The U.S. Department of Homeland Security is urging US companies to completely avoid using hardware or services produced or linked to Chinese state corporate ownership because of data theft concerns.
In a business advisory published on Wednesday, the DHS said that Chinese products and services could contain backdoors or other data collection systems. It also said that data theft could occur via insider threats and business partnerships. The goal is to harvest data from western companies for use in furthering China's economic goals, the department added.
The DHS urged U.S. companies to take care when sharing data with Chinese firms; using equipment produced or maintained by Chinese companies; and even when working with companies that have Chinese citizens in "key leadership and security-focused roles."
According to the DHS, local Chinese national security laws allow the government to force domestic companies or citizens to engage in espionage or intellectual property theft.
Acting Homeland Security Secretary Chad F. Wolf said on Wednesday that "for too long, U.S. networks and data have been exposed to cyber threats based in China which are using that data to give Chinese firms an unfair competitive advantage in the global marketplace."
On Monday, Wolf also called China a "clear and present danger" to the U.S. that it couldn't ignore.
In addition to the harvesting of data from western companies and citizens, the advisory also highlights China's "history of manipulation, misuse, and exploitation of that data to serve PRC business and economic goals."
"Any person or entity that chooses to procure data services and equipment from PRC-linked firms, or store data on software or equipment developed by such firms, should be aware of the economic, reputational, and, in certain instances, legal, risks associated with doing business with these firms," the DHS said in a press release.
The U.S. government has also taken action against specific Chinese firms because of espionage concerns. In May 2019, it levied two bans on Chinese phone maker Huawei that blocked it from using U.S. technology and blocked U.S. firms form using its hardware. Earlier in December, the Federal Communications Commission told certain U.S. carriers to remove all Huawei equipment in their infrastructure.
32 Comments
However advisable this may be, my first reaction is "good luck with that". I doubt in the retail space there is much that isn't linked to the PRC directly or indirectly.
We had a company install a bunch of security cameras on one of our apartment properties. They installed cameras made by Hikvision. 100% full Chinese company. I was not a fan of it but it is what it is. I removed all the defaults in their NVR system that pointed to Chinese IP addresses. They were everywhere and supposedly to make it "easy" for the user to just plug in and get it working. No f**king way.
I have a Roborock S6 robot vacuum which I completely love and has performed better than any previously owned. I've always been concerned with their software though. Their newer robots have cameras which could be a concern for some. I keep my network as locked down as possible and careful what I agree to but I know that may not be enough. It's a risk you take when you have a bunch of internet connected devices automating your home.
In other news...
Avoid snake bites!!
Avoid walking on stilts in traffic!!
Avoid walking a tightrope over New York City!!
Avoid cutting yourself while chopping vegetables!!