News for hackers. Stuff that matters.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by FilosofumRex on Saturday June 21, 2025 @01:09AM (#44334697)
Almost all of Iran's cell network system was originally installed by S. Korean firms. They've changed some to Chinese brands, but apparently the compromised S. Korean brands are still around.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by Digital28 on Saturday June 21, 2025 @02:08AM (#44334967)
Changing from SK to CN is a trade from intentional vulnerability to unintentional vulnerability. I’ve yet to see a secure piece of software come out of China in my 30+ years of coding.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by Dah00n on Saturday June 21, 2025 @06:43AM (#44336400)
Yet in telco it is much easier and faster to get a bug fixed in Chinese equipment. IMO it is more likely you don't work with critical infrastructure than the problem being Chinese equipment.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by ReptileMan on Saturday June 21, 2025 @07:20AM (#44336611)
Supermicro IPMI comes to mind. If it was compromised we would have known by now.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by iamtedd on Saturday June 21, 2025 @07:51AM (#44336808)
Not only is Supermicro headquartered in USA, but it's operations are in Taiwan, which they would very much like you to acknowledge is not the same as mainland China.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by riffic on Saturday June 21, 2025 @01:05PM (#44339057)
*its
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by cluckindan on Saturday June 21, 2025 @06:23PM (#44341169)
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by toast0 on Saturday June 21, 2025 @09:12PM (#44342178)
There's a lot of vulnerabilities, of course. Supermicro isn't great at releasing updates for old boards either.

https://www.cve.org/CVERecord/SearchResults?query=supermicro

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by nullc on Monday June 23, 2025 @03:31AM (#44353340)
Many vendor IPMI is so fiendishly hard to isolate from untrusted networks (or even networks in general) that it almost has to be an intentional backdoor.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by FirmwareBurner on Saturday June 21, 2025 @07:43AM (#44336759)
>I’ve yet to see a secure piece of software come out of China in my 30+ years of coding.

SW coming out of Korean industry giants isn't any better.

IIRC, the only way to do online banking in Korea years ago, was you needed Internet explorer and some active-X plugin that supported encryption.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by jeroenhd on Saturday June 21, 2025 @08:35AM (#44337107)
When a security analysis was done of Chinese parts of the Dutch mobile network, that was pretty much the conclusion: Chinese vendors deliver software and components full of vulnerabilities, but none of them seem to be intentional.

Since then there has been a movement to reduce Chinese vendors in general our if security concerns, as well as to improve the security posture of the mobile networks by doing things like "encrypting connections" and "switching away from telnet".

On the other hand, the Chinese managed to break into the US wiretapping system, so it's not like other networks aren't vulnerable either.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by vardump on Saturday June 21, 2025 @09:09AM (#44337329)
> Chinese vendors deliver software and components full of vulnerabilities, but none of them seem to be intentional.

Plausible deniability.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by GTP on Saturday June 21, 2025 @03:14PM (#44340003)
If we're talking about cheap products, then it's more likely due to cost savings rather than malice. But yeah, no one can give you defitive proof of this.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by monster_truck on Saturday June 21, 2025 @09:10AM (#44337336)
Brother you cannot be serious with this racist take
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by bbarnett on Saturday June 21, 2025 @09:52AM (#44337626)
Saying that a culture is poor at security dev, such as Chinese business culture, is not even remotely rasist.

There are many ethnicities in China, people of all genetic backgrounds. It is the culture that is the problem, not the race.

For example, there are many ethnically Chinese people who grew up in the West, working in businesses, in countries where there is a culture of security.

Now, you could label it 'culturalist', and maybe it is, but there are definitely inferior and superior cultures. Especially, there are parts of cultures which are quite comparable this way.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by AJ007 on Saturday June 21, 2025 @11:23AM (#44338256)
There's also another point that security is really fucking expensive. Apple on Google spend billions a year on security, yet their phones are broken in to once they are a couple of years old. Big American software companies have large margins and large budgets. Those Chinese companies are running on fumes (and credit.)

Security and encryption is taken as a given by Western regulators given how many times they pass laws to break encryption. If you look at targeted 0-days, the conclusion would be more along the lines of the very best hardware+software is barely secure.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by gruez on Saturday June 21, 2025 @10:44AM (#44337990)
>>Brother you cannot be serious with this racist take

>There are many ethnicities in China, people of all genetic backgrounds. It is the culture that is the problem, not the race.

This just seems like nitpicking to me. Colloquially most people would classify discrimination based on country of origin, or "culture" (whatever that means) as racism, even if it doesn't meet the technical definition. For instance Trump's travel bans have been called by many as "racist", even though it covers a bunch of countries, and even though the countries are majority muslim, it also excludes major muslim countries like Pakistan and Indonesia.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by exe34 on Saturday June 21, 2025 @11:55AM (#44338501)
Just because most people are wrong doesn't mean we should encourage the dilution of words.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by gruez on Saturday June 21, 2025 @01:35PM (#44339245)
I might be sympathetic to this argument if the severity actually differed, eg. people calling mean tweets "violence" or something, but that's not what's happening there. I don't see any meaningfully difference between "I'm discriminating against you because you're Chinese" (culture/nationality) and "I'm discriminating you're Han Chinese" (ethnicity). I doubt the average racist actually knows the distinction between the two anyways, and I doubt people are going to be like "oh you're discriminating based on culture instead of ethnicity? I guess that's fine then!".
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by exe34 on Saturday June 21, 2025 @02:07PM (#44339475)
> I don't see any meaningfully difference between "I'm discriminating against you because you're Chinese" (culture/nationality) and "I'm discriminating you're Han Chinese" (ethnicity).

It's interesting you would write this as if nobody's pointed out actual cultural differences yet.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by Dylan16807 on Saturday June 21, 2025 @12:04PM (#44338574)
> This just seems like nitpicking to me. Colloquially most people would classify discrimination based on country of origin, or "culture" (whatever that means) as racism, even if it doesn't meet the technical definition.

Nobody is going to believe you're talking about real things if you let people call your argument "racism" so it's not nitpicking if you can explain why it's not. Also the word "discrimination" is itself a loaded term.

And yes areas having cultures is real. Sometimes it's tied to country, sometimes it's not.

> Trump's travel bans have been called by many as "racist", even though it covers a bunch of countries,

I'm confused? Covering a whole bunch of countries sharing a demographic is much more likely to be a racist move than picking one or two.

> and even though the countries are majority muslim, it also excludes major muslim countries like Pakistan and Indonesia.

That's a good argument against saying "muslim ban" but I'm pretty sure a focus on the middle east makes it more about race.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by const_cast on Saturday June 21, 2025 @07:46PM (#44341570)
It's entirely fair game to criticism or even discriminate based on culture, because culture is composed of actions. If people act in such a way that you do not like, that's a valid reason not to like them.

Now, we do still need to respect cultural differences where it makes sense and consider the historical context behind cultural differences, such as colonialism.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by drysine on Sunday June 22, 2025 @05:46AM (#44345479)
Nazis used to measure skull dimensions to discriminate on race. How do you measure "culture" of an individual? Just apply a stereotype based on the country of origin?
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by const_cast on Sunday June 22, 2025 @06:24PM (#44350801)
You… ask them? Or they tell you?

Like, for example, cultures which are outwardly hostile towards women and their autonomy don’t keep that as a secret. In those places, it’s well known and obvious.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by greenchair on Saturday June 21, 2025 @10:00AM (#44337676)
is it racist to wonder why I rarely see a chinese restaurant with inspection score above 80? culture differences are a real thing (if you don't have your head buried in the sand that is).
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by throw3434566 on Monday June 23, 2025 @01:01AM (#44352577)
Depends on what you attribute the score to.

I've worked in many restaurants and a lot of the health scores are stacked against ethnic restaurants and how they prepare foods.

Your score gets knocked down if you have soups simmering for too long, but in Chinese cuisine it's often times common to have the broth cooking for more than 12 hours.

Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by heraldgeezer on Saturday June 21, 2025 @07:39PM (#44341547)
Zoomers need to leave this site.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by dragonelite on Saturday June 21, 2025 @02:40PM (#44339744)
Better to swallow the poison that doesn't kill you(for now) than to swallow the one that is intended to kill you.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by throw123xz on Saturday June 21, 2025 @05:31AM (#44336055)
It's a mistake to assume that a very capable country can't get into a network that uses Chinese equipment/software.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by Dah00n on Saturday June 21, 2025 @06:41AM (#44336390)
It's also a mistake to assume that a very capable country can't get into a network that uses US equipment/software... especially Cisco equipment with all the "forgotten" hardcoded logins. Iran is better off with Chinese equipment than American or Korean.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by kragen on Saturday June 21, 2025 @07:11AM (#44336552)
Nobody knows enough to say whether Iran is better off with Chinese equipment, because most of the intentional backdoors on every side of this struggle remain undiscovered by the other sides.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by dse1982 on Saturday June 21, 2025 @07:24AM (#44336643)
Well, China is more on the side of Iran than the US or US allies. So there is that.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by kragen on Saturday June 21, 2025 @07:27AM (#44336654)
Yes, but that doesn't imply they want Iran's telecommunications network to be a black box to the PLA.
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by mensetmanusman on Saturday June 21, 2025 @07:40AM (#44336731)
Not if you know math…
Re:Samsung Embeds IronSource Spyware App on Phones Across WANA by throw123xz on Monday June 23, 2025 @08:48PM (#44361773)
Who made that assumption? The comment I replied to said that the network deployed by S. Korean firms was compromised and implied that the one from China was safe. I'm just pointing out that using Huawei or ZTE won't stop a country like Israel.