News for hackers. Stuff that matters.
Re:Lenovo: researchers find 'massive security risk' by dheera on Wednesday May 06, 2015 @02:36PM (#9500833)
In my case, when I received my Lenovo the first thing I did after opening the box was unscrew the case and change the drive for an SSD. Before even powering it on once. But yeah, if I used the default HDD, I'd at least reformat it first thing. I'm a Linux user though, so I'd have to reformat it anyway, but I'd still reformat it even if I were a Windows user.

Microsoft, Google, Apple, Ubuntu, et al. all make decent OSes that are designed to, um, work. I don't get why manufacturers don't get this simple fact and always have to tamper with stuff. For the less-technical people out there, can't we have a "Nexus" sort of PC manufacturer who prides themselves in selling with ONLY vanilla OSes and as-standard-as-possible hardware components?

Re:Lenovo: researchers find 'massive security risk' by joshstrange on Wednesday May 06, 2015 @02:57PM (#9500998)
It's the same problem with Android currently which is that when every manufacturer is using the same OS they have to find a way to differentiate. In Android this means custom skins, custom apps, and the like. On Windows this means "free" antivirus, custom apps, and the like. It would be nice if they all just completed on hardware but then it's really a race to the bottom.
Re:Lenovo: researchers find 'massive security risk' by jgroszko on Wednesday May 06, 2015 @03:57PM (#9501411)
Do consumers actually differentiate on these extras? I don't think I've ever heard anyone say "Yeah I picked up a Lenovo laptop because the antivirus they package is better than Dell's" or "I got a Samsung phone because their skins are better than HTC's" I'd love to see the market research that backs that idea up...

I thought the real reason manufacturers do this is because they're in a very low margin industry. For computers they get some deal with software companies to pre-install their product, and similar for cell phones with service providers.

Re:Lenovo: researchers find 'massive security risk' by yellowapple on Wednesday May 06, 2015 @04:50PM (#9501706)
I'm not sure if the "free" antivirus counts as "differentiating", since it's almost always - without fail - either McAfee or Norton.

With that said, differentiating by custom UIs on top of the base platform (i.e. the Android approach) would be much better, and would be actually-useful differentiation rather than a matter of "well which company's going to fuck me over the least with their preinstalled shitware?".

Re:Lenovo: researchers find 'massive security risk' by joshstrange on Wednesday May 06, 2015 @04:57PM (#9501768)
I personally dislike custom UI's shipped by the phone manufacturer because more often than not it leads to delays in OS updates due to them needing to adapt their UI to core changes. Customization (by manufacturers) can come at a very high price for the end user in terms of security and upgradability.
Re:Lenovo: researchers find 'massive security risk' by yellowapple on Wednesday May 06, 2015 @06:14PM (#9502137)
Right, but that's leaps and bounds better than "free" McAfee, no matter which way you skin it.

This also isn't exactly universally true. HTC was pretty responsive in getting Lollipop out to my One M8, for example, even with its whole "Sense UI" shebang.

Re:Lenovo: researchers find 'massive security risk' by dheera on Wednesday May 06, 2015 @10:35PM (#9503017)
Not to mention I find 90% of those custom UIs look horrible and cluttered compared to Google's original design.
Re:Lenovo: researchers find 'massive security risk' by _xander on Wednesday May 06, 2015 @03:29PM (#9501223)
Their perspective is that they're adding value through software (i.e. without spending more money on hardware). Not that I agree with this line of reasoning...
Re:Lenovo: researchers find 'massive security risk' by bediger4000 on Wednesday May 06, 2015 @04:13PM (#9501493)
Are you certain of this perspective or is this your best guess? I see people say this type of thing all the time, and I don't see any official statements corroborating them.
Re:Lenovo: researchers find 'massive security risk' by _xander on Thursday May 07, 2015 @07:08AM (#9504195)
I picked it up from here: http://www.strategyand.pwc.com/global/home/what-we-think/rep...

It's still only one sort of business strategy. Not every hardware company is necessarily pursuing this line.

Re:Lenovo: researchers find 'massive security risk' by pXMzR2A on Wednesday May 06, 2015 @03:28PM (#9501215)
> opening the box was unscrew the case and change the drive for an SSD

Does that not void the warranty?

Re:Lenovo: researchers find 'massive security risk' by ptaipale on Wednesday May 06, 2015 @04:38PM (#9501634)
This might depend on country, but in most countries that have some consumer protection, replacing a hard disk and similar reasonable operations are considered to be normal use of the machine, and the consumer law says that the consumer may not be prevented from doing this.

When the customer is not a consumer but a company, then things might be different (companies may be able to give away their rights in a way that consumers may not).

In EU countries, a manufacturer may offer a warranty, but this is just supposed to be an extra service; the seller is at least required to provide defect liability (i.e. a device must fixed if broken when it is sold and it must last for a reasonable time in reasonable use).

Re:Lenovo: researchers find 'massive security risk' by pXMzR2A on Thursday May 07, 2015 @06:31PM (#9508816)
This was helpful, thanks for the reply.
Re:Lenovo: researchers find 'massive security risk' by dheera on Wednesday May 06, 2015 @04:24PM (#9501552)
I have a T440p laptop which opens up very nicely and cleanly for user hard drive replacement. 2 screws and the whole back cover pops off, no "warranty void" stickers or any of that. I also upgraded the WiFi module to one that supports 5 GHz, and upgraded the RAM to 16GB, all without any fuss from the chassis. It was significantly cheaper to order the barebones system and do these upgrades myself than to order a more advanced system pre-assembled from Lenovo.

So I don't think changing a hard drive would void it. But also, I don't usually care about warranties. Things usually break only after the warranty expires, and for any electronic device, as long as it's a common enough model number it's usually possible to get spare parts on eBay when the time comes.

Re:Lenovo: researchers find 'massive security risk' by Mikeb85 on Wednesday May 06, 2015 @04:25PM (#9501559)
Depends on the laptop. Often 'Lenovo' translates to 'ThinkPad', where nearly every component is meant to be accessible and easy to switch out.
Re:Lenovo: researchers find 'massive security risk' by apenguin on Wednesday May 06, 2015 @05:35PM (#9501956)
Kinda offtopic, but this is a bit misleading. The T4x0s series, for instance, makes it very difficult to access anything -- and the T series is known as one of the good ones!

Also, Thinkpads all have a BIOS whitelist that prevents you from actually using the hardware you just easily installed.

Re:Lenovo: researchers find 'massive security risk' by dheera on Thursday May 07, 2015 @12:12AM (#9503243)
Wow, wouldn't have guessed. Haven't played with a T4x0s. I have a T4x0p (T440p) and it's extremely easy to access everything. But I just looked at some Youtube videos and the 's' is indeed a world of difference from the 'p'.
Re:Lenovo: researchers find 'massive security risk' by yellowapple on Wednesday May 06, 2015 @04:52PM (#9501719)
I've yet to encounter a manufacturer that considered a hard drive swap to be warranty-voiding. Capacity upgrades are generally perceived to be routine enough to be considered normal use; making it warranty-voiding would be like making the installation/removal of USB devices warranty-voiding.
Re:Lenovo: researchers find 'massive security risk' by scott_karana on Wednesday May 06, 2015 @05:40PM (#9501983)
ThinkPads encourage end-user repairs/modifications.

For example, If your HDD fails under warranty, they'll ship you a new one with the simple instructions to replace it. Only tool needed is a small Philips screwdriver. :-)

Re:Lenovo: researchers find 'massive security risk' by allthetime on Wednesday May 06, 2015 @03:46PM (#9501332)
Not if its a decent warranty. Its ok to replace HD and RAM on a 2010 MacBook pro.
Re:Lenovo: researchers find 'massive security risk' by pXMzR2A on Thursday May 07, 2015 @07:41PM (#9509141)
How did you afford a 6-year long mac warranty?