6 ms·
Agreed. It's also a question of complexity. Xen (for example) has a significantly smaller attack surface than the linux kernel because it just has less stuff to
by mje__ 12y ago
Agreed. It's also a question of complexity. Xen (for example) has a significantly smaller attack surface than the linux kernel because it just has less stuff to do
- mrweasel 12y agoThat hasn't stopped Xen from having bugs that have allow an attacker to escape the domU and gain access to dom0 and the hardware. The key really is: "Don't rely on visualization for security".
- Dylan16807 12y agoEven if you physically separate, you risk being exploited over whatever medium you have to communicate with the untrusted machine. There are no silver bullets, unless you count total isolation.