9 ms·
All this assertion / denial stuff is getting tiresome. If this compromise was implemented at a significant scale, and people in-the-know have figured out how it
by bitbang 8y ago
All this assertion / denial stuff is getting tiresome. If this compromise was implemented at a significant scale, and people in-the-know have figured out how it functions, it shouldn't be too hard to get hold of one and provide a demo.
- vyodaiken 8y agoabsence of an example device is a strong strike against the Bloomberg article.
- cm2187 8y agoWould you assume the NSA would distribute it to newsrooms like flagrance samples? Particularly if the leak was unauthorized.
- tedunangst 8y agoReally? If we assume everything reported was true, would the sources involved be in a position to hand over a server to the reporters?
- bitbang 8y agoNo need to have somebody hand over a server. If the implant happened in two segments of the supply chain as the article claims, it shouldn't be very difficult to find one.
- wmeredith 8y agoThe burden of proof is on the accuser.
- anitil 8y agoAnd now I'm angry at myself for not thinking of this. So much of this story was sitting like a grain of sand in my brain, but I couldn't put my finger on it
- acct1771 8y agoIf you understand what this does, there's no such thing as an insignificant scale.
- bitbang 8y agoThe point about scale, is that if this happened at the scale that is being claimed, it shouldn't be too hard to find a compromised unit.
- JdeBP 8y agoThe scale being claimed is a mere four factories, subcontractors of Supermicro's actual contractors, who were only used when demand exceeded those contractors' own capabilities.