Hacker News new | ask | show | jobs
by TZubiri 78 days ago
Interestingly it's just for processors, I would have been down to read about at least a product that 'assures' the supply chain of a broader part of the stack, at least the hardware.

It's just not enough to make me care, I'd probably just rely on the packaging, and vendor procurement, but I guess this is an additional tool.
2 comments
kube-system 78 days ago
I’d think that an integrator would need to attest to their own supply chain controls. I’m not really sure how Intel could provide anything of value to validating the supply chain of their downstream customers.

Edit: looks like they have (one?) partnership in place to help an OEM do that: https://news.lenovo.com/pressroom/press-releases/intel-colla...

link
hypercube33 78 days ago
I think Lenovo has or had(?) ThinkShield to check your laptops build and shipping history or something.
link
chihuahua 78 days ago
4/2/26 Build complete at Lenovo factory Shenzen-149

4/3/26 Shipped to MSS facility Beijing

4/5/26 Received at MSS facility Beijing

4/5/26 Special firmware upgrade performed at MSS facility

4/7/26 Shipped from MSS facility Beijing to customer in United States via Fedex

link
jeffrallen 78 days ago
...which is exactly the same way backdoored Cisco hardware got to China.
link