March 11, 2014

Checking in: An excerpt from "the book"

I have made cryptic reference in past posts to the as-yet-not-and-perhaps-never-to-be-published book I all too rarely revisit.  It stands at about 45,000 words at present, halfway to a novel, non-fiction mind you.

For the first time in a few months, I found myself reviewing/editing the draft this evening, and, recognizing that I've not posted to the blog in a while, I thought, why not post a chapter?  A teaser of sorts...

So, below, excerpted from (again) a perhaps-never-to-be-published book tentatively titled Huidu - Inside Huawei, is Chapter 11.

(NOTE: This is a personal blog.  Huawei is my employer.  The views expressed in this blog are mine, and mine alone.  This blog is not overseen or sanctioned or otherwise approved by my employer or anyone else).

Chapter 11 - What’s a 3Leaf?

If there is one thing Huawei has (hopefully) learned over the last five years, it is that companies with numbers in their names ought perhaps to be avoided when it comes to potential "acquisitions."  First 3Com, then 2Wire, then 3Leaf…

Flash back yet again to mid-summer 2010: Just as Motorola was extending its Lemko suit to Huawei, and as the Senator from Arizona was sharpening his poison pen, Huawei’s outside legal counsel took a call from someone within the Committee on Foreign Investment in the United States (CFIUS). 

CFIUS, mentioned earlier, is an inter-agency committee of the U.S. Government that reviews the national security implications of foreign investments in U.S. companies or operations. Chaired by the Secretary of the Treasury, CFIUS includes representatives from 16 U.S. departments and agencies, including the Defense, State and Commerce and Homeland Security Departments.  

Foreign companies proposing to acquire U.S. firms or U.S. firms expecting to be acquired by foreign companies are required to inform CFIUS in advance so that the Committee can conduct a review, if deemed necessary.

In the late Spring of 2010, a bankrupt California-based start-up approached the Huawei research and development team in Santa Clara offering a fire sale on some ASIC-based virtualization patents. 

Huawei already had a number of virtualization solutions in the tank but the offer was intriguing so Huawei’s California folk consulted California outside counsel who advised that before doing anything Huawei should seek Commerce Department advice on whether the technology was sensitive and thus export controlled.  

This was done, and Commerce ultimately communicated that the technology was not export controlled.

In the ensuing weeks, Huawei purchased the patents, hired some former 3Leaf employees and separately purchased some former 3Leaf servers and equipment that were being sold off by creditors. 

And then, in July - spurred (it is rumored)  by a DoD employee who was trawling LinkedIn for all things Huawei-related and in so doing stumbled on an individual’s updated profile referencing a change in employment - our DC outside counsel was contacted by CFIUS asking why Huawei had not filed for the Committee’s approval of the deal. 

From there, things quickly spiraled utterly out-of-control and in all sorts of irrational directions.

It is not CFIUS’s business to understand that large global companies might have eager, young, inexperienced folk in Silicon Valley who might engage in transactions without considering political or national security implications.  

But one might expect the Committee to have some basic understanding of how multinational ICT companies function.

Nevertheless, CFIUS seemed to be telegraphing the perception – which I heard from multiple folk in D.C. – that Huawei’s quiet "acquisition" (hardly) of 3Leaf was a blatant attempt to circumvent the review process, which was ludicrous. 

And then there was the matter of the technology itself and the highly debatable question of whether or not or how it could present a threat to U.S. national security in Huawei’s hands. 

No matter.  CFIUS claimed jurisdiction and Huawei had, indeed, screwed up, however inadvertently.

Parallel to the ongoing Sprint RFP, Huawei prepared for a formal CFIUS submission, which ultimately took place roughly at the same time that the Secretary of Commerce was calling Sprint’s CEO to torpedo any semblance of open and fair competition in the U.S. telecom infrastructure equipment market.  

The initial CFIUS 30 day review graduated into an additional 45 day investigation, during which time Huawei provided reams of data about the company, its operations, and countless other topics utterly unrelated to 3Leaf, responding to dozens and dozens of CFIUS interrogatories. 

As the investigation wound down in February, it was made clear to Huawei that CFIUS would recommend to the President that he endorse a formal finding that Huawei’s “acquisition” (sigh) of 3Leaf constituted some sort of a threat to U.S. national security. 

The normal course of action in such instances is for the “acquiring” (I refuse to dignify this mis-labeling, hence the perpetual quotation marks) company to back down from the deal.  In Huawei’s case, since the deal had already closed, this would mean unwinding the transaction. 

Huawei’s lawyers and other advisors all counseled and began preparing for the obvious. 

Meanwhile, within Huawei, there was an agonizing process of soul-searching underway. 

Rightfully, Huawei felt cheated by the process. 

Yes, the company had screwed up, but the reality was that there had never been any intent to circumvent any process nor was there any reason to believe that the 3Leaf technology presented some sort of threat to national security and, well, Huawei itself didn’t present any such threat, notwithstanding free-wheeling D.C.-based slandering to the contrary. 

Bottom line: From our perspective, Huawei was effectively being held hostage to the process, a process that was perceived, within the company (and by scarce few externally), to be driven by anti-China, anti-Huawei politics, and little else.

So, at the last minute, Huawei decided to, um, thumb its nose at CFIUS.

A comprehensive communications plan was put into place.  The company would proclaim its innocence, re-assert its commitment to openness and transparency, and call for a “real” investigation of the facts. 

This was another watershed moment for Huawei.  

Throughout the process Huawei had had limited interaction with media and other external stakeholders, sticking to very simple, deferential statements, being nothing other than cooperative with and respectful to CFIUS.  Now, Huawei was going to test its muscle and engage in the type of PR expected of a world-leading multinational.

Huawei’s lawyers and consultants – PR and GR – were utterly appalled.

The media ate it up.

Yet, for the most part, the resulting public dialogue didn’t favor Huawei. 

While there were some media reports that commented on the novelty of Huawei’s response, as perhaps an indication of innocence, for the most part, the conversation – in the media and in Washington – focused on what was depicted as Huawei’s utter naïveté.  By refusing to divest of 3Leaf, Huawei was effectively forcing the White House – within a 10-day window – to announce an almost-certain finding of threat to national security, a death knell for Huawei in the U.S.

The internal soul-searching continued.  The reaction was not what was intended.  The media had focused on the tactic rather than the substance.

So, we reversed ourselves.  

We announced that our intent in declining to divest had been to invite a more impartial investigation, and that we had not meant to stir up a media storm focused on our tactic instead of our message.  

We began the process of unraveling 3Leaf, as directed by CFIUS.  Ironically, our offer to donate the 3Leaf technology to the U.S. Government was not entertained – a seeming lack of interest in this terribly sensitive technology - and it found its way into the hands of a Southern U.S. university.

So, what was the 3Leaf review really all about? 

Some have said that Huawei inadvertently put the Committee in an impossible procedural situation.  When CFIUS reviews an acquisition, to the extent that it determines a potential threat to national security, often as not, it negotiates with the parties involved to craft mitigation agreements to address those concerns so that the transaction can go forward.  But Huawei had already sealed the deal, so how was CFIUS to mitigate after-the-fact? 

(There’s some truth to that, but it’s perhaps overly-gracious).

Others have said that CFIUS used Huawei’s screw-up to send a strong message to the company and others that ignoring the CFIUS process is done at great peril. 

(Again, there's some truth there, but was that really the motivation?)

Yet others have observed that the 3Leaf review was nothing more than the ongoing demonization of Huawei and all things Chinese.

(Sigh... Winner).

February 04, 2014

America’s Cyber-Contortionist (and Free Trade Champion? – Not)

Just a few days ago, cyber-security specialists and senior government representatives met in Germany at the 50th annual Munich Security Conference.  

Since 1963, the MSC has served as “an independent forum dedicated to promoting peaceful conflict resolution and international cooperation and dialogue in dealing with today’s and future security challenges.” (More at: https://www.securityconference.de/en/).

Needless to say, in recent years, the MSC has focused on security challenges in the realm of cyber.  This year’s sessions were no different.  One session in particular stood out for me: The January 31 Panel Discussion focused on: "Rebooting Trust? Freedom vs. Security in Cyberspace."

The President of Estonia made an opening statement, and then the CEO of Deutsche Telekom introduced the panelists, including the German Minister of the Interior, the EU Commissioner for Home Affairs, Microsoft’s VP of Security, Huawei’s Chief Security Officer (reminder: Huawei is my employer), and the Chairman of the U.S. House of Representatives Permanent Select Committee on Intelligence (HPSCI), Mike Rogers. 

The panel was moderated by the President of the EastWest Institute, an organization founded in 1980 which “seeks to make the world a safer place by addressing the seemingly intractable problems that threaten regional and global stability.” (More on EWI at http://www.ewi.info/).

Generally speaking, the panelists (almost all) acknowledged the shattered trust in the information communication technology industry (and select governments) in the wake of the Snowden revelations.  Likewise, the panelists (most) detailed possible steps towards restoring confidence.

One panelist, however, stuck out like a sore thumb (one cannot imagine the countless phrases I considered and rejected for that analogy): Chairman Mike.

Go figure.

Mike opened with an acknowledgment that there is “a trust issue,” but pondered aloud about why the group was really gathered: “Damaging classified information that was leaked?  Maybe so.”  But, Mike thinks not.  Indeed, Mike commented that he was “a little surprised” that people were talking about “the problems with the NSA.” 

The Chairman then transitioned into scare-mongering about Iran, North Korea, Russia, China, etc., oozed into an explanation that reports of U.S. spying on French phone calls were misrepresented, and, subsequently, segued to his key mis-direction of the day:  

“The most recent release of information…the United States engages in economic espionage…I have been on the oversight committee doing oversight for our 16 intelligence agencies…for the last ten years…It is against the law in the United States to use our intelligence services for industrial espionage…If they do it, they are going to jail. Period. End of story.” 

Now that’s only part one of the mis-direction, but let’s take a brief time-out to consider it.

Last September I posted on Mike’s utter failure to conduct the oversight with which he is charged (link), so I won’t belabor that point.  But, since he has raised laws and jail, let’s hold him to it: If future revelations show that such industrial espionage did take place, then Mike, by virtue of his position, is aware of and as such complicit to such “illegal” activity and he should be summarily incarcerated…

…But let’s get back to the Chairman’s key mis-direction, part two:

Per Mike: “Now wouldn’t you find it interesting that that information was released at a time when we’re trying to arrange a trade arrangement that I think benefits both Europe and the United States…  I do…”

This little nugget doesn’t get fully matured until the Q&A session, but, the gist: The Russians are managing Snowden in order to time his revelations to tank U.S.-EU Free Trade talks.

In the Q&A session, Mike hammers it home: “I think it’s a huge mistake to allow this issue…to step in the way of a trade agreement between Europe and the United States.  These are two very separate issues…but by tying them together I will guarantee you that you will see more disclosures like we saw last week that the Americans engage in economic espionage…” 

He went on: “You’re gonna see more of that because it breeds distrust – the Russians have a specific purpose for driving a wedge between us and our European allies.”

The Chairman is wrong.  

Not in terms of our seeing further revelations, but in terms of his interpretation of the “tie” between European privacy concerns and the U.S.-EU Free Trade talks.

Europeans have every right to consider privacy protections in the context of U.S.-EU Free Trade negotiations – the former might (albeit unlikely) serve as leverage towards achieving some sort of protections in the context of agreeing the latter, although not likely in the actual substance of any trade agreement.  That is a legitimate tie.  Mike’s suggestion that the Russians are somehow orchestrating the tie borders on absurd.

It gets worse.  Following his initial suggestion that the Russians are orchestrating revelations, and in advance of his Q&A session elaboration on this point, Mike goes on to propel himself headlong into a trap he has set for himself more than once in recent months: 

In defending the integrity and due process of U.S. espionage activities, the Chairman refers to “an oversight mechanism that is not seen anywhere else in the world.  Our judicial branch, our…legislative branch, and our executive branch have to go through an approval process for these activities… that is an important distinction and we argue that is our transparency.”

Sigh. 

Really?  That reference, and the Chairman’s subsequent Q&A session reference to the FISA court and 4th Amendment protections, are both to processes that only apply to American citizens, and, seemingly, only within U.S. borders, and, from what we have had revealed to us by Mr. Snowden, perhaps not at all. 

One thing is certain though: Europeans and other non-Americans do not benefit from any such oversight or Constitutional prophylaxis (as was pointed out by one clued-in questioner).

C’mon Mike. C’mon America.  Is this the best we have, is this the best we can do?  

(Link to video of the full 1.5 hour panel discussion)