3 ms·

I'm quite confused about the situation and attack vector you're describing. Could you explain? If you had direct (root) access to the hardware, you can replace

I'm quite confused about the situation and attack vector you're describing. Could you explain? If you had direct (root) access to the hardware, you can replace firmwares/BIOS, which is what we are discussing. However, as I'm suggesting, if that machine was only ever provisioned with a VM, the bad actor is not given access to the hardware directly (hypervisor bugs aside)

db48x 9y ago
You can't count on the hypervisor being bug-free, and hardware moves from machine to machine. If compromised hardware gets into your machine, regardless of the route, the fact that your programs are running in a VM won't save you.