this post was submitted on 06 Mar 2025
29 points (93.9% liked)

Cybersecurity

6890 readers
45 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 28 points 3 weeks ago (7 children)
[–] sugar_in_your_tea 8 points 3 weeks ago (6 children)

Does it count as "China made" if the firmware is FOSS and I load it myself? NICs and boards are pretty much all made in China, but how far does this go?

[–] [email protected] 10 points 3 weeks ago (4 children)

It depends on how bad China wants your porn. There could be secondary MCUs that are designed to completely bypass the original firmware. (Think Intel ME)

That is not very practical for consumer grade gear, but still possible.

[–] admin 5 points 3 weeks ago

This reminded me of a real life story, from the tip or my tongue so details might be inaccurate, but I remember hearing that a/the main MINIX maintainer, all of the sudden, started getting bug reports or some type of feedback from somebody, that ended up being an Intel employee looking to use MINIX for either ME or AMT.

In short, these hardware devices are 100% capable of having their own independent OS, processes with kernel and all, totally obscured from the end user.

load more comments (3 replies)
load more comments (4 replies)
load more comments (4 replies)