4 ms·
Just to be clear, do you browse and read email in a virtual-machine or is this statement referring to the behaviours of security researchers more generally? If
by georgerobinson 11y ago
Just to be clear, do you browse and read email in a virtual-machine or is this statement referring to the behaviours of security researchers more generally?
If so, have you ever forgot to use the virtual machine and instead browsed or read email on your host operating system? If so, what did you do?
Furthmore, is it possible to break out of the hypervisor and into the host operating system?
- jcrawfordor 11y agoYour last question is really, really interesting. The answer is yes in at least one case (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0923 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0923), but I'm not aware of any real in-the-wild behavior of this sort (that is, not just basically a PoC of that vuln). Note that that vuln is related to shared directories - anyone using a VM for isolation should probably not use these. I recently heard an amusing story of another infosec professional that cryptowalled their Macbook by testing on a VM with over-generous folder shares. Of course this is an extreme example caused by a clear mistake, but it's food for thought.