Jump to content

Dell, toshiba and lenovo, three strikes OUT!

Bsmith
By Bsmith
in Tech News
 Share
Posted

Since this news hasn't reached official channels yet I will do my best to write it down here as detailed as possible and give as much information I can.

I am not responsible for any sites visited in mentioned article, I personal strongly recommend people not to click the links in aforementioned tweet/site unless they know what they are doing and possible dangers, since you might cross the line on what is legal and not!

In case this topic contains links or anything that goes against the CoC(due to this being a grey area to me) The mods are allowed to remove them, although I would appreciate if the tweets where left in place, since they are my source's.

 

on 3 December 2015- 7:36 A tweet got released with the following text.

 

 

The tweet by thewack0lian a security researcher claims to have found an exploit which is able to hit 3 OEMs through pre-installed applications.

Not much later another twitter account confirms that these OEMs are Dell, toshiba and lenovo and calls this a hattrick(3 goals within 1 game in football/soccer)

 

 

the link in the first tweet sends you to a page which has a small introduction directly pointed at the OEMs and a way to contact the researcher through IRC channels.

The message contains the following text.

 

 

Dell, Toshiba, Lenovo

Three OEMs. Three issues.

 

ToL presents to you 2015-12 three OEm fails at once!

a UAC bypass in Dell System Detect...

A SYSTEM registry read in Toshiba Service Station...

And a local privesc in Lenovo Solution Center!

 

Contact us at irc.rol.im #rol or http://roll.im/chat

Follow slipstream on twitter: @ thewack0lian

enjoy your pwnage! ;-)

 

Further on the page there are a couple of links, the first one being a download link which allows you to use these exploits and discover them yourself and maybe even safeguard yourself in case you run a system that is vulnerable for one of these exploits. The second link on this page is also a download link, but then for something rather different, once again aimed at lenovo, for who this truelly is the 3rd strike if you remember the earlier this year related superfish incident which involved lenovo.

 

Although I have not looked into this myself, I assume that the breaches found can be considered harmful until more information gets outside.

The dell related breach might be related to a bug reported earlier today, which allowed outside people to ping(check) a whole network form a single infected system.

 

 

 

Since this hasn't reached official channels yet and none of the named OEMs has out any official reports on this it is hard to tell how big the leaks are and how much abuse has already been done.

Although it doesn't seem like this researcher wants to do harm to the OEMs, it seems he took this approach to ensure their attention and alert people, since together those three OEMs make up a fair share, if not >50% of the prefab system market, which only enlarges possible dangers of the issues.

Like I said before, I am no professional on this subject, but I can see the potential dangers in this case they are able to go from bypassing a security line up to full system breach, considering one of the issues gives access to a "hidden" part of the OEM's solution centre which gets used for hardware checks and a extra safety measure.

 

Up till now this is everything I have been able to find about this, since I can't stay awake the whole night(would love to do that I will do my best to update this once again tomorrow.

 

UPDATE:

I have been trying to look into this more, without passing the barrier of my knowledge and not crossing the line of things that might be legally questionable.

Sadly the outcome didn't give any more insights into this or the way the breaches could be abused, so far I know non of the companies has let out any official news yet regarding this, they might put out a official respond once the issues have been solved or abused in such a way that it could endanger their whole eco system.

Looks like they try to keep it under the radar out of safety which is understandable, but for how long it's going to work?

May the light have your back and your ISO low.

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

GG, but I do hope they fix that ASAP

Hello there, fellow dark theme users

"Be excellent to each other and party on dudes." - Abraham Lincoln    #wiiumasterrace

 

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

will have to see how this unfolds.

Main Rig "Rocinante" - Ryzen 9 5900X, EVGA FTW3 RTX 3080 Ultra Gaming, 32GB 3600MHz DDR4

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

I don't have Lenovo Solution Center on my Y50 so...

i5 4670k @ 4.2GHz (Coolermaster Hyper 212 Evo); ASrock Z87 EXTREME4; 8GB Kingston HyperX Beast DDR3 RAM @ 2133MHz; Asus DirectCU GTX 560; Super Flower Golden King 550 Platinum PSU;1TB Seagate Barracuda;Corsair 200r case. 

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

who the hell buys a oem pc..and doesn't format it right away and clean install except noobs..and they wouldn't even care about this

If you need remote help fixing something on your computer

I can help over Teamviewer if you wish

just msg me on my profile

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

who the hell buys a oem pc..and doesn't format it right away and clean install except noobs..and they wouldn't even care about this

Suddenly noobs have no right to their privacy?

QUOTE ME IN A REPLY SO I CAN SEE THE NOTIFICATION!

When there is no danger of failure there is no pleasure in success.

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

Suddenly noobs have no right to their privacy?

they don't care about privacy...everyone posts there full f'ing life on facebook

If you need remote help fixing something on your computer

I can help over Teamviewer if you wish

just msg me on my profile

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

Uh huh.  Carry on.

People make me sighh... 

 

sighhhhhh

Fedex Ground must be on Horse back, It took 7 days to go 200 miles

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

they don't care about privacy...everyone posts there full f'ing life on facebook

 

 

Uh huh.  Carry on.

 

 

People make me sighh... 

 

sighhhhhh

Working at a computer repair shop and well... he does have a point. Noobs suck at caring about their privacy. 

Space Journal #1: So Apparently i  was dropped on the moon like i'm a mars rover, in a matter of hours i have found the transformers on the dark side of the moon. Turns out its not that dark since dem robots are filled with lights, i waved hi to the Russians on the space station, turns out all those stories about space finding humans instead of the other way around is true(soviet Russia joke). They threw me some Heineken beer and I've been sitting staring at the people of this forum and earth since. 

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

Working at a computer repair shop and well... he does have a point. Noobs suck at caring about their privacy.

This generalization is painful... @Samfisher makes a valid point. Or consider laptops assigned for company use that still have these software packages on them.

Desktop:     Core i7-9700K @ 5.1GHz all-core = ASRock Z390 Taichi Ultimate = 16GB HyperX Predator DDR4 @ 3600MHz = Asus ROG Strix 3060ti (non LHR) = Samsung 970 EVO 500GB M.2 SSD = ASUS PG279Q

 

Notebook:  Clevo P651RG-G = Core i7 6820HK = 16GB HyperX Impact DDR4 2133MHz = GTX 980M = 1080p IPS G-Sync = Samsung SM951 256GB M.2 SSD + Samsung 850 Pro 256GB SSD

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

This generalization is painful... @Samfisher makes a valid point. Or consider laptops assigned for company use that still have these software packages on them.

I know its a generalization and i know im insulting some when i made the comment. But i was speaking from my experience working at my job. The people who dont know how to use their computers or phones as well as others or to their full potential dont care much about their privacy. The business clients sure as hell do for the few dental and law offices we install computers for, but the old people dont, and most of the young generation that come in to fix their phones and macbooks acknowledge the fact that their privacy isnt really private with the things they do, but they dont care. 

Space Journal #1: So Apparently i  was dropped on the moon like i'm a mars rover, in a matter of hours i have found the transformers on the dark side of the moon. Turns out its not that dark since dem robots are filled with lights, i waved hi to the Russians on the space station, turns out all those stories about space finding humans instead of the other way around is true(soviet Russia joke). They threw me some Heineken beer and I've been sitting staring at the people of this forum and earth since. 

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

Now, who's left to trust? Acer??

This generalization is painful... @Samfisher makes a valid point. Or consider laptops assigned for company use that still have these software packages on them.

I've had to deal with one of such laptops recently... A Lenovo G40 (iirc)... The bloatware is real... I was itching to get all the unnecessary stuff uninstalled but had to hold back as it was a company-issued laptop...

Mutsuki:

CPU: AMD A8 5600K @ 4.2GHz | Motherboard: Gigabyte GA-F2A55M-DS2 (rev. 1.0) | RAM: 2 x Kingston Low Profile 4GB 1333MHz | GPU: Sapphire R7 260X OC 2GB DDR5 2xDVI | HDD0: Seagate Barracuda 500GB 7200RPM 3.5" (SATA II) | HDD1: WD Elements (WD Blue 1TB 3.5" SATA II) connected via USB 2.0 | HDD2: Seagate Barracuda 1TB 7200rpm (SATA II) | DVD: Samsung DVD+RW combo drive | PSU: FSP Hexa 600W | Case: Aerocool PGS V | Cooling: DeepCool Gammaxx S40 (stock fan), 2x 120mm Aerocool fan 1xDeepCool 120mm fan from a scrapped heatsink

eMachines D732Z | CPU: Intel Pentium D P6100 | GPU: Intel HD 3000 | RAM: 2x Kingston ValueRAM 2GB 1066MHz SODIMM | HDD: Hitachi 320GB 5600RPM

Acer ES13 | CPU: Intel Pentium N4200 | GPU:  Intel HD 505 | RAM: 1x 4GB (unidentified) DDR3L | HDD: (unidentified) 500GB 5600RPM

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

they don't care about privacy...everyone posts there full f'ing life on facebook

as much as i'd want to shun you for saying this, i have to say i agree here...

 

spending most of my time around "noobs" i have come to realise they wouldnt even mind if the NSA was watching them trough their laptop webcam 24/7

"i've got nothing to hide"

Link to comment
Share on other sites
Link to post
Share on other sites
Posted
  • Author

Now, who's left to trust? Acer??

-snip-

Time to drop this bomb,

apple.....

May the light have your back and your ISO low.

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

Time to drop this bomb,

apple.....

Mutsuki:

CPU: AMD A8 5600K @ 4.2GHz | Motherboard: Gigabyte GA-F2A55M-DS2 (rev. 1.0) | RAM: 2 x Kingston Low Profile 4GB 1333MHz | GPU: Sapphire R7 260X OC 2GB DDR5 2xDVI | HDD0: Seagate Barracuda 500GB 7200RPM 3.5" (SATA II) | HDD1: WD Elements (WD Blue 1TB 3.5" SATA II) connected via USB 2.0 | HDD2: Seagate Barracuda 1TB 7200rpm (SATA II) | DVD: Samsung DVD+RW combo drive | PSU: FSP Hexa 600W | Case: Aerocool PGS V | Cooling: DeepCool Gammaxx S40 (stock fan), 2x 120mm Aerocool fan 1xDeepCool 120mm fan from a scrapped heatsink

eMachines D732Z | CPU: Intel Pentium D P6100 | GPU: Intel HD 3000 | RAM: 2x Kingston ValueRAM 2GB 1066MHz SODIMM | HDD: Hitachi 320GB 5600RPM

Acer ES13 | CPU: Intel Pentium N4200 | GPU:  Intel HD 505 | RAM: 1x 4GB (unidentified) DDR3L | HDD: (unidentified) 500GB 5600RPM

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

as much as i'd want to shun you for saying this, i have to say i agree here...

spending most of my time around "noobs" i have come to realise they wouldnt even mind if the NSA was watching them trough their laptop webcam 24/7

"i've got nothing to hide"

Surprisingly it's the other way round with me, maybe it's a cultural thing but almost every non-computer guy I know has a sticker on his webcam and most of their social media accounts are private.

If you want to reply back to me or someone else USE THE QUOTE BUTTON!                                                      
Pascal laptops guide

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

Surprisingly it's the other way round with me, maybe it's a cultural thing but almost every non-computer guy I know has a sticker on his webcam and most of there social media accounts are private.

"cultural thing"

the feels bro...

please help me get out of here.. xD

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

Damn they keep finding these NSA loopholes for access:p

Details separate people.

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

I don't have that software installed so I don't caaaare, I love it! :P

Archangel (Desktop) CPU: i5 4590 GPU:Asus R9 280  3GB RAM:HyperX Beast 2x4GBPSU:SeaSonic S12G 750W Mobo:GA-H97m-HD3 Case:CM Silencio 650 Storage:1 TB WD Red
Celestial (Laptop 1) CPU:i7 4720HQ GPU:GTX 860M 4GB RAM:2x4GB SK Hynix DDR3Storage: 250GB 850 EVO Model:Lenovo Y50-70
Seraph (Laptop 2) CPU:i7 6700HQ GPU:GTX 970M 3GB RAM:2x8GB DDR4Storage: 256GB Samsung 951 + 1TB Toshiba HDD Model:Asus GL502VT
Windows 10 is now MSX! - http://linustechtips.com/main/topic/440190-can-we-start-calling-windows-10/page-6

Link to comment
Share on other sites
Link to post
Share on other sites
Posted
  • Author

I have been trying to look into this more, without passing the barrier of my knowledge and not crossing the line of things that might be legally questionable.

Sadly the outcome didn't give any more insights into this or the way the breaches could be abused, so far I know non of the companies has let out any official news yet regarding this, they might put out a official respond once the issues have been solved or abused in such a way that it could endanger their whole eco system.

 

 

 

"cultural thing"

the feels bro...

please help me get out of here.. xD

 

Here in the Netherlands it's kinda the same way, alot of non tech savy people coverd of their laptop webcams since it became known how easily they can be abused by both governments and hackers.

 

 

Damn they keep finding these NSA loopholes for access:p

 

It's unknown if these loopholes are or have been used by the NSA, the possibility of it being that way is actually quite big considering the possible size of this, if it would ahve reached official channels.

 

 

I don't have that software installed so I don't caaaare, I love it! :P

 

Most of the time I would think the same way, but considering that nearly every school, office, company or whatever decently sized corp runs Dell systems most of the time, this threat could be more serious and increase in danger when it stays under the radar.

May the light have your back and your ISO low.

Link to comment
Share on other sites
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing Tech News

×