7 ms·

How much hardware is actually made in the USA anymore? Most HW is manufactured in Taiwan, China, Korea, Thailand, Malaysia or maybe Mexico. I used to work for

How much hardware is actually made in the USA anymore? Most HW is manufactured in Taiwan, China, Korea, Thailand, Malaysia or maybe Mexico. I used to work for a router manufacturer that manufactured all of its equipment in Taiwan and Mexico. When we shipped to someone in Europe(for example) we shipped directly from Taiwan to Europe, not through the US. So I have to wonder how much of this stuff the NSA could actually get their hands on. The other question I have is what happens when there is an RMA, or the equipment is sent back for repair? Might someone notice that it's been tampered with? We need more specifics to really understand what was going on here. So many questions, no real answers.

pasbesoin 12y ago
This is not based upon any particular knowledge or expertise, but upon many years of casual observation, general news reporting, and anecdote from friends and whomever: Given their position as well as long-standing ties both politically and militarily as well as economically, I have to -- in my own mind -- seriously question the independence of anything of real interest to the U.S., that's happening in Taiwan. I don't mean that the Taiwanese aren't their own people with their own interests; nonetheless, I would expect to find their various systems rather thoroughly and effectively infiltrated. Again, I don't have any real knowledge in this regard. I'd welcome more knowledgeable comments in response to mine.
eyeareque 12y ago
I'm not sure how much is shipped directly from the over seas manufacturer to the customer. However, the NSA could be intercepting RMA hardware as well.
intslack 12y ago
Anything that's shipped from the US, basically. From the slides released with Greenwald's new book today: https://i.imgur.com/lCM0apx.png https://i.imgur.com/lCM0apx.png Here's the source, but be warned that this is a 90 MB pdf: http://hbpub.vo.llnwd.net/o16/video/olmk/holt/greenwald/NoPlaceToHide-Documents-Uncompressed.pdf http://hbpub.vo.llnwd.net/o16/video/olmk/holt/greenwald/NoPl...
- csandreasen 12y ago
  I get the feeling that if every router was being intercepted, that picture would look more like a giant series of assembly lines rather than three people casually sitting around a Cisco box.
  - intslack 12y ago
    Guess I should've been clearer: any equipment they're interested in that ships from the US is at risk. They don't need to go after all equipment. They only need to go after equipment being shipped to backbone providers abroad, and specific targets they are interested in that are "tough to crack." Further, if one believes that TAO is limiting themselves to terrorists buying Cisco equipment, I have a bridge to sell you. That's absurd considering they produly boast about their economic espionage, their spying on activists such as Wikileaks supporters and other "radicals," and their partners bragging about how they DDoS IRC chat rooms of hacktivists. One example: http://justsecurity.org/2013/11/29/nsa-sexint-abuse-youve-waiting/ http://justsecurity.org/2013/11/29/nsa-sexint-abuse-youve-wa... All of this is summarized in Greenwald's new book.
    - csandreasen 12y ago
      I don't expect them to be limiting themselves to terrorists - they're a foreign intelligence agency. I expect them to be gathering info on foreign governments, militaries, etc. (along with spying on terrorists). I've written about the NSA porno article before, so I'll just post the link to that thread[1]. The TLDR is that Greenwald seems to have left a good deal out of his reporting in order to both sensationalize and avoid discrediting his own argument. I haven't read his new book; maybe he addresses it in there. [1] https://news.ycombinator.com/item?id=6885325 https://news.ycombinator.com/item?id=6885325
      - intslack 12y ago
        No, but that's their justification the vast majority of the time. They don't limit it to foreign governments or militaries either. They do engage in economic espionage, fact. They do single out anyone they don't like which isn't limited to terrorists in these campaigns: "radicals", among them Wikileaks supports, fact. Stewart Baker has discredited himself[1], his opinion is worth jack shit frankly. I wouldn't trust anything he says, not only because he was behind many of these programs as council but also because of Eben Moglen's interactions with him during the almost-prosecution of Phil Zimmerman, and suggest you do the same. That the documents are 'sensationalized' is the favorite refuge of NSA goons: when Keith Alexander's comment about collecting it all became public, SEXINT, PRISM, etc. He talks about all of those and leaves no doubt that this characterization is horse shit after the third chapter. [1] http://www.skatingonstilts.com/skating-on-stilts/2014/04/hiding-in-plain-sight-evidence-that-nsa-isnt-wrecking-internet-security.html http://www.skatingonstilts.com/skating-on-stilts/2014/04/hid...
stuki 12y ago
I simply cannot fathom how the NSA could hope to intercept and physically mess with every single piece of $10 to $10,000 router sold. If true, and I have a hard time believing it is not, either this is done at the design level (and not just on router chips), or only for big ticket backbone and/or enterprise equipment.
- Someone 12y ago
  It doesn't have to be every $10 router. Plant one compromised router at each router factory, check when primary target X, Y or Z orders routers, intercept that shipment and hack each router.

pasbesoin 12y ago

This is not based upon any particular knowledge or expertise, but upon many years of casual observation, general news reporting, and anecdote from friends and whomever: Given their position as well as long-standing ties both politically and militarily as well as economically, I have to -- in my own mind -- seriously question the independence of anything of real interest to the U.S., that's happening in Taiwan. I don't mean that the Taiwanese aren't their own people with their own interests; nonetheless, I would expect to find their various systems rather thoroughly and effectively infiltrated. Again, I don't have any real knowledge in this regard. I'd welcome more knowledgeable comments in response to mine.

eyeareque 12y ago

I'm not sure how much is shipped directly from the over seas manufacturer to the customer. However, the NSA could be intercepting RMA hardware as well.

intslack 12y ago

Anything that's shipped from the US, basically. From the slides released with Greenwald's new book today: https://i.imgur.com/lCM0apx.png https://i.imgur.com/lCM0apx.png Here's the source, but be warned that this is a 90 MB pdf: http://hbpub.vo.llnwd.net/o16/video/olmk/holt/greenwald/NoPlaceToHide-Documents-Uncompressed.pdf http://hbpub.vo.llnwd.net/o16/video/olmk/holt/greenwald/NoPl...

csandreasen 12y ago
I get the feeling that if every router was being intercepted, that picture would look more like a giant series of assembly lines rather than three people casually sitting around a Cisco box.
- intslack 12y ago
  Guess I should've been clearer: any equipment they're interested in that ships from the US is at risk. They don't need to go after all equipment. They only need to go after equipment being shipped to backbone providers abroad, and specific targets they are interested in that are "tough to crack." Further, if one believes that TAO is limiting themselves to terrorists buying Cisco equipment, I have a bridge to sell you. That's absurd considering they produly boast about their economic espionage, their spying on activists such as Wikileaks supporters and other "radicals," and their partners bragging about how they DDoS IRC chat rooms of hacktivists. One example: http://justsecurity.org/2013/11/29/nsa-sexint-abuse-youve-waiting/ http://justsecurity.org/2013/11/29/nsa-sexint-abuse-youve-wa... All of this is summarized in Greenwald's new book.
  - csandreasen 12y ago
    I don't expect them to be limiting themselves to terrorists - they're a foreign intelligence agency. I expect them to be gathering info on foreign governments, militaries, etc. (along with spying on terrorists). I've written about the NSA porno article before, so I'll just post the link to that thread[1]. The TLDR is that Greenwald seems to have left a good deal out of his reporting in order to both sensationalize and avoid discrediting his own argument. I haven't read his new book; maybe he addresses it in there. [1] https://news.ycombinator.com/item?id=6885325 https://news.ycombinator.com/item?id=6885325
    - intslack 12y ago
      No, but that's their justification the vast majority of the time. They don't limit it to foreign governments or militaries either. They do engage in economic espionage, fact. They do single out anyone they don't like which isn't limited to terrorists in these campaigns: "radicals", among them Wikileaks supports, fact. Stewart Baker has discredited himself[1], his opinion is worth jack shit frankly. I wouldn't trust anything he says, not only because he was behind many of these programs as council but also because of Eben Moglen's interactions with him during the almost-prosecution of Phil Zimmerman, and suggest you do the same. That the documents are 'sensationalized' is the favorite refuge of NSA goons: when Keith Alexander's comment about collecting it all became public, SEXINT, PRISM, etc. He talks about all of those and leaves no doubt that this characterization is horse shit after the third chapter. [1] http://www.skatingonstilts.com/skating-on-stilts/2014/04/hiding-in-plain-sight-evidence-that-nsa-isnt-wrecking-internet-security.html http://www.skatingonstilts.com/skating-on-stilts/2014/04/hid...

stuki 12y ago

I simply cannot fathom how the NSA could hope to intercept and physically mess with every single piece of $10 to $10,000 router sold. If true, and I have a hard time believing it is not, either this is done at the design level (and not just on router chips), or only for big ticket backbone and/or enterprise equipment.

Someone 12y ago
It doesn't have to be every $10 router. Plant one compromised router at each router factory, check when primary target X, Y or Z orders routers, intercept that shipment and hack each router.