3 ms·
Sure, it can go either way. But in the absence of a kernel 0-day, segregating services on the same host is useful.
by startling 10y ago
Sure, it can go either way. But in the absence of a kernel 0-day, segregating services on the same host is useful.
- AstralStorm 10y agoAnd if a kernel 0-day is available, putting the services in a VM might help. Depending on whether an exploitable bug in the hypervisor exists.