News for hackers. Stuff that matters.
Re:Lenovo: researchers find 'massive security risk' by orthecreedence on Wednesday May 06, 2015 @11:43AM (#9499473)
It seems from the article that the best way to handle this is to uninstall all the trash that comes with a new computer (or hell, reinstall windows from scratch). Do I need Lenovo's power management tools? No. Do I need its Wifi connection manager? No. Windows has all this stuff already and it works really, really well.
Re:Lenovo: researchers find 'massive security risk' by dheera on Wednesday May 06, 2015 @02:36PM (#9500833)
In my case, when I received my Lenovo the first thing I did after opening the box was unscrew the case and change the drive for an SSD. Before even powering it on once. But yeah, if I used the default HDD, I'd at least reformat it first thing. I'm a Linux user though, so I'd have to reformat it anyway, but I'd still reformat it even if I were a Windows user.

Microsoft, Google, Apple, Ubuntu, et al. all make decent OSes that are designed to, um, work. I don't get why manufacturers don't get this simple fact and always have to tamper with stuff. For the less-technical people out there, can't we have a "Nexus" sort of PC manufacturer who prides themselves in selling with ONLY vanilla OSes and as-standard-as-possible hardware components?

Re:Lenovo: researchers find 'massive security risk' by joshstrange on Wednesday May 06, 2015 @02:57PM (#9500998)
It's the same problem with Android currently which is that when every manufacturer is using the same OS they have to find a way to differentiate. In Android this means custom skins, custom apps, and the like. On Windows this means "free" antivirus, custom apps, and the like. It would be nice if they all just completed on hardware but then it's really a race to the bottom.
Re:Lenovo: researchers find 'massive security risk' by jgroszko on Wednesday May 06, 2015 @03:57PM (#9501411)
Do consumers actually differentiate on these extras? I don't think I've ever heard anyone say "Yeah I picked up a Lenovo laptop because the antivirus they package is better than Dell's" or "I got a Samsung phone because their skins are better than HTC's" I'd love to see the market research that backs that idea up...

I thought the real reason manufacturers do this is because they're in a very low margin industry. For computers they get some deal with software companies to pre-install their product, and similar for cell phones with service providers.

Re:Lenovo: researchers find 'massive security risk' by yellowapple on Wednesday May 06, 2015 @04:50PM (#9501706)
I'm not sure if the "free" antivirus counts as "differentiating", since it's almost always - without fail - either McAfee or Norton.

With that said, differentiating by custom UIs on top of the base platform (i.e. the Android approach) would be much better, and would be actually-useful differentiation rather than a matter of "well which company's going to fuck me over the least with their preinstalled shitware?".

Re:Lenovo: researchers find 'massive security risk' by joshstrange on Wednesday May 06, 2015 @04:57PM (#9501768)
I personally dislike custom UI's shipped by the phone manufacturer because more often than not it leads to delays in OS updates due to them needing to adapt their UI to core changes. Customization (by manufacturers) can come at a very high price for the end user in terms of security and upgradability.
Re:Lenovo: researchers find 'massive security risk' by yellowapple on Wednesday May 06, 2015 @06:14PM (#9502137)
Right, but that's leaps and bounds better than "free" McAfee, no matter which way you skin it.

This also isn't exactly universally true. HTC was pretty responsive in getting Lollipop out to my One M8, for example, even with its whole "Sense UI" shebang.

Re:Lenovo: researchers find 'massive security risk' by dheera on Wednesday May 06, 2015 @10:35PM (#9503017)
Not to mention I find 90% of those custom UIs look horrible and cluttered compared to Google's original design.
Re:Lenovo: researchers find 'massive security risk' by _xander on Wednesday May 06, 2015 @03:29PM (#9501223)
Their perspective is that they're adding value through software (i.e. without spending more money on hardware). Not that I agree with this line of reasoning...
Re:Lenovo: researchers find 'massive security risk' by bediger4000 on Wednesday May 06, 2015 @04:13PM (#9501493)
Are you certain of this perspective or is this your best guess? I see people say this type of thing all the time, and I don't see any official statements corroborating them.
Re:Lenovo: researchers find 'massive security risk' by _xander on Thursday May 07, 2015 @07:08AM (#9504195)
I picked it up from here: http://www.strategyand.pwc.com/global/home/what-we-think/rep...

It's still only one sort of business strategy. Not every hardware company is necessarily pursuing this line.

Re:Lenovo: researchers find 'massive security risk' by pXMzR2A on Wednesday May 06, 2015 @03:28PM (#9501215)
> opening the box was unscrew the case and change the drive for an SSD

Does that not void the warranty?

Re:Lenovo: researchers find 'massive security risk' by ptaipale on Wednesday May 06, 2015 @04:38PM (#9501634)
This might depend on country, but in most countries that have some consumer protection, replacing a hard disk and similar reasonable operations are considered to be normal use of the machine, and the consumer law says that the consumer may not be prevented from doing this.

When the customer is not a consumer but a company, then things might be different (companies may be able to give away their rights in a way that consumers may not).

In EU countries, a manufacturer may offer a warranty, but this is just supposed to be an extra service; the seller is at least required to provide defect liability (i.e. a device must fixed if broken when it is sold and it must last for a reasonable time in reasonable use).

Re:Lenovo: researchers find 'massive security risk' by pXMzR2A on Thursday May 07, 2015 @06:31PM (#9508816)
This was helpful, thanks for the reply.
Re:Lenovo: researchers find 'massive security risk' by dheera on Wednesday May 06, 2015 @04:24PM (#9501552)
I have a T440p laptop which opens up very nicely and cleanly for user hard drive replacement. 2 screws and the whole back cover pops off, no "warranty void" stickers or any of that. I also upgraded the WiFi module to one that supports 5 GHz, and upgraded the RAM to 16GB, all without any fuss from the chassis. It was significantly cheaper to order the barebones system and do these upgrades myself than to order a more advanced system pre-assembled from Lenovo.

So I don't think changing a hard drive would void it. But also, I don't usually care about warranties. Things usually break only after the warranty expires, and for any electronic device, as long as it's a common enough model number it's usually possible to get spare parts on eBay when the time comes.

Re:Lenovo: researchers find 'massive security risk' by Mikeb85 on Wednesday May 06, 2015 @04:25PM (#9501559)
Depends on the laptop. Often 'Lenovo' translates to 'ThinkPad', where nearly every component is meant to be accessible and easy to switch out.
Re:Lenovo: researchers find 'massive security risk' by apenguin on Wednesday May 06, 2015 @05:35PM (#9501956)
Kinda offtopic, but this is a bit misleading. The T4x0s series, for instance, makes it very difficult to access anything -- and the T series is known as one of the good ones!

Also, Thinkpads all have a BIOS whitelist that prevents you from actually using the hardware you just easily installed.

Re:Lenovo: researchers find 'massive security risk' by dheera on Thursday May 07, 2015 @12:12AM (#9503243)
Wow, wouldn't have guessed. Haven't played with a T4x0s. I have a T4x0p (T440p) and it's extremely easy to access everything. But I just looked at some Youtube videos and the 's' is indeed a world of difference from the 'p'.
Re:Lenovo: researchers find 'massive security risk' by yellowapple on Wednesday May 06, 2015 @04:52PM (#9501719)
I've yet to encounter a manufacturer that considered a hard drive swap to be warranty-voiding. Capacity upgrades are generally perceived to be routine enough to be considered normal use; making it warranty-voiding would be like making the installation/removal of USB devices warranty-voiding.
Re:Lenovo: researchers find 'massive security risk' by scott_karana on Wednesday May 06, 2015 @05:40PM (#9501983)
ThinkPads encourage end-user repairs/modifications.

For example, If your HDD fails under warranty, they'll ship you a new one with the simple instructions to replace it. Only tool needed is a small Philips screwdriver. :-)

Re:Lenovo: researchers find 'massive security risk' by allthetime on Wednesday May 06, 2015 @03:46PM (#9501332)
Not if its a decent warranty. Its ok to replace HD and RAM on a 2010 MacBook pro.
Re:Lenovo: researchers find 'massive security risk' by pXMzR2A on Thursday May 07, 2015 @07:41PM (#9509141)
How did you afford a 6-year long mac warranty?
Re:Lenovo: researchers find 'massive security risk' by yuncun on Wednesday May 06, 2015 @12:11PM (#9499696)
What is the motivation for Lenovo to keep making that software? I can't imagine it would be cheap for them, and I find it hard to believe people buy their products for the preinstalled software; Are there other reasons?
Re:Lenovo: researchers find 'massive security risk' by hackuser on Wednesday May 06, 2015 @02:08PM (#9500608)
A guess: Lenovo is trying to differentiate the experience of using their computers from that of competitors.

When all vendors sell products running the same OS, with essentially the same keyboard, screen, processor, etc., their products become commodities and margins disappear; consumers will buy whatever costs least.

If consumers associate a special experience with your product, you might be able to charge a little more or at least have some brand loyalty.

Re:Lenovo: researchers find 'massive security risk' by yellowapple on Wednesday May 06, 2015 @04:55PM (#9501744)
For me, though, the "special experience" is hardware reliability and ease of maintenance, which is why I typically buy either Dell or Lenovo and avoid HP like the plague. Reliable hardware is the real differentiator for me, and I'm sure I'm not alone (though probably part of a minority of shoppers).

One could also differentiate by focusing on a custom-tailored UI/UX. This is a bit harder to do with Windows than it is with Linux (including Android), though.

Re:Lenovo: researchers find 'massive security risk' by hackuser on Wednesday May 06, 2015 @11:44PM (#9503166)
> the "special experience" is hardware reliability and ease of maintenance, which is why I typically buy either Dell or Lenovo and avoid HP like the plague.

I have the same priorities, but how do you know which vendor's hardware is more reliable? All we have is anecdotal experiences. FWIW my experience is that HP's business product lines are most reliable, and Dell's business lines have relatively many quality issues. The HP Elite laptops have exceptional serviceability (better than any I've seen -- find a video and just look at how the laptop case opens for service) and tech support.

> I'm sure I'm not alone (though probably part of a minority of shoppers).

Consumers buy on price, but the priorities of business IT departments are similar to yours: reliability, serviceability, and support; the costs of downtime and skilled labor for repairs far exceed the savings from buying cheap machines. Each vendor sells consumer (e.g., Dell Inspiron), and business (e.g., Dell Latitude) product lines. Maybe try shopping the products they sell to corporate IT; those match your priorites. They cost more, but you get what you pay for.

Re:Lenovo: researchers find 'massive security risk' by diminoten on Wednesday May 06, 2015 @01:02PM (#9500076)
I'd bet the folks who make those kinds of decisions think that people do buy their hardware at least in part due to their software offerings.

Patently absurd, I know, but when you drink enough Kool-Aid...

Re:Lenovo: researchers find 'massive security risk' by task_queue on Wednesday May 06, 2015 @08:30PM (#9502659)
Profiling, advertising, avenues to offer their owner services or partners services.
Re:Lenovo: researchers find 'massive security risk' by ZanyProgrammer on Wednesday May 06, 2015 @02:48PM (#9500932)
Several years ago I tried to do a fresh Windows install on a ThinkPad Edge (their cheapo wanna be TPs), and I found out that I needed their power management software. I can't remember off the top of my head what the problem was, but it was quickly solved by downloading Lenovo's management tools. I just wanted things to work, so I didn't investigate further why my nilla install of Windows didnt' work.
Re:Lenovo: researchers find 'massive security risk' by _xander on Wednesday May 06, 2015 @03:33PM (#9501251)
I encountered a similar problem with my Lenovo U410. Vanilla windows drivers simply don't play ball with certain hardware features.
Re:Lenovo: researchers find 'massive security risk' by brudgers on Wednesday May 06, 2015 @01:04PM (#9500090)
I just bought a used five year old ThinkPad X201 Touch. One of the things I did with Lenovo's [new] upgradesoftware was upgrade the BIOS. Their software also offers fine grained control over lots of other proprietary hardware...e.g. the Watcom digitizer and security chip. It also offers fine grained control over the trackpad and function keys.

And the great thing is that Lenovo is keeping all that stuff current to support an ancient-in-internet years piece of hardware. This isn't HP consumer machine crapware...this is the stuff that costs Lenovo money not something they get paid to pre-install.

Re:Lenovo: researchers find 'massive security risk' by tsomctl on Wednesday May 06, 2015 @11:50AM (#9499533)
On a Thinkpad T500, you do need Lenovos special power management tools. Otherwise, the cpu fan will never spin up and your processor will overheat.
Re:Lenovo: researchers find 'massive security risk' by function_seven on Wednesday May 06, 2015 @12:10PM (#9499689)
Why the hell would the fan rely on software to tell it to spin up? That function should be in the firmware. The logic board should be able to handle cooling without any software running on the machine.
[deleted]
Re:Lenovo: researchers find 'massive security risk' by ethbro on Wednesday May 06, 2015 @01:39PM (#9500383)
*> Because a person might want to tune the performance of their laptop in regard to power consumption.

That's what exposing BIOS settings are for.

Re:Lenovo: researchers find 'massive security risk' by vidarh on Wednesday May 06, 2015 @01:25PM (#9500279)
You have described why there might be an interface for fan control that software could use. It does not justify not having the board opt for sane defaults.
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @03:29PM (#9501220)
i'm calling bullshit.

if you don't put special software on your linux before you boot a live cd, your thinkpad t500 fries itself.

sure it does.

Re:Lenovo: researchers find 'massive security risk' by tsomctl on Wednesday May 06, 2015 @08:07PM (#9502554)
I never said it would fry itself. It actually just turns itself off, and I have to remove the battery and power cord to get it to restart. And I only had this problem on Windows 7. Every major Linux distro I tried had proper power management support.
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Thursday May 07, 2015 @01:06PM (#9506589)
thanks for the clarification. you should have sent it back! it's probably out of warranty now. if you can switch off the ati graphics and use the intel graphics, that's a workaround.
Re:Lenovo: researchers find 'massive security risk' by ori_b on Wednesday May 06, 2015 @05:10PM (#9501838)
Of course it doesn't fry itself. Any CPU made in the last 20 years will throttle itself and run at lower speeds instead.
Re:Lenovo: researchers find 'massive security risk' by gkop on Wednesday May 06, 2015 @12:03PM (#9499640)
If that was the case with the T500, that's exceptional. My T520 and T530 have no problem spinning up their CPU fans in all sorts of configurations missing Lenovo's utilities.
Re:Lenovo: researchers find 'massive security risk' by minot on Wednesday May 06, 2015 @12:25PM (#9499805)
I have a Yoga Y 510 p. Windows barked at me after a few weeks of installing Windows 8.1 from scratch. It said I should get the latest version of the power utility from Lenovo. The power utility lets me spin up the fan which apparently can help get rid of dust. It also lets me select battery health mode as opposed to battery performance mode. When in battery health mode, the power supply does not charge the battery beyond about 60% and will not start charging before the power gets drained to about below 40%.

As far as I know, the power utility is the only thing I installed from Lenovo. The graphics drivers from nVidia came directly through Windows Update.

Should I be concerned? Should I uninstall the power management tools?

Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @01:25PM (#9500278)
Windows told you to install a power utility from Lenovo?

How would such a message come about? Do Lenovo pay Microsoft to put in error messages? Did it look for the answer to your problem online?

Re:Lenovo: researchers find 'massive security risk' by nandhp on Wednesday May 06, 2015 @02:26PM (#9500762)
I haven't used Windows much recently, but wouldn't it just be delivered as a driver through Windows Update?
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @03:22PM (#9501171)
which driver would tell you to install a power utility? how would that happen? what driver, could possibly get installed by windows update that would tell you to do that?
Re:Lenovo: researchers find 'massive security risk' by cmdrfred on Wednesday May 06, 2015 @02:39PM (#9500853)
Driver updates have been a part of windows update since 7.
Re:Lenovo: researchers find 'massive security risk' by nandhp on Wednesday May 06, 2015 @05:51PM (#9502028)
Windows Update has offered driver updates since Windows 98.
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @06:38PM (#9502232)
that will install bare bones drivers and services, but not startup daemons, control panel software or anything that could give you a message telling you you need to install a power utility.
Re:Lenovo: researchers find 'massive security risk' by minot on Thursday May 07, 2015 @01:37PM (#9506822)
I can attest that the little white flag in my notification tray linked me to lenovo support website telling me to get the power management utility.
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @01:27PM (#9500291)
so riddle me this, under what circumstances does the cpu fan not spin?

i'm having a hard time imagining a computer booting, without a cpu fan. OS: I'm starting up - so do all these things! as fast as possible!

Re:Lenovo: researchers find 'massive security risk' by nitrogen on Wednesday May 06, 2015 @11:06PM (#9503083)
It can be a combination of factors:

- The CPU fan might be controlled via ACPI.

- The operating system is supposed to run ACPI code provided by the BIOS.

- A BIOS can specify different sets of ACPI code for different operating systems, so Linux might get different code from Windows.

- The ACPI code provided by the BIOS for Linux might be broken, or lacking fan control.

- The hardware vendor may have decided not to provide APCI controls for anything, relying instead on proprietary interfaces.

Section 1.9 of https://www.kernel.org/doc/ols/2005/ols2005v1-pages-59-76.pd... looks like it might be related.

Re:Lenovo: researchers find 'massive security risk' by ori_b on Wednesday May 06, 2015 @05:13PM (#9501847)
I think you have it backwards: The CPU fan spins. Until the OS (or the AML bytecode that the OS interprets as a part of ACPI) tells it "the CPU is cool right now, you can slow down and save power".
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @06:10PM (#9502109)
> On a Thinkpad T500, you do need Lenovos special power management tools. Otherwise, the cpu fan will never spin up and your processor will overheat.

I am replying to this guy. Never spin up? Overheat? He's completely wrong.

I know full well how it works, I don't have it backwards.

Re:Lenovo: researchers find 'massive security risk' by tsomctl on Wednesday May 06, 2015 @08:12PM (#9502572)
I'm pretty sure you're trolling, but I'll feed you. I wasn't fully clear. Really what I meant is that the fan always spins at a slow speed. When the processor heats up, the fan doesn't speed up, and eventually the cpu shuts down to protect itself. And I've spent 12 hours a day in front of this computer for the past 5 years. I know how it works.
Re:Lenovo: researchers find 'massive security risk' by vog on Wednesday May 06, 2015 @12:02PM (#9499632)
> reinstall windows from scratch

That will usually "restore" the crap as well.

You might be better off installing a Free Software operating system from scratch. (e.g. OpenBSD for the security fanatics, or any other *BSD, or Solaris, or some Linux distro.)

Even better: Buy a laptop without any operating system. However, in some cases this may make the laptop more expensive. (e.g. what if Lenovo gets paid by crap providers for pre-installing?)

Re:Lenovo: researchers find 'massive security risk' by kbenson on Wednesday May 06, 2015 @12:19PM (#9499757)
I think "from scratch" is meant to imply a virginal source of windows, not the Lenovo supplied version.
Re:Lenovo: researchers find 'massive security risk' by IanDrake on Wednesday May 06, 2015 @12:36PM (#9499883)
Killing all disk partitions and starting over gives you a clean MS Windows install with no junk.

For those who don't know how, buy only "Signature Edition" PCs.

http://www.microsoftstore.com/store/msusa/en_US/cat/category...

Re:Lenovo: researchers find 'massive security risk' by TazeTSchnitzel on Wednesday May 06, 2015 @12:37PM (#9499887)
> That will usually "restore" the crap as well.

Depends. Some ship drivers and such on a separate disc, others don't.

Re:Lenovo: researchers find 'massive security risk' by ams6110 on Wednesday May 06, 2015 @11:47AM (#9499511)
Where do you get the installation media? I haven't seen more than a "system recovery disk" shipped with a consumer machine in at least a decade.

And I don't know about Lenovo, but I know that on the Dell laptops I last dealt with could never get a stock Windows 7 install to be stable without downloading Dell's drivers for the video card at minimum.

Re:Lenovo: researchers find 'massive security risk' by aylons on Wednesday May 06, 2015 @11:59AM (#9499603)
My Lenovo came with a recovery partition from which I could reinstall Windows. However, I suppose it would also automatically reinstall crapware, which is beside the point.

The solution was to download an official Windows 8 copy from Microsoft's website - the Windows installer will get the license key from the EFI.

Not as good as a recovery disk, as you will need to download and install manually all drivers, but vetting everything is part of the point.

EDIT: for those looking, this is the link from where I downloaded the Windows 8 binary from Microsoft website: http://windows.microsoft.com/en-us/windows-8/create-reset-re...

Re:Lenovo: researchers find 'massive security risk' by kbenson on Wednesday May 06, 2015 @12:22PM (#9499778)
I wasn't aware you could get vanilla windows install media for OEM license keys. Does this work with older windows versions as well? I have a Windows 7 Laptop that I would love to do this with,
Re:Lenovo: researchers find 'massive security risk' by smwht on Wednesday May 06, 2015 @01:20PM (#9500229)
It's a new feature with windows 8[1]. Unofficially you can install windows 7 using the OEM key (note this is not the key printed on the sticker on your laptop) and then activate it.

[1] http://arstechnica.com/gadgets/2015/02/save-yourself-from-yo...

Re:Lenovo: researchers find 'massive security risk' by ams6110 on Wednesday May 06, 2015 @12:24PM (#9499791)
Hm, I thought the OEM license keys were not usable to install a retail version of Windows. Has it changed, or have I been wrong all along?
Re:Lenovo: researchers find 'massive security risk' by smwht on Wednesday May 06, 2015 @01:21PM (#9500239)
Windows 8+ feature, see reply to kbenson above.
Re:Lenovo: researchers find 'massive security risk' by slayed0 on Wednesday May 06, 2015 @12:03PM (#9499644)
You can download windows 7/8 iso's directly from microsoft with your product key:

http://www.microsoft.com/en-us/software-recovery

You would of course need to grab drivers from the manufacturer as well, but you can skip all of the bloatware (and borderline spy/malware) that comes with a retail machine.

Re:Lenovo: researchers find 'massive security risk' by BorgHunter on Wednesday May 06, 2015 @12:52PM (#9500009)
I've tried this with an old laptop and the site refused to let me download anything. It claimed, for Windows 7 at least, that you need a retail key; OEM keys are not supported and you must go through your OEM. Really obnoxious.
Re:Lenovo: researchers find 'massive security risk' by minot on Wednesday May 06, 2015 @12:33PM (#9499849)
I tried this and when I reinstalled I got all the bloatware back. It was pretty frustrating because I don't know what I did incorrectly.

I ended up putting a Microsoft Windows 8.1 iso on a flash drive using rufus. https://rufus.akeo.ie/

I don't understand why Microsoft won't just make the latest build of its operating system publicly accessible in ISO format for anyone to download. I mean I still have to enter a serial number and activate. Why not just let me download from a trusted source without jumping through a bunch of hoops?

Re:Lenovo: researchers find 'massive security risk' by slayed0 on Wednesday May 06, 2015 @12:48PM (#9499969)
They used to allow this (as recently as a few months ago). You could download any windows 7 iso and then would have to activate after install. They even provide a utility for making bootable flash drives from an iso (presumably for installing win7 without needing a disc). I have to imagine they stopped offering the images due to the high level of piracy.

With an image from microsoft and an easy to find, spy-ware free, super easy to use executable (I'll avoid mentioning names on here), it was way too easy to pirate windows.

Also, not sure why you still got bloatware with this method. Manufacturers typically offer all of the required drivers individually online. The drivers themselves are bloatware-free but maybe you got roped into installing a software pack for the machine or something?

Re:Lenovo: researchers find 'massive security risk' by minot on Friday May 08, 2015 @12:45AM (#9509993)
It asked something like keeping the recovery partition. I naively said yes. I got everything from McAfee to Encyclopedia Britannica.
Re:Lenovo: researchers find 'massive security risk' by callesgg on Wednesday May 06, 2015 @12:42PM (#9499925)
They do put it on their website not publicly you need to login with a Microsoft(live or whatever) account.
Re:Lenovo: researchers find 'massive security risk' by basch on Wednesday May 06, 2015 @12:36PM (#9499879)
Always use an OEM Windows Disc. For Business Laptops they make it very easy. For Thinkpad, Latitude, and Precision laptops it's only a couple clicks.

Then install ThinkVantage System Update http://support.lenovo.com/us/en/documents/ht080136

or

Dell Command Update http://en.community.dell.com/techcenter/enterprise-client/w/...

Be careful of The ThinkVantage System Update, you dont need all the suggested installations.

Re:Lenovo: researchers find 'massive security risk' by chrisper on Wednesday May 06, 2015 @12:00PM (#9499617)
You can use http://www.microsoft.com/en-us/software-recovery to download a Windows ISO.
Re:Lenovo: researchers find 'massive security risk' by drzaiusapelord on Wednesday May 06, 2015 @01:45PM (#9500428)
We buy Lenovo. Its great hardware. We put in a custom image. The default image is a nightmare. I can't stress how terrible their applications are, even by the low standards of OEM default Windows apps.

I hope Win10 brings in more control from MS. The status quo really sucks.

Re:Lenovo: researchers find 'massive security risk' by ebbv on Wednesday May 06, 2015 @02:24PM (#9500741)
Two things:

1) This particular malware may be removable by reformatting and installing from a clean copy of Windows (which may not even be available without a separate purchase, since it's likely that the recovery disc that comes with the laptop contains the same default software installation.)

2) Reformatting and reinstalling to remove the malware requires knowing that there's a problem, which you wouldn't have if the articles about it hadn't come out.

Re:Lenovo: researchers find 'massive security risk' by yellowapple on Wednesday May 06, 2015 @05:01PM (#9501790)
From years of experience dealing with Windows preinstallations, I've defaulted to assuming that vendor-preinstalled operating systems contain malware/adware/etc. and installing a fresh copy of Windows (or better yet, GNU/Linux or one of the BSDs). While it's probably unreasonable to assume that all users can/should do this, it's certainly good advice, and it means that I've yet to be burned.