Live data from Hacker News

Lenovo Selling Linux Laptops Directly in the US

lenovo.com

101–110 of 154 posts

Re: Lenovo Selling Linux Laptops Directly in the US

#101
post #64
post #39

Earlier quoted context omitted.

Honest question: how does this firmware spyware affect Linux? If I get a ThinkPad and overwrite the pre-installed OS with my own, would spyware like this be able to do anything on Linux? I guess they could do the same thing, extract some binary from the firmware pre-boot and inject it to /boot to mess with the boot process... but does that give them viable persistence and ability to do stuff in Linux once the OS is b…

Ideally it should if you format your laptop. But the problem is working with a vendor that has a track record for compromising its customers. How do you know they aren't inserting backdoors in the firmware? The problem is the lack of trust. To be fair, I'm still spotting an X1, but next time I might consider librem, or something else.

Everyone who's calling out Lenovo should be calling out apple and talking about how they can't use any apple product lines, for the same security concerns.

Nothing is safe!

Re: Lenovo Selling Linux Laptops Directly in the US

#102
post #21

Earlier quoted context omitted.

This is the only thing stopping me from buying an X1 Carbon. I had decided to buy a Dell Latitude instead, but apparently Dell did something similar [1], so now I don't know what to buy. Maybe a Huawei? AFAIK they haven't been caught in these shenanigans yet, but I still don't feel comfortable with them for some reason. God, the laptop market is awful. [1] https://www.eff.org/deeplinks/2015/11/superfish-20-now-dell-.…

It depends. If you wan't to run linux, then on your location. If you want to run Windows, i can't help you. As others have allready mentioned, take a look at System76 if you reside in the US. Another option would be https://puri.sm/ Slimbook was mentioned, they are in the UK IIRC. If you are somewhere else, https://www.tuxedocomputers.com/ might have something for you.

Actually Slimbook is from Valencia (Spain). But AFAIK they send worldwide. At least I got mine in Finland at a reasonable shipping price.

Re: Lenovo Selling Linux Laptops Directly in the US

#103
post #21

Earlier quoted context omitted.

This is the only thing stopping me from buying an X1 Carbon. I had decided to buy a Dell Latitude instead, but apparently Dell did something similar [1], so now I don't know what to buy. Maybe a Huawei? AFAIK they haven't been caught in these shenanigans yet, but I still don't feel comfortable with them for some reason. God, the laptop market is awful. [1] https://www.eff.org/deeplinks/2015/11/superfish-20-now-dell-.…

It depends. If you wan't to run linux, then on your location. If you want to run Windows, i can't help you. As others have allready mentioned, take a look at System76 if you reside in the US. Another option would be https://puri.sm/ Slimbook was mentioned, they are in the UK IIRC. If you are somewhere else, https://www.tuxedocomputers.com/ might have something for you.

Starlabs systems as well.

Re: Lenovo Selling Linux Laptops Directly in the US

#104

Earlier quoted context omitted.

The same problem touchpad issue also exists on my Lenovo L380 Yoga. I don't think it is due to firmware issues as the problem existed with the original and the replacement motherboard. I had two repairs done and a good experience. One time a fan and one time a motherboard replacement. Both times the Lenovo comes to you service promised dates were a day off. This was due to a regional holyday they could have scheduled…

The reason why i think it might be firmware(not the touchpad firmware) is that it was working happily for 2 years and i just recently booted into windows to do some flashing(not firmware, just rockchip firmware) and lenovo vantage decided to upgrade.

MHH maybe you are right. I can't exactly say when it started with my touchpad. Is your https://xkcd.com/243 also affected? Are the buttons of the mouse pad also affected?

Re: Lenovo Selling Linux Laptops Directly in the US

#105

I had a ThinkPad T14 AMD, which is Linux-certified by Lenovo. If you are used to the warts of Linux on laptops, it is quite ok. However, coming from MacBooks, the experience was comparatively bad. Pros: - The CPU fan on the Ryzen 7 Pro 4750U is not very loud. - You can easily add more memory (bumped up mine to 32GB RAM). - You can easily replace the SSD (replaced mine by 1TB) and there is M.2 slot for WWAN which can…

Nice detailed Linux-on-ThinkPad review. As a counter-point, my almost two year old ThinkPad E495 (Ryzen 3 so not nearly as high-end as yours) keeps on chugging on 20.04 with absolutely no hardware/driver problems whatsoever, including power management. It sure helps that the thing doesn't even have a fingerprint scanner.

No match to the XPS I had before (at twice the price) in terms of display and keyboard, though. And lack of keyboard lighting sure sucks. But then, Dell doesn't do AMD so you need a dysfunctional setup with Nvidia/optimus to get half-decent graphics.

Re: Lenovo Selling Linux Laptops Directly in the US

#106

Can’t trust them since the multiple spyware incidents. Fool me four times, shame on me Eg, > But it did more than that. It injected a self-signed root HTTPS certificate, which allowed them to hijack any and all encrypted traffic Different incident > This malware was hidden in the laptop's firmware, and abused the anti-theft feature in Windows 8 and 10. Whenever the laptop booted up, the executable would be extracted…

That makeuseof article from six years ago has little or no relevance to any new ThinkPad you might buy today.

Lenovo's consumer and business divisions are best thought of as nearly separate companies within one conglomerate.

Lenovo (formerly Legend) sold laptops and desktops for years before they acquired IBM's personal computer business. But they didn't just buy the ThinkPad name, the people came along with it.

The old Lenovo became the consumer group, and the IBM team became the business group. It's very common to find different approaches on hardware and software between the two lines.

As an obvious example, every ThinkPad (with some recent exceptions) has a TrackPoint, but no other Lenovo machine does.

This applies to software too. If you see something bad that happened on Lenovo consumer machines years ago, it's very unlikely that it affected ThinkPads. It just wasn't the same people making these kinds of decisions.

The ThinkPad team's bread and butter is not individuals like you or me, it's corporate customers who buy hundreds or thousands of machines at a time - and have IT staff who scrutinize the hardware and software.

The 2015 makeuseof article made three points. Let me address them in reverse order.

(3) BIOS-Based Malware. The source for that reporting is this Ars Technica article:

https://arstechnica.com/information-technology/2015/08/lenov...

Lenovo followed up quickly with a description of the security issue and provided a removal tool:

https://support.lenovo.com/us/en/product_security/lse_bios_n...

Near the bottom of the page is a list of the affected models. Note that they were only consumer machines, not ThinkPads.

(2) SuperFish. This was really stupid on Lenovo's part, but again, it was the consumer team who did this. The ThinkPad team would never have allowed something like that, and didn't.

(1) Lenovo Is Spying On You. Some guy bought two refurbished ThinkPads in 2014 and claims they had some Windows spyware. And this is somehow supposed to have anything to do with a Linux ThinkPad you may buy today? Give me a break.

Full disclosure: I am a major ThinkPad fan. I got my first one in 1998, and I have four of them within arm's reach right now: an X1 Extreme and X1 Carbon from work, and my personal P1 and old Yoga 460. Also have a mostly retired W520 and X220 Tablet in the other room, and a few older busted machines. I'm always happy to talk ThinkPads with anyone. :-)

Re: Lenovo Selling Linux Laptops Directly in the US

#108

Can’t trust them since the multiple spyware incidents. Fool me four times, shame on me Eg, > But it did more than that. It injected a self-signed root HTTPS certificate, which allowed them to hijack any and all encrypted traffic Different incident > This malware was hidden in the laptop's firmware, and abused the anti-theft feature in Windows 8 and 10. Whenever the laptop booted up, the executable would be extracted…

This is the only thing stopping me from buying an X1 Carbon. I had decided to buy a Dell Latitude instead, but apparently Dell did something similar [1], so now I don't know what to buy. Maybe a Huawei? AFAIK they haven't been caught in these shenanigans yet, but I still don't feel comfortable with them for some reason. God, the laptop market is awful. [1] https://www.eff.org/deeplinks/2015/11/superfish-20-now-dell-.…

Using preinstalled OS is weird. Just reinstall it front the scratch. Issue with Lenovo was that their BIOS injected their malware anyway. Dell is not so advanced.

Re: Lenovo Selling Linux Laptops Directly in the US

#110

They have been selling laptops without os for quite some time. I guess having a preinstall has some use but not much for me. The E14 gen3 is looking pretty nice for myself. Zen 3 ryzen (not quite M1 levels of raw power but not too far behind) with 24G ram and 512+1000G SSD for little over 1000 euros.

AFAIK, mobile Zen 3 is behind M1 in single-core workloads but wins in (most) multi-core tasks if you're using the top core count models (5800, 5900).

Yes, the M1 is about 0-20% faster in single core benchmarks and slower in everything multi-core. https://www.notebookcheck.net/R7-5700U-vs-M1_12978_12937.247...
Post reply on HN