Live data from Hacker News

Ask HN: Security risks when buying mini-PCs/PCs from unknown vendors?

news.ycombinator.com

11–13 of 13 posts

Re: Ask HN: Security risks when buying mini-PCs/PCs from unknown vendors?

#11

I've bought three mini-PC's from different vendors via Amazon. All three had malware on their pre-installed image. I replace the storage and install Linux but there is still the risk of a malicious BIOS. Given I don't use them for anything important I accept the potential malicious BIOS risk. I would never use these with any data I or others cared about but that is just my own personal opinion that is shared by some…

Could you elaborate? What kind of malware was pre-installed?

Re: Ask HN: Security risks when buying mini-PCs/PCs from unknown vendors?

#12

I've bought three mini-PC's from different vendors via Amazon. All three had malware on their pre-installed image. I replace the storage and install Linux but there is still the risk of a malicious BIOS. Given I don't use them for anything important I accept the potential malicious BIOS risk. I would never use these with any data I or others cared about but that is just my own personal opinion that is shared by some…

Could you elaborate? What kind of malware was pre-installed?

Bladabindi and Redline on two of them. Those were also configured by someone to disable alerts and scheduled scans in Defender. On the third it was something to do with bitcoin / wallet stealing and I don't use bitcoin. I can't remember the name. I just boot them up long enough to know it isn't DOA then eventually wipe them with Linux assuming I even keep the tiny NVME they come with. I started running scans after seeing the mini-PC malware issues in 2023 to let others on Amazon know what I find and to steer very clear of those vendors.
Post reply on HN