Skip to content

Comment on Spy agencies ban Lenovo PCs on security grounds

Comments

Wait, so they'll still buy a Dell or HP that is manufactured in China, by a Chinese company, but has the nameplate of an American company slapped on the front, but they won't buy a Lenovo? I'm so confused.

You're confused because you didn't read the article very well. It's reporting allegations of specifically identified malicious elements of Lenovo hardware and firmware.

IMHO, there's a big difference between American companies that manufacture in China and can ensure certain functionality (I for one support "made in USA" and buy that if I can)... and Chinese companies, esp. ones with CCP connections, who can build electronics any which way they would like to.

I for one support "made in USA" and buy that if I can

I'd never understood this kind of nationalism. I don't care if the items I purchase happen to have been made in the country I happen to live. I want to buy the product that best suits my needs regardless of where it was manufactured.

Sure, if an American product happens to have a higher quality and I'm looking for that, then I can choose to buy it. In that case you can abstract away the manufacturing country, so "made in country X" shouldn't be a factor in any case.

If anything, Western people should buy products from poor countries. It's the best aid they can get.

I'd never understood this kind of nationalism.

Some people want to support their own community and some are concerned about labor/environment standards, human rights, civil liberties, etc.

Some people want to support their own community

I don't think that's necessary nor ethically justified (though I understand why some people support it). It's like a some kind abstract form of 'cartel', i.e. "I support you, you support me".

However, it's taking money away from poor countries (in this context). I don't think some 'rich' Westerner who happens to live near me is more deserving of my money than a poor person in a third-world country.

some are concerned about labor/environment standards, human rights, civil liberties, etc.

Ironically, the only way those poor countries will have labour/environment standards, human rights and civil liberties is throug economic growth. If you're poor, you can't afford workplace safety.

It's a pretty natural want though. I'll go to a coffee shop owned by my brother before I go to a random other coffee shop. Especially if products are more or less interchangeable. What's wrong with wanting to give your business to someone you know well, and whose product/work has a direct influence on your life? Do what you want, obviously, but I don't think it's a weird moral problem whether you want to support those closer to you.

What's wrong with wanting to give your business to someone you know well

Nothing, but it's impossible to "know well" everyone in a nation, making this sort of blind nationalism simply delusional at best.

And yet I could fly thousands of miles to Washington state or California and "know" people much better than if I flew thousands of miles to Latin America, Iceland, etc.

There is more to 'closeness to people' than distance, there is also shared culture, civics, values, etc. etc.

You'll find a lot more common culture between people in NYC and London than you'll find between Atlanta and Portland, or Little Rock and San Francisco.

As someone who's moved both across the US and across the ocean, stopping to embed myself culturally for several years each time, I think you overestimate this bond.

It's like a some kind abstract form of 'cartel', i.e. "I support you, you support me".

It's called "families" and "communities" and is the basis for human civilization. My children aren't going to grow up around poor third world people, nor marry them or raise their own families with them. Some poor third world person isn't going to come to my aid if I'm in trouble. They're not going to be my friends, my coworker, or even the guy who might find my phone and return it to me. They won't be voting for the government that governs me. Any rational person has tremendous incentive to make sure the people closest to them, and more broadly the people in their own body politic are cared for before others.

I would argue that collaboration is the basis for human civilization. Political cliques, on the other hand, surely are the basis for war.

Communities are not "political cliques." The vast majority of collaboration happens with people immediately around you. That's why people go to San Francisco to do startups and not to Boise Idaho.

I don't think that's necessary nor ethically justified

Let's say there was a fictional country that was the exact opposite of your country : Some kind of dictatorship, with censorship everywhere, people enslaved , etc.

Of course you would not buy a laptop from them, you don't want to give more money/power to this awful country.

Now, if you consider 1 country to be the best, with a score of 100, and that worst country to have a score of 0.

Every other country would have a score between 0 and 100.

Depending on people views about where this country fits , some will be more supporting than other : They would be OK to pay 20% more for the same laptop to a country with a score of 95 instead of 80.

The analogy with the coffee shop of JonFish85 would be : you know your brother is kind with his employees and give them good salaries, whereas the other coffee shop's owner harass his employees and pay them badly. But in both coffee shops , the product is the same, with the same price.

Ironically, the only way those poor countries will have labour/environment standards, human rights and civil liberties is throug economic growth. If you're poor, you can't afford workplace safety.

Not really, if some company has twice more money, they would just hire more low-cost employees. To have a better workplace safety, either the employees must act, or citizens of that country ( including the employees ) assuming the country is a good democracy. If none of them can, other country can help solve the problem by boycotting products or enforcing regulations.

My country of birth is small enough that practically none of the nontrivial products I want to buy or consume are made locally, so hearing about this sort of preference (e.g. for "made in $my_country" products) makes me think. Since I can't fall back on a no-brainer nationalist preference on a daily basis (except for a few locally grown vegetables) like the citizens of a country as large as the United States, what should I prefer, if anything?

Of course you would not buy a laptop from them, you don't want to give more money/power to this awful country.

The approach you describe entails rating countries of manufacture based on labour/environmental/civil standards. So, without more detailed knowledge of the factories in question, an American who follows this approach should prefer a product made in (say) Germany or Sweden, rather than one made in the USA, since it could be argued that the former countries treat their workers better, and take better care of their environment.

I think a reasonable proviso to this policy might be to source high-volume/frequency items locally (e.g. produce) when possible to reduce pollution from transportation (or any other wasteful overhead), assuming almost everything else is equal. Which also means that if this hypothetical American resident is close to a land border, s/he might want to buy something from Canada or Mexico rather than a U.S. state at the other end of the country.

what should I prefer, if anything?

Whatever you want. That's the point.

People on HN are talking about boycotting U.S. cloud-based services due to the NSA, which is a logical extension of this principle of supporting people and business who you perceive to be "closer" to you.

The wealthier a country becomes, the better standards will become. In short (understatement), because there are a finite number of people in the country (you cannot hire an infinite number of "low-cost employees").

For me, I support US manufacturers because I think a lot of American talent these days is wasted on zero-sum industries such as finance, and I would much rather we work on actually producing real value.

I'd never understood this kind of nationalism. I don't care if the items I purchase happen to have been made in the country I happen to live.

If you want, you can construe entirely selfish motives out of it.

It is better if everyone in your community has a job- it brings down crime, for one. So you can personally benefit from buying locally- just in a "trickle down" sort of way rather than a direct one.

To follow the similar selfish motive, why would you care to help third world countries anyway? Even if they collapse in themselves the effect on you will be minimal compared to your city collapsing around you (hi, Detroit)

Some needs functions include more than just the product at hand. Somewhere in the utility calculation, it's conceivable that by purchasing a marginally worse object there is marginally less unemployment in my town and thus I can partake in all sorts of other things that happen when more money is inside my small system.

Whether or not it's worth it in the end: no comment.

It kind of sounds like you're saying you don't understand the economic and social benefits of buying local.

If you've been watching the situation in the US and EU for the past 5-6 years you might better understand.

It sounds to me like they are saying that they don't care about the economic and social benefits. (S)he would rather those benefits go to people worse off.

There are also economic and social benefits of buying further afield. It really depends on what you are buying.

True, but look at it this way: I'd rather spend money that goes back into my own country, so that there will be more infrastructure, production and specialists here instead of overseas. This will benefit me and everyone else in the future: faster and cheaper shipping, better customer/tech support, more customization, cheaper upgrades, etc.

Things which are harder to get when you pay an American company,which then pays a Nevis company, which then pays a Chinese company, which then pays Taiwanese and Chinese companies and so on...

It's just a more macro version of the buy local movement, I think.

In some places it's feasible, in others not so much. But, to each their own, I think. If that's what makes them feel better. Just like if it makes people feel better that their veggies are grown locally vs shipped in, even if the local veggies require more 'human subsidies' (energy, water, fertilizer, etc.) that in places where they grow more readily, so be it.

If anything, Western people should buy products from poor countries. It's the best aid they can get.

So given equivalent products built in Detroit and Somalia, you would go for the one built in Somalia?

Unfortunately your economic rationale makes little sense to most people, even quite a few economists.

The economists who are anti-trade?

How can Dell check for back doors when the entire design and manufacturing process is done by Chinese subcontractors? That makes no sense...

How can Dell check for back doors when the entire design and manufacturing process is done by Chinese subcontractors? That makes no sense..

Through testing, just like the governments did to discover alleged backdoors in Lenovo chips. Did you read the article before you posted multiple times criticizing it?

The ban was introduced in the mid-2000s after intensive laboratory testing of its equipment allegedly documented “back-door” hardware and “firmware” vulnerabilities in Lenovo chips.

Do they check every machine? From TFA:

  > A technology expert at the ­Washington-based Brookings ­In­stitution, Professor John Villasenor, said the globalisation of the semi-conductor market has “made it not only possible but inevitable that chips that have been intentionally and maliciously altered to contain hidden ‘Trojan’ circuitry will be inserted into the supply chain.
So we aren't necessarily talking about every single machine being back-doored. My point is that Dell and HP aren't necessarily any more secure just because they're American companies. The home-country of the company whose badge is on the machine is pretty much meaningless in a globalized world.

The article also contains some suggestion that this was motivated by rivalry in addition to security, so there's that as well.

I see such back doors as less of a problem for the general public than it is for intelligence agencies because because even a single malicious device could result in a major security breach and so randomized testing mightn't be as effective. If trying to snoop on the general public on an ongoing basis though then it would be hard to avoid randomized testing (presuming someone is actually doing such testing).

Theoretically the same way the article claims the NSA does, with a specialized lab for hardware testing.

Whether they actually do or not, who knows.

Careful marketing is tricky the phrase "made in America" may not mean what you think it means. I'd say you're looking for "Product of USA" which means a totally different thing i.e. actually made in the USA.

I know here in Canada on investigative consumer shows it's been shown "made in" may simply mean a product was assembled from parts made in another country or maybe 51% of the product was made in your country.

Preying on a person's nationalistic feelings is a powerful marketing tool to get people to buy a product.

The fact is that "oh no, CHINA!" has most-favored-nation status with the US and is a major major partner in pretty much every way, including positive ones. The rending of garments like this is just a couple of boardroom loudmouths posturing, like Facebook and Google taking potshots at each other. Competitors, not enemies.

What makes you think they buy off-the-shelf Chinese-assembled Dells and HPs?

If they weren't buying off the shelf computers to begin with this announcement wouldn't have been required.

I don't know for certain, but having dealt with Dell before (as an institutional customer), I know the government buys off-the-shelf Dells. Now, maybe the intelligence agencies have special arrangements, I don't know, but it seems unlikely to me. I'm sure they do more than just unpack the box and plop it onto the desk, but I doubt Dell or HP have special manufacturing facilities for intelligence agency machines.

Most of the computers in a defence facility are unclassified or restricted. The rules are different for secret/top secret.

The article never stated that they would do so.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.