Apple cut ties with server supplier Super Micro Computer in 2016 after unearthing a potential security vulnerability in at least one of its data center servers, reports The Information.
The vulnerability in the server, which was part of Apple's technical infrastructure powering its web-based services, was discovered in the early months of 2016. According to Super Micro senior vice president of technology Tau Leng, Apple ended its business relationship with Super Micro Computer shortly after uncovering the security issue.
Leng's account of the incident makes it sound like Apple received bad firmware from an FTP site hosted by Super Micro that may have been infiltrated, which may have compromised the server.
According to Leng, when Apple was asked to provide the version number of the firmware it had downloaded after experiencing issues, Apple provided an invalid number. After that, Apple refused to provide more information to Super Micro.
"Apple is deeply committed to protecting the privacy and security of our customers and the data we store," the spokesperson told The Information. "We are constantly monitoring for any attacks on our systems, working closely with vendors and regularly checking equipment for malware."
It's not quite clear what caused the vulnerability that led to the end of the agreement between Super Micro and Apple, but Apple has since moved on to other server suppliers, increasing orders from ZT and purchasing servers from Inspur.
The vulnerability in the server, which was part of Apple's technical infrastructure powering its web-based services, was discovered in the early months of 2016. According to Super Micro senior vice president of technology Tau Leng, Apple ended its business relationship with Super Micro Computer shortly after uncovering the security issue.
Leng's account of the incident makes it sound like Apple received bad firmware from an FTP site hosted by Super Micro that may have been infiltrated, which may have compromised the server.
According to Leng, when Apple was asked to provide the version number of the firmware it had downloaded after experiencing issues, Apple provided an invalid number. After that, Apple refused to provide more information to Super Micro.
Mr. Leng said Super Micro regularly provides firmware updates that data center customers like Apple can download from a private "FTP" site, hosted by Super Micro. He said the firmware updates come from outside chip manufacturers--in this case, a networking chip maker that he declined to name.Sources who spoke to The Information said servers that handled Siri requests and App Store search functionality may have been compromised, but an Apple spokesperson said Apple did not receive bad firmware nor was any customer data stolen.
"Apple is deeply committed to protecting the privacy and security of our customers and the data we store," the spokesperson told The Information. "We are constantly monitoring for any attacks on our systems, working closely with vendors and regularly checking equipment for malware."
It's not quite clear what caused the vulnerability that led to the end of the agreement between Super Micro and Apple, but Apple has since moved on to other server suppliers, increasing orders from ZT and purchasing servers from Inspur.
30 comments
For the first time since Bloomberg published a highly controversial story suggesting Chinese spies planted microchips in Supermicro server motherboards Apple used in its iCloud facilities, Apple CEO...
Apple's design chief Jony Ive sat down for an interview over lunch with Financial Times reporter Nicholas Foulkes earlier this month, discussing a wide range of topics, including the Apple Watch,...
iPhone XR pre-orders kicked off at 12:01 a.m. Pacific Time, and just a half hour after orders went live, some colors started selling out and became unavailable for launch day delivery in the United...
Apple is now accepting pre-orders for the new iPhone XR through its online storefront on the web and through its Apple Store app on iOS devices.
The 6.1-inch iPhone XR is the third iPhone in the...
Apple has taken its online storefront down to prepare for pre-orders for the 6.1-inch iPhone XR, the third iPhone in the 2018 iPhone lineup. Apple will begin accepting orders for the iPhone XR at...
Apple's upcoming iPad Pro models will feature a USB-C port instead of a traditional Lightning port, according to information gathered from accessory makers at the Global Source Mobile Electronics...
Pre-orders for the iPhone XR will kick off on Friday, October 19 at 12:01 a.m. Pacific Time, allowing customers to purchase the third flagship iPhone in the 2018 iPhone lineup.
Apple is planning...
Apple in iOS 12 introduced a new Siri Shortcuts feature that's designed to let users create multi-step automations using first and third-party apps.
Since iOS 12's release, app...
