Giving away IBM'ers knowledge, experience, and hard work to the Russians!? all in a desperate effort to make a few more $$$$. Was aware that IBM was doing this with the Chinese (also beyond outrageous), but the Russians too? The implications are staggering. IBM's integrity is less than zero. Ginni, what are you doing?!
"Western technology companies, including Cisco, IBM and SAP, are acceding to demands by Moscow for access to closely guarded product security secrets,
.
.
.
The requests, which have increased since 2014, are ostensibly done to ensure foreign spy agencies have not hidden any 'backdoors' that would allow them to burrow into Russian systems.
But those inspections also provide the Russians an opportunity to find vulnerabilities in the products' source code - instructions that control the basic operations of computer equipment - current and former U.S. officials and security experts said.
.
.
.
U.S. officials say they have warned firms about the risks of allowing the Russians to review their products' source code, because of fears it could be used in cyber attacks. But they say they have no legal authority to stop the practice unless the technology has restricted military applications or violates U.S. sanctions.
From their side, companies say they are under pressure to acquiesce to the demands from Russian regulators or risk being shut out of a lucrative market. The companies say they only allow Russia to review their source code in secure facilities that prevent code from being copied or altered. (Graphic on source code review process: tmsnrt.rs/2sZudWT)
.
.
.
Roszel Thomsen, an attorney who helps U.S. tech companies navigate Russia import laws, said the firms must balance the dangers of revealing source code to Russian security services against possible lost sales.
'Some companies do refuse,' he said. 'Others look at the potential market and take the risk.'
.
.
.
An IBM spokesman confirmed the company allows Russia to review its source code in secure, company-controlled facilities 'where strict procedures are followed.'
FSTEC certification records showed the Information Security Center, an independent testing company based outside Moscow, has reviewed IBM’s source code on behalf of the agency. The company was founded more than 20 years ago under the auspices of an institute within Russia’s Ministry of Defense, according to its website. The company did not respond to requests for comment."
http://www.reuters.com/article/us-usa-russia-tech-idUSKBN19E0XB