Live data from Hacker News

Super Micro says review found no malicious chips in motherboards

reuters.com

181–190 of 355 posts

Re: Super Micro says review found no malicious chips in motherboards

#181
I'd be super interested in the follow up, and not just for monetary reasons[1]

I mean, my impression is that there has been a lot of news trying to stir up US vs China animosity; I mean, I'm sure that a lot of industrial/state espionage happens, but the renewed focus just seems a little suspicious to me at a time when our government is trying to distract us from possible Russian interference in our election.

Makes me wonder about huawei - is this all just our government trying to take the heat off their Russian allies? I mean, it wouldn't even need to be made up in that case, I'm sure that if you looked, you could find plenty of sketchy things Chinese companies are already doing.

But that was the weird thing about this supermicro thing... it was really pretty easily disprovable. Like... there are a lot of really smart people in the field looking for this sort of thing. If it was a lie to begin with, why pick one that can be shown to be false, when there are so many other possibilities that can't be proved either way?

Man, I hope I live long enough to read good history books about this era.

[1]I bought a bunch of SMCI when the story first broke; Aside from buying and using a lot of SuperMicro I simply didn't believe that they would be the only company effected if the story was true. When the story broke, I though that someone had probably found something, and that as people tore apart hardware looking, we would find something from other manufacturers, too. As nobody has found anything yet? I now think the story is just false. I know smart people are looking. (software/firmware compromises may not be as durable, but they are a lot easier to implement.) Either way, my SMCI holdings are up a few grand at a time when the rest of my portfolio is looking pretty sad.

Re: Super Micro says review found no malicious chips in motherboards

#183
post #162

Earlier quoted context omitted.

Nothing, just like nothing will happen to the outlets who are currently pushing this "Huwai is spying on everybody" narrative with not an ounce of evidence for it except for unfounded and unsourced claims by FiveEyes intelligence services [0]. Afaik that whole Bloomberg/Super Micro thing was similarly set up, referring to "anonymous intelligence/industry services", not even naming the company that supposedly did the…

Regarding the five eyes sources, are we really expecting that intelligence agencies will give sources/proof?

Are they expecting us to believe whatever they say without any examination?

Re: Super Micro says review found no malicious chips in motherboards

#184
> Let's say Super Micro is right

Yet we still don't know whether this is the case, so it's not even clear whether "consequences" are in order and whether incompetence is at play.

You can't prosecute someone because "if they had stolen money from me, that would be theft."

Re: Super Micro says review found no malicious chips in motherboards

#185
post #74
post #28

Let's say Super Micro is right and there were no malicious hardware at all for sure. What are the consequences for Bloomberg for this incompetence? I mean, there needs to be something.. Just because you're a news organization, you can't simply escape with "Oh, my bad". This had real implications on stock prices of so many companies and wiped off shareholder value on many of them, including Super Micro. If Bloomberg's…

Nothing. I was downvoted to oblivion less than a week when I said Bloomberg is over and Hackernews should embargo them and people shouldn't click them. Edit: and the downvote brigade is here again, downvoting and not giving a word of explanation. Are you paid by Bloomberg?

I downvote people that whine about downvoting. I downvote people who accuse everyone who disagrees with them of being shills.

Aside from this I consider "Bloomberg is over" a gross exaggeration".

Furthermore one mistake if mistake it is doesn't justify banning that publication from hacker news.

Furthermore who are you to be talking about banning anyone from this site in any case.

You get lots of down votes because there are so many reasons to downvote this post not because of some conspiracy.

Re: Super Micro says review found no malicious chips in motherboards

#186

The question I have is: is it possible that there was such an incredible threat to national security that even an auditor could be convinced by a federal agency to give a false report? If it really didn't happen, how could a reputable news agency get a report so wrong? What exactly is going on here?

WRT the how could they get it so wrong question, I guess it's time for the obligatory link to Michael Crichton's essay "Why Speculate?" and his discussion of the "Murray Gell-Mann Amnesia Effect" [1] Money quote: "You open the newspaper to an article on some subject you know well. In Murray's case, physics. In mine, show business. You read the article and see the journalist has absolutely no understanding of either t…

AKA the Reddit Effect. Everyone on Reddit posts as if they know what they're talking about when, in reality, they only have a cursory knowledge of it and yet the entire site is somehow treated as a curated collection of high-quality, factual information.

Re: Super Micro says review found no malicious chips in motherboards

#187
post #28

Let's say Super Micro is right and there were no malicious hardware at all for sure. What are the consequences for Bloomberg for this incompetence? I mean, there needs to be something.. Just because you're a news organization, you can't simply escape with "Oh, my bad". This had real implications on stock prices of so many companies and wiped off shareholder value on many of them, including Super Micro. If Bloomberg's…

Nothing. The public had already forgotten this matter.

Re: Super Micro says review found no malicious chips in motherboards

#188
post #24

Earlier quoted context omitted.

>is it possible that there was such an incredible threat to national security that even an auditor could be convinced by a federal agency to give a false report? Absolutely possible, even somewhat plausible but unlikely. Conspiracies are hard to maintain "2 can keep a secret if 1 of them is dead". You could outright threaten someone with any number of means to get them to comply with your wishes, this is how espionag…

A US intelligence agency nowadays would just issue a National Security Letter and force you to not say anything otherwise you go to jail. Most people really don't want to go to jail. An intelligence agency would really only resort to blackmail or extortion if they were operating in a foreign country where they couldn't outright bribe someone.

I imagine that is defeated by simply saying "I refuse to lie", which could be career suicide but it's still an option. I can see how legally they could say "you can't reveal that information, it's a matter of national security" but I don't quite think we're at the point in America where they can go "Say this or go to prison".

Re: Super Micro says review found no malicious chips in motherboards

#189
post #28

Let's say Super Micro is right and there were no malicious hardware at all for sure. What are the consequences for Bloomberg for this incompetence? I mean, there needs to be something.. Just because you're a news organization, you can't simply escape with "Oh, my bad". This had real implications on stock prices of so many companies and wiped off shareholder value on many of them, including Super Micro. If Bloomberg's…

Nothing, just like nothing will happen to the outlets who are currently pushing this "Huwai is spying on everybody" narrative with not an ounce of evidence for it except for unfounded and unsourced claims by FiveEyes intelligence services [0]. Afaik that whole Bloomberg/Super Micro thing was similarly set up, referring to "anonymous intelligence/industry services", not even naming the company that supposedly did the…

Not that Huawei is the only and surely some other brands are even worse, but still Huawei phones are full of spyware, just open NetGuard or another example here : https://mobile.twitter.com/fs0c131y/status/10515681807480135...

But once again surely other brands, Western companies included, are also spying, but it doesn't change the fact that Huawei does it too.

Re: Super Micro says review found no malicious chips in motherboards

#190

Evaluating this is tricky. On the one hand, Bloomberg claims it's a well sourced article, not a single person's unsubstantiated claim. On the other, Super Micro claims an audit showed nothing, but then they have an incentive to be less than honest, or to have performed a very superficial check. And couldn't an audit simply miss the issue if the malicious functionality were embedded in an otherwise legitimate chip? Ei…

I am more inclined to believe Super Micro at this point. It is not just them that are denying this. Apple and Amazon have denied it as well and Apple even went so far as to write a letter to Congress[0]. With a hardware attack like the one that Bloomberg reported, there should be some actual physical evidence out in the wild but nothing has been found to date. I think that they really failed with regards to due diligence.

[0]: https://www.scribd.com/document/390401381/Letter-October-8th...

Post reply on HN