[ncc-services-wg] New on RIPE Labs: RIPE NCC and the Cloud - Let’s Start Again

On 23/06/2021 07:30, Hank Nussbacher wrote:

> When bank robber Willie Sutton was asked "why do you rob banks?" he 
> answered "because that is where the money is".  If we move RIPE 
> functions to the cloud don't be surprised 3-4 years from now when 
> objects suddenly get changed and no one can understand just how that 
> happened.

https://www.techradar.com/news/this-hyper-v-vulnerability-could-plague-microsoft-users-for-some-time
https://www.securityweek.com/researchers-publish-details-recent-critical-hyper-v-vulnerability

"The security issue that Guardicore Labs (in collaboration with 
SafeBreach Labs) discovered was likely in production for more than a 
year, as it first appeared in a vmswitch build in August 2019. The 
vulnerability affects Windows 7, 8.1 and 10 and Windows Server 2008, 
2012, 2016 and 2019.

An attacker with an Azure virtual machine could exploit the security bug 
by sending a crafted packet to the Hyper-V host. This could have 
resulted in the attacker running code on the Hyper-V host and 
potentially taking down entire regions of the cloud."

-Hank