Let's say I have full access to a remote machine (specifically,
root on a
Linux). What is the best method to check whether this is a real piece of hardware or a virtual machine?
Most of the methods that I have seen rely on looking at various hardware-related identifiers using tools such as
lshw. It seems to me that these methods are prone to some sort of man-in-the-middle attacks.
Thanks in advance for references or any other information.