Hacker News new | past | comments | ask | show | jobs | submit login

VM detection is usually pretty bad. They just look for magic strings that are easy enough to fake.



The difference between "easy to fake" and "hellishly difficult" is the authors clicking next-next-finish in VMProtect or not.


There are github repos to harden VMware against VMProtect, let alone KVM


they still have to interact the system, and make system calls.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: