• 6 Posts
  • 127 Comments
Joined 2 years ago
cake
Cake day: November 14th, 2023

help-circle






  • Isnt lenovo the company that used to make the rugged military laptops that actually had Chinese or foreign backdoors installed?

    Edit: for those interested https://www.investigativeeconomics.org/p/government-still-buying-lenovo-laptops

    Edit 2 from a quick search. Lenovo laptops have faced allegations of containing backdoor vulnerabilities that could allow unauthorized access to data, particularly concerning military use. These concerns have led to bans on Lenovo products by various intelligence agencies due to potential cybersecurity risks.

     securityaffairs.com Wikipedia

    Lenovo Laptops and Backdoor Concerns

    Background on Lenovo’s Security Issues

    Lenovo, a Chinese technology company, has faced multiple allegations regarding security vulnerabilities in its laptops. These concerns primarily revolve around potential backdoors that could allow unauthorized access to sensitive data.

    Notable Incidents

    Year Incident Description 2008 U.S. military investigators reported finding backdoored chips in Lenovo motherboards, which allegedly logged keystrokes and transmitted data.

    2013Intelligence agencies in the U.S., UK, and Australia banned Lenovo PCs due to backdoor vulnerabilities discovered during testing.

    2015The Federal Trade Commission (FTC) charged Lenovo for pre-installing adware that created security vulnerabilities, leading to a settlement.

    2016The Pentagon warned that Lenovo computers could introduce compromised hardware into the Defense Department.






  • All you people with multiple profiles better have insane backup strategies and love doing it often and it’s a removed. You have to backup each profile and restore individually once booted back up starting with owner then one after another. It’s a nightmare.

    You also cannot use a single drive to backup each profile as the backup reading process that distinguishes each profile does not understand.

    Meaning the same drive cannot even be partitioned to have a save of each profile. It requires different drives entirely. The absolute simplest process for backups are having a flash drive for each profile. Graphene os is very cumbersome to backup and DOES NOT backup all data. Once you restore from a backup you’ll understand all the pains I say, including the data you have to restore separately. A good backup is only good if you know you can restore and it works.

    Hope this helps people refine their profile strategies. Most people avoid owner usage. I think there are pros and cons to that strategy. Like no pop up messages, notification delays, many other lacking options outside of owner profile like certain settings are unavailable to tweak. Including dev mode.

    I’ve used graphene for years, across multiple pixel generations. It’s not the white knight made out to be. Their project is very silo’d in security and lacks the true polish of a complete OS. I still use it and think it has great merit just note the drawbacks are many. There’s so much more to add. It is late in my timezone. Hope this helps someone.

    I think after testing multiple strategies that the best is to main owner, business and Google stuff 2nd, sketchy apps and things you don’t care if they get lost to delete the phone back to factory. Backup 1 and 2 only. 3 or more are throwaways. You have far more threats to lose your data from theft or social engineering by friends or family etc. than you do someone hacking multiple encrypted browsers with sandboxes of apps and then across encrypted profiles. Most of those scenarios are too complex but your imagination makes them appear big and real because of movies or TV.

    Reality is the true threats are often much easier and simple. Bad actors tend to be least effort to get their goal. Nor are most Jason Bourne.