3 ms·
You can detect if you are running in a VM
by Atotalnoob 3y ago
You can detect if you are running in a VM
- jrockway 3y agoYou can run your VM such that VM detection can't detect it. It's an arms race. The mouse is always ahead.
- preinheimer 3y agoIf the software doesn’t report that it suspects it’s in a vm at test taking time, but instead records data for later analysis the test taker is leaving themselves open for a lot of problems months down the road.
- jrockway 3y agoWho is going to pay someone to look for problems months down the road? Ultimately if malware doesn't think it's a VM, then test taking software isn't going to either. Malware is trying to resist analysis by trained professionals. Test taking software is just trying to sell to the next test; the sale is made by the company that takes the testing committee to the best sportsball game, not by how well they detect being in a VM. (Interesting corollary; you should probably ALWAYS run inside a VM. There is so much malware that tries to detect it that it actually helps you; the malware will just shut itself off out of fear of being analyzed by a security researcher.)
- ok123456 3y agoVM detection is pretty weak. In most cases, it looks for magic strings.
- A4ET8a8uTh0 3y agoThat, plus worst case, you can pass through a lot of what be used for VM id.
- BobbyTables2 3y agoDoesn’t “virtualization based security” in Windows mean that everyone is running in a VM?
- rany_ 3y agoI think that's only for the so-called Windows Sandbox.