Fosstodon @fosstodon

Marco Ivaldi<a href="https://infosec.exchange/tags/Rust" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rust</a> <a href="https://infosec.exchange/tags/Hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hypervisors</a> for Memory Introspection and <a href="https://infosec.exchange/tags/ReverseEngineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#ReverseEngineering</a><a href="https://secret.club/2025/06/02/hypervisors-for-memory-introspection-and-reverse-engineering.html" rel="nofollow noopener" translate="no" target="_blank">https://secret.club/2025/06/02/hypervisors-for-memory-introspection-and-reverse-engineering.html</a><a href="https://github.com/memN0ps/illusion-rs" rel="nofollow noopener" translate="no" target="_blank">https://github.com/memN0ps/illusion-rs</a><a href="https://github.com/memN0ps/matrix-rs" rel="nofollow noopener" translate="no" target="_blank">https://github.com/memN0ps/matrix-rs</a>

Daniel 黄法官 CyReVolt 🐢Conceptual conflation, in a bunch of paragraphs. This is not how it works.<a href="https://thenewstack.io/bare-metal-kubernetes-the-performance-advantage-is-almost-gone/" rel="nofollow noopener" translate="no" target="_blank">https://thenewstack.io/bare-metal-kubernetes-the-performance-advantage-is-almost-gone/</a>Supposed "hard" limits can as well be enforced with <a href="https://mastodon.social/tags/containerization" class="mention hashtag" rel="nofollow noopener" target="_blank">#containerization</a>. It is just less common and not necessarily desired.And no, those limits are not hard, and no, <a href="https://mastodon.social/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a> do not guarantee isolation either - see e.g. all the recently revealed <a href="https://mastodon.social/tags/VMWare" class="mention hashtag" rel="nofollow noopener" target="_blank">#VMWare</a> bugs with integer overflows and underflows, array out-of-bound accesses etc..<a href="https://www.bleepingcomputer.com/news/security/vmware-fixes-four-esxi-zero-day-bugs-exploited-at-pwn2own-berlin/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/vmware-fixes-four-esxi-zero-day-bugs-exploited-at-pwn2own-berlin/</a>

tsk⚠️ Just a reminder, folks:The "container" movement on Linux emerged as a convenient way to manage different, possibly conflicting settings & dependencies for different apps on a machine. "Security" by sandboxing got tacked on later, and the quality of that isolation remains LOW regardless of all the trendy project names and acronyms that have filled that space.Data centers' standard for high security consists of virtual machines (type 1 hypervisors) or separate dedicated hardware. Ain't no way, no how is a successful datacenter going to ask a giant, complex, contorted Linux or BSD (or hybrid Windows or Mac) kernel for sandboxing services to contain threats.If you are using containers to enhance security – on any general-purpose machine – make sure they are running as VMs, or as sandboxes on a microkernel (not monolithic) architecture. <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://infosec.exchange/tags/containers" class="mention hashtag" rel="nofollow noopener" target="_blank">#containers</a> <a href="https://infosec.exchange/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a> <a href="https://infosec.exchange/tags/microkernel" class="mention hashtag" rel="nofollow noopener" target="_blank">#microkernel</a>

Jake in the desertGuillotine: Hypervisors for isolating malicious AI <a href="https://arxiv.org/abs/2504.15499" rel="nofollow noopener" translate="no" target="_blank">https://arxiv.org/abs/2504.15499</a><a href="https://c.im/tags/AntiAI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AntiAI</a> <a href="https://c.im/tags/hypervisor" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisor</a> <a href="https://c.im/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a> <a href="https://c.im/tags/Guillotine" class="mention hashtag" rel="nofollow noopener" target="_blank">#Guillotine</a> <a href="https://c.im/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://c.im/tags/ai" class="mention hashtag" rel="nofollow noopener" target="_blank">#ai</a>

fuumaDocumentation in operating systems is cool. It is possible to extend and rewrite utilities as time goes on, as <a href="https://masto.hackers.town/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#freebsd</a> proves. You can still have cool utilities, like <a href="https://masto.hackers.town/tags/containers" class="mention hashtag" rel="nofollow noopener" target="_blank">#containers</a> and <a href="https://masto.hackers.town/tags/zfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#zfs</a> and <a href="https://masto.hackers.town/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a>, good docs for them and a consistent base system. I dunno where I am going with this, other than wishing I didn't have to peruse the Arch wiki and the Gentoo wiki for everything when I get stuck, and instead could just "man xyz" and get good answers, speaking as <a href="https://masto.hackers.town/tags/nixos" class="mention hashtag" rel="nofollow noopener" target="_blank">#nixos</a> user.

N-gated Hacker News🤡 Apparently, we're supposed to be impressed that these folks can build <a href="https://mastodon.social/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a>, because everybody else is just a clueless poser stacking virtual Legos. Meanwhile, they're busy patting themselves on the back for not mistaking their keyboard for a toaster. 🧠💡 <a href="https://virtualize.sh/blog/few-build-hypervisors-were-one-of-them/" rel="nofollow noopener" translate="no" target="_blank">https://virtualize.sh/blog/few-build-hypervisors-were-one-of-them/</a> <a href="https://mastodon.social/tags/virtualization" class="mention hashtag" rel="nofollow noopener" target="_blank">#virtualization</a> <a href="https://mastodon.social/tags/techhumor" class="mention hashtag" rel="nofollow noopener" target="_blank">#techhumor</a> <a href="https://mastodon.social/tags/cluelessposers" class="mention hashtag" rel="nofollow noopener" target="_blank">#cluelessposers</a> <a href="https://mastodon.social/tags/developerlife" class="mention hashtag" rel="nofollow noopener" target="_blank">#developerlife</a> <a href="https://mastodon.social/tags/HackerNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackerNews</a> <a href="https://mastodon.social/tags/ngated" class="mention hashtag" rel="nofollow noopener" target="_blank">#ngated</a>

Giuliominikube start --driver=virtualbox --no-vtx-check<a href="https://mastodon.world/tags/virtualization" class="mention hashtag" rel="nofollow noopener" target="_blank">#virtualization</a> <a href="https://mastodon.world/tags/kernelspace" class="mention hashtag" rel="nofollow noopener" target="_blank">#kernelspace</a> vs <a href="https://mastodon.world/tags/userspace" class="mention hashtag" rel="nofollow noopener" target="_blank">#userspace</a> <a href="https://mastodon.world/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a><a href="https://chatgpt.com/share/8074761e-017e-4571-aa63-384ae40b9cc1" rel="nofollow noopener" translate="no" target="_blank">https://chatgpt.com/share/8074761e-017e-4571-aa63-384ae40b9cc1</a>When a developer learns kubernetes microservices, works on a windows laptop protected by cyberark and behind bluecoat and must become a devsecops expert.<a href="https://kubernetes.slack.com/archives/C1F5CT6Q1/p1720859668481369?thread_ts=1720714401.537019&cid=C1F5CT6Q1" rel="nofollow noopener" translate="no" target="_blank">https://kubernetes.slack.com/archives/C1F5CT6Q1/p1720859668481369?thread_ts=1720714401.537019&cid=C1F5CT6Q1</a>

Benjamin Carr, Ph.D. 👨🏻‍💻🧬<a href="https://hachyderm.io/tags/GPU" class="mention hashtag" rel="nofollow noopener" target="_blank">#GPU</a>-accelerated <a href="https://hachyderm.io/tags/VM" class="mention hashtag" rel="nofollow noopener" target="_blank">#VM</a> on <a href="https://hachyderm.io/tags/Proxmox" class="mention hashtag" rel="nofollow noopener" target="_blank">#Proxmox</a>, <a href="https://hachyderm.io/tags/XCPng" class="mention hashtag" rel="nofollow noopener" target="_blank">#XCPng</a>? Here's what you need to know Two of the biggest beneficiaries of <a href="https://hachyderm.io/tags/Broadcom" class="mention hashtag" rel="nofollow noopener" target="_blank">#Broadcom</a>'s price hikes, at least on the free and <a href="https://hachyderm.io/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a> side of things, have been the Proxmox VE and XCP-ng <a href="https://hachyderm.io/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a>. In this <a href="https://hachyderm.io/tags/tutorial" class="mention hashtag" rel="nofollow noopener" target="_blank">#tutorial</a>, we'll be looking at what it takes to pass a GPU through to VMs running on either platform, and go over some of the more common pitfalls you may run into. <a href="https://www.theregister.com/2024/06/19/proxmox_xcp_ng_gpu_passthrough/" rel="nofollow noopener" translate="no" target="_blank">https://www.theregister.com/2024/06/19/proxmox_xcp_ng_gpu_passthrough/</a>

HabrОбзор гипервизора Harvester 1.3.0В процессе поиска подходящей платформы для того, чтобы инсталлировать Kubernetes у себя дома, я эксперементировал с разными вариантами. В этой статье - делюсь опытом работы с этой системой. Что такое Harvester? Официально - A Cloud Native Open Source Hyper-converged Infrastructure. Если попробовать сказать простыми словами - то эта операционная система, которая предназначена для запуска и управления Kubernetes, виртуальных машин и система хранения данных (СХД). Вот такая иллюстрация на сайте Harvester:<a href="https://habr.com/ru/articles/815467/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/articles/815467/</a><a href="https://zhub.link/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://zhub.link/tags/longhorn" class="mention hashtag" rel="nofollow noopener" target="_blank">#longhorn</a> <a href="https://zhub.link/tags/hyperconvergence" class="mention hashtag" rel="nofollow noopener" target="_blank">#hyperconvergence</a> <a href="https://zhub.link/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a>

AlexIt must be Christmas because the <a href="https://mastodon.org.uk/tags/blog" class="mention hashtag" rel="nofollow noopener" target="_blank">#blog</a> posts from my team at <a href="https://mastodon.org.uk/tags/linaro" class="mention hashtag" rel="nofollow noopener" target="_blank">#linaro</a> keep coming. In this one <a href="https://mastodon.social/@ablu" class="u-url mention" rel="nofollow noopener" target="_blank">@ablu</a> discusses how we have leveraged <a href="https://mastodon.org.uk/tags/rust" class="mention hashtag" rel="nofollow noopener" target="_blank">#rust</a> to build portable <a href="https://mastodon.org.uk/tags/virtio" class="mention hashtag" rel="nofollow noopener" target="_blank">#virtio</a> backends that can be built to support multiple <a href="https://mastodon.org.uk/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a>: <a href="https://www.linaro.org/blog/rust-device-backends-for-every-hypervisor/" rel="nofollow noopener" target="_blank">https://www.linaro.org/blog/rust-device-backends-for-every-hypervisor/</a>

Relianoid🚀 Elevate Your Load Balancing with RELIANOID ADC! 🚀 Explore how RELIANOID ADC seamlessly integrates with various hypervisors, providing unmatched performance and resource optimization for load balancing. Deploy on the hypervisor of your choice and witness unparalleled efficiency!Don't miss out on the future of virtualization! Read the full article now: 👉📖 <a href="https://www.relianoid.com/resources/knowledge-base/misc/hypervisors-available-for-load-balancing/" target="_blank" rel="nofollow noopener" translate="no">https://www.relianoid.com/resources/knowledge-base/misc/hypervisors-available-for-load-balancing/</a> <a href="https://fosstodon.org/tags/Hypervisors" class="mention hashtag" rel="tag">#Hypervisors</a> <a href="https://fosstodon.org/tags/Virtualization" class="mention hashtag" rel="tag">#Virtualization</a> <a href="https://fosstodon.org/tags/CloudComputing" class="mention hashtag" rel="tag">#CloudComputing</a> <a href="https://fosstodon.org/tags/TechInnovation" class="mention hashtag" rel="tag">#TechInnovation</a> <a href="https://fosstodon.org/tags/ITInfrastructure" class="mention hashtag" rel="tag">#ITInfrastructure</a> <a href="https://fosstodon.org/tags/DataCenter" class="mention hashtag" rel="tag">#DataCenter</a> <a href="https://fosstodon.org/tags/CyberSecurity" class="mention hashtag" rel="tag">#CyberSecurity</a>

yaracroftWhile collecting the evidence in 2023 we (Marco Lux & Pedro Umbelino) recognized the ESXi attack by a random <a href="https://nanao.cybtex.fr/tags/ransomware" class="mention hashtag" rel="nofollow noopener" target="_blank">#ransomware</a> group. We decided it is time to publish our results which cumulated in CVE-2023-29552 <a href="https://nanao.cybtex.fr/tags/vuln" class="mention hashtag" rel="nofollow noopener" target="_blank">#vuln</a> <a href="https://nanao.cybtex.fr/tags/forensics" class="mention hashtag" rel="nofollow noopener" target="_blank">#forensics</a> ( via <a href="https://infosec.exchange/@jtk" rel="nofollow noopener" target="_blank">John Kristoff</a> )<blockquote>Interestingly, <a href="https://nanao.cybtex.fr/tags/internet" class="mention hashtag" rel="nofollow noopener" target="_blank">#internet</a> search engines like <a href="https://mastodon.shodan.io/@shodan" class="u-url mention" rel="nofollow noopener" target="_blank">@shodan</a>, still missing SLP in their collection, which is a pity. <a href="https://nanao.cybtex.fr/tags/ddos" class="mention hashtag" rel="nofollow noopener" target="_blank">#ddos</a> <a href="https://nanao.cybtex.fr/tags/systems" class="mention hashtag" rel="nofollow noopener" target="_blank">#systems</a> <a href="https://nanao.cybtex.fr/tags/devices" class="mention hashtag" rel="nofollow noopener" target="_blank">#devices</a> <a href="https://nanao.cybtex.fr/tags/products" class="mention hashtag" rel="nofollow noopener" target="_blank">#products</a> <a href="https://nanao.cybtex.fr/tags/services" class="mention hashtag" rel="nofollow noopener" target="_blank">#services</a> <a href="https://nanao.cybtex.fr/tags/tools" class="mention hashtag" rel="nofollow noopener" target="_blank">#tools</a> <a href="https://nanao.cybtex.fr/tags/routers" class="mention hashtag" rel="nofollow noopener" target="_blank">#routers</a> <a href="https://nanao.cybtex.fr/tags/management" class="mention hashtag" rel="nofollow noopener" target="_blank">#management</a> <a href="https://nanao.cybtex.fr/tags/cyber" class="mention hashtag" rel="nofollow noopener" target="_blank">#cyber</a> <a href="https://nanao.cybtex.fr/tags/printers" class="mention hashtag" rel="nofollow noopener" target="_blank">#printers</a> <a href="https://nanao.cybtex.fr/tags/daemons" class="mention hashtag" rel="nofollow noopener" target="_blank">#daemons</a> <a href="https://nanao.cybtex.fr/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a> <a href="https://nanao.cybtex.fr/tags/networks" class="mention hashtag" rel="nofollow noopener" target="_blank">#networks</a> <a href="https://nanao.cybtex.fr/tags/threats" class="mention hashtag" rel="nofollow noopener" target="_blank">#threats</a> <a href="https://nanao.cybtex.fr/tags/informatique" class="mention hashtag" rel="nofollow noopener" target="_blank">#informatique</a></blockquote><a href="https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html" rel="nofollow noopener" target="_blank">https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html</a><ul><li>🛠 <a href="https://github.com/curesec/slpscan" rel="nofollow noopener" target="_blank">https://github.com/curesec/slpscan</a></li><li>🛠 <a href="https://github.com/curesec/slpload/" rel="nofollow noopener" target="_blank">https://github.com/curesec/slpload/</a></li></ul>

ItzTrainCame across a video talking about learning <a href="https://hachyderm.io/tags/openstack" class="mention hashtag" rel="nofollow noopener" target="_blank">#openstack</a>. Is it still a thing? Everything I have heard has been, it's great but crazy complex! I guess like k8 but we love that 🤣 <a href="https://hachyderm.io/tags/homelab" class="mention hashtag" rel="nofollow noopener" target="_blank">#homelab</a> <a href="https://hachyderm.io/tags/selfhosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfhosted</a> <a href="https://hachyderm.io/tags/selfhosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfhosting</a> <a href="https://hachyderm.io/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a> <a href="https://hachyderm.io/tags/crazy" class="mention hashtag" rel="nofollow noopener" target="_blank">#crazy</a> <a href="https://hachyderm.io/tags/complex" class="mention hashtag" rel="nofollow noopener" target="_blank">#complex</a>

0xtdec 🇧🇪🇸🇪🇪🇺A new Stuff for the Stash newsletter. Rejoice ! This week I highlight stories on Software defined silicon, <a href="https://infosec.exchange/tags/fiberoptics" class="mention hashtag" rel="nofollow noopener" target="_blank">#fiberoptics</a>, <a href="https://infosec.exchange/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> kernel <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a>, <a href="https://infosec.exchange/tags/medical" class="mention hashtag" rel="nofollow noopener" target="_blank">#medical</a> implants, TEE, <a href="https://infosec.exchange/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a> and more...<a href="https://int3.substack.com/p/stuff-for-the-stash-week-50" rel="nofollow noopener" target="_blank">https://int3.substack.com/p/stuff-for-the-stash-week-50</a>

CK's Technology News<a href="https://mastodon.social/tags/Performance" class="mention hashtag" rel="nofollow noopener" target="_blank">#Performance</a> Study of Lightweight <a href="https://mastodon.social/tags/Hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hypervisors</a> Used in <a href="https://mastodon.social/tags/Container" class="mention hashtag" rel="nofollow noopener" target="_blank">#Container</a> <a href="https://mastodon.social/tags/Env" class="mention hashtag" rel="nofollow noopener" target="_blank">#Env</a> Paper <a href="https://www.scitepress.org/Papers/2021/104405/104405.pdf" rel="nofollow noopener" target="_blank">https://www.scitepress.org/Papers/2021/104405/104405.pdf</a>

Dɪɢɪᴛᴀʟɪs PᴜʀᴘᴜʀᴇᴀAnd here it is. Slackware 15 running under qemu/nvmm on NetBSD. Retro fvwm theme to honor that of Slackware 1.1.2. Listening to aNONradio by having qemu redirect OSS output to /dev/audio. Performance is good with 2 dedicated cores and 4G of RAM. <a href="https://mastodon.sdf.org/tags/slackware" class="mention hashtag" rel="nofollow noopener" target="_blank">#slackware</a> <a href="https://mastodon.sdf.org/tags/netbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#netbsd</a> <a href="https://mastodon.sdf.org/tags/qemu" class="mention hashtag" rel="nofollow noopener" target="_blank">#qemu</a> <a href="https://mastodon.sdf.org/tags/nvmm" class="mention hashtag" rel="nofollow noopener" target="_blank">#nvmm</a> <a href="https://mastodon.sdf.org/tags/virtualization" class="mention hashtag" rel="nofollow noopener" target="_blank">#virtualization</a> <a href="https://mastodon.sdf.org/tags/hypervisors" class="mention hashtag" rel="nofollow noopener" target="_blank">#hypervisors</a> <a href="https://mastodon.sdf.org/tags/sdf" class="mention hashtag" rel="nofollow noopener" target="_blank">#sdf</a> <a href="https://mastodon.sdf.org/tags/anonradio" class="mention hashtag" rel="nofollow noopener" target="_blank">#anonradio</a>