News for hackers. Stuff that matters.
Re:AWS CEO Jassy follows Apple in calling for retraction of ... by paxys on Monday October 22, 2018 @05:05PM (#18278507)
You just need ONE board to be able to prove it. Surely Bloomberg or their sources can get their hand on a single piece?
Re:AWS CEO Jassy follows Apple in calling for retraction of ... by michaelmrose on Monday October 22, 2018 @06:25PM (#18279109)
So if a newspaper wanted evidence that your company fucked up you would go and dismantle company property to discredit your employer knowing that it's likely to damage them and ruin you.
Re:AWS CEO Jassy follows Apple in calling for retraction of ... by ardy42 on Tuesday October 23, 2018 @02:09AM (#18281072)
> So if a newspaper wanted evidence that your company fucked up you would go and dismantle company property to discredit your employer knowing that it's likely to damage them and ruin you.

The informant may have perfectly accurate information but be completely unable to provide physical evidence. For instance: they could have been briefed on the matter, but still have no physical access to the datacenter or to the location where the compromised servers were taken to.

A lot of the demands for physical proof make the false assumption that someone who knew about the spy chips and talked to Bloomberg would have had physical access to an example. That's simply not the case. How many of us work as software engineers in Fortune 500 companies, and how many of us could walk into one of our employer's datacenters and take a photo of the motherboard of a particular machine that we frequently work with? Not many, I'd imagine.

Re:AWS CEO Jassy follows Apple in calling for retraction of ... by jackconnor on Monday October 22, 2018 @07:40PM (#18279569)
Well, if you're Apple/Amazon you have the SEC and your shareholders ready to ruin your life if you say anything that could even be interpreted as a lie. So, in this hypothetical you may not want to, but you will definitely feel forced to.
Re:AWS CEO Jassy follows Apple in calling for retraction of ... by bsder on Monday October 22, 2018 @11:45PM (#18280583)
You can also have the government out to ruin your life if you don't cooperate.

See: Joseph Nacchio and Qwest

Re:AWS CEO Jassy follows Apple in calling for retraction of ... by ardy42 on Tuesday October 23, 2018 @01:07AM (#18280854)
> You can also have the government out to ruin your life if you don't cooperate.

What if it's the Chinese government that's putting pressure on Apple and Amazon? What would Tim Cook do if he was told on no uncertain terms that Apple would be kicked out of China and its iPhone production lines shuttered if it confirmed this story? Even if the chance they'd go through with their threats is small, it's an enormous risk to Apple and taking it would be hard to justify to its shareholders. FAANG companies are clamoring for access to the Chinese market, and that gives the Chinese government a lot of leverage.

Re:AWS CEO Jassy follows Apple in calling for retraction of ... by jackvalentine on Tuesday October 23, 2018 @01:28AM (#18280921)
A possibility straight out of a thriller novel - and definitely exciting!

I don't think it likely though because such a nuclear option from the CN government would have the effect of basically destroying their position in the global supply chain.

Re:AWS CEO Jassy follows Apple in calling for retraction of ... by simias on Tuesday October 23, 2018 @08:26AM (#18282738)
I can't believe that the government would blackmail Tim Cook into writing such a strongly worded rebuttal and then, weeks later when the story is not making the front pages anymore, have him write a call for retraction which brings this story back in the news cycle. That makes zero practical sense. That's the problem with many conspiracy theories: they make it seem like the people pulling the strings are incredibly clever and powerful while at the same time completely clueless and coming up with extremely complex plans to achieve mundane goals.

I could believe it if the denials so far felt incomplete or ambiguously worded as if they were tiptoeing around something that they were not allowed to disclose. I could believe it if all we had coming from Apple and Amazon was the usual lawyer-speak "I won't confirm of deny" bullshit. Instead we've had completely unambiguous "this is completely false and never happened". If it turns out to be a lie it's going to be devastating for the trust in Apple or Amazon.

I mean think about it, if for some reason the US or Chinese agencies wanted to downplay or shift the blame they had so many easier ways to do it that would put them in an awkward position if somebody manages to prove the existence of these backdoored mobos. If the best spin they could come up with was "just deny everything and make sure to do so at a regular interval so people are constantly aware of our denial" they really need better PR people.

Re:AWS CEO Jassy follows Apple in calling for retraction of ... by bsder on Wednesday October 24, 2018 @02:28AM (#18290147)
> I could believe it if the denials so far felt incomplete or ambiguously worded as if they were tiptoeing around something that they were not allowed to disclose. I could believe it if all we had coming from Apple and Amazon was the usual lawyer-speak "I won't confirm of deny" bullshit. Instead we've had completely unambiguous "this is completely false and never happened".

Well, at this point everybody is watching for weasel words, so a categorical denial is the only thing the government can demand that wouldn't provoke suspicion.

> If it turns out to be a lie it's going to be devastating for the trust in Apple or Amazon.

Oh, please. Companies have had millions of credit card numbers stolen, and nothing happens.

Apple and Amazon would get a bit of bad press. The tech folks wouldn't trust them any less than they already do. And it would blow over in a couple weeks at worst.

At this point, my Bayesian priors are lowering on Bloomberg, but they are not necessarily going up on Amazon or Apple.

Re:AWS CEO Jassy follows Apple in calling for retraction of ... by fjsolwmv on Monday October 22, 2018 @08:01PM (#18279690)
If you want to blow a whistle, yes. If not dismantle, at least photograph the object. If your employer retaliates, you can make good money in speaker fees retelling the story, or get a job at a company that wants to be known for good hardware security.
Re:AWS CEO Jassy follows Apple in calling for retraction of ... by rbanffy on Tuesday October 23, 2018 @05:43AM (#18282023)
Getting a job is not necessarily a reason to jeopardize a whole career in the intelligence community. People in public service sometimes have feelings about serving their country.
Re:AWS CEO Jassy follows Apple in calling for retraction of ... by dis-sys on Tuesday October 23, 2018 @01:02AM (#18280829)
> would go and dismantle company property

since when taking a photo of the claimed motherboard with a foreign spy chip on it is considered as "dismantle" company property?

> discredit your employer knowing that it's likely to damage them and ruin you

I thought those huge number AAPL and AMZN investors deserve some truth.

Re:AWS CEO Jassy follows Apple in calling for retraction of ... by monocasa on Monday October 22, 2018 @10:37PM (#18280336)
They were internally designed boards that Super Micro simply manufactured. Why would Bloomberg be able to put their hands on a custom board like that?
Re:AWS CEO Jassy follows Apple in calling for retraction of ... by sonnyblarney on Monday October 22, 2018 @05:10PM (#18278557)
The story is weird, and yes, they should be able to produce a board, surely. They maybe got caught with their pants down.

But it doesn't matter - this is happening 100% guaranteed.

'We' do it and China has become far more aggressive in these areas these days ... so if they could be doing it, they would be.

Someone should come up with a bit of proof though.

Re:AWS CEO Jassy follows Apple in calling for retraction of ... by Barrin92 on Monday October 22, 2018 @05:14PM (#18278589)
evidence is usually required for statements like

" this is happening 100% guaranteed."

I don't know what brave new world we have entered where journalists, or even online users for that matter, make confident claims about things for which there is no physical evidence.

Re:AWS CEO Jassy follows Apple in calling for retraction of ... by sonnyblarney on Monday October 22, 2018 @06:04PM (#18278961)
A very close friend of mine led customer support for a large American IT company in the middle east where US federal agents were posed as support staff.

I worked at a large high-tech firm with business in the middle east, including content-filtering solutions and we were basically 'required' to work with Western governmental entities of a 'security nature'.

The US has massive clandestine projects in this regard and some of them are not so secret - consider the recent Wikileaks: [1]

"The US intelligence agency has been involved in a concerted effort to write various kinds of malware to spy on just about every piece of electronic equipment that people use. That includes iPhones, Androids and computers running Windows, macOS and Linux."

[1] https://www.independent.co.uk/life-style/gadgets-and-tech/ne...

All countries with active spy/clandestine agencies are spying on one another using malware, spyware, hardware hacking, phishing, social engineering, whatever. And many firms are complicit to one degree or another.

That Apple or AWS etc. may have been compromised with a specific attack makes for a really weird story - but that this is happening in general is a non-story - of course it is. It's not about this specific attack really.

Re:AWS CEO Jassy follows Apple in calling for retraction of ... by unparagoned on Monday October 22, 2018 @07:31PM (#18279520)
I promise you that my dad works at microsoft and he has a chip I add to my ps4 to make it play Xbox games, you can't see it because it's too small becaise he also secretly works for the new. He taught me how to program the chips and I can do anything with them.