Hopefully this will encourage someone find an affected device in the wild. Wonder if any of Supermicros non-blade mobos would be affected? The graphic on Bloomberg indicated blade servers but journalists seem to take quite a bit of liberty with tech graphics.
It's got me curious as I've purchased a few supermicro servers off Ebay, and have no clue about where they were used prior.
Setting the Record Straight on Bloomberg BusinessWeek’s Erroneous Article
11–14 of 14 posts
Re: Setting the Record Straight on Bloomberg BusinessWeek’s Erroneous Article
#12This looks like a somewhat hasty response: -"and we fixed all critical issues before the acquisition closed" - How can you fix issues when the acquiring party is not yet under your control? -"We further strengthen our security posture by implementing our own hardware designs for critical components such as processors [...]" - Own processor design by Amazon? They have the Alpine ARM-processor, but that type of process…
On your first point, I think that's pretty common in M&A. For example, let's say the audit revealed that the target did not enforce minimum password lengths for employee accounts. Amazon could simply say that needs to be re-mediated before Amazon is willing to close -- so the target can just implement that change, and certify it was done and/or have the audit firm confirm it.
Re: Setting the Record Straight on Bloomberg BusinessWeek’s Erroneous Article
#13Just because you went looking for something and didn't find it does not mean it is not there. I couldn't find my car key this morning and had to use the spare, does that mean my normal key doesn't exist and never existed? No, it just means I didn't dedicate enough time to finding my normal key.
[deleted]
Re: Setting the Record Straight on Bloomberg BusinessWeek’s Erroneous Article
#14According to BBG report, "the ensuing top-secret probe" "remains open more than three years later".
I find it extremely hard to believe that uncle Sam would let a state sponsored espionage of this scale silently continue for 3 years without warning the public and cut off the pipe.
If the alleged hacking were true, wouldn't it be 100x more important to stop the spyware immediately than collecting comprehensive evidence on who's behind it? At the end of the day, it's not like U.S. would start a nuclear war against China if the allegation is proven true.