Bloomberg listed a lot of entities in that article and every single one that wasn't anonymous has all but called Bloomberg outright frauds over it. They have all sorts of anonymous sources telling them anything and everything about this supposed plot yet none of them provided any shred of evidence to back up their claims.
Where's the smoking gun here? Why don't we have die shots of this thing? Why hasn't anyone on this very forum seen the C&C traffic from it phoning home to see if it was a target? Nothing about their explanation even seems remotely plausible. Why on earth would the attacker ever do something as obvious and annoying to deal with as what they supposedly did with altering the layout of the board and adding components instead of just backdooring the BMC? Are we supposed to believe that they were simultaneously competent enough to pull off Bloomberg's fairytale but too incompetent to have an altered BMC load backdoored firmware internally instead of off of an EEPROM chip on the board?
I'm not saying that we should rush to conclusions but Bloomberg has provided absolutely no sources with any shred of credibility. There's nothing to substantiate anything so why should the default stance be anything other than to consider that article a piece of cyberpunk fanfiction?
Where's the smoking gun here? Why don't we have die shots of this thing? Why hasn't anyone on this very forum seen the C&C traffic from it phoning home to see if it was a target? Nothing about their explanation even seems remotely plausible. Why on earth would the attacker ever do something as obvious and annoying to deal with as what they supposedly did with altering the layout of the board and adding components instead of just backdooring the BMC? Are we supposed to believe that they were simultaneously competent enough to pull off Bloomberg's fairytale but too incompetent to have an altered BMC load backdoored firmware internally instead of off of an EEPROM chip on the board?
I'm not saying that we should rush to conclusions but Bloomberg has provided absolutely no sources with any shred of credibility. There's nothing to substantiate anything so why should the default stance be anything other than to consider that article a piece of cyberpunk fanfiction?