Slashdot Mirror


FBI Investigating Mystery Laptops Sent To US Governors

itwbennett writes "The FBI is trying to find out who is sending laptops to state governors across the US, including the governors of Wyoming and West Virginia. The West Virginia laptops were delivered to the governor's office on August 5, according to the Charleston Gazette, which first reported the story. Kyle Schafer, West Virginia's chief technology officer, says he doesn't know what's on the laptops, but he handed them over to the authorities. 'Our expectation is that this is not a gesture of good will,' he said. 'People don't just send you five laptops for no good reason.'"

243 of 329 comments (clear)

  1. Me by earthloop · · Score: 4, Funny

    If the governors don't want them, I'll have them.

    1. Re:Me by Anonymous Coward · · Score: 5, Funny

      As a resident of West Virginia, I assure you it wasn't a trust issue. Rather, the laptops did not have 28.8 modems to connect to the local bbs rendering them useless in the Mountain State.

      West Virginia - keeping Hughes Net in business since 2005.

    2. Re:Me by sotw81 · · Score: 2, Funny

      I don't know what part of West Virginia you live in, but we've had cable service for years. Heck, even the south has had broadband for 5+ years.

    3. Re:Me by HikingStick · · Score: 1

      Wow. Can't take a joke?

      --
      I use irony whenever I can, but my shirts are still wrinkled...
    4. Re:Me by Alien+Being · · Score: 1

      Maybe they just couldn't figure out where to load the ammo.

    5. Re:Me by CmdrPorno · · Score: 2, Funny

      If the governors don't want them, I'll have them.

      I'd like mine with an Argentinean girlfriend and some unexplained hiking trips, please.

      --
      Sent from my iPhone
    6. Re:Me by NotBornYesterday · · Score: 5, Funny

      I just got off the phone with HP customers service, and boy, am I pissed. I ordered 5 new laptops a week ago, and no one can tell me where the hell they are.

      --
      I prefer rogues to imbeciles because they sometimes take a rest.
    7. > "People don't just send you five laptops for no good reason."

      No. They usually have a good reason such as vote for or against this bill.

      Yeah, out of the blue, anonymously and without a suggestion of tit-for-tat "legal" bribery is definitely odd.

      Less damaging than the "good reason", but odd.

      --
      (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
    8. Re:Me by ThurstonMoore · · Score: 1

      I live in WV and Hughesnet is the only option for me.

    9. Re:Me by strat · · Score: 1

      You mean with all those sparkly new highways, no one has seen fit to string fiber along the right-of-way? It seems to me you could give a little spool to each group that volunteers to "adopt a highway" and have a network in a month.

      Well maybe 6 months. West Virginia does have a LOT of highways.
      (if you don't know what this means, look up "Senator Robert Byrd")

    10. Re:Me by severoon · · Score: 1

      I've heard of politicians being fearful of technology, but this is ridiculous...

      --
      but have you considered the following argument: shut up.
    11. Re:Me by Hognoxious · · Score: 1

      Maybe they were Sony ones, which come preloaded.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  2. If they don't want them by snl2587 · · Score: 2, Interesting

    I'll take them.

    Seriously, they don't have one good tech guy who could wipe the drives/check the internals for rogue hardware?

    1. Re:If they don't want them by 1s44c · · Score: 4, Interesting

      Seriously, they don't have one good tech guy who could wipe the drives/check the internals for rogue hardware?

      Not at a cost less than the price of one new laptop. Smart hardware people with time to prepare could hide just about any device just about anywhere. Or hide nothing at all just so people waste time looking for what isn't there.

      I get the impression this is just a prank by someone with a little too much free cash and a bad sense of humor. Either that or a marketing thing by a laptop manufacturer.

    2. Re:If they don't want them by jamesh · · Score: 4, Insightful

      Show me an IT monkey who could tell the difference between two standard network adapters, one of them fine and the other containing a counterfeit MAC/PHY IC that's been fucked with by Chinese intelligence services...

      And for the time taken to vet the laptop for such things, you might as well throw it out.

      On the other hand, if you actually did want to get government personnel using subverted hardware then I think just sending it to them anonymously is probably not a good way of going about it... so maybe the criminals aren't that smart. Or maybe that's what they want you to think?

    3. Re:If they don't want them by Jeremy+Erwin · · Score: 2, Insightful

      And if it's a hardware issue? I'd donate them to a educational organization (after wiping them down for malware)

    4. Re:If they don't want them by sopssa · · Score: 3, Insightful

      You wipe the OS and install a new one. You clean it up from the default bloatware and hook it to the network. You analyze the connection and if there is no communication the devices are safe.

      You seem like a intelligent gentleman providing great solution for both the latest gov IT attacks AND the recession!

      If this happens, I can see both China's computer espionage and Kim Jong's heads exploding from the sore happiness!

    5. Re:If they don't want them by Corporate+Troll · · Score: 3, Insightful

      That's a bit naive, isn't it? Perhaps there is a hardware trigger that will start sending out data when receiving a specific packet and when it doesn't, it stays silent? Or a timed device (6 months from first power-on)... There are many ways that those machines may be compromised without even being affected by the operating system that's on it.

    6. Re:If they don't want them by Krneki · · Score: 1

      In the end they will be analyzed, if they are safe what should be do with them. Burn them?

      --
      Love many, trust a few, do harm to none.
    7. Re:If they don't want them by Krneki · · Score: 1

      What issue? Hidden malicious code or reliability?

      --
      Love many, trust a few, do harm to none.
    8. Re:If they don't want them by thue · · Score: 3, Insightful

      > And for the time taken to vet the laptop for such things, you might as well throw it out.

      Except that if I were the CIA, I would pay a lot more than the price of 5 laptops to know who was spying on me, and how.

    9. Re:If they don't want them by Sun.Jedi · · Score: 1

      I get the impression this is just a prank by someone with a little too much free cash and a bad sense of humor.

      You may have meant "someone with a little too much stolen cash". This is too blunt for anyone with the resources to seriously mod the HW in a meaningful way for intelligence gathering or DoS. My gut reaction is the laptops have a trojan/worm on them, and were intended for the dumber staff to go "cool! free loot!" for the LULZ.

    10. Re:If they don't want them by Krneki · · Score: 1

      This is Sci-Fi, if the device is waiting for a signal then it is listening to a port. If it is waiting 6 months, well, it is possible, but very unlikely.

      I'm not saying they should use them, because every major organization should use standardize equipment. Just discussing how they can be checked for malicious code.

      --
      Love many, trust a few, do harm to none.
    11. Re:If they don't want them by Jeremy+Erwin · · Score: 2, Informative

      Hidden, malicious hardware.

    12. Re:If they don't want them by Beezlebub33 · · Score: 2, Insightful

      Which is why you forward them to the CIA and have _them_ figure the whole thing out.

      Actually, you would have to be pretty stupid to send them to the CIA. You'd send them to the FBI (as TFA mentions), who would try to figure out if it was foreign or domestic, and then they would get the real experts (NSA) to do the technical work.

      --
      The more people I meet, the better I like my dog.
    13. Re:If they don't want them by nizo · · Score: 1

      My guess is, "return them to some company somewhere that screwed up an order".

    14. Re:If they don't want them by Corporate+Troll · · Score: 1

      This is Sci-Fi, if the device is waiting for a signal then it is listening to a port. If it is waiting 6 months, well, it is possible, but very unlikely.

      Sci-Fi? So Wake-on-LAN doesn't exists?

    15. Re:If they don't want them by HikingStick · · Score: 1

      Right. To be more convincing, the laptops could have been shipped with glossy marketing materials that gush over the newest bells and whistles. They could have been sent as examples of the types of laptops that could be deployed to school children, loaded with electronic textbooks. If the sender really wanted these units powered on and used, they would have provided a plausible cover story.

      My guess? Some security-minded grad student's research project to see what the rate of using unknown and unexpected hardware might be.

      --
      I use irony whenever I can, but my shirts are still wrinkled...
    16. Re:If they don't want them by Krneki · · Score: 1

      Wake-on-LAN needs port 9 to be forwarded to the machine in order to work (plus some other stuff). Not exactly a secure network environment by any standard.

      --
      Love many, trust a few, do harm to none.
    17. Re:If they don't want them by Glonoinha · · Score: 2, Funny

      Put it in the field and fly a Huey Gunship in the general vicinity.
      If it runs, it's VC.
      If it doesn't run, it's well disciplined VC.

      I know what you're thinking ... "How do you shoot innocent laptops and desktops?"
      It's easy - you just don't lead them as much!

      --
      Glonoinha the MebiByte Slayer
    18. Re:If they don't want them by geekgirlandrea · · Score: 2, Interesting

      How would you know if it's listening? It doesn't have to be software tampering. All it would take is a counterfeit ethernet chip that recognizes some magic number in a packet, maybe sends out some really innocuous-looking packet once in a while as a location beacon (make some known DNS query or something), and then does DMA into the host's memory on command. Nothing unusual at all in the traffic except some ordinary-looking location signal, until its owner starts using it as a hardware rootkit.

    19. Re:If they don't want them by brainboyz · · Score: 1

      Yes, but the network is NOT required for communication. A simple cellular modem circuit striped of its casing and mounted internally could do the trick. If it's a spy setup though, there are many ways to do better. Non-standard transmitters would be easy to add to almost any board in the computer and be very hard to detect w/o specialized gear (low-power, narrow-band transmitters to receivers across the street).

    20. Re:If they don't want them by jecblackpepper · · Score: 1

      Which network do you monitor? The wired ethernet? The "visible" wireless connection? Maybe it communicates wirelessly with a hidden wireless network adaptor only at set times of day (when the guy who sent the laptop is sitting outside the Gov's office waiting to receive the data).

      It's too much hassle to make unknown hardware secure, so donate the laptops to charity (after wiping the software) instead or bin them.

    21. Re:If they don't want them by saider · · Score: 1

      And how much would a thorough analysis cost?

      --


      Remember, You are unique...just like everyone else.
    22. Re:If they don't want them by Tubal-Cain · · Score: 1

      Wake-on-LAN needs port 9 to be forwarded to the machine in order to work (plus some other stuff).

      Sure, traditional Wake-on-LAN does...

    23. Re:If they don't want them by IchNiSan · · Score: 2, Insightful

      We really need to know, will it blend?

    24. Re:If they don't want them by gd2shoe · · Score: 1

      ANY wake-on-lan will require some type of forwarding in order to be entirely passive. Again:

      Not exactly a secure network environment by any standard.

      (Not saying that they're networks are sufficiently secure, only that this should not be possible.)

      --
      I won't join Slashcott. OTOH, If Beta goes live, I just won't be back until it's fixed. Sorry Dice.
    25. Re:If they don't want them by Corporate+Troll · · Score: 1

      Laptops are by definition not bound to one network. It is enough to be connected directly to the net once...

    26. Re:If they don't want them by GofG · · Score: 1

      What if the computer is programmed to connect to an adhoc network, created by the hacker's computer as he walks through the building the compromised computer is in? THAT network wouldn't even have to have any port forwarding and could be concealed to restrict monitoring.

      --
      GFA/M/S d-- s: a--- C++++ UBL++$ P+ L+++ !E- W++ N+ !o K- w--- !O !M !V PS++ PE Y+ PGP+ t+++ 5- X+ R tv@ b++ DI++++ D+ G
  3. OLPG by MichaelSmith · · Score: 4, Funny

    Its obviously the one laptop per Governor project.

    1. Re:OLPG by zoomshorts · · Score: 2, Funny

      Compaq 15.6" CQ60-410US Notebook PC, I got mine for $298.00. Not a real cost.
      Let's guess, one drunk, $1600.00 laying around and surf the web for governor's
      addresses.

      The malware? IE 8.0 plus VISTA Home edition. Instant coup.

    2. Re:OLPG by Ed_1024 · · Score: 1, Funny

      Decepticons!!

    3. Re:OLPG by Anonymous Coward · · Score: 1, Funny

      More like "No Child Porn Left Behind".

      "Five governors in a child pornography scandal after hidden files found on their laptops! News at 11."

  4. Are you kidding me? by zach_the_lizard · · Score: 4, Funny

    "People don't just send you five laptops for no good reason."

    Are you kidding me? I've received hundreds of free laptops from total strangers. In fact, I trust them so much that I do all my banking on them. After all, this nice downtrodden Nigerian prince has personally guaranteed the security and stability of all these laptops. Now, let me go check my bank balance....OMGWTFBBQ^*#^$@))*#$!!!!!

    NO CARRIER

    --
    SSC
    1. Re:Are you kidding me? by sopssa · · Score: 4, Funny

      NO CARRIER

      I understand breaking the monitor and keyboard in such situation, but you actually went out of the house, walked to your tool shack, picked up an axe and smashed your telephone line with it? That's a little bit aggressive, dont you think?

    2. Re:Are you kidding me? by Anonymous Coward · · Score: 1, Funny

      I thought NO CARRIER meant that his internet connection caused a power spike in his house and killed his air conditioner.

    3. Re:Are you kidding me? by Dystopian+Rebel · · Score: 1

      "People don't just send you five laptops for no good reason."

      They do if the senders are expecting a positive review!

      At the same time, I don't think that the incoherent and vaguely grammatical comments of daft and corrupt US politicians will help sales much.

      I could be wrong, though. I was one of the ones who believed Cmdr Taco was right about the iPod.

      --
      Rich And Stupid is not so bad as Working For Rich And Stupid.
    4. Re:Are you kidding me? by destuxor · · Score: 1

      LOCAL AREA CONNECTION IS NOW CONNECTED.
      Smashed the telephone line? No, that madman kicked the damn telephone pole over!

    5. Re:Are you kidding me? by NickyGotz22 · · Score: 1

      So that means i shouldn't give the prince my bank account # too???

      --
      Test me and I will chronicle your pain - The Archivist (Diablo 3)
    6. Re:Are you kidding me? by mathx314 · · Score: 1

      Huh. I thought it meant they had run out of pigeons.

    7. Re:Are you kidding me? by BooRolla · · Score: 1

      You fool! How do you expect him to answer that question? His phone line has been AXED!!!

    8. Re:Are you kidding me? by PsychoElf · · Score: 1

      Maybe he lives in Venezuala and it was the video games that made him do it...

    9. Re:Are you kidding me? by The+Moof · · Score: 1

      Well... anything worth doing is worth doing right.

    10. Re:Are you kidding me? by TheQuantumShift · · Score: 1

      You gotta stop the bits from getting loaded onto those tube-driving dump trucks somehow...

      --

      Shift happens. Fire it up.
    11. Re:Are you kidding me? by jonpublic · · Score: 1

      It's a trick. Get an axe.

    12. Re:Are you kidding me? by Zen+Hash · · Score: 1

      And it typed in NO CARRIER for him typed in the catchpa and hit preview and submit twice!

      Only unauthenticated anonymous cowards are required to type in a captcha.

      --
      Here I sit, all broken hearted.
      Came to poop, but only farted.
    13. Re:Are you kidding me? by mysidia · · Score: 1

      No, his ISP banned his phone number and killed the line after the malware on the laptop sent out 500000000000 viagra ads after being online for 15 minutes.

    14. Re:Are you kidding me? by 2muchcoffeeman · · Score: 1

      If only I had mod points ....

      You made me laugh and spew Coke all over the keyboard. Excellent work!

      --
      Prevent Windows piracy. Use Linux instead.
  5. If the govenors do not want them... by Skinkie · · Score: 5, Interesting

    ...at least give every incoming laptop to a nearby school. I mean, spying on students happens already anyway.

    --
    Support Eachother, Copy Dutch Property!
    1. Re:If the govenors do not want them... by Antique+Geekmeister · · Score: 1

      Replace and save the hard drive for legal analysis, with a good chain of ownership in case of lawsuits.

      I'd also be concerned about electromechanical key loggers. Governors handle some very sensitive data, and should not have their keystrokes logged. But scrubbing the drives with a good Linux live CD makes them safe enough for casual use.

    2. Re:If the govenors do not want them... by apoc.famine · · Score: 1

      If this was just a limited-funds, limited experience job, replacing the hard drive would be enough. The bigger issue is if this is a well-funded, experienced spy operation. Then you have to be suspicious of all the hardware, from the keyboard to the wireless and wired ports.

      --
      Velociraptor = Distiraptor / Timeraptor
  6. Interesting angle on social engineering... by damburger · · Score: 5, Interesting

    You get the laptops delivered to a big enough organisation, whoever signs for them assumes *somebody* ordered them for a reason, but can't find out who. So they stash them somewhere. Fast forwards to when someone new joins the organisation and needs a laptop, somebody mentions there are a couple lying around in boxes and bingo, you've got malware in through the front door without touching an Internet connection.

    Makes me wonder, how often this has been done successfully to less vigilant offices, worked, and we haven't heard about it.

    --
    If we can put a man on the moon, why can't we shoot people for Apollo-related non-sequiturs?
    1. Re:Interesting angle on social engineering... by jollyreaper · · Score: 4, Interesting

      That's an expensive hack! Especially when the typical methods are practically free. I wonder how effective it is.

      You know, it might be cheaper to just "accidentally" drop usb drives near the office or, if you're not targeting a particular office specifically, leave the drives in coffee shops and local restaurants. Someone takes it home and tries looking at it, pwnage.

      --
      Kwisatz Haderach
      Sell the spice to CHOAM
      This Mahdi took Shaddam's Throne
    2. Re:Interesting angle on social engineering... by scheuri · · Score: 2, Interesting

      That is what I thought first, too. Well, I still think it is a very interesting angle on social engineering as you put it.

      However, if you do that with a large enough company to get "undetected" (assuming smaller companies would recognise something fishy is going on) there should be a large risk that this laptop goes to the IT-people first to get completely altered to companies standards.
      That usually should mean complete format and using an image of whatever the company is using as client OS. So there goes your malware (at least most of it).

      So I am very confident that this has to be taken into account.

    3. Re:Interesting angle on social engineering... by Coffee+on+Mars · · Score: 1

      If this was done on a public office, how long do you think will remain unnoticed? (Paranoia: it's not wrong if you're right)

    4. Re:Interesting angle on social engineering... by jlmale0 · · Score: 2, Interesting

      The article notes that the seized laptops were part of an order that shipped to 10 offices; all have been tracked down. Still, you're right, we don't know about other orders. I think it's a brilliant idea, the free laptops. If it's a software only attack, they have to be wary of those departments that reimage PCs to standard images.

    5. Re:Interesting angle on social engineering... by flynt · · Score: 1

      Expensive for whom, you? What about a large political party or the intelligence unit of a foreign country? Practically free for them.

    6. Re:Interesting angle on social engineering... by 91degrees · · Score: 2, Insightful

      Yes. I can't imagine it would be worth it for businesses. You're spending a lot of cash on something that may well go to fairly junior employees who have no access to any information of any importance. Even if the Governor himself gets one, you can't be sure that he'll use it for anything that will be of any value to a third party.

      A foreign government might be willing to splash out this sort of cash but I wonder how interested they are in individual state politics.

    7. Re:Interesting angle on social engineering... by maxume · · Score: 2, Insightful

      But West Virginia?

      --
      Nerd rage is the funniest rage.
    8. Re:Interesting angle on social engineering... by 140Mandak262Jamuna · · Score: 1

      All you need is for someone to plug this thing in behind the firewall and turn it on. The viruses will find insecure machines and replicate there. And it can install deep packet monitoring etc and listen to all the packets being passed around in the wired networks, which are often unencrypted.

      --
      sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    9. Re:Interesting angle on social engineering... by mdm-adph · · Score: 1

      Just steal the laptops then.

      Or -- I don't know -- just be the country that makes them (China) where you have virtually unlimited access to the stock, anyway.

      --
      It is by my will alone my thoughts acquire motion; it is by the juice of the coffee bean that the thoughts acquire speed
    10. Re:Interesting angle on social engineering... by analog_line · · Score: 1

      Formatting the drive doesn't protect against malicious hardware/firmware built in (or installed before they were sent to the target). If we're talking foreign government it would be a piece of cake to get that done. The US government has done similar things to espionage targets. Organized crime would more than likely have the ability (or be able to develop the ability) to hide the face that a case had been opened and the guts altered from casual inspection.

      I don't expect it would take too much ingenuity to develop an extremely small keylogger process that could get data out no matter what operating system you're dealing with.

    11. Re:Interesting angle on social engineering... by thesandtiger · · Score: 1

      Be sure to label the drives with stickers - "Your competitor's TOP SECRET data!!!" and the like.

      God knows, I've worked with people who would fall for that.

      --
      Since I can't tell them apart, I treat all ACs as the same person.
    12. Re:Interesting angle on social engineering... by Anonymous Coward · · Score: 1, Insightful

      It's near DC (there are daily commuter trains), it's fairly cheap, and there's a congress critter with some clout. West Virginia actually has several federal computer centers, which are central hubs for the Coast Guard and the DHS. (At least.)

      Not that the governor has anything to do with them but there are some high-profile targets.

    13. Re:Interesting angle on social engineering... by Skinkie · · Score: 3, Insightful

      So what if the laptops where HP's with onboard maybe even modified 3G cards. How are you going to prevent a KVM calling home?

      --
      Support Eachother, Copy Dutch Property!
    14. Re:Interesting angle on social engineering... by MiniMike · · Score: 2, Insightful
      Maybe they're trying to intercept communications to or from Senator Byrd who, despite being from West Virginia, is a very influential Senator.

      Or they might just want the latest recipe for Varmint Pie.

    15. Re:Interesting angle on social engineering... by damburger · · Score: 1

      However, as some have pointed out above, this is a very expensive trojan; and if you are going to spend that kind of money it might be viable to put something nasty in hardware/firmware that wouldn't be affected by the IT nerds wiping the laptops and installing company stuff.

      --
      If we can put a man on the moon, why can't we shoot people for Apollo-related non-sequiturs?
    16. Re:Interesting angle on social engineering... by camperdave · · Score: 1

      But West Virginia?

      It's them pesky East Virginians, I'll bet!

      --
      When our name is on the back of your car, we're behind you all the way!
    17. Re:Interesting angle on social engineering... by betterunixthanunix · · Score: 1

      My guess is that the laptops were purchased in some disorganized fashion -- maybe there were some interns in the governor's office who needed computers for their work, and the orders were processed twice.

      --
      Palm trees and 8
    18. Re:Interesting angle on social engineering... by vertinox · · Score: 2, Interesting

      You get the laptops delivered to a big enough organisation, whoever signs for them assumes *somebody* ordered them for a reason, but can't find out who.

      Hehe. I worked for a large company where on more than one occasion someone just sends their laptop in to the workshop only to be lost in the stack because they didn't put a ticket number on it. It wasn't stolen but rather just with all the other laptops in a pile and was basically unlocatable for a few months.

      Secondly, the purchasing approval process sometimes takes a while so by the time someone gets their laptop purchase approved they might no longer be with the company.

      --
      "I am the king of the Romans, and am superior to rules of grammar!"
      -Sigismund, Holy Roman Emperor (1368-1437)
    19. Re:Interesting angle on social engineering... by WindowlessView · · Score: 1

      It's near DC...

      Not to mention some of the "secret bunkers" and "undisclosed locations". Chances are that any plausible enemy knows about them but could always use more info on how they are supplied, etc.

      The major connection I see between WV, VT, and Wyoming is mountains. Things get dug deep into mountains.

      --
      Leave the gun, take the cannolis.
    20. Re:Interesting angle on social engineering... by samkass · · Score: 1

      Which is one reason the US Department of Defense bans all thumb drives from all DOD computers, and many large corporations these days have rules requiring the use of company-issued USB drives.

      --
      E pluribus unum
    21. Re:Interesting angle on social engineering... by Bert64 · · Score: 1

      A large company will probably flatten the laptop and install it's corporate image on the machine...
      You would need some form of hardware keylogger, and then some method of getting the logs out of the machine. Not impossible, but not all that simple either. You could potentially wire the keylogger up to a cellular data card and have it call out with the details periodically.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    22. Re:Interesting angle on social engineering... by DerekLyons · · Score: 1

      However, if you do that with a large enough company to get "undetected" (assuming smaller companies would recognise something fishy is going on) there should be a large risk that this laptop goes to the IT-people first to get completely altered to companies standards.

      I rather suspect the reverse is true, those 'undetected' (rogue) laptops would be considered a godsend - because they aren't locked down by IT or tracked in the companies inventory system. (Man, we've been trying to get an extra laptop for [$PURPOSE|$PERSON} for months, but those bastards down in IT say we've got all we need.)

    23. Re:Interesting angle on social engineering... by Runaway1956 · · Score: 1

      Uhhhm. You may well be right, some organizations would be stupid enough to do that. But, mostly, I would expect them to be SMALLER organizations. On the other hand, we are talking about the government......

      I know that I wouldn't use them without reinstalling the OS. In fact, it is probably safe to assume they came with Windows on them. Mine would very quickly have some flavor of Linux on it, PLUS a freshly installed Windows - inside of a virtual machine!

      --
      "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
    24. Re:Interesting angle on social engineering... by Runaway1956 · · Score: 1

      West Virginia? Why not? That little postage stamp sized state full of mountains and valleys may not be the first state to come to mind when you think "IT" or "Department of Defense", BUT, it isn't very far from Washington D.C. The state is pretty much surrounded by other states with top secret schitzl. Yeah, some of it spills over.

      If a person can't think of any other use for getting inside of West Virginia's official network, he could gain access to the department of transportation, then offer to "fix" bad driving records for a fee. A single fix should pay for a laptop. Heck, I'd like to make my own driver's record disappear!

      --
      "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
    25. Re:Interesting angle on social engineering... by drooling-dog · · Score: 1

      Someone takes it home and tries looking at it, pwnage.

      Is this some kind of Windows "feature"?

    26. Re:Interesting angle on social engineering... by maxume · · Score: 1

      Yes, you are the sixth or seventh person to respond to my throwaway snide remark with that general thought.

      --
      Nerd rage is the funniest rage.
    27. Re:Interesting angle on social engineering... by jamstar7 · · Score: 2, Interesting

      Coal in West Virginia, oil shale in Wyoming. Not sure what energy related resource is in Vermont tho.

      --
      Understanding the scope of the problem is the first step on the path to true panic.
    28. Re:Interesting angle on social engineering... by chadplusplus · · Score: 1

      When I moved to West Virginia a few years ago from Colorado, I told the guys out there "I'm moving to west virginia."
      They said, "What, near Richmond?"

    29. Re:Interesting angle on social engineering... by Minwee · · Score: 1

      Not sure what energy related resource is in Vermont tho.

      That would be "Ben and Jerry's".

    30. Re:Interesting angle on social engineering... by StikyPad · · Score: 1

      Teddy Bears + Maple Syrup = Napalm

    31. Re:Interesting angle on social engineering... by jamstar7 · · Score: 1

      Damn, I forgot about that. So this is an obvious attempt to hijack the world supply of Cherry Garcia, right?

      --
      Understanding the scope of the problem is the first step on the path to true panic.
    32. Re:Interesting angle on social engineering... by Veretax · · Score: 1

      The Capital "CHarleston" Is not that close to DC. And while there are some important Federal, and Government COmputer systems in WV, they are not necessarily at the state house. Not sure why anyone would think that they are.

    33. Re:Interesting angle on social engineering... by imhennessy · · Score: 1

      We do have a [highly controversial|completely uncontroversial] nuclear power plant. That seems like a bit of a long shot, though. Perhaps it's all about targeting states which are seen as highly rural and not tech-savvy. If this is the case, then our own Gov. Douglas has failed in his mission to make Vermont the first e-State. ivan

      --
      Like to brew? Want to talk about it? Brattlebrew: groups.yahoo.com/group/brattlebrew
    34. Re:Interesting angle on social engineering... by cheekyboy · · Score: 1

      So corporations are run like windows, with inefficient, badly design work flows and processes, and workers overloaded with processing orders.

      Nothing should ever take more than one day to process.

      --
      Liberty freedom are no1, not dicks in suits.
  7. Reality is weirder than fiction by Drakkenmensch · · Score: 3, Funny

    Sounds like the opening chapter of a John Grisham novel. Encryption hits the newspaper stands before the library shelves, it seems!

    1. Re:Reality is weirder than fiction by BitwizeGHC · · Score: 1

      I think I read that book. It was by Dan Brown, not Grisham, and called Digital Fortress. Yes, it was terrible.

      --
      N4st0r, trixx0r h0bb1tz0rz! Th3y st0l3 0ur pr3c10uzz!
    2. Re:Reality is weirder than fiction by Jeremy+Erwin · · Score: 2, Funny

      When the NSA's invincible code-breaking machine encounters a mysterious code it cannot break, the agency calls in its head cryptographer, Susan Fletcher, a brilliant and beautiful mathematician. What she uncovers sends shock waves through the corridors of power. The NSA is being held hostage...not by guns or bombs, but by a code so ingeniously complex that if released it will cripple U.S. intelligence.

      Egad. If I want cheap obnoxious thrillers, I'll read Greg Bear's lesser work...

    3. Re:Reality is weirder than fiction by H0p313ss · · Score: 1

      Yes, it was terrible.

      Damn... you mean Dan Brown is NOT branching out into comedy? Digital Fortress was one of the funniest books I read that year, and there I was trying to compare it to Douglas Adams.

      --
      XML is a known as a key material required to create SMD: Software of Mass Destruction
    4. Re:Reality is weirder than fiction by genik76 · · Score: 1

      Yes, it was terrible. I stopped considering to read anything from Dan Brown after Digital Fortress. And this scheme would have been much too clever for him to write, anyway.

    5. Re:Reality is weirder than fiction by Adambomb · · Score: 1

      Mr. Governor?

      My name...is The Plague...

      uhh Mr. The Plague, somethin weird's happenin on the net.

      As in what, you hapless techno-weenie?

      --
      Ice Cream has no bones.
  8. That might not be safe enough by acb · · Score: 4, Insightful

    What if whoever's sending them isn't just a small-time crook but a foreign intelligence agency with the resources to custom-make chips with built-in back doors. (Such back doors have been demonstrated to be plausible; someone has built a CPU with a circuit which switches off memory protection when it finds a specific sequence on a memory bus, which means that it doesn't matter how secure the software running on it is.)

    Why would they target state governors' offices? Well, they'd presumably be easier to pwn than, say, the Department of Defence or the CIA, and a good starting point for setting up pieces.

    1. Re:That might not be safe enough by MichaelSmith · · Score: 3, Insightful

      But delivering them this way is attracting too much attention. Better to deliver the machines to their normal IT supplier, perhaps by getting one of your people on the payroll.

    2. Re:That might not be safe enough by 1s44c · · Score: 4, Insightful

      But delivering them this way is attracting too much attention. Better to deliver the machines to their normal IT supplier, perhaps by getting one of your people on the payroll.

      It would be far cheaper to put malware on a USB key with a logo of some government project on the side and mail that to them. They could use the same CD autorun thing that the U3 malware uses.

    3. Re:That might not be safe enough by BenEnglishAtHome · · Score: 5, Insightful

      ...a USB key with a logo of some government project ...

      Are you kidding?

      If I wanted to guarantee that a found USB key would be plugged in somewhere, I'd label it "porn".

    4. Re:That might not be safe enough by Corporate+Troll · · Score: 2, Interesting

      They could use the same CD autorun thing that the U3 malware uses.

      Offtopic, but does anyone know how to remove the U3 "feature" using Linux? I heard there are Win32 removal tools, but I don't trust removal tools from people who actually invented U3...

    5. Re:That might not be safe enough by Joce640k · · Score: 1

      a) As pointed out, somebody with the resources to do that would be a but more subtle about delivering them.

      b) In this case, the smart thing to do would be to keep things quiet and send false info.

      --
      No sig today...
    6. Re:That might not be safe enough by Archimonde · · Score: 1

      Good old format (insert linux equivalent) doesn't work?

      --
      Trolls are like broken clocks. They show the truth two times a day. The rest of the day they talk nonsense.
    7. Re:That might not be safe enough by LWATCDR · · Score: 5, Interesting

      Really? They why state governors? They really don't have a lot of access to secret stuff. My guess is a little more amusing. Someone has figured out how to hack into HPs GSA ordering system and is pranking them. They are basically ordering laptops on the states dime from HP just to see if anyone notices. Sort of like ordering Pizzicati to be set to buddy's house as a joke. The difference is this is going to be a federal offense.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    8. Re:That might not be safe enough by Anonymous Coward · · Score: 1, Insightful

      Nah. "${name of boss's hot PA/secretary} nude photoshoot" surely.

    9. Re:That might not be safe enough by TheCarp · · Score: 2, Insightful

      Then again.... maybe this is just QA.

      Put in your malbug, send the laptops out in a high profile way... see what happens. Do they investigate? Do they even find what you did? That, in and of itself, could be valuable information, and possibly worth 5 laptops.

      Though I do enjoy the double standard. Someone breaks into your systems, with evidence. Think the FBI is going to care unless they can be shown to have done massive damage or stolen real money?

      Here someone does something that is, on its face, perfectly legal and straight up, but the suspicion of potential wrongdoing and the FBI are all over it. I am pretty sure that if someone sent me a free laptop and I called the FBI, they would just laugh at me.

      -Steve

      --
      "I opened my eyes, and everything went dark again"
    10. Re:That might not be safe enough by Corporate+Troll · · Score: 1

      Nope... I tried that. It comes back all the time. It's a USB stick with "Internet Radio" software on it which presents itself as a CD + the Disk part. I even tried a dd if=/dev/zero of=/dev/sdXX

    11. Re:That might not be safe enough by daivzhavue · · Score: 2, Informative

      http://u3.com/support/default.aspx#CQ3

      They finally came out with an uninstaller for it. Quick and easy, but back up all your data as it wipes the entire flash drive.

      --
      "A REAL computer has ONE speed and the only powersaving it permits is when you pull the power leads out of the back!"
    12. Re:That might not be safe enough by Archimonde · · Score: 1

      I'm quite puzzled now because I just formatted my sandisk stick which had u3 so the virtual cd and all other software just went away.

      --
      Trolls are like broken clocks. They show the truth two times a day. The rest of the day they talk nonsense.
    13. Re:That might not be safe enough by HikingStick · · Score: 1

      And, given the current unemployment rate, I'd guess there would be plenty of interested applicants.

      --
      I use irony whenever I can, but my shirts are still wrinkled...
    14. Re:That might not be safe enough by Anonymous Coward · · Score: 2, Insightful

      Because they want to be noticed. One laptop to the President gets disposed of. Five laptops to each governor gets them examined. Carefully.

      It's a message. Wonder who it's from, don't you? Maybe God.

    15. Re:That might not be safe enough by acb · · Score: 1

      Really? They why state governors? They really don't have a lot of access to secret stuff.

      Though the state government does communicate with other government agencies in its day-to-day business. Were its infrastructure surreptitiously compromised, it could be a good stepping stone to more interesting agencies; police agencies, perhaps, could be useful, as could any federal agencies involved in infrastructure (even if they don't do anything sensitive, they have a long reach and might know someone who does). And if such a hack could be hidden well enough away, it could slip through where others wouldn't.

    16. Re:That might not be safe enough by Glonoinha · · Score: 2, Informative

      Doesn't work in Linux, as the GP asserted. Have to stick it in a Windows box just to run the uninstaller.
      As far as I'm concerned it's defective from the vendor and I personally don't buy any USB thumbdrives with U3 installed on them.
      If I accidentally buy one with it on there and realize it after I get it home and open the package, I take it back. Sorry, but no.

      --
      Glonoinha the MebiByte Slayer
    17. Re:That might not be safe enough by 2names · · Score: 1

      I would guess that this is a distraction technique. The real "rogue" equipment is probably already in the offices, and was probably brought in by trusted employees. Probably.

      --
      "I'm just here to regulate funkiness."
    18. Re:That might not be safe enough by LWATCDR · · Score: 1

      Maybe but don't you think that the effort probably isn't worth the risk and potental gains vs the hey "hey I got into the the GSA system of HP and can order a bunch of laptops to be sent and billed to these Governors" option?
      Since these laptops seem to be coming straight from HP just how did they get hacked before delivery?
      And even if they are some hacked spybots it was a very clumsy way of doing it that got caught very quickly.

      Seems way to stupid of a way to hack it.
      The solution is the same in both cases.
      Inspect them and track them. Find out what is happening. Format and give them to a school.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    19. Re:That might not be safe enough by silanea · · Score: 1

      [...] "do NOT use!"

      This. When designing an intranet UI a while ago we put a dummy button onto it that was labelled "Do not click here!" and kept statistics during user evaluation. About 30 out of 50 participants clicked the damn thing.

      --
      Rudolf Hess edited Mein Kampf. He was the very first grammar nazi.
    20. Re:That might not be safe enough by Trahloc · · Score: 1

      Just curious you say sdXX ... have you tried sdX? If you did only try sdXX that can explain why it wont die, your skipping the section it lives in.

      --
      The Goal: A long simple life filled with many complex toys.
    21. Re:That might not be safe enough by jefu · · Score: 1

      I would, almost certainly, click on such a button - just to see if anything interesting happened. I might, depending on circumstances, do it from a safe browser or in a sandbox of some sort. And I suspect that most people would click on it just as your statistics indicated. On the other hand, I'd be a bit dubious that many people would sandbox the process.

    22. Re:That might not be safe enough by Corporate+Troll · · Score: 1

      Well, I got it as a freebie.... ;-) Hard to give it back....

    23. Re:That might not be safe enough by Corporate+Troll · · Score: 1

      I just wrote that as a placeholder. Anyway, I'll do it in real time for you here:

      • Inserting Flash disk, results in dmesg.

        [23807.415925] usb 8-2: new high speed USB device using ehci_hcd and address 2
        [23807.549939] usb 8-2: configuration #1 chosen from 1 choice
        [23807.551693] usb 8-2: New USB device found, idVendor=090c, idProduct=6610
        [23807.551705] usb 8-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
        [23807.551711] usb 8-2: Product:
        [23807.551716] usb 8-2: Manufacturer:
        [23807.551721] usb 8-2: SerialNumber: 00000000000AC7
        [23807.636284] Initializing USB Mass Storage driver...
        [23807.636284] scsi6 : SCSI emulation for USB Mass Storage devices
        [23807.636284] usbcore: registered new interface driver usb-storage
        [23807.636284] USB Mass Storage support registered.
        [23807.657931] usb-storage: device found at 2
        [23807.657936] usb-storage: waiting for device to settle before scanning
        [23812.704686] usb-storage: device scan complete
        [23812.708054] scsi 6:0:0:0: Direct-Access 0.00 PQ: 0 ANSI: 2
        [23812.708876] scsi 6:0:0:1: CD-ROM 0.00 PQ: 0 ANSI: 0 CCS
        [23812.718831] sd 6:0:0:0: [sdb] 2000895 512-byte hardware sectors (1024 MB)
        [23812.719465] sd 6:0:0:0: [sdb] Write Protect is off
        [23812.719465] sd 6:0:0:0: [sdb] Mode Sense: 00 00 00 00
        [23812.719465] sd 6:0:0:0: [sdb] Assuming drive cache: write through
        [23812.723977] sd 6:0:0:0: [sdb] 2000895 512-byte hardware sectors (1024 MB)
        [23812.724509] sd 6:0:0:0: [sdb] Write Protect is off
        [23812.724509] sd 6:0:0:0: [sdb] Mode Sense: 00 00 00 00
        [23812.724509] sd 6:0:0:0: [sdb] Assuming drive cache: write through
        [23812.724509] sdb: sdb1
        [23812.783139] sd 6:0:0:0: [sdb] Attached SCSI removable disk
        [23812.783139] sd 6:0:0:0: Attached scsi generic sg2 type 0
        [23812.787140] sr1: scsi3-mmc drive: 93x/93x cd/rw xa/form2 cdda tray
        [23812.787295] sr 6:0:0:1: Attached scsi CD-ROM sr1
        [23812.787380] sr 6:0:0:1: Attached scsi generic sg3 type 5
        [23815.824225] ISO 9660 Extensions: Microsoft Joliet Level 3
        [23815.847871] ISO 9660 Extensions: IEEE 1282
        [23815.943626] FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!

      • Unmount the mounted "CD":

        umount /dev/scd1

      • Unmount the mounted data partition:

        umount /dev/sbd1

      • After this, both are properly unmounted. Now zero the disk:

        dd if=/dev/zero of=/dev/sdb count=2000895 bs=512

      • After a while it results in:

        2000895+0 records in
        2000895+0 records out
        1024458240 bytes (1,0 GB) copied, 126,776 s, 8,1 MB/s

      • I remove the USB stick, then plug it back in. The CD-Rom drive is shown again... :-(

      My best guess is that its a ROM chip that presents itself as the virtual CD.

    24. Re:That might not be safe enough by Anonymous Coward · · Score: 5, Interesting

      I work in West Virginia state government and this came up at yesterdays staff meeting. According to the boss (not PHB) they've found that laptops had been purchased with stolen credit cards and came loaded with malware. Also some of the laptops received in other states had actually been used.

    25. Re:That might not be safe enough by Z00L00K · · Score: 1

      I wouldn't rule out that it's another agency like NSA or DHS that are actually dropping in those laptops to see what happens.

      It can very well be a penetration test to see how well things like this are handled by various organizations.

      And I wouldn't be surprised if this is the top of an iceberg.

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    26. Re:That might not be safe enough by Dr_Barnowl · · Score: 1

      Not having been inflicted with it yet... wouldn't it just work to either

      i) Repartition the drive

      or

      ii) dd if=/dev/zero of=/dev/thumbdrive

      ?

    27. Re:That might not be safe enough by Vintermann · · Score: 4, Funny

      On small (4-5 person) LAN parties back in the nineties, I knew a guy who shared his floppy drive under the name "porn". When somebody got too horny, their expectation of anonymity were ruined by the characteristic noise those drives make when they try to read from a non-existent floppy.

      --
      xkcd is not in the sudoers file. This incident will be reported.
    28. Re:That might not be safe enough by ColdWetDog · · Score: 3, Funny

      It's a message. Wonder who it's from, don't you? Maybe God.

      God would send an iPhone, not a laptop.

      Get real.

      --
      Faster! Faster! Faster would be better!
    29. Re:That might not be safe enough by HiThere · · Score: 1

      Well, if it's a rom chip, then this wouldn't work, but my first idea is to repartition it with fdisk.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    30. Re:That might not be safe enough by Corporate+Troll · · Score: 1

      but my first idea is to repartition it with fdisk.

      Zeroing out the whole disk (sdb instead of sdb1) should kill the partition table. Besides, it's not as if I didn't think of that. There is (well, was... since I trashed the thing again while making the previous post) only one partition on the disk. You can easily see this in the dmesg I posted, by the way.

    31. Re:That might not be safe enough by Corporate+Troll · · Score: 1

      Since, I'm the guy who posted the (offtopic) question, I have posted the whole thing I did to try to kill it: here.

      So, no... neither i) nor ii) works. If they did they would also be trivial in Windows and no "Uninstallation tool" would be required (as it currently is).

    32. Re:That might not be safe enough by Corporate+Troll · · Score: 1
    33. Re:That might not be safe enough by Trahloc · · Score: 1

      Yeah that is weird. I regularly kill drives with bs=1024k count=1 while its mounted and live. That obliterates the drive and you went even more extreme than that. I think your idea of a specialized chip emulating the cdrom may be accurate. Out of curiosity what is the model of the stick? Something that persistent is annoying in your case but I've a few friends/family that it'd be handy to have something "that just won't die" :-)

      --
      The Goal: A long simple life filled with many complex toys.
    34. Re:That might not be safe enough by KC7JHO · · Score: 1

      Theirs an app for that! An app for iPhone and it's like that is just a Red button in a "Cardboard" box that says DO NOT PUSH THE BUTTON, kept my 14 year old occupied for about an hour!

    35. Re:That might not be safe enough by KC7JHO · · Score: 1

      They were probably purchased with Ms. Bernacky's CC

    36. Re:That might not be safe enough by Corporate+Troll · · Score: 1

      Hmmm... I got it as a free gift with an order we did at the office. It said "USB 1GB Internet Radio" on it. It look physically like this but the inscription is different.

      I'd gladly give you more specifications if you tell me where to look.

    37. Re:That might not be safe enough by drmemnoch · · Score: 1

      You name it "Statewide Salaries 2009"

      --
      Those who can do... Those who can't get a certification from Cisco or Microsoft.
    38. Re:That might not be safe enough by Anonymous Coward · · Score: 2, Informative

      I work in the WV state government as well. I'm a system/network administrator in an agency and we've been batting this around for a while trying to come up with ideas and motives. Personally, there is no way I would ever consider allowing these machines onto my network in any capacity. If for some reason we really thought we had to power them on, they go on a dedicated switch connected to our testing cable modem connection, with a spanned port going to a dedicated snort box. IMO either give them to the feds to work with, or destroy them without powering them on. There is no sense in introducing an unknown unmanaged machine into a government network.

    39. Re:That might not be safe enough by Franklin+Brauner · · Score: 1

      Why would they target state governors' offices? Well, they'd presumably be easier to pwn than, say, the Department of Defence or the CIA, and a good starting point for setting up pieces.

      Worse still is the possibility that this wasn't a just starting point, but mid-to-late in the distribution scheme. I imagine I would begin with corporate contractors and end up with government itself.

    40. Re:That might not be safe enough by 1s44c · · Score: 1

      >

      Offtopic, but does anyone know how to remove the U3 "feature" using Linux?

      I looked and looked but found nothing useful. In the end I just used the windows tool on a work XP machine.

    41. Re:That might not be safe enough by Corporate+Troll · · Score: 1

      I'm a Linux admin... Only Linux machines at work. And at home, well... Linux and OpenBSD. Thanks for looking anyway :-)

    42. Re:That might not be safe enough by bcmm · · Score: 1

      God would send an iPhone, not a laptop.

      I would've thought he could just use lightning if he really wanted to blow someone up...

      --
      # cat /dev/mem | strings | grep -i llama
      Damn, my RAM is full of llamas.
    43. Re:That might not be safe enough by n17ikh · · Score: 1

      Just so you know, the MBR is only 512 bytes. If you write more than that (in your case, 1024 bytes), some of the first partition on the drive will get written to. If your goal is to wipe the drive, write the whole drive with zeroes, as erasing the partition table (and even the first 512 bytes of the first partition) doesn't get rid of anything. The reason I say this is because if you ever want to back a partition table up, copying the first 1024 bytes and then writing it again to a different drive or after making changes to the first partition stands a chance of breaking the first partition on the drive - which you may not want.
      As for the GP's S3 drives, the (mostly windows-only) tools available do nothing to the part of the drive that presents itself as a mass-storage USB device. They twiddle some of the firmware bits in the drive (usually through a custom ATA command). The drive then no longer emulates a CD-ROM drive's USB device ID. This, by the way, is lower-level than what anything you can do to the mass-storage part of the drive with dd can affect. The ATA commands only do it through what is presumably an ugly hack on the part of the drive manufacturers.

      --
      Hard work pays off tomorrow, but procrastination pays off NOW!
    44. Re:That might not be safe enough by Puppet+Master · · Score: 1
      ...and came loaded with malware.

      You mean they came installed with Vista?

      --
      The day Microsoft creates a product that doesn't suck, it will be known as the Microsoft Vaccuum Cleaner!
    45. Re:That might not be safe enough by Trahloc · · Score: 1

      Good point, although I use 1024k just out of habit since when doing read/write tests it makes it easy as my count is also how large in megs my test file will be. Just pure laziness :-) Thanks for the interesting tidbit on the flash drives.

      --
      The Goal: A long simple life filled with many complex toys.
    46. Re:That might not be safe enough by LWATCDR · · Score: 1

      I would because if it was I doubt that it would be in the news.
      My bet is this will be a lot more boring than the news services will want. A clerical error in ordering or someone hacked into the the ordering system.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
  9. I can see it now by ChayesFSS · · Score: 5, Funny

    Next week on CNN: Pen & Paper sent to US Governors in hopes that they'd do more work. FBI called in to investigate.

    1. Re:I can see it now by DarKnyht · · Score: 1

      Can the person sending these send Hooked on Phonics to the Congressmen instead? They apparently need help reading the bills before they vote on them.

      --
      Voting them all out of office, now that's change I can believe in.
  10. Hard-Trojans by LaminatorX · · Score: 5, Funny

    "A what? Whatever, put it in the yard next to the giant wooden horse."

    1. Re:Hard-Trojans by Culture20 · · Score: 2, Insightful

      They don't sound too pleasant. Hopefully they're made with metal or plastic instead of wood. Bonuses: no breaking.

    2. Re:Hard-Trojans by selven · · Score: 1

      If I were one of the generals I'd put it in the giant wooden horse.

  11. People don't send five free laptops for no reason by tecnico.hitos · · Score: 1

    Of course they don't.That's ridiculous

    But if they sent three laptops, then it would be another story...

    --
    The good, the evil and the vacuum tubes.
  12. a delivered local wi-fi attack? by Anonymous Coward · · Score: 3, Interesting

    fedex sleeping laptop
    wake at delivery time
    run superduper wi-fi haxor proggy
    phone home

    1. Re:a delivered local wi-fi attack? by lxs · · Score: 4, Funny

      "a delivered local wi-fi attack" is the best poetry I've read all day. Your lack of punctuation and capitalzation reminds me of e.e.cummings, and the unexpected Spielberg reference at the end is a stroke of genius. You should do poetry slams. (imagine "run superduper wi-fi haxor proggy" to the sound of a bass slapping. )

    2. Re:a delivered local wi-fi attack? by zippthorne · · Score: 4, Funny

      I'm imagining it, but it's really hard to get a good rhythm out of a dead fish.

      --
      Can you be Even More Awesome?!
    3. Re:a delivered local wi-fi attack? by miffo.swe · · Score: 1

      Took me a while to understand it but now my coworker keeps staring at me as i cant stop giggling.

      Youre fucking awesome!

      --
      HTTP/1.1 400
    4. Re:a delivered local wi-fi attack? by neo · · Score: 1

      Try some lemon.

      It makes your mouth pucker in just the right way.

    5. Re:a delivered local wi-fi attack? by not-my-real-name · · Score: 1

      I take it you've never seen The Fish Slapping Dance?

      --
      un-ALTERED reproduction and dissimination of this IMPORTANT information is ENCOURAGED
    6. Re:a delivered local wi-fi attack? by Landshark17 · · Score: 1

      A devious plot and a haiku!

      --
      This sig is false.
    7. Re:a delivered local wi-fi attack? by couchslug · · Score: 1

      "I'm imagining it, but it's really hard to get a good rhythm out of a dead fish."

      How dare you speak of my wife like that!

      --
      "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
    8. Re:a delivered local wi-fi attack? by nivivi2005 · · Score: 1

      I GOT IT! Rumor had it roughly 2 years ago that 'WE' as Americans will be getting free wi-fi nation wide. Along with the realization that this is still not the case, at least 5 of our Governors can go war driving free of cost! -So long and thanks for all the fish-

    9. Re:a delivered local wi-fi attack? by The_mad_linguist · · Score: 1

      It's a lot easier once you get in the halibut.

  13. Hacked hardware? by tsvk · · Score: 5, Interesting

    Since the origin of the computers is unknown, the hardware cannot be trusted. The computers might be hacked and backdoored on the BIOS level. Modern BIOSes are quite sophisticated with a rich functionality, that can be misused invisibly from the OS' point of view.

    1. Re:Hacked hardware? by John+Hasler · · Score: 2, Insightful

      I think that they are more concerned about bombs than BIOS trojans.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    2. Re:Hacked hardware? by pinkushun · · Score: 1

      In that case they could be crafted into excellent honeypots against the mysterious laptop donors

    3. Re:Hacked hardware? by maxume · · Score: 5, Funny

      The article says that they were HP laptops, not Sony.

      </obvious>

      --
      Nerd rage is the funniest rage.
    4. Re:Hacked hardware? by acb · · Score: 1

      A backdoored BIOS is for newbies. The real hardcore hackers use back-doored CPUs or other hardware. All it has to do is look at a packet with a certain byte sequence and its pwned.

    5. Re:Hacked hardware? by DNS-and-BIND · · Score: 1

      This is different from a computer bought at Fry's how, exactly? How do you know it was made in Taiwan? It's just a sticker.

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
    6. Re:Hacked hardware? by B+Nesson · · Score: 1

      If they've been used to play Sony BMG CDs, then they're Sony laptops now.

    7. Re:Hacked hardware? by FragHARD · · Score: 1

      Just another reason Oblamo will decree that ALL computers shall be made according to gubmint standards....

      --
      FragHARD or don't frag at all
  14. 2 democrats by WindBourne · · Score: 3, Interesting

    I wonder if the others are dems? Perhaps it is time to check the keys themselves and see what is on them

    --
    I prefer the "u" in honour as it seems to be missing these days.
  15. Updated news report by ciaran.mchale · · Score: 5, Funny

    This just in... It seems the governor's office was right to be wary. The FBI have confirmed that all the laptops are infected with Windows Vista Basic. Truly nasty.

    1. Re:Updated news report by DrivingBear · · Score: 1

      This just in... It seems the governor's office was right to be wary. The FBI have confirmed that all the laptops are infected with Windows Vista Basic. Truly nasty.

      Hackers would like to steal your secret goverment dataz.
      [ Allow ] [ Deny ]

      --
      How can that be?
    2. Re:Updated news report by hydroponx · · Score: 1
      [ Allow ]

      Maybe they will release it to us then

    3. Re:Updated news report by HiThere · · Score: 1

      Because "Homeland Security" doesn't have anything to do with security, only security theater. This time someone wanted a serious investigation.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
  16. China by BlueBoxSW.com · · Score: 1

    Next question?

    1. Re:China by betterunixthanunix · · Score: 1

      One would think that China would be more interested in states like New York, Illinois, or California -- states with a lot of big banks and financial companies. Or, perhaps a state like Colorado, where there are major military bases. What is in West Virginia that would be of interest to the Chinese?

      --
      Palm trees and 8
    2. Re:China by conspirator57 · · Score: 2, Insightful

      Coal... China is now a net importer of fossil fuels, though mostly from Australia.

      --
      "If still these truths be held to be
      Self evident."
      -Edna St. Vincent Millay
    3. Re:China by HiThere · · Score: 1

      Yes!! If you look closely, most of the chips are clearly Chinese imports.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    4. Re:China by timeOday · · Score: 1

      China? Why? If they wanted to, they'd put trojans in a few of the millions of laptops that actually are built there every year instead of doing something odd like this. For that matter, they would make it appear to be an exploitable bug in the ethernet driver (or something) instead of being so obvious. Sheesh, they're not stupid.

  17. some company order systems with there image per lo by Joe+The+Dragon · · Score: 1

    some company order systems with there image per loaded or some are so big that some think like can happen they are just sitting there ready to go (not knowing that IT did not even get to them) or they are in Small Branch Office with little to no on site IT.

  18. That's nothing... by Anonymous Coward · · Score: 2, Funny

    Real bad guys would plant a Governor or a President, not some brainless laptops...

    1. Re:That's nothing... by VGPowerlord · · Score: 1

      Real bad guys would plant a Governor or a President, not some brainless laptops...

      What if they aren't "brainless" laptops? After all, what would Skynet do?

      (Note: Send Terminators only works for future Skynet)

      --
      GLaDOS for President 2016! "Well here we are again. It's always such a pleasure." -- GLaDOS, 2011
  19. if i were a governor by Anonymous Coward · · Score: 1, Funny

    i'd just give it to my mistress as a gift. makes me look like a swell guy and doesn't cost me a dime.

  20. Re:How about good samaritans? by courteaudotbiz · · Score: 1

    If I wanted to be a good samaritan, it would not be with a governor who had, by 2007, an average salary of 124 398$. It would be with a poor family, a child, anyone who can't afford it. Not a governor...

  21. Stop being so paranoid by charliebear · · Score: 5, Interesting

    A likely explanation is that somebody either stole a credit card or cards or somehow ordered them fraudulently and is using this as a smokescreen. Send 10 laptops to 10 governors. Send 10 to random people including yourself. Profit! Or else an employee at one of the offices is in on it and wanted to cover themselves by sending them out to other offices.

    1. Re:Stop being so paranoid by Comatose51 · · Score: 1

      10 governors is not random. This is the very opposite of a smoke screen.

      --
      EvilCON - Made Famous by /.
  22. Don't assume Fraud is occuring on the delivery by Cassini2 · · Score: 5, Interesting

    Go for the obvious. Someone is trying to get revenge on corporation "x" by purchasing a bunch of computers and having them drop shipped. By the time accounting catches up with the paperwork, the computers will be in the hands of the FBI for a month. If the scam is done right, it is done by an ex-employee or someone with just enough access to know who the preferred suppliers are. You make a couple of phone calls, send the right paperwork, and next thing your computer vendor is drop shipping a bunch of computers somewhere.

    Having worked for distributors, I'm surprised this doesn't happen more often. Having stuff go missing for weeks on end inside factories, fairly routine ... This wouldn't be hard to do. Just ship a bunch of computers somewhere else.

    It is even difficult to get charged for doing something like this. FAXing the paperwork leaves no fingerprints. To the accounting department, the transaction looks like typical incompetence. The corporation won't request charges laid, because then they would have to admit they were incompetent too, and this stuff happens all the time. The police have a tough time charging you, because you didn't steal anything. If done right, you didn't even touch anything so there is no physical evidence. No evidence means no crime, and your revenge makes the national newspapers. Perfect revenge scheme.

    1. Re:Don't assume Fraud is occuring on the delivery by digitalunity · · Score: 1

      This whole thread is filled with conspiracy theories involving rogue companies and international spying. So far, your explanation is the only one that seems remotely likely.

      Kind of like an advanced order-a-pizza-for-your-neighbor prank, but one with fake purchase orders, fax machines and more money involved.

      --
      You can't legislate goodness. Let each to his own destiny, by will of his freely made choices.
    2. Re:Don't assume Fraud is occuring on the delivery by Puppet+Master · · Score: 1
      You make a couple of phone calls, send the right paperwork, and next thing your computer vendor is drop shipping a bunch of computers somewhere.

      This would make sense, but then why stop at 5 laptops and not 500???

      --
      The day Microsoft creates a product that doesn't suck, it will be known as the Microsoft Vaccuum Cleaner!
  23. Idiotic delivery method. by miffo.swe · · Score: 1

    Sending a computer by mail seems to me like a very stupid method to deliver a trojan horse. I have a hard time imaging someone that stupid, especially at espionage level.

    I can imagene pentest like theese but not used by a smart hacker.

    --
    HTTP/1.1 400
  24. OLPC by tekrat · · Score: 2, Funny

    One Laptop Per *CHILD*.

    --
    If telephones are outlawed, then only outlaws will have telephones.
    1. Re:OLPC by hydroponx · · Score: 1

      You forgot Paychecks.... .

  25. The batteries... by marciot · · Score: 1

    ...must be of the exploding kind.

  26. Re:send them back... by mikael · · Score: 2, Funny

    Nigeria actually has a bank called "Bank PHB" with the slogan "Be you, be free, be brilliant". I can't help but think of the PHB from Dilbert;

    --
    Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
  27. "you have won" by nurb432 · · Score: 1

    And they 'clicked here'

    Figures that they would find the ONE legit free gift out of all the scam.. But then again, if you are scam to the core, you can see one a mile away.

    --
    ---- Booth was a patriot ----
  28. For no good reason? by rbrander · · Score: 1

    That's funny, corporations are constantly giving politicians much larger amounts of money for no good reason - since surely honest politicians would not let a few thousand dollars sway their administration of hundreds of millions of dollars away from the Common Good.

    1. Re:For no good reason? by mea37 · · Score: 1

      Yes, but normally when you bribe a politician you do it in such a way that they know who's paying.

  29. Your problem being? by Opportunist · · Score: 1, Insightful

    Rip out the hard drive, install a new one, perfectly good laptop for the price of a hard drive.

    If you're cheap, wipe the hard drive and reinstall (preferably some Linux distri).

    WTF is your problem, gubernator?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:Your problem being? by HikingStick · · Score: 2, Insightful

      Not a bad idea unless the firmware is poisoned.

      --
      I use irony whenever I can, but my shirts are still wrinkled...
    2. Re:Your problem being? by CodeBuster · · Score: 2, Insightful

      Even with the original hard drive gone, I still wouldn't use these laptops if I were the governor. Where did they come from and who arranged the shipping? It could be that foreign intelligence agencies (the Chinese in particular) specially crafted these "gifts" and then attempted to ensure that they would fall into the hands of important people within our government. No, these laptops are best turned over to the FBI or the CIA and left unused by their recipients.

    3. Re:Your problem being? by LanMan04 · · Score: 1

      No way, anything could be built into those laptops. Custom hardware, custom BIOS that would withstand a drive being erased, etc.

      --
      With the first link, the chain is forged.
    4. Re:Your problem being? by Jamamala · · Score: 1

      Don't forget that the BIOS can act as a vector, and even that fairly exotic CPU rootkit that made the news a few months ago could be used. These are possibly lucrative targets - high enough up to get juicy information, and perhaps the malicious party imagined that they wouldn't be quite high enough up for them not to use the laptops.

    5. Re:Your problem being? by Opportunist · · Score: 1

      If everything fails, use them in a honeypot way, make it a tool to misinform whoever tries to infiltrate you. The worst thing you can have in information warfare is a spy who has been discovered but wasn't removed.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  30. It's a gift from their mistresses by elrous0 · · Score: 1

    You'll use the laptop to finally divorce your wife, right?

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
  31. The conversation we'll never hear about... by BobMcD · · Score: 1

    Tech: Mr Governor, sir, have you seen those HP laptops that you asked me to order? FedEx says your secretary signed for them.

    Gov: Laptops, you say?

  32. Re:They're presents from Microsoft by Philip+K+Dickhead · · Score: 1, Troll

    From Israel, with love.

    --
    "Speaking the Truth in times of universal deceit is a revolutionary act." -- George Orwell
  33. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  34. Have they turned it on? by MickyTheIdiot · · Score: 2, Funny

    All it probably just plays Rick Astley "Never Gonna Give You Up" in a loop.

  35. Naked gun by gmuslera · · Score: 1

    Make me remember that movie (was there?) when a ticking box was delivered, Drebbin announced that was a bomb and washed/hammered/destroyed it. Then resulted that was the clock gift for retirement or something like that. That it looks like a wooden horse don't always means that is er... "Made in Troy".

  36. In other news MS attempts to bribe officials. by neo · · Score: 1

    In other news MS attempts to bribe government officials with state of the art laptop computers by sending the gifts directly to their offices. The move prompted some pundits to suggest that such "guerrilla marketing" was a new direction for Microsoft, who traditionally had used bribes of cash or AOL disks.

    "We wanted to strike out into new ground with this campaign" said Micheal Hunt, lead marketer for the campaign, "We thought 'what would be more unexpected or be more exciting than an electronic device in a brown box being anonymously delivered to your home or office?' and the answer was 'nothing'. We expect an explosion of these types of packages when we start to target other agencies such as the ATF and Homeland Security."

  37. Why assume it's some foreign entity? by rnturn · · Score: 3, Insightful

    What do the states whose governors received these laptops have in common? The referenced article didn't mention the complete list but West Virginia and Wyoming might have something commercial in common. Mining or energy for example. Wouldn't a lobbyist with some powerful clients in the mining/energy industry just love to have access to some state computer systems where they could snoop through internal emails discussing potential legislation restricting mining activities? West Virginia's had problems with mountaintop removal for years. There's been talk of stopping that for some time. Wyoming has their share of mining companies abusing the environment as well.

    On the other hand, perhaps a bunch of environmentalists shipped the laptops in the hope of getting access to state information so they could blow the whistle on state govt./industry shenanigans (bribes and the like).

    Anyone know where there's a complete list of the states where these laptops were shipped?

    --
    CUR ALLOC 20195.....5804M
    1. Re:Why assume it's some foreign entity? by dogeatery · · Score: 1

      I know you're being sarcastic but it's the simplest answer with the most obvious motive and the US provides an environment conducive to such dealings.

      Just sayin'

  38. Send 10 laptops or have bad luck for 7 years. by neo · · Score: 4, Funny

    > Send a laptop to 10 people or you will have bad luck for 7 years. If you do send laptops to 10 people you will get your greatest wish!!
    >
    > A woman in Canada didn't send the laptops and now she is in prison for cheating on her taxes.
    >
    > A man in Kansas sent the 10 laptops and now has a new laptop!
    >
    > This is not a hoax or scam!! YOu HVAE TO SEND THIS!! 10 Laptops or something horrible will happens. Send it to all your friends!!!
    > >
    > > It's TRUE!! I got cancer when I didn't send the laptops, but then I sent them and now I have a million dollars!!!11
    > >
    > > Don't think this is a trick!! Just do it !1 Wjhat do you have to lose??
    > >
    > > Jack in Fredricksburgton
    > >
    > >
    > > > I can't count the number of times I've sent out these kinds of Laptops and gotton NOTHIONG. But this is the real deal.
    > > > You can't go wrong with this one. Think about it, you already got the laptop. You already have it...
    > > > but dont' just accept the gift and not pass it on or your in for big troubles.
    > > > >
    > > > > Here is a free laptop. Pass this on to 10 friends and enjoy!
    > > > >
    > > > > Richard R.

    1. Re:Send 10 laptops or have bad luck for 7 years. by GaryOlson · · Score: 1

      Pure genius! Spread computer literacy thru viral methods!

      --
      Every mans' island needs an ocean; choose your ocean carefully.
  39. Re:Capitalizing the first letter of a sentence by Chyeld · · Score: 1

    Go fuck yourself you freak, because in case you didn't notice, your first letter of your first sentence isn't even capitalized, quote or not, and that makes you the screwup in English right there, as well as your lack of captilizing a person's initials in their name, like E.E. Cummings, dumbass.

    You aren't a poetry fan, are you?

  40. Re:Capitalizing the first letter of a sentence by Nesman64 · · Score: 1

    I hate to feed the trolls, but think of it this way: You only have to write it once, but it can be read by many. If you take 3 seconds to clean up your writing making it easier to parse, the rest of the world will save the hours wasted trying to understand your gibberish.

    --
    coffee | nose > keyboard
  41. Put them to a practical purpose by ciaran.mchale · · Score: 1

    I think we have enough for a beowulf cluster of state governors... All we need to do is get them to run Linux and drive around in a bad car analogy.

  42. Incentives by camperdave · · Score: 1

    I wonder... Perhaps these are just vehicle purchase incentive laptops. Like the toaster you get for opening a bank account. Buy a car, get a laptop.

    --
    When our name is on the back of your car, we're behind you all the way!
  43. ...1 cup. by Spatial · · Score: 1

    Sorry.

  44. Hackers by jjhall · · Score: 4, Funny

    When they turn 'em on, does it show some distorted video of a guy telling them to play nice, and to enjoy the new laptop?

  45. Sigh. by seven+of+five · · Score: 1

    I keep telling FedEx, and HP, I ordered these notebooks. I just wasn't home to receive them.

    dammit.

  46. movie promotion? by speedtux · · Score: 1

    Maybe there's some upcoming movie in which this is part of the plot? In that case, getting national press coverage for this kind of event might be a marketing stunt.

  47. Re:Capitalizing the first letter of a sentence by Jeremy+Erwin · · Score: 1

    You fail at comprehension.

    Shouldn't that be You fail to comprehend or even You don't understand?

  48. Re:Capitalizing the first letter of a sentence by ancientt · · Score: 1

    You underestimate my stunning ability to be modded down.

    --
    B) Eliminate all the stupid users. This is frowned upon by society.
  49. Easiest way to figure this out... by Landshark17 · · Score: 1

    Have each recipient use the laptop like normal, but replace any sensetive information with bogus information, then wait. If the laptops are bugged, one of two things will happen. If whoever bugged them tries to benefit overtly from using the bogus information, it'll identify them. If whoever bugged them tries to benefit covertly, they'll be using bogus information that's no good to them anyway. Either way (assuming it's actually malicious and not just an ordering snafu or prank) whoever's behind this won't get anything out of it, and they might even get caught.

    --
    This sig is false.
  50. New Laptop Hunter Ad by trayser · · Score: 1

    I am a proud owner of a brand new laptop, and its a PC !

  51. Hmm by OrangeMonkey11 · · Score: 1

    This sounds like a start to a die hard movie the Fed might have to call in John McClane

  52. Linux good. Windows bad. by AppleTwoGuru · · Score: 1

    If the laptops have some Linux OS installed, then I would say it is a good will gesture. If the laptops have MS-Windows installed, basically someone is handing them a laptop full of virus-infested software. MS-Windows has been detected as one big virus itself. Stuff that in your USB port.

  53. Re:They're presents from Microsoft by kimvette · · Score: 1

    Since when is Israel our enemy? They are likely our only real ally and friend in the Middle East.

    --
    The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
  54. Re:They're presents from Microsoft by 1729 · · Score: 1

    Since when is Israel our enemy? They are likely our only real ally and friend in the Middle East.

    Just because they're an ally, don't assume that they aren't trying to spy on us:

    http://www.washingtonpost.com/wp-dyn/content/article/2005/10/05/AR2005100501608.html
    http://en.wikipedia.org/wiki/Jonathan_Pollard

  55. Re:They're presents from Microsoft by Zen+Hash · · Score: 1

    Since when is Israel our enemy? They are likely our only real ally and friend in the Middle East.

    That doesn't mean their intelligence agency ignores the US:
    http://www.cbsnews.com/stories/2004/08/27/eveningnews/main639143.shtml
    http://en.wikipedia.org/wiki/Ben-Ami_Kadish
    http://en.wikipedia.org/wiki/Jonathan_Pollard

    --
    Here I sit, all broken hearted.
    Came to poop, but only farted.
  56. Do you always call the cops on deliveries? by Servo · · Score: 1

    "We received one package, opened it and realized that it was an error since no one in our office had ordered them," she said. "The next day we received another package. At this point we realized that they needed to be turned over to law enforcement."

    So you receive something you know you didnt order, and instead of refusing shipment you call the cops? What?

    The article also makes it seem like the shipments came from HP, not from somebody who had some sinister intent. It sounds like someone was ordering a bunch of stuff to cover tracks or maybe it was from Ben Bernanke's credit card. LOL

    --
    A slip of the foot you may soon recover, but a slip of the tongue you may never get over. -Benjamin Franklin
    1. Re:Do you always call the cops on deliveries? by /dev/trash · · Score: 1

      Dude. 9-11 changed EVERYTHING. Those deliveries could contain ricin.

    2. Re:Do you always call the cops on deliveries? by Servo · · Score: 1

      That's funny, I don't remember ricin used on 9-11.

      If the boxes came from HP, and you know you didnt order them, why not just refuse delivery?

      --
      A slip of the foot you may soon recover, but a slip of the tongue you may never get over. -Benjamin Franklin
  57. Pay it forward by mysidia · · Score: 1

    '"You see, I do something real good for three people. And then when they ask how they can pay it back, I say they have to Pay It Forward. To three more people. Each. So nine people get helped. Then those people have to do twenty-seven." He turned on the calculator, punched in a few numbers. "Then it sort of spreads out, see. To eighty-one. Then two hundred forty-three. Then seven hundred twenty-nine. Then two thousand, one hundred eighty-seven. See how big it gets?"'

    Why do people automatically assume that noone would be that nice?

  58. Re:Only Five? by Fantastic+Lad · · Score: 1

    The other two contained less moral fiber and thus failed to report theirs.

    In fact, I think the Dark Lord sent out twelve rings, and five turned theirs in because they got the heebie-jeebies. (Tolkien left that part out because he wasn't Roald Dahl.)

    -FL

  59. Re:They're presents from Microsoft by Philip+K+Dickhead · · Score: 1

    Oh, about 1948, or so.

    --
    "Speaking the Truth in times of universal deceit is a revolutionary act." -- George Orwell
  60. Your statement is highly suspicious by Benfea · · Score: 1

    I've met people from West Virginia. I refuse to believe that any of you are capable of using a computer. Fess up: you're actually a clever macro/script running on a computer in Hungary, aren't you?

  61. Re:Doubt its malware.. it's probably just a scam by sumnerp · · Score: 1

    When accounts payable gives the WTF call to the receiving dept and the receiving dept confirms delivery, many companies will assume the bill is legit and pay it.

    No, accounts payable don't care that the goods have been delivered even if the supplier can show a valid PO. All they want to know is who authorised the PO so that someone with sufficient authority in that department can authorise the invoice for payment.