Re:Alpine Linux Docker images have NULL for root password
by smolder on Wednesday May 08, 2019 @06:39PM
(#19863621)
Why do they have to actively exploit hardware/vms that they own? Isn't it pretty trivial for a hypervisor to "passively clone" data right out of the memory of the VM? Or to use management interfaces/custom peripherals to exfiltrate data if it were bare metal? AWS is kind of a black box to me but it seems hopeless to try to protect data from people that physically control the systems.
[ Parent
| on HN ]
Re:Alpine Linux Docker images have NULL for root password
by disiplus on Thursday May 09, 2019 @03:21AM
(#19866078)
i was especially talking about passively mirroring/analysing network traffic.
afak there is no easy and trivial way to "passively clone" aka dump memory of the hypervisor all the time without it being detectable in slowdowns and so on. my concern was not that i need to protect myself from amazon for the fear that they will hack my server, but to the way that they can get insight into my customers, maybe get a snippet of the data i get and so on.
we once saw this from some other company where they noticed we where talking to the competitors and wanted to talk.