This is a most excellent place for technology news and articles.
So you can bypass the fingerprint physically? Is that right?
How did they think they could get away with that
Well.... this is just another reason to never activate biometrics. Police typically need a warrent for passwords, not for biometrics.
biometrics were never safe to begin with.
you cant be forced to give a password.
but they can physically force your finger onto a reader. physically restrain you to do a face scan, and forcibly hold you down for an eye scan. They are not safe, or secure. Biometrics are less secure than setting your password to 1234 and carving "password is 1234" into your keyboard.
Even with passwords they just attach some Israeli hacker machine and they'll break in
No that only works in some instances. A correctly configured not iOS computer should be resistant to that.
Until they find a CVE they can use sure
Plenty of those in motherboards, TPMs, CPUs, software, OS, etc.
How are they not getting sued for false advertising? In Europe at least.
All of these discoveries seem like catnip for lawyers everywhere. Like, how are these companies not going to lose absolutely billions just on lawsuits now?
Because it will only cost them "billions" if someone can come forward to the court and claim "billions" in damages. Good luck with that, when your product is a USB drive with flashy labeling.
Will you be the first to take them to court, to recover the damages from you being deceived for this dopey drive? The judge may actually award you double damages and order them to pay you $200!!!!
catnip for lawyers everywhere
lololololololololololol!!!!!!
In the EU most (all?) members have a state-run consumer watchdog organization that can and does escalate measures depending on how big the problem is and how many people are reporting it.
But something like this wouldn't typically make it to the watchdog because there's also consumer law in place to allow people to return faulty/unfit devices. So bad products like these typically get absorbed by merchants and importers, who would find themselves unable to shift that particular product and turn it back to Lenovo. Eventually Lenovo can't find anybody willing to buy the product and have to take the hi[n]t.
The beauty of this system is that it turns the problem back to the commercial side. It takes the regular people (buyers) out of the problem and makes merchants/importers/manufacturers figure it out among themselves. The idea being that "market forces" are real and they work but they shouldn't be inflicted on unsuspecting customers.
I lost all my bitcoin in a tragic USB accident.
That’s what class actions are for…
I got a grand from a class action lawsuit, couldn't believe it
Smaller classes mean more money for those actually affected. The millions in settlements getting split between millions of people isn't much, but across just a hundred thousand... Some actual restitution.
The fingerprint reader only enabled the USB connection, and nothing on the card was actually encrypted.
Pathetic
They have a really long history of doing this stuff. Including outright espionage.
https://en.wikipedia.org/wiki/Lenovo#Security_and_privacy_incidents
https://legioncyber.com/insights/lenovos-security-failures-and-hidden-risks/
This last one is more about just poor quality.
https://www.lawsuitupdatecenter.com/lenovo-class-action-lawsuits.html
Never understood the thinkpad craze. "Military grade" means cheap as fuck.
Not always. It's better to say that "military grade" means "very specific standards".
That also happens to translate to cheap pretty often, but that's because someone in 1943 wrote the specification for The Standard Tube Sock and ordered 7,500,000,000 pairs to be delivered over the next century. Since it's precisely specified you know exactly how much you can skimp.
Add that to the trillion pages of compatability requirements and you're basically never updating anything.
Like how switching lightbulb brands at a nuclear power plant is hard because you need documentation demonstrating that the plastic in the led won't become a hazard in a radioactive incident.
“Military grade” means cheap as fuck.
Cheap as fuck yes, but also a giant rip-off as well. It isn't military grade without that skimming off as much of that military industrial complex dollar as possible.
The old ones were durable as hell.
You mean when IBM made them?
are* durable as hell, the old ones are still around... because they're very durable!
This is the Internet, so you guys can't see my face. Permit me to describe it to you as "unsurprised".
Kind of like that, yeah, but with a solid helping of "I tried to warn you idiots two decades ago, and you dismissed me as alarmist" thrown in for good measure.
Present company excluded, obviously.
What they were doing to ThinkPads could only be explained by being hostile to the idea in principle. Not making them cheaper to produce or better sellable, but just worse preserving some obscene resemblance in looks.
What's interesting is how up until relatively recent time Lenovo was considered one of the better ones, despite more than a decade having passed since them having shown it all.
As if everyone were seeing what they're doing, their quality, their business practices and so on, but just because of subconscious association with IBM and claimed good Linux support just ignoring that.
Anyway. I'm starting to understand Apple fanboys. That kind of thing it doesn't do.
Except I don't understand how something about OS functions reentrancy and memory allocation seems to evade their developers, because I sometimes encounter bugs in my hobbies that are reminiscent of Windows or Linux or *BSDs or even Haiku like 20 years ago.
People criticize how sound works in Linux, while in MacOS a userspace program can make a sound device or a network device stuck till reboot. I mean, the only piece of software that kinda bugs me on this, pun intended, is TCL/Tk, but it can't possibly be a TCL/Tk bug if no process survives and it only happens after a TCL/Tk script has been run and interpreter abruptly ended. I'm also not blaming the OS for one problem with my hobby project, I'm a crappy C programmer after all, but the way this reproduces or doesn't makes me also suspect an OS bug.
And what's the most amazing, I've been reading about such terrible bugs for like 10 years, some of them are the same.
And it's still far more convenient than Windows and probably than Linux or some of *BSDs for me. That is, compared to Windows it's just more convenient. With other Unices the problem is that they are too convenient, that can waste time that I can otherwise waste half on arguing with people and ranting and half on hobbies. Sometimes it's time that should be spent working.
Bugs or not.
They're the people making the next GrapheneOS hardware. There's some interesting cognitive dissonance.
I seriously believe that this thing was a white-label.
The GrapheneOS people are using CPU level hardware security functions provided by Qualcomm, I'm assuming the partnership means they get proper access to drivers and Motorola / Lenovo won't be modifying the CPU.
Now there's still plenty of room for shenanigans in other places like the modem and various interconnects and the motherboard and all that, but at least there's some baseline security provided there using ARM secure boot and hardware level exploit protection in the CPU, etc.
The actual people involved in phone design atd manufacture wouldn't even have a manager in common with the people that produced this
Fairphone here I come.
Lenovo makes Motorola? Or are you talking about something else?
Motorola has been owned by Lenovo since 2014. https://news.lenovo.com/pressroom/press-releases/lenovo-completes-full-acquisition-motorola-mobility-from-google/
You can even buy Motorola smartphones from Lenovo’s website. https://www.lenovo.com/gb/en/c/phones/moto/
Oh shit! I didn't know. Thanks!
Let's hope that the 'partnership 'means the GOS team will be auditing the actual hardware for the GrapheneOS compatible phones next year.
Lenovo has always been trash; like it's not that bad style. The best was the ~~clit~~ mouse thing.
Apparently the mouse nipple is good for people working out in the field with big gloves on. I don’t for the life of me know why they put it in the middle of the fucking keyboard instead of in any of the empty space beside the trackpad, but it has a use, allegedly.
Because it's for typing. And most people who type on QWERTY keyboards do so by using a pretty standard position, where pointer fingers fall on F and J.
Bu putting the clit halfway between those anchor points, you get a thumb that's almost always available for any cursoring.
The actual use is for text/document editing, you don't need to move your hands away from the keyboard to quickly select something with the clitmouse. Thinkpads are business laptops.
Just ran all the way to the informal side of the spectrum
Keyboard clit
I can't find it on mine...
It's right next to the G spot.
Track point navigation is a myth.
Lenovo slap their brand on all sorts of mass produced tat in their colours. All the tech companies do it for these sorts of products.
Well, it’s Lenovo. So…
