Lately Intel and rival chip-maker Advanced Micro Devices Inc. have built
virtualization-friendly hooks directly into microprocessors. The goal was to make
virtualization{VM: Virtual Machine. JB} work better, but Woodgate argues that
the move created a security flaw — essentially that malicious programs can
run undetected alongside an operating system.
Indeed, last year a security analyst showed how AMD chips with virtualization
support made computers vulnerable to such an attack. (That researcher,
Joanna Rutkowska, said she presumed it would work on Intel-based systems
as well, but she didn't have time to try).
AMD challenged the feasibility of such an attack and said virtualization did not
decrease computer security. Intel concurred; spokesman Bill Calder called
Rutkowska's claims "overstated."
But Microsoft took notice. Woodgate said Microsoft considered banning
virtualizing Vista entirely, on all versions. But ultimately, he said, his team
decided that the most technically savvy users, or people in companies with
tech support, probably could handle Vista in virtualization programs, while
home users should be steered away.
