda1946d_6_344)]
  - [Dan Boneh](https://crypto.stanford.edu/~dabo/) (Roast Master): where does trustless TEE fit within applied cryptography research context?; highlight design challenges (15min)

- [Daniel Genkin](https://faculty.cc.gatech.edu/~genkin/) | Troubled Execution Environments: How Stuff Gets eXposed (15min)
  - [Andrew Miller](https://x.com/socrates1024) (Roast Master): When SGX switched from client to server, Intel got rid of the merkle tree securing memory. Wat do?

### **6:00 PM – 6:15 PM | Attacks**

- **Demo** : [Jacob Lagerros](https://ulyssean.com/) – Side channel box (power leakage attacks) [[video from other event](https://www.youtube.com/watch?v=MME6r3bqAtQ)]
- **Demo:** [Luc Chartier](https://sanative.ai/) — Covert channel box (malicious model, power leakage) (slides)

### **6:15 PM – 6:30 PM | Defense**

- **Demo** : [Jonathan Happel](https://tampersec.com/) – Tamper mesh hardware defense
- **Demo** : [Mehmet Sencan](https://earendil.ai/) – Blowing up chips for fun and security

### **6:30 PM – 7:00 PM | Lightning Talks**

- [Andrew Miler](https://x.com/socrates1024) | Agency Engineering - OAuth3 for the Agentic Web ([Slides](https://docs.google.com/presentation/d/1FGo1GfnX-FklzHU-GjM3pM8YWLlZv634Y-cEj02kbyA/edit?slide=id.p#slide=id.p))
- [John McMaster](https://x.com/johndmcmaster?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor) | FOSSF Secure Silicon ([Slides](https://docs.google.com/presentation/d/1BqEFXcnOZAKkpcpJ96up7O10ItXvApKQ-EvE4VZTU5Q/edit?usp=sharing))

### 7:00 PM **– 8:30 PM | Breakouts**

- Whiteboard 1: _ **Architecting the ideal security machine from the silicon up** _
  - Michael Gao + Sagar + John McMaster

- Whiteboard 2: _ **Plugging the gaps all the way down** _
  - Daniel Genkin + Cristina Garman

- Design jam: _ **Agent Engineer - OAuth3** _
  - Andrew Miller + Xinyuan Sun

### 8:30 PM **– 9:00 PM | Showtime**

- Breakout presentations