Tim Cook lambastes Bloomberg for iCloud spy chip report, calls for retraction
Apple CEO Tim Cook has uncharacteristically spoken out about the Bloomberg report that claimed that the Chinese had inserted a spy chip into the company's iCloud server, and is completely denying that Apple was impacted.
"There is no truth in their story about Apple," Cook told BuzzFeed. "They need to do that right thing and retract it."
"I was involved in our response to this story from the beginning," said Cook. "I personally talked to the Bloomberg reporters along with Bruce Sewell who was then our general counsel. We were very clear with them that this did not happen, and answered all their questions. Each time they brought this up to us, the story changed and each time we investigated we found nothing."
"We turned the company upside down. Email searches, datacenter records, financial records, shipment records," Cook added. "We really forensically whipped through the company to dig very deep and each time we came back to the same conclusion: This did not happen. There's no truth to this."
Cook's remarks are surrounding weeks of speculation and denials that Apple had been the victim of a Chinese plot to embed spy chips in iCloud servers. Earlier in October, a Bloomberg report based on extensive investigation claimed that Apple, Amazon, and almost 30 other companies had been the victim of an espionage campaign in which rice-sized chips had been planted on motherboards made by Super Micro. Once delivered, the motherboards supposedly created a backdoor into infrastructure like Apple's iCloud.
Apple was quick to deny allegations, insisting that it had conducted a "massive, granular, and siloed investigation."
Amazon has likewise issued denials.
"There are so many inaccuracies in this article as it relates to Amazon that they're hard to count," Amazon said in its statement, refuting several specific claims, and specifically citing that there was no modified hardware found
Several subsequent accounts have cast further doubt, such as one from the senior advisor for Cybersecurity Strategy to the director of the U.S. National Security Agency, and another denial on Thursday by The U.S. Director of National Intelligence, Dan Coats. Additionally, The U.S. Department of Homeland Security commented that it had "no reason to doubt" the positions of Apple and Amazon.
"Bloomberg Businessweek's investigation is the result of more than a year of reporting, during which we conducted more than 100 interviews," a spokesperson told BuzzFeed. "Seventeen individual sources, including government officials and insiders at the companies, confirmed the manipulation of hardware and other elements of the attacks. We also published three companies' full statements, as well as a statement from China's Ministry of Foreign Affairs. We stand by our story and are confident in our reporting and sources."
Other questions about the story and details presented in the account posed by BuzzFeed were rebuffed by the publication.
BuzzFeed also claims that "according to numerous spokespeople and executives in positions to know about internal investigations," Google, Microsoft, IBM, Oracle, Dell, Palantir, Hewlett Packard, Verizon, Comcast, AT&T, Twitter, Palantir, T-Mobile, Goldman Sachs, and Capital One were not in the group of 30 companies that Bloomberg alleges were attacked.
"There is no truth in their story about Apple," Cook told BuzzFeed. "They need to do that right thing and retract it."
"I was involved in our response to this story from the beginning," said Cook. "I personally talked to the Bloomberg reporters along with Bruce Sewell who was then our general counsel. We were very clear with them that this did not happen, and answered all their questions. Each time they brought this up to us, the story changed and each time we investigated we found nothing."
"We turned the company upside down. Email searches, datacenter records, financial records, shipment records," Cook added. "We really forensically whipped through the company to dig very deep and each time we came back to the same conclusion: This did not happen. There's no truth to this."
Cook's remarks are surrounding weeks of speculation and denials that Apple had been the victim of a Chinese plot to embed spy chips in iCloud servers. Earlier in October, a Bloomberg report based on extensive investigation claimed that Apple, Amazon, and almost 30 other companies had been the victim of an espionage campaign in which rice-sized chips had been planted on motherboards made by Super Micro. Once delivered, the motherboards supposedly created a backdoor into infrastructure like Apple's iCloud.
Apple was quick to deny allegations, insisting that it had conducted a "massive, granular, and siloed investigation."
Amazon has likewise issued denials.
"There are so many inaccuracies in this article as it relates to Amazon that they're hard to count," Amazon said in its statement, refuting several specific claims, and specifically citing that there was no modified hardware found
Several subsequent accounts have cast further doubt, such as one from the senior advisor for Cybersecurity Strategy to the director of the U.S. National Security Agency, and another denial on Thursday by The U.S. Director of National Intelligence, Dan Coats. Additionally, The U.S. Department of Homeland Security commented that it had "no reason to doubt" the positions of Apple and Amazon.
Bloomberg's response
Bloomberg continues to refute allegations of poor reporting of the matter."Bloomberg Businessweek's investigation is the result of more than a year of reporting, during which we conducted more than 100 interviews," a spokesperson told BuzzFeed. "Seventeen individual sources, including government officials and insiders at the companies, confirmed the manipulation of hardware and other elements of the attacks. We also published three companies' full statements, as well as a statement from China's Ministry of Foreign Affairs. We stand by our story and are confident in our reporting and sources."
Other questions about the story and details presented in the account posed by BuzzFeed were rebuffed by the publication.
BuzzFeed also claims that "according to numerous spokespeople and executives in positions to know about internal investigations," Google, Microsoft, IBM, Oracle, Dell, Palantir, Hewlett Packard, Verizon, Comcast, AT&T, Twitter, Palantir, T-Mobile, Goldman Sachs, and Capital One were not in the group of 30 companies that Bloomberg alleges were attacked.
Comments
Apple has very sofisicated chip and software knowledge and the story has almost no merit from a technical perspective.
I call this fake news, or “nieuws in komkommertijd” like we say in Holland.
> 100 interviews
17 individual sources
3 full statements from companies
1 statement from China's Ministry of Foreign Affairs
and
0 tampered boards
One board wouldn't prove that Apple, Amazon, or any company was an unwitting conduit (supposedly) to CN. But it would prove that it happened to somebody, or at least that it exists. And yet nothing so far.
Tim Cook responding looks like a tell.
I also discovered today it is virtually unpossible to install or upgrade to High Sierra or Mojave on machines configured with AppleRAID.
The is the key point I made a number of times, Apple is publicly traded company and when an Exec makes statement like this they have to be factually correct. If they are not and it found out they were not factually correct the SEC will be all over them and Tim would definitely loose his job over this. Apple Statement were too strong to think they were not telling the truth. I wonder if Tim will think twice about the fake media today.
Nice try.
You have no clue what you're talking about. If Tim Cook and other execs are found to be blatantly lying about this, then the PR disaster for Apple would be infinitely greater than if this story was actually true and they admitted to it. Heads would roll and Apple's credibility would be utterly tarnished for a long time to come. And Apple execs could go to jail. Apple is the most scrutinized company on the planet, TC cannot assume that he can lie and get away with it for very long. The truth would come out. So yes, they WOULD own up to it, because doing anything else would be even worse.
People have managed, by jumping through hoops, to install High Sierra on an AppleRAID, but you cannot do any point updates, so it becomes pointless. Mojave is virtually unpossible.
Practically it means the Mini Server configs, that usually were configured with mirroring, are very hard to upgrade without either losing the protection of mirroring, or replace disks.
I really hope Apple have a compelling story come Oct 30. If not it is time to ask that CEO tough questions.