Re: [coreboot] How Coreboot can help in malware reverse engineering ?

[Jean-Francois Agneessens]

> > I prefer to stay away of virtualization because malware tend to implement
> > techniques to detect if they are running on VMs.
>
> And disable themselves ? Maybe that would be a fine solution for the
> problem then ;-)

Yeah I know, this is indeed a good way to prevent malware going bad :-) If
you look at how the Virtualization is groing, the malware will miss the
server market soon; But still, a workstation tend to run straight on the
hardware, and so they know that VM is a tool of choice for malware analysis
!