Technology

59598 readers

4162 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

134

After default password disclosed online, 1200 inmates have prison issued laptops seized by guards, threatening their ability to make class deadlines (www.opencampusmedia.org)

submitted 8 months ago* (last edited 8 months ago) by [email protected] to c/[email protected]

41 comments fedilink hide all child comments

Zhang, an electrical engineer in Boston, decided to post about trying to unlock his Justice Tech Solutions Securebook 5 on the social platform X. The thread went viral — also catching the attention of Washington corrections officials, who have used the device for college programming since 2020.

Of particular concern was an article about Zhang’s thread published on a hacker website that shared the default password for the underlying software that starts the laptop’s operating system, presenting what the Department of Corrections considered a security concern.

The department then announced Thursday, five days after Zhang’s viral post, that it would collect all secure laptops from incarcerated students statewide “to provide an immediate system update.” By Saturday, corrections staff had collected around 1,200 laptops, spokesperson Chris Wright said in an email.

Wright confirmed no one incarcerated in Washington prisons had attempted to unlock their devices but said the decision was “made out of an abundance of caution.” It wasn’t immediately clear whether other states whose corrections departments use Securebook 5 laptops have also pulled the devices.

Archived at https://ghostarchive.org/archive/LS3co

e; updated the title due to popular demand

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 17 points 8 months ago (1 children)

Calling it a security breach is a bit of a stretch, to be fair. The company that issued them never changed the default BIOS password, so inmates could gain admin control over them if they wanted. Changing default passwords is like the most basic Help Desk 1 training.

I can almost guarantee that the company is owned by someone who also has direct ties to the prison’s leadership, and they spun up the corporation just to issue (and profit from) the laptops. Because there’s no way that an experienced IT team would allow 1200 laptops to walk out the door with default passwords.

[–] [email protected] -2 points 8 months ago (1 children)

Having root access to that computer means they can do a lot of throngs they aren’t supposed to. I fail to see this as anything but a security breach for this.

[–] [email protected] 3 points 8 months ago (1 children)

i’d say that it’s a security vulnerability, but breach implies it’s been used

[–] [email protected] 1 points 8 months ago

I see. That makes sense.