3 ms·
Is there any chance they have stumbled upon the same weakness that Bloomberg tried to report[0]? The industry at large has been pretty sceptical of Bloomberg's
by jfindley 8y ago
Is there any chance they have stumbled upon the same weakness that Bloomberg tried to report[0]?
The industry at large has been pretty sceptical of Bloomberg's claims, and rightly so, but what if they just got the details wrong and it was this (or similar) vulnerability in the BMC software, rather than a dedicated spy chip, that they meant to write about?
0: https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies https://www.bloomberg.com/news/features/2018-10-04/the-big-h...
- mtgx 8y agoI think it's possible Bloomberg's "tiny chip" was a BMC, and that BMC was found with a backdoor in it, but the backdoor may not have necessarily come "from factory," but was later added by someone else. Either way, this looks terrible for SuperMicro: "Yeah, our servers don't come with built-in backdoors - it's just SuperEasy™ for attackers to add one once shipped -- please buy more now."