Re:Slack raises $200M at $3.8B valuation for business messaging
by aylons on Friday April 01, 2016 @04:05PM
(#11408098)
IPMI meaning the protocol for server management [1]? I'm curious on this one.
[1] https://en.wikipedia.org/wiki/Intelligent_Platform_Managemen...
Re:Slack raises $200M at $3.8B valuation for business messaging
by madsushi on Friday April 01, 2016 @04:38PM
(#11408396)
IPMI cards are always-on, and run outside the rest of the server. They receive power even if the server is shut down. These are used for out-of-band management, power on/off, etc. Imagine if someone were to have control of the firmware running on your IPMI cards... they would have physical access to your server (essentially) from a remote location. You often don't control what's running on the IPMI cards or if they call home, etc. What if HP or Dell had sleeper software in your IPMI cards, and when it wakes up, opens a direct connection to your server?
Re:Slack raises $200M at $3.8B valuation for business messaging
by ChiCommTroll on Friday April 01, 2016 @04:30PM
(#11408329)
Take for instance Intel's addons to IPMI "Automatic Management Technology".
Let's say you have a server, reachable on a certain network address on a LAN.
I can turn on AMT, I can set up server management answerable at the SAME address. network traffic to and from the machine and network is undisturbed.
I can install bios updates, configure aspects of the machine, all kinds of things, just with AMT. I have read in some cases you can configure the machine this way even if its powered off.
Yes, security researchers have reached FB servers in the past few months.
> Has Google ever been hacked to this degree?
Yes, by Mainland Chinese agents a few years ago.
I know of similarly large networks that are currently owned.
And almost everybody has an IPMI problem, whether they realize it or not yet.
(Silicon Valley engineer here.)