Come on guys... Take off the tin foil hats.

 

You are passing through the NIC (doesn't matter if it HVM or PV). The host knows a NIC is there but there is no device driver loaded for it. The NIC gets passed through long before it gets to loading most of the the Linux Kernel. Therefore, it does not have a way to communicate / intercept the stuff going through it. It would require you or a hacker to install either a custom "hacked" Linux Kernel, a custom "hacked" version of QEMU or a custom "hacked" Xen or KVM for what you are describing to even occur.

 

My point was that malicious code can gain full access to the physical address space of the device in the context of the host machine (ie you are leaking out of the container) so if you have access to that then who knows what can happen.

 

If the hacker has direct access to the physical address space (wires or wireless) of your network... He either hacked your ISP, your wireless network or installed something within your home network.

 

Hackers are going to attack apps like Transmission, Couchpotato, SSH, VNC, HTTP and HTTPS, PHP, mysql, wireless network, etc. and find holes in your FW long before they break into your home and install devices or load custom "hacked" Linux Kernels, QEMU or a "hacked" version of Xen / KVM onto your server.

 

Do you honestly believe Anonymous (a hacker group) is going to go through all that trouble so they can download Vampire Diaries or to monitor where you go on the internet?

 

If someone has access to your physical network (wired or wireless)... It wouldn't matter if you had a Cisco ASA 5500 (Enterprise Firewall) with 10 Security Engineers monitoring it 24 / 7 or if you had a FW running in a VM or not... Everything is compromised.

Vampire diaries no,  but they might want to track the wife's online shopping habits,  anthropology,  gap... 

Vampire diaries no,  but they might want to track the wife's online shopping habits,  anthropology,  gap... 

 

You shouldn't let your Wife online shop to begin with.

 

I chain my GF to my car bumper and make her run behind the car when I drive to the various stores she shops at.  She weighs 115 pounds and she is thrilled about it as much as I am.