Huawei's equipment poses 'significant' security risks, UK says:
The U.K. government warned on Thursday Huawei's telecommunications equipment raises "significant" security issues, posing a possible setback to the Chinese tech firm as it looks to build out 5G networks.
In 46-page report evaluating Huawei's security risks, British officials stopped short of calling for a ban of Huawei's 5G telecommunications equipment. But the assessment cited "underlying defects" in the company's software engineering and cybersecurity processes, citing "significantly increased risk to U.K. operators."
The findings give weight to warnings from U.S. officials who have argued Huawei's networking equipment could be used for espionage by the Chinese government. Huawei has repeatedly said it does not pose any risk and insists it would not share customer data with Beijing.
In a statement Thursday, Huawei said it takes the U.K. government's findings "very seriously."
"The issues identified in the OB (oversight board) report provide vital input for the ongoing transformation of our software engineering capabilities," a Huawei spokesperson said.
Other links:
Huawei Equipment Has Major Security Flaws, U.K. Says
Huawei's Perception Problem Deepens as U.K. Spies Identify Security Risks
So don't buy Huawei telecom equipment. Buy only US made telecom equipment. Because the NSA would never put bugs in for spying.
(Score: 3, Informative) by MostCynical on Friday March 29 2019, @08:50AM (5 children)
https://asia.nikkei.com/Economy/Trade-war/Huawei-blacklisting-bites-5G-carriers-in-the-wallet [nikkei.com]
"I guess once you start doubting, there's no end to it." -Batou, Ghost in the Shell: Stand Alone Complex
(Score: 0) by Anonymous Coward on Friday March 29 2019, @12:07PM (1 child)
Of course they charge less for their products. They make up for it by selling the data they harvest.
(Score: 2) by DannyB on Friday March 29 2019, @03:10PM
Of course they charge less for their products. The Chinese government subsidizes them in order to extend the reach of it's intelligence gathering operations. They can't over-subsidize it, or give it away for free, or pay you to take their equipment. So they must act with some restraint so that it at least seems plausible that the government doesn't have its fingers in everything domestically produced.
To transfer files: right-click on file, pick Copy. Unplug mouse, plug mouse into other computer. Right-click, paste.
(Score: 3, Interesting) by The Shire on Friday March 29 2019, @02:39PM (2 children)
The solution to this is actually quite simple. You put out an advisory confirming that Huawei's hardware is insecure and that companies which use it for public infrastructure are liable for breaches as a result of knowingly deploying it. Suddenly the 20% (chinese government subsidized) savings are no longer savings at all.
(Score: 2) by hendrikboom on Friday March 29 2019, @04:07PM (1 child)
So Huawei's processes don't seem to be in accord with the current, best-known processes. Are anyone's?
(Score: 2) by The Shire on Saturday March 30 2019, @05:15PM
The difference here is their processes were reviewed, found insecure, a list of things they had to change was created and agreed to by them, and then they didn't do it. So now not only are their security practices seriously in doubt, so are their oversight processes as well as any confidence that they do what they say they will do. Add to this all that they are beholden to their communist leaders who have a long history of pressuring chinese companies and employees to steal trade secrets and other information from other nations.
That's not the sort of company you want providing hardware for your critical communications infrastructure.