Generally, yes, a backdoor is possible in any kind of software.
You can download the source, review it, and compile it yourself. Anything is possible if you want to speak in technicalities. There are too many eyes on it for me to buy into the notion of backdoors being likely. Why would they spend time implementing a backdoor in open-source software that, if ever detected, would pretty much lead to everyone abandoning the software en masse? Leaving it open allows potentially thousands of individuals to comb through different areas of the source as they look for bugs and compile it on their own.
You can use whichever one, I'd base your decision on preference.If they wanted to include backdoors in VirtualBox, they would've closed the source a long time ago. When you are performing the testing or browsing, since these features can be good attack vectors for a VMWare exploit (guest escape -> host access) potentially. To stay better protected whilst using Virtual Machine software (in general - includes both VirtualBox and VMWare): disable shared clipboard disable shared folders disable drag-and-drop and any other similar features. In terms of security, it is biased on both sides VMWare is closed-source meaning only the employees have access to the source code which does make it harder to exploit (since the attacker cannot just read the source code to find problems but would have to spend lots of time manually reversing and testing on repeat), however VirtualBox is open source which can ease things for the attacker (that being said, this also helps keep it secure since people will report security problems/bugs in general which they identify from the source code if anyone actually goes through it). VirtualBox is also really good and very useful if you cannot get hold of VMWare Workstation, though.
VMWare will be better than VirtualBox it's expensive for a reason, and no one would purchase it otherwise when they could just use VirtualBox.
0 kommentar(er)
