Hacker News Reader

I thought "reflash the BMC firmware from the host" was a feature? A hard to use, poorly documented feature, granted.

Depends on your threat model and if you expect root on the host to also have root on the BMC.

Right. The experience so far is that most people find the capability surprising.