Questions arise about Bloomberg's story on China spying via tiny chips after companies' strong denials, showing the difficulties of national security reporting
China's Chip Hack, Amazon and Apple's Denials, Google's Trust Reversal Kif Leswing / Business Insider : Could spies actually insert malicious chips into computer circuit boards? A manufacturing expert says it's possible Timothy B. Lee / Ars Technica : Bloomberg stands by Chinese chip story as Apple, Amazon ratchet up denials Joe Rossignol / MacRumors : Apple's Former Legal Chief Bruce Sewell Says FBI ‘Never Heard’ of Supermicro Allegations Last Year Brian Barrett / Wired : Don't Buy the Trump Administration's China Misdirection Firstpost : UK backs Apple, Amazon over reports of hacking by Chinese intelligence Bryan M. Wolfe / KnowTechie : Bloomberg isn't backing down, sticks by its Chinese microchip hacking story, despite claims Makena Kelly / The Verge : Chinese spies reportedly inserted chips into servers belonging to Apple, Amazon Ellen Tannam / Silicon Republic : Apple and Amazon deny Chinese spy chip claims Tweets: Zack Whittaker / @zackwhittaker : I think this Bloomberg “chip spy” story boils down to one basic point. The real problem is that some of the smartest, brilliant minded, rational people who are experts in this field have no idea who to believe on this story. I'm an idiot — and I have no clue, either. Zack Whittaker / @zackwhittaker : @elongreen Elon, I don't know. I wrote some analysis Friday that kinda plays this out on both sides. But this DHS denial really does seem to weigh against Bloomberg because DHS benefits from Bloomberg being *right*. http://techcrunch.com/... @buzzfeednews : Reached by BuzzFeed News, multiple Apple sources — three of them very senior executives who work on the security and legal teams — said that they are at a loss as to how to explain the Bloomberg allegations http://www.buzzfeednews.com/ ... Zack Whittaker / @zackwhittaker : New: Today's bombshell Bloomberg “spy chip” story quickly became a “he said, she said” after Apple, Amazon, and Supermicro denied the claims. But it's possible that the story and the affected companies can both be right and wrong at the same time. http://techcrunch.com/... Kenn White / @kennwhite : Apple's general counsel said he personally contacted FBI's GC about the Supermicro story. “He said, 'I've never heard of this, but give me 24 hours to make sure.' He called me back 24 hours later and said ‘Nobody here knows what this story is about.’” http://www.reuters.com/... Charlie Demerjian / @cdemerjian : I have personally seen #Bloomberg do what I regard are completely unethical things to put out a story that they were flat out told was untrue, and turned out to be untrue. This is the one example I can point to publicly: https://www.semiaccurate.com/ ... Stephen Foskett / @sfoskett : This piece by @Patrick1Kennedy is the smartest/nerdiest analysis yet of the hack Bloomberg alleges on Amazon and Apple. Not proof but a likely vector of such a hack. http://www.servethehome.com/ ... http://twitter.com/... @carmencrincoli : If LITERALLY ANYONE who was respected in the field would corroborate this story, I'd believe it. Instead, there's just confusion and no experts beyond Bloomberg trying to present themselves as such. http://twitter.com/... Steven Sinofsky / @stevesi : Agree. In this day and age, everything will surface and come to light. It isn't prudent to so strenuously deny something when that is a certainty. (Though not calling Zack an idiot.) http://twitter.com/... Ryan Naraine / @ryanaraine : “In my experience, Apple PR does not lie. Do they spin the truth in ways that favor the company? Of course. But they don't lie, because they understand that one of Apple's key assets is its credibility. They'd say nothing before they'd lie.” http://daringfireball.net/... Charlie Warzel / @cwarzel : We spoke to multiple Apple sources — three of them very senior executives who work on the security and legal teams — who were at a loss to explain the allegations in the big Bloomberg hack story. Super. Aggressive. Denials. http://www.buzzfeednews.com/ ... http://twitter.com/... Matthew Braga / @mattbraga : New: I asked Canada's cyber spy agency CSE about this Reuters story. Here's what I just got back: “We are aware of the Bloomberg report. Like our partners at GCHQ, we have no reason to question the analysis done by the companies in question.” @cbcnews http://www.reuters.com/... Caitlin Condon / @catc0n : TechCrunch's Bloomberg vs. tech giants context story is nicely done. That said, in this particular national moment, I wish more coverage was more circumspect about the suboptimal “he said, she said” trope—and the critical importance of the fourth estate. https://techcrunch.com/... Peter Sterne / @petersterne : I think the key is to treat this as a natsec story, rather than a tech story. Bloomberg is reporting on the existence and preliminary findings of a counter-intelligence investigation into an apparent hardware implant. Joseph Menn / @josephmenn : New: #Apple ex-general counsel tells me he asked FBI general counsel last year about alleged probe of tainted chips. FBI's top lawyer said: ‘Nobody here knows what this story is about.’ http://www.reuters.com/... David O'Brien / @d_obrien : It's unusual to see statements like these from foreign intelligence agencies, adding further to the mystery of the Bloomberg report. But, worth noting GCHQ only backs the companies' denials, and does not opine about the existence of the chips. http://www.reuters.com/... Mathew Ingram / @mathewi : This post makes the point that it's possible those who are doing the denying at Apple and Amazon weren't even aware of the Chinese hacking investigation http://techcrunch.com/... @benlovejoy : The ‘Apple is lying’ theory doesn't appear plausible here ... http://twitter.com/... John Huber / @johnhuber72 : This is a pretty remarkable response from a company that doesn't typically comment on such reports. They refute every aspect of the Bloomberg piece. AWS had a similar pointed rebuttal. The allure of the “China is spying” narrative is so strong. http://www.apple.com/... Rene Ritchie / @reneritchie : That very few Apple, Amazon, etc legal and directly affected teak members are aware but not the CEO, COO, PR teams, etc. is certainly possible but if the news leaked to Bloomberg... http://twitter.com/... Stephen Shankland / @stshank : Apple's long, unequivocal denial that the Apple part of Bloomberg's secret-chips-from-China story today is wrong. (I'm not passing judgment on either Apple or Bloomberg, but this kind of response is pretty rare for Apple.) http://www.apple.com/... John Paczkowski / @johnpaczkowski : the statements from Apple & Amazon in here are pointed and ferocious. can't recall the last time i saw something like them. https://twitter.com/... Nilay Patel / @reckless : To be clear, I think Bloomberg does excellent and rigorous journalism to the highest standards. But the risk of these statements being false in that context is staggering. Jessica Powell / @themoko : I'm inclined to believe Apple. But I also remember a time when all the tech companies screamed about not knowing about an NSA program called Prism. Turned out they didn't know the name of it, but they did have backdoors. See also Mediagazer
Context & Ripple Effects
Bloomberg's report alleging Chinese-installed spy chips on Supermicro boards met an unusual wall: Apple, Amazon, and Supermicro all issued categorical denials, and within days DHS and the UK's NCSC said they had no reason to doubt the companies' statements — with GCHQ and Canada's CSE adding their weight. FBI general counsel-level pushback via former Apple legal chief Bruce Sewell deepened the gap between the scoop and official record.
The story's own sourcing then began to fray in public: hardware security expert Joe Fitzpatrick, a named source in the investigation, cast doubt on its accuracy, and follow-on analysis argued it may have rested on misunderstandings of an FBI briefing. What began as a supply-chain security bombshell became a case study in how single-sourced national security reporting holds up when every named subject disputes it.
First-order effects
- Apple, Amazon, and Supermicro are forced into extraordinary public rebuttals, spending credibility capital normally reserved for product launches to defend their supply chains against a major outlet.
- Bloomberg stands by the report while its named expert source and the FBI's own account contradict key claims, putting the story's core allegation on the defensive within days of publication.
Second-order effects
- Government agencies — DHS, NCSC, GCHQ, Canada's CSE — break from the usual silence on intelligence matters to side publicly with the companies over the press, an alignment that pressures other outlets to treat the story as unverified.
- Supermicro's server customers and the broader hardware supply chain absorb the uncertainty regardless of the story's accuracy, since board-level tampering allegations are costly to disprove.
Third-order effects
- If the pattern holds — anonymous-source natsec scoops met with unified corporate and allied-government denial — newsrooms face pressure to raise the evidentiary bar for supply-chain intrusion stories, and companies gain a playbook for fighting back publicly rather than staying silent.
- The episode risks desensitizing readers to genuine hardware-supply-chain threats, since a disputed flagship story makes future, better-sourced warnings easier to dismiss.
The trend: National security journalism is entering an era where single-sourced supply-chain scoops are contested in real time by the companies involved and by allied governments, making source quality itself the story.