Man based on the recruiter mails I get it is *astonishing* how many AI companies are looking for someone to secure their bare metal servers a significant period of time after they started selling product on them

[mjg59@nondeterministic.computer]

@mxshift Oh yeah to their credit everyone I've talked to here is absolutely fine with swapping out what the management plane looks like

[mjg59@nondeterministic.computer]

@Darius "We should not poll at 1KHz when the BMC has told us it can send an IRQ when there's something we should care about" is not a heavy lift

[spacelifeform@infosec.exchange]

@mjg59

Does the data centre have power yet?

[dzwiedziu@mastodon.social]

@mjg59
I might be in comfortable enough unemployment to say “lol, eat shit and die” to such offers.

[hughsie@mastodon.social]

@mxshift @mjg59 I've started calling it "redfish" as it seems like a very leaky abstraction from a fwupd point-of-view... every vendor has some slightly different quirk it seems.

[penguin42@mastodon.org.uk]

@mjg59 I bet AIs just love walking around IPMI connections when they're frustrated at not being able to get their data the obvious way.

[aura@social.problematic.solutions]

@mjg59 ah, my favorite meeting i was accidentally in: managed kubernetes cluster broke on large hyperscaler, we get called into a meeting way outside our (EU) timezone, "sorry our confidential compute toggle didn't work 6 months ago and we killed your cluster trying to [silently] fix it. by the way did you know you signed an NDA with us?"

[artemist@social.mildlyfunctional.gay]

@mjg59 @freya I got a cold email from SpaceX last month because I won a CTF a few years ago

[barometz@social.treehouse.systems]

@creepy_owlet @mjg59 move fast, things broken?? mods??

[idlestate@toot.cat]

@mjg59

(me, looking at the Nth iteration of "this one trick will replace/fix the problem with passwords.")

I don't know why this would be different than myriad previous Internet businesses that ask us to entrust important parts of our lives to tremendous piles of jank.

[amarioguy@social.treehouse.systems]

@mxshift @mjg59 mildly curious, wonder what the “gold standard” of BMC interfaces should be?

Legit question, i’ve only ever seen enterprise systems with IPMI, so i have no idea what makes a BMC interface good or not

asking so that i have an actual frame of reference for what BMC management interfaces should be striving for in practice

[nicolas17@social.treehouse.systems]

@mjg59 why don't they simply make the AI secure the servers smh

[patterfloof@meow.social]

@mjg59 can't their AI do it for them, thought it was the solution to everything.