#019 · Hacking LegendsLegendaryCopy drafted

Joanna Rutkowska

Blue Pill

Hypervisor rootkits and Qubes OS

Rating

88Impact score
Technical96
Social42
Notoriety80
Influence90
FromPoland
Era2006–present

Domains

RootkitsVirtualizationSecure OS design

Scouting report

Presented Blue Pill at Black Hat 2006, a rootkit that moved a running OS into a hypervisor beneath it, and coined the Evil Maid attack for machines left unattended. Then built the answer: Qubes OS, a desktop that assumes compromise and isolates by compartment.

Curator’s note

Broke the platform, then shipped a better one. Very few do both.

Sources