Beta

Slashdot: News for Nerds

×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

China Has Backdoor On US Military Chip

jjp9999 (2180664) writes | more than 2 years ago

China 11

jjp9999 (2180664) writes "Based on claims that silicon chips could be infected, security researcher Sergei Skorobogatov claims he and his team developed chip scanning software to put this to the test. They got their hands on a US military chip "that is highly secure with sophisticated encryption standards," that also happens to be manufactured in China. What they found was the chip has a backdoor on it that can disable the chip or reopen it at will. "This particular chip is prevalent in many systems from weapons, nuclear power plants to public transport. In other words, this backdoor access could be turned into an advanced Stuxnet weapon to attack potentially millions of systems. The scale and range of possible attacks has huge implications for National Security and public infrastructure," Skorobogatov writes on his blog."
Link to Original Source

cancel ×

11 comments

Troll submission alert ! (1)

Taco Cowboy (5327) | more than 2 years ago | (#40132253)

A "US military chip that is highly secure with sophisticated encryption standards" can never be made in China

That chip could be made in Taiwan or Korea or Japan, but definitely NOT China !

This submission is troll to begin with

Re:Troll submission alert ! (1)

mbourgon (186257) | more than 2 years ago | (#40132351)

The submission isn't a troll, but the paper could be. There's a lot of buzzwords within the paper and critically little data. Not saying it's not true, but I'd love to see someone else verify what they found. And if so, hoooo, boy.

Re:Troll submission alert ! (0)

Anonymous Coward | more than 2 years ago | (#40132549)

And oddly redacted data, both in the prose and the embedded images? The structure of the article looks like SEO more than any scientific or journalistic security reporting I've ever read.

Besides, it's duped in an adjacent article submitted at the *same time* with a different title. Not that I'm smelling outright sock-puppetry... but just sayin'

I'm calling it... notthebest if not outright binspam.

Re:Troll submission alert ! (2)

kermidge (2221646) | more than 2 years ago | (#40132925)

I don't know near enough to make any judgement on its merits, but

Quo Vadis Labs has a website. I spent twenty minutes plowing through the first pdf linked to. If it's fake somebody put a fair bit of work into it. http://www.quovadislabs.com/ [quovadislabs.com]

Sergei apparently has an office at University of Cambridge Computer Laboratory,
http://www.cl.cam.ac.uk/people/ [cam.ac.uk]
scroll down the list.

So, I'd suggest someone far more knowledgeable than I maybe check it out. My WAG is saying it's legit.

Re:Troll submission alert ! (2)

Taco Cowboy (5327) | more than 2 years ago | (#40133537)

You said:
 
 

"So, I'd suggest someone far more knowledgeable than I maybe check it out. My WAG is saying it's legit."

If you read that troll article more carefully, you will see the following:
 
 

Further funding is needed for us to progress to testing further silicon chips and to develop better search algorithms which would allow us to detect possible spy systems or vulnerabilities in a greater range of systems

***emphasis mine***

Lemme summarize that troll article for you ---

We are very smart people, we have offices in CAMBRIDGE UNIVERSITY and we have BREAKTHROUGH SILICON CHIP SCANNER TECHNOLOGY.

We hereby announced that we have found BACKDOORS in chips that we know were made in China, and somehow those chip have mysteriously turned into "US MILITARY CHIP".

We are telling you that the UK and USA governments BETTER FUND US to further our research or you guys WILL FOREVER BE FUCKED BY CHINA !!

The only aim of that troll article is money, lots and lots of money

It is nothing but a lousy scam.

This scam is so pathetic that even the worst Nigerian scam ever written looked more legit, in comparison

Re:Troll submission alert ! (1)

kermidge (2221646) | more than 2 years ago | (#40133791)

Okay, I get it. Thanks for the bold caps to help it sink in. These guys put some work into it, eh?

To be clear, didn't say I believed it ('cuz I don't know enuf), said it looked worth checking out.

As I was reading the pdf and other stuff, part of my reaction was "Gee, golly, wow." and part seeing the possibility of stock and cobbled photos, some nifty diagrams, some nice mumbo jumbo; and anybody can make a website claiming anything they like. Thanks for checking it out.

Do you trust China or US GOVT more? (1)

cheekyboy (598084) | more than 2 years ago | (#40133837)

Seriously dude,

Out of the billions of chips made, especially CPUs or TV chipsets or 3G dongles, or $40 routers/wifi units. Do you really really think not one single line or specific build run at night time doesnt have an extra 2% transisitors in it with a side stepped ROM code or 'secret triggered' bypass mode?

Seriously.... none at all?

Or, perhaps even 100% of items made for USA have NSA backdoors in there secretly in the 1mm thin line.

As it is there is proof that a mobile phone 'turned off' can still record audio secretly to its ram, with every single other feature off (except alarms).

Then once online and traffic is busy, can send the compressed audio sample at will via any return path, being local WIFI to NSA APs, or secret bluetooth clients (that can transfer without the OS reporting any activity) or even 3G transfer probably via a slow secret channel on 2G.

Seriously, you think a big govt, who knows that every single human has a phone would not even suggest or think of having this in? Ever?

Welcome to Super Max Planet Earth, where everyone is a slave to the banks, paying of fake interest rates that were created out of thin air and is owed to no one at all.

Re:Do you trust China or US GOVT more? (1)

Taco Cowboy (5327) | more than 2 years ago | (#40133953)

Just to ease your concern -

Claims made by of the pair of con artists:
 
 

We chose an American military chip that is highly secure with sophisticated encryption standard, manufactured in China

and
 
 

99% of chips are manufactured in China

Those guys are not talking about simple resistors or power pumps or heat sink

They are talking about " an American military chip that is highly secure with sophisticated encryption standard, manufactured in China " that they claim " 99% of chips are manufactured in China "

Translation:

They don't even know what they are talking about !!

Their scam might scare some congressmen shitless, but c'mon !!

Those of us who are in this field for ages see through their scam in a femto-second

Re:Troll submission alert ! (1)

mbourgon (186257) | more than 2 years ago | (#40135399)

Someone on boingboing found this link, which may have figured out the part.
http://news.ycombinator.com/item?id=4030746 [ycombinator.com]

Re:Troll submission alert ! (1)

Taco Cowboy (5327) | more than 2 years ago | (#40138359)

Many thanks for the headsup !

Indeed, the claim by those so-called 'security experts" are crappy at best

How can anyone take claim such as "99% of the chips are made in China" seriously??

Check for New Comments
Slashdot Account

Need an Account?

Forgot your password?

Don't worry, we never post anything without your permission.

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>
Create a Slashdot Account

Loading...