China’s Cyberspace Administration (CAC) has ruled that US memory-maker Micron is a threat to national security and ordered some local organizations to stop using the company’s products.

Beijing in April ordererd a national security assessment of Micron and its products, citing “security risks caused by hidden product problems” in some silicon Micron sold to Chinese customers, justifying an investigation of the company.

Late on Sunday, China time, the CAC announced Micron had failed its national security assessment.

“The review found that Micron's products have relatively serious potential network security issues, which pose a major security risk to my country's key information infrastructure supply chain and affect my country's national security,” the CAC’s announcement states after machine translsation. “For this reason, the Network Security Review Office has made a conclusion that the network security review should not be passed.

“According to the ‘Network Security Law’ and other laws and regulations, operators of critical information infrastructure in China should stop purchasing Micron products.”

The CAC did not detail the risks Micron’s products represent.

Indeed, the CAC’s notice only mentions a cessation to purchasing - whatever is wrong with Micron kit may represent a "major security risk" - but not so risky a rip and replace operation is felt necessary.

Semiconductor industry analyst Dylan Patel suggested the ban is performative.

“Pretty good way to punch back given it is something that scares the crap out of people, but in actuality has very little significance because memory is a commodity and supply chains will adjust in a couple quarters,” he wrote on Twitter.

Beijing has plenty to punch back against - recent prohibitions on export of US tech are specifically designed to harm China’s economy and government by restricting the flow of advanced semiconductors to the Middle Kingdom.

Beijing has also long objected to western governments’ bans on Chinese firms Huawei and ZTE selling to local telcos, citing national security issues. Those bans were implemented without technical details of why they were appropriate to, although those bans were accompanied by references to laws that require all Chinese businesses to share information with the nation’s government.

China recently reminded the world of allegations the USA’s security agencies happily exploit zero-day flaws in US-made tech products.

Patel’s other point - that China can find alternatives to Micron products - is also well made. Memory is not hard to find, and global production is increasing.

Memory is also a field in which Chinese firms are well advanced: local champion YMTC is rated as a strong competitor for the likes of Samsung, SK Hynix ... and Micron.

Beijing has therefore barred one supplier of a commodity it can easily access from elsewhere, and done so after finding a risk so mild it is happy for Micron products to remain in use.

A Micron spokesperson told The Register “We have received the CAC’s notice following its review of Micron products sold in China. We are evaluating the conclusion and assessing our next steps. We look forward to continuing to engage in discussions with Chinese authorities.” ®

https://www.theregister.com//2023/05/21/china_micron_ban/