News for hackers. Stuff that matters.

A comment on NSA Said to Have Used Heartbleed Bug for at Least Two Years (2014). Parent comment

Re:NSA Said to Have Used Heartbleed Bug for at Least Two Yea... by pfranz on Friday September 20, 2019 @06:58PM (#21032150)
Like others have said, the pushback came from saying it was happening, not that it was plausible. As well as refusing to pull the story or clarify the details.

I also swear I had read articles months/years before that companies like Apple literally photographed motherboards before shipping and compared them after arriving to look out for hardware tampering in transit. That, to me, shows they are not only aware of issues like that, but taking meaningful steps to detect it.

Edit: Here's an article from 2016 about it https://www.businessinsider.com/apple-worried-about-spy-tech...

[ Parent | on HN ]
Re:NSA Said to Have Used Heartbleed Bug for at Least Two Yea... by monocasa on Friday September 20, 2019 @07:07PM (#21032204)
The hack supposedly happened in 2015. Apple being super concerned about server motherboard supply chain management in 2016 for unspecified reasons lines up with the timeline very well.
[ Parent | on HN ]
Re:NSA Said to Have Used Heartbleed Bug for at Least Two Yea... by Spooky23 on Saturday September 21, 2019 @12:52AM (#21033577)
Federal buyers use companies like Harris Corp to sample and analyze devices and components for tampering or counterfeiting. Even then, bad stuff gets through.

Apple cares about supply chain integrity, but it’s not enough to stop this kind of threat.

[ Parent | on HN ]