US Asks Foreign Allies To Avoid Huawei (cnet.com)

The US government is reportedly trying to persuade its foreign allies' wireless and internet providers to avoid Huawei equipment. From a report: Officials have spoken to their counterparts and telecom bosses in Germany, Italy, Japan and other friendly countries where the Chinese company's equipment is already in use, the Wall Street Journal reported, citing unnamed sources. The US is reportedly particularly worried about the use of Huawei equipment in countries with American military bases, since most nonsensitive communication travels via commercial networks, and it's concerned about Chinese meddling.

Comments

Re:So they won't cooperate with the NSA?

[Freischutz]

You can't buy this kind of premium advertising.

I've had a couple of Huawei's 4G usb/wifi connectors. Thus far they have turned both turned out to be a complete and utter pile of crap so the US Govt. is preaching to the converted as far as I am concerned since I am already avoiding Huawei products like the bubonic plague.

Re:So they won't cooperate with the NSA?

[Zocalo]

Depends where the hardware is in your infrastructure and your levels of paranoia/security requirements. A lot of my clients run high-value networks (national infrastructure, etc.) and most are now moving towards dual-vendor perimeter firewall solutions, creating a physical DMZ in between, not the virtual ones you get by applying rules to traffic passing between internal different ports on the same firewall.

One vendor is typically from a Five Eyes country (there's only so many options for this kind of hardware), and the other absolutely will not be - internal firewalls may also be deployed. Rulesets on both with be default deny, and both will be actively monitored for suspicious traffic coming from the other as part of the standard IDS/IPS setup. Even if both are backdoored on behalf of their manufacturer's governments, it's going to be very hard for either country's security services to get into the network through both firewalls, or to successfully exfiltrate data from a compromised box on the inside.

Well, that's the theory at least. If one or both know about the other's backdoors (which is why this is such a terrible idea in the first place, because sooner or later they probably will) then all bets are off.

No evidence, no proof, no oversight

[Tokolosh]

If the US government has information that Huawei is nefarious, why not present the evidence? Instead, we must trust the say-so of an organization that asserts the right to snoop on it's own citizens, to drone-strike them without trial, and to prosecute non-US whistleblowers.

I realize that the Chinese are not innocent, but from the point of view of an American they are the lesser of two evils.