中共国 供应链 恶意芯片植入 事件

• 主
  • 2018.10.22 Super Micro to review hardware for malicious chips

    “Despite the lack of any proof that a malicious hardware chip exists, we are undertaking a complicated and time-consuming review to further address the article,” the server and storage manufacturer said in a letter to its customers, dated Oct. 18.
    ...
    Super Micro denied the allegations made in the report.
    
    The company said the design complexity makes it practically impossible to insert a functional, unauthorized component onto a motherboard without it being caught by the checks in its manufacturing and assembly process.
    

  • 2018.10.19 Apple CEO Tim Cook Is Calling For Bloomberg To Retract Its Chinese Spy Chip Story

    “There is no truth in their story about Apple,” Cook told BuzzFeed News in a phone interview. "They need to do that right thing and retract it."
    ...
    “We turned the company upside down,” Cook said. “Email searches, data center records, financial records, shipment records. We really forensically whipped through the company to dig very deep and each time we came back to the same conclusion: This did not happen. There’s no truth to this.”
    

  • 2018.10.9 New Evidence of Hacked Supermicro Hardware Found in U.S. Telecom

    The security expert, Yossi Appleboum, provided documents, analysis and other evidence ...
    ...
    Unusual communications from a Supermicro server and a subsequent physical inspection revealed an implant built into the server’s Ethernet connector, a component that's used to attach network cables to the computer, Appleboum said.
    

  • 2018.10.4 Setting the Record Straight on Bloomberg BusinessWeek’s Erroneous Article

    At no time, past or present, have we ever found any issues relating to modified hardware or malicious chips in SuperMicro motherboards in any Elemental or Amazon systems. Nor have we engaged in an investigation with the government.
    

  • 2018.10.4 What Businessweek got wrong about Apple

    Apple has never found malicious chips “hardware manipulations” or vulnerabilities purposely planted in any server. Apple never had any contact with the FBI or any other agency about such an incident. We are not aware of any investigation by the FBI, nor are our contacts in law enforcement.

  • 2018.10.4 The Big Hack: How China Used a Tiny Chip to Infiltrate U.S. Companies The Big Hack!
• 相关
  • 2018.10.22 Investigating Implausible Bloomberg Supermicro Stories
  • 2018.10.11 Kaspersky Lab Says Report Claiming China Hacked Apple's Former Server Supplier is Likely 'Untrue'

    The stories published by Bloomberg in October 2018 had a significant impact. For Supermicro, it meant a 40% stock valuation loss. For businesses owning Supermicro hardware, this can be translated into a lot of frustration, wasted time, and resources. Considering the strong denials from Apple and Amazon, the history of inaccurate articles published by Bloomberg, including but not limited to the usage of Heartbleed by U.S. intelligence prior to the public disclosure, as well as other facts from these stories, we believe they should be taken with a grain of salt.

  • 2018.10.8 Comment: Four more reasons it’s now inconceivable Apple lied about Chinese spy chips
    • Reasons:
      • 1. GCHQ statement
      • 2. Department Homeland Security echoed
      • 3. Reuters reports
      • 4. security researcher Brian Krebs said
  • 2017.2.23 Apple Severed Ties with Server Supplier After Security Concern
• 补充
  • 事件相关的 硬件骇客技术的 可能性和方法:

    Investigating Implausible Bloomberg Supermicro Stories 2018.10.22

    The China SuperMicro Hack: About That Bloomberg Report 2018.10.4