Bloomberg report) 중국해킹 Chip은 중국인민해방군 + 대만연합 소행?)

계속 하는 말처럼 김정은돼지는 은행직접해킹 + 시진핑은 전자제품에 해킹 Tool-Chip 심어서 해킹:) 미국에서 중국인민군이 직접개입한 정황도 포착했으며 ( 하긴 중국공산당이 지시안했으면 저런 짓을 왜 하겠냐) 특이한 점은 대만반도체회사들의 개입정황 역시 포착 왜 대만은 스스로 망하는 짓을 할 까?? <span style="font-size: 13.5pt; font-family: Georgia; color: rgb(255, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">중국에서 오는 모든 물품 특히 전자제품 ( 휴대폰 TV 세탁기 냉장고 에어콘 선풍기 프린터 컴퓨터 등등)과 통신장비등의 Supplying Chains으로서의 역활을 끊어야 한다, 즉 중국산은 모든 금지를 해야 한다는 그런 (정당구분없는) 미상하의원들의 한목소리:) 삼성전자 LG전자 한국계 다국적기업 전세계 생산시설을 가진 Supplying Chains 으로서 엄청난 수혜를 입을 건 팩트:) 분명한 건 미국은 다 알고 있다는 것! <h1 dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:11pt;">China Spy Chips Report Adds Pressure on Pentagon Cloud Security</h1>By <a href="https://www.bloomberg.com/authors/ATgAyUqfn-k/naomi-nix" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Arial; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">Naomi Nix</a> and <a href="https://www.bloomberg.com/authors/ASHACdMR7Hs/ben-brody" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Arial; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">Ben Brody</a>2018년 10월 5일 오후 4:00 GMT+8 Tech providers vying for a $10 billion Defense Department cloud-computing contract may come under added pressure to prove their systems are secure after a report that China sneaked spy chips onto servers used by U.S. companies including <a href="https://www.bloomberg.com/quote/AMZN:US" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">Amazon.com Inc.</a>, a top contender for the Pentagon award.Amazon, the market leader in cloud-computing services, was among almost 30 companies including <a href="https://www.bloomberg.com/quote/AAPL:US" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">Apple Inc.</a>whose servers were infiltrated according to a Bloomberg Businessweek <a href="https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">report</a> based on more than a dozen sources in the government and private sector.Apple, Amazon, server component seller <a href="https://www.bloomberg.com/quote/SMCI:US" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">Super Micro Computer Inc.</a> and the Chinese government denied the report. When asked for comment on the implications for its Pentagon bid, Amazon pointed to its statement denying the report.<a href="https://www.bloomberg.com/news/articles/2018-10-04/the-big-hack-amazon-apple-supermicro-and-beijing-respond" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">The Big Hack: Amazon, Apple, Supermicro, and Beijing Respond</a>.Security and procurement experts said Amazon’s prospects for winning the cloud services award may not be affected because it can argue that it was a victim that uncovered the problem. According to the report, Amazon unearthed the breaches, which happened at factories run by subcontractors in China, alerted authorities and took action to limit the consequences.Still, the revelations increase pressure on the Pentagon as well as on Amazon and the other bidders to step up measures to secure their systems in a global marketplace where integral equipment is manufactured in China.Representative Adam Schiff of California, the top Democrat on the House Intelligence Committee, said that panel should seek more information from agencies about whether China sought to infiltrate the computer-chip supply chain.“No one is safe,” said Darrell West, director of the Center for Technology Innovation at the Brookings Institution. “I’m sure Amazon has some of the very best security people. The fact that they had a problem should alarm everybody.”<h3 dir="ltr" style="line-height:1.38;margin-top:10pt;margin-bottom:10pt;">Deadline Looms</h3>The deadline for companies including Amazon, Microsoft, IBM, and Oracle to submit bids for the Pentagon’s project, which involves moving massive amounts of sensitive government data to a commercially operated cloud system, looms in just over a week.Amazon Web Services was seen as the front-runner from the start because it had already won a $600 million cloud contract from the Central Intelligence Agency in 2013. <a href="https://www.bloomberg.com/quote/MSFT:US" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">Microsoft Corp.</a> is catching up as it expands its work with the intelligence community.<a href="https://www.bloomberg.com/quote/ORCL:US" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">Oracle Corp.</a> declined to comment on the implications of the report on its bid for the Pentagon contract. Microsoft and International Business Machines Corp. didn’t respond to requests for comment.The Defense Department released in July its final <a href="https://www.bloomberg.com/politics/articles/2018-07-26/pentagon-goes-with-winner-take-all-10-billion-cloud-contract" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">requirements</a> for the project, known as the Joint Enterprise Defense Infrastructure cloud, or JEDI. Bids for the project, which could last as long as 10 years, are due on October 12th.A Pentagon spokeswoman, Heather Babb, responded to questions about addressing the risk of infiltrated equipment by referring to documents detailing the procurement requirements. Under those, the Pentagon is asking companies to meet strict security guidelines, including the ability to obtain top-level security clearances, offer government-approved encryption, provide local data centers and staff them with U.S. citizens.<a href="https://www.bloomberg.com/news/articles/2018-10-04/why-pentagon-cloud-computing-contract-is-a-huge-deal-quicktake" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">QuickTake: Why Pentagon Cloud-Computing Contract Is a Huge Deal</a>Senator Mark Warner of Virginia, the top Democrat on the Senate Intelligence Committee, said the Bloomberg Businessweek report “provides more evidence that China’s pattern of behavior is a serious threat to national security and supply chain risk management.”Security experts are grappling with the threat from secret devices being inserted into U.S. networks, in addition to cyberattacks from afar. The weaknesses in the global supply chain require constant vigilance from tech companies to stay ahead of developing threats, said Stan Soloway, president of consulting firm Celero Strategies and a former Defense Department official under President Bill Clinton.“You could have the toughest security requirements in place but downstream you are connected to a global supply chain over which the government does not have direct contract control,” Soloway said.While Amazon may have uncovered evidence of Chinese infiltration, according to the report, other companies that bought from Supermicro, the company whose subcontractors made the servers that were compromised, are also at risk, said William Carter, deputy director of the Technology Policy Program at the Center for Strategic and International Studies in Washington.“Given their market share, there’s a decent chance that AWS’s competitors use some of their hardware as well,” Carter said, referring to Amazon’s cloud division. “Many Chinese factories that do this kind of assembly work with multiple big U.S. companies," meaning the Chinese military could use them “to compromise all sorts of hardware.”David Wilcox, a cybersecurity expert who spent 37 years at the National Security Agency, said if the reports are correct, Amazon did the right thing. “They took their product and had it scanned by a security company that was doing their job."<a href="https://aws.amazon.com/blogs/security/setting-the-record-straight-on-bloomberg-businessweeks-erroneous-article/" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">Amazon rebuttal: Setting the Record Straight on Bloomberg Businessweek’s Erroneous Article</a><h3 dir="ltr" style="line-height:1.38;margin-top:10pt;margin-bottom:10pt;">Single-Provider Debate</h3>Cybersecurity experts are divided over the question of whether it’s safer for the Pentagon to invest in securing a single top cloud provider, as the Pentagon plans despite objections from Amazon’s rivals. Oracle, Microsoft and IBM have all <a href="https://www.bloomberg.com/politics/articles/2018-03-22/u-s-spending-bill-directs-pentagon-to-justify-cloud-award" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">argued</a> that having multiple providers isolates risk, ensuring that a problem in one company’s cloud services wouldn’t compromise the entire department.In a <a href="https://www.bloomberg.com/politics/articles/2018-05-14/pentagon-defends-cloud-contract-rivals-call-a-lock-for-amazon" style="text-decoration-line: none;"><span style="font-size: 13.5pt; font-family: Georgia; color: rgb(0, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">report</a> to Congress earlier this year, the Defense Department said making multiple awards under current acquisition law would be a slow process that “could prevent DoD from rapidly delivering new capabilities and improved effectiveness to the warfighter that enterprise-level cloud computing can enable.”<span style="font-size: 13.5pt; font-family: Georgia; color: rgb(255, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">Security experts pointed to the challenges of securing systems with components made in disparate parts of the world.<span style="font-size: 13.5pt; font-family: Georgia; color: rgb(255, 0, 0); font-weight: 700; font-variant-numeric: normal; font-variant-east-asian: normal; vertical-align: baseline; white-space: pre-wrap;">“The problem is most of our electronics are made in China,” said West of Brookings. “Even if a file server is made in the United States, it’s still likely to have components from abroad and especially from China. The fact that they are able to insert a microchip into devices is very scary.”Bloomberg Intelligence analyst James Bach said the problem should spark a discussion about supply chain security that goes far beyond the JEDI contract award and should involve all the large tech companies and Congress."Everybody has their hands in this," Bach said, noting that supply chain vulnerabilities pervade the U.S. government. "It’s not just Amazon or Apple."<div> </div>

새로운 알림0개 전체삭제

새로운 알림0개