News for hackers. Stuff that matters.

A comment on The Big Hack: How China Used a Tiny Chip to Infiltrate Amazon and Apple. Parent comment

Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by detaro on Thursday October 04, 2018 @06:43AM (#18138690)
To be clear, this is only for the ability to update the BIOS over the BMC interface, not for BIOS updates in general. (unlike some other vendors, where you need a support contract to be even able to download the updates)

At least on some boards you can boot the USB drive image containing the BIOS updater through the BMC and do a remote update that way.

[ Parent | on HN ]
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by bubblethink on Thursday October 04, 2018 @01:14PM (#18141737)
Supermicro doesn't publish changelogs for their BIOSes. Their disclaimer on their BIOS download page says, "don't update the BIOS unless you have to". It's a ridiculous stance for a server company. You buy Supermicro over Dell for the price. That's pretty much it.
[ Parent | on HN ]
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by shaklee3 on Thursday October 04, 2018 @06:09PM (#18144118)
Price, variation, and time to market.
[ Parent | on HN ]
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by RL_Quine on Thursday October 04, 2018 @08:23AM (#18139213)
For the models I was looking at a number of years ago, the options were through IPMI or via a USB Floppy Drive. Perhaps my memory is failing me here, but I seem to remember being quite enraged at the prospect and would have done a lot not to have to pay the license fee on principle.
[ Parent | on HN ]