News for hackers. Stuff that matters.

A comment on Security Flaws in Adobe Acrobat Reader Allow Gaining Root on macOS Silently. Parent comment

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by pkulak on Thursday May 14, 2020 @01:36PM (#23182640)
That kinda stuff runs well in a VM. Not too GPU dependent, so you generally get very-near-native performance. The only problem I end up having is constantly blowing away my VMs, racking up too many new installs, and running afoul of key limits.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by fullstop on Thursday May 14, 2020 @01:41PM (#23182748)
Have you seen qubes os? [1] Obviously this would not work on OS X, but the concept is fascinating and definitely a different and unique approach at security and isolation.

1. https://www.qubes-os.org/

[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by VistaBrokeMyPC on Thursday May 14, 2020 @02:02PM (#23183075)
Qubes is great but be careful... I tried giving a specific usb port to a windows vm to play games with a joystick and accidentally gave all of my USB inputs to it, effectively locking myself out of dom0. Oops.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by zouhair on Thursday May 14, 2020 @02:53PM (#23183752)
That's the UNIX philosophy.

    Unix gives you just enough rope to hang yourself - and then a couple of more feet, just to be sure.
[0]: https://www.azquotes.com/quote/1293001
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by pkulak on Thursday May 14, 2020 @02:16PM (#23183260)
That looks really fun, thank you. I'm going to check this out.. maybe in a VM :D.

I really like these kinds of projects. NixOS and Fedora Silverblue are a couple others.

[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by WrtCdEvrydy on Thursday May 14, 2020 @02:59PM (#23183832)
Qubes isn't designed to run in a VM, but it can.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by jzer0cool on Thursday May 14, 2020 @01:47PM (#23182837)
I wanted to try running in a VM and actually have not considered believing bad performance. How is performance degradation - is it very very noticeable?
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by pkulak on Thursday May 14, 2020 @02:12PM (#23183214)
With the virtualization primitives in modern CPUs it's like 95%+ of native. GPUs are a total lost cause though, so you won't be playing games (unless you do GPU passthrough).
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by blibble on Thursday May 14, 2020 @08:06PM (#23187320)
if you set the VM UUID + keep the MACs of the NICs the same it usually bypasses key limits
[ Parent | on HN ]