On Tue, Dec 11, 2018 at 7:49 PM Neil Bothwick <n...@digimed.co.uk> wrote:
> > So tell us what is your perfect country for hardware manufacturing? > > There isn't one as you can never be sure. You are presenting hope, and > maybe likelihood, as certainty when this does not exist. > Datapoint - looks like Bloomberg is starting to walk back its complete support of the original implant story. https://www.bloomberg.com/news/articles/2018-12-11/super-micro-says-third-party-test-found-no-malicious-hardware Also they have assigned another reporter that was not involved in the original story, to attempt to verify the claims of the original story... Others have made the point that the Amazon and Apple denials left them no wriggle room in the event that implants are found and shareholders launch a class action, and that this indicates a genuine belief that there are no backdoors. Considering risk; If you are of interest to a nation state, you're pretty much stuffed anyway, and I think this discussion has been around implants made via Chinese government action. The management processor issue is a real problem because they're not well understood, on by default, cant be (or cant easily) be disabled, and has to be software maintained. However, given all the other issues like the never ending stream of security issues in software, i'm not sure it changes the overall risk profile significantly. Only time will tell. Sorry for further polluting your thread Dale :)
