Comment 9TQH Re: Windows only?

Story

Computrace backdoor exposes millions of PCs

Preview

Windows only? (Score: 1, Informative)

by Anonymous Coward on 2015-05-26 13:37 (#9SBJ)

Back when I used to manage Windows laptops (mostly IBM/Lenovo), it seemed that:

(1) the Computrace thing was only capable of "hacking" your Windows install; wipe and install, say Ubuntu, and Computrace can't do anything.

(2) the BIOS usually offered three settings, forgive me that I'm fuzzy on the exact same wording, Inactive (meaning it hacks you and phones home but pretends it doesn't), Enabled (hacks you, phones home, if you've paid you can track it), Disabled (doesn't hack you, but doesn't un-hack you if you already are). The last two are permanent choices, once you pick either of those you can never undo it. Flashing the BIOS has no effect.

Anybody know if these are still true?

Re: Windows only? (Score: 0)

by Anonymous Coward on 2015-05-26 13:45 (#9SBK)

Good question. How could we check it.. if we don't know how this module works?

Re: Windows only? (Score: 2, Informative)

by evilviper@pipedot.org on 2015-05-26 21:35 (#9TBT)

It's public info how this thing works. They're trying to sell it to IT departments, so lots of info is right on their site.

It is based on a Windows application, and needs a FAT or NTFS file system on the hard drive to infect it, so non-Windows users are pretty safe.

Re: Windows only? (Score: 1)

by tanuki64@pipedot.org on 2015-05-26 22:51 (#9TFR)

It is based on a Windows application, and needs a FAT or NTFS file system on the hard drive to infect it, so non-Windows users are pretty safe.
All modern UEFI machines nowadays have at least one FAT file system. So, let's hope this is not enough and really a Windows is necessary.

Re: Windows only? (Score: 1)

by evilviper@pipedot.org on 2015-05-27 02:15 (#9TQH)

There's no need to "hope". All the firmware/BIOS does is drop an EXE and DLL on the file system. Maybe if WINE gets better, Linux users will be lucky enough to get infected, too.

Junk Status

Not marked as junk