From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.33) id 1CWbOb-00022R-Tl for qemu-devel@nongnu.org; Tue, 23 Nov 2004 09:11:54 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.33) id 1CWbOa-00021S-LQ for qemu-devel@nongnu.org; Tue, 23 Nov 2004 09:11:53 -0500 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.33) id 1CWbOa-00020w-C1 for qemu-devel@nongnu.org; Tue, 23 Nov 2004 09:11:52 -0500 Received: from [213.80.72.10] (helo=kubrik.opensource.se) by monty-python.gnu.org with esmtp (Exim 4.34) id 1CWbFH-0005VM-5g for qemu-devel@nongnu.org; Tue, 23 Nov 2004 09:02:15 -0500 Subject: Re: [Qemu-devel] building a virus-proof PC with Qemu From: Magnus Damm In-Reply-To: <41A33090.9080703@gmx.com> References: <41A33090.9080703@gmx.com> Content-Type: text/plain Message-Id: <1101218443.8458.9.camel@localhost> Mime-Version: 1.0 Date: Tue, 23 Nov 2004 15:00:43 +0100 Content-Transfer-Encoding: 7bit Reply-To: qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: bochnig@pool.math.tu-berlin.de, qemu-devel@nongnu.org On Tue, 2004-11-23 at 13:44, Bochnig, Martin wrote: > Hi, > > most of you know that: The easiest and most secure (100.00%) option > imaginable is to boot from cd/dvd and to keep the registry (in case of > m$-win) - or other files requiring write access - inside of a ramdrive. > Works. Yeah, if your cdrom is lacking write support, the BIOS flash chips are write-protected and the CMOS memory is handled with care. And if you are certain that the RAM is cleared during the boot phase. =) Or you could boot over the network to a RAM disk. But could you trust your network? The DHCP server, the default gateway? / magnus