Live data from Hacker News

AWS CEO Jassy follows Apple in calling for retraction of Chinese spy chip story

cnbc.com

111–120 of 289 posts

Re: AWS CEO Jassy follows Apple in calling for retraction of Chinese spy chip story

#111
post #51
post #42

Earlier quoted context omitted.

Ok, "encourage and facilitate"

That would be catastrophic for Bloomberg - if a news org is seen as more interested in protecting its reputation than protecting its sources, no sensitive source would speak to it again. They can easily eat the hit of one potentially bad story. They can't eat the hit of 'dicks around with sources'.

Well, they would obviously get consent from the sources first, rather than simply sharing their names with the other outlets.

Re: AWS CEO Jassy follows Apple in calling for retraction of Chinese spy chip story

#112
post #64

The denials seem convincing. And yet the story seems very much plausible. US NSA does these kinds of attacks, why not China? > They offered no proof, story kept changing, and showed no interest in our answers unless we could validate their theories If that's really the case then it seems likely that their source may have indeed deceived them. But don't they have multiple sources? > The article also claims ... we cond…

The NSA has never done something on this scale. With sec researchers looking at _everything_ right now it would have been uncovered by now. The major point in this story wasn't a hardware hack, it was a hardware hack on a MASSIVE scale, a scale that would have to be treated as an act of war against the _rest of the world_. If this article were true it would have been the first public volley in WWIII.

The number of implants doesn't need to be that great. If you are already tapped into Supermicro's supply chain and ordering system, then you can already figure out when a bulk of servers passing through manufacturing are going out to a certain customer. Bribe someone or have an agent on the floor slip in the implant during assembly. Maybe the gerber files for the boards already have the necessary pads built-in for debug, maybe someone is swapping in modified gerbers. Maybe the implant is installed totally after hours when the boards are already built or when they are on their way to the final assembly facility.

Re: AWS CEO Jassy follows Apple in calling for retraction of Chinese spy chip story

#115
BuzzFeed is fake news run by idiots. Look at the article (s) they have now on their front page...

It's nothing but college age "editors" who are "googling" things and looking at Twitter for content.

I know it'll be an unpopular opinion on here but they are a huge source of bullshit on the internet.

Re: AWS CEO Jassy follows Apple in calling for retraction of Chinese spy chip story

#116

There should be hundreds of thousands or millions of these hacked motherboards, and nobody has found a single one despite hardware geeks worldwide searching like it was Willy Wonka's final golden ticket. This story was bogus, it most likely came from a ton of rumors that got conflated, hence why they had to go with anonymous sources as opposed to any physical evidence. I'd be surprised if Bloomberg has any credibilit…

"There should be hundreds of thousands or millions of these hacked motherboards" No, the boards would be selectively hacked. And we know it happens because 'we' do it as well. Surely there is evidence floating around but it's also unlikely that companies would want to admit the breach. I kind of believe Apple and Amazon though, there's too much risk if they were to be caught lying. This is a weird one ...

> And we know it happens because 'we' do it as well.

What's the logic in this? This is like saying Saudis must be Christians because we are Christians as well

Re: AWS CEO Jassy follows Apple in calling for retraction of Chinese spy chip story

#119
post #13

An easy way Bloomberg could support their story: allow one or more of their "senior insider" sources at Apple/Amazon to speak with another outlet (AP, NYT, whoever) who agrees to maintain their anonymity.

How would that actually support anything though? I don't understand how this entire story has any legs without physical evidence. People can say things to multiple people, but that doesn't make what they're saying more true, right?

It would support two things that are currently in doubt (1) the idea that Bloomberg ran the story with actual information from actual insiders at Apple/Amazon (I've seen upvoted comments in multiple HN threads suggesting fabrication and whether the journalists have a history of it) and (2) that Bloomberg did not confuse or extrapolate the claims in their story from much more minor security incidents, such as the one Apple had previously disclosed re:Supermicro (such confusion/extrapolation seems to be the most likely explanation for everything we've seen imho but many other outcomes wouldn't surprise me).

Re: AWS CEO Jassy follows Apple in calling for retraction of Chinese spy chip story

#120

Earlier quoted context omitted.

> Did anybody saw a weird 6 traces converging at a point for no reason on all the motherboards on the market? You do ask some good questions, but if apple can dropship my one macbook pro from China when I order it, I suspect they could dropship 1 (or many) of these boards to Apple, Amazon, etc when ordered. In other words, they wouldn't have to produce all of them with this special chip. Hell, they might only need to…

You seem to forget how difficult it is to manufacture a single unit of a mother board to achieve the effect you're imagining. Do you really think they have a production line where every week or so they create a different mother board adding this circuit? Why in the world would they create these additional costs, and is it even economically justifiable? This whole story seems each day worse, just like believing in Big…

If the board house has copies of the gerbers, which they should, someone could easily edit those to introduce a spot for the implant. And if they already have all of the drawings, they can just add those empty pads into the design so any inspection wouldn't raise alarm. Then install the actual implant post-inspection. Maybe they get lucky by just re-purposing unused pads from the original design and route the traces to where ever.
Post reply on HN