Top all-time · #1800
Eclypsium
Company blog · eclypsium.com/blogsecurityhardware
Eclypsium is the company blog at eclypsium.com, writing about security and hardware. Since 2019, 40 different Hacker News readers have linked it 48 times, most often “The Missing Security Primer for Bare Metal Cloud Services”. It is still writing: the last post was on 2026-10-30, and you can follow it by feed.
Too few sampled comments (15) to say how often HN recommends it.?
Why HN links it
HN readers link Eclypsium's security blog on firmware, boot and hardware threats such as BootHole, the Gigabyte firmware backdoor, Dell BIOSConnect flaws, and bare-metal cloud attacks.
Summarised by Claude from a sample of 15 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Eclypsium’s infrastructure assurance platform protects mission critical hardware and detects compromised devices in enterprises and government agencies.
Most-linked posts?
- The Missing Security Primer for Bare Metal Cloud Services4 people · 4 mentions · first linked 2019-02-26
- Supply Chain Risk from Gigabyte App Center Backdoor4 people · 4 mentions · first linked 2023-05-31
- Dell devices vulnerable to targeted man-in-the-middle attacks via BIOSConnect3 people · 3 mentions · first linked 2021-06-25
- There's a Hole in the Boot3 people · 3 mentions · first linked 2020-07-29
- Vulnerability in Popular PC and Server Firmware2 people · 2 mentions · first linked 2024-06-21
- UEFI shell vulnerabilities allow attackers to bypass Secure Boot2 people · 2 mentions · first linked 2025-10-14
- Many Windows Drivers Vulnerable2 people · 2 mentions · first linked 2019-08-12
- Virtual Media Vulnerability in BMC Opens Servers to Remote Attack2 people · 2 mentions · first linked 2019-09-03
- Shimshady: Linux Secure Boot CVE2 people · 2 mentions · first linked 2024-02-07
What Hacker News says?
https://eclypsium.com/blog/understanding-detecting-pixiefail... https://binarly.io/posts/The_Far_Reaching_Consequences_of_Lo...
Comment linking /blog/understanding-detecting-pixiefail-uefi-vulnerabilities/
on “A brief history of the U.S. trying to add backdoors into encrypted data (2016)”Submitted UEFI shell vulnerabilities allow attackers to bypass Secure Boot as a story · 56 points
HN discussionProbabilistic Arm MTE memory safety is a stepping stone to deterministic CHERI hardware, https://saaramar.github.io/memory_safety_blogpost_2022/ & https://news.ycombinator.com/item?id=39668053 The right kind of mitigations targets the 1st order primitive; the root cause of the bug. Hardware solutions: CHERI (Morello, CheriIoT), MTE Software mitigations: kalloc_type+dataPAC, AUTOSLAB, Firebloom, GuardedMemcpy, CastGu…
Comment linking /blog/a-faster-path-to-memory-safety-cheri-memory-tagging-and-control-flow-integrity/
on “Gaining kernel code execution on an MTE-enabled Pixel 8”Submitted Researchers Identify Weakness in Microsoft WPBT as a story · 35 points
HN discussionEclypsium | Portland (US), Córdoba (ARGENTINA), Singapore (remote) | ONSITE / HYBRID / REMOTE | Full-time & Contract https://eclypsium.com/company/careers/ We protect devices from chip to cloud—securing firmware, hardware, and the supply chain beneath the OS. Fortune 100s and federal agencies run us in production. - Senior Software Engineer – Portland, OR - Platform Architect – Córdoba, AR - Sr. Software Engineer (D…
Comment linking /company/careers/
on “Ask HN: Who is hiring? (July 2025)”Submitted Vulnerability in Popular PC and Server Firmware as a story · 28 points
HN discussionEclypsium | Portland (US), Córdoba (ARGENTINA) | ONSITE / HYBRID | Full-time & Professional Practice Program (Cordoba) https://eclypsium.com/company/careers/ We protect devices from chip to cloud—securing firmware, hardware, and the supply chain beneath the OS. Fortune 100s and federal agencies run us in production. - Senior Network Device Software Engineer – Córdoba, AR - Senior Software Engineer – Córdoba, AR - Se…
Comment linking /company/careers/
on “Ask HN: Who is hiring? (August 2025)”Submitted Ivanti Pulse Secure VPN is apparently using CentOS 6.4 as a story · 18 points
HN discussion[1] https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ The mighty GNU moos MÄGYCK! Now hurry, put your seven-league boots on :-)
Comment linking /2020/07/29/theres-a-hole-in-the-boot/
on “GRUB2 UEFI SecureBoot Vulnerability: 'BootHole'”Submitted There's a Hole in the Boot as a story · 9 points
HN discussionhttps://eclypsium.com/blog/supply-chain-risk-from-gigabyte-a...
Comment linking /blog/supply-chain-risk-from-gigabyte-app-center-backdoor/
on “Windows 11 Collects an Awful Lot of Telemetry About Your PC”Submitted Building Custom Hackberry Pi as a story · 8 points
HN discussionBlogspam of https://eclypsium.com/2019/09/03/usbanywhere-bmc-vulnerabili... (and submitter does nothing but spam links to secalerts.co)
Comment linking /2019/09/03/usbanywhere-bmc-vulnerability-opens-servers-to-remote-attack/
on “Supermicro server BMCs left exposed to remote attack by any USB device”Submitted Software Bill of Materials Requirements in DoD and Federal Guidance as a story · 5 points
HN discussionList of affected models: https://eclypsium.com/wp-content/uploads/Gigabyte-Affected-M...
Comment linking /wp-content/uploads/Gigabyte-Affected-Models.pdf
on “Millions of PC Motherboards Were Sold with a Firmware Backdoor”Submitted Open Source Tools to Detect CVE-2024-54085 as a story · 4 points
HN discussionFrom the blog post referenced [0]: > Eclypsium automated heuristics detected firmware on Gigabyte systems that drops an executable Windows binary that is executed during the Windows startup process. ...Windows startup process allows for executing "dropped binaries"? Would this be via replacing legit startup binary, or another vector? [0] https://eclypsium.com/blog/supply-chain-risk-from-gigabyte-a...
Comment linking /blog/supply-chain-risk-from-gigabyte-app-center-backdoor/
on “Millions of PC Motherboards Were Sold with a Firmware Backdoor”Submitted OpenBMC Security in Practice: Vulnerabilities, Variants, and AMI MegaRAC OneTree [pdf] as a story · 4 points
HN discussionhttps://eclypsium.com/blog/supply-chain-risk-from-gigabyte-a...
Comment linking /blog/supply-chain-risk-from-gigabyte-app-center-backdoor/
on “Millions of PC Motherboards Were Sold with a Firmware Backdoor”Submitted Widespread Impact from Vulnerability in Popular PC and Server Firmware as a story · 4 points
HN discussionSo apparently Grub inputs are security critical because it's been blessed to be a part of the TCB of secure boot systems. Previously: https://eclypsium.com/2021/04/14/boothole-how-it-started-how...
Comment linking /2021/04/14/boothole-how-it-started-how-its-going/
on “Multiple GRUB2 vulnerabilities – 2022/11/15”Submitted The Missing Security Primer for Bare Metal Cloud Services as a story · 4 points
HN discussionOriginal reporting yesterday: https://news.ycombinator.com/item?id=45584343 https://eclypsium.com/blog/bombshell-the-signed-backdoor-hid... BTW, from all I can tell this should actually be affecting all/most other x86 laptop vendors and nothing really unique to Framework here? This targeted security reporting curiously coincides with a supposedly unrelated recent and ongoing political PR campaign against Framework...
Comment linking /blog/bombshell-the-signed-backdoor-hiding-in-plain-sight-on-framework-devices/
on “Secure Boot bypass risk threatens nearly 200K Linux Framework laptops”Submitted Shimshady: Linux Secure Boot CVE as a story · 3 points
HN discussion"ECLYPSIUM Discovers Multiple Vulnerabilities Affecting 129 Dell Models" https://eclypsium.com/wp-content/uploads/2021/06/Eclypsium-D... "DSA-2021-106: Dell Client Platform Security Update for Multiple Vulnerabilities in the BIOSConnect and HTTPS Boot features as part of the Dell Client BIOS" https://www.dell.com/support/kbdoc/nl-nl/000188682/dsa-2021-...
on “Dell devices vulnerable to targeted man-in-the-middle attacks via BIOSConnect”Submitted Dell devices vulnerable to targeted man-in-the-middle attacks via BIOSConnect as a story · 3 points
HN discussionFull post from eclypsium https://eclypsium.com/2019/01/26/the-missing-security-primer... . Also I assume aws baremetal servers are not vulnerable due to the nitro security card ( https://m.youtube.com/watch?feature=youtu.be&v=e8DVmwj3OEs&t... ).
Comment linking /2019/01/26/the-missing-security-primer-for-bare-metal-cloud-services/
on “Hackers Can Slip Invisible Malware into 'Bare Metal' Cloud Computers”Submitted Multiple Vulnerabilities Affecting 128 Dell Models [pdf] as a story · 3 points
HN discussionTitle is highly misleading. Outright dishonest. Their argument is essentially: If you can remove and repogram a network connected micro-controller (specifically the BMC) you can introduce a backdoor. Which is both obvious, and has absolutely nothing to do with Bloomberg's claims. I'd strongly recommend the mods change both the link and title to the original eclypsium source: "The Missing Security Primer for Bare Met…
Comment linking /2019/01/26/the-missing-security-primer-for-bare-metal-cloud-services/
on “Supermicro Servers Can Be Easily Backdoored After All”Submitted No Patch Coming: The Aristo EOS Tunnel Decapsulation Bug Vuln Scanners Can't See as a story · 2 points
HN discussion
