3 ms·

>Intel ME is an abomination, but it's also well known and gets a lot of coverage. It's just not in the mainstream news right this minute. It was probably only

>Intel ME is an abomination, but it's also well known and gets a lot of coverage. It's just not in the mainstream news right this minute. It was probably only a topic on technical forums. Technical question, can't you build a drone that does not need OTA updates from manufacturer ? You have it connect only to your trusted IPs. Also sending the high definition photos to China won't appear on anybody network traffic? You just need 1 person to detect it and you have the some kind of proof(though when a similar thing happened with Amazon Alexa it was blamed as a bug and not espionage).

Junk_Collector 7y ago
>Technical Question Of course you can, but even then you're still trusting the firmware that is being put out by the potentially hostile company even if you gate keep it. To check it would require a software team at least as large as the potentially hostile one for any serious attack. That's a big economic incentive to trust the manufacturer. >sending the high definition photos Or you could just send metadata, telemetry, and flight diagnostics that can be used to build up sensitive information under the guise of metrics. Remember that the NSA was mostly just using metadata too. >it was blamed as a bug and not espionage In these cases, the two look exactly the same in software, so proving one or the other is very difficult.
- simion314 7y ago
  So from your points all Chinese products should be made illegal until China will not be a threat to US, this means until China collapses or kisses US butt.
usrusr 7y ago
> You have it connect only to your trusted IPs. Wi-Fi makes that pretty damn hard to verify. In theory, malicious firmware could even opportunistically link up with other malicious firmware acting as a bridge via some undocumented protocol that would only be detectable by looking at the raw spectrum.
- simion314 7y ago
  yeah, but we should think and implement security measures in all systems indifferent of politics and economics. Imagine some terrorists hacks Tesla server and sends a command for all cars to crash. We would need all important systems to be designed in the assumption that something bad will eventually happened(hackers, company goes out of business, stupidly(see Firefox addons issue) ) etc

Junk_Collector 7y ago

>Technical Question Of course you can, but even then you're still trusting the firmware that is being put out by the potentially hostile company even if you gate keep it. To check it would require a software team at least as large as the potentially hostile one for any serious attack. That's a big economic incentive to trust the manufacturer. >sending the high definition photos Or you could just send metadata, telemetry, and flight diagnostics that can be used to build up sensitive information under the guise of metrics. Remember that the NSA was mostly just using metadata too. >it was blamed as a bug and not espionage In these cases, the two look exactly the same in software, so proving one or the other is very difficult.

simion314 7y ago
So from your points all Chinese products should be made illegal until China will not be a threat to US, this means until China collapses or kisses US butt.

usrusr 7y ago

> You have it connect only to your trusted IPs. Wi-Fi makes that pretty damn hard to verify. In theory, malicious firmware could even opportunistically link up with other malicious firmware acting as a bridge via some undocumented protocol that would only be detectable by looking at the raw spectrum.

simion314 7y ago
yeah, but we should think and implement security measures in all systems indifferent of politics and economics. Imagine some terrorists hacks Tesla server and sends a command for all cars to crash. We would need all important systems to be designed in the assumption that something bad will eventually happened(hackers, company goes out of business, stupidly(see Firefox addons issue) ) etc