Homepage / Technology / Under pressure, Western tech firms bow to Russian demands to share cyber secrets
Start your love story now – join our talk to gay strangers source today BLACK SEO LINKS, BACKLINKS, SOFTWARE FOR MASS BACKLINKING Find regional bbw hookups inside area BLACK SEO LINKS, BACKLINKS, SOFTWARE FOR MASS BACKLINKING BLACK SEO LINKS, BACKLINKS, SOFTWARE FOR MASS BACKLINKING BLACK SEO LINKS, BACKLINKS, SOFTWARE FOR MASS BACKLINKING новой Игровые Автоматы и Слоты Играть нежелающим И Без Регистрации В Новинки 202 test “aviator Cassinos Para Arriesgar No Jogo On The Internet Aviãozinho No Brasi Página 2 Time-tested legitimate one-armed bandits in internet club başari bet casino Mr Jack Bet Brasil Como Funciona? Análise Completa Do Sit Leading Neteller Gambling Enterprises: The Ultimate Guide Optimizing Your Profits with the very best Live Roulette Bonuses Gambling establishments trick Mastercard: Una guía completa para jugadores ¿ Qué es un microprestamo de 50EUR? Préstamo Aprobado Seguro: Todo lo que necesitas saber Numerology Examination: Opening the Keys of Your Life Path The Ultimate Overview to Free Online Tarot Card Readings Numerology: Opening the Secrets of Numbers Tarot Card Card Viewers: Introducing the Mysteries of the Future Open the Keys of the Universe with Free Online Tarot Card Analysis Checking out the Globe of Online Tarot Card Readings Checking out the World of Free Psychic Readings The Power of Free Lotus Tarot Card Analysis Select 6 Time-tested legitimate one-armed bandits in internet club başari bet casino Onze gids voor het vinden van de beste nieuwe online casino’s in Nederland Bookmaker şirkəti Mostbet: rəsmi mobil versiya icmalı Avantajlý 7slots giris Casino Seçenekleri Keyif Vermeye Hazýr Entertainment Club masal bet casino giriş and reel-based simulators: transformation through time Загрузка виртуальных симуляторов на официальном сайте проверенного казино 7к казино How to choose the right cougar hookup site for you Meet singles who share your values & interests Get many from the granny hookup experience Top greatest Flat planet dating internet site and software Reviews for 2021 – RomanceScams.org The advantages of being a premier cougar lesbian Официальный Сайт Гама Казин exactly what makes a milf hookup unique? MTV’s Catfish: The Digital Pen-Pal Syndrome | Are you presently a mother just who will pay youngster service or alimony? Meet wealthy men in uk that are seeking love “aviator Game Tanzani Meet suitable gay men within area 10 most useful locations in order to meet Cougars in Liverpool for 2023 Greatest Couples Dating Sites – Have The Knowledge You Are Entitled To 1xSlots Casino: Avaliação do Site 2024 Bonus-Jogos Официальный Сайт Ramenbet ✅Sugarbook Review: complete Site review & All of our Dating Experience 2023 Find your perfect aussie hookup now Discover the advantages of mature dating Providing A Capricorn Man The Silent Treatment – What Will Affect The Connection – LoveDevani.com Find the best site for bisexual women tips Welcome toward most useful millionaire chat rooms in the web Hook up with regional black singles now Mostbet giriş şəxsi hesab Azərbaycan I Did Not Put You Into The “Buddy Area,” We’re Not Right For One Another Чехол книжка Samsung M146 Galaxy M14, Leather Case Fold, Dark Red, Красный купить по цене 286 грн в Киеве и Украине Чехол для Huawei Nova 9 SE Купить чехлы Nova 9 SE Чехол для Oukitel iiiF150 B2 Ultra Купить чехлы iiiF150 B2 Ultra what exactly is craigslist and exactly how does it connect people? สล็อตPG เว็บตรงไม่ผ่านเอเย่นต์ PGOSCAR SLOT WALLET 2022 สล็อตเว็บตรง เล่น บาคาร่า ออนไลน์ แตกง่าย เล่นง่ายได้เงินจริง เกมสล็อตออนไลน์ยอดนิยม รวมทุกค่าย จ่ายจริง PG SLOT 5G พีจีสล็อตเว็บตรง ฝาก-ถอนไม่มีขั้นต่ำ ไม่ต้องทำเทิร์น 2023 สล็อตPG เว็บตรงไม่ผ่านเอเย่นต์ PGOSCAR SLOT WALLET 2022 สล็อตPG เว็บตรงไม่ผ่านเอเย่นต์ PGOSCAR SLOT WALLET 2022 Casino Betorspin Sitesi Kapsamlı İncelemesi Rabona Casino Online【Full Review & Bonus Offers】 Welcome towards gay dad chat community Find your perfect match on most readily useful cougar chat site The Art of Tarot Card Card Analysis: A Comprehensive Guide Free Tarot Readings: Opening Mysteries of the Future Unlocking the Mysteries: Tarot Card Readings Online Unlocking the Secrets of Free Tarot Readings Opening the Mysteries of Online Tarot Card Readings Tarot Readings Free: A Comprehensive Guide Discovering the Globe of Online Psychic Reading Numerology Birth Date Calculator: Discover the Tricks of Your Life Course The Power of the 6 Card Tarot Card Spread Name Numerology Calculator by Day of Birth The Ultimate Overview to Tarot Card Spreads The Ultimate Overview to Tarot 101 The Interesting World of Psychic Readings Opening the Mysteries of Online Tarot Reading Free Numerology Test: Opening the Secrets of Your Life Course Numerology Predictions by Day of Birth The advantages of making use of a gay bear website what exactly is a cougar and just why in the event you find one? Create your profile and begin communicating with your ideal partners Understanding the initial challenges of older and younger lesbians Find the perfect black milf for you Looking for love? bbw lesbians are here to help Is My Husband Gay? 10 Alarming Indicators He Might Be – Her Norm Ramenbet Раменбет ️ Играть Онлайн На Деньги ️ Зеркало Ramen Be Join our community and luxuriate in the advantages of being bi How to Text an Older Woman you love and hold Her Interested Join our growing community of interracial dating enthusiasts today Get ready for an incredible experience Get started with this local fuck buddies finder today Vulkan Vegas Promo Computer Code Mit Freispielen Ebenso Bonusguthaben Find discreet love online: a good option for discreet dating

Technology

Under pressure, Western tech firms bow to Russian demands to share cyber secrets

Western technology companies, including Cisco, IBM and SAP, are acceding to demands by Moscow for access to closely guarded product security secrets, at a time when Russia has been accused of a growing number of cyber attacks on the West, a Reuters investigation has found.

Russian authorities are asking Western tech companies to allow them to review source code for security products such as firewalls, anti-virus applications and software containing encryption before permitting the products to be imported and sold in the country. The requests, which have increased since 2014, are ostensibly done to ensure foreign spy agencies have not hidden any “backdoors” that would allow them to burrow into Russian systems.

But those inspections also provide the Russians an opportunity to find vulnerabilities in the products’ source code — instructions that control the basic operations of computer equipment — current and former U.S. officials and security experts said.

While a number of U.S. firms say they are playing ball to preserve their entree to Russia’s huge tech market, at least one U.S. firm, Symantec, told Reuters it has stopped cooperating with the source code reviews over security concerns. That halt has not been previously reported.

Symantec said one of the labs inspecting its products was not independent enough from the Russian government.

U.S. officials say they have warned firms about the risks of allowing the Russians to review their products’ source code, because of fears it could be used in cyber attacks. But they say they have no legal authority to stop the practice unless the technology has restricted military applications or violates U.S. sanctions.

From their side, companies say they are under pressure to acquiesce to the demands from Russian regulators or risk being shut out of a lucrative market. The companies say they only allow Russia to review their source code in secure facilities that prevent code from being copied or altered.

The demands are being made by Russia’s Federal Security Service (FSB), which the U.S. government says took part in the cyberattacks on Hillary Clinton’s 2016 presidential campaign and the 2014 hack of 500 million Yahoo email accounts. The FSB, which has denied involvement in both the election and Yahoo hacks, doubles as a regulator charged with approving the sale of sophisticated technology products in Russia.

The reviews are also conducted by the Federal Service for Technical and Export Control (FSTEC), a Russian defense agency tasked with countering cyber espionage and protecting state secrets. Records published by FSTEC and reviewed by Reuters show that from 1996 to 2013, it conducted source code reviews as part of approvals for 13 technology products from Western companies. In the past three years alone it carried out 28 reviews.

A Kremlin spokesman referred all questions to the FSB. The FSB did not respond to requests for comment. FSTEC said in a statement that its reviews were in line with international practice. The U.S. State Department declined to comment.

Moscow’s source code requests have mushroomed in scope since U.S.-Russia relations went into a tailspin following the Russian annexation of Crimea in 2014, according to eight current and former U.S. officials, four company executives, three U.S. trade attorneys and Russian regulatory documents.

In addition to IBM, Cisco and Germany’s SAP, Hewlett Packard Enterprise, and McAfee have also allowed Russia to conduct source code reviews of their products, according to people familiar with the companies’ interactions with Moscow and Russian regulatory records.

Until now, little has been known about that regulatory review process outside of the industry. The FSTEC documents and interviews with those involved in the reviews provide a rare window into the tense push-and-pull between technology companies and governments in an era of mounting alarm about hacking.

Roszel Thomsen, an attorney who helps U.S. tech companies navigate Russia import laws, said the firms must balance the dangers of revealing source code to Russian security services against possible lost sales.

“Some companies do refuse,” he said. “Others look at the potential market and take the risk.”

“WE HAVE A REAL CONCERN”

If tech firms do decline the FSB’s source code requests, then approval for their products can be indefinitely delayed or denied outright, U.S. trade attorneys and U.S. officials said. The Russian information technology market is expected to be worth $18.4 billion this year, according to market researcher International Data Corporation (IDC).

Six current and former U.S. officials who have dealt with companies on the issue said they are suspicious about Russia’s motives for the expanded reviews.

“It’s something we have a real concern about,” said a former senior Commerce Department official who had direct knowledge of the interaction between U.S. companies and Russian officials until he left office this year. “You have to ask yourself what it is they are trying to do, and clearly they are trying to look for information they can use to their advantage to exploit, and that’s obviously a real problem.”

However, none of the officials who spoke to Reuters could point to specific examples of hacks or cyber espionage that were made possible by the review process.

Source code requests are not unique to Russia. In the United States, tech companies allow the government to audit source code in limited instances as part of defense contracts and other sensitive government work. China sometimes also requires source code reviews as a condition to import commercial software, U.S. trade attorneys say.

“CLEAN ROOMS”

The reviews often takes place in secure facilities known as “clean rooms.” Several of the Russian companies that conduct the testing for Western tech companies on behalf of Russian regulators have current or previous links to the Russian military, according to their websites.

Echelon, a Moscow-based technology testing company, is one of several independent FSB-accredited testing centers that Western companies can hire to help obtain FSB approval for their products.

Echelon CEO Alexey Markov told Reuters his engineers review source code in special laboratories, controlled by the companies, where no software data can be altered or transferred.

Markov said Echelon is a private and independent company but does have a business relationship with Russia’s military and law enforcement authorities.

Echelon’s website touts medals it was awarded in 2013 by Russia’s Ministry of Defense for “protection of state secrets.” The company’s website also sometimes refers to Markov as the “Head of Attestation Center of the Ministry of Defense.”

In an email, Markov said that title is only intended to convey Echelon’s role as a certified outside tester of military technology testing. The medals were generic and insignificant, he said.

But for Symantec, the lab “didn’t meet our bar” for independence, said spokeswoman Kristen Batch.

“In the case of Russia, we decided the protection of our customer base through the deployment of uncompromised security products was more important than pursuing an increase in market share in Russia,” said Batch, who added that the company did not believe Russia had tried to hack into its products.

In 2016, the company decided it would no longer use third parties, including Echelon, that have ties to a foreign state or get most of their revenue from government-mandated security testing.

“It poses a risk to the integrity of our products that we are not willing to accept,” she said.

Without the source code approval, Symantec can no longer get approval to sell some of its business-oriented security products in Russia. “As a result, we do minimal business there,” she said.

Markov declined to comment on Symantec’s decision, citing a non-disclosure agreement with the company.

TRUSTED LABS

Over the past year, HP has used Echelon to allow FSTEC to review source code, according to the agency’s records. A company spokesman declined to comment.

An IBM spokesman confirmed the company allows Russia to review its source code in secure, company-controlled facilities “where strict procedures are followed.”

FSTEC certification records showed the Information Security Center, an independent testing company based outside Moscow, has reviewed IBM’s source code on behalf of the agency. The company was founded more than 20 years ago under the auspices of an institute within Russia’s Ministry of Defense, according to its website. The company did not respond to requests for comment.

In a statement, McAfee said the Russia code reviews were conducted at “certified testing labs” at company-owned premises in the United States.

SAP allows Russia to review and test source code in a secure SAP facility in Germany, according to a person familiar with the process. In a company statement, SAP said the review process assures Russian customers “their SAP software investments are safe and secure.”

Cisco has recently allowed Russia to review source code, according to a person familiar with the matter.

A Cisco spokeswoman declined to comment on the company’s interactions with Russian authorities but said the firm does sometimes allow regulators to inspect small parts of its code in “trusted” independent labs and that the reviews do not compromise the security of its products.

Before allowing the reviews, Cisco scrutinizes the code to ensure they are not exposing vulnerabilities that could be used to hack the products, she said.

Source: Tech CNBC
Under pressure, Western tech firms bow to Russian demands to share cyber secrets

Comments are closed.