3 ms·
that link says nothing about > Lenovo's suspend feature relies on an unsigned binary blob from China sideloaded during system boot over an unsecure HTTP connec
by philsnow 8y ago
that link says nothing about
> Lenovo's suspend feature relies on an unsigned binary blob from China sideloaded during system boot over an unsecure HTTP connection
it talks about Lenovo Service Engine, Superfish, Lenovo Solution Center, and Lenovo Customer Feedback.
if you blow away the default install of windows, including the UEFI partition, and install (windows or linux or whatever) from scratch, how could any of those things affect you?
- BlackLotus89 8y agoThere is persistable malware that installs itself on your fresh windows [0] I only use old thinkpads like the t420 (my x61 needs fixing) and w520. Coreboot on the t420 and soon on the w520. Dell Laptops for work. [0] https://www.theregister.co.uk/2015/08/12/lenovo_firmware_nasty/ https://www.theregister.co.uk/2015/08/12/lenovo_firmware_nas...
- 1996 8y agoFunny coincidence! I added w520 support to coreboot as a weekend project several years ago! It should still work great on your w520, except there were several power management issues related to the optimus GPU I just couldn't fix. Oh and careful with the RAM if you use 32G as some brands will not work well, because of raminit issue (I haven't followed, maybe they are fixed now)
- rubbingalcohol 8y agoLenovo Service Engine was BIOS-level bloatware loading garbage into clean installs of Windows over HTTP. Lenovo's drivers were so bad that they couldn't get Microsoft WHQL certification, so their BIOS was sideloading them in a very unsecure manner.
- slrz 8y agoNote that this is an official Windows feature and it is the OS that executes the firmware-provided crapware in the first place. It should provide an option to turn it off. Of course, malicious firmware doesn't really depend on the OS's cooperation. It would just be harder to implement and the result a lot more flaky.