News for hackers. Stuff that matters.

A comment on Super Micro says review found no malicious chips in motherboards. Parent comment

Re:Super Micro says review found no malicious chips in mothe... by krn on Tuesday December 11, 2018 @10:14AM (#18655803)
Even if Bloomberg's story is completely true, Apple / Amazon / Super Micro might have no other choice, but to firmly deny it. Because in that case, it's United States vs. China, not just some publisher vs. a few publicly traded companies. When national security interests and international relationships between two largest economies in the world are at stake, it's not Tim Cook or Jeff Bezos, who get to decide, what can be publicly shared, and what cannot.
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by aljones on Tuesday December 11, 2018 @12:48PM (#18657116)
You're claiming they can be compelled to lie.
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by krn on Tuesday December 11, 2018 @01:07PM (#18657287)
If the story was true, only a few people in each company would have been aware of these vulnerabilities, and they might not have been allowed to talk to anyone about them by FBI. Then, even if others were informed, they would have to pretend, that they were not.
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by scarcely on Tuesday December 11, 2018 @08:38PM (#18660656)
same can be said for "bush did 911" lmao
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by stupidbird on Tuesday December 11, 2018 @03:46PM (#18658687)
If it's a national security risk they might not have needed to be compelled to lie at all, but decided to do so themselves. This would be big enough to damage their entire supply chain if they did publicly verify it as truth.
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by aljones on Tuesday December 11, 2018 @10:02PM (#18661042)
You're claiming they'd commit fraud.
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by stupidbird on Wednesday December 12, 2018 @03:22PM (#18667409)
who would prosecute them for it if it is national security related?
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by lupire on Tuesday December 11, 2018 @07:27PM (#18660313)
Yes.

https://en.wikipedia.org/wiki/National_security_letter#Conte...

[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by lawnchair_larry on Wednesday December 12, 2018 @08:56AM (#18663895)
Doesn't compel anybody to lie.
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by garmaine on Tuesday December 11, 2018 @01:48PM (#18657683)
Welcome to reality. National intrrrdts trump freedoms.
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by foxX on Tuesday December 11, 2018 @10:23AM (#18655870)
> it's not Tim Cook or Jeff Bezos, who get to decide

But who is, John Doe who dies on a grenade?

[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by krn on Tuesday December 11, 2018 @10:32AM (#18655923)
The national security adviser to the president of the United States is the one, who would have to deal with this publicly, if such information was confirmed by some of largest companies in the US. And he might as well prefer to deal with it privately, if it was true.
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by lawnchair_larry on Wednesday December 12, 2018 @08:56AM (#18663892)
Not correct. Instead of denying it, they could either confirm it, or non-denial deny it. They would not knowingly issue specific and categorical denials that are lies.
[ Parent | on HN ]
Re:Super Micro says review found no malicious chips in mothe... by krn on Wednesday December 12, 2018 @04:22PM (#18667880)
In the cases as this, if you don't firmly deny everything, you basically confirm that it's true. And people responsible for issuing categorical denials might have had no awareness of any vulnerabilities, even if they actually existed.
[ Parent | on HN ]