Slashdot Mirror


Feds Ask IT Execs To Throw Away Cellphones After Visiting China

sholto writes "US intelligence agencies are advising top US IT executives to weigh their laptops before and after visiting China as one of many precautions against corporate espionage. Symantec Chief Technology Officer Mark Bregman said he was also advised to buy a new cellphone for each visit and to throw it away after leaving. Bregman said he kept a separate MacBook Air for use in China, which he re-images on returning, but claimed he didn't subscribe to the strictest policies. 'Bregman said the US was also concerned about its companies employing Chinese coders, particularly in security.'"

271 of 382 comments (clear)

  1. huh by JeanBaptiste · · Score: 4, Funny

    how much does data weigh? I'm sure the 1's are heavier than the 0's....

    1. Re:huh by thefear · · Score: 5, Insightful

      Data may be weightless, but how about hardware key logging devices?

      --
      :(
    2. Re:huh by fridaynightsmoke · · Score: 1

      how much does data weigh? I'm sure the 1's are heavier than the 0's....

      I'd have thought the 0's would be heavier, them being all fat-looking and the 1's all skinny..
      Seriously though, I think that the 'weighing' scheme is intended to detect the addition of malicious hardware (however likely or not this may be).

      --
      This is a substitute for a clever sig that fits within the maximum number of characters.
    3. Re:huh by gzipped_tar · · Score: 2, Funny

      It is reported by the uptime command (system "load"). When the CPU is busy its weight increases; when you turn it off it weighs exactly zero. That's why they ask you to turn off your laptop when your airplane is taking off: to save oil by reducing weight ;)

      --
      Colorless green Cthulhu waits dreaming furiously.
    4. Re:huh by bheekling · · Score: 1

      I'm tempted to make a funny reply about how entropy increases cause a change in mass...

      However, I'm pretty sure they're talking about hard-hacks, aka "chips under your keyboard" to listen in to network traffic, keyboard usage, hard disk IO, VGA screen dumping and what not.

      --
      "..."
    5. Re:huh by JeanBaptiste · · Score: 5, Funny

      Yeah, but only the 1's contain data. The 0's are empty.

    6. Re:huh by thefear · · Score: 3, Informative

      malicious hardware (however likely or not this may be).

      I would argue that it isn't all that unlikely. Keylogging devices can be cheaply purchased for consumers, and we already know of cases where China has broken into hotel rooms, stollen blackberry's, etc.

      I actually consider it unlikely that they WOULDN'T be installing keyloggers in the laptops of execs who frequently travel to china.

      --
      :(
    7. Re:huh by Chrisq · · Score: 2, Insightful

      Now they know that we weigh them it wouldn't be that hard to cut the equivalent weight. There are plenty of internal struts that can be drilled, etc to make up for a lightweight hardware device.

    8. Re:huh by Chrisq · · Score: 4, Funny

      If you two keep arguing about 1s and 0s my monitor will fall through the desk. Type some spaces quick.

    9. Re:huh by Telecommando · · Score: 2, Funny

      You young punks are lucky.

      In my day we didn't have ones and zeros, we had to use l's and O's and we were damn luck to have them.

      --
      Beta sux! Join the Slashcott! http://hardware.slashdot.org/comments.pl?sid=4760465&cid=46173047
    10. Re:huh by Anonymous Coward · · Score: 2, Funny

      Yeah you.

    11. Re:huh by jackharrer · · Score: 1

      And how much breadcrumbs in keyboard do? So do they also suggest to hoover the keyboard before?

      --

      "an experienced, industrious, ambitious, and often, quite often, picturesque liar" - Mark Twain
    12. Re:huh by gardyloo · · Score: 4, Funny

      Filter error: Please use less whitespace.

          Sorry, man. You'll just have to buy a stronger desk.

    13. Re:huh by Rude+Turnip · · Score: 1

      While this is a funny and lighthearted question on Slashdot, this is a real question for certain demographics:
      http://www.geeksaresexy.net/2009/08/07/how-much-does-data-weigh/

    14. Re:huh by vlm · · Score: 5, Interesting

      how much does data weigh? I'm sure the 1's are heavier than the 0's....

      In the punchcard / papertape era, it was obviously the other way around, 0s are heavier, 1s (punched out) are lighter.

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    15. Re:huh by fridaynightsmoke · · Score: 1

      Now they know that we weigh them it wouldn't be that hard to cut the equivalent weight. There are plenty of internal struts that can be drilled, etc to make up for a lightweight hardware device.

      If they wanted to be really clever, they could desolder selected chips and replace them with chips having 'additional functionality', so to speak.

      --
      This is a substitute for a clever sig that fits within the maximum number of characters.
    16. Re:huh by mweather · · Score: 3, Insightful

      Or just add the additional features at the factory and skip the desoldering altogether.

    17. Re:huh by MadnessASAP · · Score: 2, Funny

      You had O's? We had to use the Q key.

      --
      I may agree with what you say, but I will defend to the death your right to face the consequences of saying it.
    18. Re:huh by fridaynightsmoke · · Score: 1

      Or just add the additional features at the factory and skip the desoldering altogether.

      Indeed, sir.
      http://slashdot.org/comments.pl?sid=1370863&cid=29440227

      --
      This is a substitute for a clever sig that fits within the maximum number of characters.
    19. Re:huh by PitaBred · · Score: 3, Funny

      Allow me to be the first to say... "whooooosh"

    20. Re:huh by Shakrai · · Score: 4, Interesting

      Data may be weightless, but how about hardware key logging devices?

      That reminds me of a Cold War story I heard once upon a time. The CIA worked with a Xerox technician to secretly install a camera inside the machine(s) at the Soviet embassy. They got away with it for a long time because those old machines were so complicated that only a handful of people knew how they really worked.

      This is just the modern day equivalent. If your hardware is out of your sight even for a few moments it should be treated as though it was compromised. If it's worked on by someone that you don't trust implicitly then it should be treated as though it was compromised.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    21. Re:huh by MiniMike · · Score: 1

      There's also the possibility that they would replace hardware with their own 'special' version, rather than add something completely new. In either case, they could scrape the equivalent weight in crud off of (or under) the keyboard of many laptops I've seen.

    22. Re:huh by supernova_hq · · Score: 4, Funny

      Hey cool, the hotel fixed all the scatches in my cellphone while I was having a shower. This calls for a BIG tip to housecleaning!

    23. Re:huh by Lumpy · · Score: 1

      Exactly, as all them are made in China to begin with.

      Nobody can afford a US made laptop. It would make a top of the line Toughbook look like it was cheap.

      --
      Do not look at laser with remaining good eye.
    24. Re:huh by Eevee · · Score: 4, Funny

      They knew the camera was there, but they were too overcome with joy that the copier wasn't constantly broken to care.

    25. Re:huh by b4dc0d3r · · Score: 5, Interesting

      An airplane builder had its proprietary metal reverse engineered by asian companies. They did a great job with security, so couldn't figure out how the metals got sampled. People can't just go scrape parts off a military airplane, especially when it's not built yet.

      They gave tours and you couldn't take pictures, but you could see planes being built.

      Turns out asians were using very soft-soled shoes. So while looking up and pointing, they pressed their feet down on metal filings, and when they drove away they had samples in their shoes, to be analyzed later.

      Sneaky bastards work in corporate espionage.

    26. Re:huh by natehoy · · Score: 3, Funny

      Yes, we had O. To do a "Q", you did an O, then backspaced and typed a comma over it.

      --
      "This post contains words, known to the State of California to cause thought. Wash brain thoroughly after reading."
    27. Re:huh by buswolley · · Score: 5, Insightful

      I understand the concern but...all our computers are made in China anyway. How dow e know if the Hardware isn't betraying us already?

      --

      A Good Troll is better than a Bad Human.

    28. Re:huh by Mister+Whirly · · Score: 1

      I don't know, but I hear the software keyloggers weigh much less...

      --
      "But this one goes to 11!"
    29. Re:huh by Mister+Whirly · · Score: 1

      If your hardware is out of your sight even for a few moments it should be treated as though it was compromised.

      Apparently you have never had the joy of taking apart one of the old iBooks. (It takes about 35 minutes and removing about 17 screws just to get to the hard drive.)

      --
      "But this one goes to 11!"
    30. Re:huh by joocemann · · Score: 2, Funny

      China, a country, broke into a hotel room and stole blackberrys?

      please reword...

    31. Re:huh by Tony+Hoyle · · Score: 3, Insightful

      Power supplies, computers, phones, etc. All stamped with 'made in china'.

      Everything down to the component level is produced there. If they wanted to bug them they could do it at any point during manufacture.

    32. Re:huh by Tony+Hoyle · · Score: 2, Funny

      Perhaps he's talking about a secret band of mafia cutlery?

    33. Re:huh by Reece400 · · Score: 1

      I wonder how many kids will think you're completely making that up?

    34. Re:huh by Darth+Cider · · Score: 5, Informative

      No, the Soviets did that. Here's an old George Will column relating the tale. The subject of the column is Soviet industrial espionage.

    35. Re:huh by MiniMike · · Score: 1

      If you can remove 15 g of crud from your cellphone, the bugs you should be worrying about are not the ones the Chinese put in your cellphone.

    36. Re:huh by GodfatherofSoul · · Score: 5, Interesting

      It is. There was a story a few months ago about the Department of Defense using router hardware sent to them with onboard hacks.

      --
      I swear to God...I swear to God! That is NOT how you treat your human!
    37. Re:huh by appleprophet · · Score: 1

      Hold on, I couldn't quite hear you underneath through your suit of tinfoil armor.

      Let me get this straight, you're asking how do we know that Chinese manufacturers haven't secretly bugged enough computers in the US so that when signs on, there is a non-trivial chance that he is running industrially sabotaged hardware?

      This is absolutely ridiculous, but given that it's a +5, insightful question, here are just a few issues:

      - It would require a massive conspiracy, like none we have ever seen.
      - Apple, Dell, etc. are not so incompetent in their QA that they would not know that the hardware is somehow phoning home.
      - The sum of the worlds nerds are not so dumb that they would not notice all hardware phoning home.
      - It is too expensive to bug every machine, natural competition would favor companies who do not install this extra stuff.
      - China would face political ruin by trying to pull a stunt like this if it was discovered that they were spying on the world.

    38. Re:huh by LanMan04 · · Score: 4, Informative

      Yes, bugged/compromised hardware coming out of China is most definitely a concern.

      TRUST ME, people in high places in the Fed Gov look into this stuff on a regular basis.

      --
      With the first link, the chain is forged.
    39. Re:huh by JAlexoi · · Score: 3, Insightful

      US had to import and inspect bricks to USSR, just because they were once provided with bricks each containing a microphone! Can you imagine a building made of those bricks!

    40. Re:huh by Mikkeles · · Score: 1

      'I'm sure the 1's are heavier than the 0's....'

      Nonsense, surely the diameter is shorter than the circumference?

      --
      Great minds think alike; fools seldom differ.
    41. Re:huh by Stradivarius · · Score: 2, Insightful

      It would require a massive conspiracy, like none we have ever seen.

      Not really, all it would require is a few people in the right places in a couple of high-market-share manufacturers. If you built something into the tools used by those manufacturers, it could be transparent.

      Also, you don't need to own every device. You could choose to target critical infrastructure devices - say a router, switch, DPI equipment or whatever. Something that handles lots of traffic and thus is well-positioned for either intelligence collection or denial/disruption of service.

      Apple, Dell, etc. are not so incompetent in their QA that they would not know that the hardware is somehow phoning home.

      Maybe it only phones home after receiving some sort of signal (such as a predetermined sequence of packets, packets with certain formatting, etc). QA testing is unlikely to uncover something like that, and even if they do may have a hard time reproducing it (which may make them less likely to pursue it).

      The sum of the worlds nerds are not so dumb that they would not notice all hardware phoning home.

      As above, it doesn't have to be all hardware, nor so stupid as to phone home regularly, or even without receiving an activation signal. That would attract unnecessary attention.

      Also, if you're targeting infrastructure devices, they handle so much traffic that it seems possible one could slip in some extra transmissions out without notice.

      It is too expensive to bug every machine, natural competition would favor companies who do not install this extra stuff.

      Competition favors those with the most capability for the lowest price. An intelligently designed surveillance or disruption module would not degrade capability during normal operation. It would be a sleeper agent until triggered.

      The marginal cost of another copy of software is zero. And the initial development cost would likely be picked up by the intelligence agency, not the company that was infiltrated. So the presence of such equipment would have no effect on competition.

      And if the company management was aware of the operation, they could even be given secret subsidies by the government to make them more competitive in the marketplace by artificially lowering the cost of their products. This would help ensure success of the trojan.

      China would face political ruin by trying to pull a stunt like this if it was discovered that they were spying on the world.

      How would anyone know the software was government-created, and not just one of the many unfortunate cases of malware infections we've seen at OEMs in the past?

      I'm not saying China or anyone else is necessarily doing any of this stuff. But it wouldn't surprise me. Nations do a lot worse in the world of espionage.

    42. Re:huh by hackingbear · · Score: 3, Insightful

      Or more likely, they acted as if they didn't know, but just passed fake document over the machines to fool the enemy.

    43. Re:huh by dave562 · · Score: 3, Interesting

      I submitted a story here about a year or so ago about Maxtor hard drives with compromised firmware that were made in China. It never got picked up. Go figure.

    44. Re:huh by nazsco · · Score: 2, Interesting

      1. install phoning home hardware on all devices
      2. disable them by default
      3. enable them with some radiation or other mean (just like erasing an EPROM with utraviolet light)
      4. wait for key people to arrive under your control so you know their devices. turn on homming components.
      5. ???
      6. profit!

    45. Re:huh by Ihmhi · · Score: 1

      Presumably this kind of stuff is checked before parts are approved for governmental purchase.

    46. Re:huh by Ihmhi · · Score: 2, Interesting

      Holy shit, I had no idea that you could look up old newspapers on Google. Thanks a bunch man.

      Also, George Will is one badass motherfucker. Almost as badass as Paul Mulshine.

    47. Re:huh by buswolley · · Score: 1

      Thank you.

      --

      A Good Troll is better than a Bad Human.

    48. Re:huh by jonadab · · Score: 1

      > Everything down to the component level is produced there. If they
      > wanted to bug them they could do it at any point during manufacture.

      It wouldn't be cost effective to bug all of the computers made, and then who would analyze all of the data? It's a self-defeating proposition.

      On the other hand, a chance to plant a bug in one particular device that is known to belong to a strategically *important* person, that's different.

      --
      Cut that out, or I will ship you to Norilsk in a box.
    49. Re:huh by jimmydevice · · Score: 1

      Never presume anything. I've lost a few jobs doing exactly that.

    50. Re:huh by bmomjian · · Score: 1

      I know the Soviet's did this to the UK:

          http://www.absoluteastronomy.com/topics/Klimov_VK-1

      Are you sure it was an Asian company?

    51. Re:huh by Imrik · · Score: 1

      You don't have to analyze all the data, you just need to find out which bugs are on the computers that may have the data you want. (not that I think they're actually doing this)

    52. Re:huh by FreakstaXIII · · Score: 2, Interesting

      There was also a story about them using lenovo computers on CIA networks to get data (it was all unclassified) thats what started the fear about the routers and what not, so they started looking and thats what they found

    53. Re:huh by forgotten_my_nick · · Score: 1

      TBH just focusing on China is laughable. Some years back the EU did a report on ECHELON and what they got up to on what you consider is your allies.

      http://www.europarl.europa.eu/sides/getDoc.do;jsessionid=7B9ED0C4A4792505626B9FE5464FFC33.node1?language=EN&pubRef=-//EP//TEXT+REPORT+A5-2001-0264+0+NOT+XML+V0//EN

      Well worth the read.

      There was also another report on Israels spying on the USA. Some months back, but I don't have the URL handy.

  2. One word... by Anonymous Coward · · Score: 1, Insightful

    Paranoia.

    1. Re:One word... by PhilHibbs · · Score: 5, Insightful

      It's not paranoia if they really are out to get you. And we have plenty of evidence that the Chinese really are. Actually, the intelligence agencies probably just forgot to say "because we're doing all this stuff to their top executives when they visit us".

    2. Re:One word... by ryanov · · Score: 5, Funny

      Don't they have a right to know how their money is spent? ;)

    3. Re:One word... by bickerdyke · · Score: 1

      Oh.. the chinese.. Ahh.. yes.. of course.... riiiight.....

      http://wissen.spiegel.de/wissen/dokument/dokument.html?id=13501796&top=SPIEGEL

      --
      bickerdyke
    4. Re:One word... by mdm-adph · · Score: 1

      Zing!

      --
      It is by my will alone my thoughts acquire motion; it is by the juice of the coffee bean that the thoughts acquire speed
    5. Re:One word... by jonadab · · Score: 1

      Paranoia is a basic job requirement for security people.

      --
      Cut that out, or I will ship you to Norilsk in a box.
  3. Industrial espionage? by jmpeax · · Score: 5, Funny

    Symantec Chief Technology Officer Mark Bregman [...] was advised to buy a new cellphone for each visit

    Yes, heaven forbid China learns the secret of bloated antivirus software that ignores state-sponsored keyloggers.

    1. Re:Industrial espionage? by mrdoogee · · Score: 4, Funny

      What a coincidence! I advise people to buy new software after every Symantec install!

    2. Re:Industrial espionage? by polle404 · · Score: 1

      News at 11,
      Symantec launches new product to detect and remove/disable Industrial espionage soft/hardware...

      --

      ~men are from earth. women are from earth. deal with it.~
    3. Re:Industrial espionage? by demachina · · Score: 2, Insightful

      I'm wondering if Symantec will be closing down their China Development Center in Bejing since Symantec has been developing security software in China for a few years now. Don't know how you reconcile these draconian security concerns with having a major development center in said country... developing security software for use in the west.

      It is interesting how the Obama administration seems to be much less accommodating to the Chinese than the Bush administration was. The Bush administration bent over backwards for China and all the multinationals that wanted to move all their operations, R&D, jobs, capital and IP in to the hands of the Chinese though the Chinese government is still basically the same one which was an bitter adversary 30-40 years ago and against whom the U.S. and U.N. waged a never concluded war in Korea.

      Its amazing how all the Chinese had to do was create a free economic zone on their southern coast, declare profit and capitalism OK there, and use the flashing dollar signs as a snare to get the west to unilaterally capitulate economically and politically without a shot being fired.

      --
      @de_machina
    4. Re:Industrial espionage? by syousef · · Score: 1

      What a coincidence! I advise people to buy new software after every Symantec install!

      Don't you mean hardware? It's damn near impossible to uninstall that stuff.

      --
      These posts express my own personal views, not those of my employer
  4. Manufacture by fridaynightsmoke · · Score: 5, Funny

    I'm sure glad that the laptops and cellphones in question weren't MADE in China in the first place...
    Oh, wait..

    --
    This is a substitute for a clever sig that fits within the maximum number of characters.
    1. Re:Manufacture by bheekling · · Score: 3, Insightful

      Do you think it would go undetected for long if thousands of cellphones and laptops made in China, Korea or wherever had a hardware sneak-chip installed?

      Do you think it would be worth the effort to seed just a few of those thousands for some possible marginal gain? (Also keep in mind that specialized changes wreak havoc on an assembly line's schedule)

      Much easier to just target the fish directly.

      --
      "..."
    2. Re:Manufacture by fridaynightsmoke · · Score: 2, Interesting

      Do you think it would go undetected for long if thousands of cellphones and laptops made in China, Korea or wherever had a hardware sneak-chip installed?

      For the sake of argument, yes. It would be entirely feasible for EVERY unit of a certain (or any) product to have a 'sneak chip' installed, it could very easily be 'baked in' to the IC designs used.
      I believe (meaning I don't have a link to evidence :( ) that an attack has been demonstrated using this exact method, whereby a certain bit pattern on a certain bus triggered malicious behaviour.
      There was also a real case in the UK whereby chip-and-pin credit card readers (used in retailer's POS setup) had a 'sneak chip' built in at the factory by unscrupulous agents. (I am aware that this both supports the 'it could happen' and the 'it would be detected quickly' arguments.)
      Just to be clear, I'm not expressing any Anti or Pro Chinese sentiment here, but it seems somewhat ironic to be concerned about what "The Chinese" might do to compromise one's hardware, when that same hardware was designed and manufactured by "The Chinese" in the first place!

      --
      This is a substitute for a clever sig that fits within the maximum number of characters.
    3. Re:Manufacture by WinterSolstice · · Score: 5, Interesting

      In a word? YES.
      It would require actual competence to detect a piece of hardware that essentially did nothing until activated and simply sat on a motherboard. Do you know if there are extremely detailed inspections done on every piece of circuitry brought into country X from country Y? I know for a fact that in a certain very large defense company I worked for lots of "surprises" were found on a regular basis. Typically things like parts that were different from the specs, insects, and on occasion completely incorrect assemblies.

      The funny part was these nearly all made it past QA and into the finished products, only to be discovered when something failed.

      So based on that, I'd say that *if* someone were choosing to do something like this, it would be fairly easy to sneak it past the level of moron that would typically be doing these inspections.

      Tinfoil hats aside - the real trick is getting the data back off again. It's trivial to convince a cell phone (for example) to record conversations while appearing off. The trick is to get to the data without anyone noticing, while you're in a foreign (possibly hostile) nation. I'd think someone would notice if a cell phone was constantly 'phoning home'.

      Doing this with a laptop would also be trivial, but I would hope that the firewall filter would catch outbound connections to unusual sites?

      --
      An operating system should be like a light switch... simple, effective, easy to use, and designed for everyone.
    4. Re:Manufacture by supernova_hq · · Score: 1

      Or this could be a diversion...

    5. Re:Manufacture by mpe · · Score: 1

      the real trick is getting the data back off again. It's trivial to convince a cell phone (for example) to record conversations while appearing off. The trick is to get to the data without anyone noticing, while you're in a foreign (possibly hostile) nation. I'd think someone would notice if a cell phone was constantly 'phoning home'.

      Thing is that "phoning home" or at frequently trying to contact it's home network is exactly the sort of behaviour you can expect from a roaming phone.

    6. Re:Manufacture by mpe · · Score: 1

      It would require actual competence to detect a piece of hardware that essentially did nothing until activated and simply sat on a motherboard.

      In the case of a phone the activation might require you to connect to a specific network.
      It's not as if you actually need anything special in the phone. Having the telephone network automatically "tap" all foreign phones and international calls is perfectly possible. Not just to the Chinese either...

    7. Re:Manufacture by Tony+Hoyle · · Score: 2, Insightful

      Screw the phone.. the cell towers are all made by the chinese anyway (Round here Huewei make most of them).

      And the DSL connections, and the routers connecting them to the internet..

    8. Re:Manufacture by greyhueofdoubt · · Score: 1

      If they were making my iPhone transmit anything- anything at all- I'd know because every speaker and loose wire within 15 feet would start buzzing and ticking.

      I am aware that other phones do that, but the iPhone was my first 3G* phone. It has led to several embarrassing moments, such as standing before the Major's desk at attention while he tried to troubleshoot his buzzing speakers, or accidentally setting the phone on my home sound system's amp only to crap my pants in the middle of a movie when waves of digital transmission harmonics are blasted through the PRE-amplified audio circuit...

      So- I don't worry too much about it.

      *or whatever hellish technology makes radio waves think they should make themselves audible.

      --
      No offense, but I've stopped responding to AC's.
    9. Re:Manufacture by WinterSolstice · · Score: 1

      That's GSM, IIRC - and Blackberry phones do that so badly it's common to hear it on conference calls. Even being *close* to electronics they will cause that.

      I haven't noticed it so bad with some models of phones, I guess it depends. My Blackberry would blast right over my car stereo, but my HTC Magic (same carrier) hasn't done it yet.

      --
      An operating system should be like a light switch... simple, effective, easy to use, and designed for everyone.
    10. Re:Manufacture by dave562 · · Score: 1
      Tinfoil hats aside - the real trick is getting the data back off again. It's trivial to convince a cell phone (for example) to record conversations while appearing off. The trick is to get to the data without anyone noticing, while you're in a foreign (possibly hostile) nation. I'd think someone would notice if a cell phone was constantly 'phoning home'.

      You might be making things too complicated. Once the conversation has been recorded it's pretty simple to do things the old fashion way. Just steal the device.

    11. Re:Manufacture by WinterSolstice · · Score: 1

      True enough - can't beat that for simplicity

      --
      An operating system should be like a light switch... simple, effective, easy to use, and designed for everyone.
    12. Re:Manufacture by syousef · · Score: 1

      I know for a fact that in a certain very large defense company I worked for lots of "surprises" were found on a regular basis. Typically things like parts that were different from the specs, insects, and on occasion completely incorrect assemblies.

      You guys get your laptops from Dell too huh?

      --
      These posts express my own personal views, not those of my employer
    13. Re:Manufacture by SL+Baur · · Score: 1

      The trick is to get to the data without anyone noticing, while you're in a foreign (possibly hostile) nation. I'd think someone would notice if a cell phone was constantly 'phoning home'.

      My (Japanese) CDMA phone didn't pick up any signal in China, so yeah, I guess it was always trying to connect to a cell tower.

    14. Re:Manufacture by SomeStupidNickName12 · · Score: 1

      Yes GSM, but only when connecting with a 2G quality signal - with a 3G quality signal that doesn't happen

  5. Horse, close the barn door! by Neil+Watson · · Score: 1, Insightful

    The laptops and cell phones were probably manufactured there. In fact most US businesses outsource there manufacturing overseas.

    1. Re:Horse, close the barn door! by LurkerXXX · · Score: 4, Insightful

      Here's the thing...

      If EVERY laptop and cell phone phoned home to China to give away secrets, somebody is gonna notice. REAL quick.

      They need to more selectively target folks if they want to actually be able to get away with hacking a machine to send them secret data.

    2. Re:Horse, close the barn door! by gad_zuki! · · Score: 1

      Sure, but it looks like they are concerned over the ol' switcheroo and hardware keyloggers. You cant put that in every device, but if you can separate the exec from his phone or laptop for 15-25 mins then youre golden.

    3. Re:Horse, close the barn door! by Moryath · · Score: 1

      15-25? Try 5. On many laptops you could get to a good access point right under the easily-removable keyboard.

    4. Re:Horse, close the barn door! by Neil+Watson · · Score: 2, Insightful

      Agreed. I was alluding to the fact that since execs outsource to China then China would already know many corporate secrets. Grey market goods often come from the same plants that make authentic goods.

    5. Re:Horse, close the barn door! by Lord+Ender · · Score: 5, Funny

      This is why the bugs are only activated when they detect an integer overflow error in any document called "personal finances.xls". With this method, they can be sure they're on an American executive's computer.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    6. Re:Horse, close the barn door! by ColdWetDog · · Score: 5, Funny

      15-25? Try 5. On many laptops you could get to a good access point right under the easily-removable keyboard.

      This, friends, is the real reason behind the famed Apple design of no user serviceable parts. Not to save weight, not to give Apple a few measly bucks for battery replacements but to prevent FOREIGN ESPIONAGE. Think about that that when you drop your Dell and 12 little plastic panels pop off.

      You Windows folks aught to be shot as spies.

      --
      Faster! Faster! Faster would be better!
    7. Re:Horse, close the barn door! by networkconsultant · · Score: 1

      Next time you find a covert channell you let the public know that your latest gadget that's going to make you and your stockholders rich was made in china and has 3 covert channells!

    8. Re:Horse, close the barn door! by LurkerXXX · · Score: 2

      I'm sure folks who share certain secrets with a partner in China who is doing their outsourced work already know that their is already a laptop in china 'all the time' with those secrets on them. No need to wait for a US exec to come over.

      The point of this policy is to keep other secrets that haven't been shared, out of China and away from danger.

    9. Re:Horse, close the barn door! by Anonymous Coward · · Score: 4, Insightful

      You're falling into the same trap that got the electronic voting people. It is not at all obvious if an electronic device has a backdoor function. You can change the software to react to a complicated trigger sequence, or worse, you can change the hardware to do it. Unless you deconstruct the device to the point of rendering it unusable, there is no way to reliably detect "sleeper" functions. This is especially dangerous if the bug is in all devices and not just a few "interesting" ones, so that comparisons between devices don't show any deviation.

    10. Re:Horse, close the barn door! by supernova_hq · · Score: 2, Insightful

      Knowing the math issues and stability in excel 2007, almost anyone could activate that...

    11. Re:Horse, close the barn door! by Idiomatick · · Score: 1

      Laptops are generally ordered by people, why not bug them then? I know my laptop from lenovo could have easily been bugged had they decided i was worthy.

    12. Re:Horse, close the barn door! by Torontoman · · Score: 1

      In that light - I once read a funny thing that I use to this day.

      If you want to hide things in a folder on your computer - label that folder "Instruction Manuals".

    13. Re:Horse, close the barn door! by StikyPad · · Score: 1

      That word, aught... I do not think it means what you think it means.

    14. Re:Horse, close the barn door! by ColdWetDog · · Score: 1

      I ought to read my posts a bit more carefully. It's awfully easy just to look for squiggly lines.

      --
      Faster! Faster! Faster would be better!
    15. Re:Horse, close the barn door! by JustOK · · Score: 1

      Or to PREVENT detection of already ready installed nasty stuff.

      --
      rewriting history since 2109
  6. Worthless by afidel · · Score: 4, Interesting

    The same outsources plants that produce the goods just do a second run at night to produce grey market versions. Microsoft found this out after finding perfect counterfeit copies of their software that were only distinguished by having serial numbers that were never activated in their database, the plants that were producing packaging and holograms for their official packing were making exact duplicates for the counterfeiters.

    --
    There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    1. Re:Worthless by Bert64 · · Score: 1

      Same thing happens with dvds, clothes, and all manner of other things... And yet they still try to claim counterfeit copies are inferior?

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  7. PCs and phones *are* made in China by pmontra · · Score: 5, Interesting

    How about using phones and notebooks manufactured in China? Is that ok or do we have to assume they are bugged-at-factory? Are the US starting to move their production lines back to home?

    1. Re:PCs and phones *are* made in China by Yvanhoe · · Score: 5, Insightful

      I read the article, and I stopped when it became clear that this information comes from Symantec. Your favorite over-paranoid, FUD-spreading company.

      --
      The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
    2. Re:PCs and phones *are* made in China by TheRaven64 · · Score: 4, Interesting

      The NSA has already expressed concerns over this. I don't know if this ever got turned into policy, but there are still chip fabs in the USA and Europe and I think Dell still makes PCs in Texas, so it is possible that government contracts require US-made computers containing US-made components. Of course, it only takes one compromised component to compromise the whole system...

      --
      I am TheRaven on Soylent News
    3. Re:PCs and phones *are* made in China by T+Murphy · · Score: 1

      But I'm sure there's a Symantec product I can buy to protect myself from this "paranoia" and "FUD-spreading"?

    4. Re:PCs and phones *are* made in China by Cro+Magnon · · Score: 4, Insightful

      I'm sure it IS a good idea to throw away any cellphone or laptop that has any Symantec product installed.

      --
      Slow down, cowboy! It has been 4 hours since you last posted. You must wait another few hours.
    5. Re:PCs and phones *are* made in China by mrdoogee · · Score: 1

      Symantec "Mass Detector" 2010*! In stores November 1st!
      The Patented Device is guaranteed to weigh any PC, or non-Apple smartphone! Introductory deal: $300 for the device, with a 6 week subscription to the activation system for only $80!

      Act today!

      *device not compatible with Symantec Mass Detector 2009 mass definitions, or Mass detector 2009 subscriptions.

    6. Re:PCs and phones *are* made in China by mlts · · Score: 1

      On the higher end of the paranoia scale, if the chip fabbing equipment is from offshore, it can introduce its own items. There is always the exercise for the reader about having hidden code in a compiler introducing compromised code into anything it compiles, the ultimate rootkit (in theory) scenario.

    7. Re:PCs and phones *are* made in China by TheRaven64 · · Score: 1

      This is orders of magnitude harder to do; in fact it's not feasible with current technology. A fab gets a mask as input, which contains pictures of where all of the traces should go. To compromise this, you'd need some software that could understand how the chip worked and modify it in an undetectable way. The technology needed to do this is much more complex than the technology needed to design the chips in the first place. Basically, if you could do this, you wouldn't; you'd just make chips that cost a couple of orders of magnitude less to design than the competition and then buy them out in a few years time and put the compromises in the original design.

      --
      I am TheRaven on Soylent News
    8. Re:PCs and phones *are* made in China by superyooser · · Score: 1

      I smell a meta-conspiracy. The TRUTH is that the Chinese are ginning up this fear so that Americans will buy more (China-made) electronics.

    9. Re:PCs and phones *are* made in China by StikyPad · · Score: 1

      it is possible that government contracts require US-made computers containing US-made components.

      Yeah, no. The government buys from domestic companies as much as possible, but it's not a requirement. Aside from that, many of Dell's components are sourced from overseas, and apart from the anemic configurations at premium prices, the PCs the government purchases are identical to the consumer versions. Plenty of other hardware is purchased directly from foreign companies as well.

      That said, there's really no reason to source from domestic companies exclusively, because domestic companies are not inherently more trustworthy, and treating them as if they were would be a mistake from a security perspective. It is therefore the role of Information Assurance (IA) to ensure that there is no data leakage from ANY system. How well they perform that task is another matter entirely.

    10. Re:PCs and phones *are* made in China by aaaantoine · · Score: 1

      I like that this is modded Insightful instead of Funny. It says a lot about what Slashdot users think of Symantec.

  8. Related story by BadAnalogyGuy · · Score: 2, Interesting

    It's almost impossible to tell whether additional software has been installed unless you either 1) diff your HDD (hard and time consuming) or 2) weigh the laptop and see if any data has been added. The government is, for once, correct and providing helpful information.

    More on this topic at this old Slashdot story.

    1. Re:Related story by PenisLands · · Score: 1

      The weighing is to detect the presence of hardware keyloggers and other such things.

    2. Re:Related story by camperdave · · Score: 2, Insightful

      Not necessarily. A keyboard controller chip with keylogging software will weigh exactly the same as a keyboard controller chip without keylogging software.

      --
      When our name is on the back of your car, we're behind you all the way!
  9. The real story by Ukab+the+Great · · Score: 5, Funny

    The real story in the article should be "CTO of world's largest Windows security software company uses a mac."

    1. Re:The real story by Jason+daHaus · · Score: 3, Interesting

      Also that he doesn't let his IT department near his laptop. Thats a level of distrust that, as an IT guy, drives me absolutely bonkers.

    2. Re:The real story by mbone · · Score: 4, Insightful

      Sounds sensible to me.

    3. Re:The real story by CharlyFoxtrot · · Score: 1

      Maybe he has some documents detailing the latest downsizing & outsourcing plans on it. He's visiting china after all.

      --
      If all else fails, immortality can always be assured by spectacular error.
    4. Re:The real story by chaim79 · · Score: 1

      It may make sense in his situation... he may have an IT department that is MS only, being an executive he has the privilege of using what he wants, but he knows that the IT department is clueless with Macs so he does his own work.

      --
      DEMETRIUS: Villain, what hast thou done?
      AARON: Villain, I have done thy mother.
      Shakespeare invents 'your mom'
    5. Re:The real story by TheKidWho · · Score: 1

      I don't care who you are, I'm not letting anyone near my laptop ;-)

    6. Re:The real story by Lorien_the_first_one · · Score: 1

      Agreed.

      --
      The diversity and expression of human opinion is essential to human survival.
    7. Re:The real story by rohan972 · · Score: 1

      Also that he doesn't let his IT department near his laptop. Thats a level of distrust that, as an IT guy, drives me absolutely bonkers.

      On the other hand, you'd hope that a CTO could handle his own laptop sufficiently well without help from anyone.

  10. Don't use a "cell phone" in China by ickleberry · · Score: 1

    Its far too easy for the Communist government to tap into those, a Thuraya or Iridium satellite phone should be a bit harder but if I went to China I'd still be using a one-time pad to send messages home.

  11. Orginal date of warning? by NoYob · · Score: 3, Interesting

    I'm just curious. Isn't it a bit of a coincidence that this warning comes out when there is a growing trade dispute with China happening now? We have been using China as our factory an major offshoring partner for quite a few years and now there are warnings.

    --
    It's NOT me! It's the meds! I'm on 1000mg of Fukitol.
  12. They must be that good. by Stu1706 · · Score: 1

    So they are able to bug your cell phone while it is in your pocket or in your hotel room charging. Or do they check all cell phones at the door like in The Dark Knight? Even when you RTFA it does not give you any support for these claims. I think he is a little paranoid.

    1. Re:They must be that good. by mosch · · Score: 1

      For the cell phone, maybe they're concerned about China pushing out OTA firmware upgrades?

    2. Re:They must be that good. by TheRaven64 · · Score: 4, Informative

      Pick your pocket while you're waking down the street, copy the contents across into a trojaned version, and then slip the replacement back into the victim's pocket. Or, if that's hard, tell them they dropped their phone and hand it back.

      It's also a good idea to make sure you turn your phone on at the airport before you get on the plane to China. When a phone registers with a new cell, it passes on the ID of the last cell it was affiliated with (to allow routing tables to be updated). MI6 was wondering a few years ago how the Russians were able to spot their people so easily, until they realised that they were turning off their phones at the headquarters in London when they went in and then not turning them back on again until they stepped off the plane. As soon as they turned them back on, they broadcast a nice little message to the cell tower at the airport saying 'the last place I went to was very near the MI6 building' which was flagging them for extra surveillance.

      --
      I am TheRaven on Soylent News
    3. Re:They must be that good. by japhering · · Score: 1

      Pick your pocket while you're waking down the street, copy the contents across into a trojaned version, and then slip the replacement back into the victim's pocket. Or, if that's hard, tell them they dropped their phone and hand it back.

      Why go to that much work, just set up a small site in a confined area and simply send new firmware to any cell phone you decide you need to be able to control.

  13. Re:Chinese Coders? by bheekling · · Score: 5, Insightful

    It's not racial profiling, it's (current or previous) nationality profiling, you know, the information that's visible on your passport?

    --
    "..."
  14. What about Chinese nationals? by bezenek · · Score: 4, Interesting

    (The following discussion is based on real experiences and is not meant to profile people, but to state facts.)

    This is really ridiculous. If the Chinese want to steal our technology, all they have to do is to contact several of the thousands of Chinese nationals who are working in the US until they find someone who needs money or other help for their family back in China.

    One company I worked for had a Chinese national who was not allowed to work on part of a project because it was protected technology. The same person could have dropped the entire project onto their iPod and carried it out the door, but did not.

    The ethics problem is represented by an experience I had while at an American research university. A Chinese faculty member met with the Chinese students in order to tell them in America, cheating and other ethical breaches are not considered a good way to get ahead. This suggested certain cultural differences which should not be used to discriminate, but need to be recognized because of the risks involved.

    -Todd

    --
    Omne ignotum pro magnifico.
    1. Re:What about Chinese nationals? by Chrisq · · Score: 4, Insightful

      ... all they have to do is to contact several of the thousands of Chinese nationals ...

      History shows that approaching US Nationals with enough money can also have the desired affect.

    2. Re:What about Chinese nationals? by digitalhermit · · Score: 1

      This truly is ridiculous.

      The ethics problem is represented by an experience I had while at an American research university. A Chinese faculty member met with the Chinese students in order to tell them in America, cheating and other ethical breaches are not considered a good way to get ahead. This suggested certain cultural differences which should not be used to discriminate, but need to be recognized because of the risks involved.

      In my junior high and high school (John F. Kennedy Jr. and North Miami Beach Sr.) there was rampant cheating. There was note passing, stolen test copies, students writing down questions to pass to others in the next class. This didn't affect me so much as the attitude among the students that the classes really didn't matter and they were in fact being smarter for having cheated the system.

      Ethical breaches are everywhere and that's what kids do here to get ahead.

      And I can say proudly that I never cheated. I worked my ass off to get my grades and took the bad grades with the good.

      KLL

    3. Re:What about Chinese nationals? by xplenumx · · Score: 4, Informative

      The ethics problem is represented by an experience I had while at an American research university. A Chinese faculty member met with the Chinese students in order to tell them in America, cheating and other ethical breaches are not considered a good way to get ahead. This suggested certain cultural differences which should not be used to discriminate, but need to be recognized because of the risks involved.

      While I certaily wasn't at that talk (and I suspect that neither were you), I'm willing to bet that you don't completely understand what the talk was about. I'm on the faculty of a top tier reserch insitution conducting immunological research - I've had several Chinese graduate students, have sat on the international admissions committee, and have given the talk that you describe to our new Chinese students. The problem isn't one of ethics, but one of culture. The Chinese don't regard plagiarism the same way we do - in fact, the educational system encourages it in a way as it is an honor, of sorts, to 'plagiarize' your mentor. Additionally, a lot of these students don't have confidence in their english, so whey they write they occassionally take an idea from another article and copy it verbatim thinking "that's exactly what I was thinking, and I don't have to worry about incorrect english" - in most cases, there is not an intention of deceit. The Chinese certainly have their issues (admitting mistakes and nationalism), but I wouldn't call them unethical.

    4. Re:What about Chinese nationals? by immakiku · · Score: 1

      I think the point you both want to get at is that you shouldn't judge other people by your standards of ethics and morals. As long as they conform to their own standards of ethics or morals, it wouldn't be right to call them unethical, no matter the differences between your standards and their standards.

    5. Re:What about Chinese nationals? by bezenek · · Score: 1

      While I certaily wasn't at that talk (and I suspect that neither were you), I'm willing to bet that you don't completely understand what the talk was about. ... The problem isn't one of ethics, but one of culture. The Chinese don't regard plagiarism the same way we do - in fact, the educational system encourages it in a way as it is an honor, of sorts, to 'plagiarize' your mentor...

      I was at the talk. I understood the problem to be what one culture considers ethical, another might not. Thank you for clarifying this. Since I did not grow up in China, I do not understand the issue as well as someone who did, but I now feel I understand it better than I did.

      Thank you,

      -Todd

      --
      Omne ignotum pro magnifico.
    6. Re:What about Chinese nationals? by khchung · · Score: 1

      Another theory would be you need to tell those students (who have never been to the US) how actual life in the US is. Even though they read about people like Madoff earning gazillions by cheating, and watched many US movies where cheating and lying works, they would actually get into big trouble if they try to do that themselves.

      Native USians have no idea how their news and movies (those that made it to other countries) portray their own country to the world.

      --
      Oliver.
    7. Re:What about Chinese nationals? by geminidomino · · Score: 2, Funny

      A Chinese faculty member met with the Chinese students in order to tell them in America, cheating and other ethical breaches are not considered a good way to get ahead.

      They are, however, considered invaluable in *staying* ahead once you get there.

    8. Re:What about Chinese nationals? by craagz · · Score: 1

      The Chinese nationals might do it for free, actually.

    9. Re:What about Chinese nationals? by ak3ldama · · Score: 1

      Moderation: -1 Horse Shit.

      --
      "but money is the God of Algiers & Mahomet their prophet." - Rich. O'Bryen June 8th 1786
    10. Re:What about Chinese nationals? by Shotgun · · Score: 2, Insightful

      I think the point you both want to get at is that you shouldn't judge other people by your standards of ethics and morals. As long as they conform to their own standards of ethics or morals, it wouldn't be right to call them unethical, no matter the differences between your standards and their standards.

      So, if another culture finds it acceptable to force pre-teen girls into prostition rings, it wouldn't be right to call it unethical? How about if their culture allowed for the slaying of a girl that "embarrassed" the family? What about a culture that abandons their old or sick?

      I'm sorry you've been overcome by so much political correctness, but moral relativism is bullshit. I have a moral compass, and I'm not ashamed of it. I choose not to deal with people or companies that purposely lie, cheat and steal. I will not make excuses like "things are done differently where they come from." If they do things like that there, then they are liers, cheaters and thieves. If it is a cultural thing, then it is a nation of liers, cheaters and thieves.

      --
      Aah, change is good. -- Rafiki
      Yeah, but it ain't easy. -- Simba
    11. Re:What about Chinese nationals? by chiguy · · Score: 1

      The same person could have dropped the entire project onto their iPod and carried it out the door, but did not.

      Or so you think.

      --
      passetspike!
    12. Re:What about Chinese nationals? by doesnothingwell · · Score: 1

      A Chinese faculty member met with the Chinese students in order to tell them in America, cheating and other ethical breaches are not considered a good way to get ahead.

      Unless you're in management.

      --
      They can have my command prompt when they pry it from my cold dead fingers.
    13. Re:What about Chinese nationals? by smellsofbikes · · Score: 1
      >The Chinese don't regard plagiarism the same way we do

      One of the things I think about when I'm reading about this subject is t-shirts. In the community in which I hang out, if you're wearing a t-shirt that you've designed and silkscreened/airbrushed, that's cool. If you're wearing a shirt that has a Nike swoosh symbol on it, it's considered something like plagiarism, certainly a lack of originality. Yet I see other Americans wearing DKNY shirts all the time. My mini-culture considers that to be copying, but most people don't even think about it, or if they do, think of it as a sort of status thing -- they can afford a designer t-shirt.

      It's quite possible something similar is going on here. By taking material from a very good source, the person is forming an association with the very good source. If you aren't raised with a sense of what Americans consider the line between research (copying from several sources) and plagiarism (copying from one source) you might be acting in a way you think is not only ethical but praiseworthy, while other people think you're plagiarizing.

      For the record, today my t-shirt is covered with monochrome images of old cassette tapes of various brands. It certainly doesn't say Nike on it.

      --
      Nostalgia's not what it used to be.
    14. Re:What about Chinese nationals? by lord_sarpedon · · Score: 1

      Native USians have no idea how their news and movies (those that made it to other countries) portray their own country to the world.

      Accurately.

      --
      "Strangers have the best candy" -Me
    15. Re:What about Chinese nationals? by indi0144 · · Score: 1

      WRONG! last time I checked F-22s can't fight against Decepticons, F-22s barely take off, fly by, and return in one piece.

      Oh GP was talking about non fiction movies?! I don't think movies portray America in a bad way, it's fiction. The "bad" image is from TV shows about spoiled brats wasting shitloads of money in ridicule stuff, car pimping, life-style bragging and things related to unnecessary money burning. That piss off the majority of people inside and outside N. America.

    16. Re:What about Chinese nationals? by idlemachine · · Score: 1

      The Chinese don't regard plagiarism the same way we do - in fact, the educational system encourages it in a way as it is an honor, of sorts, to 'plagiarize' your mentor. Additionally, a lot of these students don't have confidence in their english, so whey they write they occassionally take an idea from another article and copy it verbatim thinking "that's exactly what I was thinking, and I don't have to worry about incorrect english" - in most cases, there is not an intention of deceit.

      Wow, it almost sounds like they think that human knowledge is built on top of past endeavours rather than pumped out fully formed by the self-contained genius of a handful of people.

      Haven't they heard of intellectual property?

  15. Not Worthless by oodaloop · · Score: 1

    The article is referring to planting physical keylogging or other devices on specific machines. As in breaking into your hotel room, opening up your laptop, and installing something that will send information back. This is why you should weigh before and after. TFA metions 3-letter agencies telling him to do this, so maybe they know something you don't.

    --
    Tic-Tac-Toe, Global Thermonuclear War, and relationships all have the same winning move.
    1. Re:Not Worthless by TheRaven64 · · Score: 2, Interesting

      It's not all that surprising. British companies used to be advised not to talk business on the plane to France, because the French intelligence agencies were placing bugs in the headrests and giving sensitive information to French companies.

      --
      I am TheRaven on Soylent News
    2. Re:Not Worthless by mrdoogee · · Score: 1

      Well at least FEMA isn't involved, then.

    3. Re:Not Worthless by fridaynightsmoke · · Score: 3, Insightful

      It's not all that surprising. British companies used to be advised not to talk business on the plane to France, because the French intelligence agencies were placing bugs in the headrests and giving sensitive information to French companies.

      And I'm quite sure that MI5 (or whoever) did/do spy on non-British companies to give British ones an advantage (or at least I hope so :P)
      This is one of those examples of "war morality"; whereby "us doing X to them" is fine, but "them doing X to us" is completly unacceptable and a sign of cowardice and various other undesireable traits.

      --
      This is a substitute for a clever sig that fits within the maximum number of characters.
    4. Re:Not Worthless by Rich0 · · Score: 1

      More likely than not the 3-letter agencies have done it to nationals from other countries, so they know it can be done to their own citizens.

      During the cold war the US sabotaged a Soviet oil facility by introducing a trojan into firmware for various control systems. They also tapped undersea lines, listened to cell-phone conversations from space, and likely did all manner of other elaborate info-gathering operations that we still don't know about.

      When you're talking about state-sponsored intelligence, there is a remarkable number of vulnerabilities that they have the resources to exploit. If China really cared what Steve Jobs had on his laptop, they could easily gas his hotel room while he was sleeping and do all manner of things to his laptop. I'm not sure that weighing is going to do you much good - if I wanted to be really slick I'd just replace a chip on the motherboard with something that does a little extra. If you replaced a chip on the northbridge, and one on the ethernet controller, you could gather any intel you'd like and send it out over the internet and it would be utterly undetectable without a packet sniffer.

    5. Re:Not Worthless by oodaloop · · Score: 1

      It's more like, "They're going to do it us, so we need to try to stop them and do it to them first." Same thing for arms races and carrying a concealed gun. If everyone else has one, I don't want to be the one person without it. The rhetoric in the presses about unacceptable behavior is just that. We all know we all spy on each other.

      --
      Tic-Tac-Toe, Global Thermonuclear War, and relationships all have the same winning move.
  16. OTOH, DHS Might eliminate the issue as well.... by atlmatt36 · · Score: 5, Informative

    For all the barking of the agencies, it's obvious they haven't encountered the treatment I and my colleagues have encountered re-entering the US from abroad only to have laptops have the data examined, and that data be copied for "further analysis" or even the laptop confiscated for an undetermined amount of time. It's just a matter of time before other countries make the same advertisment about travel to the US.... What's the old saying (Kettle calling the Pot black).

    1. Re:OTOH, DHS Might eliminate the issue as well.... by D+Ninja · · Score: 2, Funny

      What's the old saying (Kettle calling the Pot black)

      Actually, Pot started it. He called Kettle "black" first. It devolved into a war shortly thereafter when the Broiling Pan took sides and the Colander started screaming for legal recourse. Fortunately, Cheese Grater and Can Opener continued to get along. Then, of course, there was the scandal where Dish ran away with Spoon, but that's another story...

    2. Re:OTOH, DHS Might eliminate the issue as well.... by japhering · · Score: 1

      For all the barking of the agencies, it's obvious they haven't encountered the treatment I and my colleagues have encountered re-entering the US from abroad only to have laptops have the data examined, and that data be copied for "further analysis" or even the laptop confiscated for an undetermined amount of time.

      It's just a matter of time before other countries make the same advertisment about travel to the US.... What's the old saying (Kettle calling the Pot black).

      Does it really matter? How many people when traveling keep their laptop, cellphone, ipod, etc isolated 100% of the time? For a skilled person with the right tools it only takes a matter of minutes to open a laptop and add bugging devices. Pop out one wireless lan card and replace with another with "special" control code in the firmware.

    3. Re:OTOH, DHS Might eliminate the issue as well.... by supernova_hq · · Score: 1

      Minutes? 99% of laptops come with "dummy" plastic cards in the side where you would add extra network/etc cards later. All you need is an ACTUAL card with the plastic end on it, and you could do the switch by reaching into the guy's bag on the subway. Most of them even have dummy SD cards in them.

  17. Re:Chinese Coders? by icebrain · · Score: 1

    I believe they mean either coders physically located in China (through outsourcing/remote offices), or Chinese nationals working in the US (who would be identified by the immigration/work authorization paperwork they should have filled out). I really doubt they mean "if he looks Asian, don't put him on security projects".

    --
    The meek may inherit the earth, but the strong shall take the stars.
  18. Re:Me sorry by Anonymous Coward · · Score: 1, Funny

    me go pee pee in your coke!

  19. Re:Chinese Coders? by Philip+K+Dickhead · · Score: 1

    "The meek may inherit the earth, but the strong shall take the stars."

    Where ya' takin' 'em? Your mama know about that? Ya' gonna' put 'em back where ya' got 'em from, when your done with 'em?

    --
    "Speaking the Truth in times of universal deceit is a revolutionary act." -- George Orwell
  20. whats the point? by Coraon · · Score: 2, Funny

    The US border guards are just going to swipe the laptop and smart phones at customs anyway.

    --
    -Ours is the wisdom of Solomon, the magic of Merlyn, the fall of Icaris.
    1. Re:whats the point? by iphayd · · Score: 1

      Why do you think they tell you to go buy a new, shiny one. Oh, and put lots of hd space in it too, they need to store their porn collection.

  21. Re:this is racism by PhilHibbs · · Score: 1

    No, through nationalism. This is against a specific nationality, nothing to do with ethnicity. Taiwan is not covered by this warning, and they're the same stock.

  22. This Sounds Familiar by Logical+Zebra · · Score: 4, Insightful

    Remember the Cold War, when the Soviets were 10-foot-tall super soldiers who could read your mind and fart atomic infernos out of their asses? Everything was thought to be a commie conspiracy.
    Is this happening again, but now we are instead fearing the Chinese?

    --
    I have a bad feeling about this...
    1. Re:This Sounds Familiar by Chrisq · · Score: 1

      Remember the Cold War, when the Soviets were 10-foot-tall super soldiers who could read your mind and fart atomic infernos out of their asses? Everything was thought to be a commie conspiracy. Is this happening again, but now we are instead fearing the Chinese?

      Well at least they haven't got weapons of mass destruct ... oh wait

    2. Re:This Sounds Familiar by The+Archon+V2.0 · · Score: 1

      Remember the Cold War, when the Soviets were 10-foot-tall super soldiers who could read your mind and fart atomic infernos out of their asses? Everything was thought to be a commie conspiracy. Is this happening again, but now we are instead fearing the Chinese?

      It's worse. It's happening again, but this time the enemy runs the big-box store we always shop at. And he's our loan officer.

    3. Re:This Sounds Familiar by Anonymous Coward · · Score: 3, Insightful

      The Soviets:
      1) never matched the US economically, achieving military parity or superiority only in ground forces and nuclear delivery systems
      2) never had a true deep water navy, and no full year ocean access
      3) their population never exceeded the US, and they needed troops to keep Poland, Hungary, East Germany in check

      The Chinese:
      1) are projected to exceed the US economically in the next 10-15 years
      2) have 2000+ miles of access to the Pacific ocean
      3) have a raw population exceeding 3 times the US, its urban population is about 1.5 times the US total population

      I would say they need not reach 10-foot-tall and read minds to become a problem for the US.

  23. Good for China by Bert64 · · Score: 2, Insightful

    If everyone who visits China buys a new cellphone and laptop for the trip...
    Where were those cellphones and laptops likely manufactured? China...
    China stands to make quite a profit from people doing this.

    --
    http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  24. Silly by hansoloaf · · Score: 1

    and yet we have everything built in China for sale in the US (iPhones, Lenovo, etc).

  25. Good luck with that. by ciroknight · · Score: 2, Insightful

    It's pretty hard to bug something at manufacturing time, since you usually don't have a clue as to who it's being shipped to. It can be done, but odds are you'll end up bugging a lot of 19 year old teenage girls going off to college instead of corporate execs.

    --
    "Victory means exit strategy, and it's important for the President to explain to us what the exit strategy is." G.W.Bush
    1. Re:Good luck with that. by Anonymous Coward · · Score: 5, Funny

      ...odds are you'll end up bugging a lot of 19 year old teenage girls going off to college instead of corporate execs.

      Either way, you win.

    2. Re:Good luck with that. by maxume · · Score: 2, Informative

      Still, just embed some code in the bios that boots into a keylogging management screen when you hold down s-c-r-e-w during boot. That way, you don't need to modify anything, you just need to turn it on when you happen to gain access to the hardware of an interesting person.

      --
      Nerd rage is the funniest rage.
    3. Re:Good luck with that. by ciroknight · · Score: 2

      Yeah, nobody would ever notice that. Nobody ever audits or reloads BIOS code. BIOS chips are just packed with extra room for code and even more, they have vast swaths of writable RAM for storing tons of keylogging data, a tiny insignificant fraction's worth that actually would be useful to a foreign intelligence agency (which has to be filtered through to find anything on your ridiculously huge Echelon-scale supercomputing network).

      It's a great plot for a novel, Dan Brown, but to get that to work on the scale proposed (getting literally every machine out of China with the software), it's just not feasible.

      --
      "Victory means exit strategy, and it's important for the President to explain to us what the exit strategy is." G.W.Bush
    4. Re:Good luck with that. by bleh-of-the-huns · · Score: 1

      Not necessarily true, you don't have to bug during manufacturer, just release counterfeit stuff that is sold to large entities.. prime example.. Counterfeit Cisco hardware, that may or may not have had hardware modified in such a way as to allow spying..

      http://hardware.slashdot.org/article.pl?sid=08/04/22/1317212

      The gov, and gov contractors in the US still use IBM/Lenovo laptops and desktops, its not a stretch to imagine that bug them at manufacturing time, all of them, and then just make sure the bugged batch ends up with vendors who are on the GSA schedule.

      --
      I came, I conquered, I coredumped
    5. Re:Good luck with that. by maxume · · Score: 1

      Of course it isn't feasible. But we are playing paranoid here. Jeez.

      I take great offense at being compared to Dan Brown, I poured seconds into that post and marketed it to no one.

      --
      Nerd rage is the funniest rage.
    6. Re:Good luck with that. by snspdaarf · · Score: 4, Funny

      ...odds are you'll end up bugging a lot of 19 year old teenage girls going off to college instead of corporate execs.

      Either way, you win.

      Until the restraining order kicks in.

      --
      Why, without your clothes, you're naked, Miss Dudley!
    7. Re:Good luck with that. by The+Archon+V2.0 · · Score: 1

      ...odds are you'll end up bugging a lot of 19 year old teenage girls going off to college instead of corporate execs.

      Either way, you win.

      So if we see a lot of .cn sites with "barely legal" sexting pics, we know that they tapped the wrong phones and are just cutting their loses? Awesome! I never knew this espionage thing was so easy. Or sexy! Does a license to kill come with any sort of reciprocity for getting a license to statutory rape?

    8. Re:Good luck with that. by fahrbot-bot · · Score: 1

      It's a great plot for a novel, Dan Brown ...

      Obviously:

      • Angels and Daemons
      • The Da Vinci Coder
      • The Lost Symbol Table
      --
      It must have been something you assimilated. . . .
    9. Re:Good luck with that. by uninformedLuddite · · Score: 1

      So let's say everything was bugged at manufacture. It would be pretty trivial to have a plant at a major OS provider who could advise the buggers(that's worth at least two mod points) the license keys being used in specific industries and then activating the bugs based on this data.

      --
      The new right fascists are bilingual. They speak English and Bullshit.
    10. Re:Good luck with that. by uninformedLuddite · · Score: 1

      Until the restraining order kicks in.

      Sounds to me like you've dated girls before

      --
      The new right fascists are bilingual. They speak English and Bullshit.
    11. Re:Good luck with that. by uninformedLuddite · · Score: 1

      I saw a couple of years ago a tutorial on how to modify the firmware on a dlink router so that it would automagically modify any .exe sent through it to add a trojan of your choice or design to the file. It required a very expensive doodad to do the actual modifying but it was an interesting read. I just added this as it isn't necessary to counterfeit the hardware. You just need to be a middle man in the supply chain. I will see if I can find the article and add a link to it as the know-how required was script kiddy level so it will be of great interest here. I guess you could just do a good old break and enter too.

      --
      The new right fascists are bilingual. They speak English and Bullshit.
    12. Re:Good luck with that. by uninformedLuddite · · Score: 1

      here's an interesting link. I realise it's not a very popular CPU but this could be done to every single chip going out of a fab plant. Would it be that outrageous to think that someone in the design/fabrication process could sneak this onto the silicon without it being noticed? Or, if it was a state sponsored program then it definitely wouldn't get noticed.

      --
      The new right fascists are bilingual. They speak English and Bullshit.
  26. Such respect for IT! by BenEnglishAtHome · · Score: 4, Insightful

    Maybe I'm taking this a little personally because I'm an IT guy. I dunno. But I do know I'd rather not work in IT for a large, tech-based company where the CTO is quoted publicly as saying: "I don't let my IT department near my laptop".

    Anybody else have a WTF moment when they saw that? Or is it only me?

    1. Re:Such respect for IT! by walshy007 · · Score: 1

      If you want something done right, do it yourself... is a good way to do things close to home.

    2. Re:Such respect for IT! by mc+moss · · Score: 5, Insightful

      Maybe he just has sensitive material about his company on the laptop. I've seen people in management who don't let anyone in the company, even IT, look at their laptops and it isn't because they think the IT department is incompetent or have no respect for them.

    3. Re:Such respect for IT! by chaim79 · · Score: 1

      It very well could be that the IT department is MS only and would mess up any Mac they work on simply because they are clueless, that'd be a reason for not letting them near it.

      --
      DEMETRIUS: Villain, what hast thou done?
      AARON: Villain, I have done thy mother.
      Shakespeare invents 'your mom'
    4. Re:Such respect for IT! by yabos · · Score: 1

      Yeah, they'd probably try and install Norton Antivirus for Mac. No one wants that crap.

    5. Re:Such respect for IT! by Blakey+Rat · · Score: 1

      He probably has confidential information on it that the IT guys aren't privy to. When I worked IT, it was a very small company so this wasn't as big a concern, but I frequently worked on computers that had, for example, full payroll data on them.

    6. Re:Such respect for IT! by srleffler · · Score: 1

      You probably shouldn't take it personally. He's a chief technical officer. He ought to be better at your job than you are.

    7. Re:Such respect for IT! by Buelldozer · · Score: 1

      Having spent some time in the I.T. trenches his "sensitive material" is probably a largish collection of porn, copyrighted material that he didn't pay for, and emails from his two mistresses. Yes I've seen all of those and in some cases all three of those on the same machine.

    8. Re:Such respect for IT! by MoralHazard · · Score: 1

      That's the most retarded thing I've ever heard. So the CEO has the most CRITICAL, SUPER-SECRET information on his laptop, the stuff that represents the company's lifeblood, and which can't be trusted to anybody else.

      And this data isn't backed up on company file servers? What happens if the CEO's laptop gets dropped, or smashed by clumsy airport security, or stolen from him?

      And you think they run a multi-billion dollar, Fortune 500 company this way? Seriously?

    9. Re:Such respect for IT! by DigiShaman · · Score: 1

      Agreed. If a CxO can't protect themselves (drive encryption, backups...etc), they will have to *trust* someone at least that can. Also, you can't become a Fortune 500 company unless there is some level of relational trust already in place.

      --
      Life is not for the lazy.
  27. Re:Chinese Coders? by Anonymous Coward · · Score: 2, Insightful

    "Thing is, the Chinese have this whole "for the mother country" thing going on, so it's a sensible precaution."

    And Americans don't? Americans practically invented RSI with all that damn flag waving they do, you sir are a racist.

  28. Not a problem in the US! by Anonymous Coward · · Score: 4, Interesting

    Since in the US they'll take your phone and laptop, MP3 player and any other good stuff and demand to see your company documents if they think there's something nice in there.

    PS the US has used Echelon to get Boeing a european contract by finding out the figure they had to bit under to get the contract.

    This didn't require a cell phone either, so throwing away your cellphone isn't necessary there either.

    So much nicer being spied on by the US government. You don't have to buy new kit all the time, just accept the espionage.

    1. Re:Not a problem in the US! by Logical+Zebra · · Score: 1

      PS the US has used Echelon to get Boeing a european contract by finding out the figure they had to bit under to get the contract.

      This was a claim made by Europe (specifically France) and never proven.

      Take a look at this article, quoted here for your convenience:

      "...the NSA runs Echelon jointly with Britain, Australia, Canada and New Zealand. And European experts acknowledge that France, Germany and Russia routinely engage in industrial espionage to ferret out the commercial secrets of other countries."

      --
      I have a bad feeling about this...
  29. The reverse holds true by ironicsky · · Score: 5, Insightful

    As a non-American citizen I feel the reverse holds true. When I enter the USA from Canada I should bring a seperate bare-bones, no thrills cell phone and an empty laptop. Because if the TSA decides that they want to snoop through my electronics there is no telling what information they are pulling out, government created spyware being installed, or some sort of magical chip that transmits everything I am doing back to them.

    See, Conspiracy theories work both ways... No more fear mongering, okay? Lets play nice kids.

    1. Re:The reverse holds true by s4ltyd0g · · Score: 1

      Water? It's the next oil...

    2. Re:The reverse holds true by 140Mandak262Jamuna · · Score: 1

      And may be Lebensraum.

      --
      sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    3. Re:The reverse holds true by supernova_hq · · Score: 1

      What about water, electricity, oil (alberta's got a crap-load), beef (texas only has so many cows), gigantic robotic arms, ....? Now what exactly does the US make of value, flags?

    4. Re:The reverse holds true by dissy · · Score: 4, Informative

      As a non-American citizen I feel the reverse holds true. When I enter the USA from Canada I should bring a seperate bare-bones, no thrills cell phone and an empty laptop. Because if the TSA decides that they want to snoop through my electronics there is no telling what information they are pulling out, government created spyware being installed, or some sort of magical chip that transmits everything I am doing back to them.

      See, Conspiracy theories work both ways...

      I know you said all that in jest, but you are more right than you suspect. And the situation with DHS and the TSA is very close to that (Other than installing hardware.. though the law does explicitly allow them to, even if they don't do it now)

      That isn't a conspiracy or paranoia, its a well proven fact.

    5. Re:The reverse holds true by mce · · Score: 2, Interesting

      Indeed. For us - we're an EU company - it is official company policy to take only empty PCs across the US border (in either direction).

    6. Re:The reverse holds true by Blakey+Rat · · Score: 1

      beef (texas only has so many cows)

      I hear cows can make more cows. Amazing how that works.

    7. Re:The reverse holds true by ironicsky · · Score: 1

      This isn't South Park :-).
      It's more like Simpsons when Homer is apologizing to the Queen for America being a bad country and Canada being a good country.

    8. Re:The reverse holds true by supernova_hq · · Score: 1

      Fine, (texas can only reproduce cows so fast). Is your anal retentiveness contagious?

  30. The weight of those bits adds up! by noidentity · · Score: 2, Funny

    US intelligence agencies are advising top US IT executives to weigh their laptops before and after visiting China as one of many precautions against corporate espionage.

    This is very good advice, as it would instantly catch the loss of weight if any data was stolen from the laptop. You hear of data theft all the time, and all it takes is something low-tech like a scale to detect it.

    1. Re:The weight of those bits adds up! by Publikwerks · · Score: 1

      You scoff, but this is how I found out my laptop was cheating on me. Started losing weight, hanging out with other OSes. Then I came early one day, and caught it dual-booting with not one, but two usb drives.

    2. Re:The weight of those bits adds up! by captainClassLoader · · Score: 1

      Woah! Hot USB-on-USB action!... 8-O
      Ahem...Sorry to hear about your nasty lappie, man...

      --
      "The plural of anecdote is not data" -- Bruce Schneier
    3. Re:The weight of those bits adds up! by screeble · · Score: 1

      Well at least they weren't SCSI drives.

  31. Re:Chinese Coders? by Anonymous Coward · · Score: 1, Interesting

    No - you, sir, have no clue about Americans. Americans are in it for themselves, bar none. Any social interest arising from an American economic activity is merely an unintended side-effect of a self interest the executor couldn't turn into profit.

  32. Re:Chinese Coders? by thisnamestoolong · · Score: 1, Interesting

    Yes racial profiling. Thing is, the Chinese have this whole "for the mother country" thing going on, so it's a sensible precaution.

    You say "sensible precaution", I say "blatant xenophobia/racism". The only reason people are worried about any of this to begin with is that America has that same childish and ignorant "for mother country" thing going on as well. It really disturbs me that in 2009 such hatred and bigotry is still the norm and is spouted, not only without consequence but to rave reviews and record ratings, on Fox News and right-wing pseudo-fascist radio programs. We need to realize that all of these boundaries we have set up are simply arbitrary, artificial constructs that have NOTHING to do with reality. To quote the great poet Bill Hicks, "I hate patriotism! It's a round world the last time I checked."

    --
    To the haters: You can't win. If you mod me down, I shall become more powerful than you could possibly imagine
  33. Re:this is racism by MrMr · · Score: 1

    Aka profiling.

  34. Stealth technology weight? by adosch · · Score: 1

    Weigh your laptop before and after you enter and leave the country... to do what? How are you going to detect a 15g to 100g logging circuit that's more than likely (if there was malicious espionage intent) designed to fit or mount into current hardware and not be detected on a scale that's accurate down to 0.5 pounds. My point, you're not. I'm not ignorant to the fact that something as compact and sealed as a Mac Airbook or alike would take some real damn EE talent to pull something off but it's nice that ITFA they choose to have a separate laptop for overseas verses state side and re-images it when they leave. Just hope they practice good VPN security measures at their companies...

  35. Re:Chinese Coders? by nschubach · · Score: 1

    What if China hired "coders" from Russia to complete their objectives? Their passports wouldn't be Chinese.

    --
    Every time I start to have faith in humanity, I ruin it by driving to work between 7 and 8 am.
  36. reloading a phone by wkk2 · · Score: 1

    Assuming the cell phone stays in your possession, why are phones so insecure that the software can be modified presumably through the network? If all phones are so bad, there must be state sponsored hooks to do anything to the phone. Do any cell phones support secure firmware loads? I guess the Sectera Edge is out of the question for your average traveler.

  37. Re:this is racism by PiSkyHi · · Score: 1

    Nationalism is as much of a correlation as racism, since the cause of all of this is paranoia.

  38. How much does a 1 weigh? by hacker · · Score: 1

    Weigh our laptops? Exactly how much does a 1 weigh? a 0 weigh? If I create some new data and delete old data, will my laptop weigh less? Or more? How much more does a 200k keylogger weigh?

    Seriously, this is silly, because TFA is talking about re-imaging laptops before/after. That would imply malware/spyware being surreptitiously installed, but that won't change the weight directly.

    Re-imaging the laptop if a hardware keylogger has been installed wouldn't have any effect either (but could possibly be detected by weighing).

    There's ABSOLUTELY NO WAY AROUND IT

    1. Myth: "They'd need physical access to install anything to log keystrokes anyway!" Wrong. They can do this all remotely, using your own patched operating system's default capabilities.
    2. Myth: "You could just borrow a machine there and boot to a KNOPPIX CD and work from that!" Wrong. If a hardware keylogger is installed, it captures everything.
    3. Myth: "You could just use your own laptop and re-image it!" Wrong. If someone owns the network above you, they're certainly sniffing that.
    4. Myth: "You could just use SSL and secure your communications!" Wrong. See 1.) and 2.) above

    ...and so on. If someone wants access, they'll get it. Either on your local machine in software, on your local machine in hardware, or on the network outside of your machine.

    1. Re:How much does a 1 weigh? by Xtifr · · Score: 2, Insightful

      Seriously, this is silly, because TFA is talking about re-imaging laptops before/after. That would imply malware/spyware being surreptitiously installed, but that won't change the weight directly.

      Re-imaging the laptop if a hardware keylogger has been installed wouldn't have any effect either (but could possibly be detected by weighing).

      So you're saying that weighing is silly because it won't protect against software keyloggers (would need to re-image), and re-imaging is silly because it won't protect against hardware keyloggers (would need to weigh to do that). Your conclusion is then that one should do neither (rather than the very obvious both)? Really?

      Yeah, I don't wear a belt because suspenders are fully adequate, and I don't wear suspenders because a belt is good enough. Yet for some reason, my pants keep falling down. :)

      You go on to point out that there are other attacks which can't be prevented or detected by weighing or re-imaging, which is a very valid point, but does that really mean one shouldn't bother doing anything at all? If you can't have perfection, just give up and kill yourself? If someone with the power and sway of the Chinese (or US) government really wants to get you, chances are they probably can, but if they're just looking for targets of opportunity that may prove useful, making yourself less of a target is probably a very good idea!

  39. Possible to assemble a "Made in USA" system? by joeslugg · · Score: 2, Interesting

    At the risk of being slightly OT, I'm thinking about several comments noting that these systems were made in China to begin with, so it got me thinking.
    If a ridiculous set of circumstances arose where certain organizations banned the use of computers "made in China", is it possible to obtain/assemble a system that's "made in the USA"? Or "made in <NATO_member>"?

    I'm just wondering if there's a way to source all the parts domestically and what it would cost. I'm guessing the answer is "impossible", but I'm curious if anyone knows about it.

    1. Re:Possible to assemble a "Made in USA" system? by vlm · · Score: 1

      Depends alot on your definition of laptop.

      Chris Fenton, living in NYC, made his own laptop, based on a picaxe microcontroller.

      http://chrisfenton.com/diy-laptop-v2/

      Picaxe controllers are sold by a firm in Bath, UK

      http://www.rev-ed.co.uk/

      I'm guessing a picaxe is a pic controller with some proprietary firmware on top.

      pic controllers are made by Microchip out of Arizona. Their environmental health and safety page implies they might be involved in Thailand, maybe.

      Now, I have no idea where the copper wire was made, where the LCD screen was made, batteries, etc. Theres alot more than just the microcontroller.

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
  40. Re:Chinese Coders? by nschubach · · Score: 1

    Be fair... this type of thing happens on both sides of the political divide. The far right might blame immigration, but the far left blames CEOs in their own country. I definitely wouldn't call the far right Fascist either. The Left is doing it's fair share of that by taking over companies and setting policy.

    From Wikipedia: "Fascist governments forbid and suppress criticism and opposition to the government and the fascist movement. [flag@whitehouse.gov] Fascism opposes class conflict, blames capitalist liberal democracies for its creation [Those damn corporations and their liberal capitalist spending causing all that economic turbulence! We must get this under control!] and communists for exploiting the concept."

    --
    Every time I start to have faith in humanity, I ruin it by driving to work between 7 and 8 am.
  41. Re:Chinese Coders? by mrdoogee · · Score: 1

    And they could have them based in of Brazil! BRILLIANT!

  42. Re:Chinese Coders? by Sancho · · Score: 4, Insightful

    America has that same childish and ignorant "for mother country" thing going on as well

    If we had international laws, policies, standards of living, etc. I'd agree with you. As we don't, I don't see a problem with wanting to take care of our own. International espionagers aren't going to share information--they only want to take it.

    It's similar to the prisoner's dilemma. We'd probably all do better overall if we all worked together. China's not going to work with us, though, which means that if we just give them the technology, we're the suckers.

  43. Re:Chinese Coders? by nomadic · · Score: 3, Insightful

    You say "sensible precaution", I say "blatant xenophobia/racism". The only reason people are worried about any of this to begin with is that America has that same childish and ignorant "for mother country" thing going on as well.

    Plus the fact that China uses its technical workers for both industrial and political espionage quite frequently, and has been caught doing it several times.

    It really disturbs me that in 2009 such hatred and bigotry is still the norm and is spouted, not only without consequence but to rave reviews and record ratings, on Fox News and right-wing pseudo-fascist radio programs. We need to realize that all of these boundaries we have set up are simply arbitrary, artificial constructs that have NOTHING to do with reality.

    To quote the great poet Bill Hicks, "I hate patriotism! It's a round world the last time I checked."

    The reason I distrust China is precisely BECAUSE they are too "patriotic"/nationalistic; they're even worse than the US I think in this regards, hell they're still mad over the OPIUM WARS. It has bred a very "us vs. them" mentality (obviously, some of it is understandable because of the country's history) that I think is a hell of a lot more dangerous to us and the world than the communism was.

    Just as a side note, Hicks was kind of overrated.

  44. Re:but by Rashdot · · Score: 1

    But what if they're using a Chinese font?

    --
    This is not the sig you're looking for.
  45. Re:Chinese Coders? by countvlad · · Score: 2, Insightful

    And that's the way it should be. "Society" shouldn't be the religion of the 21st century, punishing us for our success and demonizing us for our humanity, all the while demanding we tithe to a new God.

    Self interest is why we're alive. It's why we have kids, it's why we fall in love, and it's why we go to work. Why isn't it good enough for a law-abiding, hard working citizen to live his or her life without the new original sin that is a "debt to society" for thier success? Maybe if everyone was more concerned about how they live *their* lives and less concerned with how their neighbors are living their's the world would be a better place.

  46. Re:Chinese Coders? by Runaway1956 · · Score: 1

    Assassin's Mace, anyone?

    While few people recognize it as such, China is waging war against the west. And, they are claiming victories every day, because we have trouble just spelling "asymmetric warfare". I wonder if that recto-cranial insertion so common in Washington and on Wall Street have anything to do with it?

    --
    "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
  47. Re:Chinese Coders? by Shakrai · · Score: 1

    You say "sensible precaution", I say "blatant xenophobia/racism". The only reason people are worried about any of this to begin with is that America has that same childish and ignorant "for mother country" thing going on as well

    I think China's neo-colonialist actions in Tibet, Xinjiang and Mongolia are another reason that people are worried about her ambitions on the World stage.

    We need to realize that all of these boundaries we have set up are simply arbitrary, artificial constructs that have NOTHING to do with reality

    You need to realize that such a statement is woefully naive. Reality says there's a huge difference between those boundaries. Standard of living, human rights, privileges and immunities all vary when you cross one of those "artificial constructs". If you think they are just artificial constructs then why don't you try living in North Korea for awhile?

    --
    I want peace on earth and goodwill toward man.
    We are the United States Government! We don't do that sort of thing.
  48. Re:Chinese Coders? by moeinvt · · Score: 1

    "We need to realize that all of these boundaries we have set up are simply arbitrary, artificial constructs that have NOTHING to do with reality."

    The human race has drawn lines on the earth, and those lines are typically guarded by people with weapons. Furthermore, when you step across one of those boundaries, the people there might have an entirely different world view, and will use varying degrees of force to impose certain standards of behavior. That's the REALITY, and from an end user perspective, there's nothing "artificial" or "arbitrary" about it. Bill Hicks was taking hallucinogenic drugs when he came up with a lot of his theories.

  49. Re:Chinese Coders? by thisnamestoolong · · Score: 1

    Plus the fact that China uses its technical workers for both industrial and political espionage quite frequently, and has been caught doing it several times.

    I never said that China was not using tech workers for industrial espionage -- all I am saying is that it is racist to avoid hiring Chinese people because of this. By this sort of reasoning, cops ought to pull over every black man they see operating a motor vehicle, and Arabs should not be allowed to utilize air travel. Both of these have come into the courts and both have been shot down. Repeatedly. They are shot down because they go against EVERYTHING that a free society stands for -- you can't judge a whole group of people by a select few individuals. It is unconstitutional, unjust, and it does not even make practical sense from a probability standpoint.

    --
    To the haters: You can't win. If you mod me down, I shall become more powerful than you could possibly imagine
  50. Re:Chinese Coders? by ArhcAngel · · Score: 2, Interesting

    I believe you are referring to citizens of the People's Republic of China which are not all of the same race. So to call it racial profiling is inaccurate. It would be more accurate to call it nationalism profiling. It is clear from the replies you have received so far that racist/nationalist bashing is en vogue so here goes my karma. There is no way to guarantee safety 100% of the time but to ignore the fact that a foreign government that, while not openly hostile, is known for its intense dislike of your countries policies would be derelict. So basically I agree with what I think you were trying to say but not what you said.

    --
    "A person is smart. People are dumb, panicky dangerous animals and you know it." - K
  51. Re:Chinese Coders? by thisnamestoolong · · Score: 2, Insightful

    Assassin's Mace, anyone?

    While few people recognize it as such, China is waging war against the west. And, they are claiming victories every day, because we have trouble just spelling "asymmetric warfare". I wonder if that recto-cranial insertion so common in Washington and on Wall Street have anything to do with it?

    I recognize that the Chinese government is "waging war" on the west in order to become the next century's superpower. This does not mean that we ought to resort to xenophobia and racism to "beat" them. That is completely back-asswards and will only serve to give them more ammunition against us.

    --
    To the haters: You can't win. If you mod me down, I shall become more powerful than you could possibly imagine
  52. Re:Chinese Coders? by thisnamestoolong · · Score: 1

    If you think they are just artificial constructs then why don't you try living in North Korea for awhile?

    These artificial constructs create places like North Korea. We would not tolerate part of our own nation becoming like North Korea, now would we? There would be massive amounts of effort and capital thrown into improving that part of our country so as to bring it up to at least an acceptable standard of living. When we create an artificial construct such as national boundaries, however, it becomes very easy to ignore such horrors and pit them on somebody else. This sort of territoriality is deeply ingrained in the human psyche but is every bit as primitive as when your dog pisses on your sofa to claim it as his.

    --
    To the haters: You can't win. If you mod me down, I shall become more powerful than you could possibly imagine
  53. Symantec CTO a Mac User? by CodeBuster · · Score: 1

    Does it strike anyone else as just a bit ironic that the CTO of a company whose business is plugging the holes in Windows and repairing the damage when there are leaks chooses to use a Mac instead of a PC?

  54. I weighed my laptop... by strangeattraction · · Score: 1

    I weighed my laptop before and after I installed malware as a test. The weights are the same. I don't think the scales had the resolution necessary to measure the extra bits:)

  55. Here's a long shot... by argent · · Score: 2, Insightful

    How are you going to detect a 15g to 100g logging circuit that's more than likely (if there was malicious espionage intent) designed to fit or mount into current hardware and not be detected on a scale that's accurate down to 0.5 pounds.

    Here's a long shot... how about using a postal scale that's accurate down to a gramme? Do you think there might be one in the mailroom?

    1. Re:Here's a long shot... by adosch · · Score: 1

      ...So some CEO is going to go out of their way while overseas, trot down to find a "mailroom" and weigh their laptop? right. thanks for being a troll.

    2. Re:Here's a long shot... by argent · · Score: 1

      1. What part of "weigh their laptops before and after visiting China" did you fail to notice? Oh, right, the "before and after" part.

      2. Leaving that aside, I am sure that every post office, hotel, and convention center in China has a postal scale.

  56. Re:Chinese Coders? by Shakrai · · Score: 1

    We would not tolerate part of our own nation becoming like North Korea, now would we?

    We would if the only way to prevent it would have been to fight World War III in the nuclear age. You think Lincoln would have fought the American Civil War if the South had allies like the PRC and Soviet Union?

    When we create an artificial construct such as national boundaries, however, it becomes very easy to ignore such horrors and pit them on somebody else.

    And when we don't have those artificial constructs our rights and liberties will be eroded to the lowest common denominator. Which model do you purpose to use for your great society without national borders? The American one? The European one? The Chinese one? The African one?

    This sort of territoriality is deeply ingrained in the human psyche but is every bit as primitive as when your dog pisses on your sofa to claim it as his.

    It has nothing to do with territoriality. It has everything to do with the fact that our country is free enough that you can spout this nonsense while many others are not. Take away that "arbitrary" border and watch your freedoms go with it.

    --
    I want peace on earth and goodwill toward man.
    We are the United States Government! We don't do that sort of thing.
  57. Re:Chinese Coders? by thisnamestoolong · · Score: 1

    Thank you for proving my point fully. You admit yourself that people made these lines. Did it occur to you that these wildly differing world views and the resulting violence are not just the cause of these borders, but also an effect? That keeping the world cut up into little nationalistic pieces only serves to further divide us and creates a nasty feedback loop?

    I can clearly tell by the end of your statement that you know nothing about hallucinogens. Please do a little bit of research into the subject and you will find that these substances can have extremely profound, positive effects on the human mind. Just because they make you see funny colors does not make the experience less valid.

    --
    To the haters: You can't win. If you mod me down, I shall become more powerful than you could possibly imagine
  58. Re:Chinese Coders? by thisnamestoolong · · Score: 1

    Just because its constitutional and just doesn't make it a smart move though.

    So are you saying that it would be a smarter move to re-institutionalize racism?

    --
    To the haters: You can't win. If you mod me down, I shall become more powerful than you could possibly imagine
  59. Re:Chinese Coders? by mabhatter654 · · Score: 5, Interesting

    To be fair China is still a Command economy that let's "Capitalism" play because it's a useful way to get people to work harder.. they are a long way from the idea of "Free Markets". This is where it's not a "round" world.. The Chinese government has their eye on the 50 year game and is more than willing to tie up all of a natural resource... and throw people in jail when the "free market" price goes up.

    While the US punishes "intervention" by state banks in places like Japan and Korea for making sure their chip makers don't go under, China is stacking the deck on a NATIONAL level for resources... setting prices that corporations are allowed to SELL to China for.. and nobody is really stopping them. Just last week China "decided" they weren't going to be exporting any more rare earth metals (needed for high power magnets in electronics) They just issued a directive it wasn't allowed to be exported anymore....for any price. Back in 2007 one of the things that knocked US auto makers on their butts was China using scrap US steel instead of imported ore. It nearly doubled the price of scrap here (ironically bought with trade surplus dollars no less!) and made it even harder to complete with Asian companies... it was the straw that caused a good deal of the auto maker meltdown earlier this year. China manipulates their currency by not allowing dollars to be converted into Chinese money except for specific state-sponsored investments, and they don't allow US companies to take their Chinese profits OUT of the country either. It sets up a situation where they pile up money in US banks to buy US resources... but US companies can't pull their capital profits OUT of China...

    China is playing the long game, highly protectionist and stacking the deck with our own money and resources against us. It's economic "war" played at the highest level and the US government has no grasp that the "invisible hand' won't save them.

  60. Re:Chinese Coders? by Sylver+Dragon · · Score: 1

    One question, who gets to pick the rules?
    One advantage of having decentralized government is that if you don't like it in one area, you can move to another. Yes, this has its faults, again we can use North Korea. However, with a single, unified entity making the rules, if you don't like it, tough. At the very least, the folks in North Korea currently have the possibility of getting somewhere else. I'll agree that it's not a great option, and the risks are very high, but it exists. In a unified, one world government, no one has that option. If I disagree with the way the government is run, I don't have the option of leaving. It's just eat whatever shit they hand out or die. And with the UN as the closest proxy to what a world government might look like, no thank you.

    --
    Necessity is the mother of invention.
    Laziness is the father.
  61. Re:Chinese Coders? by TeXMaster · · Score: 1, Flamebait

    America has that same childish and ignorant "for mother country" thing going on as well

    If we had international laws, policies, standards of living, etc. I'd agree with you. As we don't, I don't see a problem with wanting to take care of our own.

    I assume that's the reason why you blasted trillions in a war but got bitching crazy about the proposal of universal healthcare.

    --
    "I'm never quite so stupid as when I'm being smart" (Linus van Pelt)
  62. Proof, please by cbraescu1 · · Score: 1

    we already know of cases where China has broken into hotel rooms, stollen blackberry's, etc.

    Any link that supports your claims?

    --
    Catalin Braescu
    Ofaly.com
    1. Re:Proof, please by thefear · · Score: 2, Informative

      Any link that supports your claims?

      -> http://mobile.slashdot.org/mobile/08/07/20/0745236.shtml

      But I was relying more on personal experience then what the internet says.

      --
      :(
  63. What's there to steal? by Khashishi · · Score: 1

    If anything, the Chinese already know more about how to make our products than we do. After all, they built them.

  64. I'm going to use that. by BenEnglishAtHome · · Score: 1

    I work at a huge, universally hated TLA in the U.S. The next time someone tells me the way we do things is lousy because complete idiots at the highest level must have set up our business processes and private industry would never do anything that stupid - I'll have another good counter-example.

    Thanks. I really appreciate the insight.

  65. Re:Chinese Coders? by Sancho · · Score: 1

    Well I didn't. I don't even have trillions to blast.

    But yeah. The war, a thinly veiled attack on terrorism, was pretty much exactly there to protect US interests, keep the dollar afloat, and maintain regimes that will be friendly enough to supply us with oil. It's fundamentally in line with what I said--we're protecting our own (not from being attacked, but protecting the status quo.)

    I'm not making a moral judgment about the war, incidentally. The war is in line with protecting our own, but in that case, I think it's going too far.

    The universal healthcare issue is really broken, but no society is perfect.

  66. Re:Chinese Coders? by SBrach · · Score: 1

    So you think a country should experiment with LSD and try to take over the world? Sorry, that didn't work out to well for the last guy.

  67. Re:Chinese Coders? by DJRumpy · · Score: 1

    It's common knowledge that the Chinese, whether sponsored by the government or not, have concerted attacks against US computer systems. They have succeeded quite a few times in gaining access to technological data from high security sources. It's simply common sense. If you visit a bad neighborhood, you take precautions.

    You would rather they ignore a known security risk all in the name of being 'PC'?

    Here's a few more:
    http://www.washingtonpost.com/wp-dyn/content/article/2005/08/24/AR2005082402318.html
    http://online.wsj.com/article/SB123834671171466791.html
    http://www.securitywatch.co.uk/2009/09/02/new-wave-of-sql-attacks-from-china/

  68. Re:Chinese Coders? by element-o.p. · · Score: 1

    I can't speak for everyone, but my opposition to universal healthcare is that I have yet to see a proposal that satisfies all of my concerns. Socialist policies -- although all warm and fuzzy and humanitarian in theory -- fail to address one major flaw: if people don't have to work to take care of themselves because the government will do it for them, then who is going to pay the bills when everyone is staying at home expecting a government handout? TANSTAAFL, and all that.

    --
    MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
  69. Re:Chinese Coders? by element-o.p. · · Score: 1

    "It is better that a hundred unjust men should go free than that a single just man should be punished unjustly." --Plato

    --
    MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
  70. Re:Chinese Coders? by hazah · · Score: 1

    Long Live Bill

    He maybe resting in peace, but what he said will live forever in the hearts of those that have one.

  71. historical revisionism by Anonymous Coward · · Score: 1, Insightful

    Are you kidding? The US basically gave away the entire manufacturing sector to china, gratis, brought them a century ahead in wealth and technology in just 20 years. We rebuilt germany and japan after we defeated them in wars, partially because we helped russia so much during that war and they became belligerent towards us just because they felt like it, they were jerks to us.. And so on. We've been the most generous to other people nation ever, all we ask is don't screw with us, and even then, we still get shafted. If anything we aren't nearly enough nationalistic and protectionist. We are now on the ropes economically from this misguided policy. It was stupid and pushed by a small number of ultrarich and traitorous globalist fatcats to make profits, that's it.

    I'm all for having the US turn a little more turtle, stop exporting tech, throw the big smackdown on those wallstreet pirates, rebuild our own manufacturing, get 100% energy independent so we aren't exporting cash to nations that don't like us, stop all our lame corporate military expansion that has nothing to do with self defense and everything to do with, again, making wall street profits and stop supporting that racist and fascist loon little Mediterranean nation, and just be done with it.

      Get rid of harmful foreign entanglements, it always goes sour and turns into a big fat mess.

    1. Re:historical revisionism by clodney · · Score: 1, Informative

      And yet, the actual facts say something different.

      Rebuilding Germany and Japan was probably very much a realpolitik decision - the seeds of WWII were present in the terms imposed on Germany after WWI. Spending to rebuild those countries and avoid economic collapse was probably a very farsighted thing to do.

      In terms of direct foreign aid on a per-capita basis, the USA ranks quite low: http://www.infoplease.com/ipa/A0930884.html

  72. Re:Chinese Coders? by nschubach · · Score: 1

    That's partially my point. How do you define what he's talking about? At what point is the coder Chinese? When they work for China? How are the people working for him supposed to understand what is meant?

    (And how was my original post trollish? It's an honest question.)

    --
    Every time I start to have faith in humanity, I ruin it by driving to work between 7 and 8 am.
  73. Re:Chinese Coders? by PixetaledPikachu · · Score: 3, Funny

    No - you, sir, have no clue about Americans. Americans are in it for themselves, bar none. Any social interest arising from an American economic activity is merely an unintended side-effect of a self interest the executor couldn't turn into profit.

    aptly said by those who renamed "french fries" to "freedom fries"

  74. Re:Chinese Coders? by nomadic · · Score: 1

    The Opium wars were fairly recent, I hear yanks on here going on all the time about the revolutionary war....

    To prove a point, or make a historical statement, or to be funny, but not out of anger or resentment.

  75. Re:This has happened to us. by Shotgun · · Score: 1

    Anti-tamper tape has been available for a LONG time, and it is really cheap.

    --
    Aah, change is good. -- Rafiki
    Yeah, but it ain't easy. -- Simba
  76. Re:Chinese Coders? by drsmithy · · Score: 1

    Socialist policies -- although all warm and fuzzy and humanitarian in theory -- fail to address one major flaw: if people don't have to work to take care of themselves because the government will do it for them, then who is going to pay the bills when everyone is staying at home expecting a government handout?

    This is called Begging the Question.

  77. MOD PARENT UP by BenEnglishAtHome · · Score: 1

    Now, that's funny. Thanks. I needed a laugh this afternoon.

  78. Also DIFF your BIOS by mosel-saar-ruwer · · Score: 1


    1) diff your HDD (hard and time consuming)

    You also need to DIFF the BIOS on your motherboard.

    And DIFF the microcode in your CPU.

    And DIFF the EEPROM on all your PCI cards.

    And on and on and on...

    BONUS PROBLEM: Describe an algorithm which can be run within the confines of an operation system so as to determine whether the operating system is running directly on metal or is running within an emulation environment that is running directly on metal [or is running within an emulation environment that is running within an emulation environment that is running directly on metal, or...].

    1. Re:Also DIFF your BIOS by Imrik · · Score: 1

      BONUS PROBLEM: Describe an algorithm which can be run within the confines of an operation system so as to determine whether the operating system is running directly on metal or is running within an emulation environment that is running directly on metal [or is running within an emulation environment that is running within an emulation environment that is running directly on metal, or...].

      Display on screen: "Is this running in an emulation environment?"
      Take yes/no input from user

  79. The first question to ask... by westlake · · Score: 1

    is why you are carrying sensitive information across an international border?

    "Traveling light" is good advice for anyone headed abroad.

    But perhaps especially so for the geek whose more incendiary political rants, porn stash or internal corporate memos aren't as well secured as he thinks.

  80. Re:Chinese Coders? by bertoelcon · · Score: 1

    This whole discussion is making me think of Avenue Q. Everyone's a little bit racist.

    --
    Anything can be found funny, from a certain point of view.
  81. Best of all... by syousef · · Score: 1

    This, friends, is the real reason behind the famed Apple design of no user serviceable parts. Not to save weight, not to give Apple a few measly bucks for battery replacements but to prevent FOREIGN ESPIONAGE. Think about that that when you drop your Dell and 12 little plastic panels pop off.

    Best of all you'll WANT to throw away your Apple device and buy a new one after just a few days of frustrating use. That is if it's not already scratched itself or cracked.

    --
    These posts express my own personal views, not those of my employer
  82. Re:Chinese Coders? by rohan972 · · Score: 1

    To be fair China is still a Command economy that let's "Capitalism" play because it's a useful way to get people to work harder.. they are a long way from the idea of "Free Markets".

    Making them different from the US (or any other country) in what way?

    The US has:
    A fiat currency produced by government edict. The price, interest, is centrally determined by the fed.
    Price controls on labor.
    A labor force conditioned in a centrally controlled compulsory school system (As proposed in the Communist Manifesto).

    Seriously, how many people in the US operate independently of the centrally controlled banking system? As far as I can tell, the difference between the US system and the Chinese system is one of degree, not principle. Both capital and labor in the US are to a large degree centrally controlled.

  83. Re:Chinese Coders? by TeXMaster · · Score: 1

    I can't speak for everyone, but my opposition to universal healthcare is that I have yet to see a proposal that satisfies all of my concerns. Socialist policies -- although all warm and fuzzy and humanitarian in theory -- fail to address one major flaw: if people don't have to work to take care of themselves because the government will do it for them, then who is going to pay the bills when everyone is staying at home expecting a government handout?

    Nations where this happens go bankrupt, nations where this doesn't happen thrive

    Your concern arises from the misconception that just because the government is providing for the most essential needs people will stay at home rather than go looking for (and finding) a job. In fact, at least as far as Europe is concernted, the employment rates tend to be higher in the countries with a better welfare system (Norway, Denmark) than in those with a worse one (Italy, Spain).

    --
    "I'm never quite so stupid as when I'm being smart" (Linus van Pelt)
  84. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  85. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  86. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  87. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  88. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  89. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion