Bloomberg: China broke into US companies by adding chip on server motherboards
Likely the story of the day. Bloomberg posted an extensive article where they claim that the Chinese government tried to infiltrate into US companies by adding chips on server motherboards.
First, off this, the companies involved and the Chinese government is denying the story, but it seems well investigated, and if true the implications would be enormous as server/mobo provider SuperMicro is involved. And adding a chip into a PCB, is not something you do without corporation of the server motherboard manufacturer.
So the story is that basically some core logic was added onto the motherboards, chips the sized as a single grain of rice that had it's own IO, a networking interface and even a micro CPU. The discovery was made at Amazon who researched Elemental Technologies, a maker of software for servers that the American company Super Micro Computer, or Supermicro, uses. During that investigation, Amazon stumbled on the extra chip on the motherboard. Initially sized slightly smaller than a fingernail and later on an even smaller version. This chip would be able to contact servers over the web and receive instructions, and it's claimed it would be able to modify the server software, a backdoor.
The stories get weird here; Apple and Amazon are denying any existence of the chip. "Apple has never found malicious chips, hardware manipulations or vulnerabilities that have been deliberately placed on a server, Apple has never had contact with the FBI or any other service about such an incident," Apple says it has 2000 servers from Supermicro, but denies that it has found the chips. Amazon says in its denial that it found four problems with the purchase of Elemental, a takeover that took place in 2015. None of those were in the hardware.
Have a read here, at bloomberg.
Unregistered
Broke-back served
Senior Member
Posts: 2843
Joined: 2009-09-15
......
......
......
The parts tend to be alot better made too. How many can say they seen a $400+ h110 chip set motherboard? Yes that is what a low end board made by a US company that does not out source to china can cost you.
Care to share any links? Honestly I would loved to see some! I thought you meant PNY at first but afaik they don't make motherboards anymore.
Senior Member
Posts: 607
Joined: 2002-03-22
What's really sad is that SuperMicro used to be the only company who made their boards in the USA.
Senior Member
Posts: 7757
Joined: 2005-12-06
I agree the way the denials are written are odd. Amazons in particular:
So all they are saying is they didn't know of any malicious chips being installed. There could have been, they just didn't know of any.
They also aren't saying that one of these chips was installed in every server. If this is true, they could be in 1 in every 1000 or something. Of course it would then be harder for them to find.
Senior Member
Posts: 13803
Joined: 2004-05-16
Yeah I agree but then why is there a concerted effort by seven different people ranging from different backgrounds both politically and private/public trying to say this happened? Or, why is Bloomberg so hellbent on fabricating a story like this when it was obviously going to be outright denied by the companies and obvious lack of evidence? The whole thing just seems so strange to me.