Bonum Certa Men Certa

Another Back Door Found in HP Servers (LeftHand)

LeftHand



Summary: LeftHand has a back door and it's a gold mine to HP collaborators (perhaps NSA agents) who want full access to massive storage servers all around the world

A BRITISH branch of the German publisher Heise recently wrote about HP back doors, showing that they exist not only in Microsoft Windows. There is a "New backdoor in HP server products," says this new headline and here are the details:



Computer manufacturer HP has admitted that its StoreVirtual servers also contain an undocumented backdoor. The security vulnerability risks allowing attackers to gain unauthorised access to the storage systems. The backdoor provides users with direct access to the holy of holies, "LeftHand" (the operating system for the StoreVirtual server). HP has previously marketed its StoreVirtual systems as LeftHand Storage and P4000 SAN. LeftHand OS was originally called SAN/iQ.


Since we know that the NSA was cracking routers in China in order to eavesdrop or take control of network backbones (since 2009), this is noteworthy. The US has recently been paranoid about buying Chinese hardware (or hardware manufactured in China), based on NDAA clauses. In reality, it's the US perhaps that should be feared (biggest spy bar none, just like its military).

I have worked with LeftHand devices before (it's a fairly recent HP acquisition, costing $360 million in cash) and they're like the backbone of storage in many enterprises and probably governments, too. It's like a master key to many hard drives. If you control both network and storage backbones, you're the jack of all trades and the master of the world.

There is also a back door "in US emergency alert systems," according to another report from The H:

Backdoor in US emergency alert systems



The US-CERT, which is part of the US Department of Homeland Security, warns that security-critical vulnerabilities in US emergency alert systems potentially allow attackers to switch off the systems or misuse them to broadcast arbitrary emergency alerts. The Linux systems are used at TV and radio stations in the US and enable the US government to interrupt ongoing broadcasts when there is an emergency. This is designed to allow the US president to address the nation within ten minutes.


The latter is unlikely to be a back door by design. The ramifications, however, are noteworthy. These systems are proprietary.

Recent Techrights' Posts

Links 05/01/2025: Math on Checkerboard and Nazi-linked Accounts at Credit Suisse
Links for the day
Phoronix in Past Years: X is Dead. Phoronix Days Ago: Oh, Never Mind.
Weeks ago he was talking down X.org/X11
 
Links 05/01/2025: Crises in South Korea and Endgame (TCO) of Back Doors
Links for the day
Gemini Links 05/01/2025: Extended File Requests With NNCP and New Palm OS Game in 2025
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, January 04, 2025
IRC logs for Saturday, January 04, 2025
Today's "Latest Technology News" is Marketing SPAM Authored by a Bot
they no longer bother to write the text
Sometimes Less Publicity is Better (Than Bad Publicity)
Photo ops (especially with random people you do not know) are a liability, not a trophy
[Meme] Swallow Microsoft GitHub
We need to abandon (or turn down the volume on) that annoying preaching of Microsoft GitHub fans
What Would Dennis Ritchie Say About the "Memory-Safe" Hype (or Cargo Cult)?
The languages are sometimes being blamed for shoddy coding practices
Links 04/01/2025: Glastonbury Misinformation, Arrestgate in South Korea
Links for the day
Gemini Links 04/01/2025: Snow and Attacks
Links for the day
More Bot-Generated Fake 'Articles' About the "Linux"
From one of the "prime suspects" (or serial sloppers)
Links 04/01/2025: Social Control Media Deemed Very Unhealthy, Nick Clegg Leaves Zuckerberg's Influence Operations
Links for the day
Free Software Foundation (FSF) Almost 85% Funded
Probably 85% by Sunday or Monday
Gemini Links 04/01/2025: Geminispace Contributions and Security Theatre
Links for the day
Links 04/01/2025: Demolition of IBM Building (Its Birthplace), Microsoft Layoffs, Microsoft Vice President Quits
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, January 03, 2025
IRC logs for Friday, January 03, 2025
Apple 'Articles' That Aren't... Just SPAM From Beta'News', Generated by LLMs
A 'news' sites reduced to garbage crafted by bots
A Salad of Microsoft FUD Against Linux, Published by LinuxSecurity.com Using LLM Slop/Copypasta
LinuxSecurity.com is an anti-Linux FUD site, powered by Microsoft chatbots on the face of it
Gemini Links 03/01/2025: GNU Emacs Key Bindings in GNU Midnight Commander's Mcedit and Gemini Editing Setup with Vim
Links for the day
Links 03/01/2025: Neil Young Drops Out of Glastonbury and MElon Attacking the Free Press
Links for the day
[Memes] Two Dictators. Donald Trump Loves TikTok.
This is a problem
Jeff Bezos (Washington Post) Spreads Political Propaganda Against the Internet (and the Web)
Then people wonder why trust in the media has gotten so low
In Hong Kong and Taiwan People Flock to GNU/Linux (Unlike Windows, GNU/Linux Doesn't Capture Screenshots of Everything You Do and Add Back Doors to Encryption)
Hong Kong and Taiwan have bright engineers. They know Windows is a joke.
When You Get Your "Latest Technology News" From an LLM Slop Farm
They still call themselves "BetaNews" (the word "news" is in the name)
For Software Freedom (and for Broader Personal Freedom), the Goalposts Are Moving
we need to open up our eyes and identify/classify other threats, such as social control media
Engineering Things to Last 70 Years in an 8-Bit, 16-Bit, and 32-Bit World
Nowadays they make things that barely last 7 years
Slow News, But Not Slow for Us
So far this year (maybe premature to say so because many journalists are still on holiday) the news is very, very slow
GNU/Linux Rose to 5% in Belgium (It Was 1.66% Last January)
Trebling in 12 months, according to statCounter
A Golden Opportunity that Canonical and IBM Intentionally Ignore (in Order to Appease Microsoft)
They're too dependent on Microsoft "sweeteners"
[Meme] Crushing Free Speech Before Even Taking Public Office...
someone who isn't even president is already meddling
[Meme] Be a Good and Obedient Citizen. Use Microsoft Windows.
Microsoft actively works with China to censor search results and spy on citizens
Canada: Windows at All-Time Lows, ChromeOS and GNU/Linux Rise to Almost 8%
It is widely known that many schools in Canada adopted ChromeOS
In Mexico, Windows Down to All-Time Low, GNU/Linux Up to All-Time High
Yesterday we showed that in North America adoption of GNU/Linux is growing fast
The Free Software Foundation Extends Cutoff Date (Two More Weeks), Raises About 330,000 Dollars
Isn't it predictable that people who worked for Microsoft GitHub gave money to some unscrupulous lawyers in London to harass us?
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, January 02, 2025
IRC logs for Thursday, January 02, 2025