Live data from Hacker News

Dolphin Progress Release 2603

dolphin-emu.org

1–10 of 57 posts

Re: Dolphin Progress Release 2603

#8
post #7

What is the most reliable place for ROMs these days? Is there any sort of checksum that can accompany them to ensure safety? While I trust Dolphin, I don't trust most ROMs.

Now there's an interesting challenge. A ROM that does a VM breakout and runs a command on the host.

Re: Dolphin Progress Release 2603

#9
post #7

What is the most reliable place for ROMs these days? Is there any sort of checksum that can accompany them to ensure safety? While I trust Dolphin, I don't trust most ROMs.

There's tons of options, no-intro, redump, tosec, mame are all doing DAT files with file checksums.

That said, ROMs are basically never a malware vector as they have to exploit an issue in the emulators themselves and historically that hasn't really been seen. Typically malware related to roms happens with files included in the zip archives or by sites offering "downloaders" with embedded malware.

Re: Dolphin Progress Release 2603

#10
post #8
post #7

What is the most reliable place for ROMs these days? Is there any sort of checksum that can accompany them to ensure safety? While I trust Dolphin, I don't trust most ROMs.

Now there's an interesting challenge. A ROM that does a VM breakout and runs a command on the host.

It's been done, the ZSNES and Project64 emulators have both had exploits which allowed a malicious ROM to run arbitrary code on the host. ZSNES is written mostly in assembly so that was kinda asking for trouble though.
Post reply on HN