DHS Admits Knowledge of Infected Import Tech

smitty777 writes "Deputy Undersecretary Schaffer of the DHS National Protection and Programs Directorate confessed to being aware of foreign technology that had been imported with spyware, malware, and other security risks. According to the article, 'More worryingly, the hearing specifically mentioned hardware components as possibly being compromised — which raises the questions of whether, perhaps, something as innocuous as Flash memory or embedded RFID chips could be used by interested foreign parties.' These hearings were held on July 7th to 'examine the nature and extent of the current threat to America's infrastructure.'"

Re:Hey!

[arisvega]

confessed to being aware of foreign technology that had been imported with spyware

This is practically treason - mostly because of the position this individual occupies.

this is another pathetic attempt at a power-grab?

[TheGratefulNet]

to me, the telling part was:

During questioning, Schaffer said that a whole-of-government effort would be required to combat security holes caused by malware and spyware making their way through America's electronics supply chain.

dunno. doesn't that look a bit like a plea for more (intrusive) government powers?

Re:Then subsidize homegrown component manufacturin

[poity]

Well, it'd be easier to catch impropriety here than in China or Taiwan. At least Wikileaks and myriad of other groups aren't afraid of releasing evidence of wrong doing committed by the US entities, and we have plenty of whistleblowers with public interest in mind to provide them the data. If we depend on China for supply, what leaks organisation will dare keep them in check? I suspect no one.

Re:Hey!

[fuzzyfuzzyfungus]

It would be even cheaper to buy a nice, respectable-looking pre-aged shell company [nevada-corporation.com](complete with years of respectable history, in a state with corporate disclosure rules approximately as stiff as Somalia's... Add a lawyer as a corporate officer to gain attorney-client privilege for just a small additional fee!) and then sell counterfeit parts re-marked as True, Blue, All-American ones.

If you suffer the comparatively unlikely misfortune of getting caught, just fold the shell and buy another one! It's not like you are dealing pot or anything serious, so the risk of having the consequences make it past your corporate person and back to you personally are well worth the profit...