Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Wouldn't the FBI need to secure any onboard storage, including an embedded computer running Linux? Can they (currently) guarantee that they've found all locations on which evidence could be stored?


IPMI servers and related devices like Sun's LOM and HP's iLO have little to no storage space, perhaps a few MB of flash.

You can set up a limited number of users, like 16, and cannot store or access random data (i.e. you cannot use it like a 1GB USB drive). Of course, you could image that data, as there are tools under Linux etc. that let you read the IPMI / LOM / iLO information.


The management modules are often considerably more powerful than what is necessarily exposed via IPMI -- A number of SuperMicro's IPMI modules have more than a few megabytes of flash, and do run an embedded version of Linux.

The module's capabilities are not all that different from OpenWRT; they run Linux, have a network connection, provide a web UI including a 'VNC' server for the VGA console, run (IIRC) net-snmp ...

If I wanted to obscure my intentions, I definitely would leverage such non-obvious embedded systems.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: