5 ms·

People buy VPS from linode/digitalocean/vultr or worse some solusvm based provider and believe such crytps give them a secure area

• nacs 5y ago
  As long as the VPS owner don't leave the Veracrypt image mounted and give a stranger root access to the server, this wouldn't work. Also, if a hacker has admin/root access as is required for this tool to work, you have all kinds of other problems.
  • hdbdhr66 5y ago
    You can scan the memory of a guest from the hypervisor afaik
    • _kbh_ 5y ago
      On most hosts you can but I believe AMDs EPYC processor support hypervisors where the host cannot access the memory via a feature called Secure Encrypted Virtualisation (SEV).
      • SXX 5y ago
        Yeah there is SEV support, but I tried to find whatever e.g Oracle Cloud utilize it and found nothing. It's also require SEV support in both hypervisor and guest OS. PS: you can check whatever SEV enabled this way in the guest. It's suppose to say "AMD Secure Encrypted Virtualization (SEV) active": dmesg | grep -i sev
  • aborsy 5y ago
    VPS provider has the keys through RAM. I would be interested to know if VPS providers actually go as far as dumping and snapshoting RAM (most of them claim they don’t even access disk or monitor traffic). It would be big deal for systems such as EC2.