The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [virtualization]

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

Filter by
Sorted by
Tagged with
2
votes
2answers
187 views

Is it safe to run a potentially malicious ISO in a VM using VirtualBox? [duplicate]

I want to try out an OS called "Red Star OS". I want to make it a completely isolated VM, no network connectivity etc., just to explore and take a look at it. I found out where to get it from this ...
0
votes
2answers
123 views

Privacy of client's virtual machine in cloud computing

As we know clients can create and run their virtual machines (VM)in the cloud computing. My question is about the confidentiality of data stored in the client's VM. Question 1: Does data stored in a ...
6
votes
3answers
786 views

What kind of access on the guest is required to break out of a virtual machine?

Is it enough to exploit the vulnerability in a program? Is root or kernel access required? Are there maybe even possibilities to directly exploit the host without any vulnerabilities in the guest? To ...
-1
votes
1answer
1k views

Why should not run Metasploitable on bridge network?

I have read on somewhere that: "Do not run Metasploitable (an Intended Vulnerable Virtual Machine) in your Bridge Network." Why? Does it create a bridge to the attacker's system directly? If yes, ...
0
votes
1answer
469 views

Can Microsoft collect data from inside a virtual machine?

If I spin up an OS in a VM, can Microsoft still collect and track data from the guest OS? I'm just wondering if Windows 10 collects that much data or not. Just FYI: no, I'm not a nutter that's ...
1
vote
2answers
213 views

Should I wait until Spectre and Meltdown is fixed in hardware? [duplicate]

I have a Laptop that needs replacing due to age. I will be using this laptop for desktop use, including Office Apps, Development, Running VMs & Web Browsing. I will be using separation using ...
1
vote
0answers
151 views

VBoxClient error in BitDefender rescue CD [closed]

I'm afraid that I am targetted by hackers. To resolve this, I'm now trying the BitDefender rescue CD. When starting it, I get the following error notification: VBoxClient: VirtualBox kernel ...
0
votes
1answer
107 views

Is it safe to open “suspect” pdf files in virtual machine? [duplicate]

I became aware recently that Javascript scripts can be embedded in PDF files. Anyway, I have a pdf file which I suspect is not safe to open. I scanned it with VirusTotal and Kaspersky VirusDesk and ...
1
vote
1answer
471 views

Windows PFX certificate import: protect private key using virtualization-based security?

On Windows 10 v1803 (i.e. April 2018 update) when importing a PFX, an option like [ ] Protect private key using virtualization-based security (non-exportable) appears on the import wizard. What is ...
0
votes
0answers
38 views

How to manage several VPNs for customers?

This is, somehow, a theoretical question. I am working in a software-developer company. We have several customers. For each customer we have a Virtual Machine where we have a VPN to the customer ...
2
votes
0answers
92 views

Need Security advice on virtualization and windows security

I have a little doubt about the security of my virtual machine and Windows. Can anyone please point me in right direction? Below is my what, how and why I made my virtual machine. Let me tell you ...
-1
votes
2answers
93 views

Secure access to an aplication from internet [closed]

I have an application wich needs to connect to the main database. I want this application to be accessible from outside the enterprise network. I think that the best way is to install the app in a SQL ...
1
vote
1answer
92 views

Is it secure to keep malware in filesystem of VMs?

We are going to install a sandbox solution that requires Ubuntu Server as the underlying OS (the product is not shipped as a ready to install appliance). For performance reasons the malware samples ...
3
votes
2answers
62 views

Testing an untrusted browser extension securely on macOS

I have received a .zip file containg a browser extension for Google Chrome. How can I test this safely? Current options I consider: 1) Using a VM. Installing VirtualBox on my macos, and then running ...
1
vote
5answers
585 views

Why forward a virtual machine with SSH to Putty

I have watched a tutorial from Udemy where a guy is show how to crack wireless network. The person in the video set up a virtual machine Oracle VM VirtualBox network type NAT then he forward the ...
0
votes
1answer
291 views

Is the security of a VPN client on a Virtual Machine decreased?

It's well known that VPN clients might leak their true IP, due to applications like Skype or WebRTC clients or who knows. Moreover, services like Google keep complaining that I connected from an "...
-3
votes
2answers
156 views

Impossible VM-detection countermeasures [closed]

Are there any vm-detection techniques (of malware) which are impossible to mitigate in your vm? If yes, which?
4
votes
2answers
445 views

Is it secure to wipe a file in a Virtualbox disk if the vbox disk file is on an ssd?

Preface I searched for an answer to my question and found related questions which do not cover my question completely. Like: On SSD deleting: Can Widped SSD Data be recovered How to securely delete ...
2
votes
2answers
202 views

Why cant i run malware in my Virtual Environment

Im trying to run some malware samples in my Virtual lab to capture their IOC's. Im doing this for my Masters Thesis but i can not seem to get the malware to run. I have downloaded samples from hybrid ...
14
votes
3answers
6k views

Should Virtual Machines be patched for Meltdown and Spectre?

In Meltdown and Virtual Machines it was clarified that at least Spectre works crossing VMs. This of course means that the Hypervisor must be patched, but Should the VM OS be patched as well? Not ...
24
votes
1answer
8k views

Meltdown and Virtual Machines

This question originated from a discussion about VMs not being vulnerable to Meltdown. Can Meltdown "break out" of a virtual machine, so to speak? What is meant by this is: Can a program (with any ...
5
votes
1answer
2k views

Do I need to patch Linux for Meltdown/Spectre if the hypervisor has been patched, and I trust the guest?

If I'm running a VM on Amazon EC2 or Microsoft Azure, and they've patched the underlying hypervisor, do I need to upgrade my Linux kernel to protect against Meltdown or Spectre? Assume that I'm not ...
1
vote
0answers
35 views

Is using AWS and administered VMs a reasonable and feasible secure environment?

I'm currently tasked with exploring options for hosting secure data for our company that don't require setting up any in-house infrastructure as we don't currently have any. Everyone is a developer ...
0
votes
1answer
1k views

Can hackers compromise a VM to the point that they compromise your host OS? [duplicate]

Recently I was reading up on various security strategies and one that has been around for a while but is starting to gain traction now is working within a VM on your desired OS. If that VM ever gets ...
5
votes
1answer
599 views

Does the main OS run “virtualised” under the ring -1 hypervisor?

After reading this answer which explains that modern CPUs have a ring -1 that is running a hypervisor on the CPU and handles vmenter & stuff, I am wondering: The main operating system, like the ...
8
votes
3answers
3k views

Can .ova file contain an exploit?

Is it possible to prepare an .ova file for Oracle Virtualbox that will access NAT network when is set to use Whonix? There are preconfigured virtual machines like Windows to use in Whonix, but are ...
2
votes
1answer
230 views

Is it possible to make my host completely safe from the virtual machine (where I will do malware analysis)?

I am using Windows 10 Home edition (Fall creators update), 750 GB HDD. I use Oracle VirtualBox, and I have two virtual machines there: Windows 7 (32 bit) and Ubuntu 14.04.5. I will do malware-analysis ...
2
votes
1answer
216 views

What happens to a VM when you delete it? [closed]

I was curious what happens when you select "delete all files" option in Virtualbox? Are files saved on the installed OS in Virtualbox recoverable on your hard drive? Is there a secure way I can delete ...
1
vote
1answer
2k views

Honeypot in a VM on home network

Is it safe to run a honeypot on a virtual machine on my personal computer and home network? I was thinking of setting up a dmz on my home network to ensure my personal devices remain safe but was told ...
3
votes
3answers
20k views

Is a VM safe to run a simple virus on? [duplicate]

I just made a very simple batch virus that runs itself and runs on startup. I want to test it because I want to send it to a YouTuber who films himself running these viruses on a Virtual Machine. The ...
3
votes
1answer
351 views

Help choosing the right virtualization for a CTF [closed]

I am a High School cyber computer science teacher who also teaches courses on cyber security. I have been looking around for some good 'beginner' CTFs that I could organize for my students, but ...
279
votes
9answers
40k views

What makes Docker more secure than VMs or bare metal?

I recently had a discussion with a Docker expert about the security of Docker vs. virtual machines. When I told that I've read from different sources that it's easier for code running within a Docker ...
4
votes
1answer
365 views

What are escalation pathways from a VM to its host?

If I want to check out a dodgy link from a friend, I've started opening these in a virtual machine. I'm assuming that if the VM gets hacked, the host where I do internet banking etc will still be fine....
1
vote
2answers
348 views

Reverse sandbox

As I understand it, a sandbox is an isolated environment on a machine, used to gather informations on a threat, or test it directly. That's made so that the threat can't harm anything, once you're ...
-1
votes
1answer
105 views

Does working inside a VM that has a encrypted drive protect the files in the VM?

I want to work on a project that has some sensitive data. My plan was the following: Make a virtual Linux machine Use disk encryption on this machine Work on this machine without the internet ...
0
votes
3answers
323 views

Is browsing from a guest VM using an open Hotel WiFi secure?

My hotel WiFi has no password. I am using Virtual Box on Linux host with Linux guest. I plan to delete guest Linux VM after browsing. My main concern is to secure the host OS (Linux) from getting ...
1
vote
1answer
1k views

What is the differerence between virtualization and sandboxing

Is virtualization basically "easier" sandboxing ? Where the system calls are intercepted and rules are set out whether to allow the system call to go through or not. I believe system calls are traced ...
4
votes
1answer
609 views

Can I safely use a physical USB stick inside VirtualBox (isolated) without possibly infecting the host OS?

There is a program that I wish to run under VirtualBox in order to avoid possibly infecting my computer because I am not sure I should trust the source. (Based on download location). It is for ...
0
votes
2answers
230 views

Would running different functions on virtual machines on the same server make me compliant with PCI DSS requirement 2.2.1?

I'm currently going through the PCI DSS requirements and wondered whether running different functions on virtual machines on the same server still make me compliant with the requirement below for PCI ...
1
vote
1answer
101 views

Encrypted file system in a hosted linux system

I'm considering to use an encrypted file system (dm-crypt or gocryptfs) in a linux system hosted by Linode. Can the administrators of Linode access the mounted (i.e., decrypted) contents? I'm not sure ...
1
vote
1answer
109 views

Job applicants submit code, how do companies securely test it?

Applicants for software engineering jobs sometimes go through coding challenges as part of the interview process. The company may send applicants code and a development task with a deadline, and ...
1
vote
2answers
861 views

How can I connect a USB device to a virtual machine while bypassing the host?

From time-to-time it would be useful to connect an untrusted USB device to my computer. If I could connect it directly to a virtual machine, bypassing the host. that would be secure enough for me. I ...
1
vote
1answer
119 views

Are there any benefits if you encrypt the home folder in a VM?

I understand the security benefits of having your home folder encrypted when you install a new Linux system on a physical machine, but is encrypting your home folder as useful when we are dealing with ...
0
votes
2answers
352 views

If I clone a VM with VirtualBox can software detect it's the same VM?

If I clone a VM with VirtualBox and change the MAC address, can some software/web tracking tools detect that it is the same VM? Basically, does cloning a VM with a new mac creates a new identity?
0
votes
1answer
134 views

What are the most common security threats that have to be considered when dealing with RDP? [duplicate]

I'm dealing with a hypothetical infrastructure for enabling workers to use RDP for remote access to their work PCs. These would be virtualized Win7 machines within a VMWare vSphere environment. ...
26
votes
6answers
12k views

Would a VM such as Virtualbox be my best option for everyday security while working?

I run a small business out of my home and I'm not really doing anything labor intensive, no games and I'm not cutting any code or anything of that nature. A lot of what I do is phone based sales, so I'...
5
votes
1answer
748 views

GPU passthrough security

How secure is the host operating system from the guest virtual machine's OS when using GPU passthrough (using the methods described here)? If the guest is compromised, can it permanently infect the ...
1
vote
1answer
135 views

What are the security implications of enabling anonymous root/sudo access with sshd on a local guest VM?

Let's say that on my personal computer, I host a VM I use to do software development. My personal computer is connected to the internet and running Ubuntu 16.04 and my guest is CentOS 7. I don't want ...
1
vote
1answer
1k views

Is it possible to prevent VirtualBox (or other VM) from leaving traces on host?

The context: I already use FDE on my system drive (strong cipher, long unguessable password, etc.), but on the off-chance that my password is stolen or my computer is cold-booted, I want to prevent ...
0
votes
2answers
676 views

Is a insecure VM in a secure host vulnerable to wannacry?

Assume a reasonably secure windows host (latest windows updates/patches, up-to date enterprise antivirus). How vulnerable is in this context a VM with a not up to date windows OS and an old and not ...