red alert — The US Navy, NATO, and NASA are using a shady Chinese companys encryption chips US government warns encryption chipmaker Hualan has suspicious ties to Chinas military.
Andy Greenberg, WIRED.com – Jun 16, 2023 7:41 pm UTC EnlargeBet_Noire/Getty reader comments 121 with
From TikTok to Huawei routers to DJI drones, rising tensions between China and the US have made Americansand the US governmentincreasingly wary of Chinese-owned technologies. But thanks to the complexity of the hardware supply chain, encryption chips sold by the subsidiary of a company specifically flagged in warnings from the US Department of Commerce for its ties to the Chinese military have found their way into the storage hardware of military and intelligence networks across the West.
In July of 2021, the Commerce Department’s Bureau of Industry and Security added the Hangzhou, China-based encryption chip manufacturer Hualan Microelectronics, also known as Sage Microelectronics, to its so-called Entity List, a vaguely named trade restrictions list that highlights companies acting contrary to the foreign policy interests of the United States. Specifically, the bureau noted that Hualan had been added to the list for acquiring and … attempting to acquire US-origin items in support of military modernization for [China’s] People’s Liberation Army.
Yet nearly two years later, Hualanand in particular its subsidiary known as Initio, a company originally headquartered in Taiwan that it acquired in 2016still supplies encryption microcontroller chips to Western manufacturers of encrypted hard drives, including several that list as customers on their websites Western governments’ aerospace, military, and intelligence agencies: NASA, NATO, and the US and UK militaries. Federal procurement records show that US government agencies from the Federal Aviation Administration to the Drug Enforcement Administration to the US Navy have bought encrypted hard drives that use the chips, too.
The disconnect between the Commerce Departments warnings and Western government customers means that chips sold by Hualans subsidiary have ended up deep inside sensitive Western information networks, perhaps due to the ambiguity of their Initio branding and its Taiwanese origin prior to 2016. The chip vendors Chinese ownership has raised fears among security researchers and China-focused national security analysts that they could have a hidden backdoor that would allow Chinas government to stealthily decrypt Western agencies secrets. And while no such backdoor has been found, security researchers warn that if one did exist, it would be virtually impossible to detect it. Advertisement
If a company is on the Entity List with a specific warning like this one, its because the US government says this company is actively supporting another countrys military development, says Dakota Cary, a China-focused research fellow at the Atlantic Council, a Washington, DC-based think tank. It’s saying you should not be purchasing from them, not just because the money youre spending is going to a company that will use those proceeds in the furtherance of another countrys military objectives, but because you cant trust the product.
Technically, the Entity List is an export control list, says Emily Weinstein, a researcher at Georgetown University’s Center for Security and Emerging Technology. That means US organizations are forbidden from exporting components to companies on the list, rather than importing components from them. But Cary, Weinstein, and the Commerce Department note that it’s often used as a de facto warning to US customers not to buy from a listed foreign company, either. Both networking firm Huawei and drone-maker DJI have been added to the list, for instance, for their alleged ties to the Chinese military. Its used somewhat as a blacklist, says Weinstein. The Entity List should be a red or maybe a yellow alert to anyone in the US government whos working with this company to take a second look at this.
When WIRED reached out to the Commerce Department’s Bureau of Industry and Security, a spokesperson responded that the BIS is restricted by law from commenting to the press on specific companies and that a company’s unlisted subsidiarylike Initioisn’t technically affected by the Entity List’s legal restrictions. But the spokesperson added that as a general matter, affiliation with an Entity Listed party should be considered a red flag. Page: 1 2 3 Next → reader comments 121 with Advertisement Channel Ars Technica ← Previous story Next story → Related Stories Today on Ars
The police’s use of facial recognition technology is to be significantly expanded in an attempt to catch more offenders, ministers have announced.
Under the plans, 10 live facial recognition (LFR) vans will be used by seven forces across England to help identify “sex offenders or people wanted for the most serious crimes”, according to Home Secretary Yvette Cooper.
The tech, which has been trialled in London and south Wales, will be subject to strict rules, the Home Office said, but human rights groups have warned it is “dangerous and discriminatory”.
Amnesty International UK said the plans should be “immediately scrapped”, with facial recognition proven to be “discriminatory against communities of colour”.
“It has been known to lead to misidentification and the risk of wrongful arrest,” said Alba Kapoor, the charity’s racial justice lead, “and it’s also known to be less accurate in scanning the faces of people of colour.”
The Home Office said the LFR vans will only be deployed when there is “specific intelligence”, and will be operated by trained officers who will check every match made by the cameras.
The vehicles will also only be used against bespoke watch lists, compiled for each use under guidelines set by the College of Policing.
The vans will be operated by police forces in Greater Manchester, West Yorkshire, Bedfordshire, Surrey and Sussex (jointly), and Thames Valley and Hampshire (jointly).
Image: The 10 vans set to be deployed to police forces across England.
Pic: Home Office
‘The most serious offenders’
Ms Cooper has said ministers are focused on making sure “there are proper safeguards in place”.
As part of the plans, the home secretary has announced she will be launching a consultation on how and when the cameras should be used, and with what safeguards, which the government will use to draw up a new legal framework for the use of the cameras.
Ms Cooper said the tech had been used in London and South Wales “in a targeted way”, and helped catch “the most serious offenders, including people wanted for violent assaults or for sex offences”.
According to the Metropolitan Police, the tech has led to 580 arrests for offences such as rape, domestic crime and knife crime in the space of 12 months.
The government has pointed to independent testing by the National Physical Laboratory, which it said found the tech was “accurate” and showed “no bias for ethnicity, age, or gender”.
Liberty has welcomed the government’s decision to create a statutory framework for using facial recognition, but said that should be in place before the tech is rolled out.
“There’s no reasonable excuse to be putting even more cameras on our streets before the public have had their say and legislation is brought in to protect all of us,” said a statement.
The civil liberties charity cited how more than 1.6 million people have had their faces scanned in South Wales, mostly on football match days in Cardiff city centre.
But Lindsey Chiswick, from the National Police Chiefs’ Council (NPCC), has said the expansion “is an excellent opportunity for policing”, and will help officers locate suspects “quickly and accurately”.
Police should consider disclosing the ethnicity and nationality of suspects when they are charged in high-profile and sensitive cases, new national guidance says.
Coming into force today, it says there must be a policing reason to release the information, such as where there are high levels of disinformation, if it will improve public safety, or if it is significantly in the public interest.
A Home Office spokesperson told Sky News they will support the new guidance by authorising the release of relevant accompanying immigration information if appropriate.
The change comes after two men charged over the alleged rape of a 12-year-old girl in Nuneaton were reported to be Afghan asylum seekers, sparking protests.
Warwickshire Police did not confirm the immigration status, leading to Reform UK accusing them of a “cover-up”, something the force strongly denied.
Responding to the row, Home Secretary Yvette Cooper said last week she wanted police to be more transparent, and that new guidance was being worked up.
Speaking to Sky News after the new instructions were announced, policing minister Dame Diana Johnson said “we welcome the guidance” which the government thinks is “really helpful”.
She added: “We want to be as transparent and as open as possible with the public” – and this includes releasing ethnicity and nationality unless there is “good reason not to”.
Please use Chrome browser for a more accessible video player
2:41
Migration protesters face off
How high-profile cases sparked debate
When considering what information to release, police must consider contempt of court laws which aim to give defendants a fair trial, as well as media guidance from the College of Policing.
Until now, the media guidance said once a suspect has been charged, police can give out information such as their name, date of birth and address. It did not mention anything about ethnicity, nationality, or immigration status.
The Southport murders committed by Axel Rudakubanalast July led to speculation about his ethnicity and immigration status, fuelling riots in many parts of the country.
In the Nuneaton case, Reform leader Nigel Farage said retaining the “basic and sober facts” was “a cover-up that in many ways is reminiscent of what happened after the Southport killings”.
Warwickshire Police said officers “did not and will not cover up such criminality”, and followed national guidance.
Image: Reform leader Nigel Farage argues releasing the information could prevent unrest. Pic: PA
How will new guidance work?
The new guidance says it is at the discretion of the police force to decide whether to release ethnicity and nationality details, and that they must consider the ethical and legal implications.
It says it is not the job of police to verify a suspect’s immigration status, which rests with the Home Office.
The advice has been developed by the National Police Chiefs’ Council (NPCC) and the College of Policing, in consultation with the Home Office and the Crown Prosecution Service (CPS).
Deputy chief constable Sam de Reya, the NPCC lead for communications and media, said: “We saw during last summer’s disorder, as well as in several recent high-profile cases, what the major, real-world consequences can be from what information police release into the public domain.
“We have to make sure our processes are fit for purpose in an age of social media speculation and where information can travel incredibly quickly across a wide range of channels.
“Disinformation and incorrect narratives can take hold in a vacuum. It is good police work for us to fill this vacuum with the facts about issues of wider public interest.”
Please use Chrome browser for a more accessible video player
3:31
One year on from the Southport riots
‘A chilling message’
The guidance is interim, and will be considered as part of a wider review of the College of Policing’s authorised professional practice for media relations later this year.
Chief constable Sir Andy Marsh, the college’s CEO, said officers will continue to police “without fear or favour”.
But the guidance is likely to provoke backlash from anti-racism campaigners. Last week, the Joint Council for the Welfare of Immigrants warned that revealing ethnicity and migration status would “send a chilling message: that some people are inherently more ‘suspect'”.
‘Public trust requires transparency’
A Home Office spokesperson told Sky News they welcome the new guidance, adding: “Public trust requires transparency and consistency from the authorities that serve them.”
They added: “The public, and police forces themselves, want greater clarity on when, why and how information is released and the legitimate and compelling reasons it may need to be withheld.
“The Home Office will support that effort by authorising the release of relevant accompanying immigration information in future cases, where it is appropriate to do so, and where the police have requested it. All cases will of course take account of consultation with the police and CPS.
“The government also asked the Law Commission at the end of February to speed up the elements of its review around the law of contempt in relation to what can be said publicly ahead of a trial.”
Senators in the state of Wisconsin have filed an identical bill to accompany earlier legislation filed in the state’s lower house that aims to closely regulate crypto ATMs.