5 ms·

And this is why the good Lord has given us virtual machines.

• inetknght 5y ago
  Escaping a virtual machine isn't unheard of. If I were a betting man then I would place good money that this, being a data dump of a state, could contain state-sponsored 0-days designed to escape such things.
  • emerged 5y ago
    I’d only touch this stuff with an airgapped machine which is imaged before and after.
    • inetknght 5y ago
      And even then there are ways to put malware into BIOS and disk firmware. Seriously: only a throwaway machine.
      • fsflover 5y ago
        On a Pinephone or Librem 5, there is no such semi-writable firmware. You can wipe them fully AFAIK.
        • rlonn 5y ago
          Put it on a stone tablet to be on the safe side
  • fsflover 5y ago
    Last escape from hardware virtualization on Qubes OS that I'm aware of was in 2006, by the Qubes founder: https://en.wikipedia.org/wiki/Blue_Pill_%28software%29 https://en.wikipedia.org/wiki/Blue_Pill_%28software%29.
  • nr2x 5y ago
    Sorry I actually meant virtual virtual machines - they don’t even exist. Truly the only secure option.
• tjoff 5y ago
  And viruses have adapted to that for well over a decade. And add to that, I would most certainly not trust a normal virtual machine to be a big enough boundary.
• codezero 5y ago
  And why Baphomet gave us hypervisor escapes.
• agumonkey 5y ago
  time to have a HN-swarm of static analysis