[163621] in North American Network Operators' Group
Re: huawei
daemon@ATHENA.MIT.EDU (Phil Fagan)
Thu Jun 13 12:54:19 2013
In-Reply-To: <BC3048D9-F11D-4A06-B57A-5829C5696A5D@ianai.net>
From: Phil Fagan <philfagan@gmail.com>
Date: Thu, 13 Jun 2013 10:50:28 -0600
To: "Patrick W. Gilmore" <patrick@ianai.net>
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
So, DPI, duplication, injection into frames.
If each Hauwei knows of each other....I supose you could create a Hauwei
backbone and slowly pick and pull peices of what you want out of the flow.
But how realistic is that really...
On Thu, Jun 13, 2013 at 10:35 AM, Patrick W. Gilmore <patrick@ianai.net>wrote:
> On Jun 13, 2013, at 12:28 , "Avi Freedman" <avi@freedman.net> wrote:
>
> > I disagree.
> >
> > There have already been lab demos of sfps that could inject frames and
> APTs are pretty advanced, sinister, and can be hard to detect now.
> >
> > I'm not suggesting Huawei is or isn't enabling badness globally but I
> think it would be technically feasible.
>
> I am assuming a not-Hauwei-only network.
>
> The idea that a router could send things through other routers without
> someone who is looking for it noticing is ludicrous.
>
> Of course, most people aren't paying attention, a few extra frames
> wouldn't be noticed most likely. But if you are worried about it, you
> should be looking.
>
> Also, I find it difficult to believe Hauwei has the ability to do DPI or
> something inside their box and still route at reasonable speeds is a bit
> silly. Perhaps they only duplicate packets based on source/dest IP address
> or something that is magically messaged from the mother ship, but I am
> dubious.
>
> It should be trivial to prove to yourself the box is, or is not, doing
> something evil if you actually try.
>
> --
> TTFN,
> patrick
>
>
> > ------Original Message------
> > From: Patrick W. Gilmore
> > To: NANOG list
> > Subject: Re: huawei
> > Sent: Jun 13, 2013 12:22 PM
> >
> > On Jun 13, 2013, at 12:18 , Nick Khamis <symack@gmail.com> wrote:
> >
> >> A local clec here in Canada just teamed up with this company to
> >> provide cell service to the north:
> >>
> >>
> http://cwta.ca/blog/2012/09/24/ice-wireless-iristel-and-huawei-partner-for-3g-wireless-network-in-northern-canada/
> >>
> >> Scary....
> >
> > Why?
> >
> > Do you think Huawei has a magic ability to transmit data without you
> noticing?
> >
> > If you don't want to use Hauwei because they stole code or did other
> nasty things, I'm right there with you. If you believe a router can somehow
> magically duplicate info and transport it back to China (ignoring CT/CU's
> inability to have congestion free links), I think you are confused.
> >
> > --
> > TTFN,
> > patrick
> >
> >
> >
>
>
>
--
Phil Fagan
Denver, CO
970-480-7618
