Could they not get a free VM and then download an image from modern.ie?
Could they not get a free VM and then download an image from modern.ie?
Boot Camp is of course free, but only permits rebooting a Mac into Windows. For $70 one could purchase VMware Fusion or Parallels Desktop, and run Windows side by side with OS X. The author of the Washington Post piece does not make this clear.
Calling Boot Camp a "secret weapon" suggests that most people aren't aware that Apple computers can run Windows. This may be true in the wider world, although any Apple employee in a retail store could inform customers otherwise.
Expecting a writer not focused on technology to discuss gratis tools like VirtualBox and modern.ie is probably asking too much (although these would be well within the reach of Hacker News readers).
I suppose in a sense it becomes a bit of a worry if you run too lightweight on the VM which after all will have to contain your banking credentials (sort of the opposite of firing up a VM when you're doing something that feels too sketchy to run on the main system).
There are a few things that leak presence of a virtual machine to running code (even in userspace).
There are the easy signs, e.g. that the virtualbox guest kernel-modules or utility programs for clipboard exchange are running. Or that your harddisk controller has a PCI ID identifying it as a Oracle Virtualbox AHCI device.
But on a hardware-virtualized machine there are also numerous inconsistencies to be observed which are not influencing the correct execution of "normal" code, but leak the existance of the hypervisor to the guest OS (and sometimes even to non-privileged user-code in the guest OS).
Google for "Red Pill VM detection", unfortunately currently invisiblethings.org (the site of the author) seems to be unavailable.