[nSLUG] Security in virtual machines

Frank Geitzler frank.geitzler at ns.sympatico.ca
Tue Sep 16 11:13:36 ADT 2014


On Tue, 2014-09-16 at 09:48 -0300, Chris R. Thompson wrote:

> yah.. a lack of transparency != security
> furthermore what type of a metric is "pretty safe"?
> I wouldn't say I'm a security expert, but certainly not daft enough to
> think that a VM is "safe"
> 

Can a virus-scanner (eg. Norton, or even Avast!) be run in a VM?
Frank


> 
> 
> 
> On 09/15/2014 05:22 PM, Dave Graham wrote:
> 
> > 
> > Going to disagree a bit here, I wouldn't say a rooted machine is
> > EVER
> > 'safe'. A Key Logger / Screen logger can potentially record anything
> > you're typing or doing in the VM session. Network configuration (NIC
> > settings, not addressing) of the VM is done from the host OS, which
> > can
> > be comprised. Even sharing a network with a rooted machine is risky.
> > 
> > I agree with the other recommendations i've seen in reply to this
> > inquiry - that if you're going so far as to have a clean environment
> > solely for banking, then keep the host OS as untouched as possible
> > (i.e.
> > not using it to browse the internet etc) - use a second VM for that.
> > 
> > <grabs tin foil hat>
> > 
> > On 09/11/2014 09:14 PM, Stephen Yorke wrote:
> > > Even a rooted machine is pretty safe unless the program can inject
> > into
> > > the VHD, VHDX, VMDK, etc disk image file. The worse you really
> > have to
> > > worry about is shares through the add-on tools.
> > _______________________________________________
> > nSLUG mailing list
> > nSLUG at nslug.ns.ca
> > http://nslug.ns.ca/mailman/listinfo/nslug
> > 
> > 
> 
> 
> 
> -- 
> 
> Christopher Thompson | Client Care | SolutionInc Limited
> Office: +1.902.420-0077 | Fax: +1.902.420.0233
> 
> Email: chris.thompson at solutioninc.com
> Website: www.solutioninc.com
> 
> SolutionInc Limited - Simplifying Internet Access
> 
> SolutionInc Limited – Simplifying Internet Access With operations in more than 45 countries worldwide, SolutionInc is an established global leader in 
> Internet, centralized hotspot connectivity, billing and management solutions. SolutionInc provides software and services to the hospitality and 
> telecommunications industries through its award-winning, patented technology software products: SolutionIP™ and SolutionIP™ Enterprise. 
> Through 700,000+ touch points, SolutionIP™ allows people to easily and securely connect to the Internet from locations such as hotel rooms, convention
>  centres, universities, restaurants and airports. Patent Information 
> 
> If you have received this e-mail in error, please notify me immediately at 902 420 0077 or reply by e-mail to the sender and destroy the original communication.
> 
>  Thank you.
> 
> 
> 
> 
> _______________________________________________
> nSLUG mailing list
> nSLUG at nslug.ns.ca
> http://nslug.ns.ca/mailman/listinfo/nslug


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://nslug.ns.ca/pipermail/nslug/attachments/20140916/c35b184a/attachment-0001.html>


More information about the nSLUG mailing list