Reply to thread

Message

<blockquote data-quote="HeffeD" data-source="post: 66899" data-attributes="member: 61">I get around. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" />I thought I&#039;d already answered that in the other thread. Any time you add usability, you reduce security. You aren&#039;t isolated if you&#039;ve allowed internet access through the host machine. Many YouTube malware testers use the internet to download malware from malware lists to test, but security experts will never test malware if there is an internet connection. It&#039;s a bit of a catch-22. You need to get the malware from the internet, but you don&#039;t want your VM to access the internet. So the only way to get the malware to the VM is through file sharing with your host machine, but you don&#039;t want your VM to have any contact with your host machine, nor do you want to expose your host machine to the malware you want to test.Do you see where I&#039;m going with this? To be blunt, testing malware is never a safe thing to do. You&#039;ll be opening security holes to test in a reasonable manner. (the manner you see on YouTube tests) If you have to ask how to do this safely, you shouldn&#039;t be doing it.</blockquote>

[QUOTE="HeffeD, post: 66899, member: 61"] I get around. ;) I thought I'd already answered that in the other thread. Any time you add usability, you reduce security. You aren't isolated if you've allowed internet access through the host machine. Many YouTube malware testers use the internet to download malware from malware lists to test, but security experts will never test malware if there is an internet connection. It's a bit of a catch-22. You need to get the malware from the internet, but you don't want your VM to access the internet. So the only way to get the malware to the VM is through file sharing with your host machine, but you don't want your VM to have any contact with your host machine, nor do you want to expose your host machine to the malware you want to test. Do you see where I'm going with this? To be blunt, testing malware is never a safe thing to do. You'll be opening security holes to test in a reasonable manner. (the manner you see on YouTube tests) If you have to ask how to do this safely, you shouldn't be doing it. [/QUOTE]

Verification