4 ms·

So when we upgrade the hardware, how much of it will be sourced from China? Is it even possible to fully secure the supply chain? Introducing any outside code

So when we upgrade the hardware, how much of it will be sourced from China? Is it even possible to fully secure the supply chain? Introducing any outside code or hardware is a liability. Unless there is a really urgent problem, I think they should just freeze their entire computer platform, that way they can eliminate any chance of any new threats. I can not possibly imagine any cost justification for doing so. I have no problem with taxpayer money being spent to keep ancient computers running forever. Keeping our nuclear missiles secure is priceless. What new features do they even need that they don't have now? The thought of some ux monkey using npm anywhere near our ICBMs makes my physically ill.

benj111 7y ago
"What new features do they even need that they don't have now?" That's not the question you should be asking. The question you should be asking is, what features would the Commander in Chief want?
- nobatron 7y ago
  Twitter integration probably.
otaviokz 7y ago
"The thought of some ux monkey using npm anywhere near our ICBMs makes my physically ill." Almost spilled my coffee reading this one.
- SEJeff 7y ago
  Sorry Sir, we can't launch because that jerk removed left-pad from the npm registry!
metaphor 7y ago
> So when we upgrade the hardware, how much of it will be sourced from China? FYSA[1], would it surprise you if that figure was precisely zero? [1] https://www.dmea.osd.mil/trustedic.html https://www.dmea.osd.mil/trustedic.html
- apostacy 7y ago
  That is good, but, supply chains are still a major attack vector. I think we should try to minimize that. I am quite certain that there are no Chinese back doors in hardware that was put in the ground in the early 1980s. Security wise, we can only go downhill from there.
  - PostOnce 7y ago
    https://www.theverge.com/2014/5/7/5688760/the-navy-built-an-e-reader-nerd https://www.theverge.com/2014/5/7/5688760/the-navy-built-an-... They do make a fairly substantial effort.

benj111 7y ago

"What new features do they even need that they don't have now?" That's not the question you should be asking. The question you should be asking is, what features would the Commander in Chief want?

nobatron 7y ago
Twitter integration probably.

otaviokz 7y ago

"The thought of some ux monkey using npm anywhere near our ICBMs makes my physically ill." Almost spilled my coffee reading this one.

SEJeff 7y ago
Sorry Sir, we can't launch because that jerk removed left-pad from the npm registry!

metaphor 7y ago

> So when we upgrade the hardware, how much of it will be sourced from China? FYSA[1], would it surprise you if that figure was precisely zero? [1] https://www.dmea.osd.mil/trustedic.html https://www.dmea.osd.mil/trustedic.html

apostacy 7y ago
That is good, but, supply chains are still a major attack vector. I think we should try to minimize that. I am quite certain that there are no Chinese back doors in hardware that was put in the ground in the early 1980s. Security wise, we can only go downhill from there.
- PostOnce 7y ago
  https://www.theverge.com/2014/5/7/5688760/the-navy-built-an-e-reader-nerd https://www.theverge.com/2014/5/7/5688760/the-navy-built-an-... They do make a fairly substantial effort.