4 ms·

Was responsible to poke at BMC security in data centers. BMCs lack the security fundamentals and often behave like cheap IoT knock-offs. They often use outdat

Was responsible to poke at BMC security in data centers. BMCs lack the security fundamentals and often behave like cheap IoT knock-offs. They often use outdated kernels, libraries, and security mechanism.

kabdib 3y ago
Ran a fleet of servers with terrible BMCs. We kept those on a well-sealed-off private network. Woe betide you if you run into one of the BMC implementations that shares a host network interface; no separate cable! These things are terrible from a security standpoint.
- deleted 3y ago
  [deleted]
- septune 3y ago
  i hope you disable OS passtrough because it could be gore
jdwithit 3y ago
Yeah they are utter garbage. For years you had to use Java 6 with absolutely every modern security measure turned off in both the JVM runtime itself and your browser to access Dell DRACs. Accept expired certs, run unsigned code, I'm sure this is all fine ... I mostly work in the cloud now but when I last had to manage a bunch of physical machines we had a physically separate network accessed via its own VPN to get onto the BMCs. Because yeah, the security situation was a joke.
- hsbauauvhabzb 3y ago
  I found that if you leave your bmc unplugged on a super micro, it’ll conveniently bridge it to whatever other Ethernet is plugged in, meaning an outage of your management network may roll over to another network unintentionally. Id put money on there being preauth vulnerabilities in those things, judging by the engineering quality.
  - neilv 3y ago
    That sounds like showstopper for many sites. On a much less-important note, it might explain some weirdness I'm seeing lately with one of my home Supermicro servers. (The docs say the BMC should only listen on one port, but the switch still sees some degree of responsiveness on the normal non-management port when "off".)
  - tryauuum 3y ago
    I believe you can override this behavior in BMC settings
cperciva 3y ago
The S in BMC stands for "Security".

kabdib 3y ago

Ran a fleet of servers with terrible BMCs. We kept those on a well-sealed-off private network. Woe betide you if you run into one of the BMC implementations that shares a host network interface; no separate cable! These things are terrible from a security standpoint.

deleted 3y ago
[deleted]
septune 3y ago
i hope you disable OS passtrough because it could be gore

jdwithit 3y ago

Yeah they are utter garbage. For years you had to use Java 6 with absolutely every modern security measure turned off in both the JVM runtime itself and your browser to access Dell DRACs. Accept expired certs, run unsigned code, I'm sure this is all fine ... I mostly work in the cloud now but when I last had to manage a bunch of physical machines we had a physically separate network accessed via its own VPN to get onto the BMCs. Because yeah, the security situation was a joke.

hsbauauvhabzb 3y ago
I found that if you leave your bmc unplugged on a super micro, it’ll conveniently bridge it to whatever other Ethernet is plugged in, meaning an outage of your management network may roll over to another network unintentionally. Id put money on there being preauth vulnerabilities in those things, judging by the engineering quality.
- neilv 3y ago
  That sounds like showstopper for many sites. On a much less-important note, it might explain some weirdness I'm seeing lately with one of my home Supermicro servers. (The docs say the BMC should only listen on one port, but the switch still sees some degree of responsiveness on the normal non-management port when "off".)
- tryauuum 3y ago
  I believe you can override this behavior in BMC settings

cperciva 3y ago

The S in BMC stands for "Security".