I don't think it is a secret and no one here that I know of works for eBay. One or two conspiracy theorist abounds; these theorists are not people you can trust to tell you the time in a room full of clocks.
Why would eBay plant people and pay them wages when they can just purchase the forum and kill it?
As regards making an undetectable VM. I suppose it would be extremely difficult as there are just too many ways to programmatically tell when someone is using a VM.
Furthermore, there isn't a fool-proof way to spoof GPU drivers yet, and without these, your canvas fingerprint will fall into a specific range and therefore, exposing your use of a VM.
In my opinion, accomplishing this will be so tricky that the cost and effort will outweigh the benefits. eBay isn't chasing up anyone for using VMs - at least not at the moment. I do not foresee that in the future either as there are many legitimate users, especially big companies selling on eBay / amazon. I imagine these companies must use containers for their staffs in place of VMs or bare-metal installation to conserve resources.
Javascript can only tell you how many CPU cores you have and a bit of manufacturer information but never enough to draw a complete picture.
In our case, we "passthrough" the CPU on our motherboard directly to the VM so JavaScript can fiddle with that if it likes.
You shouldn't disable JavaScript as this will break a lot of things.
We've disabled WebGL, WebRTC and Geolocation. These haven't caused any problems for us yet not even with multiple high profile accounts.
Spoofing WebGL or Canvas is not just a bad idea,
it's terrible.
