I'm not sure what codex helped with for the Lenovo case, if all that was required was open the stick and stick the sdcard into a computer.

It's crazy that Lenovo will still be trusted to build secured hardware after that. It's not even a vulnerability at this point, I'm not sure how this could pass any form of security review, let alone having anyone review the design and approve it. They must have known it was nothing they pretended and still decide to sell it.

> It's crazy that Lenovo will still be trusted to build secured hardware after that.

Lenovo already has an history of backdooring the devices they sell, sometimes in exchange for money. It's insane that anyone trusts them for anything. https://en.wikipedia.org/wiki/Levono#Security_and_privacy_in...

So many boxes to tick, and with a company culture that leans towards box ticking and apathy (regulatory checklists without the extra checkbox “is that last checkbox a real checkbox" then you have to talk to the nerd department who's too busy for your stupid questions... Etc. Etc.) What can we expect? I'm disappointed in Lenovo for this, but my own apathy expects no one will be held accountable!

[dead]