Hello, I try to keep my Debian laptop as private as possible, but for work, I need to use Windows software, so I run a VirtualBox with Windows 11. My PC runs smoothly without any issues, but I need to access my specific hardware USB ports, and it doesn’t recognize them. I read that I need to install the Extension Pack, so I downloaded it, but before installing it, I get a warning message that seems to suggest I’m accepting some risk to my computer. I don’t really understand this stuff, so I wanted to ask the following:

Is there any security or privacy risk associated with the VirtualBox Extension Pack?

Is there any other way to access my USB-C devices without installing it? (I’ve already tried selecting USB 2.0 and 3.0, but the list shows “no device available”).

Thank you very much to whoever responds.

PS: Also I found this on the Internet: “The user agreement VirtualBox extension pack states of sharing a user’s data to the US govt. including the hardware information and so on. Does it make sense even if I use Tails/Whonix for anonymity?” :-/

  • ono
    link
    fedilink
    English
    2
    edit-2
    1 year ago

    Running unauditable code is always a risk.

    Consider an alternative to virtualbox, like QEMU/KVM with virt-manager.