The JetKVM Mini hit the front page of Hacker News this weekend at 451 points and 177 comments, which is the internet’s way of saying “we have notes.” The notes are mostly about price. JetKVM’s own blog post at the top of the thread says the Mini comes in two models — Ethernet at $39, wireless at $42 — with three-packs dropping the per-unit cost to $33 and $36. It measures 42 × 42 × 23 millimeters, which is matchbox-sized if your matchbox is aluminum. An ESP32-P4X handles video capture and H.264 encoding. It ships October 26 through authorized resellers. That is a serious amount of remote-hands capability for the price of lunch for two.
Which is why almost nobody in those 177 comments is talking about the eFuse.
The eFuse Is the Actual Announcement
JetKVM’s post pitches a feature it calls “secure boot, when you want it.” A digest of JetKVM’s public signing key is preinstalled in the chip’s one-time-programmable eFuse. Flip a single setting in the web interface and the Mini is locked — the post’s word is “permanently” — to firmware JetKVM has signed. No third-party builds. No custom images. No going back to the firmware you had on Tuesday.
That is the correct engineering answer to a real problem. This thing is, stripped down, a network-attached keyboard with a power button. An attacker who reflashes it doesn’t own your KVM; they own your rack, your bootloader, and the machine that holds the backups. Any serious operator takes that lock.
But look at what the open-hardware movement has now asked its customers to accept as the price of safety: a vendor root of trust, welded into silicon, irreversible, one click away. The original JetKVM was pitched at $69 on the premise that you own the firmware. A few bruising rounds of price competition later, the flagship security feature is a mechanism for you not owning it — offered sincerely, at your option, with the vendor’s name on it. “Open” has quietly been renegotiated down to “flashable until you decide otherwise.” That isn’t a knock on JetKVM, which is being honest about the tradeoff. It’s a description of where the whole category has landed.
Remote Hands Now Cost Less Than the Cables
Enterprise KVM-over-IP was always priced like capital equipment, and the price did quiet work nobody credited it for: remote hands lived only where physical access was badged, logged, and caged. At $33 a unit — $99 for three on a reseller page — the capability escapes the datacenter entirely. Now it’s the back office of a twelve-person accounting firm, a dental practice’s server closet, one church’s sound booth, and forty thousand home labs whose owners have strong opinions about ZFS and no patch calendar.
Every machine behind those matchboxes just acquired a network-reachable keyboard. Some of them sit on flat networks. The claim isn’t that the sky falls tomorrow; it’s that price was the last rationing mechanism on a capability the security industry had filed under “controlled access.” That was never a doctrine. It was a price tag doing an impression of a doctrine.
“We used to say ‘if you can touch it, you own it’ like it was a rule of thumb,” a support tech at a two-person MSP in central Illinois wrote in an after-hours group chat while waiting on a reboot. “Now touching it is a browser tab, and half my clients think that box is a thermostat.”
The Three Groups Who Have to Update Their Priors
The reflex here is to blame a regulator. Nothing in this story turns on a rulebook, so put it down.
First, the open-hardware faithful who treated “open source” as a synonym for “mine.” The eFuse is the invoice for that conflation. A device that reaches your keyboard over the network has a threat model whether or not you enjoy reading it, and the only countermeasure anyone has shipped is a signing key you don’t hold.
Second, enterprise buyers who spent a decade assuming out-of-band management is inherently scarce and therefore audited. Scarcity was the price. The price is gone.
Third — and this is the uncomfortable one for anyone who cheers when cloud vendors get dinged — the “just run your own iron” crowd. Their opponents’ strongest pitch was never features. It was that your closet is unstaffed and unpatched. A $33 matchbox doesn’t refute that; it industrializes it, and then hands you a one-way switch to make the resulting risk somebody else’s signing problem.
Who Patches a $39 Device in 2029?
The eFuse decision is permanent. The support commitment is not. Firmware for these units comes from a company whose entire product line competes on being the cheapest thing in its category, sold through authorized resellers — and one reseller’s JetKVM page already flags that new EU rules add €3–€4 to European shipping. A surcharge worth ten percent of the product, on a page selling the product. The support horizon of a $39 device is the least-discussed specification in the announcement, and it is the one that decides whether that eFuse was a prudent irreversible bet or a permanent liability with a serial number.
The market just proved it can fit remote hands into a matchbox for the price of three sandwiches. What it hasn’t priced yet is who answers when the keyboard in the closet has nobody watching it and a lock only its maker holds the key to. Cheap is a feature. Forever is a warranty, and nobody’s selling those.