Late last year, Duo Labs, the security research team of Duo Security, purchased a stack of OEM (Original Equipment Manufacturer) laptops to see how secure they were. Some problems immediately jumped out at us, like the eDellRoot issue, but a few other issues took a bit more sorting through.
I took a look at the network by sniffing the laptops as they were first booted, and then, once configured. The idea was to judge how secure the laptops were based on network traffic and network presence.
Only for OEM workstation customers. Only for OEM Desktop workstations. Optional 4 th and 5 th year flex warranties available for OEM customers only. Dust filtration is a configurable feature, available only on Z2 Small Form Factor, Z2 Tower and Z4. Founded in 2014, Diesel Laptops provides specialized diesel diagnostic equipment for the commercial truck, construction, automobile, agriculture, and off-highway markets. Diesel Laptops is the industry leader in diesel diagnostic tools and repair information. Late last year, Duo Labs, the security research team of Duo Security, purchased a stack of OEM (Original Equipment Manufacturer) laptops to see how secure they were. Some problems immediately jumped out at us, like the eDellRoot issue, but a few other issues took a bit more sorting through.
Spoiler alert - from a network perspective, the laptops I looked at were kind of a mess.
Normally, we would just find the flaws, report them to the vendor, and release this paper after patching was complete and everyone was safe. But in this case, we found issues that would not necessarily meet the criteria of a vulnerability report.
The main takeaways include:
- Many of the privacy issues found affected all of the laptops. Some were more serious than others, but all laptops had issues.
- Network protocol-related security issues affected all laptops, starting from as soon as the laptop appeared on the network during initial boot.
- After Patch Tuesday updates, many privacy settings that were adjusted were reset to their default settings - without any notification to the end user.
- The lone OEM Microsoft Signature Edition model was more desirable since it contains less bolted-on and unneeded software, resulting in less questionable traffic.
- One particular finding: McAfee is using web bugs that can be used to track and serve advertising to users. In our opinion, this is the only purpose these web bugs serve. In addition, it is against security best practices to trust third party sites and allow them to load content. It puts users at risk and benefits only the vendor and advertisers.
Some of the issues were so glaring we felt compelled to provide tips on securing these laptops. Download our paper (PDF) for a full technical explanation of our security research and what you can do to minimize the impact of those results.
Oem laptop manufacturer/supplier, China oem laptop manufacturer & factory list, find qualified Chinese oem laptop manufacturers, suppliers, factories, exporters & wholesalers quickly on Made-in-China.com. Is it OK to use OEM Windows on your own PC? Don't ask Microsoft. If you go shopping online for Windows 7, you'll find OEM System Builder copies at significant discounts from full retail prices.
The main attack scenario to consider is not the new laptop user at home - at least from a network perspective - but, rather, when that new laptop user grabs their fresh purchase and heads out the door to the coffee shop, the hotel on a trip, the favorite restaurant chain with 'free Wi-Fi,' and so on. Drivers project white laptops & desktops refurbished.
Default laptop settings and protocols make it easier for an attacker to sniff, grab, view and redirect the unsuspecting laptop user's traffic for illicit purposes. Hotline drivers ed. Attackers can steal online bank account passwords, view company data and more due to default firewall settings and services that are exposed on the network.
This is just powering it up - good hygiene like using strong passwords and two-factor authentication, regular patching, and safe web surfing habits are not even being discussed in this scenario.
Default Settings Compromise Privacy
There are a lot of new features in Windows 8 and 10 that collect data about the user and laptop. Some of that data is uploaded to Microsoft and OEM vendor servers. On Windows 8, there are five screens of privacy settings, and on Windows 10 there are thirteen.
All of them are on by default. Many of the applications and services connected to these privacy settings start phoning home as soon as the laptop is connected to a network, before you are logged in. For anyone concerned about privacy, it would be ideal to have a chance to opt out - particularly when it's not obvious that the collection and uploading of data is even happening.
Turning them off seems like it would be a straight-forward process, but in some cases it requires either a service to be disabled or registry keys created/adjusted. So, an average user either wouldn't know how to do it, wouldn't think to do it, or both.
Additionally, when some of these applications and services get updated on Patch Tuesday, they resort to their default settings - without warning. This means every Patch Tuesday you will have to be in the habit of checking those privacy settings to ensure they stay off.
Data Collection Privacy Concerns
Encrypted network traffic was not examined, although after some investigation it was possible to tell at least the type of data being transmitted back to a Microsoft or OEM vendor server. It might give one comfort to know that virtually all privacy-related data was encrypted before transmission, but the data is still being collected nonetheless.
I understand the desire of the vendors to collect data to improve their products, I would just prefer to not be opted in without consent, particularly after I've adjusted the privacy settings with the explicit intent to stop data collection.
For the inexperienced beginner, the paper may seem rather daunting, but for your average IT person, this should be fairly easy to follow and understand. And let's face it, every one of us who 'computer' for a living have become the family and friend de facto standard help desk for those nerd-challenged who get a new laptop, and were probably asked to 'make it secure from the variousevils you keeping going on about', so this one's for you.
Is the laptop safe enough to take to a hacker conference? Well, it won't be low-hanging fruit if you complete the mitigation steps, but I'd still consider it at risk in extremely hostile environments.
This is a laptop running Microsoft Windows and a blog post about risks and turning off the really crazy stuff, not a hardening guide. That being said, I'd be a lot more confident handing the laptop back to your tech-challenged friend if the steps from the Detailed Mitigation Instructions section of the paper are taken.
At least from a network perspective, things will be a lot better before they pack up that laptop and head to the nearest coffee shop with public Wi-Fi.
Download the full technical paper (PDF) for detailed mitigation instructions, including how to adjust Windows 8 and 10 privacy and security settings:
- Removing McAfee and setting up Windows Defender
- Adjusting firewalls to stop the transmission of data
- Disabling settings for Windows privacy
- Disabling and deleting OEM apps that gather data
And how to configure advanced security settings, including: Selectwireless modems driver download for windows 10.
- Disabling LLMNR, Smart Multi-Homed Name Resolution, WPAD, Teredo Tunneling and ISATAP
- Other low-level privacy setting adjustments
This is a list of laptop brands and manufacturers.
Brands[edit]
Major brands[edit]
The main attack scenario to consider is not the new laptop user at home - at least from a network perspective - but, rather, when that new laptop user grabs their fresh purchase and heads out the door to the coffee shop, the hotel on a trip, the favorite restaurant chain with 'free Wi-Fi,' and so on. Drivers project white laptops & desktops refurbished.
Default laptop settings and protocols make it easier for an attacker to sniff, grab, view and redirect the unsuspecting laptop user's traffic for illicit purposes. Hotline drivers ed. Attackers can steal online bank account passwords, view company data and more due to default firewall settings and services that are exposed on the network.
This is just powering it up - good hygiene like using strong passwords and two-factor authentication, regular patching, and safe web surfing habits are not even being discussed in this scenario.
Default Settings Compromise Privacy
There are a lot of new features in Windows 8 and 10 that collect data about the user and laptop. Some of that data is uploaded to Microsoft and OEM vendor servers. On Windows 8, there are five screens of privacy settings, and on Windows 10 there are thirteen.
All of them are on by default. Many of the applications and services connected to these privacy settings start phoning home as soon as the laptop is connected to a network, before you are logged in. For anyone concerned about privacy, it would be ideal to have a chance to opt out - particularly when it's not obvious that the collection and uploading of data is even happening.
Turning them off seems like it would be a straight-forward process, but in some cases it requires either a service to be disabled or registry keys created/adjusted. So, an average user either wouldn't know how to do it, wouldn't think to do it, or both.
Additionally, when some of these applications and services get updated on Patch Tuesday, they resort to their default settings - without warning. This means every Patch Tuesday you will have to be in the habit of checking those privacy settings to ensure they stay off.
Data Collection Privacy Concerns
Encrypted network traffic was not examined, although after some investigation it was possible to tell at least the type of data being transmitted back to a Microsoft or OEM vendor server. It might give one comfort to know that virtually all privacy-related data was encrypted before transmission, but the data is still being collected nonetheless.
I understand the desire of the vendors to collect data to improve their products, I would just prefer to not be opted in without consent, particularly after I've adjusted the privacy settings with the explicit intent to stop data collection.
For the inexperienced beginner, the paper may seem rather daunting, but for your average IT person, this should be fairly easy to follow and understand. And let's face it, every one of us who 'computer' for a living have become the family and friend de facto standard help desk for those nerd-challenged who get a new laptop, and were probably asked to 'make it secure from the variousevils you keeping going on about', so this one's for you.
Is the laptop safe enough to take to a hacker conference? Well, it won't be low-hanging fruit if you complete the mitigation steps, but I'd still consider it at risk in extremely hostile environments.
This is a laptop running Microsoft Windows and a blog post about risks and turning off the really crazy stuff, not a hardening guide. That being said, I'd be a lot more confident handing the laptop back to your tech-challenged friend if the steps from the Detailed Mitigation Instructions section of the paper are taken.
At least from a network perspective, things will be a lot better before they pack up that laptop and head to the nearest coffee shop with public Wi-Fi.
Download the full technical paper (PDF) for detailed mitigation instructions, including how to adjust Windows 8 and 10 privacy and security settings:
- Removing McAfee and setting up Windows Defender
- Adjusting firewalls to stop the transmission of data
- Disabling settings for Windows privacy
- Disabling and deleting OEM apps that gather data
And how to configure advanced security settings, including: Selectwireless modems driver download for windows 10.
- Disabling LLMNR, Smart Multi-Homed Name Resolution, WPAD, Teredo Tunneling and ISATAP
- Other low-level privacy setting adjustments
This is a list of laptop brands and manufacturers.
Brands[edit]
Major brands[edit]
Name | Country | Brands and product lines (A-Z) | Market share (Q3 2020)[1] |
---|---|---|---|
Lenovo | China | IdeaPad, Legion, ThinkPad, ThinkBook, Yoga | 23.7 |
HP | United States | Elitebook, Envy, Omen, Pavilion, ZBook, Spectre, Probook | 23.6% |
Dell | United States | Alienware, G Series, Inspiron, Latitude, Precision, Vostro, XPS | 13.7% |
Apple | United States | MacBook | 9.7% |
Acer | Taiwan | Aspire, Enduro, Extensa, Nitro, Predator, Swift, Spin, Switch, Travelmate | 7.9% |
Other brands[edit]
Brand | Country |
---|---|
Asus - ZenBook, VivoBook, ROG, TUF | Taiwan |
Ordenadores Mountain - (YELLOMIX, S.L.) | Spain |
AXIOO International | Indonesia |
Clevo | Taiwan |
Digital Storm | United States |
Elitegroup Computer Systems | Taiwan |
Eurocom Corporation | Canada |
EVGA Corporation | United States |
Falcon Northwest – DRX, TLX | United States |
Google - Chromebook Pixel | United States |
Founder | China |
Fujitsu | Japan |
Gigabyte Technology | Taiwan |
Gradiente | Brazil |
Grundig | Germany |
Hasee | China |
Huawei – MateBook | China |
Hyundai | South Korea |
iball | India |
Illegear | Malaysia |
Končar – Končar Elektronics and Informatics Inc. | Croatia |
Lanix – Lanix Portatiles, Neuron | Mexico |
Lava | India |
Lemote | China |
LG – Gram | South Korea |
Maingear | United States |
Medion – Akoya | Germany |
Meebox – Meebox, Slate | Mexico |
Micro–Star International (MSi) – Megabook, Wind | Taiwan |
Microsoft – Microsoft Surface | United States |
NEC – VERSA, LaVie | Japan |
Origin PC | United States |
Panasonic – Toughbook, Let's Note | Japan |
Positivo Informática – Positivo, Platinum, Aureum, Unique, Premium | Brazil |
Pravetz – 64M | Bulgaria |
Purism – Librem | United States |
Razer – Blade | United States |
Samsung Electronics – Samsung Sens, Galaxy Book | South Korea |
Sharp – Mebius | Japan |
Siragon, C.A. | Venezuela |
Starmobile | Philippines |
System76 | United States |
Toshiba - Portege, Tecra, Satellite, Qosmio | Japan |
Tongfang | China |
VAIO | Japan |
Velocity Micro | United States |
Vestel | Turkey |
VIA – NanoBook, pc–1 Initiative | Taiwan |
Vizio | United States |
Walton | Bangladesh |
Wortmann – Terra Mobile | Germany |
Xiaomi - Mi NoteBook | China |
Defunct[edit]
- Acorn Computers (United Kingdom) – Deskbook, Desknote and Solonote
- Averatec (South Korea)
- Compaq (United States) (acquired by Hewlett–Packard) – Evo, Armada, LTE, Presario
- Digital Equipment Corporation (United States) (acquired by Compaq) – HiNote
- eMachines (United States) (acquired by Gateway Computers)
- Everex (United States) – CloudBook, gBook
- Fujitsu Siemens (Germany/Japan) (Fujitsu bought out Siemens' share of the company)
- Gateway Computers (United States) (acquired by Acer)
- Gericom (Austria) (acquired by Quanmax AG)
- Itautec (Brazil) (acquired by Oki Electric Industry, PC/laptop division dissolved)[2]
- Maxdata (Germany)
- OQO (United States)
- PC Club (United States) (Clevo brand)
- Vigor Gaming (United States) – Atlantis, Augustus, Artorius, and Aegis
- Voodoo PC (Canada) – Envy (acquired by Hewlett–Packard)
Defunct computer models[edit]
No longer manufacturing computers[edit]
- BenQ (Taiwan)
- Doel (Bangladesh)
- Epson (Japan)
- HCL (India)
- HTC (Taiwan) – HTC Shift
- IBM (United States) – sold its personal computer and Intel-based server businesses to Lenovo
- Nokia (Finland) – Booklet 3G
- Olivetti (Italy) – Olibook
- Onkyo (Japan) – SOTEC
- Philips (Netherlands) – X200
- Sony (Japan) – VAIO – sold its PC business division to Japan Industrial Partners (JIP); owns 25% of VAIO Corporation
- Wipro (India)
Original design manufacturers (ODMs)[edit]
The vast majority of laptops on the market (94% in 2011) are manufactured by a small handful of Taiwan-based original design manufacturers (ODM), although their production bases are located mostly in mainland China.[3]
Major relationships include:[4]
- Quanta sells to (among others) HP, Lenovo, Apple, Acer, Dell, NEC, and Fujitsu
- Compal sells to (among others) Acer, Dell, Lenovo and HP
- Wistron (former manufacturing & design division of Acer) sells to Dell, Acer, Lenovo and HP
- Inventec sells to HP, Dell and Lenovo;
- Pegatron (in 2010, Asus spun off Pegatron) sells to Asus, Apple, Dell, Acer and Microsoft
- Foxconn sells to Asus, Dell, HP and Apple
- Flextronics (former Arima Computer Corporation notebook division) sells to HP
ODM laptop units sold and market shares[edit]
Year | 2018[5] | 2017 | 2016[6] | 2015[7] | 2014[8] | 2013[9] | 2012[10] | 2011[11] | 2010[4][12] | 2009[13][14] | 2006[14] | ||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
ODM | Units sold (millions) | Units sold (millions) | Units sold (millions) | Units sold (millions) | Units sold (millions) | Units sold (millions) | Units sold (millions) | Units sold (millions) | Units sold (millions) | Units sold (millions) | Proportion of market | Units sold (millions) | Proportion of market |
Compal | 34.5 | 39.3 | 43.0 | 46.0 | 37.8 | 55.7 | 48.2 | 37.9,0 | 26% | 15,0 | 21% | ||
Quanta | 37.6 | 40.6 | 31.6 | 48.5 | 43.1 | 53.8 | 54.0 | 52.1 | 35.9,0 | 25% | 24,0 | 33% | |
Wistron | 18.9 | 18.8 | 21.1 | 24.0 | 31.5 | 31.5 | 27.5 | 26.2[15] | 18% | 11,0 | 15% | ||
Inventec | 9.9 | 8.5 | 18.6 | 20.9 | 16.8 | 17.0 | 16.2 | 21[16] | 15% | 7,0 | 10% | ||
Pegatron,[17] until 2007 Asus[18] | 8.7 | 9.5 | 9.8 | 14.0 | 18.5 | 17.5 | 15.5 | 10.9,0 | 8% | 5,0 | 7% | ||
Foxconn[17] | 2.7 | 4.2 | 18.4 | 10.0 | 7.2,0 | 5% | |||||||
Flextronics | 5.0 | 4.3 | 7.2,0 | 5% | |||||||||
Elitegroup[17] | 3.6,0 | 2% | |||||||||||
Others | 15.0 | 10.0 | 11,0 | 15% | |||||||||
Total | 163.7 | 164.7 | ? | 158 | 141 | 148 | 194[19] | 214 | 203[20] | 125[16] | 100% | 72.6 | 100% |
There is a discrepancy between the 2009 numbers due to the various sources cited; i.e. the units sold by all ODMs add up to 144.3 million laptops, which is much more than the given total of 125 million laptops. The market share percentages currently refer to those 144.3 million total. Sources may indicate hard drive deliveries to the ODM instead of actual laptop sales, though the two numbers may be closely correlated.
See also[edit]
References[edit]
Oem Laptops & Desktops Driver Download For Windows 10 Iso
- ^'Strategy Analytics: HP Narrowly Wins #1 Notebook Share Amid Strong Back-to-School Demand'. www.businesswire.com. 2020-08-17. Retrieved 2020-12-13.
- ^Ventura, Felipe (15 May 2013). 'Itautec desiste do mercado de PCs'. Gizmodo Brasil. Retrieved 2 April 2018.
- ^'Global and China Laptop and Tablet PC Industry Report, 2011-2012'. Retrieved 2012-09-10.
- ^ ab'Global and China Notebook PC Industry Report, 2010 - ResearchInChina'. researchinchina.com. Retrieved 13 July 2015.
- ^Quanta Computer Inc. Annual Report 2018(PDF). Quanta Computer Inc. 2019.
- ^Hsiao, Jim (2017-02-14). 'Taiwan notebooks – 4Q 2016'. DigiTimes. Retrieved 2019-04-02.
- ^'Taiwan notebooks – 1Q 2016'(PDF). DigiTimes. 31 May 2016.
- ^Wu, Thompson (19 January 2015). 'Asia Hardware Sector'. Credit Suisse.Missing or empty
|url=
(help) - ^IPD Group. 'Notebook shipments of Taiwan players from 2006-2014 (Jun 15) - World News Report - EIN News'. einnews.com. Retrieved 13 July 2015.
- ^https://cimbequityresearch.cimb.com/EFAOnTheWeb/EFAWebAPI/GetDocPDF.asp?DocGUID=2D5509A1-9E6C-4B30-8B0C-06CEEF480C45&A=CIMB
- ^estimate, according to Barclays Capital ResearchArchived 2013-01-17 at Archive.today: Asia ex-Japan IT Hardware Report
- ^Chuang, Steve (2011-01-14). 'Quanta Regains Lead in Global NB PC Shipment in 2010'. cens.com. Retrieved 2011-11-12.
- ^Culpan, Tim (2010-01-18). 'Quanta Seeks New Ventures, Devices After Record Profit in 2009'. Bloomberg Businessweek. Retrieved 2010-07-03.
- ^ abHachman, Mark (2007-05-09). 'The Top Laptop Makers Are Not HP, Dell, or Toshiba'. PC Magazine. Retrieved 2011-11-12.
- ^'Wistron Corporation 2009 Annual Report translation'(PDF). Wistron. 2010-04-30. p. 31. Retrieved 2010-07-03.
- ^ ab'Inventec's margin grew 4.5% driven by server sector'. www.computex.biz. 2010-04-30. Retrieved 2010-07-03.
- ^ abc'Global and China Notebook PC Industry Report, 2009 - ResearchInChina'. researchinchina.com. Retrieved 13 July 2015.
- ^'ASUSTeK Computer Inc'. ASUS. 2008. Archived from the original on 2012-03-13. Retrieved 2010-07-21.
- ^'Acer loses world's No. 3 notebook-maker spot in Q4'. wantchinatimes.com. Archived from the original on 16 January 2013. Retrieved 13 July 2015.
- ^'Growing Notebook & Netbook Market Will Boost Dell's PC Business'. NASDAQ.com. 12 February 2011. Retrieved 13 July 2015.