1

This question already has an answer here:

I'm just asking if my host machine stays safe when browsing the dark web darknet using Tor on a virtual machine with bridge connection through the host machine ? Since the virtual machine will be using the same RAM with host machine, can a virus inside the VMware RAM affect the host machine? Like send the IP address of the host machine, open a port, open a backdoor etc? Will there be a difference in terms of the security to the host machine if it is either Linux or Windows ?

marked as duplicate by Steffen Ullrich, crovers, grochmal, Xiong Chiamiov, S.L. Barth Jan 10 '17 at 7:20

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1

There have been attacks hosts with non-ECC ram through their virtual machine. The attackers were able to pass commands to the host computer by manipulating the VM memory.

http://www.darkreading.com/risk/hacking-tool-lets-a-vm-break-out-and-attack-its-host/d/d-id/1131254?

The same security rules that apply to your host, apply to your VM. Use VPNs and the like to help mask your public IP.

  • Thanks that what I'm looking fore ,so I think the best way is to boot an OS using USB stick and browse safely . – Osama Al-Banna Jan 9 '17 at 19:52
  • 1
    A live image of an OS combined with a properly encrypted hard disk will protect your physical system. Tor + a trusted VPN would add more layers of your physical network security. – tim_shane Jan 9 '17 at 19:58
  • Thanks yes totally agree with you ,I forgot about the protected hard disk . – Osama Al-Banna Jan 9 '17 at 20:01
  • @tim_shane how can a properly encrypted hard disk protect the physiacl system in this case? – cyzczy Jan 9 '17 at 20:29
  • @adam86 Encrypted hard disks are authenticated on boot. So, if you boot to a live CD, you skip that authentication and your volumes remain encrypted. – tim_shane Jan 9 '17 at 20:48

Not the answer you're looking for? Browse other questions tagged or ask your own question.