New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom
1–10 of 379 posts
Re: New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom
#2They don’t say what the hack was and definitely do not say it was one of their pins. Probably some truth here, but as hard as they try, does not seem supportive of their “chinese pin” theory. Very suspicious that this is related, I’m guessing they’re trying to do anything to cover their asses.
Re: New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom
#3Ironically, China might have done more to bring back manufacturing to the US than Trump and Obama combined.
Regardless of if this is actually true, and so far that's debatable, clearly the rest of the world needs to retrieve ownership of their supply chains for mission critical computer systems.
It's hard to see how this doesn't embolden Trump to take more action against China. and to be fair at this point, its hard to disagree with him that China is taking advantage of the rest of the world.
Poor Super Micro. There time as a public company is probably measured in months now:(
> Appleboum said that he's consulted with intelligence agencies outside the U.S. that have told him they've been tracking the manipulation of Supermicro hardware, and the hardware of other companies, for some time.
I'd imagine at this point everyone who has the ability to do deep inspection of their hardware is working as fast as possible to resweep their servers.
Re: New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom
#4This saga is fascinating I really have no doubt of the hardware existing. Thought the original picture from the article and description made it hard for me to imagine the connectivity.
is it connected to the SPI of the BMC flash/OS storage? Why would software integrity checks like making sure the image is signed and not tampered wouldn't capture it? (Answer to this one sounds easy bad security practices regarding firmware process)
Re: New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom
#5They don’t say what the hack was and definitely do not say it was one of their pins. Probably some truth here, but as hard as they try, does not seem supportive of their “chinese pin” theory. Very suspicious that this is related, I’m guessing they’re trying to do anything to cover their asses.
What is the chinese pin theory?
Is this the name being used for the supposedly embedded on the PCB layers chip?
Or the one that attaches on unpopulated pins/pads near the BMC memory area?
Re: New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom
#6Ironically, China might have done more to bring back manufacturing to the US than Trump and Obama combined. Regardless of if this is actually true, and so far that's debatable, clearly the rest of the world needs to retrieve ownership of their supply chains for mission critical computer systems. It's hard to see how this doesn't embolden Trump to take more action against China. and to be fair at this point, its hard…
If Super Micro goes under and we discover this story was massively incorrect, can they sue for the lost market value? If so, this may cost bloomberg billions.
Re: New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom
#7Ironically, China might have done more to bring back manufacturing to the US than Trump and Obama combined. Regardless of if this is actually true, and so far that's debatable, clearly the rest of the world needs to retrieve ownership of their supply chains for mission critical computer systems. It's hard to see how this doesn't embolden Trump to take more action against China. and to be fair at this point, its hard…
You know this whole time I’ve been wondering that if this is true, I see some manufacturing coming back to the US. But I completely missed the part where China also makes stuff for the rest of the world and other countries might also be pulling manufacturing back to their home countries. Sometimes it’s just easy to stay focused in. Your comment made me take a step back and look at the bigger picture.
Re: New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom
#8OK so this is a different hack than Bloomberg reported before: ethernet jack piggyback instead of bmc. I'm not sure this adds credibility to the allegations in the other story.
The details that Bloomberg related previously are so different that this couldnt be what they originally were reporting on. This adds to the China hacking server board narrative, but it does nothing to prove the Bloomberg reporting actually true.
It does cast doubt on the denials made previously.
It seems this story isn't totally smoke and mirrors as Apple, Amazon and Super Micro seem to want us to believe.
Re: New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom
#9They don’t say what the hack was and definitely do not say it was one of their pins. Probably some truth here, but as hard as they try, does not seem supportive of their “chinese pin” theory. Very suspicious that this is related, I’m guessing they’re trying to do anything to cover their asses.
Sounds like the Ethernet connector module was not from the, ahem, correct manufacturer: “Appleboum said one key sign of the implant is that the manipulated Ethernet connector has metal sides instead of the usual plastic ones. The metal is necessary to diffuse heat from the chip hidden inside, which acts like a mini computer. "The module looks really innocent, high quality and 'original' but it was added as part of a supply chain attack," he said.”
Re: New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom
#10Ironically, China might have done more to bring back manufacturing to the US than Trump and Obama combined. Regardless of if this is actually true, and so far that's debatable, clearly the rest of the world needs to retrieve ownership of their supply chains for mission critical computer systems. It's hard to see how this doesn't embolden Trump to take more action against China. and to be fair at this point, its hard…
If Super Micro goes under and we discover this story was massively incorrect, can they sue for the lost market value? If so, this may cost bloomberg billions.
and if it is correct?