News for hackers. Stuff that matters.
Re:Lenovo: researchers find 'massive security risk' by ams6110 on Wednesday May 06, 2015 @11:47AM (#9499511)
Where do you get the installation media? I haven't seen more than a "system recovery disk" shipped with a consumer machine in at least a decade.

And I don't know about Lenovo, but I know that on the Dell laptops I last dealt with could never get a stock Windows 7 install to be stable without downloading Dell's drivers for the video card at minimum.

Re:Lenovo: researchers find 'massive security risk' by aylons on Wednesday May 06, 2015 @11:59AM (#9499603)
My Lenovo came with a recovery partition from which I could reinstall Windows. However, I suppose it would also automatically reinstall crapware, which is beside the point.

The solution was to download an official Windows 8 copy from Microsoft's website - the Windows installer will get the license key from the EFI.

Not as good as a recovery disk, as you will need to download and install manually all drivers, but vetting everything is part of the point.

EDIT: for those looking, this is the link from where I downloaded the Windows 8 binary from Microsoft website: http://windows.microsoft.com/en-us/windows-8/create-reset-re...

Re:Lenovo: researchers find 'massive security risk' by kbenson on Wednesday May 06, 2015 @12:22PM (#9499778)
I wasn't aware you could get vanilla windows install media for OEM license keys. Does this work with older windows versions as well? I have a Windows 7 Laptop that I would love to do this with,
Re:Lenovo: researchers find 'massive security risk' by smwht on Wednesday May 06, 2015 @01:20PM (#9500229)
It's a new feature with windows 8[1]. Unofficially you can install windows 7 using the OEM key (note this is not the key printed on the sticker on your laptop) and then activate it.

[1] http://arstechnica.com/gadgets/2015/02/save-yourself-from-yo...

Re:Lenovo: researchers find 'massive security risk' by ams6110 on Wednesday May 06, 2015 @12:24PM (#9499791)
Hm, I thought the OEM license keys were not usable to install a retail version of Windows. Has it changed, or have I been wrong all along?
Re:Lenovo: researchers find 'massive security risk' by smwht on Wednesday May 06, 2015 @01:21PM (#9500239)
Windows 8+ feature, see reply to kbenson above.
Re:Lenovo: researchers find 'massive security risk' by slayed0 on Wednesday May 06, 2015 @12:03PM (#9499644)
You can download windows 7/8 iso's directly from microsoft with your product key:

http://www.microsoft.com/en-us/software-recovery

You would of course need to grab drivers from the manufacturer as well, but you can skip all of the bloatware (and borderline spy/malware) that comes with a retail machine.

Re:Lenovo: researchers find 'massive security risk' by BorgHunter on Wednesday May 06, 2015 @12:52PM (#9500009)
I've tried this with an old laptop and the site refused to let me download anything. It claimed, for Windows 7 at least, that you need a retail key; OEM keys are not supported and you must go through your OEM. Really obnoxious.
Re:Lenovo: researchers find 'massive security risk' by minot on Wednesday May 06, 2015 @12:33PM (#9499849)
I tried this and when I reinstalled I got all the bloatware back. It was pretty frustrating because I don't know what I did incorrectly.

I ended up putting a Microsoft Windows 8.1 iso on a flash drive using rufus. https://rufus.akeo.ie/

I don't understand why Microsoft won't just make the latest build of its operating system publicly accessible in ISO format for anyone to download. I mean I still have to enter a serial number and activate. Why not just let me download from a trusted source without jumping through a bunch of hoops?

Re:Lenovo: researchers find 'massive security risk' by slayed0 on Wednesday May 06, 2015 @12:48PM (#9499969)
They used to allow this (as recently as a few months ago). You could download any windows 7 iso and then would have to activate after install. They even provide a utility for making bootable flash drives from an iso (presumably for installing win7 without needing a disc). I have to imagine they stopped offering the images due to the high level of piracy.

With an image from microsoft and an easy to find, spy-ware free, super easy to use executable (I'll avoid mentioning names on here), it was way too easy to pirate windows.

Also, not sure why you still got bloatware with this method. Manufacturers typically offer all of the required drivers individually online. The drivers themselves are bloatware-free but maybe you got roped into installing a software pack for the machine or something?

Re:Lenovo: researchers find 'massive security risk' by minot on Friday May 08, 2015 @12:45AM (#9509993)
It asked something like keeping the recovery partition. I naively said yes. I got everything from McAfee to Encyclopedia Britannica.
Re:Lenovo: researchers find 'massive security risk' by callesgg on Wednesday May 06, 2015 @12:42PM (#9499925)
They do put it on their website not publicly you need to login with a Microsoft(live or whatever) account.
Re:Lenovo: researchers find 'massive security risk' by basch on Wednesday May 06, 2015 @12:36PM (#9499879)
Always use an OEM Windows Disc. For Business Laptops they make it very easy. For Thinkpad, Latitude, and Precision laptops it's only a couple clicks.

Then install ThinkVantage System Update http://support.lenovo.com/us/en/documents/ht080136

or

Dell Command Update http://en.community.dell.com/techcenter/enterprise-client/w/...

Be careful of The ThinkVantage System Update, you dont need all the suggested installations.

Re:Lenovo: researchers find 'massive security risk' by chrisper on Wednesday May 06, 2015 @12:00PM (#9499617)
You can use http://www.microsoft.com/en-us/software-recovery to download a Windows ISO.