3 ms·
It happens a ton, and the hardware and software supply chains are more fragile than people realize. One book I was reading “Secrets of a Cybersecurity architec
by s4mw1se 3y ago
It happens a ton, and the hardware and software supply chains are more fragile than people realize.
One book I was reading “Secrets of a Cybersecurity architect” by Brook S.E Shoenfield stated that security starts at the physical port and all hardware must go through integrity checks before it can be used.
If my memory servers me right he was one of NSAs first cyber warfare and security architects.
I also have retired family that was SVP of Engineering at a major telecom and he said this is a practice they had to implement as well because backbone routers would go missing for three days during shipping and just show up with no excuses for the delay.
The book is worth a glance, i never finished but it’s pretty insightful.
Additionally, on podcast i will never remember, China circumvents the banned entities list by stealthy acquiring approved chip manufactures and not rebranding, and new ownership adds backdoor into the chips.