4 ms·
> Has Facebook ever been hacked to this degree? Yes, security researchers have reached FB servers in the past few months. > Has Google ever been hacked to thi
by throwaway_xx9 11y ago
> Has Facebook ever been hacked to this degree?
Yes, security researchers have reached FB servers in the past few months.
> Has Google ever been hacked to this degree?
Yes, by Mainland Chinese agents a few years ago.
I know of similarly large networks that are currently owned.
And almost everybody has an IPMI problem, whether they realize it or not yet.
(Silicon Valley engineer here.)
- aylons 11y agoIPMI meaning the protocol for server management [1]? I'm curious on this one. [1] https://en.wikipedia.org/wiki/Intelligent_Platform_Management_Interface https://en.wikipedia.org/wiki/Intelligent_Platform_Managemen...
- ChiCommTroll 11y agoTake for instance Intel's addons to IPMI "Automatic Management Technology". Let's say you have a server, reachable on a certain network address on a LAN. I can turn on AMT, I can set up server management answerable at the SAME address. network traffic to and from the machine and network is undisturbed. I can install bios updates, configure aspects of the machine, all kinds of things, just with AMT. I have read in some cases you can configure the machine this way even if its powered off.
- sre_ops 11y agoYou can't. But thanks for trying.
- madsushi 11y agoIPMI cards are always-on, and run outside the rest of the server. They receive power even if the server is shut down. These are used for out-of-band management, power on/off, etc. Imagine if someone were to have control of the firmware running on your IPMI cards... they would have physical access to your server (essentially) from a remote location. You often don't control what's running on the IPMI cards or if they call home, etc. What if HP or Dell had sleeper software in your IPMI cards, and when it wakes up, opens a direct connection to your server?
- deleted 11y ago[deleted]