NSA, Not China, the Global BIOS Suicide Cyber-Bomber

Remember when, to fearmonger as part of 60 Minutes NSA propaganda, they warned of a Chinese attack on the US economy that, if launched, would have amounted to China acting as a suicide cyber-bomber?

The attack would have targeted computers’ BIOS.

Then there’s the scary BIOS plot.

I’ll need to go back and review this, but the jist of the scary claim at the heart of the report is that the NSA caught China planning a BIOS plot to shut down the global economy.

To.

Shut.

Down.

The.

Global.

Economy.

Of course, if that happened, it’d mean a goodly percentage of China’s 1.3 billion people would go hungry, which would lead to unbelievable chaos in China, which would mean the collapse of the state in China, the one thing the Chinese elite want to prevent more than anything.

But the NSA wants us to believe that this was actually going to happen.

That China was effectively going to set off a global suicide bomb. Strap on the economy in a cyber-suicide vest and … KABOOOOOOOM!

And the NSA heroically thwarted that attack.

The invocation of a BIOS attack was meant to provide authenticity and (for those who didn’t realize how obvious this is, mystery), I think.

But I find it particularly ironic that inserting backdoors into BIOS is (or was, back in 2008) the preferred method of NSA’s Access Network Technology group, which provides tools to access hardware and software.

It also develops software for special tasks. The ANT developers have a clear preference for planting their malicious code in so-called BIOS, software located on a computer’s motherboard that is the first thing to load when a computer is turned on.

This has a number of valuable advantages: an infected PC or server appears to be functioning normally, so the infection remains invisible to virus protection and other security programs. And even if the hard drive of an infected computer has been completely erased and a new operating system is installed, the ANT malware can continue to function and ensures that new spyware can once again be loaded onto what is presumed to be a clean computer. The ANT developers call this “Persistence” and believe this approach has provided them with the possibility of permanent access.

Again, this is not surprising. It’s just a means of doing what the NSA wants to acquire.

Still, it highlights the degree to which most fearmongering claims the NSA makes may well be projection about its own activities.

That said, given the list of companies whose products they’ve compromised, it may serve as a kind of suicide bomb against the tech industry:

  • Juniper Networks
  • Cisco
  • Huawei
  • Western Digital
  • Seagate
  • Maxtor
  • Samsung

Again, that ANT tampers with Huawei products is not surprising, but it is ironic, given that we not only won’t let Huawei do business in the US, but increasingly want to keep them out of our close allies’ networks, all because of concerns China would require the company to insert back doors into Huawei equipment.

Maybe those back doors are really NSA’s?

Twitter141Reddit282Facebook51Google+6Email

24 Responses to NSA, Not China, the Global BIOS Suicide Cyber-Bomber

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24

Emptywheel Twitterverse
bmaz Really, this is a critical article by @emptywheel on the duplicitous shell game frustrating proper surf. oversight. http://t.co/lI7Xs9vZ3i
32mreplyretweetfavorite
bmaz So, when Obama+his DOJ claim "it's lawful because oversight!" they are lying out their ass. As usual on surveillance. http://t.co/lI7Xs9vZ3i
33mreplyretweetfavorite
bmaz Not only is DEA using parallel construction to mask improper use of tainted evidence, they're frustrating oversight http://t.co/lI7Xs9vZ3i
34mreplyretweetfavorite
bmaz DOJ Inspector General Investigating DEA’s Use of Parallel Construction under Hemisphere http://t.co/lI7Xs9vZ3i
36mreplyretweetfavorite
bmaz @walterwkatz @stewartbaker @JesselynRadack @trevortimm @DanNovack Man, I should have come over for that. Sounds like a good gig.
1hreplyretweetfavorite
bmaz @MarkSZaidEsq @BradMossEsq @Thomas_Drake1 But don't really care what their charges are as a rule.
1hreplyretweetfavorite
bmaz @MarkSZaidEsq @BradMossEsq @Thomas_Drake1 And in fairness, there are clients I won't do because they are a pain in the ass.
1hreplyretweetfavorite
bmaz @MarkSZaidEsq @BradMossEsq @Thomas_Drake1 Meh, facts win cases more than attys. Didn't say did as to you, just curious where draw the line.
1hreplyretweetfavorite
bmaz @MarkSZaidEsq @BradMossEsq @Thomas_Drake1 It is a theoretical discussion, and I realize mostly civil attys look at it differently.
1hreplyretweetfavorite
bmaz @MarkSZaidEsq @BradMossEsq @Thomas_Drake1 That is why there is a presumption of innocence and a right to counsel.
1hreplyretweetfavorite
bmaz @MarkSZaidEsq @BradMossEsq @Thomas_Drake1 Lawful is in eyes of trier of fact. Some of my clients (but not all!) have been found "lawful"
1hreplyretweetfavorite
bmaz @thepoettrap What the hell are you talking about asshole? I didn't delete squat. Fuck off @JbJabroni10
1hreplyretweetfavorite
December 2013
S M T W T F S
« Nov   Jan »
1234567
891011121314
15161718192021
22232425262728
293031