Does anyone else think this makes a great denial-of-service attack?

eWeek

This new security feature allows a user to send an SMS (short message service) text message from a cell phone to a Lenovo ThinkPad that has been lost or stolen. Once the kill command is sent, the lost or stolen ThinkPad is either disabled immediately or the notebook is disabled after the PC has been turned back on, said Stacy Cannady, Lenovo’s product manager of security.

Since hard disk drive encryption will not work properly if the PC is running or in hibernation mode, this disable feature ensures that the data is secure by shutting the machine down and allowing the hard disk drive encryption to work. If and when the ThinkPad laptop is recovered, the user can restore the notebook, its settings and the data contained on the PC by entering a password.

While Lenovo has developed other technologies that can disable or secure a ThinkPad laptop that is either plugged into a network or is using Wi-Fi, the Constant Secure Remote Disable technology covers those notebooks that are using a cellular WWAN (wireless wide-area network) network for Internet access.

“What we did was find a way to have the PC shut down in response to a command that is sent over the cellular network,” said Cannady.

“The limitation here is that you have to have a WAN card in the PC and you must be paying a data plan for it,”

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: