Apple cut ties with server supplier Super Micro Computer in 2016 after unearthing a potential security vulnerability in at least one of its data center servers, reports The Information.
The vulnerability in the server, which was part of Apple's technical infrastructure powering its web-based services, was discovered in the early months of 2016. According to Super Micro senior vice president of technology Tau Leng, Apple ended its business relationship with Super Micro Computer shortly after uncovering the security issue.
Leng's account of the incident makes it sound like Apple received bad firmware from an FTP site hosted by Super Micro that may have been infiltrated, which may have compromised the server.
According to Leng, when Apple was asked to provide the version number of the firmware it had downloaded after experiencing issues, Apple provided an invalid number. After that, Apple refused to provide more information to Super Micro.
"Apple is deeply committed to protecting the privacy and security of our customers and the data we store," the spokesperson told The Information. "We are constantly monitoring for any attacks on our systems, working closely with vendors and regularly checking equipment for malware."
It's not quite clear what caused the vulnerability that led to the end of the agreement between Super Micro and Apple, but Apple has since moved on to other server suppliers, increasing orders from ZT and purchasing servers from Inspur.
The vulnerability in the server, which was part of Apple's technical infrastructure powering its web-based services, was discovered in the early months of 2016. According to Super Micro senior vice president of technology Tau Leng, Apple ended its business relationship with Super Micro Computer shortly after uncovering the security issue.
Leng's account of the incident makes it sound like Apple received bad firmware from an FTP site hosted by Super Micro that may have been infiltrated, which may have compromised the server.
According to Leng, when Apple was asked to provide the version number of the firmware it had downloaded after experiencing issues, Apple provided an invalid number. After that, Apple refused to provide more information to Super Micro.
Mr. Leng said Super Micro regularly provides firmware updates that data center customers like Apple can download from a private "FTP" site, hosted by Super Micro. He said the firmware updates come from outside chip manufacturers--in this case, a networking chip maker that he declined to name.Sources who spoke to The Information said servers that handled Siri requests and App Store search functionality may have been compromised, but an Apple spokesperson said Apple did not receive bad firmware nor was any customer data stolen.
"Apple is deeply committed to protecting the privacy and security of our customers and the data we store," the spokesperson told The Information. "We are constantly monitoring for any attacks on our systems, working closely with vendors and regularly checking equipment for malware."
It's not quite clear what caused the vulnerability that led to the end of the agreement between Super Micro and Apple, but Apple has since moved on to other server suppliers, increasing orders from ZT and purchasing servers from Inspur.
30 comments
Apple today seeded the fourth betas of upcoming iOS and iPadOS 13.3 updates to developers and public beta testers, two weeks after seeding third betas and over a month after the release of iOS 13.2...
Apple today updated its Clips app designed for the iPhone and the iPad, introducing Animoji and Memoji support for the first time. With the Animoji and Memoji addition, video recordings can be made...
Earlier this week, security researcher Brian Krebs found that the new iPhone 11 Pro models access user location data even when all apps and system services on the iPhone are set to not request the...
Apple plans to release five new iPhone models in 2020, according to the latest prediction from analyst Ming-Chi Kuo.
In a research note with TF International Securities, obtained by MacRumors,...
Apple plans to launch a high-end iPhone without a Lightning connector in the second half of 2021, according to a new prediction from analyst Ming-Chi Kuo. The device will supposedly offer a...
In May 2018, Apple announced that it had helped facilitate a collaboration between two of the world's largest aluminum producers, Alcoa and Rio Tinto, on a new carbon-free aluminum smelting...
Nearly four months after rolling out in the United States, the Apple Card is now beginning to appear on credit reports.
Goldman Sachs has confirmed that it is working with credit bureau...
Apple has announced that it will be attending the 33rd Conference and Workshop on Neural Information Processing Systems (NeurIPS) in Vancouver, Canada from Sunday, December 8 through Saturday,...
