News for hackers. Stuff that matters.
Re:We purchased a machine from China and it came with malwar... by mrunkel on Tuesday January 25, 2022 @08:31AM (#30071555)
Given that Windows 7 _Ultimate_ was installed on what is essentially an OEM machine, it's very likely that it's a pirated copy with a "home brewed" license key.

I think the most reasonable explanation is that either the OS was sourced already infected, or the crack tool they used was infected.

Re:We purchased a machine from China and it came with malwar... by mark_l_watson on Tuesday January 25, 2022 @08:45AM (#30071684)
A bit off topic, but the last time I needed a Windows laptop for business reasons (a long time ago) I bought a laptop directly from Microsoft and it appeared to be secure and also not loaded with advertising junk. The price seemed OK, fairly competitive.
Re:We purchased a machine from China and it came with malwar... by wlesieutre on Tuesday January 25, 2022 @09:33AM (#30072161)
When buying a Windows machine, you can purchase "Signature Edition" versions through Microsoft which will come with only the crapware selected by Microsoft, and not by the manufacturer

https://www.microsoft.com/en-gd/store/b/signaturepcs

Re:We purchased a machine from China and it came with malwar... by truffdog on Tuesday January 25, 2022 @03:00PM (#30077187)
Re:We purchased a machine from China and it came with malwar... by gigaflop on Tuesday January 25, 2022 @01:41PM (#30076014)
It looks like that isn't available for those in the US, since the redirect takes me to a 'not available' page. Are the 'Signature Edition' versions at all available in the US?
Re:We purchased a machine from China and it came with malwar... by wlesieutre on Tuesday January 25, 2022 @01:49PM (#30076159)
Hmm good question, I just took what came up in Google which is apparently the "English (Grenada)" site. Maybe they've dropped this in the US.
Re:We purchased a machine from China and it came with malwar... by gigaflop on Wednesday January 26, 2022 @10:54AM (#30086997)
Re:We purchased a machine from China and it came with malwar... by emiliosic on Tuesday January 25, 2022 @11:37PM (#30081781)
I had Surface 3 Pro and it was a nightmare. In the end, the SSD died and the way the machine is glued together, it's impossible to open without breaking the screen. Before its final death, it had problems with sleep/wake functions. A standard reinstall wouldn't fix it. Eventually had to take it back to Microsoft for a full re-image. That did the trick.
Re:We purchased a machine from China and it came with malwar... by raverbashing on Tuesday January 25, 2022 @09:16AM (#30071994)
Or it's just malware that's "around" the company since nobody cares what they download, which USB keys they plug, etc

Autorun USB malware is very common

Re:We purchased a machine from China and it came with malwar... by fpgaminer on Tuesday January 25, 2022 @03:15PM (#30077428)
> Or it's just malware that's "around" the company since nobody cares what they download, which USB keys they plug

There's a fun story documented on Darknet Diaries (https://darknetdiaries.com/transcript/22/) about a wind farm that got hacked. The "malicious" actor had found his way into their infrastructure and installed some idle cryptominers. But he was also taking the time to maintain all the infrastructure; applying updates and patches on a regular basis in an effort to keep other would-be hackers out. The security consultant discloses all of this to the company. Well, the story ends with the company making a business decision to leave things as they are. They were effectively getting free IT.

Re:We purchased a machine from China and it came with malwar... by gruez on Tuesday January 25, 2022 @10:14AM (#30072666)
>Autorun USB malware is very common

that hasn't worked since windows xp sp2.

Re:We purchased a machine from China and it came with malwar... by raverbashing on Tuesday January 25, 2022 @11:29AM (#30073797)
Doesn't mean machines with malware won't save files to attached USB drives
Re:We purchased a machine from China and it came with malwar... by phendrenad2 on Tuesday January 25, 2022 @08:49PM (#30080643)
Alright let's think about this. If equipment was entering the US with pirated Windows licenses, wouldn't Microsoft ask customs enforcement to block them until the manufacturer stopped pirating?

Also why would Windows Ultimate indicate piracy? Wouldn't it be weird if "Windows Home" flashed up on the screen while booting an industrial machine? It's more likely to make sense that Windows Home isn't licensed for use on industrial machines.

Re:We purchased a machine from China and it came with malwar... by Sirened on Tuesday January 25, 2022 @09:47PM (#30081044)
> wouldn't Microsoft ask customs enforcement to block them until the manufacturer stopped pirating

Well, they would if they knew. I have purchased a variety of random computing hardware from Chinese suppliers and despite the product pages claiming they had no on-board OS installed, they came with cracked versions of Windows. They do it because customers want an OS but don't want to shell out for a license. It costs them nothing to pirate software (especially when they lie about it) and getting caught and actually blocked is very hard. This isn't like them intercepting a shipment of counterfeit purses where you can clearly tell by looking at the item. You'd have to boot the computers and then verify that they have an OS installed and then that it's properly licensed, which is well out of reach for a random customs officer.

> why would Windows Ultimate indicate piracy?

It's a very expensive license and, if you have any experience pirating Windows (I cough don't) that's usually what you find since if you're going to steal something, why steal the shittier, less featurefull version?

Re:We purchased a machine from China and it came with malwar... by klondike_ on Wednesday January 26, 2022 @02:12AM (#30082696)
>why would Windows Ultimate indicate piracy?

Microsoft sells an embedded, stripped down version of Windows with extended support life for industrial machines like this. Ultimate is intended for workstations and power users.

Re:We purchased a machine from China and it came with malwar... by 3pt14159 on Tuesday January 25, 2022 @09:35AM (#30072187)
You know what? I don't care anymore. When this type of thing happens it's almost always China. Whether it's intentional malware or a lack of QA, how could one tell? They have such a reputation for both I don't know why we still let their electronics into our countries.
Re:We purchased a machine from China and it came with malwar... by Aperocky on Tuesday January 25, 2022 @11:18AM (#30073614)
> When this type of thing happens it's almost always China.

It could only happen in China - because the author bought dubious stuff from unknown third party on AliExpress. Craiglist scams happen mostly in US because people don't use it elsewhere.

Sort of like how you shoot the arrow first and then draw a target around it, 100% bullseye.

Re:We purchased a machine from China and it came with malwar... by Dah00n on Tuesday January 25, 2022 @11:02AM (#30073330)
So most of this happens in products made where most of these products are made? Seems logically. Besides it doesn't seem any better in the US. By far the most backdoored internet equipment producer is Cisco.
Re:We purchased a machine from China and it came with malwar... by danieltanfh95 on Tuesday January 25, 2022 @11:01AM (#30073309)
it's because chinese goods are consistently good that anything bad is news. ironic isn't it

literally everything is made in china, if the quality is as bad as you say the world would have fallen apart.

It seems critical thinking is rare among news outrage these days. The same comments were said of Japanese products back in the day, "IP thieves", "shitty quality", and here we are decades later praising Japanese products. Its hilarious at this point.

Re:We purchased a machine from China and it came with malwar... by tekknik on Wednesday January 26, 2022 @10:20AM (#30086534)
> literally everything is made in china, if the quality is as bad as you say the world would have fallen apart.

no not literally everything. and who’s not annoyed by shopping on amazon and having to weed through all the cheap chinese “solutions”? The only time you get something quality from China is if some other company outside China is commissioning them to build their stuff with high standards. the rest of Chinese “innovation” is seeing how cheap they can make something before it does literally fall apart.

Re:We purchased a machine from China and it came with malwar... by danieltanfh95 on Monday February 07, 2022 @10:18PM (#30254543)
You'll be surprised how much stuff is made from china in america. Just take a look around your restaurants.
Re:We purchased a machine from China and it came with malwar... by io98763 on Tuesday January 25, 2022 @11:33AM (#30073858)
I don't recall the Japanese being accused of poor quality. Just imitating rather than innovating. Many Japanese products like swords, knives, cameras, have been known for surprisingly high quality for a long time. Centuries in some cases.

I'd say Chinese manufacturing is a little cheaper and a lot lower quality, and generally the price difference is not remotely sufficient to make up for the loss in performance. You need a company in the middle who cares about their reputation to be safe buying it.

Re:We purchased a machine from China and it came with malwar... by danieltanfh95 on Monday February 07, 2022 @10:18PM (#30254548)
most people won't remember it because it's really long ago, just after world war 2
Re:We purchased a machine from China and it came with malwar... by yorwba on Tuesday January 25, 2022 @02:04PM (#30076396)
> I don't recall the Japanese being accused of poor quality.

It was a different time: https://www.nytimes.com/1952/01/13/archives/japanese-machine... "The Japanese flair for imitating, but not equaling, the manufactures of occidental nations has caught up with her machine-tool industry, ..." (1952)

First it was imitating, but not equaling, then it was imitating with equal quality but a little cheaper, and a few generations later nobody remembers that "Made in Japan" ever meant anything but high quality.

Re:We purchased a machine from China and it came with malwar... by baja_blast on Tuesday January 25, 2022 @11:54AM (#30074199)
> literally everything is made in china, if the quality is as bad as you say the world would have fallen apart.

And that's why nowadays things like washing machines and refrigerators which used to last decades now break within the first year or two.

> The same comments were said of Japanese products back in the day, "IP thieves", "shitty quality", and here we are decades later praising Japanese products. Its hilarious at this point.

But these stereotypes lasted only for a decade tops! I have not seen the same commitment to quality that Japanese brands produced. I believe it is a cultural difference, Japanese take great pride in workmanship.

Re:We purchased a machine from China and it came with malwar... by danieltanfh95 on Monday February 07, 2022 @10:22PM (#30254560)
decade tops? it started from just after world war 2, and lasted until around the plaza accord.

Most people won't remember it because it's too long ago

Re:We purchased a machine from China and it came with malwar... by pphysch on Tuesday January 25, 2022 @01:00PM (#30075348)
The malware described in the article is script kiddy stuff. Probably part of a ripped Win7.

Stuxnet, Pegasus, Vault 7 tech are far more dangerous with that capacity to cause real harm to actual people. Who developed these?

[dead]
Re:We purchased a machine from China and it came with malwar... by DrBazza on Tuesday January 25, 2022 @09:55AM (#30072415)
> "efficient" MBA eloi outsourced everything to morlocks a long time ago.

This is the biggest weakness of the West - and it all stems back to "share holder value".

Companies, US ones, in particular, seem to have some absurd drive to pay endless dividends to shareholders, and drive 'value' via share price, by appearing to be profitable.

In other words, get stuff from the cheapest provider.

It didn't help that at the same time people like Carl Icahn came along and stripped a company that was cheap to buy, but also sat on a pile of cash. And again, if he could 'drive value' for the share holders, said company was a target.

Eventually state-level politics appear - artificially low-prices Chinese goods because the CCP fix the exchange rate, or subsidise an entire market to corner it globally.

Rinse repeat, and that's where we're at now.

Re:We purchased a machine from China and it came with malwar... by Workaccount2 on Tuesday January 25, 2022 @10:09AM (#30072599)
People don't realize that the US defense budget is practically the only thing keeping American manufacturing alive.
Re:We purchased a machine from China and it came with malwar... by 3pt14159 on Tuesday January 25, 2022 @02:20PM (#30076640)
Eh. Manufacturing has never gone down in GDP terms. It just seems to have gone down due to layoffs as a result of further mechanization of production.
Re:We purchased a machine from China and it came with malwar... by Scoundreller on Tuesday January 25, 2022 @02:01PM (#30076353)
Massive consumer demand helps too.
Re:We purchased a machine from China and it came with malwar... by rafale on Tuesday January 25, 2022 @11:23AM (#30073704)
It wouldn't be so bad if we outsourced to countries that are ideologically compatible with the West. The problem is China. Not outsourcing itself.
Re:We purchased a machine from China and it came with malwar... by toss1 on Tuesday January 25, 2022 @10:15AM (#30072679)
Yup, and it's even more directed than that.

Western MBAs and politicians think they know that manufacturing is just a fungible commodity and think that we're exploiting cheap Chinese labor to 'drive shareholder value'.

While they have this myopic focus on quarterly results, the CCP has a 100- and 500-year plan, and is happily exploiting that myopia for strategic economic and military value, including subsidizing massive undercutting of entire industries in order to kill all but their own. The result is that they are gaining the deep know-how of manufacturing, the ability to compromise their adversaries' military gear at the component level, and the ability to choke off supply chains.

Although there is still barely time to repair this, it will go down as a strategic blunder of historic proportions.

Re:We purchased a machine from China and it came with malwar... by mach1ne on Tuesday January 25, 2022 @10:43AM (#30073056)
This was the case some 10 years ago, but Chinese labor is no longer cheap. The wealth brought in by making China the factory of the world drove the income level of its middle class up and now there are few advantages in manufacturing your products in China.

Western manufacturers are constantly pulling their factories back from China, many having gained an ultimate net loss from moving in in the 90s and now relocating again.

Re:We purchased a machine from China and it came with malwar... by toss1 on Tuesday January 25, 2022 @02:37PM (#30076886)
Yes, they have made a net loss, and meanwhile transferred an insane amount of technology to China. But those managers got their bonuses and are long-gone...

And sure Chinese labor isn't as cheap, they've moved up the value chain some, but it is still cheap enough compared to US wages to make items and ship them here - particularly with China's lax environmental and labor laws.

The relocations to even cheaper labor-rate counties are still an improvement, as at least they aren't creating all levels of strategic disadvantage...

Re:We purchased a machine from China and it came with malwar... by reaperducer on Tuesday January 25, 2022 @10:40AM (#30072995)
and it all stems back to "share holder value".

Which is just a business buzzphrase for "Greed."

The West is being eaten alive by its own greed, and the Chinese are just watching us do it.

Re:We purchased a machine from China and it came with malwar... by WesolyKubeczek on Tuesday January 25, 2022 @01:08PM (#30075479)
Chinese are just as greedy and corrupt, make no mistake.
Re:We purchased a machine from China and it came with malwar... by pomian on Tuesday January 25, 2022 @01:59PM (#30076313)
Brilliant!