5 ms·
There are a multitude of ways that the boards they received could have been tampered with or even switched out and replaced with exact replicas without Supermic
by CTDOCodebases 3y ago
There are a multitude of ways that the boards they received could have been tampered with or even switched out and replaced with exact replicas without Supermicros knowledge or assistance.
As it says in the audit that Supermicro themselves performed "A representative sample of our motherboards were tested..." which basically means nothing since they didn't examine the boards in question. Lest we forget[0]. I doubt the NSA are the only ones engaging in this type of behaviour.
So as the Bitcoin people like to say "don't trust verify".
[0] - https://www.schneier.com/blog/archives/2015/03/cisco_shipping_.html https://www.schneier.com/blog/archives/2015/03/cisco_shippin...