Comment by mhayden - Hacker Neue

mhayden May 13, 2015 parent

The exploit affects VM's whether or not they have a floppy controller or disk attached.

duaneb May 13, 2015

If I were amazon, I would have done an audit of the hyperv software and removed the floppy driver code entirely if unused for precisely this reason. This strikes me as a basic, "no-brainer" hardening step for my billion dollar(s) hosting business.

jpgvm May 13, 2015

They use Xen, not Hyper-V and yes they already remove/replace large portions of Xen.

justincormack May 13, 2015

Their PV domains are not affected anyway. Quite possibly they are running qemu in stub domains for HVM as well, rather than on dom0, but you may well be right about the floppy code too.

This item has no comments currently.