Servers can be backdoored by exploiting buggy motherboard controll

jjoozio about 3 hours ago 2 commentsRead Article on arstechnica.com

DE version is available. Content is displayed in original English for accuracy.

⚡ Community Insights

Discussion Sentiment

0% Positive

Analyzed from 91 words in the discussion.

Discussion (2 Comments)Read Original on HackerNews

sillywalk•about 1 hour ago

*controllers

Too bad Oxide's non-BMC[0] service processor or something similar isn't available on all servers.

[0] https://oxide.computer/faq-friday/is-the-oxide-service-proce...

inigyou•5 minutes ago

If you just don't plug in the BMC network port, you effectively have this. But people do plug in the BMC network port because it's extremely useful.

burnt-resistor•about 1 hour ago

Reasonable environments don't allow BMC access from the normal LAN, and instead have a protected LAN segment for the BMC's NIC, so the risk typically minimal as it requires breaching a secure control network. It's bad to have insecure hardware, but defense-in-depth and proper network design makes compromise from it much more unlikely.