211–220 of 220 posts
Earlier quoted context omitted.
i got nanokvm pro desktop a couple of days ago. looks like what was before is no more now. i run tcpdump for a while, the only outbound connections are ntp
Is the piKVM mode really piKvm?
Provenance and trust are relevant for a remote KVM. But I can't find any information on their Web site about who runs the JetKVM company, not even a partial name or handle of anyone, nor even what country they are in. Which seems odd for how much this product needs to be trusted. Searching elsewhere, other than the company Web site... Crunchbase for JetKVM shows 2 people, who it says are based in Berlin, and who also…
https://github.com/jetkvm/kvm/graphs/contributors gives us top contributors @ym and @adamshiervani both being Berlin-based, plus @IDisposable in Saint Louis, MO. > Estonia Dunno if this is still the case now but Coinbase used to have an IBAN in Estonia (or maybe Latvia, can't recall). The three baltic states became quite the EU tech hub lately. > The product reportedly ships from Shenzhen This is not unusual for low-…
They've all made doing business remarkably easy - you can get a digital ID and open a bank account without ever being present in the country, and their digital offerings are based on solid crypto and not just centralization.
An incredible example of what modernizing government infrastructure and regulation can do. It's a shame that the cryptobros currently in charge of the US have basically nuked Central Bank Digital Currencies (CBDCs) so that they can continue to grift without supervision.
Earlier quoted context omitted.
Keeping these kind of management devices off the Internet seems prudent. But how do you do that and still get Tailscale to work? Assign the device to a separate vlan that is restricted to only talk to Tailscale? Otherwise, if the device is on your regular network, it will still be connected to the internet.
Use Tailscale subnet routing. Untrusted devices can sit on a separate VLAN or get WAN blocked, you can still reach them internally, and from any other device on Tailscale. You just need to expose the subnet via Tailscale subnet routing.
What I was wondering was: In order to get the device to talk to Tailscale to be able to reach it you need to give it access to the internet to reach Tailscale. But now I understand your answer and it is to let the device sit somewhere in an enclosed network and then through another trusted Tailscale node route any traffic to it using subnet routing. Thanks!
That's why solutions like this seem a little bit backward to me.
On top of that, all server/desktop OSes I'm familiar with, provide better remote control options after boot (that respect UAC) - but maybe I'm simply not the target demographic here.
My company runs on GL.iNet Comet GL-RM1 KVMs to manage servers deployed at remote customer sites and I'm about to deploy more tomorrow
"GL Technologies (HK) Ltd & GL Intelligence, Inc & Shenzhen GuangLianZhiTong Tech Co.Ltd" Since there's no independent audit of these and no way to prove that these aren't being intercepted, I wouldn't be bragging about voluntarily installing potential infrastructure vulnerabilities.
Earlier quoted context omitted.
Also you can SSH into it: https://jetkvm.com/docs/advanced-usage/developing#developer-... And the serial console is available over USB UART (SBU) If it's attempting to be a covert op it's doing either a terrible job or a very advanced one.
It is similar to NanoKVM-Pro, and indeed one may also install PiKVM on that commercial hardware. Given that very distinctive "JetKVM" shape, I am now 99% sure I've seen this gadget someplace last year, If I recall the Mandarin Chinese name (difficult for me), I will post the hardware URI. One may be surprised how much hardware includes unsigned firmware OTA updates. And someone will need to audit the stack to check i…
Don't use these on your corporate devices or the infosec department will think you are a DPRK remote worker.
Is this even detectable? Doesn’t it just show up as a regular mouse and keyboard?
Earlier quoted context omitted.
It is similar to NanoKVM-Pro, and indeed one may also install PiKVM on that commercial hardware. Given that very distinctive "JetKVM" shape, I am now 99% sure I've seen this gadget someplace last year, If I recall the Mandarin Chinese name (difficult for me), I will post the hardware URI. One may be surprised how much hardware includes unsigned firmware OTA updates. And someone will need to audit the stack to check i…
It's been on KickStarter for about a year at this point - could that be where you'd seen it?
It might be possible something popped up that looked very similar to the Kickstarter ad. Could also just have been a 4th container product run common with China CM exports. =3
Earlier quoted context omitted.
It's been on KickStarter for about a year at this point - could that be where you'd seen it?
The item was promoted on a China e-store site for awhile, and caught my eye given a video encoded streaming kvm at that price point seemed like "optimistic" marketing. I spend a lot of time sourcing electrical parts, optical components, and metric 304 steel fasteners on these sites. It might be possible something popped up that looked very similar to the Kickstarter ad. Could also just have been a 4th container produ…
Sipeed nano also launched around the same time, but they were cagey at first with open sourcing the firmware, requiring a certain number of github stars before they'd do that.