4 ms·
there aren't any decent security tools it's snake oil assume each and every VM is born compromised and deal with them accordingly
by blibble 1y ago
there aren't any decent security tools
it's snake oil
assume each and every VM is born compromised and deal with them accordingly
- nathan_naveen 1y agoVMs are themselves untrustworthy we should be computing with paper and pencil (and flipping bits with an eraser)... Lol!
- wahern 1y agoA VM is a reasonably defensible boundary which you can use to make meaningful assessments about exposure and vulnerability. It's like safe sex--you assume your partner has an STD and take measures to prevent transmission. VMs are like condoms, as opposed to herbs or reputation heuristics. Most of this recent eBPF tooling, especially the products that pretend to mitigate exploits, is just recapitulating the security theater of the Windows world. And we all know how that turned out. Windows' security was a joke until Microsoft changed course and started focusing on correctness and meaningful and defensible architectural boundaries. Sadly the corporate embrace of Linux seems to be pulling the ecosystem along the same path Windows and the big Unix vendors were taken.