Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If the software doesn’t report that it suspects it’s in a vm at test taking time, but instead records data for later analysis the test taker is leaving themselves open for a lot of problems months down the road.


Who is going to pay someone to look for problems months down the road?

Ultimately if malware doesn't think it's a VM, then test taking software isn't going to either. Malware is trying to resist analysis by trained professionals. Test taking software is just trying to sell to the next test; the sale is made by the company that takes the testing committee to the best sportsball game, not by how well they detect being in a VM.

(Interesting corollary; you should probably ALWAYS run inside a VM. There is so much malware that tries to detect it that it actually helps you; the malware will just shut itself off out of fear of being analyzed by a security researcher.)




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: