News for hackers. Stuff that matters.
Re:The Clean Network – United States Department of State by kayson on Monday August 10, 2020 @12:52PM (#24111315)
Has anyone published the evidence of Huawei being an "arm of the PRC surveillance state"? I've seen a lot of claims and a lot of out-of-court-settled lawsuits, but nothing really showing that they're using their devices or software infrastructure for surveillance.
Re:The Clean Network – United States Department of State by lettergram on Monday August 10, 2020 @01:04PM (#24111475)
There’s such a long list of this stuff from various companies. It’s not hard to research this at all.

In terms of an anecdotal evidence... My father used to work for molex, one of his biggest complaints were fixing the molds after they were sent to Chinese factories. They would try to deconstruct them and couldn’t put them back together (this was the 90’s, early 2000’s). So they would be shipped back to the US operations to fix.

Eventually, he ended up spending years training up Chinese to replace him (my father, in China). Molex moved much of its tool making shop to China and shut down most US tool and die making operations.

Anyway, China has people who are trained, on factory floors, who are there to reverse engineer processes.

This has been known for decades, companies don’t really seem to care or know (I guess that’s possible as they are outsourcing manufacturing).

I have no doubt this is designed across all their industries and systems. It’s in their interest to do this.

EDIT: I want to point out, there’s no longer a need for China to reverse engineer. US companies ship the designs straight to China. This is probably why we’ve seen China catch up so fast. We trained their workforce and now provide them all the IP before we build it.

Re:The Clean Network – United States Department of State by wyuenho on Monday August 10, 2020 @01:08PM (#24111531)
This has been known for decades, companies knew, and the way they dealt with this was to only give China obsolete tech or tech about to get out of date, so they didn't care. That's no longer the case as China is catching up fast and really threatening the competitive advantage of truly innovative companies all around the world.
Re:The Clean Network – United States Department of State by lettergram on Monday August 10, 2020 @01:27PM (#24111719)
I think part of it is moving most manufacturing to China had companies like Molex move as well (cheaper). Molex builds the molds for items (I’m sure other companies are doing this to). That means the Chinese are reviving the designs BEFORE manufacturing even starts (US or China or India).

My understanding from the tool & die industry is that’s only been happening the last decade or so. IMO that’s the real issue, because it’s decimating the ability to manufacture here and sure design can happen in the US, but if you can’t build the molds for the latest tech here then it doesn’t matter. Those designs are given straight to China, no need to reverse engineer.

Re:The Clean Network – United States Department of State by Fazel94 on Monday August 10, 2020 @06:05PM (#24114570)
Recently, Like in the case of 5G. They are the innovators and others are the catchers. I think labeling every western company as truly innovator and the Chinese ones as copy-cats is the modus operandi in the US but that is clinging to the old stereotypes in fast changing times. They built up massive expertise and are putting it into use to gain more edge on other countries including the US.
Re:The Clean Network – United States Department of State by wyuenho on Tuesday August 11, 2020 @01:32AM (#24117441)
Huawei's contribution to 5G is probably overstated. Looking at the 3GPP rapporteur roster, a lot of work is done by Qualcomm engineers with Chinese names. This is why immigration is so important to the US in order to attract the best talents to contribute to US IP.

https://www.lightreading.com/5g/huaweis-patents-wont-save-it...

Re:The Clean Network – United States Department of State by oasisbob on Monday August 10, 2020 @01:27PM (#24111721)
That Molex story is great. Can only imagine how much magic is in some of those molds... trying to think through many molex connectors in terms of relief angles, tolerances, and manufacturability boggles the mind.
Re:The Clean Network – United States Department of State by a9h74j on Monday August 10, 2020 @07:32PM (#24115465)
> people who are trained, on factory floors, who are there to reverse engineer processes.

I only read this once and don't know if it is true. Supposedly Technology Transfer was/is a distinct engineering specialty in China, up there perhaps with Civil, Electrical.

Coincidentally this was while working with a US manufacturer which somehow could never satisfy a Tech Transfer arrangement completely enough to get the final contracted payment. (Mixed reasons there.)

Frankly I wonder if China will [thus] preserve aspects of industrial civilization while the US works and/or collapses toward a relative dark age. (One case in point: nuclear power generation.)

Re:The Clean Network – United States Department of State by nitrobeast on Monday August 10, 2020 @01:09PM (#24111536)
This seems irrelevant.
Re:The Clean Network – United States Department of State by knolax on Tuesday August 11, 2020 @12:36AM (#24117193)
Classic misdirection tactic.

"what has company X done?"

"company Y did this bad thing"

"all companies in Z do bad thing"

Re:The Clean Network – United States Department of State by fulafel on Tuesday August 11, 2020 @06:52AM (#24119044)
Huh?

GGP: Has anyone published the evidence of Huawei being an "arm of the PRC surveillance state"?

GP: My father used to work for molex, one of his biggest complaints were fixing the molds after they were sent to Chinese factories. They would try to deconstruct them and couldn’t put them back together

Taking apart competitors' products is standard & ethically accepted practice virtually everywhere, there are lots of published anecdotes. Eg the one in Soul of a New Machine, where the team at Data General analyze a VAX. And there's no relevance to the surveillance state.

Re:The Clean Network – United States Department of State by austinl on Monday August 10, 2020 @01:11PM (#24111568)
This section on Wikipedia covers the history of the concerns. I wouldn't say there's a definitive smoking gun that's public knowledge. Instead, there are several instances of vulnerabilities discovered in Huawei systems that may have been taken advantage of (by the PRC or other parties). My guess is that there's more to a few of these stories that only the intelligence community knows about.

One other point of concern from Western governments is that Chinese law compels Huawei to cooperate with Chinese intelligence services, which presents a vulnerability whether that law has been taken advantage of or not. This is much different than say, Apple, which has refused (or it has been simply impossible due to E2E) for them to cooperate.

https://en.wikipedia.org/wiki/Criticism_of_Huawei#Espionage_...

Re:The Clean Network – United States Department of State by jonathanyc on Monday August 10, 2020 @04:20PM (#24113553)
Why has no one actually provided evidence of a single backdoor in the replies? The top reply is currently some anecdote that while interesting does not answer the question at all.

Surely we can be less shitty about answering the OP’s question. As a start, it sounds like at some point there were unsecured Telnet servers in some Huawei devices: https://www.theregister.com/2019/04/30/huawei_enterprise_rou... It’s not entirely satisfying evidence because the Register believes it was legitimately for diagnostics. They also point out that there were comparable “backdoors” in Cisco equipment: https://www.theregister.com/2019/05/02/cisco_vulnerabilities...

If anyone replies with an example of an actual unambiguous Huawei backdoor for which there isn’t a corresponding Cisco “backdoor” I’ll be happy to buy them a coffee. But why are so many of the replies to the parent comment just pure noise?

Re:The Clean Network – United States Department of State by SenoraRaton on Tuesday August 11, 2020 @12:42AM (#24117219)
Because propaganda and nationalism are one hell of a drug.
Re:The Clean Network – United States Department of State by mabbo on Monday August 10, 2020 @04:55PM (#24113886)
I grew up in Ottawa, Nortel HQ, and had lots of friends with parents working at Nortel. That's a town that does not buy a lot of Huawei.

What kept happening, from the perspective of people who worked there that I've talked to, was that Nortel would do heavy R&D investments and then a few months later Huawei would be selling identical hardware with zero R&D budget- for lower cost, naturally. It took Nortel years to finally figure out their network was highly compromised, likely by the PLA[0]. The PLA would steal industrial secrets and hand them to companies owned or controlled by the Chinese government, like Huawei.

One fellow I met at a wedding party once told me how he had actually read Huawei source code that included Nortel copyright notices. It was a joke by the end. Everyone knew.

As for as being an arm of the PRC, Huawei claims they're owned by their employees Trade Union. But Trade Unions in China, by law, are highly controlled and managed by the party. You can't have a trade union that isn't highly associated with the Communist Party. Huawei counter these arguments by saying it's very complex- but provide no evidence to the contrary.[1]

[0]https://en.wikipedia.org/wiki/Criticism_of_Huawei#Nortel

[1]https://en.wikipedia.org/wiki/Criticism_of_Huawei#Opaque_own...

Re:The Clean Network – United States Department of State by codekansas on Monday August 10, 2020 @06:12PM (#24114645)
Bloomberg did a writeup of this a few weeks ago: https://www.bloomberg.com/news/features/2020-07-01/did-china...
Re:The Clean Network – United States Department of State by wyuenho on Monday August 10, 2020 @01:00PM (#24111420)
The connection is made from:

1. The Chinese National Intelligence Law requiring every citizen to "intelligence work".

2. Huawei had the potential to reach mass adoption outside of China.

3. Huawei is a company deeply connected to the PLA.

4. Therefore Huawei, not only is its HQ required to spy for China, but that it is very likely to work with the PLA to spy for China.

[1]. https://en.wikipedia.org/wiki/National_Intelligence_Law

[2]. https://www.cnbc.com/2019/07/08/huawei-staff-and-chinese-mil...

Re:The Clean Network – United States Department of State by _lsq on Monday August 10, 2020 @01:48PM (#24111946)
These are all valid reasons for concerns yet these do not qualify as proof of wrongdoing from Huawai. For 2) specifically, I'm not sure it would be helpful to declare all private companies started by veterans as "sharing deep ties to $Country's military operations".

There's no shortage of "guesses" and "plausible connections" around but the parent comment is specifically asking for actual proof in this instance.

Re:The Clean Network – United States Department of State by wyuenho on Monday August 10, 2020 @10:13PM (#24116542)
People suspected the NSA were snooping and introducing backdoors and proactively places countermeasures against that. Why should the standard be different when it comes to China?
Re:The Clean Network – United States Department of State by _lsq on Tuesday August 11, 2020 @11:48AM (#24121632)
The standard shouldn't be any different and that's precisely the problem here:

* NSA is a governmental agency that by construction is tied to the state. Bytedance, Huawai and Tencent are privately owned companies in China and all "ties" to the Chinese governments are unsubstantiated. Blanket ban on private companies because of their country of origin and unsubstantiated suspicions results in clear discrimination and suppression of open competition in my mind.

* For my understanding, could you help by providing context on what specific counter-measures have been taken against NSA's intelligence effort based on people's suspicion?

Re:The Clean Network – United States Department of State by wyuenho on Tuesday August 11, 2020 @04:16PM (#24125452)
People have been warning about BSafe and Dual_EC_DRBG for years before Snowden came along. Privacy advocates and security professionals had been placing out a blanket warning of "government" snooping for decades before Snowden. Richard Stallman, the guy who wrote most of the Gnu utils back in the days, had been signing his emails with M-x spook, which had been in Emacs since 1988. The Internet started out anti-spook way back in the days.
Re:The Clean Network – United States Department of State by mindslight on Monday August 10, 2020 @01:23PM (#24111690)
Corporations are inherently organs of government, being incorporated under a specific jurisdiction and receiving liability limitations in return. At the very least, Huawei is an arm of the PRC surveillance state in the same way that Google is an arm of the USG surveillance state.

The problem is not that the claim is false, but rather the one-sided focus on it that justifies the USG surveillance state continuing to turn on its own people. If this were just some defense contractor pork for internal USG networks nobody would really care, but it sounds like they intend to fork most common Internet features while dictating how they operate.

Re:The Clean Network – United States Department of State by colechristensen on Monday August 10, 2020 @01:11PM (#24111558)
The impression put out there by many people is that in China, the state, the military, and the corporations should be thought about as part of the same whole, not separate interests.
Re:The Clean Network – United States Department of State by hammock on Monday August 10, 2020 @12:58PM (#24111396)
Re:The Clean Network – United States Department of State by xster on Monday August 10, 2020 @01:06PM (#24111509)
Is it referencing something specific? It's an editorial referencing other editorials. Is there something direct like PRISM type wikileaks?

Considering the NSA hacked and had backdoors in Huawei servers for almost a decade, I imagine direct evidence shouldn't be difficult to produce.

https://mashable.com/2014/03/22/nsa-huawei/

Re:The Clean Network – United States Department of State by hammock on Monday August 10, 2020 @01:27PM (#24111717)
The NSA barely acknowledges its own existence. It's not exactly known for publishing direct intelligence for public consumption.. The Mashable report you link was only possible because of the most notorious leak in the history of the world (Edward Snowden), who is currently a fugitive of the US government.

Have you tried searching in wikileaks though?

Re:The Clean Network – United States Department of State by stx on Monday August 10, 2020 @07:16PM (#24115299)
There is the story about a man who invented a way to coat glass with diamonds. He was negotiating to sell his invention to Huawei when they shipped one of his samples to China even though he instructed them not to because it was export controlled technology. The reason it is export controlled is that such an invention has applications in military laser weapons. I am summarizing from memory but you can read this article to learn more.

https://www.bloomberg.com/news/features/2019-02-04/huawei-st...

Re:The Clean Network – United States Department of State by Spooky23 on Monday August 10, 2020 @01:50PM (#24111978)
Back in 1982, the CIA is alleged to have modified some computers that ultimately blew up a gas pipeline.

Spies to spy things. It's safe to assume that everyone with the power to do so is exploiting any advantage that they have.

Re:The Clean Network – United States Department of State by YarickR2 on Monday August 10, 2020 @07:30PM (#24115442)
CIA-staged gas pipeline explosion is an urban myth. I guess the same can be said about a lot of other casually known spy stories cited in this very discussion
Re:The Clean Network – United States Department of State by thesuitonym on Monday August 10, 2020 @05:19PM (#24114107)
Not only is it safe to assume such, it's unsafe to assume they aren't.
Re:The Clean Network – United States Department of State by ww520 on Monday August 10, 2020 @05:15PM (#24114069)
China’s National Intelligence Law from 2017 requires companies, organizations and citizens to “support, assist and cooperate with the state intelligence work.”

Yes, Huawei is an arm of the PRC surveillance state.

Re:The Clean Network – United States Department of State by waihtis on Monday August 10, 2020 @01:04PM (#24111481)
It doesn't matter whether there's good evidence or not. The risk potential is there and that is what most of this is based on.
Re:The Clean Network – United States Department of State by throwaway432334 on Monday August 10, 2020 @01:12PM (#24111573)
There's not a meaningful distinction between the party and companies.
Re:The Clean Network – United States Department of State by bassman9000 on Monday August 10, 2020 @01:04PM (#24111477)
https://www.politico.eu/article/huawei-germany-court-case-pr...

Of specific concern is a 2017 intelligence law that obliges companies to "support, assist and cooperate with state intelligence services in accordance with the law, and maintain secret all knowledge on the national intelligence services." Another is China's cybersecurity law, which contains similar requirements.

https://www.bloomberg.com/news/articles/2019-04-30/vodafone-...

Vodafone asked Huawei to remove backdoors in home internet routers in 2011 and received assurances from the supplier that the issues were fixed, but further testing revealed that the security vulnerabilities remained, the documents show. Vodafone also identified backdoors in parts of its fixed-access network known as optical service nodes, which are responsible for transporting internet traffic over optical fibers, and other parts called broadband network gateways, which handle subscriber authentication and access to the internet, the people said. The people asked not to be identified because the matter was confidential.

Re:The Clean Network – United States Department of State by luckylion on Monday August 10, 2020 @02:23PM (#24112361)
RE the Bloomberg article, be aware that Vodafone rejected Bloomberg's reporting [1]: "The 'backdoor' that Bloomberg refers to is Telnet, which is a protocol that is commonly used by many vendors in the industry for performing diagnostic functions. It would not have been accessible from the internet.

"Bloomberg is incorrect in saying that this 'could have given Huawei unauthorised access to the carrier's fixed-line network in Italy'.

"In addition, we have no evidence of any unauthorised access. This was nothing more than a failure to remove a diagnostic function after development.

"The issues were identified by independent security testing, initiated by Vodafone as part of our routine security measures, and fixed at the time by Huawei."

That's a nice way of saying that Bloomberg made up most of the article.

[1] https://www.bbc.com/news/business-48103430

Re:The Clean Network – United States Department of State by bassman9000 on Monday August 10, 2020 @07:03PM (#24115157)
And the Politico one about the German intelligence findings?

Or the fact that Huawei is a de-facto public company, with massive subsidies by the CDB?

https://www.rfi.fr/en/contenu/20190530-huawei-key-beneficiar...

Huawei inked a $10 billion credit line with the China Development Bank (CDB) in 2004 to provide low-cost financing to customers buying its telecom gear. It was tripled to $30 billion in 2009.

https://www.wsj.com/articles/state-support-helped-fuel-huawe...

And it's funny, because they admit this is normal

https://www.scmp.com/tech/big-tech/article/3043558/huawei-sa...

“Like other tech companies that operate in China, including those from abroad, Huawei receives some policy support from the Chinese government,” Karl Song, vice-president of the company’s corporate communications department, said in a statement. “But we have never received any additional or special treatment.”

There's no large corporation in China that got there without financial backing, and board control, from the CCP.

Thus, all major Chinese corporations are a extension of the CCP.

Re:The Clean Network – United States Department of State by luckylion on Tuesday August 11, 2020 @01:48AM (#24117510)
I don't know why you tell me that, I'm not arguing anything, I'm just pointing out that Bloomberg is a bad source because they are making false claims and do not correct them.

> Thus, all major Chinese corporations are a extension of the CCP.

I believe that to be true. I also believe that to be true for all corporations in all nations. They're independent from the state until it matters.

Re:The Clean Network – United States Department of State by bassman9000 on Thursday August 13, 2020 @12:23AM (#24139916)
See, that's a false equivalence, as the degree of entanglement between state and corporation matters, as well as how much workers would defy corporate policy aligning the company with the state, for e.g. ethical reasons.

I don't buy the cynical well, they're all the same. ByteDance employees attend CCP-indoctrination meetings in the regular. Is that the case for any US corporation? How many of them are lead by former former military, like Huawei?

So, no.