GSM->5G modems are a lot harder to debug... maybe now in recent years with cheaper SDRs, but a lot harder then wifi.

And not sure why you'd be afraid of CCP, we saw the wikileaks, USA does a lot of similiarly bad stuff too and even got caught doing it... and if you live in a "western" country, USA has much easier access to you than China.

I find little solace in this whataboutism.

Again, it's a trendy buzzword to use but it literally isn't a catch all shield to argue that it's fine when we do it. When there's no proof of something happening, maybe we should focus on the thing that we know is happening instead of chasing literal ghosts

2) Your burden of proof might be different from mine, but one needs to be pretty naive to think that the CCP doesn't surveil western citizens. I doubt their intelligence apparatus is that bad at their job. In fact, I have plenty of reason to believe it's pretty great at it.

[0] https://www.csis.org/analysis/how-chinese-communist-party-us...

[1] https://foreignpolicy.com/2023/04/27/china-ccp-spying-us-pol...

In my opinion US is only at fault for spying on it's own citizens(im not citizen nor resident of the us), and in doing so it undermined its counter intelegence actions against state adversaries. Next time there is a good guy in the white house, All intelligence apparatus should be dismantled and replaced with something more transparent for the people, even though the reality where most of the world is despotic by design and there for hostile to a supposed to be free nation is still there.

So, you don't mind being spied on by someone who was already caught spying on their own citizens, (assuming that you're from USA), has access to you, your finances, can lock you up, can suicide you in jail, etc., but you're afraid of china who has access to none of those powers?

It certainly isn't pointing out hypocrisy, establishing a common standard or a cureall in online discussions.

I've seen a proper "whataboutism" been used but only once (by a malfunctioning redditor from Eglin Airforce Base).

If the IoT ecosystem has any weak spots, it is the Tuya software stack. It would be much easier, much more useful layer to put a back door into that.

That's fair but Espressif is wayyyyyyy more open than ANY Western chip maker. The entire framework and toolchains are open-source for one thing. You get listings and sometimes pseudo-code for the internal ROMs (though no code). You get full access to datasheets, technical reference, and sdk documentation. Everything in their SDK is documented. You even get help on github. All of that accessible to anyone anywhere at any time.

Contrast that to the last time I worked with Nordic in a professional manner, I had to sign NDAs to get the full documentation and toolchain. Their toolchain contained binary blobs that when inquired about you get told "don't worry about it ;)" which is shockingly frustrating when a crash occurs in them and you're left trying to work around it. And if you're not a professional you're basically SOL and left with half-baked community toolchains, when they exist for a particular chip.

The ESP8266 essentially started out as a wifi modem, responding to AT commands transmitted over serial, but going from there to a full standalone device relied on a lot of work by enthusiasts[0] and a leaked proprietary SDK[1].

[0]: https://hackaday.com/2014/09/06/the-current-state-of-esp8266...

[1]: https://tweakers.net/reviews/7992/community-interview-sprite...

That has to be at least 5 years ago, but even back then, 99% of their software was out in the open. Now, their SDK is open source, their official toolchain is based on the Linux Foundation's Zephyr toolchain and their docs are open and buildable. Their support is done on an open forum and complete data sheets are available both as PDFs and (with the exception of the nRF51) as web pages. They aren't allowed to publish their LTE stack because of operator licensing, their Bluetooth link layer is still distributed as a library and some upcoming SoCs aren't publicly available yet, but aside from this, they're as open as they can possibly be.

And with the amount of tinkering that happens with these, if it were calling home someone would really have figured it out by now.

Do you know about this

https://www.swisscommunity.org/en/news-media/swiss-review/ar... https://www.reuters.com/technology/cybersecurity/governments...

So... you are basing your fears on just that, hunches and yet presumably your own government is spying on others and maybe you but that doesnt bother you because USA /five eyes are the "good guys"

i live under a literal tyrant right now in india. does it really matter if i have "Civil rights" and china and usa and india is snooping on me?

https://www.onmanorama.com/news/kerala/2023/12/02/kollam-chi...

here. this is literally fresh off the oven.

26000 people's internet history was looked with a fine tooth comb in order to find that one IP which had viewed tom and jerry on youtube. youtube wouldnt give information but ISPs are by law or otherwise willing to "help" the police because its a "my way or highway" rule with the government.

so my point is, did i consent to this snooping? i am "supposed" to have laws but "think of the children". next time it is political opponents or dissidents as has been the case.

this isn't just in india or china or usa but everywhere.

>civil rights.... haha

I wasn't even talking about you lmao.

I'm sure the lads that spent decades in Guantanamo with no charges brought against them after being kidnapped based on their watch model will be very glad to hear they have civil rights.

It also seems that Espressif has bought their wifi IP, so their contracts and licensing terms with the IP vendor likely prevent any sharing.

But FCC is the reason for closed binary blob firmware for all wifi radios out there these days.

Wifi is shared spectrum and devices using are licenced to make sure they conform to the local regulations. One size does not fit all. For example 2.4GHz wifi channel 13 is legal in EU, but in USA it falls on a govt owned band. This is why companies like Mikrotik or Ubiquiti have specific hardware versions for USA. So that they verifiably cannot be set on illegal channels by the enduser.

This is handy sometimes because in the EU it's the opposite, the 5 and 6 GHz bands are much smaller.

The reason sometimes given by vendors that "FCC demands the code to be proprietary" is an excuse.

So if the manufacturer makes a device where changing the firmware is "readily accessible" to the user and there is an open source firmware available that can circumvent the FCC transmission restrictions (for example, change the power limits or channel limits for wifi physical layer), then that could be grounds for FF refusing to certify that device, as it is not permitted to make, import or sell general unrestricted transmitters to the general public (there are certain exceptions for licensed operators, ham radio, experimental use by manufacturers etc).

It's similar to other clauses that prohibit manufacturers from making it easy for the user to modify the equipment - e.g. 15.203 (https://www.law.cornell.edu/cfr/text/47/15.203) "the use of a standard antenna jack or electrical connector is prohibited." so that the user can't easily replace the antenna with a different one from what was certified.

I can also remove my lights and breaks from my car and it will still work, but if authorities find out I might be in trouble.

The reason the modules with integrated antenna are so popular is that the module carries its own certification, so you don't need to do it yourself.

If you use the module with an antenna connector instead of integrated, you must get your own FCC certification. It's for the entire system.

> Why can't one have an open source stack with specific builds that are approved, tested and certified?

Mainly because it's heinously expensive and difficult.

This is why open firmware can be really handy for the security community.

For a while (not any more though) you can't sell an ACR122U RFID card reader online in China, just because mfoc [1] supports it nicely and it got a reputation of "smart card cloner".

[1] https://github.com/nfc-tools/mfoc

So I'm not sure that framing your paranoia in terms of "the Chinese" is productive - you might just want to update that thought with "any state actor who operates covert torture sites and violates human rights at immense scale", in which case your set of actually hostile actors becomes a little more realistic.

The biggest threat to your freedom and human rights, as an American, is your own government.

It also rather infamously claimed it never partakes in industrial espionage, despite it being somewhat well documented in 1990s that they do.

Generally, if the contract is big enough, and specially if the companies involved have military/intelligence ties otherwise as well (every bigger MIC corp), you can expect ITC, NSA, CIA and occasionally FBI and others to all be involved in unethical work related to getting the contract won by US vendor.

This was my point. They don't steal trade secrets in order to harm US companies.

The USA regularly uses its intelligence apparatus to undermine economy and industry in other countries. I would even say, at a far greater rate, with worse results (for the targets) than anything China or Russia are doing ..

The mass violation of human rights for billions of people (literally) that occurs every millisecond of the day at Pine Gap on behalf of the American government, for example, demonstrates that this naivete is very, very dangerous.

This was my point. How often does it use its power to undermine the US economy or industry in the US?

Yes, except the China also 'infiltrate' Chinese companies themselves, and can perhaps order them to put in backdoors.

The NSA generally does not order US companies around, as evidenced by the fact it's been documented that they intercept shipments and compromise the systems on their own:

* https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa...

If the NSA had an 'in' into Cisco (or Juniper, or Aruba, etc), they wouldn't need to clandestinely have their own 'compromise factories'.

Yes, both the Chinese and NSA do cyber stuff, but so does every country. At the very least the odds of getting a 'clean' product from an American supplier compared to a Chinese one are higher: the links between Chinese companies and government are often murky.

As does the USA's own spy agencies. There is literally no moral authority on this issue that can be claimed by America over China. Did you overlook the multiple NSA backdoors implemented by Microsoft over the years, or just have not caught up to this situation, yet? See also - Intel: TPM.

>The NSA generally does not order US companies around

I believe this to be false on the basis of multiple whistleblower leaks which demonstrate otherwise. Not to mention that American companies have evolved the canary mechanism as a means of bypassing strict secrecy rules around disclosure of this influence by the spooks.

>At the very least the odds of getting a 'clean' product from an American supplier compared to a Chinese one are higher: the links between Chinese companies and government are often murky.

I do not believe this to be true one bit. China and America are equivalent when it comes to trustworthiness, which is to say neither country has the moral authority to claim a more ethical behaviour over the other when it comes to human rights.

China doesn't operate Pine Gap - the worlds biggest, wholesale violator of human rights at massive scale, ever.

And then, there's this:

https://www.androidauthority.com/apple-google-push-notificat...

Not much different to what the CCP can do to its people...

They are, not as CPU necessarily but for exactly those auxiliary functions: https://blog.nordicsemi.com/getconnected/why-nordic-is-getti...

Learn more about Espressif's founder. And I think the CCP party cannot impact Espressif.

------- Singapore’s bilingual education gave the engineer an adequate command of Chinese; he played translator for his Chinese and non-Chinese speaking staff in meetings during Espressif’s early days.

And the time he spent in national service with the Singapore Armed Forces taught him the importance of being in the front line, of knowing the ground well.

The CEO believes that entrepreneurship cannot be taught. One needs to have a head for risk-taking, creativity, a big-picture perspective, and to be prepared to fail.

And passion, of course.

He has a nugget of wisdom for those who have yet to find theirs: “There are two things that drive people... One is passion, the other is fear... If you lose that fear, you might find your passion.”

Or more subtly they could insert (or just not fix) a bug which allows packet descriptors to be overwritten on reception of a certain malformed WiFi packet, e.g. too short or long, which makes it possible to overwrite regions of the device's memory and thus compromise it. A SDR might be required to transmit the malformed packet(s).

By the way, I wonder if modern Realtek switch chips might still support RRCP, and an undocumented EEPROM bit or strapping resistor might re-enable it?

1. https://en.wikipedia.org/wiki/Realtek_Remote_Control_Protoco...

You can write these registers via the management interface or via the EEPROM. It will not respond to discovery packets, but get and set packets work fine.

This chip also has a 8051 core that can access the internal bus and can tx/rx network packets. To use it you either attach external SPI flash (large program) or write the program into the internal RAM in the chip (small program).

All documented stuff, no secret details.

By the way, Some of the Broadcom chips have an integrated 8051, with on-chip ROM firmware. There are leaked datasheets floating around somewhere as well. If someone has the time to dump the on-chip ROM, it would be interesting to see what's in there. Note, some of the pins marked NC in the datasheet are in fact the 8051 UART TX/RX lines.