3 ms·
Can someone outline some reasons for me why nobody has come up with an actual physical example of a compromised board? I'm not trying to make a point, I just wa
by fhood 8y ago
Can someone outline some reasons for me why nobody has come up with an actual physical example of a compromised board? I'm not trying to make a point, I just want to get a more complete picture of the issue, and the biggest thing that stands out to me is the lack of physical evidence.
- netman21 8y agoJust wait. If they are out there they will be found. Of course you could ask why none of the ANT Catalog software implants have been found yet or why Juniper/Cisco/Fortinet have not (publicly) announced tools to detect them.
- lolc 8y agoIt's not like these boards are found in every living room. I would assume that if somebody found a suspicious board at their org, they would kick off internal processes first.
- rando444 8y agoWell according to the original article, the attack was targeted, implying the only way to get such a thing would be from one of the compromised customers, who are probably involved in an investigation into the matter, don't have all of the info themselves, and aren't super eager to release details to the public before a full picture emerges and mitigation procedures are in place. Further, going back to the original article, the majority of the information comes from alleged government sources, so not the people directly impacted, but rather those just helping deal with the fallout and coordination. Assuming there is merit to the story, it will likely be some time before more details emerge, unless having the story out there now helps accelerate that process.
- est 8y ago> the attack was targeted, Supermicro assemble their products in US/Taiwan. So in theory China need to accurately predict the pattern of how non-China factories install batches of the motherboard. I think it's extremely difficult to pull this off.