fish2

If I'm assuming everyone involved had good intentions, the best thing I can guess is someone was speaking to the writer about the potential of the BMC being used for spying and got some details mixed up. Consider: the BMC has access to the system via PCI-e, as well as kvm and comport. In some systems, the BMC is in the path of the main NIC. There have been some major software flaws in BMC software, including revisions that SuperMicro shipped, where passwords could be bypassed in the network interface. Stuff like this https://web.archive.org/web/20140625065505/http://blog.cari.net/carisi… and other things on this page http://fish2.com/ipmi/ are all pretty nasty if you thought IPMI was secure in the neighborhood of 2014.

We are increasingly finding out that even owning and having physical control over the hardware isn't enough to insure secure a physical device. Google 'BIOS based Advanced persistent threat' and 'Hardware Trojan'. Oh but wait, it gets worse. Even "well thought out" industry standards are horrible security problems waiting to happen. Cypher 0 , who thought this was a good idea? http://fish2.com/ipmi/ The solution you are looking for may be known as homomorphic encryption, which is still rather far out in the theoretical place. The horse has been out of the barn so long it has had a good life, grown old and has great grand children playing in the fields.

if you want to be really scared read: http://fish2.com/ipmi/itrain.pdf all servers in a datacenter have this management interface (iLO is just one type). if the management network these sit on is poorly secured (like here) your servers are literally powned.

(the famous) Dan Farmer was alerting about problems with IPMI / BMC around the same time http://www.fish2.com/ipmi/

IPMI is equally scary: https://www.youtube.com/watch?v=GZeUntdObCA https://lwn.net/Articles/630778/ http://fish2.com/ipmi/

Nowadays, it's not enough to wipe the machine. You have to toss (or, at least, re-image) the hardware. Modern servers have firmware running on internal devices, including Linux runnning on full ARM cores, that can be 1) imaged from the base OS, and 2) have full control over hardware or other important data. This includes: - IPMI Modules: http://fish2.com/ipmi/itrain.html - HDD Controllers (in your HDD/SSD drives): http://www.arm.com/markets/enterprise/hdd-ssd.php ... as well as ethernet controllers, any devices with PCI option ROMs (they can control boot), and quite a few other things. This essentially means that you have a bunch of fixed, poorly documented, runtime reconfigurable and re-imageable hardware, with full access to data and system resources.

It's worse than that. It's not BIOS-- it's a freestanding computer. You'll enjoy this (or be horrified by it): http://fish2.com/ipmi/itrain.html

I followed what you meant and understand baseband management controllers are more similar to IME in terms of risk profile. They're not (generally?) on-chip though, so it's at least up to individual OEMs, and purchasers have slightly more options (if slim). Agree it's not widely enough recognised either though. There's some coverage at least: https://www.schneier.com/blog/archives/2013/01/the_eavesdroppi.html https://isc.sans.edu/diary/IPMI%3A+Hacking+servers+that+are+turned+%22… http://arstechnica.com/security/2013/08/remote-admin-tool-imperils-ser… https://www.usenix.org/system/files/conference/woot13/woot13-bonkoski_… https://community.rapid7.com/community/metasploit/blog/2013/07/02/a-pe… https://www.schneier.com/blog/archives/2013/01/the_eavesdroppi.html http://www.websecuritywatch.com/authentication-bypass-vulnerability-in… http://fish2.com/ipmi/itrain.pdf

Indeed. See http://fish2.com/ipmi/river.pdf