News for hackers. Stuff that matters.

A comment on Venom – A security vulnerability in virtual floppy drive code. Parent comment

Re:Venom – A security vulnerability in virtual floppy drive ... by duaneb on Wednesday May 13, 2015 @09:37AM (#9538793)
If I were amazon, I would have done an audit of the hyperv software and removed the floppy driver code entirely if unused for precisely this reason. This strikes me as a basic, "no-brainer" hardening step for my billion dollar(s) hosting business.
[ Parent | on HN ]
Re:Venom – A security vulnerability in virtual floppy drive ... by jpgvm on Wednesday May 13, 2015 @09:43AM (#9538834)
They use Xen, not Hyper-V and yes they already remove/replace large portions of Xen.
[ Parent | on HN ]
Re:Venom – A security vulnerability in virtual floppy drive ... by justincormack on Wednesday May 13, 2015 @09:45AM (#9538851)
Their PV domains are not affected anyway. Quite possibly they are running qemu in stub domains for HVM as well, rather than on dom0, but you may well be right about the floppy code too.
[ Parent | on HN ]