3 ms·
I'm not saying it's not a critical bug that should be fixed somehow. I just thought it seemed a bit of a stretch to call replacing the hypervisor with a malicio
by magicalhippo 1y ago
I'm not saying it's not a critical bug that should be fixed somehow. I just thought it seemed a bit of a stretch to call replacing the hypervisor with a malicious one "easy".
- transpute 1y agoThe hypervisor is typically controlled by the infrastructure operator. If the infrastructure operator is untrusted, as in some models of confidential computing, then hypervisor replacements are both easy and an expected threat.
- magicalhippo 1y agoOk, fair point. Guess I didn't expect people to want to run their stuff on untrusted hardware.