Apple's response to the spy claims in China



[ad_1]

Apple disputes the report and says nothing is part of the deal not to talk about such an attack.

"Apple has never found malicious chips on our servers," Apple said. "Finally, in response to questions we have received from other news agencies since Businessweek published its article, we are not subject to any sort of gag order or obligation of confidentiality. "

Bloomerg was not immediately available for comment.

Bloomberg BusinessWeek said Thursday morning that the Chinese government was monitoring the computer hardware used by Apple and Amazon Web Services, and provided by the Super Micro server company. Amazon also challenged the report.

The October 8, 2018 issue of Bloomberg Businessweek incorrectly reports that Apple detected "malicious chips" on its network's servers in 2015. As Apple has repeatedly explained to reporters and editors of Bloomberg in the past 12 months, these claims are unfounded.

Before releasing its story, Apple told Bloomberg Businessweek the following statement:

Over the past year, Bloomberg has contacted us several times to point to claims, sometimes vague and sometimes complex, about an alleged security incident at Apple. Each time, we conducted rigorous internal investigations based on their investigations and each time, we found absolutely no evidence supporting them. We have regularly and regularly offered factual answers, refuting virtually every aspect of Apple's Bloomberg story.

We can be very clear about this: Apple has never found malicious chips, "hardware manipulations" or vulnerabilities created intentionally on a server. Apple has never had any contact with the FBI or any other agency about such an incident. We are not aware of any FBI investigations, nor are our contacts in the field of law enforcement.

In response to the latest version of Bloomberg's story, we present the following facts: Siri and Topsy have never shared servers; Siri has never been deployed on servers sold by Super Micro; and Topsy data was limited to about 2,000 Super Micro servers, not 7,000. None of these servers ever managed to contain malicious chips.

Typically, before the servers go into production at Apple, they are inspected for security vulnerabilities and we update all firmware and software with the latest protection. We did not discover any unusual vulnerabilities in the servers we purchased from Super Micro when we updated the firmware and software in accordance with our standard procedures.

We are deeply disappointed that, in their dealings with us, Bloomberg reporters have not been open to the possibility that their sources or sources are false or misinformed. Our best guess is that they confuse their story with a previously reported incident in 2016, in which we discovered an infected driver on a single Super Micro server in one of our labs. This one-off event was deemed accidental and not a targeted attack on Apple.

Although no one has claimed that customer data was involved, we take these allegations seriously and want users to know that we are doing everything we can to protect the personal information they have entrusted to us. We also want them to know that what Bloomberg reports about Apple is inaccurate.

Apple has always been transparent about how we treat and protect data. Should an event such as Bloomberg News ever occur, we would be open about it and we would work closely with the forces of order. Apple engineers perform regular and rigorous security checks to ensure the security of our systems. We know that security is an endless race and that is why we are constantly strengthening our systems against increasingly sophisticated hackers and cybercriminals who want to steal our data.

The story published by Businessweek also states that Apple "reported the incident to the FBI but kept details of what it detected, even internally." In November 2017, after the presentation of this allegation for the first time, we provided the following information to Bloomberg as part of a long and detailed recorded response. He first addresses the unsubstantiated claims of their journalists about a supposed internal investigation:

Despite numerous discussions within several teams and organizations, no one at Apple has ever heard of this survey. Businessweek refused to provide us with information to trace the alleged procedure or conclusions. Nor did they demonstrate that they understood the standard procedures that would have been circumvented.

No one from Apple has ever contacted the FBI about something like that, and the FBI has never told us about an investigation like this – let alone tried to restrict it.

In an appearance this morning at Bloomberg Television, reporter Jordan Robertson said in another statement about the alleged discovery of malicious chips: "In the case of Apple, we understood that it was a random check of some problematic servers that had led to this detection. "

As we have already informed Bloomberg, this is completely false. Apple has never found malicious chips on our servers.

Finally, in response to questions we have received from other media outlets since Businessweek published its article, we are not subject to any kind of gag order or other confidentiality obligations.

– Kate Fazzini from CNBC contributed to this report.

[ad_2]
Source link