UK perhaps not so secure...
As the UK CSEC Oversight Board has said it can provide only "limited assurance that all risks to UK national security from Huawei’s involvement in the UK’s critical networks have been sufficiently mitigated". Thye have raised concerns over 3 key areas:
1. Source Code: “the extraction by Huawei HQ of a subset of source code from configuration managed repositories”
2. Lack of repeatable build process: “underlying engineering and build process was not repeatable”
3. Recurrent 3rd party component management and support problem: “security critical 3rd party software used in a variety of products was not subject to sufficient control”
Oops...
Biting the hand that feeds IT
