3 ms·
Possibly stupid/overly paranoid question: if most products are being made in China anyway, how do we know they’re not putting backdoors in everything including
by rcarr 4y ago
Possibly stupid/overly paranoid question: if most products are being made in China anyway, how do we know they’re not putting backdoors in everything including goods branded for non Chinese companies? Cables, power adapter etc all house chips nowadays. In theory couldn’t they have some kind of silent zero day virus on them, keylogger etc?
Does every product on sale get periodic testing to check for this kind of thing? It seems like they could manufacture clean devices to send to a test centre and then back door ones they release in the wild. In the case of non-brand goods such as cables it wouldn’t even really matter if they got caught because they could just spin up another drop ship company under a different name and keep selling.
- faeriechangling 4y ago> It seems like they could manufacture clean devices to send to a test centre and then back door ones they release in the wild. Glenn Greenwald already went over how the US did this, which is to intercept the devices in transit. That way the backdoors wouldn't be there for general IT personnel or reviewers or state security agents, but they would be there for the targets. https://www.theguardian.com/books/2014/may/12/glenn-greenwald-nsa-tampers-us-internet-routers-snowden https://www.theguardian.com/books/2014/may/12/glenn-greenwal...
- rcarr 4y agoLol I thought as much. At this point I think most people assume that any major global government can access whatever device you own if they really want to.
- worldsavior 4y agoIt would be a very stupid thing to do.
- pjc50 4y agoThe more prevalent the back door is, the more likely it is to be spotted. The UK has a specific intelligence service review process for Huawei: https://www.ncsc.gov.uk/collection/ncsc-annual-review-2021/technology/huawei-cyber-security-evaluation-centre https://www.ncsc.gov.uk/collection/ncsc-annual-review-2021/t... > Does every product on sale get periodic testing to check for this kind of thing? Other than in a very few intelligence-specific cases, nobody really cares very much about cybersecurity until they get ransomwared. Software everywhere is full of holes.
- crtasm 4y agoAs I couldn't see the report itself linked from there: https://www.gov.uk/government/publications/huawei-cyber-security-evaluation-centre-hcsec-oversight-board-annual-report-2021 https://www.gov.uk/government/publications/huawei-cyber-secu...