3 ms·

But it's in the software which ships with this chips and is meant to be used by everyone using the chip. > Many such devices on the market today are based on H

But it's in the software which ships with this chips and is meant to be used by everyone using the chip. > Many such devices on the market today are based on HiSilicon (a Huawei brand) hi3520d ARM SoC running a special Linux distribution called HiLinux, with a set of user-space utilities and a custom web application on top. (emphasis mine) So while this is not a hardware backdoor it's in no way less problematic. EDIT: Which you never said it was... Anyway it's useful to know that it's the software which is chipped alongside with the chip and not some arbitrary 3rd party software some arbitrary OEM put on-top of it.

yorwba 6y ago
That the chip is running an operating system provided by the chip manufacturer does not imply the OEM didn't add their own stuff. Even the part you emphasized includes the "custom web application on top" which is probably not provided by HiSilicon. (Otherwise, what's custom about it?)
- nitrogen 6y ago
  That could mean custom to HiSilicon rather than something off the shelf from the Linux world?
PragmaticPulp 6y ago
Read Huawei’s breakdown of each claim: https://www.huawei.com/en/psirt/security-notices/2020/huawei-sn-20200917-01-hisilicon-en https://www.huawei.com/en/psirt/security-notices/2020/huawei... They defend HiSilicon and suggest that the vulnerabilities were introduced on top of the SDK by the vendor.