<div dir="ltr"><div dir="ltr">Would be remiss in our duties if we didn't also link AWS' blog, in response to the Bloomberg article.<div><br></div><div>In short, AWS refutes many of Bloomberg's reporting in the article.</div><div><br></div><div><a href="https://aws.amazon.com/blogs/security/setting-the-record-straight-on-bloomberg-businessweeks-erroneous-article/">https://aws.amazon.com/blogs/security/setting-the-record-straight-on-bloomberg-businessweeks-erroneous-article/</a><br></div><div><br></div><div>Ken</div></div></div><br><div class="gmail_quote"><div dir="ltr">On Thu, Oct 4, 2018 at 11:03 AM Randy Bush <<a href="mailto:randy@psg.com">randy@psg.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">re: <a href="https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies" rel="noreferrer" target="_blank">https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies</a><br>
<br>
from a side convo with a well known sec researcher:<br>
<br>
>> saw that a couple of years back when apple tossed them out.  so who<br>
>> do we know that is for sure not poisoned.  and therein lies the rub.<br>
> Yup<br>
<br>
truth is, i am surprised they had to add a chip, and one of the larger<br>
dies was not already trojaned.<br>
<br>
have visions of the chinese implant on box A fighting with the american<br>
implant on box B with occasional jabs from the israelis from box C.<br>
<br>
what i would love to see/know is how apple tries to vet the macs made in<br>
shenzhen.<br>
<br>
randy<br>
</blockquote></div>