News for hackers. Stuff that matters.
Re:MIVD boss: Meet without a smartphone, risk of espionage t... by pulse7 on Monday October 12, 2020 @08:30AM (#24753725)
The best ThinkPads - which are used in many corporations - use Intel's vPro technology. Intel is offering those corporations to "remotely wipe the hard disk - even if laptop is turned off and not connected to the internet - in case the laptop is stolen". This technology requires presence of WLAN and SIM card. So it bypasses the corporate IT completely...
Re:MIVD boss: Meet without a smartphone, risk of espionage t... by kube-system on Monday October 12, 2020 @08:59AM (#24753928)
The concern is not literally who owns the network, but whether or not the organization can effectively manage the traffic. There are secure ways to manage that setup, as opposed to, a personal phone where the organization has zero control.
Re:MIVD boss: Meet without a smartphone, risk of espionage t... by eeZah7Ux on Monday October 12, 2020 @08:43AM (#24753807)
This comparison is absurd.

A minority of laptops are thinkpads, a fraction of those have SIM cards, and, finally, attacking that subsystem requires serious skills and the benefits are dubious.

Compare that with android/ios phones, which 99% of people have, and have a large underground market of backdoors that anybody can buy and install. Not to mention all the spyware that users and OEM install.

Re:MIVD boss: Meet without a smartphone, risk of espionage t... by wolco2 on Monday October 12, 2020 @09:14AM (#24754043)
It's the difference between finding an expliot for gmail vs finding one for a small discord server. Your attack on gmail has a bigger universe of targets if successful.
Re:MIVD boss: Meet without a smartphone, risk of espionage t... by nottorp on Monday October 12, 2020 @10:13AM (#24754508)
Uh, discord is a centralized service. You find an exploit for a "small discord server" you can probably use it on all servers.
Re:MIVD boss: Meet without a smartphone, risk of espionage t... by eeZah7Ux on Monday October 12, 2020 @09:44AM (#24754256)
Yes, and that's why NSA successfully intercepted google's fiber optic cables and so on.
Re:MIVD boss: Meet without a smartphone, risk of espionage t... by everdrive on Monday October 12, 2020 @02:01PM (#24757363)
This is not equivalent, though.

Here are some questions I don't have the answer to, but would be relevant:

- Are these SIMs always active?

- Do they communicate broadly with the internet, or just specific servers?

- If they communicate with specific servers, where does an attacker have to be exploit these communications?

- Does this technology allow for the arbitrary execution of code, or can it only wipe the hard drive?

There are probably more contraints here, but the basic point I'm driving at is that the challenge here is not equivalent to the challenge of exploiting an old android or iOS device. Is there some risk, yes, but it really doesn't seem to be the same amount of risk.