Archive for infosec

Be concerned with your privacy, if you use Xen-based VPS servers

February 22, 2008 in the wee hours · Filed under VPS, information security, infosec, vmware, xen

Yesterday I worked on a Xen-based CentOS 5 VPS server. Out of curiosity how Xen stacks up against VMWare, I sniffed TCP traffic on the Xen virtual server, since I noticed VMWare guests can see the host’s traffic and vice versa. (More details can be found in my early post: Security Alert : bridged vmware guest can sniff host, guest peers, and vice versa)

I chose to sniff TCP/80 traffic this time, using tcpdump Read the rest of this entry »

Comments (65)