Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Feds Seize $78M of Bogus Chinese Cisco Gear

Posted by kdawson on Fri Feb 29, 2008 01:17 PM
from the perfect-for-man-in-the-middle dept.
Ian Lamont writes "The IDG News Service is reporting that US and Canadian authorities have made more than 400 seizures of counterfeit Cisco hardware from China in an ongoing investigation that started in 2005. The most recent seizure was last Friday in Toronto, where the RCMP charged two people and a company with distributing large quantities of counterfeit network components to companies in the US through the Internet. The RCMP seized approximately 1,600 pieces of counterfeit network hardware with an estimated value of $2 million, says the report. According to another source, bogus Cisco gear from China typically includes network modules, WAN interface cards, gigabit interface converters, and less expensive routers."

Related Stories

[+] Hardware: FBI Concerned About Implications of Counterfeit Cisco Gear 273 comments
SpicyBrownMustard writes "An FBI PowerPoint presentation provides details about a criminal investigation into counterfeit CISCO hardware originating from China, and sold by Gold/Silver partners to numerous US government, military, and intelligence agencies. The concern of the article's author and the FBI is that the counterfeit equipment may be state-sponsored to aid in accessing otherwise secure systems (slides 46+47). Says the article author: 'The threat is real. Compromised hardware of potentially hostile foreign origin sits within secure networks of the US government, military, and intelligence services. And as you now see, the FBI has been concerned about it.'" We've mentioned the seizure of some of this equipment before, but this presentation adds quite a bit of detail, and highlights the FBI's concern of Chinese government involvement.
[+] IT: FBI Says Military Had Counterfeit Cisco Routers 61 comments
There are new developments in the case of the counterfeit Cisco routers, which we have been discussing for some time. The NYTimes updates the story after an FBI PowerPoint presentation made its way onto the Web. It seems that experts at Cisco have examined some of the counterfeit routers in detail and proclaimed that they contain no back doors. Others don't believe we can be so sure. "Last month, [DARPA] began distributing chips with hidden Trojan horse circuitry to military contractors who are participating in the agency's Trusted Integrated Circuits program. The goal is to test forensic techniques for finding hidden electronic trap doors, which can be maddeningly elusive... The threat was demonstrated in April when a team of computer scientists from the University of Illinois presented a paper at a technical conference in San Francisco detailing how they had modified a Sun Microsystems SPARC microprocessor... The researchers were able to create a stealth system that would allow them to automatically log in to a computer and steal passwords."
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More | Login
Loading... please wait.
  • by seanadams.com (463190) * on Friday February 29, @01:19PM (#22601846) Homepage
    I rather doubt that much of this equipment is truly "counterfeit", at least in the usual sense of a cloned design such as the iClone. Rather, what happens is that the contract manufacturer will buy extra parts and make more units than Cisco actually ordered, and then those units go out the back door after hours. They might have illegitimate serial numbers or might be missing the authenticity stickers on some internal chips, but they are otherwise identical.

    It's a very difficult problem to manage unless you have trusted people overseeing the entire manufacturing operation. The amount of gross margin in Cisco gear makes this activity extremely profitable.
    • by Brian Gordon (987471) on Friday February 29, @01:22PM (#22601886) Homepage
      Yeah that confused me too.. it's apparently perfectly good equipment, but they're not licensed to use the Cisco name. And of course they stole the design (I don't mean in an IP sense, I mean that I suspect that there was actual theivery involved in obtaining it).
      • by 0100010001010011 (652467) on Friday February 29, @01:29PM (#22602002)
        Or it could be a '3rd shift' operation. Same factory, same 'workers' but what they do after the 1st and 2nd "authentic" shifts are finished is swap out all 'good' electronics for cheap replacements.

        Say Cisco specified a 1 ohm SMT resistor that has a .09% failure rate and costs $1/per (yes, it's just an example). When the '3rd shift' comes on board, they swap those out for 1 ohm resistors with a 5% failure rate but that only cost $.50/per. So it may even be the same assembly line but the components are much cheaper and not to Cisco specification, which is why Cisco doesn't stamp them as 'authorized'. And also why they may fail down the line long after the seller has disappeared.
    • by Scareduck (177470) on Friday February 29, @01:31PM (#22602058) Homepage Journal
      The attractiveness of low cost manufacturing in China seems to be inevitably offset by some other negative, whether it be the creation of instant competitors once the contract manufacturer figures out how to reach their customers' customers, or ersatz ingredients (melamine in dog food last year for instance). Remind me again, why is free trade with China such a great deal for the developed world?
        • by emilper (826945) on Friday February 29, @03:14PM (#22603468)
          Hate to blow a hole in your argument, but it's about labour availability, not about labour price. I am sure there might be 100000 competent and unemployed developers and 500000 unemployed blue collar workers in US, but if Cisco would want to build a factory in [insert random US location here] he won't find the 2000 employees needed to get things started.

          The cause of offshoring/outsourcing is not labour cost, but labour mobility: the price of labour in electronics is very low, around 5%, but you cannot do without people. Giving better salaries is not a solution. It was tried during the IT bubble but it did not work: the companies got more expensive workers but not in greater numbers, since all competed over the same number of workers, and due to the limitations on immigration the game was a zero sum game. This problem is much more grave in EU than in US (imagine needing a Green Card in order to leave California and find work in Florida) so factories are moved not only to China or Eastern Europe, but even to US.

          Of course in the long run it gets you into trouble, but in order to have a "long run", the companies that moved their operations in other countries attempted to have a "short run" first: they would be already dead without the ability to expand.

    • by jmorris42 (1458) * <jmorrisNO@SPAMbeau.org> on Friday February 29, @01:49PM (#22602328) Homepage
      > The amount of gross margin in Cisco gear makes this activity extremely profitable.

      It isn't just that. In any other tech industry you would see 'legit' clones, i.e. ones that were sold AS clones, with someone else's name on it. But you can't do that with Cisco gear. If you put any non-cisco stuff in one it voids the service contract. No service contract no bug fixes. Unpatched gear is an accident waiting to happen.

      Personally I'm happy as hell. We don't have much Cisco gear and I didn't buy it (donated) but it has been enough of a PITA that I absolutely HATE Cisco. When I had to scrounge up some extra ports I certainly hope I managed to get the knockoffs and avoid giving those rat bastards one cent more than absoluteley required. Had to put the unit back under a service contract before I could get a IOS with device drivers. Tell me, who still charges for (basically) device drivers and security fixes?

      Adn their hardware is so pathetic. Open one up sometimes and check out just how little is inside one. Ponder just how little they are paying those Chinese contract manufacturers for the hardware they then jackup to such stupid prices. And don't tell me it is the software either, they used to just be running BSD with the serial numbers filed off and with the volume they do they can afford some software devels. As for support it ain't in the price of the product, they sell that as a extra and for all intents and purposes only to those who have also paid em a crapload to get their people certified.

      By being able to milk hardware, software and support they probably make Gates & Balmer jealous.
    • Re: (Score:3, Insightful)

      So how is that not counterfeit? By definition counterfeiting is an imitation that is made with the intent to deceptively represent its content or origins. Isn't that precisely what happened here?
    • by jellomizer (103300) * on Friday February 29, @01:54PM (#22602400) Homepage
      Sorney, MagnetBox? I know a Genuine Peniphonics when I see one.
      • by fyoder (857358) on Friday February 29, @01:27PM (#22601954) Homepage Journal
        According to the article, could be the same stuff:

        What has happened is that many of the companies that do the outsourcing for Cisco now run an extra shift and sell the now counterfeit hardware out the back door. After all, they have the manufacturing capability, the expertise and the full blessing of Cisco.
        It's not the same as 2nds, or cheap knock offs with fake labels. It would suck if you were getting duped, esp. if paying full Cisco prices, but for a very steep discount there are probably customers who would knowingly buy these even though it means forgoing warranty.
  • So, um... (Score:4, Interesting)

    by scubamage (727538) on Friday February 29, @01:37PM (#22602144)
    when are they auctioning this stuff off..? I'd love to get me some pods together on the cheap.
          • Re:So, um... (Score:4, Insightful)

            by scubamage (727538) on Friday February 29, @03:08PM (#22603356)
            No, its a waste, plain and simple. They don't tarnish Cisco's name because they're known to be counterfiet. If someone turned around and sold them, sure, that'd be bad. However I personally see no issue of using perfectly good hardware to train prospective students. The hardware is counterfiet, the IOS software on it would not be. It's a waste because it could be used. Throwing away something that can be used is the very definition of waste.
  • by Doc Ruby (173196) on Friday February 29, @01:38PM (#22602154) Homepage Journal
    Other than the brand name on the boxes being fraudulent, what is the difference between this HW and the real Cisco products? If they're even close in quality, then catching these fraudsters will move Chinese manufacturers to market them under their own brands. Then they'll just be violating patents, not trademarks (and copyrights in the manuals). But then they'll be pressured to actually create their own better ways of doing it. Which is actual progress, even if not quite as profitable as the ripoff.

    If Chinese counterfeits can get marketed under their own brands, we'll actually have some price competition. And maybe when some American companies get killed by their OEM factories like Japanese manufacturers did to cameras and consumer electronics in the 1970s-80s, we'll see some more caution in shipping all their tech expertise overseas to create their competitors. They might be more likely to consider the less immediate costs of outsourcing from a country where the law (usually) protects things like intellectual property, contracts, labor and the environment.

    Or maybe every generation is doomed to watch America squander its hard-won tech leads for the sake of a few years of cheap manufacturing that then eats the parent for lunch.
  • yeah, right. (Score:5, Insightful)

    by peccary (161168) on Friday February 29, @01:47PM (#22602286)

    One of the operation's goals is to protect the public from network infrastructure failures associated with the counterfeits, the DOJ said.
    As opposed to network infrastructure failure caused by ships dragging their anchors through the Mediterranean. Or Verizon techs installing crap on their toplevel DNS servers.
    No, I think the goal is to protect the corporation. Not that I completely object to these actions, just that it's getting pretty tiresome to see the police always trotting out the public safety angle.
  • by ErichTheRed (39327) on Friday February 29, @01:53PM (#22602386)
    It sounds like most of these Chinese counterfeiting cases have been manufacturers making exact copies of the items they were contracted to make, then selling them without the warranty, name, etc. for similar profit margins.

    How much of this is the manufacturer just building more than what they were supposed to, and how much of it is actually theft of intellectual property? I remember reading that the Soviet Union would go the IP theft route...obtain a computer from another country and totally reverse-engineer it so they could use a similar design. My bet is that these manufacturers just want to make more money and not necessarily use the same quality parts. (If you're building 1000 routers, the difference between a $10 transciever and a $100 one is big, for example. How worried should we be that, say, the manufacturer has reverse-engineered IOS and put it into their own gear?

    Either way, if my business was based on building clever hardware, I'd be worried about outsourcing the manufacturing to anyone, let alone a different country. However, there is absolutely no way to stop people from demanding cheaper goods. It's at the point where people are haggling over a few cents -- we're just addicted to low prices.

    I'm generally not one of these protectionist, "keep America working" types, but I can't see a good way out of this situation. All the scenarios are bad:
    - Go to war with China or cut off trade completely in some other fashion --> Huge price increases and emergency ramp-up of domestic production --> possibly a bad recession.
    - Continue as-is --> More poisoned or cloned merchandise and IP theft --> eventually a very bad situation for us.
    - Try to get China to comply with environmental and IP laws --> ???
  • by Gadgit (1067790) on Friday February 29, @01:54PM (#22602396)
    Had actually received some of this gear unknowingly and while some of it does work...there were a few cases where that when a switch that would lose power the GBIC would not come back up in a 'no shut' state. Instead you had to console into the switch and issue a 'shut > no shut' on the interdace to get the port to come back. So while the technically do kind of work, it is not something I would recommend deploying in a mission critical switch/router.
    • Re: (Score:3, Interesting)

      I have a suspicion that a lot of this third party resale equipment is the stuff that failed QA the first time around, but only barely. There's probably some overproduction in there as well, but it does make buying one of these discount routers a risky pro
    • Re: (Score:3, Insightful)

      It could have something to do with all of the campaign contributions that come from large organizations manufacturing goods and services. Of course it could be that the general populous likes products that are dangerous, poisonous, fake, bogus and fraudul
    • by bleh-of-the-huns (17740) on Friday February 29, @02:10PM (#22602618)
      This is currently a valid issue, not a "what if" scenario. Currently, atleast in the gov entities I work in, the gov is no longer purchasing IBM desktop and Laptops, well the Lenovo branded ones anyways. A while back, in some of the meetings I have attended, there was a particular briefing which discussed a particular component in a device, that apparently had no function. This was from a well known brand that manufactures it's products Taiwan.