News for hackers. Stuff that matters.
Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by kenneth on Friday February 12, 2021 @06:24AM (#26112492)
I noticed that it's commonly accepted that Bloomberg's 2018 stories on the Supermicro hack were bogus, costing them a huge amount of reputational damage. However, Bloomberg stood by the stories. I'm very curious to see how this one will be received. I was never quite convinced by the naysayers or the denials by the government, Apple, or Amazon. I think it's quite likely that Bloomberg will be proven right in the end, this story having been accurate but suppressed for "secrecy" reasons all along.

Notably, one of the criticisms at the time was that Bloomberg didn't name credible sources with first-hand accounts of the events — understandably given the sensitivity. This time, it seems they have been able to do so.

Either way, I'm thrilled to see an outlet do original reporting and stand by their work in the face of universal condemnation. We are better off for having strong dissenting views informing us and expanding the narrative. I'm finding myself increasingly distrustful of the work of journalism outlets, but this (and those gone independent on Substack) gives me hope.

Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by notional on Friday February 12, 2021 @10:49AM (#26114921)
Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by notional on Friday February 12, 2021 @11:17AM (#26115223)
Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by smsm42 on Saturday February 13, 2021 @05:36PM (#26127645)
> it's commonly accepted that Bloomberg's 2018 stories on the Supermicro hack were bogus

Somebody owes a little apology here I think - if Bloomberg story confirms, which I now give a very good chance. Especially the "experts" that were so uniformly wrong. Schneier did recognize he was wrong, but only very matter-of-factly. I think there's more work to be done to figure out why so many people got so huge a story so wrong. I do not call for public shamings or anything, God forbid, but there should be some more work on this done than "ok, I was wrong, never mind", if turns out we had so many people get it wrong. There's a lot of trust placed in "experts" - in fact, disagreeing once with "experts" are now the grounds for a permanent ban from many platforms - and if they are getting things so wrong, we're finding ourselves in a very bad situation, information-wise.

Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by minikites on Friday February 12, 2021 @10:31AM (#26114710)
>I was never quite convinced by the naysayers or the denials by the government, Apple, or Amazon.

When you say "naysayers" are you including other organizations who tried and failed to corroborate the original story? It's difficult to prove a negative but the Bloomberg story seems bogus to me because not a single other organization was able to find anything of the sort. If the hacking was this widespread, I tend to think someone else would be able to find something.

Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by DyslexicAtheist on Friday February 12, 2021 @08:55AM (#26113632)
telecom engineer here (not on a Huawei/ZTE payroll). the reason why the original piece is extremely unlikely is the cost of keeping a conspiracy involving this many entities and requiring collaboration between them under wraps. you do not need hardware implants or even sw based backdoors when the system is fragile enough to get the same undocumented functionality without.

it is not needed because the quality of Huawei/ZTE and all the Chinese based tech vendors is so shockingly bad that no such backdoors are needed to achieve their objectives. shitty quality gives much better plausible deniability than a well designed backdoor in thoroughly tested code.

The big and only story IMO is that Huawei steals shit from other companies. I had my own work for control-plane on eNodeB stolen by colleagues in our Chinese site that then moved to Huawei. The company should be sanctioned all around the world and their CFO hopefully will rot in a US prison.

Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by ocdtrekkie on Friday February 12, 2021 @11:29AM (#26115370)
Either these Bloomberg reporters are excellent and stick to principles in the face of condemnation or terrible hacks unwilling to take a loss.

I guess someday we'll know for sure.