3 ms·

if you are running public facing servers off a vm in your kitchen and also use the host os to access a corporate VPN you're going to have a bad time

• yuhong 10y ago
  I wonder how many VM escape bugs are in Parallels.
  • nickpsecurity 10y ago
    That exact problem was why security kernels and later separation kernels were invented. The theory was you could bulletproof 4-12Kloc of mostly static code more easily than monolithic, dynamic hypervisors. They have less nifty features, though. Really bare bones.
  • ec109685 10y ago
    It seemed like he didn't escape but instead cracked the password using ssh.
    • wopwopwop 10y ago
      Could someone more knowledgeable here explain this to me? How do you "crack the password using ssh" from a guest VM to the host? That seems to imply that the guest VM and the host were somehow on the same network and the host had a SSH service. Is this the case? And if so is that normal (or the default?) config, that you can network from the guest VM to the host? Thanks
      • yuhong 10y ago
        Yes, I think so. No I don't think it is the default.