Full Disclosure mailing list archives
Re: Strange Lenovo x121e
From: halfdog <me () halfdog net>
Date: Thu, 06 Oct 2011 01:05:59 +0000
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xD 0x41 wrote:
Hrm this one is tricky, but smells so bad of preuse, specially when you said this; * Inside seal on plastic bag also intact, but glue is suboptimal, I opened the bag without damaging the seal Thats a clear sign of tamperage...thats when they tell you "do not buy" ... so i wonder :s
Yeah, but I've also got trained fingers. And applying stickers on completely fresh plastic surfaces can be tricky, especially when plastic foil was surface-treated, so that it does not stick to itself before being manufactured to plastic bags.
I know it could ..... Is it perhaps something being leftover, from some badly warezd ISO Windows install...wich can lay dormant, even after a format but, not after fdisk usually... strange, i cannot figure this one. It smells of pre-use, or ex-demo, but, i have got, 3 ibm netvista 2cpu boxes,1 3.3gig awesome IBM thinkcentre,fastest box i have as in loading/swap access,and IBM Blade,IBM laptop, and not one has those files...i even paid for ex-demo on the laptop, and it was installed...
I think, I have a good explanation: I looked through the files and found quite a mess, even for MS-system. Even c:\ is loaded with various nonstandard files. Many of these files are around testing (testplan xy, fantest, modemtest, mark3d, ..) and test orchestration scripts, one of them setting the clock back to 2010-01-01, so file mod dates should be meaningless. It seems, that the machine contains at least 13G of windows-OS and testing software. I found some test reports (dated 2010-01-01), that contain the hardware tag of the machine. The BIOS seems to be 2011-06-21, that is also proof for clock manipulation during testing. What could be interesting: Although I found some tools via google, e.g. rw-everything, a "hardware configuration reader/dumper", there are also some tools I do not know, that might deal about branding or special hardware initialization, e.g. ./WWAN/Leadcore/BAK/IMEI.TXT ./WWAN/Leadcore/IMEI.TXT with different IMEI in it. Perhaps the disk contains some new tools that allow to reset broken hardware/firmware internals to any state you like, e.g. perhaps the imei of your modem.
i can only see *no* good reason for .exe to be on the drive, after a sale. It should have always been wiped/fdisk/shredded, as I know i have had done withthe ex demos i have here, and, they are part lenovo and part IBM and still, not one of those files exits on any box, and the laptop wich, i thought would forsure have something, if any of them did... but nope. I dont know this one, but, i will try and ask a friend who works with IBM and see theyre practices, and try get his own quotes.
I do not know, if all systems have this "testing" image on it or if just one device was lost during quality control, but to me it seems highly likely, that somehow a test-branded disk made it out of the lenovo (or partner) production site. I've put a file-list at http://www.halfdog.net/TmpData/sda1-filelist.bz2, so that you can make up your own picture, if you want to. hd - -- http://www.halfdog.net/ PGP: 156A AE98 B91F 0114 FE88 2BD8 C459 9386 feed a bee -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFOjP7UxFmThv7tq+4RAkIEAJ9V+Pk3tr/CifsSpePixMwBvpyxkACgkL7z jQK7GokYe5ki5pzRhi/725A= =6sCw -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Strange Lenovo x121e halfdog (Oct 05)
- Re: Strange Lenovo x121e Henri Salo (Oct 05)
- Re: Strange Lenovo x121e xD 0x41 (Oct 05)
- Re: Strange Lenovo x121e halfdog (Oct 05)
- Re: Strange Lenovo x121e xD 0x41 (Oct 05)
- Re: Strange Lenovo x121e halfdog (Oct 05)
- Re: Strange Lenovo x121e xD 0x41 (Oct 05)
- Re: Strange Lenovo x121e coderman (Oct 05)
- Re: Strange Lenovo x121e xD 0x41 (Oct 05)
- Re: Strange Lenovo x121e halfdog (Oct 05)