News for hackers. Stuff that matters.

A comment on U.S. telecoms are going to start physically removing Huawei gear. Parent comment

Re:U.S. telecoms are going to start physically removing Huaw... by michaelt on Monday November 01, 2021 @12:02PM (#29068577)
No audit is guaranteed to find a backdoor if one is present.

It simply isn't possible - any more than you could get an audit guaranteeing the Linux kernel is bug-free.

[ Parent | on HN ]
Re:U.S. telecoms are going to start physically removing Huaw... by sofixa on Monday November 01, 2021 @12:20PM (#29068868)
But if nobody has found any backdoors, including with an audit by a security agency, how can OP use "backdoors" as an argument against Huawei?
[ Parent | on HN ]
Re:U.S. telecoms are going to start physically removing Huaw... by cute_boi on Monday November 01, 2021 @12:29PM (#29069017)
In the realm of no experts, everybody is expert.
[ Parent | on HN ]
Re:U.S. telecoms are going to start physically removing Huaw... by w7 on Monday November 01, 2021 @10:54PM (#29076356)
Indeed. As someone somewhat familiar with "underhanded code" contests (not as a participant) and publicly known espionage norms. I'm unsure why people expect backdoors to have massive MOTD banners and not be reintroduced OpenSSL vulns from 2006 that "accidentally" got into the build process for certain releases of firmware 11 years later (this happened with the UK Huawei audit iirc). I'm also unsure why people expect specific examples of known backdoors when that in itself hurts counter espionage efforts.
[ Parent | on HN ]