Lenovo Service Disables Laptops With a Text Message
narramissic writes "Lenovo plans to announce on Tuesday a service that allows users to remotely disable a PC by sending a text message. A user can send the command from a specified cell phone number — each ThinkPad can be paired with up to 10 cell phones — to kill a PC. The software will be available free from Lenovo's Web site. It will also be available on certain ThinkPad notebooks equipped with mobile broadband starting in the first half of 2009. 'You steal my PC and ... if I can deliver a signal to that PC that turns it off, hey, I'm good now,' said Stacy Cannady, product manager of security at Lenovo. 'The limitation here is that you have to have a WAN card in the PC and you must be paying a data plan for it,' Cannady added."
Things a thief can still do:
Honestly, this is completely useless against even a moderately sophisticated thief.
My normal Slashdot cynicism wants to find a problem with this technology, but I can't so far, other than that a smart thief would just make sure to remove the WAN card and flash the BIOS (possibly with a new serial number or the remote disable, uh, disabled).
You win this time, Lenovo. *shakes fist*
It's better to vote for what you want and not get it than to vote for what you don't want and get it.
- E. Debs
You could always mod your laptop to generate a spark when the kill signal is received. Then all you need to do is pack it with C4.
'You steal my PC and ... if I can deliver a signal to that PC that turns it off, hey, I'm good now,'
Apart from not having a laptop or your data anymore.
I'm not sure that can be described as being 'good'.
So you're telling me there will be a GSM module in the laptop that is constantly connecting to my network to wait for such a kill signal? Like say, a tracing bug? I know it'll be a pain for the thief but what about me? What a craptacular idea. Having my laptop become my personal GSM tracking device. Where have I been? Wait lets ask my "anti theft"-device.
Even if they don't, this gives a false sense of security.
"if I can deliver a signal to that PC that turns it off, hey, I'm good now." Um, no, you're not. The thief can remove the hard drive and connect it to another PC to read its content.
FOX NEWS.com should be BANNED from television and internet. Have the Congress take it over and give us Truespeak.
The network card is not the only thing that is wrong with this, the fact that you now turned off the machine, states the machine will not turn back on...to give you a location of where it is.
Someone will open it up...change the network card with another...or just add a usb one...and there you go...problem solved.
This feature doesn't seem to be aimed at stopping blackhats or organized criminals, two of the more "intelligent" varieties. No, this thing is meant to royally screw Joe Crackhead.
The feature doesn't appear as if it's ever going to stop a sophisticated high-tech criminal, naturally. Nor does this seem the intent. Identity thieves and data miners don't even need possession of the laptop, so no good there. Even then, the new feature is easily defeated. Organized criminals tend to know what they're doing as well, and any safety measure can be defeated by competence and planning. Still, they're both rare enough.
No, this sounds perfect for the two-bit junkie, the most common of criminals. Brick the laptop, especially remotely, and suddenly it's worthless for him to offload for his fix.
Do I get bonus points if I act like I care?
How about a text message that causes the system to monitor the cameras output until it detects a face, takes a picture. Monitors the fingerprint sensor (if one is present) and waits for a fingerprint and then gets it gps position and finally sends email to 911@-current county-.gov
I think you need to find different friends
I think almost everyone has an asshole "friend" that would pull a stunt like that.
They say a little knowledge is a dangerous thing, but it's not one half so bad as a lot of ignorance. - Terry Pratchett
what makes you think they wouldn't just put the dead laptop itself on eBay? They claim it is "recently untested but worked a while ago" and some sucker buys it. I mean we're not talking about honest people here are we?
This is a decent idea in theory as a simple theft deterrent, but it makes me ask two questions:
Another question you have to ask is how fast and how completely word will spread about this feature on Lenovo laptops. That's what its success depends on. If a potential thief doesn't know about the feature and steals your laptop, he's not going to give it back because it doesn't work. Is this where the tracking come in?
Any time you provide a tool like this, it has the potentiall to be used against the owner as well, especially if someone else with access to the equipment understands the tool better than the owner does.
I can see several scenarios, some more plausible than others where another party might be inclined to use it to lock the owner out of access to his own data.
Yes if the other party has access to the machine, they can always cripple it by other means but the beauty of this is that it can be used even after that party apparently no longer has access.
This is not about data protection. It is about making the device unusable. Just like you can block your phone when it is stolen.
It will not stop thiefs of stealing your device. It will not protect your data. As far as I read it does not even claim to do that.
So, all the talk about how this forces the drive encryption to activate by requiring a shutdown rather than a suspend/hibernate wasn't about protecting data?
from TFA:
Since hard disk drive encryption will not work properly if the PC is running or in hibernation mode, this disable feature ensures that the data is secure by shutting the machine down and allowing the hard disk drive encryption to work. If and when the ThinkPad laptop is recovered, the user can restore the notebook, its settings and the data contained on the PC by entering a password.
So, there is nothing about protecting the data? Carry on.
An Estes igniter probably couldn't do it unless you dipped it in extra pyrogen. A Daveyfire electric match, on the other hand would probably be able to do it, though... they're used to ignite AP composite motors in high power rockets. Or, you could use the exhaust from a small (say a D or an E) AP motor... it has the benefit of lasting a lot longer than the match would, and doesn't need a LEP to get a hold of (Daveyfires are also used to ignite pyrotechnic displays, and other low-explosives, so IIRC, you need a permit to get them).