3 ms·
This response appears to be grasping at straws to try and prove that the described chip doesn't and couldn't exist. It reads like FUD. I find this article to b
by phire 8y ago
This response appears to be grasping at straws to try and prove that the described chip doesn't and couldn't exist. It reads like FUD.
I find this article to be much more convincing https://www.theregister.co.uk/2018/10/04/supermicro_bloomberg/ https://www.theregister.co.uk/2018/10/04/supermicro_bloomber...
It points out that 6 pins is enough to intercept and inject code into the SPI bus between the Baseboard Management Controller and it's bootflash.
Once you have code running on the BMC, you can use it's capabilities to call home (via either the BMC's nic or the main nic, depending on how well the network firewalls are locked down) and then modify or simply read the main system's memory.
I don't want to claim that Bloomberg is right about the attack happening, just that the attack is surprisingly plausible.
- azinman2 8y agoNot to mention if you pulled this off, it’s likely you have many other hacks in place too.. such as defeating firewalls and the local network config. They’re also taking bloomberg verbatim, when they likely have technical details incorrect. That doesn’t mean the gist is wrong (which may or may not be, I have no idea, I just think a lot of this article’s arguments are on weak foundation).