> Absolute Home & Office (originally known as CompuTrace, and LoJack for Laptops) is a proprietary laptop theft recovery software (laptop tracking software). The persistent security features are built into the firmware of devices. Absolute Home & Office has services of an investigations and recovery team who partners with law enforcement agencies to return laptops to their owners. Absolute Software licensed the name LoJack from the vehicle recovery service LoJack in 2005.
There used to be a BIOS option for on/off and "Permanently Disable", but that might have changed in recent versions.
HP: https://support.hpwolf.com/s/article/Absolute-Software-Activ...
Dell: yikes, the 2024 version is a permanent one-way, one-time option for Activate or Disable? Need to check status on eBay device purchases. https://www.dell.com/community/en/conversations/inspiron/how...
Lenovo: that one time we accidentally enabled it, https://support.lenovo.com/us/en/solutions/ht105220-unintend...
Apple x86 laptops: shipped an Arm microcontroller (T2 Security Enclave) to assert control of interactions between x86 CPU and disk storage, until they could replace the CPU with Apple Silicon.
HN ranking history for this thread: https://hnrankings.info/42277714/
The functionality of different T2 generations has been documented by Apple and security researchers.
T2 included Activation Lock / Anti-Theft features.
I removed it by 0-ing out the module in a BIOS update image and reinstalling Windows. This method probably doesn't work with UEFI anymore because it invalidates the signature, so yes, it's unremovable.
It seems like an absolutely terrible idea for a campaign "hey everyone - our company has been wildly successful at putting spyware on hundreds of millions of machines and no one even knows our name!"
Could a manufacturer placing this on a PC be considered material support of terrorism?
No.
Neither had I.
It sounds like a major part of their plan, to just behave as a silent process that can always be re-booted through whatever changes the device goes through. Best to keep that sort of thing obscure.
It's been around for decades, the option to enable/disable it is in the BIOS setup on every machine that has it, and computer manufacturer's documentation tells you exactly what it is, because it's a selling point.
