China Cyber Association Calls For Review of Intel Products Sold In China (reuters.com) 49
The Cybersecurity Association of China (CSAC) has recommended a security review of Intel's products sold in China, accusing the U.S. chipmaker of harming national security and citing vulnerabilities in its chips. Reuters reports: While CSAC is an industry group rather than a government body, it has close ties to the Chinese state and the raft of accusations against Intel, published in a long post on its official WeChat account, could trigger a security review from China's powerful cyberspace regulator, the Cyberspace Administration of China (CAC). "It is recommended that a network security review is initiated on the products Intel sells in China, so as to effectively safeguard China's national security and the legitimate rights and interests of Chinese consumers," CSAC said. [...]
CSAC in its post accuses Intel chips, including Xeon processors used for artificial intelligence tasks, of carrying several vulnerabilities, concluding that Intel "has major defects when it comes to product quality, security management, indicating that it is extremely irresponsible attitude towards customers." The industry group goes on to state that operating systems embedded in all Intel processors are vulnerable to backdoors created by the U.S. National Security Agency (NSA). "This poses a great security threat to the critical information infrastructures of countries all over the world, including China...the use of Intel products poses a serious risk to national security." CSAC said.
CSAC in its post accuses Intel chips, including Xeon processors used for artificial intelligence tasks, of carrying several vulnerabilities, concluding that Intel "has major defects when it comes to product quality, security management, indicating that it is extremely irresponsible attitude towards customers." The industry group goes on to state that operating systems embedded in all Intel processors are vulnerable to backdoors created by the U.S. National Security Agency (NSA). "This poses a great security threat to the critical information infrastructures of countries all over the world, including China...the use of Intel products poses a serious risk to national security." CSAC said.
Clever Move (Score:2)
That's a clever move. China knows that the US is turning to intel out of concern that China could either destroy TSMC (e.g. in an invasion) or has agents who can report on vulnerabilities to them. Taking action to limit intel sales in China is an effective way to handicap the US's attempt to protect their access to high end lithography.
Sure, it's not like intel doesn't have security issues or problems. But from a security POV they are no worse than AMD and probably no worse than companies like Apple (who
Re: Clever Move (Score:1)
Re: (Score:2)
Re: (Score:2)
But from a security POV they are no worse than AMD
That's just not true. AMD is vulnerable to most of the same attacks as Intel, but mitigation is reliably cheaper and exploits are typically more difficult.
Re: (Score:2, Offtopic)
Indeed. But Intel has better marketing, i.e. professional liars.
Re: (Score:1)
Indeed. But Intel has better marketing, i.e. professional liars.
They also have more numerous fanboys, who have apparently built their identities around worshipping Intel based on their simp factor 10 denial of everything wrong they have ever done. There are people out there with Intel Inside tattoos... rent free in their heads, apparently.
oh look I hurt someone's feewings (Score:3)
Intel is a public corporation, it doesn't give a shit about you and it doesn't appreciate your simping. It will happily take your money and hand it to the people you claim to despise, though
Re: (Score:2)
Indeed. I never understood that particular stupidity, until I looked into Authoritarianism. Apparently, any entity that is perceived as powerful acquires "authoritarian followers", which are non-rational and as dumb as bread. Marketing, political propaganda and personal charisma is commonly used to amplify and accelerate that effect. These followers will then aggressively defend that entity for free, up to and including murder, personal bankruptcy and the complete surrender of any rationality. This is stron
Re: (Score:2)
I agree with almost everything you have said, with the exception that you insulted bread(which is more intelligent than those people).
Re: (Score:2)
I am sorry. You are perfectly correct, of course.
Re: (Score:2)
Re: (Score:3)
AMD also licences designs to Chinese manufacturers, who strip out some of the security related stuff (like the TRNG and crypto instructions) and replace it with domestic versions. The chips are produced on a larger node and don't perform as well, but they have the advantage of being domestic and thus suitable for government contracts.
There is no a general move away from x86 and US software like Windows for that sort of work anyway. ARM is popular, and MIPS has been in use for many years, and RISC V is up-an
Re: (Score:2)
I fully agree that the increasing diversity of architectures is exciting. Too long we have been dominated by x86 and then amd64 on the desktop; also for too long, there has only been one other credible enterprise architecture (POWER). The rise of ARM and RISC-V gives me hope that we will continue to see innovation despite entrenchment.
Re: (Score:2)
I think the main problem was that Microsoft could not deliver anything real except on x86 for a long time. They still cannot really, but they at least somewhat credibly fake it these days, especially after Apple _did_ deliver.
Re: (Score:2)
Microsoft brought out Windows for a couple of different platforms, and it was about as good as Windows normally is, which is not good enough to compete with the Unix that came with them — let alone with Linux.
I haven't used Windows on ARM so I can't really speak to that, but I can't imagine it's much worse than Windows on amd64.
Re: (Score:2)
Let's be honest, a modern CPU design from AMD manufactured with a, say, 10 year old process still performs pretty well. And I agree that there finally is a movement away from bloated and historic x86 to things much more modern. That is definitely a good thing.
Re: (Score:2)
Yup. My desktop PC is from 2006 and I haven't seen any need to upgrade it, for pretty much everything I do with it (which doesn't include gaming, obviously) the CPU is sitting there at 5-10% utilisation. That's why corporates can get away with buying the shittiest mass-produced crap they can source for their offices by the palletload, once they became generic commodities there wasn't anything further you could do to "improve" them.
Which is also why MS has been in an endless enshittification cycle for the
Re: (Score:2)
Which is also why MS has been in an endless enshittification cycle for the last 15 years or so, there's nothing more to do with the product, or at least nothing positive.
There's nothing they're competent to do, anyway.
Remember when they promised a next-generation filesystem, then abandoned it and made some minor improvements to NTFS instead? If they were competent, that's a place they could provide a noticeable improvement to their system.
Another thing they could do is come up with some decent tools for manipulating group and other system policy that were based around something more useful than simple lists.
There are places where Windows could be improved technically and me
Re: (Score:2)
Re:Clever Move (Score:5, Informative)
That's a clever move. China knows that the US is turning to intel out of concern that China could either destroy TSMC (e.g. in an invasion) or has agents who can report on vulnerabilities to them. Taking action to limit intel sales in China is an effective way to handicap the US's attempt to protect their access to high end lithography.
Sure, it's not like intel doesn't have security issues or problems. But from a security POV they are no worse than AMD and probably no worse than companies like Apple (whose chips may seem more secure because information is more restricted and security researchers have fewer tools).
What does access to high end lithography equipment have to do with Intel? As far as I know most of the really top of the line lithography machines used in cutting edge chip production are made by ASML in the Netherlands (despite the Europeans supposedly having no tech industry) especially extreme ultraviolet lithography (EUV) machines. Intel is in fact heavily reliant on ASML's EUV tech for the production of high-performance chips. If the US wants to secure for itself some kind preferential access to ASML lithography tech they are going to have to take that up with the Netherlands government and ASML. That being said, I don't really see the need for this since so far the Netherlands and ASML have complied with US request for restrictions on the export of Lithography machines to China and have no issues with supplying the US with whatever it needs. If anything, ASML should consider seriously refactoring their China operations for security since their offices there have been the source of several serious IP breaches by their Chinese employees. If there is one thing the Chinese would love to do it's buy up or outright steal the IP they need for making cutting edge EUV machines. On top of that I seriously hope both European and US intelligence agencies have that company under a microscope hunting for IP thieves, that and made sure ASML's computer systems are not accessible from the internet like those of F-35 contractors because I guarantee you the Chinese in particular probably have an entire taskforce with an unlimited budget dedicated to breaching their systems and stealing their research data.
Re: Clever Move (Score:4, Informative)
Re: (Score:2)
What does access to high end lithography equipment have to do with Intel? As far as I know most of the really top of the line lithography machines used in cutting edge chip production are made by ASML in the Netherlands
That's where ASML is based, but their engineers are all over the planet. ASML is an international effort. That's why China doesn't have a hope in hell of matching them. It takes a planet.
But in response to your question, superior process technology was Intel's only technical advantage. Now that they no longer have it, they are no longer the fastest around, but they absolutely did for decades and people forget that when they try to understand how AMD has seized the performance crown.
On top of that I seriously hope both European and US intelligence agencies have that company under a microscope hunting for IP thieves, that and made sure ASML's computer systems are not accessible from the internet like those of F-35 contractors because I guarantee you the Chinese in particular probably have an entire taskforce with an unlimited budget dedicated to breaching their systems and stealing their research data.
They definitely are consi
Re: (Score:2)
That's where ASML is based, but their engineers are all over the planet. ASML is an international effort. That's why China doesn't have a hope in hell of matching them. It takes a planet.
China has about 20% of a planet. And ASML does not seem to be doing so well, hence some experienced experts may become available to China in the near future as well. For, say, 10x their previous salary (still peanuts), immunity from the politics and not having to worry about anything, some may even be willing to move to China.
Re: (Score:2)
For, say, 10x their previous salary (still peanuts), immunity from the politics and not having to worry about anything
ABabghahaAHAHAHAHAHA
Immunity from politics, what is that worth in China? About what it's worth in Russia.
Re: (Score:2)
If they want these people, it will be worth a lot. Don't kid yourself. If ASML has to sack people, they will get scooped up fast.
Re:Clever Move (Score:4, Interesting)
That's a clever move. China knows that the US is turning to intel out of concern that China could either destroy TSMC (e.g. in an invasion) or has agents who can report on vulnerabilities to them. Taking action to limit intel sales in China is an effective way to handicap the US's attempt to protect their access to high end lithography.
The potential destruction of TSMC is not just an isolated China-Taiwan spat. It would lead to a global economic crisis and perhaps a wider military conflict as several large US corporations would essentially cease to exist overnight (e.g., Apple, Nvidia, AMD). Since the Chinese economy is so heavily linked to the global economy, I personally doubt Xi Jingping is willing to take steps that are guaranteed to lead to massive disstabilization of the Chinese economy and risk a mass uprising.
What does access to high end lithography equipment have to do with Intel? As far as I know most of the really top of the line lithography machines used in cutting edge chip production are made by ASML in the Netherlands (despite the Europeans supposedly having no tech industry) especially extreme ultraviolet lithography (EUV) machines.
ASML makes critical equipment, but TSMC, Samsung, and Intel run the foundries. The US would love to depend on Intel as a backup or even replacement for TSMC, but that hasn't happened yet, despite throwing lots of money at Intel.
There's an interesting similarity between TSMC and Nvidia. Both dominate their respective markets even though there are competitors. Neither company possesses an easily apparent technological advantage that can't be replicated in a straightforward way, and yet both companies' competitors have failed to effectively compete in terms of market share after many years. Why? Because would-be experts discount the huge advantage of building up a decade's worth of seemingly minor engineering tweaks that together present an economic moat.
Re: (Score:3)
I personally doubt Xi Jingping is willing to take steps that are guaranteed to lead to massive disstabilization of the Chinese economy
He's done it before. His suppression of Hong Kong and the Chinese tech industry destroyed a trillion dollars in value. Xi's objective is to keep himself in power.
There's an interesting similarity between TSMC and Nvidia. Both dominate their respective markets even though there are competitors.
TSMC and Nvidia are not competitors.
Nvidia is one of TSMC's biggest customers.
Re: Clever Move (Score:2)
larryjoe said "there are competitors", not "they are competitors" (or "they're competitors"), which says nothing about their relationship and implies there are other companies out there competing with them.
I wonder which is the right interpretation? I prefer to think larryjoe used the right words.
Re: (Score:2)
larryjoe said "there are competitors", not "they are competitors" (or "they're competitors"), which says nothing about their relationship and implies there are other companies out there competing with them.
I wonder which is the right interpretation? I prefer to think larryjoe used the right words.
Right. TSMC has Samsung, Intel, SMIC, etc. Nvidia has GPU competitors in AMD, Intel, and the Chinese companies and programmable ASIC competitors in Google, Tesla, Amazon, etc. All the foundries buy from the same suppliers. Yet, TSMC has the magic configuration and process to get the high yields for the top processes and blows away the competition. SMIC tries to throw money at the TSMC employees to carry over the magic, and the magic seems to be hard to replicated. GPU architecture is well known and th
Re:Clever Move (Score:5, Insightful)
> Taking action to limit intel sales in China is an effective way to handicap the US's attempt to protect their access to high end lithography.
Uh wut? Sure they can beat on American companies in the on going trade war for Cold War reasons but how does this demand for a security review in any way handicap the US's effort to limit high end shipments to China? Those are two unrelated topics. Intel is not going to send China the plans for a cutting edge lithography machine or start sending higher end chips in violation of sanctions.
IMO, we should be working hard to separate our economy entirely from China anyway. In the same way some American companies, to their shame, supported Nazi Germany long after knowing what evil shit they were, we should get out of China asap, too. We don't need their money or goods so badly that we should deal with them at the expense of our morals and ethics.
I supported Trump starting the trade war and supported Biden doubling down on key aspects of it. We should continue that path until full separation is achieved. Don't trade will evil countries is something all leaders should easily agree with no matter their other politics.
Re: (Score:2)
Re: (Score:2)
The US has done our share of evil shit historically speaking, yes. Who have we attacked in modern times for refusing to trade with us? In fact is there any country that doesn't want to trade with us we're not already in a warm war with (Iran and pals)?
We shouldn't be trading with places like Iran. their proxy states, NK, China, Russia, etc. anyway.
Which countries consider us evil and feel they are forced at gun point to trade with the US today?
It is generally evil places getting upset when we won't trade
Tit for tat [Re:Clever Move] (Score:2)
Re: (Score:2)
However, according to "the old man
They are not wrong (Score:3)
For example Intel rdrand is and remains a compromised design.
But y tho? (Score:2, Troll)
I have seen the same (Score:2)
I mean its not too hard to see thatâ¦. Remember the Intel whistleblower who said to be promoted to the management engine team they would need to obtain a security clearanceâ¦
Why would that be if the management engine wasnt the memory reading spy tool we all know it isâ¦
Re: (Score:2)
> Why would that be[?]
Erm, because it contains some "high end" capabilities (good or bad) which Intel don't want to be exfiltrated to competitors. As such, get some clearance so we know you're not likely to be bribed and so that you know how to keep your mouth shut when you're supposed to.
Security clearances do not work that way. In order to obtain (and keep) a clearance you must be working on something requiring said clearance. You can't just call up the government and say you want to get someone a TS or DoE Q clearance because you've got some trade secrets you want to protect.
Not entirely wrong. (Score:4, Informative)
"has major defects when it comes to product quality, security management, indicating that it is extremely irresponsible attitude towards customers."
"This poses a great security threat to the critical information infrastructures of countries all over the world, including China...the use of Intel products poses a serious risk to national security."
I would say this is a proper assessment of Intel.
The industry group goes on to state that operating systems embedded in all Intel processors are vulnerable to backdoors created by the U.S. National Security Agency (NSA).
This gives the NSA too much credit but I understand why they might think so. The actual hardware design flaws are clearly the result of placing a priority on performance above security concerns. It would be far more plausible if the NSA provided hardware bug finding support like they do for software and MS Windows: fix the easily found stuff, keep the deep compromises secret. The NSA has a suuuper heavy focus on being undetected, so making a direct request for a design modification is going to create accomplices which means creating a possible information leaks.
However, minor alterations resulting in bizarre flaws in the Intel Management Engine could easily be placed there by NSA request, possibly under the guise of being bugfixes (which they do submit for software), especially since the IME source code is beyond public inspection. I could also see them doing the same for various network devices.
Re: (Score:2)
Given what we know about America's unconstitutional citizen spying programs and the fact that Intel is a defense contractor, I would say there is a 100% chance that the management engine has NSA backdoors. Not "created by the NSA" which is a dumb take, but "created for the NSA". Why would the NSA have to create them, when they can just send a memo and request them?
Your argument about a paper trail is unconvincing because distribution will be limited based on need to know, and the documents will be carefully
Re: (Score:3)
It's almost impossible to verify that there are no back doors in Intel's processors, or that there won't be in the future. And there certainly are parties with a motive to put in back doors. Its seems only prudent to assume that these chips are a security threat.
Re: (Score:2)
That is pretty much the same logic the Trump administration used to exclude Chinese - Huawei - tech from 5G networks. There was never any proof supplied, it was all "they could be doing this".
Re: (Score:2)
That is pretty much the same logic the Trump administration used to exclude Chinese - Huawei - tech from 5G networks. There was never any proof supplied, it was all "they could be doing this".
Even a stopped clock, etc.
When you have nations, and those nations have adversaries, they do things like that. We know conclusively because we have done them, we have caught others doing them, etc.
Trump wasn't wrong about that. I wonder who explained it to him, they did a great job.
Interesting moves by China (Score:3)
There are many facets to this move by China. It's obviously a move by the Chinese government, as a private group wouldn't have the motivation or the courage to do this without explicit government approval.
I suppose Intel products might have backdoors, but the real intrigue is how this might play out. Is this just a bit of economic saber rattling, or is China willing to up the ante? In the case of escalation, Chinese exports would certainly be subject to similar "examinations." Or is this the response to US "examinations" of TikTok?
Is a ploy to sell more Chinese X-86 chips (Score:2)
ZhaoXin and Hygon technologies must me licking their chops right now. Most Slashdotters should remmeber that both companies do legally produce X-86 64 chips.
While their X-86 offerings are not suitable for servers nowadays, they have decent performance for Laptops (ZhaoXin) or even desktops and workstations (Hygon)
Heck, even the guys at Loongson must be very happy. While not X86 per-se, this MIPS derivative has a number of special instructions (~60) intended to Speed up QEMU emulation (redundancy intended) o