Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Why do we, as a global society, continue to tolerate the existence of these professional hackers? It’s time to get medieval on their asses. And don’t tell me they’re too hard to find. We are simply unwilling to dedicate the resources to do so.
That sounds like a great premise for an Apple TV+ series: a top-secret, black-ops, off-the-books unit of highly trained IT professionals/former Special Forces commandos who hunt down hackers and terminate them "with extreme prejudice." I'd watch it.
 


Apple supplier Taiwan Semiconductor Manufacturing Company today confirmed to TechCrunch that it recently suffered a data breach. TSMC is responsible for creating all of the A-series and M-series chips used in Apple devices.

Apple-M2-Ultra-Chip.jpg

A TSMC spokesperson said that a "cybersecurity incident" caused data "pertinent to server initial setup and configuration" to leak, but TSMC customer information was not impacted.Data from TSMC was listed on the LockBit ransomware gang's website on Thursday, with LockBit demanding $70 million to prevent it from publishing the stolen data. LockBit has attacked pharmaceutical companies, the UK's Royal Mail, U.S. government websites, and more.

LockBit says that if TSMC does not pay up, it will also publish passwords and logins. The data was stolen from Kinmax Technology, a company that provides IT services like networking, cloud computing, storage, and database management. Kinmax was working with TSMC, and on Thursday, told TSMC that its "internal specific testing environment was attacked," leading to the leak of "system installation preparation."

Other Kinmax partners include Microsoft, Cisco, and VMware, and it is not known if those companies were also impacted.

Article Link: Apple Supplier TSMC Suffers Data Breach, Hackers Demand $70M

TSMC and ANY other corporations ... LET THIS BE A LESSON.

database management: should ALWAYS remain In-House!!! That's literary you entire household of information. You can host externally through robust security layers and authentication and encryption yet the data management aspect should remain In-HOUSE!!!

I can assure you that Microsoft & VMWare do not outsource their DB management!!
 
That sounds like a great premise for an Apple TV+ series: a top-secret, black-ops, off-the-books unit of highly trained IT professionals/former Special Forces commandos who hunt down hackers and terminate them "with extreme prejudice." I'd watch it.
I'd watch that TV series.

So long as it doesn't use lame intro music like 🎶Bad-boys bad-boys watcha-gwana-dooo🎶 😂
 
I hope they didn't steal any schematics or trade secrets. Just imagine the fallout if a competitor figured out how to make M2-like machines.
Of course that is what they are after. Would you be surprised if some time later a Chinese company produces a similar chip in one of their laptops? Or even better....Maybe a big competitor company hired them to do the job....you never know now-a-days.
 
Why do we, as a global society, continue to tolerate the existence of these professional hackers? It’s time to get medieval on their asses. And don’t tell me they’re too hard to find. We are simply unwilling to dedicate the resources to do so.
Well, Russia, China, North Korea, among a few others, are not going to be bothered to send their trained hackers to US for trial. FBI can spend money and other resources trying to lure them out, but chance is slim. In summary, it is much harder than you think.
It's impossible to fix all vulnerabilities -- we've got to start killing the people who exploit them.
Might as well let machine build machine Rather than us. Heck, replace Tim Cook with AI equivalent. Saves Apple $5m right there.
 
  • Disagree
Reactions: Spock1234
TSMC and ANY other corporations ... LET THIS BE A LESSON.

database management: should ALWAYS remain In-House!!! That's literary you entire household of information. You can host externally through robust security layers and authentication and encryption yet the data management aspect should remain In-HOUSE!!!

I can assure you that Microsoft & VMWare do not outsource their DB management!!
Really?? are you sure Microsoft does not outsource their database? If AI can reproduce accurate Key codes, that might say something. They might not directly outsource, but their databases are networked to outsource locations. That opens up opportunity to hack.
 
TSMC and ANY other corporations ... LET THIS BE A LESSON.

database management: should ALWAYS remain In-House!!! That's literary you entire household of information. You can host externally through robust security layers and authentication and encryption yet the data management aspect should remain In-HOUSE!!!

I can assure you that Microsoft & VMWare do not outsource their DB management!!
Now-a-days, to much effort (money) to keep a closed environment. You would have to demand all employees to come in-house to work. Outsourcing saves tons of money, and good for short run numbers (savings) for managers to look good or for their bonuses (or good as long as you are at the company), but not in the long run for the overall health of the company, but you are correct. In-house is always the best for security, but tech is too complex now for that easy solution (though I strongly agree).
 
Really?? are you sure Microsoft does not outsource their database? If AI can reproduce accurate Key codes, that might say something. They might not directly outsource, but their databases are networked to outsource locations. That opens up opportunity to hack.
funny you seem to challenge yet not challenge lol.

Yes Microsoft does NOT outsource their database management. DB's can be outsourced but MANAGEMENT of them such as credentials who's working with them is not.
 
How such a reputable company chooses to put logins, passwords and sensitive data in the cloud is beyond me.
It's not "the cloud" is it. "The cloud" doesn't exist - it's just a computer somewhere else. None of these companies run their own server farms big enough to store all the data they generate so it gets outsourced. They also won't be store plain text passwords so it's irrelvant.
 
  • Like
Reactions: gusmula
TSMC and ANY other corporations ... LET THIS BE A LESSON.

database management: should ALWAYS remain In-House!!! That's literary you entire household of information. You can host externally through robust security layers and authentication and encryption yet the data management aspect should remain In-HOUSE!!!

I can assure you that Microsoft & VMWare do not outsource their DB management!!
Multiple companies have had their in house databases breached, T-Mobile has had their data stolen multiple times. You would hope that a company versed in security would be better then using in house people that are at the mercy of cut backs, low cost replacements and managers whose knowledge of security is based on reading an articl.
 
Why do we, as a global society, continue to tolerate the existence of these professional hackers? It’s time to get medieval on their asses. And don’t tell me they’re too hard to find. We are simply unwilling to dedicate the resources to do so.

Because in most cases apprehending them would require an act of war against foreign superpowers.
 
Why do we, as a global society, continue to tolerate the existence of these professional hackers? It’s time to get medieval on their asses. And don’t tell me they’re too hard to find. We are simply unwilling to dedicate the resources to do so.

What do you think having investigators, trackers, laws, jail time, etc, is? Just for fun? We aren't tolerating them. Doesnt mean they dont exist.
 
  • Like
Reactions: Saturn007
What do you think having investigators, trackers, laws, jail time, etc, is? Just for fun? We aren't tolerating them. Doesnt mean they dont exist.
We are not dedicating nearly enough resources to the effort. The powers that be always say security is their upmost concern. In reality, pursuing that is just too expensive for their tastes.
 
The only reason you found out about this incident is because they wanted to let it out. Why is beyond me. What is the difference between a white hat hacker getting paid for finding vulnerabilities and a black hat? Probably the amount of cash being paid. Who’s good or bad if it’s just a question of money? Look at yourself in the mirror.



For what it’s worth, Blackberry gives me commercial grade security that nobody talks about and for me it’s free! The best you will ever get as an individual is commercial grade security. Good people at Blackberry…



As for this “story” - well - it’s a story. 🤣
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.