Bloomberg recently published an article with an extremely flashy click bait title “The Big Hack: How China Used a Tiny Chip to Infiltrate U.S. Companies”
In the article, Bloomberg is claiming that a Chinese company Supermicro who builds server chip sets, had been able to sneak a chip on to these boards allowing the company to compromise the security of the server that they built. They claimed that Amazon and others found these chips and reported them to the FBI.
Apple and others have been unusually clear in their response to this article. Full press release is here The opening statement makes their stance immediately clear -
Over the course of the past year, Bloomberg has contacted us multiple times with claims, sometimes vague and sometimes elaborate, of an alleged security incident at Apple. Each time, we have conducted rigorous internal investigations based on their inquiries and each time we have found absolutely no evidence to support any of them. We have repeatedly and consistently offered factual responses, on the record, refuting virtually every aspect of Bloomberg’s story relating to Apple. On this we can be very clear: Apple has never found malicious chips, “hardware manipulations” or vulnerabilities purposely planted in any server. Apple never had any contact with the FBI or any other agency about such an incident. We are not aware of any investigation by the FBI, nor are our contacts in law enforcement.
Amazon has issued a similar statement here
I truly feel like clickbait articles around technology and sensationalizing stories like this is absolutely hurting the credibility of these publications and also creating panic and distrust with consumers when it isn’t necessary. In my experience I steer away from Bloomberg because I think they are extremely lazy in their tech reporting.