• tyler@programming.dev
      link
      fedilink
      English
      arrow-up
      81
      arrow-down
      1
      ·
      12 days ago

      All of these discoveries seem like catnip for lawyers everywhere. Like, how are these companies not going to lose absolutely billions just on lawsuits now?

      • MiskatonicAlumnus@thelemmy.club
        link
        fedilink
        English
        arrow-up
        40
        arrow-down
        3
        ·
        edit-2
        12 days ago

        Because it will only cost them “billions” if someone can come forward to the court and claim “billions” in damages. Good luck with that, when your product is a USB drive with flashy labeling.

        Will you be the first to take them to court, to recover the damages from you being deceived for this dopey drive? The judge may actually award you double damages and order them to pay you $200!!!

        catnip for lawyers everywhere

        lololololololololololol!!!

        • lemmyvore@feddit.nl
          link
          fedilink
          English
          arrow-up
          7
          ·
          12 days ago

          In the EU most (all?) members have a state-run consumer watchdog organization that can and does escalate measures depending on how big the problem is and how many people are reporting it.

          But something like this wouldn’t typically make it to the watchdog because there’s also consumer law in place to allow people to return faulty/unfit devices. So bad products like these typically get absorbed by merchants and importers, who would find themselves unable to shift that particular product and turn it back to Lenovo. Eventually Lenovo can’t find anybody willing to buy the product and have to take the hi[n]t.

          The beauty of this system is that it turns the problem back to the commercial side. It takes the regular people (buyers) out of the problem and makes merchants/importers/manufacturers figure it out among themselves. The idea being that “market forces” are real and they work but they shouldn’t be inflicted on unsuspecting customers.

          • horsesaysweird@feddit.org
            link
            fedilink
            English
            arrow-up
            1
            ·
            11 days ago

            It still affects the buyers, though. If I get hacked because I bought crappy “encrypting” hardware, I may not even care about getting my 20 bucks back because I just lost thousands and my life is ruined.

            It’s a beautiful and appealing idea that market forces will regulate everything if you just let things go. But we’ve tried that for long enough now to see that the real world is too complex and the consequences of bad regulation are too serious.

    • DupaCycki@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      10 days ago

      It may not be sold in Europe. It’s not listed on my local Lenovo website, or on any local marketplaces.

      Might be just my country, so it’s worth checking in others too.

  • Optional@lemmy.world
    link
    fedilink
    English
    arrow-up
    108
    arrow-down
    1
    ·
    12 days ago

    The fingerprint reader only enabled the USB connection, and nothing on the card was actually encrypted.

    Pathetic

  • xav@programming.dev
    link
    fedilink
    English
    arrow-up
    31
    arrow-down
    1
    ·
    12 days ago

    They’re the people making the next GrapheneOS hardware. There’s some interesting cognitive dissonance.

    • Natanael@infosec.pub
      link
      fedilink
      English
      arrow-up
      12
      ·
      12 days ago

      The GrapheneOS people are using CPU level hardware security functions provided by Qualcomm, I’m assuming the partnership means they get proper access to drivers and Motorola / Lenovo won’t be modifying the CPU.

      Now there’s still plenty of room for shenanigans in other places like the modem and various interconnects and the motherboard and all that, but at least there’s some baseline security provided there using ARM secure boot and hardware level exploit protection in the CPU, etc.

    • youmaynotknow@lemmy.zip
      link
      fedilink
      English
      arrow-up
      4
      ·
      12 days ago

      Let’s hope that the 'partnership 'means the GOS team will be auditing the actual hardware for the GrapheneOS compatible phones next year.

  • Chaotic Entropy@feddit.uk
    link
    fedilink
    English
    arrow-up
    25
    ·
    12 days ago

    Lenovo slap their brand on all sorts of mass produced tat in their colours. All the tech companies do it for these sorts of products.

  • myyass@lemmy.world
    link
    fedilink
    English
    arrow-up
    19
    arrow-down
    3
    ·
    12 days ago

    Lenovo has always been trash; like it’s not that bad style. The best was the clit mouse thing.

    • Soup@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      12 days ago

      Apparently the mouse nipple is good for people working out in the field with big gloves on. I don’t for the life of me know why they put it in the middle of the fucking keyboard instead of in any of the empty space beside the trackpad, but it has a use, allegedly.

      • TimeNaan@lemmy.world
        link
        fedilink
        English
        arrow-up
        8
        ·
        edit-2
        12 days ago

        The actual use is for text/document editing, you don’t need to move your hands away from the keyboard to quickly select something with the clitmouse. Thinkpads are business laptops.

      • fonix232@fedia.io
        link
        fedilink
        arrow-up
        6
        ·
        12 days ago

        Because it’s for typing. And most people who type on QWERTY keyboards do so by using a pretty standard position, where pointer fingers fall on F and J.

        Bu putting the clit halfway between those anchor points, you get a thumb that’s almost always available for any cursoring.

        • Soup@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          10 days ago
          1. this makes sense for the original setup, fair.
          2. I think with the modern usage, it would be cool to have it moved or duplicated.
    • GreenKnight23@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      11 days ago

      for context

      The FU100 is “just an SD card in a fancy case,” Li said in a March conference talk. It is, as a result, trivial for anyone with physical access to get to the drive’s data.

      I bet some engineer was tasked with the whole thing, under budget, over extended, and had their whole team cost savings cut from covid when they built that.

  • f314@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    12 days ago

    Well, I guess that explains what the “FU” in the model number stands for!

  • SkunkWorkz@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    11 days ago

    Lenovo has fallen from grace. The last decade they were just riding the reputation they had when they were under IBM, while they cut cost and lowered quality.