5 ms·

Hopefully this doesn't wind up as another "BadBIOS", where nobody produces any real technical evidence that it's true.

by Canada 8y ago

xvector 8y ago
BadBIOS wasn’t real? It sounded so innovative! My day is ruined and my disappointment is immeasurable.
- platinumrad 8y ago
  The fact that years later people still don't know that BadBIOS wasn't "real" speaks volumes about how this whole incident is going to be remembered. All of the sensational claims get reported everywhere while the eventual retractions are largely ignored.
  - Canada 8y ago
    In the case of BadBIOS there was no retraction. The person who claimed to have found it kept on insisting he did, but he never posted the malware. He just kept on making unverifiable claims and posting meaningless spectrograms and ignoring calls to just show us the code he says he has.
    - peter_d_sherman 8y ago
      What if every single scientific discovery in history was forwarded to a bunch of public-facing guys who said, "Nope, this isn't true." Where would we be then? Remember Galileo? Every single person technical person worth their salt owes themselves the favor of doing their own research, and forming their own opinions. I don't know if BadBIOS is real or not, but until I've done my own research and reached my own conclusions, I (politely!) refuse to take other people's opinion on the matter. Unverified claims? By who? I refuse to believe what amounts to speculation, conjecture and hearsay by any party! Also, please think about "The Streisand Effect" (https://en.wikipedia.org/wiki/Streisand_effect https://en.wikipedia.org/wiki/Streisand_effect) when you make posts deferring to debunking by a supposed authority. All I know is that before you posted, I was not interested in BadBIOS... now I am... and I'm going to do my own research on the matter.
alexandercrohde 8y ago
Well, there's nothing in this article that would suggest that... This article confirms such attacks have happened already: "Totally possible. We have been a witness, or have been involved in an investigation, not in the US by the way, but who cares. Eventually, the one who switched the box was a guy who got money to switch boxes during the shipment." The only thing Yossi want's to clarify is that it's not specific to SuperMicro, and that therefore it's a much bigger and worse problem than if it was.

Hopefully this doesn't wind up as another "BadBIOS", where nobody produces any real technical evidence that it's true.

by Canada 8y ago

Hopefully this doesn't wind up as another "BadBIOS", where nobody produces any real technical evidence that it's true.

xvector 8y ago

BadBIOS wasn’t real? It sounded so innovative! My day is ruined and my disappointment is immeasurable.

platinumrad 8y ago
The fact that years later people still don't know that BadBIOS wasn't "real" speaks volumes about how this whole incident is going to be remembered. All of the sensational claims get reported everywhere while the eventual retractions are largely ignored.
- Canada 8y ago
  In the case of BadBIOS there was no retraction. The person who claimed to have found it kept on insisting he did, but he never posted the malware. He just kept on making unverifiable claims and posting meaningless spectrograms and ignoring calls to just show us the code he says he has.
  - peter_d_sherman 8y ago
    What if every single scientific discovery in history was forwarded to a bunch of public-facing guys who said, "Nope, this isn't true." Where would we be then? Remember Galileo? Every single person technical person worth their salt owes themselves the favor of doing their own research, and forming their own opinions. I don't know if BadBIOS is real or not, but until I've done my own research and reached my own conclusions, I (politely!) refuse to take other people's opinion on the matter. Unverified claims? By who? I refuse to believe what amounts to speculation, conjecture and hearsay by any party! Also, please think about "The Streisand Effect" (https://en.wikipedia.org/wiki/Streisand_effect https://en.wikipedia.org/wiki/Streisand_effect) when you make posts deferring to debunking by a supposed authority. All I know is that before you posted, I was not interested in BadBIOS... now I am... and I'm going to do my own research on the matter.

alexandercrohde 8y ago

Well, there's nothing in this article that would suggest that... This article confirms such attacks have happened already: "Totally possible. We have been a witness, or have been involved in an investigation, not in the US by the way, but who cares. Eventually, the one who switched the box was a guy who got money to switch boxes during the shipment." The only thing Yossi want's to clarify is that it's not specific to SuperMicro, and that therefore it's a much bigger and worse problem than if it was.