Slashdot Mirror
Can You Trust Chinese Computer Equipment?
Ian Lamont writes "Suspicions about China slipping eavesdropping technology into computer exports have been around for years. But the recent spying attacks, attributed to China, on Google and other Internet companies have revived the hardware spying concerns. An IT World blogger suggests the gear can't be trusted, noting that it wouldn't be hard to add security holes to the firmware of Chinese-made USB memory sticks, computers, hard drives, and cameras. He also implies that running automatic checks for data of interest in the compromised gear would not be difficult." The blog post mentions Ken Thompson's admission in 1983 that he had put a backdoor into the Unix C compiler; he laid out the details in the 1983 Turing Award lecture, Reflections On Trusting Trust: "The moral is obvious. You can't trust code that you did not totally create yourself. (Especially code from companies that employ people like me.) No amount of source-level verification or scrutiny will protect you from using untrusted code. In demonstrating the possibility of this kind of attack, I picked on the C compiler. I could have picked on any program-handling program such as an assembler, a loader, or even hardware microcode. As the level of program gets lower, these bugs will be harder and harder to detect. A well installed microcode bug will be almost impossible to detect."
Yes,no,no,Yes. There are to many eyes on linux for anything to slip through. Given that even closed source is prodded from all sides, I am sure there are people who read Linux code for no other reason then because. I am not smart enough to read kernel code myself but have read through PHP packages, just because. Japanese read manga, americans comic, europeans strips and nerds source code. It is fun, and we need something to do with the time normal humans spend on mating.
MMO Quests are like orgasms:
You may solo them, I prefer them in a group.
Why is it riskier than buying American? NSA, FBI, CIA... Sheesh! It's the pot calling the kettle black!
sudo mount --milk --sugar