6 HN users recommended this talk6 months2019–2024score 6.5
Years with an HN recommendation, 2007–2026
HN people point to it as the sober, technically grounded picture of hardware supply chain security, and an eye-opening one.
Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report. He explains how undocumented components could be hidden on boards and how hard they are to spot.
“This is an eye opening talk in the subject” (HN, 2023)
It would really need to go further than that. Supply chain attacks at the hardware level are very difficult to spot, especially at scale. This is an eye opening talk in the subject: [this video]
Eye-opening talk on how hard hardware supply chain attacks are to spot.
Hey, folks thought Echelon was a joke in the 90's until Snowden showed that Echelon is child's play. The Big Hack might be true or not, but it's not far fetched. There might be more at play here. Watch this [this video]
Argues hardware supply chain attacks are plausible.
I found Bunnie Huang's talk on supply chain security a reasonable picture of the issues underlying the Bloomberg story. [this video] With the caveat that I find Bunnie Huang credible. [link]
Reasonable picture of the issues underlying the Bloomberg story.
Bribing Intel employees is probably expensive and might have legal risks. Instead, just hire one of the many skilled technicians in Shenzhen. For a good discussion of this topic, I recommend Andrew "bunnie" Huang's talk about supply chain security: [this video]
Good discussion of hardware tampering during manufacturing.
>when one would simply need a microscope to find them in devices This isn't a true statement, if strictly read--there are many techniques to hide undocumented components on boards, and covering all of them requires more than just a pass under a SEM. There's a fun talk that goes over a lot of them here: [this video]
Covers many techniques for hiding undocumented components on boards.
Video list and Hacker News comment labels from HackerTube (prompted by @karpathy), released under ODC-By 1.0, built on the open-index/hacker-news archive. Hacker News data is provided by Y Combinator; comments remain the work of their authors. Video titles, channel names and thumbnails belong to their creators and are shown via YouTube. HackerTube Watch is an unofficial edition. Data export of 2026-10-31.
Plays via YouTube's privacy-enhanced embed
6 Hacker News comments
From the HN archive; up to 20 kept per video, favoring different commenters. Recommendations first.