5 ms·

Or maybe someone told the developer to implement a backdoor and this was the only way they thought they could do it? Can someone explain what we get by assumin

Or maybe someone told the developer to implement a backdoor and this was the only way they thought they could do it? Can someone explain what we get by assuming the Chinese are just so inept at technology (they aren't) that we give them the benefit of the doubt that this is a naive mistake here?

Ekaros 6y ago
To me it is the most logical option. It really comes down to what we pay for. If we order the cheapest possible unit price from China(or anywhere else in the world), we can't really expect them to care or even have the best people work on it. As clearly we don't either. Just look at IoT crap produced around the world. Are they inept, or is security an after thought? On other hand I believe that companies like Huawei are capable of very special things just like western counterparts.
mr_toad 6y ago
> Can someone explain what we get by assuming the Chinese are just so inept at technology (they aren't) that we give them the benefit of the doubt that this is a naive mistake here? Hardware manufacturers in general have a pretty poor reputation for security & software engineering, Chinese or otherwise. It’s not like Cisco has been vulnerability free.
JeremyNT 6y ago
This has nothing to do with this being a Chinese device, and everything to do with it being a low cost consumer device. The incentives for quality code here are incredibly weak, and the incentives for caring about security are basically zero. What damage does this vulnerability cause to Jetstream as a brand? It's not like they're going to lose many sales from people who read tech news sites. If you need to get something working at the cheapest price point possible, you cut all the corners you can - especially in the ways that don't manifest until outside the return period. Paying senior developers and doing external code audits are luxuries you can't really afford.

Ekaros 6y ago

To me it is the most logical option. It really comes down to what we pay for. If we order the cheapest possible unit price from China(or anywhere else in the world), we can't really expect them to care or even have the best people work on it. As clearly we don't either. Just look at IoT crap produced around the world. Are they inept, or is security an after thought? On other hand I believe that companies like Huawei are capable of very special things just like western counterparts.

mr_toad 6y ago

> Can someone explain what we get by assuming the Chinese are just so inept at technology (they aren't) that we give them the benefit of the doubt that this is a naive mistake here? Hardware manufacturers in general have a pretty poor reputation for security & software engineering, Chinese or otherwise. It’s not like Cisco has been vulnerability free.

JeremyNT 6y ago

This has nothing to do with this being a Chinese device, and everything to do with it being a low cost consumer device. The incentives for quality code here are incredibly weak, and the incentives for caring about security are basically zero. What damage does this vulnerability cause to Jetstream as a brand? It's not like they're going to lose many sales from people who read tech news sites. If you need to get something working at the cheapest price point possible, you cut all the corners you can - especially in the ways that don't manifest until outside the return period. Paying senior developers and doing external code audits are luxuries you can't really afford.