Live data from Hacker News

FCC Bans Authorizations for Devices That Pose National Security Threat

fcc.gov

11–20 of 242 posts

Re: FCC Bans Authorizations for Devices That Pose National Security Threat

#11

About time. We need open and verifiable firmware, at the very least, to be able to trust anything. Now if only they'd turn this lens on American-made devices which are likewise opaque, insecure, and likely to be weaponized against us as soon as security updates stop....

> We need open and verifiable firmware, at the very least, to be able to trust anything.

How? Even ignoring ASICs, I just don't see how it's possible. Even if you had no binary blobs anywhere (we are already in the wonderland), with process for turning source to binary, you need to trust compiler, cpu, flashing hardware and software and the whole lot of other things.

And that's all ignoring the fact that hiding bad stuff in open source is many orders of magnitude cheaper than finding it.

I don't think we have even a theoretical plan for fixing computer security, it just becomes ML bots arena.

Re: FCC Bans Authorizations for Devices That Pose National Security Threat

#12
Based on the actual news release[1], this is the FCC's formal statement of rules for compliance with the Secure Equipment Act of 2021[2].

[1]: https://docs.fcc.gov/public/attachments/DOC-389524A1.pdf

[2]: https://www.congress.gov/bill/117th-congress/house-bill/3919

Re: FCC Bans Authorizations for Devices That Pose National Security Threat

#13

In reality, Chinese manufactures will just ignore FCC licensing requirements. A good amount of cheap Chinese electronics on Amazon are already unlicensed, so I doubt any new changes will affect them. Online marketplaces like Amazon really need to crack down on products and make sure they are properly licensed.

Worse than unlicensed, they just lie and say they have certifications that they don't.

Re: FCC Bans Authorizations for Devices That Pose National Security Threat

#15

Earlier quoted context omitted.

That's not how this will be applied. Instead, I think, they will go after devices that don't contain government backdoors.

Which devices have government backdoors?

Aside from Cisco, Juniper has not exactly been forthcoming about backdoors:

https://www.wired.com/2016/01/new-discovery-around-juniper-b...

If my job were to ensure backdoor access to everything I could, at least to get started I'd sort a list of hardware vendors by marketshare.

Re: FCC Bans Authorizations for Devices That Pose National Security Threat

#16

Earlier quoted context omitted.

Source?

See CVE: https://www.cvedetails.com/vulnerability-list.php?vendor_id=... At some point you have to think these are deliberate.

Like the deliberate ones from TP-Link?

Re: FCC Bans Authorizations for Devices That Pose National Security Threat

#17
Is it just me, or does the full "report and order" spend way, way too much time responding to the comments of various telecom companies and trade groups? The tone seems far too deferential, as if they're apologizing to the industry they're trying to regulate.

Re: FCC Bans Authorizations for Devices That Pose National Security Threat

#19
the video surveillance bans all seem to target billion dollar companies, so its safe to say this is just your friendly lobbyists at ring, nest, and amazon getting an early christmas gift. the security argument is pretty flimsy considering how many american companies are just as bad (looking at you nest)

the usual suspect, huawei, has been on americas shitlist ever since they beat US telcos to market with 5g. their cellphones all meet or exceed the build quality of a samsung or iphone and to date america has failed to produce any real evidence of a security issue except 'china scary.'

toward the end of the presser its refreshing to see an octogrnarian made sure to remind us all these companies are to some extent "government funded" as if americas subsidies to auto and airlines are somehow any different. "government owned" also gets condescendingly asserted as if the reader isnt familiar with how a planned economy under post soviet marxist theory works.

ever since the net neutrality fiasco ive lost a lot of faith in the fcc. largely a toothless organization of corporate business interests.

Post reply on HN