Live data from Hacker News

The Big Hack: The Software Side of China’s Supply Chain Attack

bloomberg.com

11–20 of 31 posts

Re: The Big Hack: The Software Side of China’s Supply Chain Attack

#11
post #4

The Norwegian national security agency has confirmed that they were aware of the allegations against SuperMicro since June, but they won't confirm if it's true (nor are they denying it) and they noted that they are also aware that Amazon/Apple are denying it. As for why Apple/Amazon are denying it I wonder if it's because they don't want to burn bridges. If they confirm the allegations, how would that play out in the…

Do you have a source for the Norwegians?

Re: The Big Hack: The Software Side of China’s Supply Chain Attack

#12
post #5

That secret "Chinese weapon" you hold on your finger tip is a very common electronic component called the signal conditioning balun, worth $0.29 and sold here https://www.mouser.com/ProductDetail/TDK/HHM1932A2?qs=6JAMGB... . The Bloomberg report can really win the Ignorance and Stupidity Award of this year.

They note in the article that the chip is of the same color and scale as a signal conditioning coupler.

Re: The Big Hack: The Software Side of China’s Supply Chain Attack

#13
post #4

The Norwegian national security agency has confirmed that they were aware of the allegations against SuperMicro since June, but they won't confirm if it's true (nor are they denying it) and they noted that they are also aware that Amazon/Apple are denying it. As for why Apple/Amazon are denying it I wonder if it's because they don't want to burn bridges. If they confirm the allegations, how would that play out in the…

Do you have a source for the Norwegians?

Here you go, it's close to the bottom: https://www.vg.no/nyheter/i/xRkLep/storavis-hevder-kina-inst...

It's from a quote by the head of communications at NSM.

Re: The Big Hack: The Software Side of China’s Supply Chain Attack

#14
post #4

The Norwegian national security agency has confirmed that they were aware of the allegations against SuperMicro since June, but they won't confirm if it's true (nor are they denying it) and they noted that they are also aware that Amazon/Apple are denying it. As for why Apple/Amazon are denying it I wonder if it's because they don't want to burn bridges. If they confirm the allegations, how would that play out in the…

My guess is Gag order for the US govt.

Re: The Big Hack: The Software Side of China’s Supply Chain Attack

#16
post #4

The Norwegian national security agency has confirmed that they were aware of the allegations against SuperMicro since June, but they won't confirm if it's true (nor are they denying it) and they noted that they are also aware that Amazon/Apple are denying it. As for why Apple/Amazon are denying it I wonder if it's because they don't want to burn bridges. If they confirm the allegations, how would that play out in the…

My guess is Gag order for the US govt.

That would be the only reason i can think of.

Otherwise the SEC could really make there life miserable.

Re: The Big Hack: The Software Side of China’s Supply Chain Attack

#17
post #7

Earlier quoted context omitted.

Is it possible that only lower level Apple/Amazon employees were involved in the investigation and that they are forbidden from telling anyone else, even senior legal executives?

It's actually possible they have a National Security Gag order. If that's the case they could only deny anyway.

But they don't, they explicitly mentioned they are not under a gag order, which is the first thing you are forbidden to mention when you are gagged. That is the reason why "warrant canaries" exist.

https://en.wikipedia.org/wiki/Warrant_canary

Re: The Big Hack: The Software Side of China’s Supply Chain Attack

#19
post #17

Earlier quoted context omitted.

It's actually possible they have a National Security Gag order. If that's the case they could only deny anyway.

But they don't, they explicitly mentioned they are not under a gag order, which is the first thing you are forbidden to mention when you are gagged. That is the reason why "warrant canaries" exist. https://en.wikipedia.org/wiki/Warrant_canary

I think what GP was suggesting is that lower level employees might be under individual gag order, keeping them from ever reporting the incident to their higher ups (including those responsible for the warrant canary).
Post reply on HN