Tuesday, 11 December, 2018

Security researcher named in China spy chip story voices doubts

Extreme close-up of a network port EnlargeEric Kilby Flickr
Katie Ramirez | 11 October, 2018, 12:37

The data centers of roughly 30 US companies, as well as some USA government contractors, were said to have been affected.

A major United States telecommunications company discovered manipulated hardware from Supermicro in its network and removed it in August, fresh evidence of tampering in China of critical technology components bound for the United States, according to a security expert working for the telecom company.

Reports of manufacturing shenanigans have continued this week with Sepio Systems' co-CEO, Yossi Appleboum, providing further proof of hacked motherboards used in servers, this time at an unnamed USA telecommunications company.

He said that unusual communications from a Supermicro server and a subsequent physical inspection revealed an implant built into the server's Ethernet connector, a component that's used to attach network cables to the computer.

On the possible failure of adequate fact checking, earlier this week one of the security experts that Bloomberg spoke to in order to explain how the claimed spy chip would actually work, Joe Fitzpatrick, gave an interview to Aussie veteran infosec journalist Patrick Gray in which Fitzpatrick said he had told the Bloomberg spy-chip reporters of his doubts that it was feasible and that he was "uncomfortable" with the final article.

Investor response to the outlet's claims has been strong: On publication of the original story Supermicro's stock dropped 41 percent, with a further 27 percent loss following this latest report. "That's the problem with the Chinese supply chain", he said.

"The security of our customers and the integrity of our products are core to our business and our company values", said a representative for Supermicro in an emailed statement. "We take care to secure the integrity of our products throughout the manufacturing process and follow rigorous industry quality and security standards".

More news: How to Watch Samsung Galaxy A9 Launch Live Stream

"We still have no knowledge of any unauthorized components and have not been informed by any customer that such components have been found", Supermicro said. "We are dismayed that Bloomberg would give us only limited information, no documentation, and half a day to respond to these new allegations".

While targeted companies have been quick to refute the hack, U.S. officials are not discarding it outright and did not comment on the goings-on. Read all the detail at Bloomberg here.

While supply-chain threats emanating from China are certainly a concern, Joyce said, "what I can't find are any ties to the claims that are in the article". Supermicro, according to last week's Bloomberg report, is the hardware manufacturer whose motherboards were modified in the factory to include a tiny microchip that caused attached servers to come under the control of a previously unreported division of China's People's Liberation Army.

"It would be wonderful for China if it could integrate internal storage, a CPU and wireless communications in such a tiny chip", said Zhang Baichuan, founder of cybersecurity website youxia.org. "The fact is, China's chip technology is still at a primary stage".

Bloomberg News has received information from security research firm, Sepio Systems, that a prominent U.S. telecom has also fallen to the Chinese supply chain attack, adding another notch to the People Liberation Army's (PLA) belt.

Apple has, however, issued a very strong denial, which has been backed up by reports from the Federal Bureau of Investigation, casting doubt on Bloomberg's claims.

On Monday, Apple execs sent a letter to the House and Senate commerce committees urging lawmakers to pressure Supermicro to brief them about the alleged breach.

Recommended

  • Selena Gomez Has 'Emotional Breakdown' and Now Receiving Mental Health Treatment

    The website claims she is now being treated with dialectical behaviour therapy (DBT) at an East Coast psychiatric facility. The Heart Wants What It Wants hitmaker announced on September 24 that she was taking a break from social media.
    Microsoft buys into ride-hailing firm Grab

    Microsoft buys into ride-hailing firm Grab

    Being a leading provider of these services, Grab serves customers in around 235 cities across eight Southeast Asian countries. To improve map creation and quality, Grab plans to tap into the power of Microsoft's machine learning capabilities.
    Quake kills three people in Indonesia's Java, rattles Bali

    Quake kills three people in Indonesia's Java, rattles Bali

    It struck the island of New Britain this morning, and the Pacific Tsunami Warning Centre said there is now a threat of a tsunami. Memorials will be constructed in hard-hit neighbourhoods such as Balaroa and Petobo, he said. "People are traumatized.
  • Princess Eugenie hires the Beckham's party planner for royal wedding

    Princess Eugenie hires the Beckham's party planner for royal wedding

    When Prince Harry and Meghan Markle tied the knot on May 19, the public deemed it the wedding of the year. While Prince Harry and Markle invited 600 people to St.

    Stocks have their worst day in months; Dow drops 800-plus points

    But eventually the high rates worry stock investors, as higher rates tend to increase borrowing costs and cut into profit margins. Higher rates can slow economic growth, erode corporate profits and make investors less willing to pay high prices for stocks.
    US Open, PGA winner Koepka voted PGA Tour Player of Year

    US Open, PGA winner Koepka voted PGA Tour Player of Year

    Koepka, 28, this year became the fifth player to win both of those majors in the same season, the first since Tiger Woods in 2000. Open at Shinnecock Hills to become the first player to go back-to-back since 1989.
  • Pokemon Go Reveals How to Catch Meltan

    Pokemon Go Reveals How to Catch Meltan

    Last month, Pokemon Go shocked the world with the surprise introduction of a new Pokemon species - the mythical Pokemon Meltan. Plenty Meltan are all over the page, including one you can rotate freely to get a better look at the liquid metal 'mon.
    Grey's Anatomy casts Josh Radnor as love interest for Meredith

    Grey's Anatomy casts Josh Radnor as love interest for Meredith

    Meredith then revealed that she had never met her lunch date ... and didn't even know what he looked like. Radnor will guest star in the October 11 episode as a mystery man on a blind date with Meredith.
    Stardew Valley is headed to iOS this month and then Android

    Stardew Valley is headed to iOS this month and then Android

    The mobile version will offer players the full game, which is nearly identical to the PC version. If you haven't heard of Stardew Valley , it's basically Harvest Moon but a pixelated version.
  • Trump calls stock sell-off 'a correction,' says Federal Reserve is 'crazy'

    After a long stretch of relative calm, the stock market has suffered sharp losses over the last week as bond yields surged. Ahead of a campaign rally for the U.S. mid-term elections, Trump told reporters: "I think the Fed is making a mistake".
    China’s Urumqi Takes Aim at ‘Extremist’ Religious Practices

    China’s Urumqi Takes Aim at ‘Extremist’ Religious Practices

    Chinese authorities deny that the internment camps exist but say petty criminals are sent to vocational "training centres". Unrest between Uighurs and members of the ethnic Han Chinese majority has seen hundreds killed in recent years.
    Democrats to force health care vote Wednesday in the Senate

    Democrats to force health care vote Wednesday in the Senate

    But critics said Kavanaugh's demeanor raised questions about his temperament and potential political bias in deciding cases. Baldwin pointed to one plan sold in her state that she said does not cover hospital care on a Friday or Saturday.

Soyuz crew reportedly alive after emergency landing Russian and US space officials said that the crew is heading for an emergency landing in Kazakhstan at an unspecified time. Russian and USA space officials said the crew made an emergency landing in Kazakhstan at an unspecified time.

See Hurricane Michael from Space in These Satellite Images See Hurricane Michael from Space in These Satellite Images The hurricane is expected to make landfall Wednesday in Florida before crossing Georgia and the Carolinas as a weaker storm. Offshore oil platforms in the Gulf of Mexico have evacuated workers, halting almost a fifth of daily production.

Hurricane Michael Weakens to Category 1 Storm Hurricane Michael Weakens to Category 1 Storm As it came ashore, Michael was just shy of a Category 5 - defined as a storm packing wind speeds of 157 miles per hour or above. A man in Greensboro, Florida, was killed when a tree fell on his house, a spokesperson for the Gadsden County sheriff said.

The 'scary-looking' view of Hurricane Michael from the International Space Station The 'scary-looking' view of Hurricane Michael from the International Space Station But without extensive study, they can not directly link a single weather event to the changing climate. Forecasters expect Michael to be the strongest storm to hit the area in more than a decade.

Tech, luxury goods lead Wall Street slide Tech, luxury goods lead Wall Street slide The S&P 500 index hasn't suffered a five-day losing streak since November 2016, just before the USA presidential election. USA stock exchanges recorded biggest losses in 8 months as rising interest rates made investors flee risky stocks.

EU far-right leaders take on Brussels EU far-right leaders take on Brussels According to analysts at Danske Bank, in Europe the Italian Job continues to raise risks of "blowing the bloody doors off". The nation's benchmark FTSEMIB stock index fell to its lowest level since April 2017.

Messi's life to feature in new Cirque du Soleil show Messi's life to feature in new Cirque du Soleil show Past shows based on real people have included "The Beatles Love", "Viva Elvis", and two derived from the work of Michael Jackson.

Turkish newspaper names 15 Saudis in case of missing reporter Turkish newspaper names 15 Saudis in case of missing reporter Khashoggi was last seen on October 2 entering the Saudi consulate in Istanbul to get documents for his forthcoming marriage. The issue threatened the strong relationship the Trump administration has constructed with Mohammed Bin Salman .

Sinnoh Pokemon Are Coming to Pokemon Go Sinnoh Pokemon Are Coming to Pokemon Go Defense and stamina stats will also be rebalanced, allowing Pokemon with high defense to better outlast attacks. Soon, this game will get fourth-generation Pokemon, as well as various minor tweaks and improvements.

On World Mental Health Day, Emotional Deepika Padukone Says She's #NotAshamed WHO, in its recommendations, called for the integration of mental health into primary healthcare. Chance's tweet drew praise from others on Twitter , with many expressing thanks for his empathy.

HPV Vaccine Approved For Adults Up To 45 HPV Vaccine Approved For Adults Up To 45 There now is a shortage of Shingrix, the vaccine to protect people 50 and older against the painful nerve condition of shingles. For the study, the team investigated almost 600 men who have sex with men, or MSM, and transgender women in Lima, Peru.

Google Home Hub - Google Assistant With A Display Plus, the device supports Google's Voice Match, so up to six people in your home can get their own personalised Mourning Routine. While video calls are useful, most people are pretty comfortable using their smartphone for all things communication-related.

Swift wins at AMAs, encourages fans to vote Swift wins at AMAs, encourages fans to vote Less than 48 hours after her post, more than 169,000 new people had registered to vote, more than half of whom were aged 18 to 29. If you believe that climate change is real and that we need to do something about it...

'Ozark' Renewed for Season 3 at Netflix - Jason Bateman, Laura Linney 'Ozark' Renewed for Season 3 at Netflix - Jason Bateman, Laura Linney Despite mixed reviews for its first two seasons, Ozark has emerged as something of a kudos darling. Netflix has officially booked a return trip to the Ozarks.

Noah Syndergaard Cleverly Trolls Yankees After Game 4 Loss Vs. Red Sox Noah Syndergaard Cleverly Trolls Yankees After Game 4 Loss Vs. Red Sox To open their league championship series, the Red Sox and Houston Astros are sticking with their rotation from the ALDS. Manager Alex Cora opted to stick with Price, despite his poor outing against the Yankees in Game 2 of the ALDS.