28 ms·
Wouldn't help. The BMC hardware has direct serial access to CPUs and other hardware in the machine. Communication is unencrypted. A hardware modification attack
by alfalfasprout 8y ago
Wouldn't help. The BMC hardware has direct serial access to CPUs and other hardware in the machine. Communication is unencrypted. A hardware modification attack wouldn't touch the firmware at all and could still compromise IPMI functionality.
- deleted 8y ago[deleted]
- greglindahl 8y agoReducing the attack surface does help -- you're making perfection the enemy of the "somewhat better".
- tomaskafka 8y agoNo, against determined adversary it doesn't.
- transpute 8y agoEven now, supply chain hardware modification attacks remind people of fiction. However, the number of people known to be affected by buggy BMC firmware is orders of magnitude larger, as described two comments upthread: > The system is basically designed to be as insecure as possible by default, and allow for the maximum possible persistent threats with BIOS flashing, IPMI flashing, and other completely un-authenticated avenues exposed.