Internet-exposed devices that give BIOS-level access? What could possibly go wrong?

Read the full article from Ars Technica for complete coverage and details.