A recent series of vulnerability announcements has made headlines by drawing attention to serious security issues in remote management hardware shipped with many brands of servers. Thereís plenty of food for thought here: What is the problem? How bad is it? What do we do about it? Unfortunately, the security world thrives on anxiety. Security researchers, naturally, want to play up the severity of their findings, and security sales organizations want to use fear of newly-discovered vulnerabilities as a tool to move products.