Slashdot Mirror
AU Government To Build "Unhackable" Netbooks
bennyboy64 writes "In what may be one of the largest roll-outs yet of Microsoft's new Windows 7 Operating System, Australia's Federal Government decided to give 240,000 Lenovo IdeaPad S10e netbooks to Year 9-12 students. Officials are calling them 'unhackable.' iTnews reports that the laptops come armed with an enterprise version of the Windows 7 OS, Microsoft Office, the Adobe CS4 creative suite, Apple iTunes, and content geared specifically to students. New South Wales Department of Education CIO Stephen Wilson said that schools were 'the most hostile environment you can roll computers into.' While the netbooks are loaded with many hundreds of dollars worth of software, 2GB of RAM, and a 6-hour battery, the cost to the NSW Department of Education is under $435 (US) a unit. Wilson praised Windows' new OS: 'There was no way we could do any of this on XP,' he said. 'Windows 7 nailed it for us.' At the physical layer, each netbook is password-protected and embedded with tracking software that is embedded at the BIOS level of the machine. If a netbook were to be stolen or sold, the Department of Education is able to remotely disable the device over the network. Each netbook is also fitted with a passive RFID chip which will enable the netbooks to be identified 'even if they were dropped in a bathtub.' The Department of Education also uses the AppLocker functionality within Windows 7 to dictate which applications can be installed."
This needs a "goodluckwiththat" tag...
...when Slashdot news beginning with "Australian Government" won't necessarily end with a rephrasing of "shows off its technological naivety".
Lunch or deal. Some state politician and/or bureaucrat must be getting a nice thanks later in life.
The PR reads like pure MS marketing slop with a cute upgrade hint.
Domestic spying is now "Benign Information Gathering"
"Tracking software embedded at the BIOS level"? Last I checked, those "tracking schemes" just force-fed Windows some driver/app at the BIOS level. Install any other OS and it becomes useless (not to mention that BIOSes these days aren't even hard to hack). As for the RFID, I don't see how disassembling it and taking it out is rocket science. Nevermind that the students themselves are going to be owning any kind of app installation protection in the blink of an eye.
Sorry, using software to secure a platform against its physical holder has never worked for long, but even just trying to do it on an insecure platform like an x86 PC is beyond useless. None of this is has even a remote chance of working without the heaviest-handed TPM-on-CPU-die functionality and signing of each and every piece of software, but that has no chance of working because no one would want such a platform, it would be painful and expensive to develop, and it could never exist given the buggy and insecure nature of PC software in general.
Video game consoles with strong hardware security and tightly controlled software environments with little interoperability requirements get cracked all the time to run homebrew and/or pirate games, what makes these people think their little netbook won't be?
For what it's worth, Linux vs. Windows here makes little difference. The entire scheme is doomed to fail from the start due to the nature of a PC solution like this. Sounds like Microsoft just sold these guys a bunch of nonexistent security.
Setting aside the fact that I don't think giving students laptops is the most efficient use of resources (smaller class sizes, more funding for teachers, arts and science programs etc would be better)... I can't help but wonder if this will be as unhackable as $84 million porn filter released a couple years ago.
What is it with governments and hubris? If they had just shipped all these laptops without any mention of "unhackableness", you know what would have happened?
1: 240,000 kids would have gotten reasonably secure systems with useful software on them
2: People would have noticed how secure and safe the systems were, and appreciated the low rate of problems they experienced
3: Eventually, some smart students would have figured out how to bypass all the security so they can play world of warcraft or something, but nobody would have cared and it wouldn't have gotten any press
Instead, some asshat announces to the world "Bow to our unhackable laptops! We are awesome! HAHAHA!", and now thousands of hackers and security researchers out there have made it their personal crusade to find a way to totally decimate all the security on the box. You're right... It's gonna take about 1 month for an exploit for these things to make it to the front page on slashdot. Fucking idiots.
Footnote:
Yes, I'm aware that security through obscurity is no security at all, but that's not the issue here. The issue is that instead of nobody caring or trying to break the reasonable security they've implemented, now they've got thousands of people working on it. THAT does matter.
I dont understand why this would be considered unhackable. Exploits have already been released for windowed 7.
It is quite simple: Microsoft said that it was unhackable, so as far as the idiot politicians were concerned it must be true.
What grates with me is that the Australian Federal Government is spending money training kids to use MS s/ware - something that will stay with them for the rest of their lives. The MS marketing department must be overjoyed.
What education should be about is understanding, if you just train someone in one version of s/ware many just adopt a point and click approach with little understanding of what they are doing. You need different sorts of s/ware to make them think. Schools should use a mixture of: MS, Mac & Linux PCs.
While the netbooks are loaded with many hundreds of dollars worth of software, 2GB of RAM, and a 6-hour battery, the cost to the NSW Department of Education is under $435 (US) a unit.
The netbooks have hundreds of dollars of software loaded and still only cost $435 a unit. So the cost of the unit is being subsidized and the department is hailing this as some big leap forward in cost of ownership? And some of the big changes are related to the BIOS.
Already, the department has noted the loss or damage of just six netbooks out of the 20,000 rolled out since August - and have tracked one teacher using their device on a field trip in New Zealand.
Yeah, really cool that the school can track and potentially monitor everyone using one of these devices, even if the machine is not physically turned on via the RFID tags. Now there's a big win.
DET also uses the AppLocker functionality within Windows 7 to dictate which applications can be installed on the device.
Even better. Add McAfee filtering to control content and MSFT's own antivirus technology...add up what all that would cost in a real world enterprise. Just the software costs alone would dwarf the cost of the device.
I look at the cost of the device, the software and all the centralized control and think, "Or just install Linux and get 95% of that functionality right out of gate." And the 5% you don't get is the spying and monitoring part. What lesson is the school teaching here?
This is certainly a win for someone, but I'm not sure it's the students and teachers.
That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
Why would anyone issue a challenge like that over netbooks for students? Unhackable? Bullshit! Some hacker out there is going to take that as a challenge and hack into the thing in, I'm guessing, less than a week. And some poor student is going to have his netbook hacked because some nimrod decided to talk smack about how awesome-sauce these netbooks are and described it a "unhackable." Unreal...
If I recall, China's People's Liberation Army is part-owner of Lenovo.
Exactly why do the Aussies thing there won't be back doors built into the hardware or BIOS?
What education should be about is understanding, if you just train someone in one version of s/ware many just adopt a point and click approach with little understanding of what they are doing. You need different sorts of s/ware to make them think. Schools should use a mixture of: MS, Mac & Linux PCs.
You seem to have severely misunderstood the purpose of these machines.
And don't discount the importance of it, either. All security, no matter what type it is or how it is implemented, is basically designed to slow down anybody who might try to break it. Indeed, security through obscurity itself does this, but the actual slowdown it provides is minimal, and it adds an extra cost: it is difficult to tell when somebody out there has successfully broken your security. By opening up, you can get a bunch of people working on your security to strengthen it, to help offset the few people who might be interested in breaking it.
Anyway, why would you go to such great lengths to slow down any individuals who might see a profit in cracking your systems, then go and piss off a bunch of 1337 haxxorz all over the world and get thousands of them working on the problem in parallel? Kinda defeats the purpose of using strong security in the first place, doesn't it?
It's analogous to the Streisand Effect. And when the machines get hacked, the id10t who declared them "unsinkable" will experience Titanic Syndrome.
http://alternatives.rzero.com/
The Roku vidio player is an excellent example of security through "meh". It's almost an ideal box for a Boxee or MythTv frontend, but it is pretty much unhackable (cryptographically signed u-boot, kernel, and ramdisk). They've released their sources (but not their crypto key) months ago, yet not one single crack is available for it.
Why? Because (a) they don't make a big deal of the security features to the public, b) it's stupid cheap ($99 USD), and (c) It Just Works.
The combination of all three make 'meh'. Due to (a) there is no implicit challenge to the security community, (b) trumped the TiVo problem of trying to get 'more value for your money' out of an expensive piece of kit, and (c) prevents your Average Joe hacker from wanting to break a working (and useful to him) device.
Good counterexamples are TiVo, Linksys routers, and the Wii.
For TiVo, it was expensive enough that people wanted to get more value for their money, and felt it was time well spent to hack it.
With Linksys routers, It just Doesn't Work caused people to spend a lot of time finding a way to make some perfectly good equipment work at all for them.
The Wii advertised to the community that it was unhackable, which promptly cause all manner of security professionals to take up arms and figure out how to hack it.