Hidden service: Is it possible for an attacker to break out of a VM?

[hikki@xxxxxxxxxxxxx]

The title says it all:

Several people recommend running a hidden service from within a VM, 
to prevent attackers from doing side channel attacks and reading off your 
hardware components and serial numbers.

Then I heard that attackers can actually break out of VM's if they get root 
access on it due to a successful attack.

I just want your opinions on that one, thanks!
***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxxx with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/