News for hackers. Stuff that matters.

A comment on Ask HN: What do you use VMs for regularly?. Parent comment

Re:Ask HN: What do you use VMs for regularly? by no-dr-onboard on Tuesday June 21, 2022 @10:12AM (#31824171)
You might have it backwards. Most people typically do untrusted actions inside the VM and keep their host “clean”. You’re correct though that VM escapes are pretty difficult, especially with modern, patched microcode processors.
[ Parent | on HN ]
Re:Ask HN: What do you use VMs for regularly? by a1xndr on Tuesday June 21, 2022 @12:01PM (#31825482)
> VM escapes are pretty difficult, especially with modern, patched microcode processors

Most VM escapes happen through buggy virtual-devices written in C/C++/.. code. Virtual-device bugs that are exploitable by attackers with root access in the VM are found frequently.

[ Parent | on HN ]
Re:Ask HN: What do you use VMs for regularly? by fsflover on Wednesday June 22, 2022 @05:08AM (#31833591)
It's not frequent at all with Qubes hardware virtualization: https://www.qubes-os.org/security/xsa/.
[ Parent | on HN ]
Re:Ask HN: What do you use VMs for regularly? by danuker on Tuesday June 21, 2022 @11:08AM (#31824812)
> modern, patched microcode processors

This makes me wonder how many security holes CPUs have which have been buried into secrecy by the manufacturers.

[ Parent | on HN ]