Connect with us

Cars

Huawei security: ‘Significant’ engineering flaws pose risk to networks, says UK

Published

on

Huawei warns bans will increase prices and put US behind in 5G race
Huawei says that restricting competition will increase prices and delay the implementation of 5G, putting the US behind rival countries.

The board that oversees the security of Huawei equipment used in UK telecoms networks has said that technical issues with the Chinese company’s engineering processes have lead to new risks.

Special feature


How 5G Will Transform Business

5G will be popularized via telecom carriers and the marketing of wire-cutting services, but the biggest impact and returns will come from connecting the Internet of things, edge computing and analytics infrastructure with minimal latency.

Read More

“Further significant technical issues have been identified in Huawei’s engineering processes, leading to new risks in the UK telecommunications networks,” said the annual report from the Huawei Cyber Security Evaluation Centre (HCSEC) Oversight Board. The board oversees the unit that evaluates the security of the Chinese company’s products used in UK telecoms network.

The report warned: “Overall, the Oversight Board can only provide limited assurance that all risks to UK national security from Huawei’s involvement in the UK’s critical networks can be sufficiently mitigated long-term.”

The report also said that “no material progress” has been made by Huawei in the remediation of the issues reported last year. As a result, it said this made it inappropriate to change the level of assurance from last year “or to make any comment on potential future levels of assurance”.

In 2018, HCSEC said its work had continued to identify “concerning issues” in Huawei’s approach to software development, bringing significantly increased risk to UK operators, which required ongoing management and mitigation.

SEE: IT pro’s guide to the evolution and impact of 5G technology (free PDF)

The report said: “The Oversight Board continues to be able to provide only limited assurance that the long-term security risks can be managed in the Huawei equipment currently deployed in the UK,” and warned that it would be difficult to appropriately risk-manage future products in the context of UK deployments, until the “underlying defects in Huawei’s software engineering and cyber-security processes are remediated”.

Huawei acknowleged in a statement that the report details concerns about Huawei’s software engineering capabilities. “We understand these concerns and take them very seriously,” it said and added that the company was spending $2bn to improve its software-engineering capabilities.

However, the HCSEC board report noted: “At present, the Oversight Board has not yet seen anything to give it confidence in Huawei’s capacity to successfully complete the elements of its transformation programme that it has proposed as a means of addressing these underlying defects. The Board will require sustained evidence of better software engineering and cyber security quality.”

A spokesman for the UK’s National Cyber Security Centre said “We can and have been managing the security risk and have set out the improvements we expect the company to make. We will not compromise on the progress we need to see: sustained evidence of better software engineering and cybersecurity, verified by HCSEC. This report illustrates above all the need for improved cybersecurity in the UK telco networks which is being addressed more widely by the Digital Secretary’s review.”

SEE: Cybersecurity in an IoT and mobile world (ZDNet special report) | Download the report as a PDF (TechRepublic)

In the background is the ongoing row about about Huawei and 5G, the next generation of mobile technology.

The US banned the Chinese networking giant from government contracts back in 2014 has continued to raise concerns about the use of equipment from Huawei in 5G networks, worried that it could create a backdoor to be used by the Chinese state for spying.

While the company has strenuously denied that this is possible (and pointed to a history of spying by the US), the US has been lobbying other states to dump Huawei kit from forthcoming 5G networks, with mixed results.

The UK is currently carrying out a review of 5G security but the country’s tech security agency has already said that it can manage the risks of using Huawei equipment, and that having a broad set of suppliers to be able to spread risk is also essential to security. 

Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Cars

Rivian EV configurator opens to all – R1S and R1T Launch Edition sold out

Published

on

Rivian has thrown open access to its online configurator, meaning you no longer need to have a reservation for the R1T or R1S in order to customize your perfect electric truck. Set to begin manufacturing and deliveries next year, the two EVs share the same platform – the R1T having a pickup body, while the R1S is a full-size SUV – though are likely to appeal to different markets.

We saw the first results of the configurator last week, when Rivian granted access to those who had paid the $1,000 deposit to stake a place in line. In the process it confirmed some of the options that buyers will be able to pick from, including multiple paint finishes, different interior trims, and some of the more unusual accessories.

The R1T, for example, can be equipped with a slide-out mini kitchen for camping. That has a sink – with a water tank and pump that’s powered by the trunk’s own battery – along with an induction stove for cooking. Rivian even has a custom set of prep and cookware from Snow Peak to go with it.

Arguably more useful every day, meanwhile, is the Max Pack battery. Offered only on the R1T pickup, it’s not inexpensive at $10,000, but it boosts the estimated range from the standard 300+ miles to 400+ miles. Final EPA-certified range is unlikely to be confirmed until next year, closer to the R1T’s summer release.

While it’s nice to be able to tinker with the configurator, there’s also some bad news if you were hoping for a R1S or R1T Launch Edition. Reservations for that special trim are now full, Rivian has confirmed, closing the order books on the very first examples of the two EVs. Priced at $75,000 for the pickup, and $77,500 for the SUV, the Launch Edition is prety much a maxed-out example of each, and offers exclusive options like Launch Green paintwork.

It means that, if you didn’t get your order in already, you’ve some wait ahead of you. The two mainstream trims for both EVs – the entry-level Explore and the better-equipped Adventure – are both available to order, but deliveries aren’t expected to begin until January 2022.

Before then, we may have heard more about some of Rivian’s upcoming competition. Ford’s all-electric F-150 is due in the next couple of years, the first time the bestselling pickup will be offered in a fully-electric form. Chevrolet, meanwhile, has an electric pickup in the works too, GM confirmed last week, tapping the automaker’s new Ultium platform.

Continue Reading

Cars

NHTSA: GM must recall 6m pickups and SUVs over Takata airbag danger

Published

on

GM will be forced to recall almost 6 million vehicles to repair potentially dangerous Takata airbags, after losing a years-long battle with the NHTSA to avoid the hugely expensive repairs. The automaker had argued that the recall – which covers some of its most popular SUVs and pickups – was unnecessary, given it had undertaken third-party tests to show that the airbag inflaters were not prone to dangerous or abnormal explosions.

The Takata airbag saga has become the most significant vehicle recall incident in the US, and forced the most manufacturer recalls. Commonly used across multiple brands, the inflators are designed to trigger in a crash and rapidly inflate the airbags themselves to support vehicle occupants.

However the chemicals inside the flawed inflators can degrade over time, particularly in conditions of high heat or high humidity. That in turn can cause an increase in force beyond the intended specifications, shattering the metal canister and releasing a spray of dangerous shrapnel as a result. There have been 27 deaths blamed on the inflators worldwide, 18 of which have been in the US, and hundreds of injuries.

GM’s argument was that the vehicles – based on the GMT900 platform from brands like Chevrolet, Cadillac, and GMC, and including the Avalanche, Escalade, Escalade ESV, Escalade EXT, Sierra 1500, Sierra 2500/3500, Silverado 1500, Silverado 2500/3500, Suburban, Tahoe, Yukon, and Yukon XL – actually used different inflator designs, integrated in different ways. It undertook third-party testing by Northrop Grumman’s OATK, among others, in the hope of demonstrating to the NHTSA that, unlike with other manufacturers, a full recall wasn’t necessary.

Now, after a four year back-and-forth between automaker and agency, the National Highway Traffic Safety Administration has denied GM’s request. “After reviewing GM’s consolidated petition, supporting materials, and public comments,” the agency said today, “NHTSA has concluded that GM has not met its burden of establishing that the defect is inconsequential to motor vehicle safety, and denies the petition.”

The decision will impact approximately 5.9 million vehicles, from model years 2007 through to 2014. Estimates peg the total cost to GM at $1.2 billion.

Despite GM’s validation of its changes to the Takata design and implementation, the NHTSA deemed the risk still too high. “Given the severity of the consequence of propellant degradation in these air bag inflators – the rupture of the inflator and metal shrapnel sprayed at vehicle occupants – a finding of inconsequentiality to safety demands extraordinarily robust and persuasive evidence,” Jeffrey M. Giuseppe, Associate Administrator for Enforcement at the agency, wrote. “What GM presents here, while valuable and informative in certain respects, suffers from far too many shortcomings, both when the evidence is assessed individually and in its totality, to demonstrate that the defect in GMT900 inflators is not important or can otherwise be ignored as a matter of safety.”

The automaker now has 30 days to submit a proposed schedule of how it plans to notify owners of the affected vehicles, and how it will launch and operate the recall process.

Continue Reading

Cars

2021 Ford Mustang Mach-E official EPA range confirmed

Published

on

Ford has final EPA range figures for its upcoming 2021 Mustang Mach-E, and there’s good news for those waiting for the imminent all-electric crossover. While the company had estimated range numbers for the new EV back when it unveiled it in late 2019, they’ve only been certified by the Environmental Protection Agency today. Turns out, Ford’s predictions were almost exactly on the dot.

The automaker had been targeting 230 miles for the Mustang Mach-E standard range RWD configuration, and 300 miles for the extended range RWD version. The EPA says that’s the case, as is it the 270 mile rating of the Mustang Mach-E extended range eAWD car.

The Mustang Mach-E standard range eAWD actually did ever so slightly better in its official rating. Ford had promised 210 miles; the EPA ranks it at 211 miles. Final testing for the Mustang Mach-E California Route 1 version of the electric crossover is still underway, with that configuration estimated at 300 miles.

It’s a note of good news in the final few weeks before Mustang Mach-E cars actually arrive with preorder customers. Ford says that customer deliveries should start in December 2020, though high-end versions of the EV – like the Mustang Mach-E GT – aren’t expected until 2021.

Though the range figures aren’t exactly the largest in the category, Ford’s argument has been that there’s more to driver satisfaction than just a big number. For a start, there’s ease of recharging. With up to 150 kW charging support (or 110 kW on the entry-level Select trim), assuming you can find a DC fast charger you should be able to add 52-61 miles of range in 10 minutes, depending on drivetrain configuration. Using the FordPass Charging Network, effectively an umbrella access several different third-party networks like Electrify America, actually finding those stations should be more straightforward too.

The Mustang Mach-E will be one of the few electric vehicles in the US to support Plug&Charge, too. That means, at a compatible charger such as those offered by Electrify America, drivers won’t even need to scan a card to begin the charging session. Instead, that digital handshaking – including authenticating the driver’s account – will all be done between the EV and the charger.

Ford’s other push has been around a more accurate range estimate for the dashboard. Range anxiety, after all, isn’t just about total miles of driving left, but uncertainty about whether the number displayed is actually accurate. Ford plans to not only use data from the individual EV itself, but crowdsource better estimates between cars.

The first iteration of Ford Intelligent Range will take into account things like past driver behavior and forecasted weather as it calculates how much driving you’ll be able to do before a recharge. Later, though, Ford plans to light up range data sharing, which will use the EV’s embedded modem to give anonymized feedback of how battery use was affected by things like speed, terrain, and climate conditions. That way, if your journey is going to take you on a new route where other Mustang Mach-E drivers have used more energy than might be expected for one reason or another, the car will proactively take that into account.

Continue Reading

Trending