Re: virtual box and video isolation

[Tim N. <tim...@gm...>]

"cold boot attack"
https://citp.princeton.edu/research/memory/

On Mon, Mar 23, 2015 at 7:50 AM, Norman Feske
<nor...@ge...> wrote:
> Hi Tim,
>
>>     I was wondering how the virtualbox implementation on top of
>> genode/nova fares against this type of attack:
>> https://hsmr.cc/palinopsia/
>>
>> is 3d acceleration used? is there strong isolation of the video memory?
>
> our version of VirtualBox does not use/support hardware-accelerated
> graphics. We needed a GPU driver first.
>
> Thanks for the link. It is important to keep such attack vectors in
> mind. It also bears the question: Does your BIOS clear all physical
> memory at boot time? If not, couldn't an attacker with physical access
> to a machine (i.e., a stolen laptop that may still be locked with a
> screensaver) reset the machine, boot a custom OS from a USB stick, and
> scan the memory for credentials? What would be a viable defense against
> such a scenario?
>
> Cheers
> Norman
>
> --
> Dr.-Ing. Norman Feske
> Genode Labs
>
> http://www.genode-labs.com · http://genode.org
>
> Genode Labs GmbH · Amtsgericht Dresden · HRB 28424 · Sitz Dresden
> Geschäftsführer: Dr.-Ing. Norman Feske, Christian Helmuth
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming The Go Parallel Website, sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for all
> things parallel software development, from weekly thought leadership blogs to
> news, videos, case studies, tutorials and more. Take a look and join the
> conversation now. http://goparallel.sourceforge.net/
> _______________________________________________
> genode-main mailing list
> gen...@li...
> https://lists.sourceforge.net/lists/listinfo/genode-main



-- 
Tim Newsham | www.thenewsh.com/~newsham | @newshtwit | thenewsh.blogspot.com