Slashdot Mirror
US Nuclear Lab Removes Chinese Tech
Rambo Tribble writes "Reuters reports that Los Almos National Laboratory has removed switches produced by Chinese firm H3C, which once had ties to Huawei. This appears to be a step taken to placate a nervous Congress, rather in response to any detected security issues. From the article: 'Switches are used to manage data traffic on computer networks. The exact number of Chinese-made switches installed at Los Alamos, how or when they were acquired, and whether they were placed in sensitive systems or pose any security risks, remains unclear. The laboratory - where the first atomic bomb was designed - is responsible for maintaining America's arsenal of nuclear weapons.
A spokesman for the Los Alamos lab referred inquiries to the Department of Energy's National Nuclear Security Administration, or NNSA, which declined to comment.'"
If they don't want made-in-China equipment, what are the alternatives? I don't think that doing without is much of an option.
We have the know-how, and a patriotic, knowledgeable, and capable workforce. If congress instituted taxes on foreign made goods to help fund jobs in America, we'd be safer.
Remember kids, if you're not paying for the service, YOU ARE THE PRODUCT THAT IS BEING SOLD.
They will most likely be replaced with equipment provided by vendors who are on the U.S. military's "Trusted Foundry" schedule. It doesn't matter if half the chips in those "Trusted Foundry" switches are manufactured in China - as a result of careful research, you can be "reasonably" sure they don't contain backdoors or malicious code.
"Reasonably."
THIS SPACE INTENTIONALLY LEFT BLANK.
A nuclear lab is, as I would imagine, a place where radioactive materials are researched in order to produce destructive levels of energy. Information generated, processed and researched in this lab should be ideally completely cut off from the rest of the World. It makes zero sense to connect this network of computing devices to the outside world and the internet, so that researchers can post to Facebook or play networked Solitaire. Security should be achieved by completely isolating this network from the rest of the World.
I do not know of any 'networking' devices from any country or vendor that does not have any vulnerabilities, or is completely immune to hacking. To imagine that non-Chinese networking devices are more 'secure' is to totally miss the point.
If you keep throwing chairs, one day you'll break windows....
for opening up China to trade. (granted he thought he was doing good by dividing the Communist bloc and weakening the Soviets)
Free unrestricted trade is NOT a 100% universally good thing, no matter how much our glorious corporations and econ professors tell us so.
Hardware and chips are about the most obvious attack vector for USA defense hardware there is. I seriously doubt that more than half of our radio transmission equipment would work 15 minutes into a conflict with China, since this too is an obvious weak point. I expect that hardware generated viruses would take out quite a bit of our tactical grids as well. It's what I would do, if I were them.
Bottom line. We can't buy *ANY* defense equipment from overseas, directly or indirectly, without increasing security risks significantly.
Not that anyone cares, of course. Politicians just want to reduce costs. So do contractors and subcontractors. Monitoring all this costs money and nobody wants to be accused of "regulation" or being against globalization, and so we seal our own eventual military doom.
Please do not read this sig. Thank you.
Seriously, You know this? How?
As recently as 2007 this was clearly not the case.
Because I've worked in a facility like this before. Not Los Alamos, but with classified data.
It was only after several years on the job that she was caught with bomb designs in her trailer and fired. But the investigation reveals that Quintana had taken her cell phone into a vault filled with secret documents where she worked — another major security violation. She also had access to a high-speed classified printer, even though such access was "not required by her job," and used the device to run off hundreds of copies of classified documents that she also brought home.
See? She violated security protocol by bringing her phone into the vault. It says so right there in your own quote. So as I said there should be 0 iPhones around there. Whether people actually follow the rules is up to the site security officer, but the rules clearly state no cell phones.
See: http://www.time.com/time/nation/article/0,8599,1612912,00.html
For critical applications, one can use a White Rabbit switch. White Rabbit is a technology developed at CERN and other institutes and companies. The switch PCB is Open Source (licensed under the CERN Open Hardware Licence) and all the switching happens inside an FPGA for which all VHDL sources are available under LGPL. There is already one company commercializing it, but the sources are all available for any other company to build it, test it, commercialize it and provide support. The terms of the licence give no privilege to any single vendor. No royalties, no patents. Plus the HDL can be customized for particular applications (low latency, redundancy...).