Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

As an aside, we recently experienced a server hack through a vulnerability in iLO (a system we didn't even use other than for rebooting the machine)

Thanks, HP! /s



To build on this, we distrusted the actual servers in the rack for the following:

1. Out of band devices to administer boot fail incidents, serially controlled

2. PDU (Power distribution Unit). Supplied with 2 different power sources. Provides dual power per server on rack. Controlled by ethernet.

3. Firewall rules that prevent the managed crap (iLO and the like) from working.

The only recent issue my previous job had, was in a junior sysad installed apache tomcat with default creds. Can't really fix user error - but the above rules at least stop malicious intent from manufacturers. Mostly.


ME is like that except it ships with the CPU.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: