3 ms·
Yeah, it seems this is all just buggy application code. The title should probably be changed to something less suggestive, particularly given current paranoia a
by jml7c5 6y ago
Yeah, it seems this is all just buggy application code. The title should probably be changed to something less suggestive, particularly given current paranoia around Chinese surveillance.
- throwaway4good 6y agoHey ... we need the clicks and the traffic ...
- yokaze 6y agoCVE-2020-24215. Full administrative access with hard-coded password: https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/#backdoor-password-cve-2020-24215 https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabili... Commonly known as backdoor.
- a1369209993 6y agoThey're not claiming it's not a backdoor; they're claiming the backdoor is not in "HiSilicon based hardware video encoders", but rather in management software associated with said encoders. The former would be near impossible to fix, whereas the latter can (supposedly) easily be replaced. Edit: to be clear: 1, I don't know that the backdoor isn't in the hardware itself, but that's what they're claiming. 2, it sounds like the software in question is the manufacturer-provided drivers for the hardware, which is worth emphasizing, but not the same as the hardware itself being compromised.
- Yc4win 6y agoExactly. I see the usual suspects are dancing around the fact since it's Chinese.
- rasz 6y agoThis is trivial to validate, HiSilicon SDK can be downloaded from https://dl.openipc.org/SDK/HiSilicon https://dl.openipc.org/SDK/HiSilicon