Slashdot Mirror

← Back to Stories (view on slashdot.org)

IPMI: Hack a Server That Is Turned Off

Posted by timothy on from the great-power-brings-great-vulnerability dept.

UnderAttack writes "A common joke in infosec is that you can't hack a server that is turned off. You better make sure that the power cord is unplugged, too. Otherwise, you may be exposed via IPMI, a component present on many servers for remote management that can be used to flash firmware, get a remote console and power cycle the server even after the normal power button has been pressed to turn the server off."

1 of 90 comments (clear)

  1. Re:Different networks by Sloppy · · Score: 4, Interesting

    Cool. but sometimes I hear weird rumors about Intel vpro, which make me wonder "what is a network?" If your CPU (?!) is listening for 3G radio signals, there's not just "management network" and "production network" but also "their network" although I guess you can always have your computer wear a tinfoil hat.

    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.