Live data from Hacker News

Super Micro says review found no malicious chips in motherboards

reuters.com

161–170 of 355 posts

Re: Super Micro says review found no malicious chips in motherboards

#161
post #131
post #63

Earlier quoted context omitted.

CBS Killian Papers pretty much. There have been some significant examples but there actually aren’t that many cases of a major pub running a “scoop” that no other major pub runs with as well that turns out to be flat out wrong. There are certainly examples of mainstream media as a whole getting behind a story like lead-up to Iraq War but this is something different.

I think that's in large part because often many others will pile in by referring to the newspaper that ran it. I wouldn't count that in same class, as they're often "technically" not wrong in that they're reporting that "according to X, Y happened" rather than making the false claim that "Y happened". The fake Hitler diaries would be one of the really major examples of this, where Stern, Newsweek and the Sunday Times…

>it's not clear if it actually harmed the newspapers themselves

As long as 1.) it's a rare event and 2.) the publication gives the appearance, and perhaps the reality of, throwing the guilty and those in the wrong place at the wrong time under the bus, putting better processes in place, apologizing profusely,and being very introspective about the whole affair, people tend to forgive and forget--or at least forget. And their peers probably have at least a bit of "there but for the grace..." about the whole thing anyway.

I'm being a bit snarky about throwing people under the bus. Usually there are people who are guilty mostly in a "the buck stops here" sort of way. But, in most of the recent cases I can think of, there were individuals in the news organizations who so wanted stories to be true that they were at best inept in a way it's not clear they understood even in retrospect.

Re: Super Micro says review found no malicious chips in motherboards

#162
post #28

Let's say Super Micro is right and there were no malicious hardware at all for sure. What are the consequences for Bloomberg for this incompetence? I mean, there needs to be something.. Just because you're a news organization, you can't simply escape with "Oh, my bad". This had real implications on stock prices of so many companies and wiped off shareholder value on many of them, including Super Micro. If Bloomberg's…

Nothing, just like nothing will happen to the outlets who are currently pushing this "Huwai is spying on everybody" narrative with not an ounce of evidence for it except for unfounded and unsourced claims by FiveEyes intelligence services [0]. Afaik that whole Bloomberg/Super Micro thing was similarly set up, referring to "anonymous intelligence/industry services", not even naming the company that supposedly did the…

Regarding the five eyes sources, are we really expecting that intelligence agencies will give sources/proof?

Re: Super Micro says review found no malicious chips in motherboards

#163
post #111

Earlier quoted context omitted.

Correlation != causation. The fact that most newspapers aren't lucrative doesn't mean they don't value profit.

Bloomberg News is not a newspaper. The company makes money from selling terminals not news (although the terminal contains news, but it's easy to see that sensationalism is not what the customers pay for).

No one had to pay to read the SuperMicro story (the original one that started all this).

Re: Super Micro says review found no malicious chips in motherboards

#164
post #63

Earlier quoted context omitted.

CBS Killian Papers pretty much. There have been some significant examples but there actually aren’t that many cases of a major pub running a “scoop” that no other major pub runs with as well that turns out to be flat out wrong. There are certainly examples of mainstream media as a whole getting behind a story like lead-up to Iraq War but this is something different.

> CBS Killian Papers pretty much Meh. I'm in the camp that believes Karl Rove pulled off one of his greatest dirty tricks of all time.

That would have been brilliant insofar as the Killian Papers pretty much blew up a legitimate news story, albeit one without quite such a visibly smoking gun. But I don't actually believe that.

Re: Super Micro says review found no malicious chips in motherboards

#165
post #28

Let's say Super Micro is right and there were no malicious hardware at all for sure. What are the consequences for Bloomberg for this incompetence? I mean, there needs to be something.. Just because you're a news organization, you can't simply escape with "Oh, my bad". This had real implications on stock prices of so many companies and wiped off shareholder value on many of them, including Super Micro. If Bloomberg's…

Write that you do not trust Bloomberg on twitter/facebook/linkedin. If you have a blog, write about it. I am going to.

Also read NYTimes or another news source instead of Bloomberg.

Re: Super Micro says review found no malicious chips in motherboards

#166
post #155
post #28

Let's say Super Micro is right and there were no malicious hardware at all for sure. What are the consequences for Bloomberg for this incompetence? I mean, there needs to be something.. Just because you're a news organization, you can't simply escape with "Oh, my bad". This had real implications on stock prices of so many companies and wiped off shareholder value on many of them, including Super Micro. If Bloomberg's…

So, when looking at this, we have to remember that reporters aren't analysts ; they're not expected to have subject-specific background and make personal judgement calls as to what the underlying truth is. If you want that you can certainly get it - for a much higher price than a newspaper. That's what firms like Gartner are for. Reporters to a very large extent report what sources say . Their judgement comes in cons…

This is a case of c) Reporters were completely reckless. They bought a small 0402 decoupling capacitor, put it on pencil tip, and then claimed that it was a chip that could hack your device.

Any EE worth their salt knows exactly what 0402 decoupling capacitors do, and that there's no way you can hack from that angle. It has to do where that particular chip is placed: usually on power-lines... not really signal-traces.

The fact that all known security forces are denying the story (not just big companies like Apple... but also Homeland Security), means that the reporters likely misunderstood what their sources were trying to say. They published a bad story, exaggerating a molehill into a mountain.

-----------

The thing is: we all know that BMCs are very insecure. A lot of the problem is that the Bloomberg article is pointing at lol 0402 decoupling capacitors, when any security researcher worth their salt is looking at the BMC instead.

There are too many technical details in the Bloomberg article that were outright WRONG. Its a clear cut case of reporters misunderstanding things and focusing on the wrong thing.

Re: Super Micro says review found no malicious chips in motherboards

#167

Earlier quoted context omitted.

>What are the consequences for Bloomberg for this incompetence? You, not the general concept of the reader, but you personally neya. You stop trusting Bloomberg's reporting. That's the consequence. Their reputation suffers. Why do threads like this on HN always have such a desire for retribution?

Their reporters are compensated based off of whether or not they move markets. Did you know that? ( https://www.businessinsider.com/bloomberg-reporters-compensa... )

If people stop trusting their stories, they won't move markets.

Re: Super Micro says review found no malicious chips in motherboards

#168
post #28

Let's say Super Micro is right and there were no malicious hardware at all for sure. What are the consequences for Bloomberg for this incompetence? I mean, there needs to be something.. Just because you're a news organization, you can't simply escape with "Oh, my bad". This had real implications on stock prices of so many companies and wiped off shareholder value on many of them, including Super Micro. If Bloomberg's…

Nothing, just like nothing will happen to the outlets who are currently pushing this "Huwai is spying on everybody" narrative with not an ounce of evidence for it except for unfounded and unsourced claims by FiveEyes intelligence services [0]. Afaik that whole Bloomberg/Super Micro thing was similarly set up, referring to "anonymous intelligence/industry services", not even naming the company that supposedly did the…

Seems like anonymous sources inside the intelligence agencies is how a lot of the news gets generated these days. Anonymous figures don't have to worry about their reputation or credibility and can just leak occasionally true information to keep getting published.

Re: Super Micro says review found no malicious chips in motherboards

#169

Earlier quoted context omitted.

>What are the consequences for Bloomberg for this incompetence? You, not the general concept of the reader, but you personally neya. You stop trusting Bloomberg's reporting. That's the consequence. Their reputation suffers. Why do threads like this on HN always have such a desire for retribution?

> Why do threads like this on HN always have such a desire for retribution? Seeing a situation where one person/group does something that negatively affects another group without consequence tends to have this emotional response from emotionally healthy individuals. Where do you see a problem with this type of response?

> Where do you see a problem with this type of response?

"It is impractical because it is a descending spiral ending in destruction for all. The old law of an eye for an eye leaves everyone blind."

Re: Super Micro says review found no malicious chips in motherboards

#170
post #162

Earlier quoted context omitted.

Nothing, just like nothing will happen to the outlets who are currently pushing this "Huwai is spying on everybody" narrative with not an ounce of evidence for it except for unfounded and unsourced claims by FiveEyes intelligence services [0]. Afaik that whole Bloomberg/Super Micro thing was similarly set up, referring to "anonymous intelligence/industry services", not even naming the company that supposedly did the…

Regarding the five eyes sources, are we really expecting that intelligence agencies will give sources/proof?

I wouldn't, but I also wouldn't expect a reporter to publish this info without finding anything corroborating. This whole story is about physical sabotage devices, supposedely planted in large quantities, why couldn't they find any of these devices or a single person willing to state they saw one?
Post reply on HN