[rbanffy]

There are many ways a hostile program inside a VM can escape it and run code on the host or, at least, negatively affect it.

[arpa]

Please do share how can one escape qemu.

[jacquesm]

At your service:

https://www.techrepublic.com/article/vm-escape-flaw-in-qemu-...

[arpa]

Beautiful! Thank you.

[fghtr]

Not many if its Qubes OS.

[rbanffy]

One would be quite enough.

[fghtr]

In fact, Qubes is using hardware virtualization IOMMU/VT-d [0], which has been escaped only once in 2006 by the project founder [1].

[0] https://www.qubes-os.org/doc/architecture/

[1] https://en.wikipedia.org/wiki/Blue_Pill_(software)

[rbanffy]

I trust Joanna Rutkowska's competence, but I wouldn't bet too much on chip makers not messing up again in the future.

It will be progressively harder, but it will happen.