{"id":16322,"date":"2014-04-10T11:05:43","date_gmt":"2014-04-10T11:05:43","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=16322"},"modified":"2014-04-10T11:56:21","modified_gmt":"2014-04-10T11:56:21","slug":"vmware-is-more-secure-than-hyper-v-and-a-leprechaun-marries-a-martian","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=16322","title":{"rendered":"VMware Is More Secure Than Hyper-V … And A Leprechaun Marries A Martian"},"content":{"rendered":"

In case you have been hiding under an IT rock, the world of the Internet has been rocked by a vulnerability found in the widely used OpenSSL. MVP Troy Hunt has a good description of the vulnerability here<\/a>.<\/p>\n

The list of known vulnerable sites is a who\u2019s who of the Internet. Interestingly, servers that run on Windows Server and use the native SSL features of IIS are not affected<\/a>. Note that Windows Server and System Center use native IIS functionality. Microsoft has also confirmed that Azure is also not susceptible<\/a> to this attack.<\/p>\n

Hmmm, who else is out there that might be vulnerable? Who do many claim is more secure, but really they\u2019ve been found lacking? Who had a breakout<\/a> attack (maybe more than one<\/a>)? Who had a weakness in the design of their virtual storage<\/a> that allows a guest OS admin to read files (passwords) from the host? Which other virtualization company is susceptible to Heartbleed?<\/p>\n

Hmm, would it be \u2026<\/p>\n

\"\"<\/p>\n

\u2026 VMware<\/a>?<\/p>\n

Yup, if you have a recent product from VMware then your virtualization or cloud is vulnerable to attack. Got a public cloud based on vSphere? You are probably vulnerable.<\/p>\n

The lesson here is simple: Building alleged enterprise-class software where no-one is responsible for trustworthy computing reviews is negligent. Who reviewed that code?<\/p>\n

Now tell me that Microsoft makes insecure software \u2026 penguin lovers! Stick your hands up so we can send the men with nets after you conspiracy theorists or your bosses can identify the weak links in their IT departments.<\/p>\n

Technorati Tags: VMware<\/a>,Security<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"

In case you have been hiding under an IT rock, the world of the Internet has been rocked by a vulnerability found in the widely used OpenSSL. MVP Troy Hunt has a good description of the vulnerability here. The list of known vulnerable sites is a who\u2019s who of the Internet. Interestingly, servers that run … Continue reading “VMware Is More Secure Than Hyper-V … And A Leprechaun Marries A Martian”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[3],"tags":[190,103],"class_list":["post-16322","post","type-post","status-publish","format-standard","hentry","category-anti-malware","tag-security","tag-vmware"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t