Hacker News new | ask | show | jobs
by jfindley 2434 days ago
Safe as in safe from host interference? Not at all. But if your VM is running on a malicious host, you have bigger problems honestly.
1 comments

This is kind of the ongoing joke here, yeah?

Like HN users will gladly spend hours discussing the merits of various random number generation schemes, why that Intel HWRNG is probably backdoored and we should all be very afraid, all the while running their micro-services on the cloud where their entropy is literally spoon-fed from the hypervisor. SMC call into code-you-can't-see and back comes pure entropy (trust us)!

Yes, although there's two kinds of VM safety people might care about. By using a VM you accept that the bare metal owner can look into it if they want to and you have to trust them not to. However, that doesn't mean accepting attacks from other customers - which was what all the Spectre/Meltdown risk was primarily about.