Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Remote Code Execution on Most Dell Computers

d4stiny.github.io

Post reply on HN
Print view View original

291–300 of 323 posts

Re: Remote Code Execution on Most Dell Computers

#291

Post by IshKebab »

anotheryou wrote: post #65

There is also the neat tool "Dell Display Manager". The only way to avoid the moody touch buttons on some Dell monitors to change their brightness: - updates served via HTTP through the browser only - as a binary (exe) - from a domain other than dell.com (delldisplaymanager.com) - signed by a 3rd party (En Tech Taiwan) - and nagging about updates every reboot (you can get an outdated version via dell.com, but it will…

Yeah it's not the only way. Windows actually provides and easy-to-use API to change screen brightness (since it's a standardised feature). I made a little physical knob that connects via USB to control mine since those capacitative buttons are a right pain.

Re: Remote Code Execution on Most Dell Computers

#292

Post by carboy »

cryptonector wrote: post #50

OEM: Let's differentiate our otherwise commodity hw product! OEM: I know, let's add value with bundled software the customer can't uninstall! Then the bundled software turns out to (inevitably) be useless vulnerable garbage. Inevitably because a) the customer doesn't need it, b) it's engineered with all the effort that normally goes into adware for captive audiences (i.e., _minimal_), which means it will be vulnerabl…

OEM: how can we make money on a commodity platform, when someone else controls most of the design parameters and they are dictated to us, and margins are razor thin, because most people who buy PC’s want to spend the least amount of money.

OEM Sales: we have companies lining up to bundle software on our computers and they are all willing to big money to be bundled, and even more money to be bundled and not be removable.

OEM: yay, we can be profitable!!!!!

Not one person really thinks the bundled software is of any value, other than the cash the bundling fee generates. If it was illegal for OEM’s to bundle software you’d see even more contraction in the PC OEM market.

Re: Remote Code Execution on Most Dell Computers

#293

Post by anotheryou »

Liskni_si wrote: post #90
anotheryou wrote: post #65

There is also the neat tool "Dell Display Manager". The only way to avoid the moody touch buttons on some Dell monitors to change their brightness: - updates served via HTTP through the browser only - as a binary (exe) - from a domain other than dell.com (delldisplaymanager.com) - signed by a 3rd party (En Tech Taiwan) - and nagging about updates every reboot (you can get an outdated version via dell.com, but it will…

Not the only way. I used to use ddctool [0] to change brightness on monitors and it worked even with some cheap old Benq displays. Unfortunately Linux doesn't support DDC over DisplayPort Multi-Stream Transport, but you won't need to worry about that. All you need is some Windows alternative to ddctool. This was the first search hit: https://www.clickmonitorddc.bplaced.net/ [0]: https://github.com/danielng01/ddctool

Oh thank you!

I have an auto hotkey script triggering the DDM, but it's not working well.

Re: Remote Code Execution on Most Dell Computers

#294

Post by kingosticks »

robocat wrote: post #258
sizzle wrote: post #183

Earlier quoted context omitted.

Do Google pixel phones offer an unadulterated, bloatware free Android experience?

FYI I have a Nokia 7+ and it is fairly good for giving a pure Google experience ("Android One"), without being quite so expensive. Also HMD Global seem to be reliable at giving the security updates OTA. I haven't looked at the newer Nokia 7.1.

I'm not sure I'd go with a Nokia after https://arstechnica.com/gadgets/2019/03/hmd-admits-the-nokia...

Re: Remote Code Execution on Most Dell Computers

#295

Post by jpking »

pjmlp wrote: post #275
LeoPanthera wrote: post #126

Earlier quoted context omitted.

It works, too. This is partly why the iPhone was so popular, at first. It's been so long now that probably everyone has forgotten, but before the iPhone, essentially every smartphone on the market was fully loaded with trialware, crapware, and often had hardware features locked out by software so that you could pay extra to unlock them. I remember one particular phone that had four user-configurable hardware buttons,…

So the bundled FB app on iPhone is a trick my mind is playing on me?

>> bundled

My iPhone bought direct from Apple didn't have anything like that. Nor did my friends who buy on contract with carriers (UK).

What carrier did you buy from and did you restore from a backup/iCloud?

Re: Remote Code Execution on Most Dell Computers

#297

Post by jpking »

nv-vn wrote: post #196
LeoPanthera wrote: post #126

Earlier quoted context omitted.

It works, too. This is partly why the iPhone was so popular, at first. It's been so long now that probably everyone has forgotten, but before the iPhone, essentially every smartphone on the market was fully loaded with trialware, crapware, and often had hardware features locked out by software so that you could pay extra to unlock them. I remember one particular phone that had four user-configurable hardware buttons,…

Yep. Only Android phones worth buying are Google/OnePlus because they don't pull that crap.

The thing which worries me about OnePlus and similar cheaper options is the security patches. They seem to be very slow/non-existent and the devices aren't supported for very long.

Re: Remote Code Execution on Most Dell Computers

#298

Post by pjmlp »

jpking wrote: post #295
pjmlp wrote: post #275

Earlier quoted context omitted.

So the bundled FB app on iPhone is a trick my mind is playing on me?

>> bundled My iPhone bought direct from Apple didn't have anything like that. Nor did my friends who buy on contract with carriers (UK). What carrier did you buy from and did you restore from a backup/iCloud?

Company provided iPhone SE with Vodafone support contract.

Backup/iCloud access are forbiden as per company IT securiy data management rules.

Re: Remote Code Execution on Most Dell Computers

#299

Post by tfigment »

ssheth wrote: post #270
petre wrote: post #257

Earlier quoted context omitted.

What did you replace it with? I also use a N5.

OnePlus phones (originally replaced N5 with a OnePlus 3 .. now upgraded to 6T) .. they have the same "flagship killer" ethos of the original N5

Same here. On 5T. My only issue was lack of security updates in the end. I could try to flash with another distro but too much work with too little gain. Love my 5T even more.

Re: Remote Code Execution on Most Dell Computers

#300

Post by natmaka »

owenmarshall wrote: post #220
natmaka wrote: post #204

Earlier quoted context omitted.

AFAIK a fair fraction of mid-and-large enterprises use the Intel Management Engine, which seems to be considerably more dangerous than this. It is "an autonomous subsystem ((...)) incorporated in virtually all of Intel's processor chipsets since 2008. ((One)) can use it to turn the computer on and off, and they can login remotely into the computer regardless of whether or not an operating system is installed. ((It))…

I regret if my comment was misconstrued - I'm not claiming enterprises wouldn't use this specific tool because it is dangerous . I'm claiming they wouldn't use this specific tool because it does not fit within the "how do I manage tens of thousands of endpoints while meeting multiple defined and audited security and compliance goals" box. You might even say that quality and security are orthogonal, at least in this p…

I understand and agree, thank you!
Post reply on HN