3 ms·
If you have physical access twice, full disk encryption usually doesn't help really at all. IPMI seems about as powerful as physical access.
by kadoban 7y ago
If you have physical access twice, full disk encryption usually doesn't help really at all. IPMI seems about as powerful as physical access.
- FDSGSG 7y agoIf you just ignore random reboots, sure. But why would you?
- kadoban 7y agoI don't think that'd be necessary, couldn't you make changes and then wait for natural reboots?
- FDSGSG 7y agoYou couldn't, not via console access anyway. However, if the attacker gains RCE many IPMI implementations theoretically allow for DMA, but this is a significantly more complex attack to mount in practice with no public PoCs available.