Dustin Puryear wrote
>Bad: > >An attacker could potentially break out of the VM and take over the entire >server. This would allow him to compromise all of the virtual servers. >Basically, using VM could mean putting all of your eggs in one basket. > > How? From what I've seen, the guest OS doesn't even know it's not on a real computer. The closest danger I could see would be if the guest OS gets compromised, the attacker could use the network transport to get to other machines, but that's no different than a physical box.
