News for hackers. Stuff that matters.
Re:Lenovo: researchers find 'massive security risk' by tsomctl on Wednesday May 06, 2015 @11:50AM (#9499533)
On a Thinkpad T500, you do need Lenovos special power management tools. Otherwise, the cpu fan will never spin up and your processor will overheat.
Re:Lenovo: researchers find 'massive security risk' by function_seven on Wednesday May 06, 2015 @12:10PM (#9499689)
Why the hell would the fan rely on software to tell it to spin up? That function should be in the firmware. The logic board should be able to handle cooling without any software running on the machine.
[deleted]
Re:Lenovo: researchers find 'massive security risk' by ethbro on Wednesday May 06, 2015 @01:39PM (#9500383)
*> Because a person might want to tune the performance of their laptop in regard to power consumption.

That's what exposing BIOS settings are for.

Re:Lenovo: researchers find 'massive security risk' by vidarh on Wednesday May 06, 2015 @01:25PM (#9500279)
You have described why there might be an interface for fan control that software could use. It does not justify not having the board opt for sane defaults.
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @03:29PM (#9501220)
i'm calling bullshit.

if you don't put special software on your linux before you boot a live cd, your thinkpad t500 fries itself.

sure it does.

Re:Lenovo: researchers find 'massive security risk' by tsomctl on Wednesday May 06, 2015 @08:07PM (#9502554)
I never said it would fry itself. It actually just turns itself off, and I have to remove the battery and power cord to get it to restart. And I only had this problem on Windows 7. Every major Linux distro I tried had proper power management support.
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Thursday May 07, 2015 @01:06PM (#9506589)
thanks for the clarification. you should have sent it back! it's probably out of warranty now. if you can switch off the ati graphics and use the intel graphics, that's a workaround.
Re:Lenovo: researchers find 'massive security risk' by ori_b on Wednesday May 06, 2015 @05:10PM (#9501838)
Of course it doesn't fry itself. Any CPU made in the last 20 years will throttle itself and run at lower speeds instead.
Re:Lenovo: researchers find 'massive security risk' by gkop on Wednesday May 06, 2015 @12:03PM (#9499640)
If that was the case with the T500, that's exceptional. My T520 and T530 have no problem spinning up their CPU fans in all sorts of configurations missing Lenovo's utilities.
Re:Lenovo: researchers find 'massive security risk' by minot on Wednesday May 06, 2015 @12:25PM (#9499805)
I have a Yoga Y 510 p. Windows barked at me after a few weeks of installing Windows 8.1 from scratch. It said I should get the latest version of the power utility from Lenovo. The power utility lets me spin up the fan which apparently can help get rid of dust. It also lets me select battery health mode as opposed to battery performance mode. When in battery health mode, the power supply does not charge the battery beyond about 60% and will not start charging before the power gets drained to about below 40%.

As far as I know, the power utility is the only thing I installed from Lenovo. The graphics drivers from nVidia came directly through Windows Update.

Should I be concerned? Should I uninstall the power management tools?

Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @01:25PM (#9500278)
Windows told you to install a power utility from Lenovo?

How would such a message come about? Do Lenovo pay Microsoft to put in error messages? Did it look for the answer to your problem online?

Re:Lenovo: researchers find 'massive security risk' by nandhp on Wednesday May 06, 2015 @02:26PM (#9500762)
I haven't used Windows much recently, but wouldn't it just be delivered as a driver through Windows Update?
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @03:22PM (#9501171)
which driver would tell you to install a power utility? how would that happen? what driver, could possibly get installed by windows update that would tell you to do that?
Re:Lenovo: researchers find 'massive security risk' by cmdrfred on Wednesday May 06, 2015 @02:39PM (#9500853)
Driver updates have been a part of windows update since 7.
Re:Lenovo: researchers find 'massive security risk' by nandhp on Wednesday May 06, 2015 @05:51PM (#9502028)
Windows Update has offered driver updates since Windows 98.
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @06:38PM (#9502232)
that will install bare bones drivers and services, but not startup daemons, control panel software or anything that could give you a message telling you you need to install a power utility.
Re:Lenovo: researchers find 'massive security risk' by minot on Thursday May 07, 2015 @01:37PM (#9506822)
I can attest that the little white flag in my notification tray linked me to lenovo support website telling me to get the power management utility.
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @01:27PM (#9500291)
so riddle me this, under what circumstances does the cpu fan not spin?

i'm having a hard time imagining a computer booting, without a cpu fan. OS: I'm starting up - so do all these things! as fast as possible!

Re:Lenovo: researchers find 'massive security risk' by nitrogen on Wednesday May 06, 2015 @11:06PM (#9503083)
It can be a combination of factors:

- The CPU fan might be controlled via ACPI.

- The operating system is supposed to run ACPI code provided by the BIOS.

- A BIOS can specify different sets of ACPI code for different operating systems, so Linux might get different code from Windows.

- The ACPI code provided by the BIOS for Linux might be broken, or lacking fan control.

- The hardware vendor may have decided not to provide APCI controls for anything, relying instead on proprietary interfaces.

Section 1.9 of https://www.kernel.org/doc/ols/2005/ols2005v1-pages-59-76.pd... looks like it might be related.

Re:Lenovo: researchers find 'massive security risk' by ori_b on Wednesday May 06, 2015 @05:13PM (#9501847)
I think you have it backwards: The CPU fan spins. Until the OS (or the AML bytecode that the OS interprets as a part of ACPI) tells it "the CPU is cool right now, you can slow down and save power".
Re:Lenovo: researchers find 'massive security risk' by throwawayaway on Wednesday May 06, 2015 @06:10PM (#9502109)
> On a Thinkpad T500, you do need Lenovos special power management tools. Otherwise, the cpu fan will never spin up and your processor will overheat.

I am replying to this guy. Never spin up? Overheat? He's completely wrong.

I know full well how it works, I don't have it backwards.

Re:Lenovo: researchers find 'massive security risk' by tsomctl on Wednesday May 06, 2015 @08:12PM (#9502572)
I'm pretty sure you're trolling, but I'll feed you. I wasn't fully clear. Really what I meant is that the fan always spins at a slow speed. When the processor heats up, the fan doesn't speed up, and eventually the cpu shuts down to protect itself. And I've spent 12 hours a day in front of this computer for the past 5 years. I know how it works.