#nanokvm — Public Fediverse posts

NanoKVM — удалённый доступ + мониторинг с помощью Tuna

NanoKVM — это компактное IP-KVM устройство от Sipeed, позволяет удалённо управлять компьютером: видеть экран, управлять клавиатурой и мышью, монтировать образы дисков — всё через веб-интерфейс в браузере. По умолчанию NanoKVM доступен только в локальной сети. В этой статье я расскажу как с помощью

https://habr.com/ru/companies/tuna/articles/994364/

#tuna #kvm #ip_kvm #nanokvm #tunnels #ngrok #tailscale

Suprise ! Un micro caché dans un petit KVM chinois à 30 balles

https://fed.brid.gy/r/https://korben.info/nanokvm-micro-cache-failles-securite-sipeed.html

https://blog.gslin.org/archives/2025/12/10/12777/%e4%b8%ad%e5%9c%8b%e7%9a%84-nanokvm-%e5%85%a7%e8%97%8f%e9%ba%a5%e5%85%8b%e9%a2%a8%e4%bb%a5%e5%8f%8a%e7%9b%a3%e8%81%bd%e8%bb%9f%e9%ab%94/

中國的 NanoKVM 內藏麥克風以及監聽軟體

#aircrack #amixer #arecord #backdoor #china #ip #kvm #linux #mic #micphone #nanokvm #network #security #ssh #tcpdump #wifi

@gcvsa #JeffGeerling has a nice take on the #Sipeed #nanoKVM controversy:
https://www.youtube.com/watch?v=RSUqyyAs5TE
Basically, they adapted a dev board to a KVM, and it's cheaper to keep the board intact than make a custom one, so hence the microphone comes along. In their PCIe KVM, which is a custom design, there is no microphone

He also mentioned custom #opensource firmware might be available, something to look into..... also put these things on a VLAN!

A Slovenian #security researcher has published an analysis of #Sipeed’s #NanoKVM that raises far-reaching concerns about the €30-€60 ($35-70) remote management device. Alarmingly, the researcher’s teardown shows the device ships with a catalogue of security failures and an undocumented microphone that can be activated over SSH and the device communicates with #China-based servers.
https://www.tomshardware.com/tech-industry/cyber-security/researcher-finds-undocumented-microphone-and-major-security-flaws-in-sipeed-nanokvm #ITSec

"Researcher finds Chinese #KVM has undocumented microphone, communicates with China-based servers — #Sipeed's #nanoKVM switch has other severe #security flaws and allows #audio recording, claims researcher"

https://www.tomshardware.com/tech-industry/cyber-security/researcher-finds-undocumented-microphone-and-major-security-flaws-in-sipeed-nanokvm

To illustrate why do I keep it away from the Internet, here’s the screenshot. No idea what is it trying to do, but I don’t even want to check… I knew it might be sketchy from the start and my intention was always to run it like that…🤣

At least it doesn’t malfunction like #LG TV…😅

#NanoKVM #Sipeed #NanoKVM

Managed to finally update my #NanoKVM to the latest version. For the second time I had serious issues with the process.

First time, I had to download a script from the developer to update it via cmd line.

Today I had to download a zip with the latest application version, unzip it and run an update script from there.

I keep my #Sipeed #NanoKVM cut off the internet. I allow it when I disconnect the machine I’m using it with from it and only to do the update. Maybe I should do so more often…

If you have weird requirements for networking and controlling a machine remotely without installing anything on it, #NanoKVM is pretty fucking cool. Got mine recently and while the interface is not as nice as something like #Remmina (for example it can't capture all keyboard input in Firefox, and the video codec is not optimized for this purpose) it fits my weird little niche very well.
I was originally going to buy a #TinyPilot or a #PiKVM, but this was much cheaper, plus it draws way less power, since it's not a full #RaspberryPi. (Also I did not want to give more money to the Raspberry Pi Foundation.)
We'll see how it holds up in a few months, but so far it's been more reliable than the alternatives I've tried. (But again, I have a very weird networking setup that I can't really discuss.)