huawei security concerns

Forums › New Zealand UFB › huawei security concerns

hamish225

755 posts

Ultimate Geek

Topic # 110466 9-Oct-2012 18:48
Does anyone know what exactly huawei are providing under the UFB, so far all I've heard about is ducting, and to think that that's any kind of security concern is ridiculous because it's plastic, what're they going to do, hack into the plastic ducting from their computers in Beijing? I don't think so.

1 | 2

don@i.am.a.can.do.kiwi.nz
3145 posts

Uber Geek

Subscriber

Reply # 698641 9-Oct-2012 18:55
Who's manufacturing the ONT and OLT and core network switching? Are ISPs using encrypted PPPoE sessions? Given the number of homes passed so far... should I be more concerned about the mobile networks that use their gear? Given the current issues with GCSB and Mr Dotcom, should I be more worried about our own government spying on me than one in China? Promote New Zealand - Get yourself a .kiwi.nz domain name!!! Check out mine - i.am.a.can.do.kiwi.nz

ajw

883 posts

Ultimate Geek

Reply # 698660 9-Oct-2012 19:43
I note some US rural wireless carriers don't have a problem using Huawei products. Watch the video. aw

ajw

883 posts

Ultimate Geek

Reply # 698674 9-Oct-2012 20:03
Another look at Huawei. http://www.3news.co.nz/Inside-Chinas-economic-hot-spot/tabid/1356/articleID/257232/Default.aspx

shanehobson

37 posts

Geek

Trusted

Reply # 698683 9-Oct-2012 20:10
quote : Huawei will supply Ultrafast Ltd (UFL) with intelligent Layer 1 Optical Distribution Network (iODN) and proven Open Access Layer 2 network solutions. The access network will use leading edge access technologies including Gigabit Passive Optical Network (GPON) across Huawei SmartAx MA5600T Optical Line Termination and Gigabit Point to Point Ethernet using Huawei Quidway S9300 Terabit routing Metro Ethernet platforms at central offices. Ultrafast Broadband Ltd’s access network will be aggregated by CX600 400G Enhanced Metro Ethernet switching system and managed end to end with Huawei unified Network Management System. end quote Lifted from a press release on the WEL Networks site. WEL Networks is the private partner in Ultrafast Fibre Ltd. Ultrafast Fibre Ltd is the local fibre company with the contract to build six towns & cities in the North Island. http://www.wel.co.nz/news.asp?pageID=2145841546&RefID=2141741150 quote : Christchurch UFB winner Enable Networks (owned by the council) said this morning it had chosen the company [Huawei] to provide fibre, ducting and layer 2 electronics. end quote http://www.nbr.co.nz/article/huawei-lands-second-big-crown-fibre-deal-ck-109144 So, it appears to be public knowledge that Huawei is providing most if not all of the layer 2 network infrastructure for both Ultrafast Fibre Ltd and Enable Networks, comprising nearly 30% of the UFB rollout. I am familiar with some of the rigorous testing and certification required of Huawei as part of one of these contracts, but as this was gained during my employment at an LFC I cannot share that in a public forum. Judging by this press release courtesy of Huawei themselves, it appears that they are responsible for a reasonable portion of the 2 degrees network. http://www.huawei.co.nz/nz/assets/downloads/2degrees%20case%20study.pdf And it seems they are doing business with Vodafone as well : quote : In 2007, it [Huawei] won the tender for Vodafone’s fixed line broadband network end quote http://computerworld.co.nz/news.nsf/news/huawei-execs-fly-in-from-from-china-to-check-out-nz-opportunities So now that we have the facts on the table, let's lurch into some opinion. ..... My opinions (TWEIE) are mine, not my employers. Any statements of fact are drawn from public sources.

robjg63

886 posts

Ultimate Geek

Reply # 698687 9-Oct-2012 20:13
What isnt made in China - or has components made in China? What doesnt have a computer OS that doesnt have the possibility of being hacked? There is caution and then there is paranoia - I will put my tinfoil hat on now! ----------------------------------------------------------------------------------------------- Nothing is impossible for the man who doesn't have to do it it himself - A. H. Weiler

DonGould

don@i.am.a.can.do.kiwi.nz
3145 posts

Uber Geek

Subscriber

Reply # 698696 9-Oct-2012 20:29
robjg63: What isnt made in China - or has components made in China? What doesnt have a computer OS that doesnt have the possibility of being hacked? There is caution and then there is paranoia - I will put my tinfoil hat on now! I agree. I'm way more concerned about the electronics in my car than someone from govt.china reading my private GZ posts. Promote New Zealand - Get yourself a .kiwi.nz domain name!!! Check out mine - i.am.a.can.do.kiwi.nz

ajw

883 posts

Ultimate Geek

Reply # 698705 9-Oct-2012 20:37
Huawei is also used extensively by European mobile operators. aw

Zeon

2432 posts

Uber Geek

Trusted

Subscriber

Reply # 698713 9-Oct-2012 21:02
While I am not a spy nor even very up to speed with this tech, I don't quite understand how they could actually pass layer2 data back to China? Even if it did collect it how would it be uplifted?

oxnsox

1522 posts

Uber Geek

Reply # 698718 9-Oct-2012 21:09
Apparently Huawei use is ok in countries like the UK and Canada., and many others. In the States they're fighting imports from China and wanting to keep/increase jobs, and of course they've no legal input or control over the Huawei firmware. Australia is their best friend, when it comes to security issues. Who's to say if you bought this kit off another supplier it wouldn't be any less of a security risk? We're really just arguing over who might be spying on the UFB rollout, the eh-hem 'good-guys' or the 'bad-guys'.

shanehobson

37 posts

Geek

Trusted

Reply # 698724 9-Oct-2012 21:14
If Huawei acting as the operator of any of the networks listed in my earlier post (as opposed to just an equipment vendor), then they would likely have access to the management of the layer 2 equipment. From here they could possibly mirror data to another port or collect it in some other fashion (remember there is usually a requirement for most telco networks in NZ to have this capability in order to honour their lawful intercept obligations). Once the data has been mirrored, siphoned or collected it can then be shipped "back home" for further analysis. To be quite clear, I am describing a hypothetical example of what might happen. I am not for a moment suggesting that I have any evidence, suspicion or even a clue that this activity is occurring on any network in NZ. I have operated layer 2 networks previously where if I chose to I could have easily siphoned off customer data. And I could have done so with no requirement for co-operation from the equipment vendor. But to be quite honest, I've got better things to do with my time. Getting back to the thread, if Huawei was strictly an equipment vendor and not involved in network operation then it would be significantly more difficult for data collection to occur. This would likely require covert action during the design and manufacture process, obviously much more difficult to accomplish than a dishonest network operator collecting data. To summarise, if you're considering risks to your data, then I would consider the network operator to be the greater vulnerability than the network equipment vendor. And if you really do have secrets you want kept secret, you're encrypting it anyway aren't you ? My opinions (TWEIE) are mine, not my employers. Any statements of fact are drawn from public sources.

ajw

883 posts

Ultimate Geek

Reply # 700737 13-Oct-2012 19:06
I do wish the Americans fronted with the evidence. aw

freitasm

BDFL
44209 posts

Uber Geek

Administrator

Trusted

Geekzone

Subscriber

Reply # 700739 13-Oct-2012 19:12
Let me check my network: Switches: Made In China Routers: Made in China HFC Modem: Made in China Laptop: Made in China Mac: Made in China Dell HTPC: Made in China Sure, they make the big iron. What about everything else? It's seriously just market protection. Perhaps one of the American infrastructure manufacturers is losing some contracts or bids... Oh, and AJW, please use the BBCodes. It's a lot better to see the videos on the page. Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) Geekzone Price comparison \| Amazon Kindle order page \| How to get the best out of Geekzone \| New Zealand IT Jobs \| Geekzone News \| Jinglebugs

Regs

10100111001
3206 posts

Uber Geek

Trusted

Subscriber

Reply # 700800 13-Oct-2012 23:12
freitasm: Switches: Made In China Routers: Made in China HFC Modem: Made in China Laptop: Made in China Mac: Made in China Dell HTPC: Made in China when i was in beijing, i bought a beer. turned over the glass after i finished it and it read: "Hecho en México" so not everything is made in china :P Need help implementing Microsoft CRM? Give OA Systems a shout. Winners of CRM Solution of the Year at the 2010 Microsoft NZ Partner Awards

freitasm

BDFL
44209 posts

Uber Geek

Administrator

Trusted

Geekzone

Subscriber

Reply # 700803 13-Oct-2012 23:14
Probably safer to drink Mexican beer made with Mexican water than Chinese beer with their water. The polution in some places there is just incredible ;) Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) Geekzone Price comparison \| Amazon Kindle order page \| How to get the best out of Geekzone \| New Zealand IT Jobs \| Geekzone News \| Jinglebugs

1080p

1068 posts

Uber Geek

Reply # 700932 14-Oct-2012 12:13
I am yet to see any evidence - theoretical or otherwise - that Huawei could even accomplish espionage with the equipment they supply and the networks they build. Until I see that then I'll write this off as protectionism by the USA. Workstation: Intel DH67CL ~ i5-2500 ~ 4GB Corsair RAM (x2) ~ Intel X25-M 80GB SSD Laptop: Dell Inspiron 1564 ~ i5-520M ~ 4.00GB RAM ~ 500GB SATA HDD ~ Win7 Home Premium x64 Common misconceptions.

1 | 2