BMC, hack, idrac, ipmi, qemu, security, system, virtual

BMCs under Qemu repo

August 24, 2026

(Took a hatchet to the last post, lol. Here’s the update!) For awhile I’d had a little petting zoo of qemu’d BMCs, so I decided to write it all up...

audit, code, crypto, hack, idrac, ipmi, python, security

new tool release: zipmi

August 17, 2026

zipmi – https://github.com/zenfish/zipmi – is a pure-Python IPMI/BMC stack — an `ipmitool`-style CLI plus a library where every byte is an inspectable and mangleable object. Built for people/AI (are AIs...

code, DARPA, dtrace, forensics, mac, security

Software tracing on the mac

March 11, 2026

There are two types of people in the world… those who love strace (and ltrace!) and the other 99.999% of people who have never heard of strace. This is for...

dinosaur, me, security, sexism

A Legend in Someone Else’s Mind

May 7, 2025

So this is a self-indulgent whimsical interlude that’s overly long. Pull up a chair if you want, else, I hope all is well in your world. All that said –...

ipmi, risk, security, tech

Remotely Access Live Supermicro Firmware+

February 1, 2025

TLDR; a vendor supported/supplied utility allows download of live BMC1 firmware/configuration on (at least) some SuperMicro BMCs. It’s hard to tell who might be affected, but the utility used was...

art, cats, data, people, philosophy, security, tech, Uncategorized

Kittens, Pr0n, and Bad Juju in the Blockchain

July 2, 2017

Modern digital currency mostly seem to revolve around a construct called a blockchain, which – by design – is a (mostly![1]) append-only distributed database that is intended to keeps all...