3 ms·
You can run your VM such that VM detection can't detect it. It's an arms race. The mouse is always ahead.
by jrockway 3y ago
You can run your VM such that VM detection can't detect it. It's an arms race. The mouse is always ahead.
- preinheimer 3y agoIf the software doesn’t report that it suspects it’s in a vm at test taking time, but instead records data for later analysis the test taker is leaving themselves open for a lot of problems months down the road.
- jrockway 3y agoWho is going to pay someone to look for problems months down the road? Ultimately if malware doesn't think it's a VM, then test taking software isn't going to either. Malware is trying to resist analysis by trained professionals. Test taking software is just trying to sell to the next test; the sale is made by the company that takes the testing committee to the best sportsball game, not by how well they detect being in a VM. (Interesting corollary; you should probably ALWAYS run inside a VM. There is so much malware that tries to detect it that it actually helps you; the malware will just shut itself off out of fear of being analyzed by a security researcher.)