How to protect a PC.

[Vandorlot]

I have a VM with VMWare. What can I do to protect my main PC from getting infected if my VM gets infected.

[AnonymousGuy]

Don't use bridged networking and very few pieces of malware can break out of a VM.

[Max Caulfield]

Don't connect to the Internet

[Blackhole890]

what do you mean infected? because there's no way to get "infected" if its just a virtualization, just like a sandbox i think

[ProjectBox153]

Well, what are you planning to do on the VM?

[Vandorlot]

1 minute ago, AnonymousGuy said:

Don't use bridged networking and very few pieces of malware can break out of a VM.

Should I use NAT then?

[Vandorlot]

Just now, Name Taken said:

The VM still have access to your LAN through your host PC so disconnect the VM's virtual NIC.

Is there a way I could still use the internet?

1 minute ago, Blackhole890 said:

what do you mean infected? because there's no way to get "infected" if its just a virtualization, just like a sandbox i think

Get a virus

2 minutes ago, Jamiec1130 said:

Well, what are you planning to do on the VM?

Streaming shows, I dont have cable..

2 minutes ago, Max Caulfield said:

Don't connect to the Internet

Is there a way I could still use the internet and not get infected?

[AnonymousGuy]

1 minute ago, Vandorlot said:

Should I use NAT then?

Yes.  Most of the discussion I see nowadays revolves around protecting guests from each other and protecting a guest from a compromised host.  This is where stuff like Intel SGX come in that I really know nothing about.

[Vandorlot]

Just now, Vandorlot said:

Is there a way I could still use the internet?

Get a virus

Streaming shows, I dont have cable..

Is there a way I could still use the internet and not get infected?

What if I use a VM in a VM?

[BlueChinchillaEatingDorito]

9 minutes ago, Vandorlot said:

What if I use a VM in a VM?

...seriously?

[Hiitchy]

12 minutes ago, Vandorlot said:

What if I use a VM in a VM?

Xzibit would show up at your house and accuse you of stealing his trademark. 

 

If you're gonna use the internet on a VM at least invest in a VPN or something. 

[Vandorlot]

1 minute ago, Hiitchy said:

Xzibit would show up at your house and accuse you of stealing his trademark. 

 

If you're gonna use the internet on a VM at least invest in a VPN or something. 

Would I need the VPN to be on both machines or just my host?

[Vandorlot]

5 minutes ago, BlueChinchillaEatingDorito said:

...seriously?

I could do that would just be time consuming

 

[BlueChinchillaEatingDorito]

Just now, Vandorlot said:

I could do that would just be time consuming

 

But...why...

[Vandorlot]

Just now, BlueChinchillaEatingDorito said:

But...why...

It would be harder for a possible virus to get out.. Maybe??

[LogicalDrm]

13 hours ago, Vandorlot said:

It would be harder for a possible virus to get out.. Maybe??

I have an idea, and this might sound radical, but why not just pay for Netflix and maybe quality VPN rather than "streaming" in first place? No fear of virus', no headaches about VM setup and you would be better person overall.

[Vandorlot]

4 hours ago, LoGiCalDrm said:

I have an idea, and this might sound radical, but why not just pay for Netflix and maybe quality VPN rather than "streaming" in first place? No fear of virus', no headaches about VM setup and you would be better person overall.

I have netflix but some shows arent on it.

[LtStaffel]

On 10/9/2017 at 2:01 PM, Vandorlot said:

I have a VM with VMWare. What can I do to protect my main PC from getting infected if my VM gets infected.

Nothing. There are VM escapes all over place. It's generally pretty secure as is, but there's not a lot you can do. If you are using the VM for normal use, then just run it like a normal computer. If you are doing other stuff, then let's hear about it.

On 10/9/2017 at 2:03 PM, AnonymousGuy said:

Don't use bridged networking and very few pieces of malware can break out of a VM.

True. However, the fact that some can should be worrying.

On 10/9/2017 at 2:03 PM, Max Caulfield said:

Don't connect to the Internet

USB sticks.

On 10/9/2017 at 2:03 PM, Blackhole890 said:

what do you mean infected? because there's no way to get "infected" if its just a virtualization, just like a sandbox i think

VMs can be broken out of, just like sandboxes.

On 10/9/2017 at 2:04 PM, Name Taken said:

The VM still have access to your LAN through your host PC so disconnect the VM's virtual NIC.

This is why @AnonymousGuy said to not use bridged networking, but that doesn't entirely solve the problem. This issue of LAN stuff will be harder to fix.

[LtStaffel]

13 hours ago, Name Taken said:

In NAT mode the VM can still access the Internet and other PCs through the host.

"said to not use bridged networking, but that doesn't entirely solve the problem"

[LtStaffel]

13 minutes ago, Name Taken said:

Bridged mode gets and IP from the router instead of an internal one so there is no difference to what the VM can access.

I know, that's why I said it does not entirely solve the problem twice

[LtStaffel]

55 minutes ago, Name Taken said:

How does it partially solve the problem?

it doesn't directly show which private ip is the host

[Vandorlot]

24 minutes ago, Sierra Fox said:

how paranoid do you have to be to set up a VM because you're scared of getting a virus from a video site? dont go to dodgy websites and dont click on dodgy shit. BAM no viruses.

Shows like game of thrones arent on netflix and I dont want to pay for 20 subscription services.

[Mira Yurizaki]

If your VM gets infected and it's not malware that has a payload capable of breaking out of the VM, then you just delete the VM and start again.

 

But if you're really that paranoid about malware, the only way to protect a PC is to air gap it and never put it on a network. Among other security nuances that are more trouble than the average person's time is worth.