this post was submitted on 09 Aug 2023
74 points (95.1% liked)
Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ
54577 readers
329 users here now
⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.
Rules • Full Version
1. Posts must be related to the discussion of digital piracy
2. Don't request invites, trade, sell, or self-promote
3. Don't request or link to specific pirated titles, including DMs
4. Don't submit low-quality posts, be entitled, or harass others
Loot, Pillage, & Plunder
📜 c/Piracy Wiki (Community Edition):
💰 Please help cover server costs.
 |
 |
|---|---|
| Ko-fi | Liberapay |
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Not great but better than it used to be. Don’t do a GPU passthrough.
What's wrong with GPU passthrough?
GPU passthroughs can expose the host to a potentially compromised VM.
Interesting, do you have more information on that? Because why is GPU passthrough a problem but not other PCI devices?
I don’t unfortunately. This is from a conversation I had with a researcher in VM escape.
As far as I’m aware peripherals are not actually passed through exactly but rather emulated on the guest machine. When you pass through a peripheral you’re only passing the input of that device, data is not sent upstream.
Whereas passing through the GPU you’re providing a means of accessing non-emulated devices through the hardware itself bypassing the isolation provided by virtualization entirely.
That’s true, but the IOMMU on your host is supposed to prevent any accesses outside of the group you passed in
As long as the GPU is the only thing in that IOMMU group, you’re reasonably safe