Hacker News Reader

General practice for things like BMC and other out of band control systems is to put them on isolated vlans and default deny any non-approved traffic.

There is no way that any large tech company security operation misses this traffic phoning home from a management vlan.

View on HN

BMCs can often also communicate on the other non-dedicated ports. It is not impossible for a compromised BMC to see traffic on an ethernet port or change its VLAN and go out on the same VLAN as the rest of the normal traffic.

That's true but right now I can think of at least three options where that wouldn't be relevant:

1. The implant can use the host network interface before the host OS starts 2. The implementation depends on VLAN tagging and the implant simply uses configures its network interface to use the same tag as the host interface 3. The implant can compromise the host OS when it loads and use its networking stack after it loads

Reply on news.ycombinator.com