Re:Escaping VMware Workstation Through COM1
by cbd1984 on Saturday June 20, 2015 @06:09PM
(#9751206)
Remind me: Are modern hypervisors meant to securely contain guests? Because they advertise their presence pretty loudly, and there's nothing which motivates a jail-break like reminding the inmate they're in a cell.
[ Parent
| on HN ]
This is why I'm not a fan of public cloud virtualization for high security systems (PCI-DSS/HIPPA/etc).
In addition to the escapes, you need to contend with side channel timing observation and resource contention.
Re:Escaping VMware Workstation Through COM1
by jimrandomh on Sunday June 21, 2015 @09:45PM
(#9755743)
Yes, they are. A common use case of hypervisors is to split up a large server between multiple renters, who demand a hypervisor which won't let other renters hack them.