3 ms·

Has anyone ever checked for backdoors baked into these virtualization layers?

• jacquesm 10y ago
  Dive right in: https://www.virtualbox.org/browser/vbox/trunk https://www.virtualbox.org/browser/vbox/trunk This also ties into 'reproducible builds', even if you find nothing at all what does it mean if you compile the sources and don't end up with a binary that is identical. Oh, and do make sure to check if your compiler isn't inserting it's own backdoor.
  • eternalban 10y ago
    Precisely what I was wondering. We point the finger at security theatre but it seems we're running a few theatrical productions of our own.
    • jacquesm 10y ago
      The real problem is that security tends to wreck stuff in absolute terms (as in binary: your company lives versus your company dies) but until that happens it is seen as a cost without any benefits.
  • pravula 10y ago
    "Oh, and do make sure to check if your compiler isn't inserting it's own backdoor." http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf http://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thomps...