{"id":10403,"date":"2010-02-12T09:27:56","date_gmt":"2010-02-12T09:27:56","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=10403"},"modified":"2010-02-12T09:27:56","modified_gmt":"2010-02-12T09:27:56","slug":"burn-the-witch-hyper-v-security-fix-and-hyperventilating","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=10403","title":{"rendered":"Burn The Witch! Hyper-V Security Fix And Hyperventilating"},"content":{"rendered":"

Ah, it takes a patch to find out who\u2019s really thinking what :)  As you are now aware, Hyper-V had it\u2019s very first (ever<\/em>) security patch this week.  Not bad (typical Irish understatement) after a year and a half of being the most accessible hypervisor ever.  Just think of how many volume license, OEM, TechNet, MSDN, evaluation and pirated copies of Windows Server 2008 and Windows Server 2008 R2 must be out in the world, not to mention the free to download Hyper-V server, and that it can run on most hardware around in the last few years.  I\u2019m betting people in parent\u2019s basements were attempting to find vulnerabilities since the emergence of the first beta for Hyper-V, around 2 years ago.<\/p>\n

And after all that time and opportunity, 1 security hole was found.  It isn\u2019t even the dreaded \u201cbreak out\u201d where a VM is capable of reaching out and accessing the host and other VM\u2019s.  No, it was a DOS attack where the hypervisor would shut down.  And you had to be logged into a VM on the host with admin rights!<\/p>\n

I\u2019ve noticed a lot of tweets in the last 48 hours of people writing with glee about a dreaded problem, implying that Hyper-V is inferior.  Oh, get over it!  I can think of another hypervisor from a certain company that has suffered from a break out attack.  Its patches are a complete OS upgrade and<\/em> they break the host on a way too frequent basis.  So much so, in fact, that experts in that technology run 1 \u201cservice pack\u201d behind the latest release to stay safe.<\/p>\n

It\u2019s a secure platform.  Think of all those attackers who hate Microsoft and have the chance to attack the most available hypervisor around and we get 1 patch in 2 years (since beta).  That\u2019s unbelievable.  The basic architecture requirements (DEP) prevent buffer overrun attacks on the host from a VM.  The German government has certified it as being secure \u2026 trust me if you are unfamiliar with working in Germany \u2026 that doesn\u2019t happen by accident.  Every piece of complex software has vulnerabilities and bugs.  If you didn\u2019t learn that in programming classes in college then you need to ask for a refund.  The fact is that Hyper-V is so well designed and implemented that it\u2019s taken quite some time for one to be found.  And Microsoft reacted perfectly about it.<\/p>\n

So before you go running to the woods to get some kindling for the witch burning, sit back, breath into a brown paper bag and realise that this is not the end of the world for Microsoft virtualisation.  It\u2019s actually not bad at all.  It was one small patch that was quick and easy to download and installed reliably.  <\/p>\n

Technorati Tags: Security<\/a>,Hyper-V<\/a>,Windows Server 2008<\/a>,Windows Server 2008 R2<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"

Ah, it takes a patch to find out who\u2019s really thinking what :)  As you are now aware, Hyper-V had it\u2019s very first (ever) security patch this week.  Not bad (typical Irish understatement) after a year and a half of being the most accessible hypervisor ever.  Just think of how many volume license, OEM, TechNet, … Continue reading “Burn The Witch! Hyper-V Security Fix And Hyperventilating”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[20],"tags":[181,190,116,117],"class_list":["post-10403","post","type-post","status-publish","format-standard","hentry","category-hyper-v","tag-hyper-v","tag-security","tag-windows-server-2008","tag-windows-server-2008-r2"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t