[fsecure] Hackable Huawei

[SX-News]

Hackable Huawei

Description : The U.S. House of Representatives Permanent Select Committee on Intelligence created quite a stir on Monday with its report on Chinese telecom companies Huawei and ZTE.

<img alt="U.S. House of Representatives" border="0" height="569" src="http://www.f-secure.com/weblog/archives/USHouseWarnAmericanCompaniesDoingBusinessWithHuawei.png" width="486" />

The report recommends excluding the companies from sensitive systems and for U.S. network providers to seek other vendors, among other things. In response, Huawei claims U.S. protectionism is the real reason behind the charges of Chinese government ties and potentially backdoored equipment.

<img alt="Forbes" border="0" height="524" src="http://www.f-secure.com/weblog/archives/ForbesInterviewHuawei.png" width="498" />

But seemingly lost in all of the news is not whether Huawei can be trusted, but can it be hacked?

If you follow DEFCON news, you may already know that the answer is&hellip; yes.

<img alt="Risky Business #250" border="0" height="210" src="http://www.f-secure.com/weblog/archives/RiskyBusiness250.png" width="592" />

So perhaps vendors have another less jingoistic reason why they wouldn't want to use Hauwei.

Check out this episode of the Risky Business podcast: Risky Business #250 -- Hack it like it's 1999.

You'll also find a PDF of Lindner and Kopf's DEFCON talk there.

Updated to add: from ZDNet: Hack In The Box: researcher reveals ease of Huawei router access.  On 10/10/12 At 05:23 PM

Lien : http://www.f-secure.com/weblog/archives/00002442.html