Feeds

Spy back doors? That would be suicide, says Huawei

'Impeccable track record' clearly means we're not a spy conduit, says mouthpiece

Beginner's guide to SSL certificates

Chinese hardware manufacturer Huawei says allegations it provides backdoors for espionage in its kit remain unproven and would be “commercial suicide”.

“The hypothetical - that our equipment could be used for espionage by the Chinese government - has never been proven,” spokesman Scott Sykes told press at the company’s annual global analyst event in Shenzen this week.

“If it were ever proven, we would lose 65 per cent of our business overnight. That would be corporate suicide.”

As the world’s second largest networking equipment supplier, Huawei has raised concerns amongst Anglophone spooks. It was banned from bidding for contracts for the Australian national data backbone.

However, documents disclosed by Edward Snowden this year suggest Huawei may be more sinned against than sinner. The US National Security Agency’s ‘Tailored Access Operations’ unit broke into Huawei’s corporate servers, and by 2010 was reading corporate email and examining the source code used in Huawei’s products.

“We currently have good access and so much data that we don’t know what to do with it,” boasted one NSA briefing. The slides also disclose the NSA intended to plant its own backdoors in Huawei firmware.

A report by the UK’s Intelligent and Security Committee in 2013 was critical of BT, which uses Huawei for its C21 network, for not informing ministers of its decision to use the supplier for what it regards as critical national infrastructure. However, like the US Senate’s report the previous year, the committee offered no evidence of existing back doors.

“The Security Service had already told us in early 2008 that, theoretically, the Chinese State may be able to exploit any vulnerabilities in Huawei’s equipment in order to gain some access to the BT network, which would provide them with an attractive espionage opportunity”, the UK committee reported (pdf).

Huawei now works with second and third tier telcos in the US. It abandoned an attempt to purchase 3Com and says it doesn’t plan on making any acquisitions in the next ten years.

“Broadly, we have an impeccable track record with 500 telcos in 150 countries. There's never been a security issue of any kind,” Sykes told journalists. “We wouldn't be a $40bn company today if were not good at building secure networks. It simply would not be possible. Sixty-five per cent of our business is outside China.” ®

Providing a secure and efficient Helpdesk

More from The Register

next story
Of COURSE Stephen Elop's to blame for Nokia woes, says author
'Google did have some unique propositions for Nokia'
FCC, Google cast eye over millimetre wireless
The smaller the wave, the bigger 5G's chances of success
It's even GRIMMER up North after MEGA SKY BROADBAND OUTAGE
By 'eck! Eccles cake production thrown into jeopardy
Mobile coverage on trains really is pants
You thought it was just *insert your provider here*, but now we have numbers
Don't mess with Texas ('cos it's getting Google Fiber and you're not)
A bit late, but company says 1Gbps Austin network almost ready to compete with AT&T
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.