Guan Cha Zhe Wang·2025-08-14 03:08Core Viewpoint - The article discusses the security risks associated with NVIDIA's H20 chip, particularly the potential for backdoor vulnerabilities, and highlights the broader implications for the semiconductor industry regarding chip security and trustworthiness [1][13]. Group 1: Security Concerns - The National Internet Information Office of China has formally questioned NVIDIA regarding the security risks of its H20 chip, which has been reported to have potential backdoor vulnerabilities [1]. - NVIDIA's Chief Security Officer, David Leber, claimed that all of NVIDIA's GPU chips do not contain any form of backdoor or monitoring software, although this statement raises skepticism about its credibility [2][13]. - The article categorizes backdoors into three types: malicious self-contained, post-hoc cracking, and covert implantation, emphasizing that all chips, including those from major Western companies, are susceptible to such vulnerabilities [3][4]. Group 2: Historical Context of Vulnerabilities - Major Western IC design companies, including Intel, AMD, and ARM, have been reported to have serious vulnerabilities in their chips, with Intel's Management Engine being a notable example of a high-risk backdoor [5][6]. - Recent vulnerabilities in Intel CPUs, such as the Downfall vulnerability, have led to legal actions against the company, highlighting ongoing security issues and the potential for data breaches [6]. - ARM processors have also been found to have critical design flaws that cannot be patched through software updates, necessitating hardware upgrades for resolution [7]. Group 3: Implications for Chip Purchases - The article argues that chips purchased from external sources are inherently less secure than those developed in-house, as they may contain undisclosed vulnerabilities and backdoors [9][12]. - The reliance on foreign technology can lead to a lack of transparency and control over security updates, as seen in the case of Intel's long-standing vulnerabilities [12]. - The H20 chip, being a China-specific version, is suggested to carry greater security risks compared to globally available models, as it is only subject to scrutiny from local researchers [13].