Servers can be backdoored by exploiting buggy motherboard controll

jjoozio about 4 hours ago 4 commentsRead Article on arstechnica.com

⚡ Community Insights

Discussion Sentiment

0% Positive

Analyzed from 100 words in the discussion.

Discussion (4 Comments)Read Original on HackerNews

sillywalk•about 1 hour ago

*controllers

Too bad Oxide's non-BMC[0] service processor or something similar isn't available on all servers.

[0] https://oxide.computer/faq-friday/is-the-oxide-service-proce...

inigyou•8 minutes ago

If you just don't plug in the BMC network port, you effectively have this. But people do plug in the BMC network port because it's extremely useful.

preisschild•10 minutes ago

Thats why I just want upstream OpenBMC support and redfish

burnt-resistor•about 1 hour ago

Reasonable environments don't allow BMC access from the normal LAN, and instead have a protected LAN segment for the BMC's NIC, so the risk typically minimal as it requires breaching a secure control network. It's bad to have insecure hardware, but defense-in-depth and proper network design makes compromise from it much more unlikely.