Related: a 2014 paper on using timing side channels to detect being in a VM from within browsers https://www.usenix.org/system/files/conference/woot14/woot14...