Hacker News new | ask | show | jobs
by pjmlp 1614 days ago
I wonder if their next phones will be Made in Netherlands, or where will they buy them from to avoid spyware built into the firmware straight out of factory.

This is the kind of half baked decisions that show how those on the decision chain aren't deep into security and only are into it for the news.

5 comments

A large OS vendor issues its employees special hardened laptops for accessing any systems containing customer data. They have a very elaborate and inconvenient setup that's supposed to make them super-secure. The laptops are shipped directly from Lenovo in China. I asked the guy who was presenting this scheme how they know they aren't compromised from the factory, and he shrugged. I'm not sure what that means.
Sometimes half baked is better than a tray of eggs and some flour.
It's mitigation. If a SLA wants into a specific phone they can likely do it (whether using NSOGroup or more upstream means).
While true it’s still a good decision.
There are phones made in South Korea, India, Vietnam, Japan, Thailand and Taiwan.