From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1FyRWe-0002jd-W5 for qemu-devel@nongnu.org; Thu, 06 Jul 2006 06:56:05 -0400 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1FyRWd-0002jJ-ME for qemu-devel@nongnu.org; Thu, 06 Jul 2006 06:56:04 -0400 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1FyRWd-0002jC-DY for qemu-devel@nongnu.org; Thu, 06 Jul 2006 06:56:03 -0400 Received: from [81.29.64.88] (helo=mail.shareable.org) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA:32) (Exim 4.52) id 1FyRWn-000508-Px for qemu-devel@nongnu.org; Thu, 06 Jul 2006 06:56:14 -0400 Received: from mail.shareable.org (localhost [127.0.0.1]) by mail.shareable.org (8.12.11.20060308/8.12.8) with ESMTP id k66Au032017502 for ; Thu, 6 Jul 2006 11:56:00 +0100 Received: (from jamie@localhost) by mail.shareable.org (8.12.11.20060308/8.12.8/Submit) id k66Au0qY017500 for qemu-devel@nongnu.org; Thu, 6 Jul 2006 11:56:00 +0100 Date: Thu, 6 Jul 2006 11:56:00 +0100 From: Jamie Lokier Subject: Re: [Qemu-devel] Have any ideas about how to detect whether a program is running inside QEMU? Message-ID: <20060706105600.GA17018@mail.shareable.org> References: <1152168950.6324.302.camel@aragorn> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Reply-To: qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org James Lau wrote: > My program is a utility for internet payment. It takes an important > role in the payment process to ensure security. One of the key > functions is that the program should detect which machine is paying. > So while virtual machine (like QEMU) is present, it can cheat the > program. > > Checking the hard disk model, cpu type, and other hardward > informations makes little sense. Because the users or the hackers can > easily modify these informations. So I need a QEMU internal checking > method that hackers can't easily bypass. But hackers can easily modify QEMU source. So how can you depend on any feature of QEMU for your security checks? -- Jamie