HP Laptops Have A Hidden Keylogger - Page 1
Forum section: electronics / general

author: rstofer
author_rank: Super Contributor
timestamp: December 11, 2017, 03:14:07 pm
content: This may be old news but since it is the computer buying season, maybe it's important enough to reopen:http://www.bbc.com/news/technology-42309371HP laptops have a hidden keylogger. I was seriously considering adding a couple of HP All-In-Ones to my ever expanding collection of PCs and had planned to head over to Best Buy today. I think I'll give HP a pass even though the logger is only known to be on laptops. It's pretty clear that I can't trust HP drivers.

author: imidis
author_rank: Frequent Contributor
timestamp: December 11, 2017, 03:29:20 pm
content: These days I don't know if people are all that aware. I mean people are buying hot mics now.... On purpose!

author: Jeroen3
author_rank: Super Contributor
timestamp: December 11, 2017, 03:33:28 pm
content: Sensational headline.The laptop Synaptic driver had an debug option tobe able to be used asa keylogger.Source:https://zwclose.github.io/HP-keylogger/Quote

author: rstofer
author_rank: Super Contributor
timestamp: December 11, 2017, 04:13:27 pm
content: As I read the article, HP confirms that the code exists. It probably shouldn't be in the release code. As a result, one would have to wonder if HP even has a Quality Control group. Through downsizing, who knows? Sure, it's Synaptic's code but HP is responsible for what they release.It's kind of a shame this came up. I really wanted a couple of 27" Touch Screen All-In-Ones and the HP price is far better than similar offerings from Dell. I guess I'll put that project on back-burner for the time being.

author: rrinker
author_rank: Super Contributor
timestamp: December 11, 2017, 05:29:18 pm
content: I would not use this as a reason to suddenly not buy the machines you want. Seems kind of silly, shooting yourself in the foot type of thing.It's Synaptic's code, not HPs. It's not logging anything by default, AND, while I didn't read that article, I hit a different one that linked to HP's list of affected system which includes a download link for a repaired driver withotu the keyloggerhttps://support.hp.com/us-en/document/c05827409Fixed my work laptop hours ago.Though I always have the touchpad disabled anyway - can't stand those stupid things.

author: edavid
author_rank: Super Contributor
timestamp: December 11, 2017, 05:49:38 pm
content: In most (all?) cases you don't even need the Synaptics driver to use the touchpad... the standard Windows PS/2 mouse driver will work if you don't need the not-all-that-useful extra features of the Synaptics driver.And, HP is claiming that it's not an HP specific problem, so it makes even less sense to avoid HP for this.

author: CJay
author_rank: Super Contributor
timestamp: December 11, 2017, 07:12:07 pm
content: Well I have over 600 affected machines on *my* bit of the corporate estate, there'll be a patch rolled out over the next few days but the reaction from the Infosec team so far seems to be 'storm in a teacup'.And as RRinker said, it's not HP's code, it's Synaptic's code so it's possibly going to have affected an awful lot more manufacturers.I of course only post my thoughts here and none of my words here represent official policy of my employer etc. I would highly recommend anyone using Synaptics drivers on *any* hardware to check for updates and patches.

author: Mr. Scram
author_rank: Super Contributor
timestamp: December 11, 2017, 07:39:20 pm
content: As long as Intel ME is active, a simple keylogger shouldn't be much to worry about. You know, since we're talking about potential risks and all.

author: Jeroen3
author_rank: Super Contributor
timestamp: December 11, 2017, 08:04:59 pm
content: Quote from: edavid on December 11, 2017, 05:49:38 pmWindows Update most likely installs a severely outdated version of the Synaptics driver.

author: IanMacdonald
author_rank: Frequent Contributor
timestamp: December 11, 2017, 08:09:08 pm
content: A far more serious issue of that kind is that HTTPS does not protect against keyloggers and the like if the website has third party adverts on it.http://iwrconsultancy.co.uk/blog/httpsSerious, because people have been encouraged to put a lot of faith in HTTPS, whereas in the real Web environment it gives about as much protection as a wet paper bag would provide against aclaidheamh-mòr.

author: rstofer
author_rank: Super Contributor
timestamp: December 11, 2017, 08:34:39 pm
content: Quote from: edavid on December 11, 2017, 05:49:38 pmThe problem belongs to HP. It's their name on the box and they pre-install the driver. I can see where they would want to blame the problem on a subcontractor (and Synaptic did create the problem) but that just won't fly. It's an HP product and they own all of the issues. We learn that in "Bug's Life".

author: Ampera
author_rank: Super Contributor
timestamp: December 12, 2017, 08:58:43 am
content: I'd sooner buy an HP calculator than an IBM compatible by HP, which isn't wrong as I own three HP calculators, and zero HP PCs.

author: CJay
author_rank: Super Contributor
timestamp: December 12, 2017, 09:07:20 am
content: Quote from: rstofer on December 11, 2017, 08:34:39 pmAt the moment HP are the only ones to have owned the problem but, I read what they are saying to mean the code is likely to be included in drivers used by other manufacturers too.I have a feeling they may be right.

author: BrianHG
author_rank: Super Contributor
timestamp: December 12, 2017, 10:21:30 am
content: Microsoft just released a system malicious software removal tool update only on my HP laptops 2 days ago. (Win7pro) Is it a patch?None of my other win7pro PC systems had any forced updates...

author: rrinker
author_rank: Super Contributor
timestamp: December 12, 2017, 02:52:37 pm
content: The Malicious Removal Tool is usually updated every month. How useful it actually is these days is questionable.

author: David Hess
author_rank: Super Contributor
timestamp: December 12, 2017, 09:46:39 pm
content: This is the *second* time HP has gotten caught installing a keylogger on their laptops. The previous incident was a different piece of software.

author: Electro Detective
author_rank: Super Contributor
timestamp: December 13, 2017, 10:13:49 pm
content: Wouldn't a v!rus scan of the hard drive show up the keylogger?then you just nuke it and install a clean driver,basically anything non-conflict that works, without the latest update shmupdate merry-go-round security BS

author: BrianHG
author_rank: Super Contributor
timestamp: December 13, 2017, 11:55:15 pm
content: Quote from: rrinker on December 12, 2017, 02:52:37 pmThis one was separate from yesterday's monthly one...

author: Jeroen3
author_rank: Super Contributor
timestamp: December 14, 2017, 06:27:19 am
content: Quote from: Electro Detective on December 13, 2017, 10:13:49 pmNo. Because this keylogger was just a line of core reporting the scancodes to the windows tracer Those are built-in features.

author: bingo600
author_rank: Super Contributor
timestamp: December 14, 2017, 03:33:48 pm
content: Seems like the Lenovo's have the code too (synaptic) , just inactive by default/Bingo

author: CJay
author_rank: Super Contributor
timestamp: December 14, 2017, 06:15:12 pm
content: Oh, Lenovo too?What's that Skippy?If only someone could have predicted it wasn't a HP only problem?Quote from: CJay on December 12, 2017, 09:07:20 am