News for hackers. Stuff that matters.

A comment on New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom. Parent comment

Re:New Evidence of Hacked Supermicro Hardware Found in U.S. ... by mabbo on Tuesday October 09, 2018 @01:17PM (#18177822)
> the organizations that are denying it have no knowledge that it occurred

Are you saying that Steve Schmidt, the AWS chief infosec officer didn't know about the hack? Or that his article [0] was published to purposely hide it?

If only one person in Amazon knew about it, it would be Schmidt. And if Schmidt knew, I don't think he'd write an article so strongly claiming Amazon doesn't know anything about it. The only thing in my mind that lends credence to Schmidt covering it up purposely is that $10B contract the Pentagon is putting out- perhaps they've told him to play ball as part of getting the contract. But even then it seems a stretch.

[0]https://aws.amazon.com/blogs/security/setting-the-record-str...

[ Parent | on HN ]
Re:New Evidence of Hacked Supermicro Hardware Found in U.S. ... by snowwrestler on Tuesday October 09, 2018 @05:49PM (#18180098)
CISO is not the most likely point of crossover, the most likely point is the general counsel's office. Companies don't talk to the Feds without a lawyer, and they also don't issue high profile statements without a lawyer. And unlike the CISO, conversations with your lawyer are privileged.
[ Parent | on HN ]
Re:New Evidence of Hacked Supermicro Hardware Found in U.S. ... by eganist on Tuesday October 09, 2018 @01:26PM (#18177944)
It's very possible Steve wouldn't know, both owing to past precedent (see SmokeyJ's comment on Alex Stamos) and owing to whether or not he's cleared.
[ Parent | on HN ]
Re:New Evidence of Hacked Supermicro Hardware Found in U.S. ... by lostapathy on Tuesday October 09, 2018 @04:45PM (#18179683)
He about has to be cleared if he's the security chief over govcloud.
[ Parent | on HN ]
Re:New Evidence of Hacked Supermicro Hardware Found in U.S. ... by eganist on Tuesday October 09, 2018 @06:30PM (#18180385)
Whoever directly oversees it and acts as the stakeholder for GovCloud should be, sure, but there's no reason for the person above the direct overseer to be cleared. Otherwise by that logic Bezos should be cleared as well.
[ Parent | on HN ]
Re:New Evidence of Hacked Supermicro Hardware Found in U.S. ... by stevehawk on Tuesday October 09, 2018 @08:46PM (#18181056)
I may be mistaken but I'm fairly confident govcloud is an unclassified network.
[ Parent | on HN ]
Re:New Evidence of Hacked Supermicro Hardware Found in U.S. ... by eganist on Tuesday October 09, 2018 @08:54PM (#18181093)
At least publicly, they're acknowledged to go up to Secret right now. https://aws.amazon.com/blogs/publicsector/announcing-the-new...
[ Parent | on HN ]
Re:New Evidence of Hacked Supermicro Hardware Found in U.S. ... by smokeyj on Tuesday October 09, 2018 @01:22PM (#18177893)
https://en.wikipedia.org/wiki/Alex_Stamos#Yahoo!
[ Parent | on HN ]