Unhackable Netbooks given to students

posted Sep 27th 2009 7:41am by
filed under: security hacks

nb

Where would be the best place to test out an unhackable netbook? The NSW department of education in Australia thinks that college is perfect . They plan on distributing netbooks, preloaded with Windows 7,and iTunes. They also have bios level tracking and security, allowing them to be remotely shut down on command. With 20,000 of these in circulation, we would think that we’ll see someone proving the “unhackable” statement wrong. We can only hope.

[via slashdot]



277 Responses to Unhackable Netbooks given to students

  • Hackius says:

    What’s the point of these unhackable netbooks

  • Misfitsman805 says:

    HA
    Nothing is “Unhackable”

  • Brain says:

    World domination!

  • Ohh yeah… UNHACKABLE WINDOWS ;)

    Let’s eat some moon cheese because the moon is out of cheese O.o

  • nnx says:

    Do you hear that?
    thats the sounds of thousands of keylogger, portscanners, and sniffers booting up at the hands of hackers which are eager to prove that there is nothing “unhackable”, especially when it is marketed as such.

  • k0ldburn says:

    They can make it unhackable, but that won’t stop us from hacking it. Hackius has a point, getting an unhackable netbook is like buying a car that only goes 30mph.

  • Collin says:

    @nnx
    Listen, its going to take more than “script kiddie” type of hacking to get past these things. A simple keylogger is not going to do a darn thing. Im sorry, but a real hacking attempt on such a device requires much more than what you have suggested.

  • Bouke van der Bijl says:

    Hah, unhackable

    Funny

  • sean says:

    Hack resistant, maybe.

    There’s always a way. It will have to be tamperproof with an exploding dye pack, but that will only mean that someone won’t mind having blue skin for two weeks.

  • JayNix says:

    Oh Micro$oft… When will you learn, not everybody loves and needs you with your proprietary hell?

  • PodeCoet says:

    I have a relative with one of these laptops, they’ve actually started distributing them throughout highschools too. They’re trackable via GSM/GPS, and apparently “any modification will cause the laptop to shut down and cease to function” (his words)

    I’ve yet to take a closer look at it, but it makes you wonder what kind of hacks are “detectable” leading to shutdown. For example, if I was to take it to my basement that has no GSM or GPS penetration, would they be stupid enough to embed a routine that shuts the laptop down when both signals are absent?

    If not, wouldn’t it be as easy as removing the ceramic GSM/GPS antennas from the PCB to stop any GSM control / GPS fixes from occurring? (this works with the GM862/GE863 modules from TELIT for example, undetectable by the modules firmware, they just think and report no signal when antennas are detached)

  • Hackius says:

    @PodeCoet: a simpler solution is tinfoil

  • PodeCoet says:

    @Hackius

    ‘Doh. You are correct sir.

  • k0ldburn says:

    Wouldn’t it be easier to just get your own netbook? I mean this really isn’t what hackaday is about, but bringing your own netbook might be a lot faster and easier than hacking around the BIOS level security. Maybe I’m just lazy…

  • brad says:

    Would it not be as easy as disconnecting from the internet, finding a way around the bios password lock, and flash a new one? I wish I could get my hands on one of these..

  • emuboy says:

    so…bios eh? take it apart,sold of the flash, reflash it with a compatible one (beacuse netbook ara all the same under the hood) and resold it…after wipe 7 and put debian :D

  • That Guy says:

    I would just refuse to use such a pain in the ass laptop. I mean, laptops with that kind limited power are widely available and cheap. So why bother using (and being financially responsible for any damages) something that is going to possibly be spying on you and brick itself if it things your hacking it?

  • Patrick says:

    It would be pretty funny if you could uninstall the tracker through Windows Device Manager.

    I doubt that would be the case, but it would be hilarious.

  • OrderZero says:

    So first I saw unhackable and I like :|
    but then I saw Windows 7 and I lold :D

  • Lord Raven says:

    Unhackable hmm… That sounds alot like someone saying …The Titanic is unsinkable… Ah history always proves them wrong.

  • ParkeyParker says:

    I’d just get my own netbook, which would be much faster than that, and THEN attempt to hack it… Sounds like a fun little project to me lol.

  • Carl says:

    Unfortunately the same methods they use to make these things unhackable and secure usually turn things into unusable and shit.

  • pill.head says:

    If it is GSM or GPS tagged then theoretically shouldn’t you be able to “clone” the ESN or IMEI and redirect the signal to a “dummy” device while you play to your hearts content? Just a thought……

  • vikki says:

    hack them all, let the internet sort them out

  • That Other Guy says:

    You would have to make a seriously useless piece of crap for it to ever be “unhackable”. And by that I mean it literally discourages hackers by its absolute uselessness. I mean, you wouldn’t even consider it worthy of being a paper weight!!

  • redkutta says:

    They’ve actually already got past the restrictions, apparently. A few choice liveCD tools that alter the BIOS along with removing the CMOS battery and a little soldering has taken care of it. Don’t really know the details, it’s just hearsay

  • daler says:

    So… what’s to keep someone from yanking the HD and making an image of it? Along with re-flashing the bios?

  • wafermouse says:

    The gov.au seems to have some really funny ideas about how people should be able to use tech. resources. Filtering the internet for the whole country, “unhackable” systems? Hah. I can even deal with living in the voyeuristic UK, so long as I’m not living in invisible handcuffs.

  • kyle says:

    @daler, ethics my good man ethics… oops that’s WHY we do it.

    big ups to the first guy to boot *nix on one and call tech support about the new ‘problem’

  • kamanashi says:

    Didn’t schools once try this try this with Macbooks?

  • spacecoyote says:

    This is pretty retarded. Just what I’ve come to expect from educators.

  • AllThatJazz says:

    I think that the point here is that the netbooks are ‘unhackable’ (or hack resistant) to OUTSIDE interference. Of course, if you have physical possession of a device, nothing is unhackable, eventually. As a method to prevent the unauthorized release of personal or proprietary information, this may work well enough to make it not worth your while.

  • Johan says:

    Unhackable? Feeling safe with an unhackable computer like feeling safe in a bulletproof vest. All is fine until someone decides to do some target practice with a .50 heavy machinegun.

    Please, never call something unhackable. At the most call it hacking resistant, and back up your claim with proof that indeed has some inherent safety that prevents it from being hacked easily.

  • Unhackable…pleh…the firmware on the BIOS will be force flashed once someone gets a working ROM of it and decompiles it’s security measures. Unhackable? We will see about that, and I highly doubt they closed off the BIOS physically b/c with Win7 and new Firmware for the chipset they will definitely have “secure” bios flashing updated..pleh..,so many things wrong with that “unhackable” statement it really does bother me.

  • je5us says:

    i live in australia. this is stupid. it seems the aussie goverment doesn’t know jack about computers and IT. i mean, just look up about that crazy wireless ineternet thing they were gonna do to the outback.

    “unhackable” maybe to the government they are

  • fenwick says:

    Physically accessible machines are never unhackable. Short or block out the antennas for wifi and GPS, and you’ve already half thwarted all their efforts.

    I don’t really see the point of the laptops. How are kids going to learn how to use computers well if we only let them use certain applications and go to certain websites? Maybe for art or English it would be fine, but some kids want to learn OUTSIDE of their classes. 2 GB of RAM, wasted.

  • GSV Pinochet's digital négligé says:

    The writer seems to really bum Microsoft in the gob. The way he goes on about TCO, and how it’s full of lots of software that is ‘woth’ loads of money but actually cost nothing near that makes it look like another MS sponsored get the kids on crack, I mean Windows while they are young campaign.

    I’m willing to bet Brett Winterford won’t run a follow-up article once this has been shown to be a massive failure.

    On the plus side it is promoting some ingenuity on the part of the students to thwart it, so thats got to be a good thing.

  • andrew says:

    @emuboy: I was just about to suggest that. With the recent posts on flashing netbook bioses, it ought to be as simple as removing the bios and flashing it with the consumer bios version.

  • j00kypirate says:

    load them with explosives. blow the little buggers hands off. then the kids will be unhackable too.

  • kuhl says:

    Nice method to test out your security… its a brilliant move, why spend millions testing the thing in house? Send it to the wolves, then after a year or so, they can say its real world tried and tested hack proof. I agree that nothing is unhackable, just takes the right mind.

  • kuhl says:

    what happens when Adobe, MSoffice Itunes or windows7 has a security flaw and gets a virus, does the thing brick and I lose all my school work? I guess modern day “dog ate my home work”

  • Choscura says:

    My first instinct is to RF Shield it and try playing.

    I’m not an expert by any means, but I really bet that with a few hours behind some brass screen, I could have that book doing my bidding like I’d brought it on board the mothership and probed it.

  • jωt says:

    the webcam is always watching you

  • blah says:

    you know whats unhackable, A BRICK!!

    or is it?

  • fragged says:

    This, is from the same great continent that brought the $80 Million AUD netfilter that could be disabled simply by ending the process.

    All you people underestimate Australia’s public tech know-how. The GSM/GPS is probably to prevent theft, and all those stoner kids losing it somewhere in there weed-shed; The ‘BIOS Level Security’ is probably just a (simple) generic BIOS password; and the ‘Shut down’ features are probably a remote administration tool that could be cut off at a decent firewall.

    Stop thinking like hackers think, and start thinking like the ‘Tech-sperts’ that are just A+ certified $40k / year government-types.

  • Wwhat says:

    Shield it, disconnect, short to ground (to defeat batteries) then open it up get lots of shots online and then remove the usable parts, CPU/RAM/case/etcetera to use normally.
    Any leftovers you put in an envelope in a mailbox at the ministry of information extraction, or what have you.

  • k0ldburn says:

    fragged is probably right, they aren’t designing this to be hack proof to US, it’s just for people who freak out and call geeksquad when they get the BSOD.

  • zigzagjoe says:

    unhackable netbook is watching you wank!

  • strider_mt2k says:

    unhackable netbook is wanking on your watch!

  • Eddie says:

    Haha thats hilarious –

    Just another way of gathering intelligence – just a matter of time..

  • Daft says:

    How can be That Unhackable.
    If you add a lcd front display and you bloody hacked it.

  • Remarknl says:

    wtf! come on! we just had a few articles about flashing the bios with a serial interface!

    Thats the top level jou can hack, nothing above that watches you(exept for real people like teatchers)

    ofcourse we can hack this:
    if you can unsolder it, its hackable!

  • Ivan_k says:

    @Collin. That’s because nnx didn’t hear me flick on the Weller :) Also GPS and GSM is so much fun with SDR and USRP. As if RF was ever uncompromisable… And RFID, it’s a riot! I thaught I’d never say this on the net, but right now I’m actually laughing out loud.

  • Tof says:

    Does anyone else remember that CS4 doesn’t work with screens this small because it has a locked resolution for some of the windows so you can’t even click OK or CANCEL.

  • Shadyman says:

    Hackproof? I’d like one of these. To try, of course.

    Step 1. Open case
    Step 2. Erase BIOS settings

    Step 4. Profit!

    Ok, on a more serious note, the adage of physical security being your last line of defense? That still stands true here. Even with ‘exploding dye packs’, all it would take is for one person to open theirs up, study where the dyepack *was* (since it exploded), and figure out how to open one without setting it off.

    All you need to do is open the case, and you’ve got direct access to a reprogrammable hard drive, a flashable BIOS, and probably even a JTAG header and/or debug port for the really serious.

  • Collin says:

    @Ivan_k

    lol nice. lol ya that whole RFID security bull crap is such a joke.

  • asa51n says:

    WOOHOO, Lenovo S10 parts will be flooding ebay shortly… EXCELLENT, i need a new keyboard… :)

  • M4CGYV3R says:

    /me googles “Replace Netbook Bios”

    Unhackable my ass

  • M says:

    These aren’t actually being distributed in college but in high school, after they leave high school hte netbooks are unlocked but still tracked.

    We have about a hundred arriving in our school’s IT department in about a month, and we already have a team of 20 eager students trying to find a way of unlocking them. We’ve ordered 20 extra and students are encouraged to find any way to make these function as laptops that… y’no, could be of use to education.

    Also, some have already been shipped for staff with a beta version of Windows 7. :|

    M

  • asa51n says:

    Check out s10lenovo.com
    All you need to know about the little buggers!

    I wonder if USB boot would have priority??

  • Helllo! says:

    Oh it’s sooo on. Unhackable my ass.

  • Helllo! says:

    Lol M4CGYV3R wrote the same thing as me (“Unhackable my ass”) haha

  • luigi517 says:

    unhackable…unsinkable…we shall see?

  • Hunter says:

    @Helllo!
    Even ur ass is hackable o.O

  • aztraph says:

    I bet the first one to hack this successfully gets a job offer

  • Scott says:

    Sounds like NSW just did the best troll of all time….

  • djdrewsgrl09 says:

    You know.. I think they think it is a game. I also think it is the most stupid thing on earth. If you haven’t noticed.. almost ANYTHING is hackable. Even with Windows 7… which is probably even worse then Windows Vista to work with and figure out.. trust me I have Windows Vista and some things are not as easy as they say they are.

    Anything with a simple internet hook up, or even wi-fi can be hacked. So.. good look in the whole.. “Unhackable” affair you guys.

    @ aztraph – your right, I bet you anything someone will be landing a high paying job for hacking into the stupid system. LOL.

  • Zymastorik says:

    Anything can be hacked, everything can be tracked. So many still think they can circumvent the tracking and tracing controls and most of them are full of hot air.

    Anyhow, un-hackable is a bullshit term and that’s been proven time after time, so I await the inevitable Hack-a-Day post about that, in the meantime… I can’t help but wonder if this isn’t just a form of legal bot-netting… or soon will be. 20k netbooks on autopilot could do some serious computing.

  • Ron says:

    It is feasible: just distribute the laptops with no battery or power supply. No power == no hack. :p

  • Ron says:

    (At least remotely…)

  • Mr Novack says:

    Only way to make it unhackable is not to have it connected to the internet or a network that is connected to the internet. Even have the bluetooth and wifi turned off too.

  • Monkeyman8 says:

    “the most hostile place for a computer on earth – the local high school.” that just shows you they don’t know what the hell they’re talking about. anyone with any sense know defcon is the most hostile place on earth for a computer. I’m sure they’ve already been hacked apart and the story just hasn’t been posted yet.

  • Zaphod says:

    Meh. Hackability is just a bios flash away.

  • DivePeak says:

    Hey, I just plugged an Arduino into the USB port… See – it’s hacked now! Mwahahahahaaaa!!!

    Sorry – couldn’t resist…

  • Dross says:

    These computers will be useless to 95% of students within a year if the Aust Govt continues with its plan to turn off the internet, more info at http://www.nocleanfeed.com/

    for the other 5% who are wise enough to tunnel out and ruin $50m of govt coin, good for them!

  • tjhooker says:

    It has BIOS level remote managment. I know ASLR and NX on the OS level. Someone will make a tutorial and software flasher most likely. You gotta patch the BIOS, and remove the RDID. You could probably fix the OS monitoring if any exists.

  • Jehu says:

    Mate, the NSW gov is just bonkers. Even the TAFE network is full of holes. We used to shut down eachothers PCs remotely for fun. As for the dye packs (if they exist in these things) just chucking them in the freezer should take care of that.

    Humm, makes me want to go back to school. Doubt the’d let me though, lol.

  • Steve Ballmer says:

    lol, windows 7 – “unhackable”. it was barely out of beta and had two huge exploits. making something unhackable is impossible, especially if it’s a closed source piece of shit like windows.

  • therian says:

    It for schools, and what they mean by unhacable is that you cant play games in class nothing more serious

  • s0lid says:

    Hmm need to ask them to send one over here and they’ll get it back in a day (shippings not counted) fully hacked :P
    Little solder jobs and reinstalls ::smoke

  • cyanide says:

    this reminds me of the bulletproof vest thing.

    bulletproof vests aren’t bullet proof – they are bullet RESISTANT. meaning: a good soft vest can take a 9mm slug and a barrage of .22s no problem, but if you put a 12 gauge slug anywhere near that thing it’s gone.

  • Jimbo says:

    These “unhackable” netbooks are easily defeated by doing a Bios update using a bios version from a similar model not released for these purposes. Done. GPS won’t even be recognized, OS can be nuked and no remote administration can be done. It’s more hot air than anything else. Almost all of the netbooks can have their bios reflashed from thumbdrives.

  • O RLY??? says:

    Coreboot
    Remove GPS (if it has custom firmware)
    Install Debian

  • Drone says:

    First they give your kids these controlled laptops. Next they ban your kids from using their own laptops. Next they start loading up the laptops up with Government indoctrination material your kids are required to learn. Voila – in a generation you have New Venezuela instead of New South Wales.

  • kenwoodplc says:

    if it is true so its very good.

  • ashraj says:

    Solder a new bios chip. Remove any GPS or Tracking chip. You’re done.

  • Max says:

    Being one of the students who will be recieving the laptops this week, I bet someone will hack them.

    If you guys are interested, I can put up a blog/image gallery/whatever and post info and pictures of the laptops.

    Happy Hacking!

  • NNM says:

    oh well, if they say it’s unhackable, it probably is.
    No point in trying… *sigh*

    (Yea, right… lmao)

  • luke says:

    @max you want to give us a url ?
    im with the rest of you guys.

    dye pack ? freeze laptop

    flash bios. install *nix … reuse gps and gsm as i would imagine there doing the tracking in software

    the first student to load osx on one of these. hell ill buy you a coke

  • therian says:

    BUT students will have to pay for any hardware modification

  • Max says:

    I’ll host it at http://www.maxexcloo.com when/if I do it (haven’t got the laptop yet).

    BTW, site is currently down due to my VPS being broken :p

  • asd says:

    “allowing them to be remotely shut down on command” by admins or anyone who want pwn them

  • Blizzarddemon says:

    I hate how they veiw hacking like its a bad thing. Hell I’ll be laughing my ass off when every single on of those networks gets tripped by false positives….it’ll almost top the xbox360′s rod. lol

  • Blizzarddemon says:

    netbooks*

  • Morgan says:

    Pahlease even MS says if you have physical access it is game over. They probably have application whitelisting, but Rootkit, bootkit, and that is gone, even if the bios is locked and the OS is only application whitelisted, simply backup the os and hack it in a VM to get the local admin password etc.
    I don’t think they are making the hardware really unhackable, just hard… oh noes security torx where oh where will I get them from, I don’t think they are going die-packs or even case opened switches.
    With such a large userbase it will be moments before they are broken.

  • Leave a Reply

    XHTML: You can use these tags: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

    Hack a Day serves up fresh hacks each day, every day from around the web as well as hacking related news.

    Send us your hacks










         




    Hacks

    Resources