Anti-theft software could create security hole ( Not GadgetTrak )
Saturday, August 1, 2009
From the Associated Press, “A piece of anti-theft software built into many laptops at the factory opens a serious security hole, according to research presented Thursday.” Research by Alfredo Ortega and Anibal Sacco with Boston-based Core Security Technologies, and presented Thursday at the Black Hat security conference here, shows how BIOS based security software can allow a criminal to take control of a machine.
GadgetTrak’s Laptop Security software is not vulnerable to this security hole, as our software does not need to be embedded in the BIOS of the system, nor allow a backdoor into the system. Measures taken by GadgetTrak in the architecture of our solution to protect users privacy also mitigates the risk of such an attack. As GadgetTrak’s software does not provide a back door into the system that monitoring center staff can acccess and the tracking data is sent to the owner of the device, there is no back door into the system that would allow an attacker to take control of the system.
The company that makes the software in the study claims that the findings are not true, however has not provided proof to the contrary. It is interesting to watch the company on Twitter, having employees Tweet that it is not true repeatedly, maybe if you say something enough times it will be true. Instead evidence should be presented to consumers and manufacturers, as the agent is embedded in 60% of laptops on the market, just not activated on all of them. Consumers have the right to more information regarding this security hole and not just a company saying “it is not true,” this is both irresponsible and shows a lack of respect for their customers.