Does this mean that hardware breakpoints set inside a guest (e.g. with a 
debugger running within a Windows guest such as OllyDbg or WinDbg) will 
finally work?

If so, then this is a Great Thing Indeed. Without hardware breakpoints, 
numerous so-called "software protected" Windows apps -- notably games, but 
also various more mainstream biz apps -- won't run, because they use code 
obfuscation wrappers relying, inter alia, on hard breakpoints. This is to 
slow down and to complicate reverse engineering.

Quite a bit of modern malware uses the same sort of obfuscation wrappers 
(often, actually, exactly the same wrappers as legit software, which is an 
annoyance for another soap-box :-), which currently rules out KVM as a 
general-purpose virtualisation platform for analysing and experimenting 
with security threats, e.g. for reversing and honeypotting...
--
To unsubscribe from this list: send the line "unsubscribe kvm" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to