4 ms·
Didn't the UK last year rip into Huawei after reviewing the networking software, finding something like 18 different versions of OpenSSL inside of it with vario
by Tsarbomb 6y ago
Didn't the UK last year rip into Huawei after reviewing the networking software, finding something like 18 different versions of OpenSSL inside of it with various vulnerabilities. At some point, continuing a trend of stupidity should be considered malice.
- StudentStuff 6y agoHuawei promised to fix these horrible security issues after a code review in 2012 and the establishment of the HCSEC oversight board in 2014, yet HCSEC found Huawei had not fixed the issues found in 2012 in their 2018 report, at which point Huawei promised to spend $2 billion to improve code security. IIRC the 2019 report from HCSEC outlined the same bugs had yet to be fixed. I think Huawei doesn't want to fix bugs in products they aren't currently selling (in part based on Nortel code that has been patched over the last decade with new features), thus the lies and lack of investment. More reading: https://www.fiercewireless.com/wireless/uk-says-huawei-equipment-has-major-security-flaws https://www.fiercewireless.com/wireless/uk-says-huawei-equip... and https://aragonresearch.com/cyber-war-flashback-remembering-the-huawei-hack-of-cisco-and-nortel/ https://aragonresearch.com/cyber-war-flashback-remembering-t...
- panpanna 6y agoA less generous interpretation would be that Huawei cannot fix the code since they were the not the ones who wrote it on the first place.