Vodafone Found Hidden Backdoors in Huawei Equipment

https://www.bloomberg.com/news/articles/2019-04-30/vodafone-found-hidden-backdoors-in-huawei-equipment

by jmsflknr • 7 years ago

147 117 7 years ago

okket• 7 years ago

"While the carrier says the issues found in 2011 and 2012 were resolved at the time, the revelation may further damage the reputation of a Chinese powerhouse."

NotPaidToPost5• 7 years ago

I'm sure that they're going to find out that some people at Huawei do not wash their hands after going to the toilet.

Do you really want your data in those hands?

SiempreViernes4• 7 years ago

Do the Snowden documents contain any NSA guidelines on sanitation procedures after taking a leak? If they a rigorous the NSA might be up for an unexpected boost in popularity!

NotPaidToPost5• 7 years ago

I think they might still have had "don't ask, don't tell" at the time.

dang3• 7 years ago

Please don't do this here.

NotPaidToPost5• 7 years ago

What is 'this'? Sarcasm or not following groupthink?

steve19• 7 years ago

Hard to know from the article, and Bloomberg does not have a good track record, if the 'backdoor' was a vulnerability , an unwanted feature or an actual backdoor.

I might imagine a Chinese headline with "US firm Intel backdoors every CPU", which may or may not be true depending on your feelings on Intel ME

undecisive• 7 years ago

Yeah. Quite telling when every quote from Vodaphone uses the word "Vulnerability", not backdoor.

kbumsik• 7 years ago

Europe’s biggest phone company identified hidden backdoors in the software that could have given Huawei unauthorized access to the carrier’s fixed-line network in Italy, a system that provides internet service to millions of homes and businesses

I think it is enough to be called a "backdoor".

gloflo5• 7 years ago

No, when reading the whole article, there are much more varied interpretations.

Bloomberg added the 'political' backdoor spin.

danarmak4• 7 years ago

A backdoor is a deliberate remote-access vulnerability that the creator intended to use for illegitimate access.

The same code, but intentional, is a bug and vulnerability, but not a backdoor. Same security implications, but a big difference wrt. culpability, appropriate punishment, and expectations of future behavior.

VvR-Ox2• 7 years ago

Intel ME _is_ a backdoor.

The funny thing is that there are many more. Interesting how the EU is dealing with this - most media seems to focus on how badly china could be spying while the US proved they aren't trustworthy long before.

pizzapill2• 7 years ago

Pretty obvious how the EU will deal with it. I once read the official statement of the German government that there is no way the US is spying on us while walking past dozens of huge radomes on a US base close to ESA hq.

I read the news when it was discovered that our intelligence service regularly updated NSA selectors to spy on internet users and never looked into what they were updating. Suddenly they "found out" that the US wasn't looking as much for terrorists but more for industrial secrets. Ups, who would've thought.

I don't want to spied on by the Chinese government but it doesn't matter much when I'm 100% spied on by at least the USA and the UK.

fxfan3• 7 years ago

You haven't worked for large companies have you? Intel ME is NOT a backdoor. It may have vulnerabilities, sure. But none explicitly put in there.

It was designed for a specific purpose- troubleshooting enterprise computers. And it does that job amazingly well. No more IT guy guiding me when he can just do all the clicks himself.

grkvlt• 7 years ago

Yes, and did you know most data centres add evil back doors to the machines you rent? The secret hardware is codenamed 'LOM' apparently...

klagermkii• 7 years ago

This article dances back and forth between saying "vulnerability" and "backdoor", which while they may have the same end result wildly differ in intent.

I can't tell the seriousness of this except for the telnet one.

Aissen• 7 years ago

How anyone trusts Bloomberg after the Seamicro chip story is beyond my understanding. (and specially the way it was handled and not retracted — anyone can make mistakes, but owning them is most important).

Even the title could have been something else. Like this excerpt from the article:

"Vodafone has defended Huawei against the U.S. onslaught"

jdsully• 7 years ago

The article takes a lot of words to explain they left a telnet server open. It wasn’t some super secret hidden thing.

sterlind• 7 years ago

Ah, but the article said that the telnet server "could still be launched," not that it was necessarily open. It could be one of those "magic knock" packets that 'launches' telnet, like the backdoor found in some Cisco routers a while back.

Also weird is that Huawei insisted on keeping it open until they'd completed testing... does that mean it's phoning home? Or that they have their own technicians coming around to service it?

Such a crappy article. Bloomberg should have learned from the Supermicro fiasco to include more details and not parrot a single source. At this point if IC is serious about Huawei posing a national security risk they should arrange a leak of their actual intel to force real public discussion..

jeroenhd2• 7 years ago

"Never attribute to malice that which is adequately explained by stupidity"

Some lazy engineer probably added the feature as a remote monitoring/debugging tool with no regard for security because it needed to work before the next big release. Disabling the feature before the next release would probably break all kinds of support and monitoring, potentially leading to instability or them being unable to service failing equipment.

jsty• 7 years ago

Whether or not it was the intention here, leaving a common or garden vulnerability as a backdoor gives excellent plausible deniability. "Whoops, we overlooked that" is much easier to explain away than an obviously designed remote access mechanism

O_H_E2• 7 years ago

Clean, no paywall, no ads: https://outline.com/VVdLhT

swarnie_2• 7 years ago

Has anyone else noticed the increased "scrutiny" the US has been putting on Chinese companies recently?

Huawei seems to be the biggest example and its worrying me because they are starting to strong arm EU allies to follow in their footsteps. Both Germany and the UK have cleared Huawei to take put in 5g rollouts against the USA's wishes.

I'm not sure who to side with here, the company with multiple allegations against it or the country which is known to do exactly the same thing except maybe worse...?

Try not to dismiss this because its not dripping in pro-usa sentiment, i'm interested to hear what people inside the bubble think.

NotPaidToPost5• 7 years ago

Telecommunication is of strategic importance and the West has had a monopoly on it.

This monopoly had ended and that makes some people uncomfortable.

Both Germany and the UK have cleared Huawei to take put in 5g rollouts

France has as well, as they said that all suppliers will be treated equally and subject to the same security tests.

swarnie_2• 7 years ago

France has as well, as they said that all suppliers will be treated equally and subject to the same security tests.

This is the bit that gets me. I simply don't believe you would approve a supplier with a question mark over them without running it past GCHQ/MI5/MI6 ect..... Presumably Germany and France did the same thing with their security services.

It leaves me wondering if the US know something their 3 closest allies don't or if their position is purely economic/ideological.

gloflo5• 7 years ago

Absolutely, I find the increase of our politics and media attacking 'The Russians' and 'The Chinese' in recent years very concerning. Especially with the lack of reflection on our own actions both nationally and internationally. Like pervasive surveillance, hacking, military aggression and influencing elections, just to name a few.

mschuster91• 7 years ago

Absolutely, I find the increase of our politics and media attacking 'The Russians' and 'The Chinese' in recent years very concerning.

I rather find it concerning that Russia has been financing the far-right, nationalist and anti-European parties that have risen over entire Europe, and that China is using debt as political leverage to gain power over poor African countries.

Add to this that many Western companies and politicians only look for the next quarter/election results and not 10, 20 or heaven forbid 50 years in the future... while this is precisely what Russia and China are doing. A splintered EU won't do a thing when Russia once again screws over human rights, and no one in deep debts to China (or with all manufacturing outsourced to China...) will dare criticize them when they start executing the Uyghur Muslims.

SiempreViernes4• 7 years ago

It was Obama that pivoted to putting China in the "big bad" portrait frame, though at the time scary foreigner wasn't an important part of the incumbents political strategy.

China has also relatively recently gotten a more hardliner leader, which is bound to sour relations with "the West" to some degree as he imposes weird restrictions on human rights and reverses the trend towards openness of years prior.

But the US now has an openly racist and explicitly nationalist (in US terms) president, so open conflict with the primary enemy was guaranteed from the start. For deep ideological reasons it is necessary for the current administration that there should be conflict with the rest of the world. With this sort of focus by the administration the media reporting is bound to follow to some extent.

tempguy9999• 7 years ago

Try not to dismiss this because its not dripping in pro-usa sentiment

I find your presumption, that other people are more biased than you, somewhat offensive.

i'm interested to hear what people inside the bubble think.

I find your presumption, that other people are less capable of independent thought than you, very offensive.

My experience from posting elsewhere is that a thoughtful post is surprisingly well taken even if it's not pretty. Actual case, I posted https://news.ycombinator.com/item?id=19783291 last night and expected to get crucified because... well, for obvious reasons. I very nearly didn't post. It actually got upvoted. So, steppenwolf, don't assume the worst of people.

Traster• 7 years ago

Well I'm from the UK and this was actually a big topic of discussion recently because the Prime Minister was briefed at the National Security Council, made a decision to allow Huawei and then it leaked that she was advised by the NSC not to. So it's not exactly uncontroversial.

In my opinion it's very clear that the Trump admin is willing to just blatantly make up accusations to harm their economic adversaries. We all remember Trump sticking tariffs on goods for "National Security" that were nakedly economic protectionism. Having said that, it's also true that both China and the US are putting backdoors in technology to provide espionage opportunities. The question is though - are we likely to end up on the opposite end of the US in a war, or China? Well at the moment China is definitely more of a threat. So it's more dangerous having the Chinese back doors. That may well change though and the UK should absolutely be developing methods to mitigate all infrastructure attacks like these (and obviously putting our own backdoors in ARM chips where we can).

amelius2• 7 years ago

Can't Huawei just license their technology to a US firm, so this hardware can be implemented and produced under US supervision?

mr__y2• 7 years ago

Chinese company licensing their technology to a US company that would be a remarkable plot-twist

On the other hand given how sophisticated these things are , even if all the source code is available you can't be 100% sure to spot all the bugs/vulnerabilities/backdoors. I guess this applies to hardware equally well.

amelius2• 7 years ago

I mean at a higher level: their algorithms and analog designs licensed to the US, not the source code.

negamax2• 7 years ago

I can’t tell if this is true or an organized smear campaign against Huawei for monetary reasons.

danarmak4• 7 years ago

Why not both? Many routers have had remote access vulnerabilities, but there's a clear reason to write about 2012-era vulns about Huawei and not some other manufacturer.

gloflo5• 7 years ago

What would be that reason?

mr__y2• 7 years ago

I believe it's both. I mean there could be some backdoors and there are some vulns portrayed as backdoors but probably the situation is no different for any other manufacturer. But since there is a campaign against Huawei everyone is concentrated on researching and reporting problems with that particular brand while ignoring all the others

_cs2017_• 7 years ago

My guess is it's not an organized smear campaign. Rather, it just happens to be a hot topic these days, an easy way to gain some clicks and subscriptions. Kinda like UFOs, government conspiracies, "Elvis Presley Seen Alive" etc., but for a slightly more sophisticated audience.

agumonkey• 7 years ago

Who would benefit from Huawei being out ? (genuinely curious)

Fnoord2• 7 years ago

I'm not sure but..

"There are only five companies in the world offering 5G radio hardware and 5G systems for carriers: Huawei, ZTE, Nokia, Samsung, and Ericsson" [1]

And I suppose Cisco?

[1] https://en.wikipedia.org/wiki/5G

thenickdude• 7 years ago

If it was true it would be trivial and painless for them to provide proof. They haven't, therefore it's misinformation.

threeseed9• 7 years ago

I work for a telco and it's not about money.

With 5G the architecture is far more sophisticated and wide reaching. Companies are also looking at containerisation to go with it which means that vulnerabilities can do far more damage and stay hidden far longer.

Telcos are very much looking out for the interests of their users because once you're known as not being private and secure your business will be finished.

negamax2• 7 years ago

You mean the same telcos that sell location data of their users to third parties. Using dubiously marketed plans. List goes on. I think they are far away from making a case for looking out for their users.

0898• 7 years ago

As Jon Gruber says: "Bloomberg, of course, is the publication that published “The Big Hack” in October — a sensational story alleging that data centers of Apple, Amazon, and dozens of other companies were compromised by China’s intelligence services."

"The story presented no confirmable evidence at all, was vehemently denied by all companies involved, has not been confirmed by a single other publication (despite much effort to do so), and has been largely discredited by one of Bloomberg’s own sources."

"By all appearances “The Big Hack” was complete bullshit. Yet Bloomberg has issued no correction or retraction, and seemingly hopes we’ll all just forget about it. I say we do not just forget about it. Bloomberg’s institutional credibility is severely damaged, and everything they publish should be treated with skepticism until they retract the story or provide evidence that it was true."

logifail• 7 years ago

everything they publish should be treated with skepticism until they [..] provide evidence that it was true

Call me a cynic, but I'd hope all of us would want to take that approach with every source.

threeseed9• 7 years ago

If we all followed your advice the world will be a truly awful place to live.

Given how critical journalism is to the fabric of society I prefer to give them the benefit of the doubt wherever possible.

krn• 7 years ago

I have explained why Bloomberg's story would have been vehemently denied by all companies involved even if it was completely true:

https://news.ycombinator.com/item?id=18655803

Many people in tech, including John Gruber, seem to lack a basic understanding of who makes decisions concerning national security and international politics.

networkimprov• 7 years ago

Denials made under oath in court might be worth considering. Public denials are a penny per gross, i.e. meaningless.

tim333• 7 years ago

I think your argument is the security services or the US government would tell them to deny it but I don't see why. Google 'Chinese hacking' and there are hundreds of stories. It's not a big secret. I can't see why they'd censor it.

neximo64• 7 years ago

How do you know for sure that the story is false? As you've mentioned Bloomberg hasn't corrected or retracted the story. Governments and companies have in the past denied things that have been true.

Do you seriously think Huawei vehemently denying that it has backdoors in its technology makes it true all of a sudden?

longhorn_alum• 7 years ago

How do you know for sure that the story is false?

That's not how journalism works, at least until fairly recently

crispyambulance3• 7 years ago

If Bloomberg is going to make serious claims like that they NEED TO BACK IT UP with some evidence.

Not a damn thing came out of the Supermicro story. And now this story about Huawei where it's unclear if they're talking about bugs, vulnerabilities or deliberate back-doors--- three very very different things.

It's not that I trust Huawei either, but if Bloomberg is going to make claims like that they better be fucking true and verifiable.

freeflight• 7 years ago

Because an actual review by Super Micro did not find any chips like that [0]. Unlike the Bloomberg article, they also released which company did the audit, while whoever was behind the Bloomberg article couldn't even supply a sample of these chips to any other security researches.

Which was just very weird: On one hand you claim to have discovered this extraordinary thing trough physical evidence, yet when asked to produce said physical evidence, you can't. That alone was reason enough to trigger several red-flags.

[0] https://www.reuters.com/article/us-supermicro-chips/super-mi...

fxfan3• 7 years ago

If one mistake tarnished reputation forever then after Iraq war none of CNN, Fox, NYT, MSNBC, WaPo should be in business, specially since all of these were accomplices in and not victims of falsehoods.

linuxftw• 7 years ago

You are allowed to objectively criticize the Iraq war any more as it's been endorsed by both major political parties at this point.

It's sad that the major news outlets are complete propaganda machines at this point. Nobody is taking the government to task for it's continued wars in the Middle East. The only angle I ever see is how some 'atrocity' has taken place and how we need to bomb them even more.

threeseed9• 7 years ago

Bloomberg publishes what thousands of articles a year. Some percentage of them are guaranteed to be wrong. That doesn't meant that the burden of truth should instantly shift towards them being untrustworthy based on a single article.

Journalism depends on the public trusting them and in the current environment in which that trust is being eroded to have comments like this that dismiss Bloomberg entirely is reckless and pretty disgraceful to be honest.

crispyambulance3• 7 years ago

     > That doesn't meant that the burden of truth should instantly shift towards them being untrustworthy based on a single article.

How many very high-profile articles need to be complete bullshit before it's time to start questioning the integrity of Bloomberg?

The Supermicro nothing-burger was supposedly the culmination of a year of effort by top-shelf journalists. They knew what they were doing, they had NOTHING to show for it and published anyway. I think that's irresponsible at best and more likely had ulterior motivations.

jarfil• 7 years ago

being untrustworthy based on a single article

A single article... and the negative to do anything about it.

Yes it does.

SiempreViernes4• 7 years ago

Abandoning Huawei for 5G, with Europe already lagging behind China and the U.S., could force them to rip out the supplier’s 4G gear

Does anyone know what this is about? Both the need to rip out 4G gear if they don't want to use the new 5G stuff, and also the statement about Europe being behind China and the USA?

jeroenhd2• 7 years ago

I think the idea is that Europe would rip out all Huawei components after the scandal, requiring a revamp of both 4G and 5G networks.

I doubt the US is that much ahead of Europe. It's true 5G networks are yet to really roll out, but with the higher population density the 4G coverage and residential internet is better in most of Europe, making the current 4G network suffice for now for many people.

SiempreViernes4• 7 years ago

Yeah, Bloomberg themselves list Nokia and Ericsson as the next largest actors on the market after Huawei in an infographic, and I don't think those count as US companies so I'm not sure what that comment was about.

bildung3• 7 years ago

I doubt many in the US (and Europe) even have full 4G speeds, e.g. 1 gigabit/s downstream.

icebraining2• 7 years ago

Supposedly higher density makes 5G more important, not less, since it supports way more devices in the same area, while it doesn't really improve on the coverage distance, which is more important for more rural areas.

caprese• 7 years ago

Alternate headline:

Chinese intelligence joins US and Five Eyes coalition in public-private partnership global surveillance program, information sharing agreement to be discussed in upcoming trade talks.

Whataboutisms only work when the accuser is assuming something un-ordinary is happening, after knowingly or unknowingly exempting themselves from the behavior they already practice.

gloflo5• 7 years ago

One could replace 'Huawei' with 'Cisco' in this article and everyone would just nod and sigh. The political spin on it is concerning.

O_H_E2• 7 years ago

I was skeptical about "boycotting" China and Huawei for a long time; just thought that they make cheap phones, and innovative tech, so why not.

I changed 180 degrees when I started learning about the growing Chinese influence, how politically corrupt they are, and the excessive violence and human rights violations exercised against minorities.

China is growing its economic dominance very quickly. They are gaining many growing Asian and African countries under their belts (pun intended with the belt & road initiative [1])

These poor counties don't really have a say when offered china's generous offers, but we do.

It is going to be expensive, just like trying to fix climate change is: We have to be willing to pay to fix our mistakes (or other people in our society, if we want better future for our [grand]kids. But we will only be paying the price of our mistakes: depending that much on sweatshops, factory workers who are paid next to nothing, and collaborating with an authoritarian regime that clearly opposed our values for the longest time.

[1] https://en.wikipedia.org/wiki/Belt_and_Road_Initiative Concentration camps and race-based terrorism in Xinjiang: https://www.businessinsider.com/what-is-life-like-in-xinjian... Belt and road effect on nature: https://www.businessinsider.com/china-belt-road-encourages-i...

PS: I agree with the stance on bloomberg, but that doesn't really defy my point. I just had to get something off my chest.

icebraining2• 7 years ago

What do you suggest we do? I'm asking in good faith; I think the worries of the influence of the CPC in the world are valid, but China can't simply be boycotted like any small country, and it's also not clear to me those boycotts (Cuba, Iran, etc) really effect change.

joaomacp• 7 years ago

I think it's important to show our governments that we're worried about this influence. Hopefully they'll react to that and move closer to the people's wants (you know, like democracies are supposed to work)

pmontra• 7 years ago

We can choose who we want to be spied by.

cies2• 7 years ago

I swapped out China for US, Huawei for Google/Apple/Amazon/Facebook, Asian for South American, and it all still made sense.

threeseed9• 7 years ago

US is a democracy with an independent judiciary. China isn't.

Google, Apple etc are public companies. Huawei is state controlled.

So it only makes sense if you completely ignore the basic facts.

BLKNSLVR6• 7 years ago

"Chinese influence, how politically corrupt they are, and the excessive violence and human rights violations exercised against minorities."

I know your heart is in the right place, but you could replace China with "The US" or "Russia" or "North Korea" or "colonial Britain" or almost any other country and it would be true. Those who wouldn't be worthy of the list are those who've never had the resources or opportunity to make the list.

It's sad, but I believe it's pretty close to the truth.

In relation to China, "The West" gifted it the power it now wields by outsourcing manufacturing there because cheap labor meant much higher percentage profits for all the savvy business owners who didn't want to pay local rates. And didn't they do well over the last 40-odd years! Can't deny it being smart business back then. Also can't deny that China's current world power status wasn't predictable 40-odd years ago if businesses everywhere decided to follow suit. And they did, and here we are, and all the countries that host companies that contributed to this are now having a cry about the actions of the monster they profited from creating.

tomp• 7 years ago

All that is true.

Howver.

Given the choice, I would much prefer to live in the US (or US-dominated/sponsored West) than in China, Russia, Middle East etc. US has better economic, legal and political systems. It doesn't discriminate against foreigners or religions, allows foreigner people and companies to compete in the markets and make enormous amounts of money, it has one of the most transparent and stable political systems in the world (which allows immigrants to participate in partially, and 2nd generation immigrants completely).

Sure, the US is not perfect, but that's why I support the US and am in favor of boycotting China (and other less-free countries).

civilitty• 7 years ago

And they did, and here we are, and all the countries that host companies that contributed to this are now having a cry about the actions of the monster they profited from creating.

But did they really profit? Let's assume for a second that the media isn't one monolithic entity governed by suits in a smokey board room but by many competing entities with opposing and dynamic economic incentives, like the public's fatigue and need for novelty. Let's assume that these changing media narratives are purely a result of inter/intra-generational variance in upbringing and other effectively random factors (accumulation of wealth and social mobility among them).

Has the general public truly profited from the movement of manufacturing over seas? I don't mean intangible improvements like higher resolution televisions and thinner smartphones and cheaper everything - just because they can be measured in SI units or dollars doesn't mean that they tangibly improve someone's life. I mean by the cold hard numbers. Is the average middle class family healthier than they were before? Are they spending less money to stay healthy? Are they more secure in their finances? Can they take longer vacations? Can they afford to send their kids to college without them having to balance study and worm time? Are they happier?

jhanschoo• 7 years ago

you could replace China with "The US" or "Russia" or "North Korea" or "colonial Britain" or almost any other country and it would be true. Those who wouldn't be worthy of the list are those who've never had the resources or opportunity to make the list.

Many Western countries have a checkered past, but it's not exactly as though present citizens of the West were directly involved in the atrocities committed in the past by the West. Every sufficiently long lived state has had its dishonorable days, but it's not like we can't criticize both the past and current behavior of these nations and the /current/ behavior of China.

On the other hand, it is to the current Western climate's benefit that many dare make such criticism openly on the record and without fear of persecution (e.g. Gitmo). The same cannot be said of China.

And didn't they do well over the last 40-odd years!

While your paragraph has the tone that the West is simply getting its just desserts, I find it unwarranted. This criticism, at its best, is criticism of past bad realpolitik policy by the West. People like the parent comment are only just learning of how woeful it is that Chinese influence is spreading, when Chinese influence is that unjust. It is useful to know that the West may have fed the beast. But the parent comment you are replying to was likely ignorant of the situation then and likely had no decision-making power then anyway. Thus adopting such a tone is in quite bad taste, since the parent comment is likely a victim of someone else's poor decisions and not their own.

samirm• 7 years ago

You couldn't sound more pretentious if you tried

andrzejg• 7 years ago

It would be nice if they compare Huaweii to other vendors. I am quite sure Erricson and Nokia had some backdoors/critical vulnerabilities as well. It is quite common if the policies are poor and they skip some penetration tests. I don't think anyone would make such silly backdoors on purpose (like unsecured telnet connection).

Uptrenda• 7 years ago

As opposed to backdoors in:

- The SIM card for remote operator app provisioning.

- The baseband processor (that supports over-the-air fireware updates, "typhoon boxes", and other horrible crap)

- The GSM spec, lulz (that allows for binary SMS app pushes signed by certain keys, "silent" SMS to track location, and so on by protocol standard.)

- Obsolete, broken, and purposefully weakened crypto that remains in use for backwards compatibility (and spying.) Not that it would matter anyway because traffic is unencrypted over core links.

Vodafones entire business model depends on backdoors for controlling customer equipment and tracking subscribers. Also, China numba wun!

csin• 7 years ago

Not be mention being fined in multiple countries for shady marketing practices!

apexalpha• 7 years ago

Vodafone said in the report that Huawei would need to remove or inhibit a so-called telnet service—a protocol used to control devices remotely—that the carrier said was a backdoor giving Huawei access to sensitive data.

This seems like a diagnostic telnet port left open by accident. I'm very sceptical at this point at any American government or media finding a 'backdoor' in Huawei.

A backdoor implies this is intentionally left open to later get unauthorized access.

Why would anyone build a 'backdoor' on an open telnet port?

This seems intentionally blown out of proportion to fit a narrative.

threeseed9• 7 years ago

It's not just American government or media who are wary of Huawei.

It's EU, Japan, Australia, New Zealand, Canada, UK etc.

BLKNSLVR6• 7 years ago

Australia, New Zealand, and Canada are only on your list because of the American government's narrative.

The UK are being threatened by the American government because the UK intends to continue using Huawei equipment.

EU has specifically said the American government's narrative will NOT be taken into account. The EU will do their own due diligence.

As an aside: I would hazard a guess that Germany isn't paying much attention to the American government's narrative due to the well-documented bugging of Angela Merkel's phone by US spooks.

HenryBemis2• 7 years ago

I have been playing VikingMUD for more than a decade. I have been 'backdoor/hacking' it when I was using telnet to connect?

I have been audit in IT/IT Audit/IT Security for quite a while. Having ability to telnet in is not a crime. We got firewalls for stuff like that. Even if it is not documented in whatever paperwork have been provided, it takes 5 seconds on a scan to pick this up. There also a bunch of IDS/IPS out there that would spot and kill such a connection attempt in a millisecond.

Also, telnet is unencrypted. Who attacks something when everything is readable? It beats the purpose.

This story has so many holes that a junior net-admin could prevent in their first week. I will assume that Vodafone has 'an army' of highly skilled network and security administrators that have "block telnet" in the first page of their checklists.

I am not taking sides. I am just thinking of ways I have reacted in the past when I found on firewall logs blocked connect attempts.

I also think Bloomberg should stick to what they do best, money. Let the IT Sec to far more qualified outlets. Or if they really want to do this right, and not just aim for clickbaits, get a team of experts to go through their material before they post.

threeseed9• 7 years ago

I don't think you have an idea of how a telco works.

There isn't some giant firewall that every request goes through so you can say "block port 21" and your problem is fixed. Most of the equipment is talking directly to each other on many different private networks some of which may be managed by third parties. And as companies shift towards virtualised, container based architectures it can become harder as there is more complexity as companies transition.

And not sure if you've worked at a large company before but the idea that they have this army of highly skilled people who just make sure everything works perfectly isn't what happens.

Fnoord2• 7 years ago

Backdoors are always hidden. Else it is a "frontdoor".

fredgrott• 7 years ago

leaving un secure stuff open is not the same as a damn backdoor

BUT, being lax in rigour concerning what ports, etc are left open and the security reasons why is just at some point a question of are they an unknowing asset of China Gov...

Both are equally important

tinus_hn• 7 years ago

It’s one of these debug interfaces they find all the time in network equipment, either Chinese or by Cisco.

Vodafone Found Hidden Backdoors in Huawei Equipment

Related Stories