Skip to main content
5 events
when toggle format what by license comment
Jun 17, 2022 at 2:10 comment added forest @JosephSible-ReinstateMonica That's just the remote attestation which is broken due to the firmware rollback attacks being possible, it looks like (so their mitigation can be bypassed). But either way, my point is only that it's not fundamentally impossible to protect a guest from the host.
Jun 17, 2022 at 2:09 comment added Joseph Sible-Reinstate Monica @forest But SEV doesn't actually seem secure (see, e.g., arxiv.org/abs/1908.11680), plus it's a lot of extra work to set up, so even if it were perfectly secure, getting its benefits is a lot trickier than just using a normal VM.
Jun 16, 2022 at 23:12 comment added forest @JosephSible-ReinstateMonica There are some techniques that allow a VM guest to be protected by the host on hardware that supports it, e.g. AMD SEV.
Jun 16, 2022 at 22:56 comment added Joseph Sible-Reinstate Monica A VM doesn't really help here either, unless you mean reinstalling to make Linux the host and Windows the guest. VMs can only protect the host from the guest, not the guest from the host.
Jun 16, 2022 at 15:25 history answered Steffen Ullrich CC BY-SA 4.0