> If I'm assuming everyone involved had good intentions, the best thing I can guess is someone was speaking to the writer about the potential of the BMC being used for spying and got some details mixed up.
I can't judge their intentions. But Bloomberg doubling down on the story in 2021 strongly discounts the possibility that the original reporting was based on any kind of bad info.
> “This wasn’t a case of a guy stealing a board and soldering a chip on in his hotel room; it was architected onto the final device,” he said, declining to reveal which company he worked for at the time.
Still kind of reads like someone told us there was a bad chip on the motherboard. And there was, and it was the BMC/firmware for the BMC.
Did SuperMicro (or their suppliers) just write shitty firmware with zero security for their BMCs because that was the industry standard, or was it a Chinese Ministry of State Security plant who did it as part of an evil plot?
Did big companies pull out of SuperMicro because of poor BMC security? Sometimes, a bit, often as just one more checkbox on the way to OCP style defluffed machines; in an early revision of OCP, rather than a BMC, the NIC's wake on lan signal was rerouted to reset, to become reboot on lan. But then OpenBMC happened, cause reboot on lan isn't enough for everyone.
>But Bloomberg doubling down on the story in 2021 strongly discounts the possibility that the original reporting was based on any kind of bad info.
How so? If there was an ulterior motive (I don't know if there was, but it's been suggested) then they'd also double down. They also didn't even attempt to respond to the issues. If they had good information based in reality, a lot of the claims would've been trivial to refute.
I can't judge their intentions. But Bloomberg doubling down on the story in 2021 strongly discounts the possibility that the original reporting was based on any kind of bad info.
ref: https://www.datacenterdynamics.com/en/news/years-later-bloom...
Three years is a long time to believe in bad data, with everyone everywhere pointing out the same issues with their story.