HackerTube.dev

BlueHat IL 2019 - Andrew "bunnie" Huang - Supply Chain Security: "If I were a Nation State...”

Microsoft Israel R&D Center · 20.8K views · 2019-02-14 · 45:38

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report. He explains how undocumented components could be hidden on boards and how hard they are to spot.

On Hacker News

HN people point to it as the sober, technically grounded picture of hardware supply chain security, and an eye-opening one.

Recommended by 6 HN people across 6 months · HN mentions 2019–2024

Topics

Security & hackingElectronics & circuit design
Search by tags
bunnie huangsupply chainhardware tamperingbloomberg supermicrosecurity

What people said

crimsontech · 2023-05 · Strong recommendation

It would really need to go further than that. Supply chain attacks at the hardware level are very difficult to spot, especially at scale. This is an eye opening talk in the subject: [VIDEO]

Read the original HN comment ↗
andutu · 2024-03 · Recommendation

Somewhat related, but there is a great talk by Andrew "bunnie" Huang on hardware supply chain security: [VIDEO]

Read the original HN comment ↗
bskrobisz · 2021-09 · Recommendation

>when one would simply need a microscope to find them in devices This isn't a true statement, if strictly read--there are many techniques to hide undocumented components on boards, and covering all of them requires more than just a pass under a SEM. There's a fun talk that goes over a lot of them here: [VIDEO]

Read the original HN comment ↗

Sources

Video by Microsoft Israel R&D Center, played through YouTube.

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks
  • SaaS & AI candidates: Topic keywords do not match
  • Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources