Antipope VENOM

Encyclical

"Disculus Mollis". In May 2015 a flaw in QEMU's virtual floppy controller, used by Xen and KVM, was launched with a logo and a press campaign and compared to Heartbleed. It really did allow escaping a virtual machine, but it required root inside the guest first, and no real attacks were seen. The bug mattered to cloud providers, who patched it quickly; the Heartbleed comparison did not hold up. The most useful lesson remains: emulated devices nobody uses should be removed, floppies included.

Saint page: Saint VENOM, Poison in the Virtual Floppy