hackertube.io

BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”

Microsoft Israel R&D Center · talk · Watch on YouTube

Security & hackingElectronics & circuit design

What it is

Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report. He explains how undocumented components could be hidden on boards and how hard they are to spot.

Why Hacker News recommends it

HN people point to it as the sober, technically grounded picture of hardware supply chain security, and an eye-opening one.

  • 6 people recommended it
  • 6 different months
  • 1 strong recommendations
  • first 2019, last 2024

What HN commenters said

  1. “This is an eye opening talk in the subject”

    Eye-opening talk on how hard hardware supply chain attacks are to spot.

    crimsontech, 2023-05 · Strong recommendation · in “Paragon Graphite is a Pegasus spyware clone used in the US”

  2. “Watch this”

    Argues hardware supply chain attacks are plausible.

    segmondy, 2019-02 · Recommendation · in “Recruit Is Japan’s Top Contender for Global Internet Domination”

  3. “I found Bunnie Huang's talk on supply chain security a reasonable picture of the issues underlying the Bloomberg story.”

    Reasonable picture of the issues underlying the Bloomberg story.

    brudgers, 2019-03 · Recommendation · in “Elon Musk Tried to Destroy a Tesla Whistleblower”

  4. “For a good discussion of this topic, I recommend Andrew "bunnie" Huang's talk about supply chain security”

    Good discussion of hardware tampering during manufacturing.

    pdkl95, 2020-03 · Recommendation · in “Intel x86 Root of Trust: Loss of Trust”

  5. “There's a fun talk that goes over a lot of them here”

    Covers many techniques for hiding undocumented components on boards.

    bskrobisz, 2021-09 · Recommendation · in “Juniper breach mystery starts to clear with new details on hackers and U.S. role”

  6. “there is a great talk by Andrew "bunnie" Huang on hardware supply chain security”

    Related great talk on hardware supply chain security.

    andutu, 2024-03 · Recommendation · in “Verifying Hardware Security with RTL Simulation”

Excerpts from Hacker News comments, linked to the originals. Summaries and labels were written by a language model from those comments.

Topics: bunnie huang, supply chain, hardware tampering, bloomberg supermicro, security

Also recommended by the same people