On most builds of QEMU, that command will start a VM with an e1000 card networked through SLIRP. It's the equivalent of something like: -netdev user,id=net0 -device e1000,netdev=net0
Doing this is a huge amount of engineering work. Things like the usb controller, modem, audio, touch sensor, and many many more are often custom hardware without any specs available that you somehow need to simulate.…
> VM escapes are pretty difficult, especially with modern, patched microcode processors Most VM escapes happen through buggy virtual-devices written in C/C++/.. code. Virtual-device bugs that are exploitable by…
I wasn't involved in the work mentioned in the post, but I worked on integrating QEMU into oss-fuzz. Here's an example of a report from oss-fuzz, that we get by email:…
The English ones are probably most easily found since design guidelines are usually written in the local language. https://design.gov.ru/design-system/#principles
on phones, ads are not limited to your web browser
.local is perfectly fine according to the IETF https://tools.ietf.org/html/rfc6762
I don't see how Spectre and meltdown were blown way out of proportion? Google and Amazon seem to have treated them quite seriously.. Maybe they should have just closed their eyes. The solution to Spectre right now is…
On most builds of QEMU, that command will start a VM with an e1000 card networked through SLIRP. It's the equivalent of something like: -netdev user,id=net0 -device e1000,netdev=net0
Doing this is a huge amount of engineering work. Things like the usb controller, modem, audio, touch sensor, and many many more are often custom hardware without any specs available that you somehow need to simulate.…
> VM escapes are pretty difficult, especially with modern, patched microcode processors Most VM escapes happen through buggy virtual-devices written in C/C++/.. code. Virtual-device bugs that are exploitable by…
I wasn't involved in the work mentioned in the post, but I worked on integrating QEMU into oss-fuzz. Here's an example of a report from oss-fuzz, that we get by email:…
The English ones are probably most easily found since design guidelines are usually written in the local language. https://design.gov.ru/design-system/#principles
on phones, ads are not limited to your web browser
.local is perfectly fine according to the IETF https://tools.ietf.org/html/rfc6762
I don't see how Spectre and meltdown were blown way out of proportion? Google and Amazon seem to have treated them quite seriously.. Maybe they should have just closed their eyes. The solution to Spectre right now is…