Undetectable Rootkits Through Virtualization?

techmuse writes "eWeek has an article about a prototype rootkit that is implemented using a virtual machine hypervisor running on top of AMD's Pacifica virtualization implementation. The idea is that the target OS, or software running on it, would not be able to detect the rootkit, because the OS would be running virtualized on top of the rootkit. The prototype is supposed to be demonstrated at the Syscan conference and the Black Hat Briefings over the next month."

ok, but...

[celardore]

Who runs anything *real* on a virtual server?

the side effects are detactable

[Anonymous Coward]

Current virtualization doesn't virtualize anything but basic VGA graphics. That's certainly noticable.

Boss asks: are you playing games at work?!

Me: Just checking for rootkits boss!

A win-win situation for everyone

[KingSkippus]

From TFA:

Rutkowska says of the Blue Pill concept, "I am very excited about the chance to work with Sony on how this technology can be used to protect their next generation of music CDs, DVDs, and high-definition Bluray discs. I believe it will be a win-win situation for everyone involved. Well, everyone important, anyway."

Towards a runtime for Voight-Kampff machines

[Elwood P Dowd]

"Is this testing whether I'm a virtual machine or a lesbian, Mr. Dowd?"

Whoa. Déjà vu.

[DysenteryInTheRanks]

"A Slashdot article just went by, and then another one that looks just like it!"

"It's a glitch in the rootkit! It happens when it changes something!"

"No, I said a SLASHDOT article."

"Ah, you're probably fine then."

Re:ok, but...

[Anonymous Coward]

Are you kidding? Virtually everyone!

Re:The only defense

[Anonymous Coward]

Are you staring blankly at me?

No, I'm staring at you like you're an effing loon who doesn't know what the hell he's talking about.

DRM?

[sr180]

Can we use this to bypass the DRM included in Vista?

What's that you say?

[kimvette]

The next version of WGA will be undetectable? Thanks, Microsoft! ;)

Re:Everyone but you...

[Distinguished Hero]

I don't think they realised the 'small details' they would be impacting. For instance, before the 'upgrade' if the network went down, we could write some letters, work on some spreadsheets etc... Now with the new 'upgrade', if the network goes down, we can't do anything. Not even write a letter, send an email, none of that stuff....

Yes, gone are the wonderful days of yore when one used to be able to pass the time while the network was down by "sending an email." :P

Re:The only defense

[jthill]

You just think you're booting off that DVD.

Re:ok, but...

[Phleg]

--> The Joke <--

--> Your Head <--

Shhhhhhhhh.......

[DiscoDave_25]

Please don't let Sony hear...