Hacker News new | ask | show | jobs
by Cthulhu_ 51 days ago
I don't mind buying from china, as long as they're not irreplaceable essentials (like oil). Solar panels and -batteries are fine as long as they meet safety standards and don't have backdoors, and for all the fearmongering that Chinese made tech has backdoors in them, nobody seems to have found any evidence of that. And since it's electronics, any chip and any software can be investigated and taken apart by both amateur hackers and government funded (IT) security bureaus. Nothing. Unless I missed it, but I don't think something as big as that would go by quietly.
1 comments

> [..] for all the fearmongering that Chinese made tech has backdoors in them, nobody seems to have found any evidence of that. [..]

Are you asserting no backdoors were found in Chinese made tech? I'm not sure how it'd happen in solar panels (which sucks, since I own a couple of these). Another thing to keep in mind is plausible deniability. If you don't patch software, it will be vulnerable, which is an issue in networked software, especially. So what I have seen happening (and I can name some examples of companies here, both Chinese and Taiwanese) where vulnerabilities are simply not patched. Sometimes, they're plain obvious.

I have seen KRACK vulnerability not getting patched. I have seen old MiFi without proper firmware updates, like ever. I have seen motherboard update software still using HTTP instead of HTTPS. And in the world of IoT, it has been a huge mess from the get-go.

Furthermore, the core network of a major telco here was maintained by Chinese engineers who were flown from China. You can probably guess the company name here.

The tactic is obviously not limited to China or Taiwan only, but it can be tackled with reproducible builds and FOSS.