I'm not sure what codex helped with for the Lenovo case, if all that was required was open the stick and stick the sdcard into a computer.
It's crazy that Lenovo will still be trusted to build secured hardware after that. It's not even a vulnerability at this point, I'm not sure how this could pass any form of security review, let alone having anyone review the design and approve it. They must have known it was nothing they pretended and still decide to sell it.
> It's crazy that Lenovo will still be trusted to build secured hardware after that.
Lenovo already has an history of backdooring the devices they sell, sometimes in exchange for money. It's insane that anyone trusts them for anything. https://en.wikipedia.org/wiki/Levono#Security_and_privacy_in...
loading story #50330318
loading story #50332927
loading story #50330405
loading story #50330704
He used codex on other devices. He just opened the Lenovo USB case no AI needed because the sd card can be read by using a reader. The USB connection is disabled/enabled by the fingerprint reader.
So many boxes to tick, and with a company culture that leans towards box ticking and apathy (regulatory checklists without the extra checkbox “is that last checkbox a real checkbox" then you have to talk to the nerd department who's too busy for your stupid questions... Etc. Etc.) What can we expect? I'm disappointed in Lenovo for this, but my own apathy expects no one will be held accountable!
[dead]