3 ms·

And most importantly, it should be checked by default IMO

• Wowfunhappy 6y ago
  ...no, that's where I don't agree. Again, software should attempt to be truthful by default. There's a reason we allow programs to detect the hardware they're running on—it allows for all sorts of optimizations. Does the VM claim it's network driver was manufactured by Broadcom, or does it go with Cambridge Silicon Radio? Or does it decline to provide a vendor, and if it does, how long until software starts assuming that is the sign of a VM, except this time with potential false positives for users of niche hardware?
  • yjftsjthsd-h 6y ago
    I think a key distinction is whether we're in an adversarial context or not. And I think loading untrusted applications over network connection from arbitrary third parties is absolutely a position to be distrustful.
  • elcomet 6y ago
    It could report the host's hardware.
    • Wowfunhappy 6y ago
      But now you're leaking information about the host, which I would think is worse given the purpose of a VM.
    • ruslanbogan 6y ago
      It would have to emulate the host hardware to do that because the fingerprint is only going to report what's listed in Device Manager for instance.
  • userbinator 6y ago
    Does the VM claim it's network driver was manufactured by Broadcom, or does it go with Cambridge Silicon Radio? It would simply be whatever the virtual NIC is. Intel ones seem to be pretty common, likely due to wide availability of drivers and documentation.