This article has gone massively viral. If you have read it, its extremely sensationalist. The report does not clarify several gaps in the investigation that are obvious when you go through it. Unless Supermicro itself is state sponsored (which is not a claim the report makes), they should immediately spot a random chip on one of the motherboards they designed. How did they miss that? Then the report does something that messes up the base OS? How exactly would it do that. It gives a rather simplistic example of the system not asking a password to unlock stuff... even if the chip could do that, that's hardly the only security that a computing system has. The report also states that the chip makes the servers send data to remote machines over internet! How would you get past the perimeter security?
I don't bite this investigation for now. Not that I am denying corporates and governments are keen on having mechanisms to spy on comptitors, peers and enemies... but this is not how they'd go about it.
I don't bite this investigation for now. Not that I am denying corporates and governments are keen on having mechanisms to spy on comptitors, peers and enemies... but this is not how they'd go about it.