Quoting swordmaker
Chinese spy chips said to be found in hardware used by APPLE, AMAZON...
Did you notice this all comes from a single source that uses Anonymous citations with no evidence? None at all. . . and FAKED PICTURES of generic electronic parts that are NOT what they claim to be showing?
This new howling about finding a Supermicro altered server is ALSO a bogus claim from a single source that does NOT name the “major telecom company” in which they claim to have found ONE (1) server out of thousands with a supposedly compromised Ethernet connector in it. . . Yet they did NOT find any such thing in the other thousands of Supermicro servers from the same order that were installed. That is NOT proof of anything except a possible defective Ethernet connector. The Bozo who is reporting this is in a huge violation of his Nondisclosure Agreement (NDA) which is why he says he can’t reveal the name of the “major telecom company” where this server was found. . . but he gives every other detail about his employment, such as the brand of server they are using and what the issue he was called in for, and what he claims he found,. . . which is what an NDA would cover! THIS IS BOGUS.
One of the so-called sources in the ORIGINAL Bloomberg article has already called them out for misquoting him and taking his theoretical explanations of how it could be done and mischaracterizing them as how it IS BEING DONE, and attributing it to him, when he actually told them their theory expounded in the original article “Made no sense!”
One other thing I find extremely suspicious is his claim that an unnamed “major telecom company” would bring in a less than two-year old start-up company to “scan their servers” for something amiss. These major telecom businesses have top quality security people WORKING FOR THEM completely capable of doing that, who are, in fact, capable of writing the code to do it and monitor the outgoing traffic! They aren’t going to hire some start-up with a few employees and no real track record to have any access to their servers. Ain’t gonna happen. No way!
Then you find this guy has been feeding Bloomberg ALL of these talking points since before the very first article, Yossi Appleboum. . . and his company, Sepio Systems, is one Bloomberg is hyping! This is what Bloomberg has been roundly criticized before about FAKE NEWS for business the hype the stock of . . . pushing stories that help their pet companies. This company sells software that “mitigates against malicious hardware installed on motherboards or other hardware.”. . and their primary source for ALL OF THIS is the Co-CEO of that company. Yet every other expert is saying this is BOGUS, and is not happening. Get it now????
[Hostile code hidden in chips is inevitable, even if we have not already been compromised.]
There I completely agree. . . that’s why the Bloomberg article claiming the need to put a surreptitious IC on a motherboard is so stupid and does not make sense. . . because it would stand out like a sore RED FLAG THUMB to the people who designed the board, Supermicro who designed it in San Jose, CA, and who check for such things in their Quality Control. It called it “MAKES NO SENSE TO ADD A CHIP TO THE MOTHERBOARD THAT IS EASILY FOUND, WHEN YOU CAN ADDED IT INSIDE THE FIRMWARE SOFTWARE!” or to hide it inside an IC where it can only be found by use of an electron microscope after stripping off the covering parts of a multiple layers of other circuits.
Even the ORIGINAL Bloomberg article stated that Apple did not wind up using the Supermicro boards, cancelling an order of 30,000. . . but Apple said they DID order and use some. AFTER the date they were supposed to have found malicious ICs on motherboards, which both Apple and Amazon state categorically they did not. Only Bloomberg makes this claim from ANONYMOUS sources using bogus evidence, evidently provided by Appleboum and Sepio Systems for their own aggrandizement.
— swordmaker
[unquote]
Duh! I found it in my ping history and copied Swordmaker’s post above.
FRegards ....