code, dinosaurs, embedded, ipmi, python, security, tech

Get Device ID (moar IPMI… yawn….)

October 12, 2014

I’d had this sitting around for awhile and thought I’d take another look at it; in this I simply toss out an IPMI Get Device ID command and see what happens....

code, embedded, ipmi, security, tech

mega mega mega… chan chan chan….

September 4, 2014

Or… Notes on the IPMI Protocol Security Model. I wrote in Sold Down the River about the curious aspects of channels and authentication and users and all that stuff. Here’s...

crypto, philosophy, security, tech, web

certificates and security

August 5, 2014

npm is the defacto package manager for the node.js javascript network programming environment thingee. The folks who make npm have taken a security leap: npm no longer supports its self-signed certificates...

audit, data, philosophy, security, tech

The Dynamic and Depreciating Value of Computers

July 6, 2014

I wrote this while I was at my company Elemental, and was meant for engineers to implement, so despite some of the very specific language for implementation purposes it was never meant to...

feminism, people, philosophy, science, security, sexism, tech

Def Con, Jeff Moss, and Sexism

July 1, 2014

I suppose this could be subtitled “why I won’t be going to Def Con again.” Last August I wrote a letter to Jeff Moss (who is the founder of Def...

code, embedded, ipmi, security

more IPMI than you can shake a stick at….

May 12, 2014

I’ve long wanted a Get Channel Cipher Suite command w/o authentication, so I wrote a script to do so; those interested can get it here: https://github.com/zenfish/ipmi/blob/master/ipmi-get-ciphers.py Actually none of the...