On: 0day vulnerability in firmware for HiSilicon-based...

[kanox]

> If Xiongmai firmware runs on HiSilicon SoCs there must be some kind of connection.

Everybody can buy HiSilicon SoCs and run a backdoored linux distro on them, the only relationship required is "customer".

You can buy a hisilicon-based devboard running linux for 100$: https://www.96boards.org/product/hikey/

[yorwba → kanox]

> the only relationship required is "customer"

That's what I meant by "third party". Do you have an idea who that is in this case?