Allegedly a supply chain attack on Supermicro's servers installed small CPUs disguised as passive capacitors on the mainboard that were able to take over the BMC, which could then compromise the main CPU:

@qrs This is such a fantastic article. All the companies involved vehemently deny it happened at all, at least publicly. I think this even is more significant than we all think, and it will only become obvious later.

@qrs Because we have this chip now we will see it in many other devices in the future. I can imagine there will be backdoored developer tools for hardware automatically deploying it in new designs and it is not unlikely it will be unnoticed. Developers have lesser time, product cycles are shorter, too. As long as it works most OEM will be happy.

@qrs It’s like those key press transmitters Soviet spies put in electric typewriters.

Sign in to participate in the conversation

Server run by the main developers of the project 🐘 It is not focused on any particular niche interest - everyone is welcome as long as you follow our code of conduct!