The fingerprint reader only enabled the USB connection, and nothing on the card was actually encrypted.
Pathetic
They have a really long history of doing this stuff. Including outright espionage.
https://en.wikipedia.org/wiki/Lenovo#Security_and_privacy_incidents
https://legioncyber.com/insights/lenovos-security-failures-and-hidden-risks/
This last one is more about just poor quality.
https://www.lawsuitupdatecenter.com/lenovo-class-action-lawsuits.html
Never understood the thinkpad craze. “Military grade” means cheap as fuck.
“Military grade” means cheap as fuck.
Cheap as fuck yes, but also a giant rip-off as well. It isn’t military grade without that skimming off as much of that military industrial complex dollar as possible.
The old ones were durable as hell.
You mean when IBM made them?
And for a few years after, until Lenovo started lifecycling them and the enshittification began.
are* durable as hell, the old ones are still around… because they’re very durable!
“Close enough for government work” is a saying for a reason.
Well… this is just another reason to never activate biometrics. Police typically need a warrent for passwords, not for biometrics.
Even with passwords they just attach some Israeli hacker machine and they’ll break in
No that only works in some instances. A correctly configured not iOS computer should be resistant to that.
Until they find a CVE they can use sure
Plenty of those in motherboards, TPMs, CPUs, software, OS, etc.
If the encryption is correctly configured then that doesn’t matter. The only vulnerability that matters is in the encryption algorithm and that’s very difficult to brute force or get a vulnerability for. Though at some point you’re dealing with rubber hose cryptography where you have do deal with not knowing the password yourself.
biometrics were never safe to begin with.
you cant be forced to give a password.
but they can physically force your finger onto a reader. physically restrain you to do a face scan, and forcibly hold you down for an eye scan. They are not safe, or secure. Biometrics are less secure than setting your password to 1234 and carving “password is 1234” into your keyboard.
I mean… you can absolutely be forced to give up your password. They just might keep it quiet…
No, you choose to give up the password. You can die without ever giving up. You can choose to go to jail without giving it up. You can choose to be fired without giving it up.
Even if you die, your biometrics can still be used against you, against your will
With or without biometrics, you can just take the sd card out and boom, no need for a finger print
So you can bypass the fingerprint physically? Is that right?
How did they think they could get away with that
They’re the people making the next GrapheneOS hardware. There’s some interesting cognitive dissonance.
The GrapheneOS people are using CPU level hardware security functions provided by Qualcomm, I’m assuming the partnership means they get proper access to drivers and Motorola / Lenovo won’t be modifying the CPU.
Now there’s still plenty of room for shenanigans in other places like the modem and various interconnects and the motherboard and all that, but at least there’s some baseline security provided there using ARM secure boot and hardware level exploit protection in the CPU, etc.
Lenovo makes Motorola? Or are you talking about something else?
Motorola has been owned by Lenovo since 2014. https://news.lenovo.com/pressroom/press-releases/lenovo-completes-full-acquisition-motorola-mobility-from-google/
You can even buy Motorola smartphones from Lenovo’s website. https://www.lenovo.com/gb/en/c/phones/moto/
Oh shit! I didn’t know. Thanks!
It somehow feels like everything is owned by a handful of companies… Oh, that company? It was its own thing in the 1980s, but X brought them out. X also brought Y, Z and C. There’s no competition. X owns everything.
Yeah, late stage capitalism is a bitch.
The actual people involved in phone design atd manufacture wouldn’t even have a manager in common with the people that produced this
I seriously believe that this thing was a white-label.
Let’s hope that the 'partnership 'means the GOS team will be auditing the actual hardware for the GrapheneOS compatible phones next year.
Fairphone here I come.
Lenovo slap their brand on all sorts of mass produced tat in their colours. All the tech companies do it for these sorts of products.
“Encrypted with ROT-0!”
Lenovo has always been trash; like it’s not that bad style. The best was the
clitmouse thing.
Just ran all the way to the informal side of the spectrum
Keyboard clit
I can’t find it on mine…
It’s right next to the G spot.
Track point navigation is a myth.
In the middle should be “eraser.”
LenOhNo.
lol I like that
Apparently the mouse nipple is good for people working out in the field with big gloves on. I don’t for the life of me know why they put it in the middle of the fucking keyboard instead of in any of the empty space beside the trackpad, but it has a use, allegedly.
Because it’s for typing. And most people who type on QWERTY keyboards do so by using a pretty standard position, where pointer fingers fall on F and J.
Bu putting the clit halfway between those anchor points, you get a thumb that’s almost always available for any cursoring.
- this makes sense for the original setup, fair.
- I think with the modern usage, it would be cool to have it moved or duplicated.
The actual use is for text/document editing, you don’t need to move your hands away from the keyboard to quickly select something with the clitmouse. Thinkpads are business laptops.
Well, it’s Lenovo. So…
From the article it practically sounds like an Aliexpress rebranding, good gravy
so it’s literally a woo-woo drive?
FU100 lmao
for context
The FU100 is “just an SD card in a fancy case,” Li said in a March conference talk. It is, as a result, trivial for anyone with physical access to get to the drive’s data.
I bet some engineer was tasked with the whole thing, under budget, over extended, and had their whole team cost savings cut from covid when they built that.
Lenovo has fallen from grace. The last decade they were just riding the reputation they had when they were under IBM, while they cut cost and lowered quality.
Well, I guess that explains what the “FU” in the model number stands for!
Why though, just so it has faster speeds?
Probably made by a third-party company run by con men who just slapped Lenovo’s preferred exterior casing on it.
