3 ms·
Saying "there are lots of VMs with security problems, therefore VMs cannot be secure" is faulty logic. Most (perhaps all) existing VMs are quite complicated an
by javert 15y ago
Saying "there are lots of VMs with security problems, therefore VMs cannot be secure" is faulty logic.
Most (perhaps all) existing VMs are quite complicated and are not designed specifically to be secure, but that does not have to be the case.
I bet I could write a secure VM in C that interprets some simple toy "virtual machine code" with around, say, 2^5 instructions. What I have in mind here is something like TinyVM [1].
[1] https://github.com/GenTiradentes/tinyvm https://github.com/GenTiradentes/tinyvm
- arethuza 15y agoYoud should: - Implement your VM - Release the source code for inspection - Provide a way for anyone to upload code (e.g. via the web) into an instance of the VM on a server you control - Give an increasing bounty for each security bug found - Publically state that you are encouraging people to try cracking it That would be fun :-)