3 ms·
> I'd like to see an ARM port of it, because Xen on ARM is quite a bit simpler than Xen on x86 AWS VMs use Xen on x86 mostly, right? So if someone has a Xen/x8
by cjbprime 4y ago
> I'd like to see an ARM port of it, because Xen on ARM is quite a bit simpler than Xen on x86
AWS VMs use Xen on x86 mostly, right? So if someone has a Xen/x86 0day, they're going to use it to break out of EC2 guests and perform cross-tenant attacks, not use it on relatively low-value Qubes where you'd need to already have RCE anyway to make the attack work.
- colmmacc 4y agoAWS VMs mostly use the AWS Nitro Hypervisor (on x86 and ARM), which has a smaller surface area than Xen and also further isolates itself from the guest using hyper-virtualization extensions. With the Nitro system, the network and storage virtualization are also implemented on dedicated Nitro cards - which have their own CPU and memory that is separate from the machine hosting the VM.
- cjbprime 4y agoThanks for the correction!