Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>There is probably no good reason to distrust Huawei

Backdoors? Being caught red handed doing espionage? Cozying up to bad actors like North Korea and Iran?



What backdoors? Didn't the UK audit telecoms and networking equipment and say that they have shoddy security in some places ( like having telnet) but aren't worse than the shoddy security in "good" vendors like Cisco and Juniper.


No audit is guaranteed to find a backdoor if one is present.

It simply isn't possible - any more than you could get an audit guaranteeing the Linux kernel is bug-free.


But if nobody has found any backdoors, including with an audit by a security agency, how can OP use "backdoors" as an argument against Huawei?


In the realm of no experts, everybody is expert.


Indeed. As someone somewhat familiar with "underhanded code" contests (not as a participant) and publicly known espionage norms. I'm unsure why people expect backdoors to have massive MOTD banners and not be reintroduced OpenSSL vulns from 2006 that "accidentally" got into the build process for certain releases of firmware 11 years later (this happened with the UK Huawei audit iirc). I'm also unsure why people expect specific examples of known backdoors when that in itself hurts counter espionage efforts.


> Backdoors? Being caught red handed doing espionage? Cozying up to bad actors like North Korea and Iran?

Are we talking about Huawei here or any number of US companies?


> Cozying up to bad actors like North Korea and Iran?

You'll probably feel a need to shit on a flag when you realise that an allied Swiss company (ABB) sold North Korea a two nuclear power plants when Rumsfeld was on the board of directors.

https://www.swissinfo.ch/eng/rumsfeld-was-on-abb-board-durin...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: