4 ms·
For points 1 and 2 at least, the UK has the Huawei Cyber Security Evaluation Centre where GCHQ can inspect all Huawei hardware as well as the source code, altho
by matthewheath 7y ago
For points 1 and 2 at least, the UK has the Huawei Cyber Security Evaluation Centre where GCHQ can inspect all Huawei hardware as well as the source code, although it is run by former Huawei employees (overseen by GCHQ) so its independence is questionable.
- timthorn 7y agoThe staff are actively employed by Huawei, but all undergo UK security clearance to DV standard.
- hardlianotion 7y agoI believe the centre cannot satisfy itself that the code they inspect is the code that is built into the hardware.
- gnfargbl 7y agoYes. ...it is not possible to be confident that the source code examined by HCSEC is precisely that used to build the binaries running in the UK networks. -- https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/790270/HCSEC_OversightBoardReport-2019.pdf https://assets.publishing.service.gov.uk/government/uploads/...