News for hackers. Stuff that matters.
Re:New Lenovo ThinkPad Range with Ryzen 4000 and 4000 Pro Mo... by schoolornot on Thursday May 07, 2020 @02:42PM (#23106573)
The original intent seems OK. Why the hell does this mechanism need the capability to execute arbitrary .exe files and not just load the most basic type of driver required (INF/DLL/etc. whatever Windows calls it)?
Re:New Lenovo ThinkPad Range with Ryzen 4000 and 4000 Pro Mo... by freeone3000 on Thursday May 07, 2020 @03:09PM (#23106939)
It's still arbitrary code running as a driver, it doesn't matter what form it takes, you can abuse the process to host whatever you want.
Re:New Lenovo ThinkPad Range with Ryzen 4000 and 4000 Pro Mo... by mikepurvis on Thursday May 07, 2020 @03:15PM (#23107018)
A DLL is also executable code; there's really no difference between that and running an arbitrary EXE. Inf files are slightly different, since they're just text-based configuration, but I doubt that you could get your theft-recovery (or whatever other) functionality using just configuration of something built-in.