annerajb
Joined 19 years ago
Karma
150
Submissions
99
Member since
Sep 5
Joined 19 years ago
Curious how this one affected the server or did compare to the original article.
This one seems more benign considering it won't be able to mess around like the BMC has access to things like secure boot and other system busses like the PCI.
is it connected to the SPI of the BMC flash/OS storage? Why would software integrity checks like making sure the image is signed and not tampered wouldn't capture it? (Answer to this one sounds easy bad security practices regarding firmware process)
If you don't want it the only option is a non android os such as oxygen.