3 ms·
> Hardware VT-d virtualization is much more secure. Also the GUI is more user-friendly. What's the security difference? AFAIK all modern VM hosts use everythi
by Const-me 5y ago
> Hardware VT-d virtualization is much more secure. Also the GUI is more user-friendly.
What's the security difference?
AFAIK all modern VM hosts use everything available, Intel VT-x, EPT, VT-d, VT-c, AMD RVI, whatever. Virtual Box ain't an exception.
- fsflover 5y ago1. It prevents DMA attacks allowing PCI devices to read, write the memory. https://www.qubes-os.org/faq/#why-is-vt-dadm-viamd-iommu-important https://www.qubes-os.org/faq/#why-is-vt-dadm-viamd-iommu-imp... 2. Meltdown, the most reliable attack of the three discussed, cannot be exploited _from_ a fully-virtualized (i.e. HVM or PVH) VM. https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-037-2018.txt https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qs... 3. It serves as an additional virtualization layer on top of Xen supervisor, decreasing the attack surface and making some serious bugs not harmful. https://www.qubes-os.org/news/2017/07/31/qubes-40-rc1/#fully-virtualized-vms-for-better-isolation https://www.qubes-os.org/news/2017/07/31/qubes-40-rc1/#fully...