News for hackers. Stuff that matters.

A comment on Supermicro Hack: China Exploited a US Tech Supplier over Years [2021 follow-up].

Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by flyingbeanstalk on Friday February 12, 2021 @08:03AM (#26113169)
It's great that we're finally getting an update to Bloomberg's 2018 article. I wish there was a more concrete stance from the US government or other US companies about this story other than flat out denials. The article suggests that affected parties have known about this issue for over a decade now. This is the security breach of the decade and we've heard nothing about it except for Bloomberg's 2018 article.
[ Parent | on HN ]
Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by 4cao on Friday February 12, 2021 @08:41AM (#26113523)
The statement from the NSA as quoted in the article was that:

> NSA cannot confirm that this incident—or the subsequent response actions described—ever occurred.

Maybe I'm reading too much into it but to me this looks as if they were in fact tacitly confirming it (at the very least, it's a steep departure from the standard "no comment" response typically employed in such situations).

[ Parent | on HN ]
Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by smsm42 on Saturday February 13, 2021 @05:50PM (#26127746)
It would be quite horrifying to see that NSA is unable to do such as simple thing as "can't confirm or deny" without side-channeling information. And since I can't see a reason for them to side-channel intentionally - if they wanted to confirm it, they would, there's no advantage in vague semi-confirmation for them that I can see. Thus, I prefer the option of reading too much into it.
[ Parent | on HN ]
Re:Supermicro Hack: China Exploited a US Tech Supplier over ... by ocdtrekkie on Friday February 12, 2021 @11:27AM (#26115352)
I would note that if the NSA only "cannot confirm or deny" events that did occur, people would never believe it. For that response to work, the NSA has to practice not confirming things that did and didn't happen with regularity.
[ Parent | on HN ]