Re:The FBI, CIA and NSA say American citizens shouldn't use ...
by carlmr on Thursday February 15, 2018 @02:50AM
(#16382481)
>they'd have to sneak it in against Apple's will, past all of Apple's American-loyal QA.
Is Apple's QA workforce mostly American or do they have a lot of Chinese H1Bs? I mean loyalty is a fickle thing.
Re:The FBI, CIA and NSA say American citizens shouldn't use ...
by coldtea on Thursday February 15, 2018 @03:22AM
(#16382596)
>What doesn't add up is that, in the real world, you can't protect against every threat model. Its their job to protect the best they can. They can't tell Apple to stop building their phones in China, but they can simply say "Don't buy Huawei".
If the 'threat' was real, that makes as much sense as hardening one door in your house, when you have 4 other doors because "you can't protect against every threat model".
Re:The FBI, CIA and NSA say American citizens shouldn't use ...
by 013a on Thursday February 15, 2018 @10:47AM
(#16384923)
No. It makes as much sense as securing the 4 doors because that's a relatively cost efficient way to implement basic security. But let's avoid strengthening all the walls with a titanium alloy to protect us when the threat brings a bulldozer to get in. That's expensive.
Asking Apple to manufacturer their phones outside of the US is a highly expensive action.
That's easy. And moreover, its a bigger threat. With a Huawei phone, the Chinese government has control over everything from the processor to the userspace software. With a small piece of silicon in a fab, the threat surface is much smaller; they'd have to sneak it in against Apple's will, past all of Apple's American-loyal QA.
In the software world, we tend to think about security as an absolute, because computer logic is absolute. In the real world, security is probabilities. How can you minimize the chance of breach while minimizing costs.