Mini Heart Attack: Supermicro BMC Hacked (or not?)

Mini Heart Attack: Supermicro BMC Hacked (or not?)

The Incident

I was recently doing some remote server maintenance when I came across something online that prompted me to check on the baseboard management controller (BMC) via the IPMI/remote management interface. For those unfamiliar, it is a remote management interface that can be used to monitor and control low-level functionality on the server, providing capabilities like remotely rebooting the machine or accessing the BIOS.

As I already had a VPN connection and root SSH session open on the server, I quickly ran the following just to confirm if the BMC interface was still available (I had made some network changes recently):

Goodbye WordPress, Hello Hugo!

Goodbye WordPress, Hello Hugo!

After a roughly four-year gap in posting new content (or spending any time working on this site generally), I’ve decided to change web frameworks and migrate this site from WordPress (on a self-hosted LEMP stack) to Hugo, an open-source static site generator. The new site is still a self-hosted setup, but does not require PHP or MySQL. It is a wonderfully static website, and the performance should reflect that.

I had been wanting to move away from WordPress for some time. There were a few reasons for doing so, and I’m not going to get into too many details here, but I think they will feel familiar to many who have dabbled in hosting their own websites.

The Road to P.Eng. in Ontario

The Road to P.Eng. in Ontario

Over the course of the last 12 months, I’ve been working on attaining my P.Eng. designation with Professional Engineers of Ontario (PEO). As of October 2018, I’ve obtained the designation and wanted to make a post covering the process.

The Process

The first step was to mail in an application. I printed and filled out the documents and mailed them to PEO, then received confirmation of my application as well as a file number about a week later. Two weeks after that, I received instructions to submit a university transcript to PEO and register for the Professional Practice Exam (PPE). The PPE is only offered a few times a year, so I ended up writing it a couple months after registering for it.

Flying the Piper Arrow II

Flying the Piper Arrow II

In March 2017, I moved to Toronto and with the change, left my airplane partnership in Vancouver. This meant I had to find another way to fly. I ended up choosing Durham Flight Centre for their convenience (located at Oshawa airport, CYOO) and the fact that they have quite a nice Arrow II available for rental. It’s a 1973 model with a GNS-430W IFR GPS, STEC-30 autopilot, digital HSI, three-blade prop and nice interior/exterior. I’ve been flying it for a couple months now and have accumulated a few main transition points.

The HARPEL Check

The HARPEL Check

Contrary to what most non-pilots think, a lot of flying is actually very mundane and uneventful. There is a saying among pilots that flying is 99% boredom punctuated by 1% moments of sheer terror, indicating that routine flying can quickly become exciting - but not in a good way. Something that’s always helped me stay on top of the airplane - maintaining good situational awareness and preparedness should an emergency occur - is the HARPEL check.

Lillooet, BC (CYLI)

Lillooet, BC (CYLI)

Yesterday, a buddy and I made it up to Lillooet (CYLI), which has an airport I intended to visit last summer but had to cancel multiple attempts due to thunderstorms. Yesterday being a crisp, clear January day made it a prime opportunity to see the airport.

We flew the leg to Lillooet via Hope and Lytton at 7500’, getting into YVR terminal airspace around Cloverdale. With the exception of some turbulence near Lytton, where several valleys converged, the flight was super smooth.

Low Pass Over Runway 26L at YVR

Low Pass Over Runway 26L at YVR

I did another low pass over YVR, this time over runway 26L with a friend who’s camera is significantly better than the Sony action camera I normally use.

Featured on Aviation News Journal Magazine

Featured on Aviation News Journal Magazine

It was my great honour this September to be featured on the cover of Aviation News Journal Magazine. Accompanying the front page photo is a short bio of yours truly to accompany the cover photo, mostly describing how I got into aviation and hope to inspire others to do the same.

Toronto Trip – July 2016

Toronto Trip – July 2016

What does one do when on vacation in Toronto during a sunny July? Go flying of course!

I chose to fly out of Toronto City Airport (CYTZ) for a touch and go at Oshawa (CYOO) before returning for a few orbits around downtown. The weather was fantastic (albeit a bit hazy), and the air was very smooth once above a few hundred feet. We (instructor and I, I didn’t want to have to do a checkride just for a scenic flight) flew to and from Oshawa along the shoreline and passed over the Pickering Nuclear Generating Station. The flight was in a 1997 Cessna 172R - much nicer than the significantly older 172 models I’m used to flying.

Flight Planning

Flight Planning

Preparing for a flight is something every pilot does in his or her own particular way. We’re taught the basics in PPL ground school and demonstrate a prescribed method for the checkride, but it takes hours (and years even) of experience beyond the basic training for each pilot to enhance and refine their own methods.

With the many technologies available today, we no longer have to rely on measuring angles and distances on paper charts to plot routes. And with several useful tools available online and for free in most cases, we can plan routes and check weather faster and with better big-picture understanding than ever. My personal favourite is still the ForeFlight iPad app, which I find excellent for both flight planning and in-flight situational awareness. They now also have an online version of their tool that is very handy for planning routes from a computer and having it automatically synced to the app. For those without a ForeFlight subscription, SkyVector is an excellent free alternative that has complete coverage in the US and some basic maps for Canada. It will now even produce a nav log that you can print out and fill in along the flight. For visualizing both forecast and real-time weather, my current favourite tool is Windyty, which also has good Android and Apple apps. Of course, the standard Nav Canada weather website should be the primary source of weather information in Canada.