Low cost/janky China implant: take an ATtiny microcontroller, solder it onto the unused SOIC8 SPI flash footprint on a Supermicro motherboard (pinout is compatible), program it to override some reads, stick a decoy transformer/coupler coil on top.
-
Show this thread
-
Replying to @marcan42
I'd even push to re-etch the markings instead of anything decoy on top... far less suspicious - it has a footprint, it fits on the board, etc...
1 reply 1 retweet 3 likes -
Replying to @attiegrande @marcan42
I'm really intrigued if this is the route in though... because if it is, then it's not likely to deal with firmware updates well... either rendering the BMC unbootable because it stamped on the wrong bits, or being unable to surgically modify because it's now a cow not a horse...
2 replies 1 retweet 2 likes -
Replying to @attiegrande
it's pretty easy to make it work with minor updates to the same codebase, but it would be basically impossible to make it work if you e.g. replaced it with OpenBMC.
1 reply 1 retweet 1 like -
Replying to @marcan42
of course - a swap to OpenBMC would be asking for trouble... but I'd image that even a new build / release of the expected firmware family would have things in different enough places to cause issues.
1 reply 0 retweets 0 likes
the robust way to implement this is pattern matching, which is pretty easy with raw code. harder with compressed code, but you'd hijack the process early (in the bootloader) and then rely on code executing on the BMC itself to do the rest of the on-the-fly patching.
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.