- WLUG - wlug.mailman3.com

Re: [Wlug] Major WPA2 Vulnerability
by Chuck Anderson 18 Oct '17

18 Oct '17

On Wed, Oct 18, 2017 at 02:29:56PM -0400, Keith Wright wrote: > This is very embarrassing for the authors of the > standard, but is it really a big problem? Several > meetings ago, somebody brought a device to the > WLUG meeting that, as I understood it, pretends > to be a wireless router and interposes itself > into any nearby connection. If things like that > exist, why care about encryption vulnerability? Because with properly configured wireless and patched clients, you can be sure you are connecting to the trusted network, not a Man-in-the-Middle. It requires mutual authentication, which happens for example on the WPI wireless network by using EAP-TLS certificates. The client is supposed to verify the server's certificate and the server of course verifies the client's certificate. Unfortunately, most networks don't use EAP but rather use Pre-Shared Keys (WPA2-PSK). > If you need to patch both sides to be secure, > then you are not secure in the coffee shop no > matter what you do. In any case, if you are > using the wireless to connect to a web site > or "cloud" server, then the wireless connection > is the least of your insecurities. In the strictest sense this is true, but as far as the KRACK attack goes, the wireless AP side is much less likely to be a problem, because the vulnerabilities are in parts of the standards that are not often used (802.11r "Fast Roaming" for example). The client-side vulnerabilities, especially in Linux/Android, are much more serious. On Linux, the client can be tricked into using a null session key. However, in a coffee shop KRACK is moot because most coffee shops don't use encryption at all to begin with. In any case, WPI's recommendation to use the VPN if you are not sure of your device's or the network's immunity to KRACK is sound, because even if there was a M-i-t-M, they still would not be able to decrypt the VPN traffic. Security is helpful in layers. Belt-and-suspenders.

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Keith Wright 18 Oct '17

18 Oct '17

"Sweetser, Frank E" <fs(a)WPI.EDU> writes: > Nothing so simple, unfortunately. This class of vulnerability is > actually a collection of 10 CVEs, which encompass both the AP side and > client side. If you've patched the AP side, for example, the attacker > may still be able to compromise the set of session keys on the client > side, and decrypt all of the client sent traffic. > You've got to patch both sides to be fully secure. You've got to avoid computers to be fully secure. But let's not get that paranoid. I pulled Cat 5 cable through the house years ago and never use wireless, but WPI has its hair on fire, and sent Professor Diane email (through Microsoft cloud service) to install "upgrades" immediately. I told her to at least wait until she has her computer back in the office and plugged into WPI cable. I have a friend who has been without a computer for a month or two because he tried to upgrade firmware and could not re-boot. This is very embarrassing for the authors of the standard, but is it really a big problem? Several meetings ago, somebody brought a device to the WLUG meeting that, as I understood it, pretends to be a wireless router and interposes itself into any nearby connection. If things like that exist, why care about encryption vulnerability? If you need to patch both sides to be secure, then you are not secure in the coffee shop no matter what you do. In any case, if you are using the wireless to connect to a web site or "cloud" server, then the wireless connection is the least of your insecurities. -- Keith

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Sweetser, Frank E 16 Oct '17

16 Oct '17

Nothing so simple, unfortunately. This class of vulnerability is actually a collection of 10 CVEs, which encompass both the AP side and client side. If you've patched the AP side, for example, the attacker may still be able to compromise the set of session keys on the client side, and decrypt all of the client sent traffic. You've got to patch both sides to be fully secure. """ The direction in which packets can be decrypted (and possibly forged) depends on the handshake being attacked. Simplified, when attacking the 4-way handshake, we can decrypt (and forge) packets sent by the client. When attacking the Fast BSS Transition (FT) handshake, we can decrypt (and forge) packets sent towards the client. Finally, most of our attacks also allow the replay of unicast, broadcast, and multicast frames. For further details, see Section 6 of our research paper<https://www.krackattacks.com/#paper>. """ Frank Sweetser Director of Network Operations Worcester Polytechnic Institute "For every problem, there is a solution that is simple, elegant, and wrong." - HL Mencken ________________________________ From: wlug-bounces(a)mail.wlug.org <wlug-bounces(a)mail.wlug.org> on behalf of Theo Van Dinter <felicity(a)kluge.net> Sent: Monday, October 16, 2017 3:30 PM To: Worcester Linux Users Group Subject: Re: [Wlug] Major WPA2 Vulnerability fwiw, my understanding is that the vulnerability is on the client side. therefore, I'm not sure what patches would get applied to an access point, though presumably if you use bridging (and maybe extension?) functionality then maybe there's an issue there. iow, I think patching access points isn't necessary or at least is a low priority if you're not using a feature that turns the device into a client. """ What if there are no security updates for my router? Our main attack is against the 4-way handshake, and does not exploit access points, but instead targets clients. So it might be that your router does not require security updates. We strongly advise you to contact your vendor for more details. In general though, you can try to mitigate attacks against routers and access points by disabling client functionality (which is for example used in repeater modes) and disabling 802.11r (fast roaming). For ordinary home users, your priority should be updating clients such as laptops and smartphones. """ On Mon, Oct 16, 2017 at 3:21 PM, Michael C Voorhis <mvoorhis(a)cs.wpi.edu<mailto:mvoorhis@cs.wpi.edu>> wrote: Chuck Anderson writes: > Because none of Fedora's updates aren't actually released yet. They > are built and undergoing pushing/testing now, but being a public > distro, anyone can get them if they know where to look: Ubuntu released a bunch of WPA-related patches a little after noontime today, it appears. John Stoffel: > I'm using DD-WRT on my APs at home, but god do the web pages and > forums suck for actually figuring out what version to run and > whether it's patched or not. Sigh... Ditto for OpenWRT, it appears the project is still alive, but you'd never know, looking at their website. I may switch to LEDE, which confusingly appears to be a fork of OpenWRT which is trying to merge back with OpenWRT....? --MCV. _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org<mailto:Wlug@mail.wlug.org> http://mail.wlug.org/mailman/listinfo/wlug

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Theo Van Dinter 16 Oct '17

16 Oct '17

fwiw, my understanding is that the vulnerability is on the client side. therefore, I'm not sure what patches would get applied to an access point, though presumably if you use bridging (and maybe extension?) functionality then maybe there's an issue there. iow, I think patching access points isn't necessary or at least is a low priority if you're not using a feature that turns the device into a client. """ What if there are no security updates for my router? Our main attack is against the 4-way handshake, and does not exploit access points, but instead targets clients. So it might be that your router does not require security updates. We strongly advise you to contact your vendor for more details. In general though, you can try to mitigate attacks against routers and access points by disabling client functionality (which is for example used in repeater modes) and disabling 802.11r (fast roaming). For ordinary home users, your priority should be updating clients such as laptops and smartphones. """ On Mon, Oct 16, 2017 at 3:21 PM, Michael C Voorhis <mvoorhis(a)cs.wpi.edu> wrote: > Chuck Anderson writes: > > Because none of Fedora's updates aren't actually released yet. They > > are built and undergoing pushing/testing now, but being a public > > distro, anyone can get them if they know where to look: > > Ubuntu released a bunch of WPA-related patches a little after noontime > today, it appears. > > John Stoffel: > > I'm using DD-WRT on my APs at home, but god do the web pages and > > forums suck for actually figuring out what version to run and > > whether it's patched or not. Sigh... > > Ditto for OpenWRT, it appears the project is still alive, but you'd > never know, looking at their website. I may switch to LEDE, which > confusingly appears to be a fork of OpenWRT which is trying to merge > back with OpenWRT....? > > --MCV. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

1 0

Re: [Wlug] Major WPA2 Vulnerability
by thinkbrown＠gmail.com 16 Oct '17

16 Oct '17

wpa_supplicant got an update pushed to the Arch repos at around 11AM too (if anybody else here uses Arch) On Oct 16, 2017 15:23, "Michael C Voorhis" <mvoorhis(a)cs.wpi.edu> wrote: Chuck Anderson writes: > Because none of Fedora's updates aren't actually released yet. They > are built and undergoing pushing/testing now, but being a public > distro, anyone can get them if they know where to look: Ubuntu released a bunch of WPA-related patches a little after noontime today, it appears. John Stoffel: > I'm using DD-WRT on my APs at home, but god do the web pages and > forums suck for actually figuring out what version to run and > whether it's patched or not. Sigh... Ditto for OpenWRT, it appears the project is still alive, but you'd never know, looking at their website. I may switch to LEDE, which confusingly appears to be a fork of OpenWRT which is trying to merge back with OpenWRT....? --MCV. _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Chuck Anderson 16 Oct '17

16 Oct '17

On Mon, Oct 16, 2017 at 03:21:29PM -0400, Michael C Voorhis wrote: > Chuck Anderson writes: > > Because none of Fedora's updates aren't actually released yet. They > > are built and undergoing pushing/testing now, but being a public > > distro, anyone can get them if they know where to look: > > Ubuntu released a bunch of WPA-related patches a little after noontime > today, it appears. > > John Stoffel: > > I'm using DD-WRT on my APs at home, but god do the web pages and > > forums suck for actually figuring out what version to run and > > whether it's patched or not. Sigh... > > Ditto for OpenWRT, it appears the project is still alive, but you'd > never know, looking at their website. I may switch to LEDE, which > confusingly appears to be a fork of OpenWRT which is trying to merge > back with OpenWRT....? LEDE does a bunch of faster-paced development with the goal of having their work eventually merged back into OpenWRT. They often experiment with different ideas/features.

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Michael C Voorhis 16 Oct '17

16 Oct '17

Chuck Anderson writes: > Because none of Fedora's updates aren't actually released yet. They > are built and undergoing pushing/testing now, but being a public > distro, anyone can get them if they know where to look: Ubuntu released a bunch of WPA-related patches a little after noontime today, it appears. John Stoffel: > I'm using DD-WRT on my APs at home, but god do the web pages and > forums suck for actually figuring out what version to run and > whether it's patched or not. Sigh... Ditto for OpenWRT, it appears the project is still alive, but you'd never know, looking at their website. I may switch to LEDE, which confusingly appears to be a fork of OpenWRT which is trying to merge back with OpenWRT....? --MCV.

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Krichevsky, Nicholas Jacob 16 Oct '17

16 Oct '17

Looks like they were just pushed to stable about 30 minutes ago. I don't have the update yet but I'm sure it's a matter of time. https://bodhi.fedoraproject.org/updates/FEDORA-2017-60bfb576b7 Get Outlook for Android<https://aka.ms/ghei36> ________________________________ From: wlug-bounces(a)mail.wlug.org <wlug-bounces(a)mail.wlug.org> on behalf of Chuck Anderson <cra(a)WPI.EDU> Sent: Monday, October 16, 2017 2:11:05 PM To: wlug(a)mail.wlug.org Subject: Re: [Wlug] Major WPA2 Vulnerability Because none of Fedora's updates aren't actually released yet. They are built and undergoing pushing/testing now, but being a public distro, anyone can get them if they know where to look: https://bugzilla.redhat.com/buglist.cgi?quicksearch=krack&list_id=7995606 https://bodhi.fedoraproject.org/updates/?packages=wpa_supplicant https://bodhi.fedoraproject.org/updates/FEDORA-2017-60bfb576b7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-12e76e8364 https://koji.fedoraproject.org/koji/packageinfo?packageID=717 On Mon, Oct 16, 2017 at 12:06:34PM -0400, Eric Martin wrote: > Here's a comprehensive write up with the latest fixes, and it's getting > updated regularly: > > https://www.bleepingcomputer.com/news/security/list-of-firmware-and-driver-… > > I'm not sure how Fedora can have an update and also not have released any > info... > > On Mon, Oct 16, 2017 at 9:42 AM, Tim Keller <turbofx(a)gmail.com> wrote: > > > Hey Gang, > > > > If you haven't heard already, it appears someone has found a major flaw in > > WPA2! > > > > https://www.krackattacks.com/ > > > > Hopefully patches should be forth coming! > > > > Later, > > Tim. _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Chuck Anderson 16 Oct '17

16 Oct '17

Because none of Fedora's updates aren't actually released yet. They are built and undergoing pushing/testing now, but being a public distro, anyone can get them if they know where to look: https://bugzilla.redhat.com/buglist.cgi?quicksearch=krack&list_id=7995606 https://bodhi.fedoraproject.org/updates/?packages=wpa_supplicant https://bodhi.fedoraproject.org/updates/FEDORA-2017-60bfb576b7 https://bodhi.fedoraproject.org/updates/FEDORA-2017-12e76e8364 https://koji.fedoraproject.org/koji/packageinfo?packageID=717 On Mon, Oct 16, 2017 at 12:06:34PM -0400, Eric Martin wrote: > Here's a comprehensive write up with the latest fixes, and it's getting > updated regularly: > > https://www.bleepingcomputer.com/news/security/list-of-firmware-and-driver-… > > I'm not sure how Fedora can have an update and also not have released any > info... > > On Mon, Oct 16, 2017 at 9:42 AM, Tim Keller <turbofx(a)gmail.com> wrote: > > > Hey Gang, > > > > If you haven't heard already, it appears someone has found a major flaw in > > WPA2! > > > > https://www.krackattacks.com/ > > > > Hopefully patches should be forth coming! > > > > Later, > > Tim.

1 0

Re: [Wlug] Major WPA2 Vulnerability
by John Stoffel 16 Oct '17

16 Oct '17

>>>>> "Eric" == Eric Martin <eric.joshua.martin(a)gmail.com> writes: Eric> Aruba posted a really good write up as well as patches, and I just updated iOS Eric> on my phone though I haven’t seen the typical security email from Apple. Don’t Eric> forget, upgrade the client side as well! I'm using DD-WRT on my APs at home, but god do the web pages and forums suck for actually figuring out what version to run and whether it's patched or not. Sigh...

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Eric Martin 16 Oct '17

16 Oct '17

Here's a comprehensive write up with the latest fixes, and it's getting updated regularly: https://www.bleepingcomputer.com/news/security/list-of-firmware-and-driver-… I'm not sure how Fedora can have an update and also not have released any info... On Mon, Oct 16, 2017 at 9:42 AM, Tim Keller <turbofx(a)gmail.com> wrote: > Hey Gang, > > If you haven't heard already, it appears someone has found a major flaw in > WPA2! > > https://www.krackattacks.com/ > > Hopefully patches should be forth coming! > > Later, > Tim. > > > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > -- Eric Martin

1 0

Re: [Wlug] Major WPA2 Vulnerability
by Eric Martin 16 Oct '17

16 Oct '17

Aruba posted a really good write up as well as patches, and I just updated iOS on my phone though I haven’t seen the typical security email from Apple. Don’t forget, upgrade the client side as well! Thank you, -- Eric > On Oct 16, 2017, at 9:42 AM, Tim Keller <turbofx(a)gmail.com> wrote: > > Hey Gang, > > If you haven't heard already, it appears someone has found a major flaw in WPA2! > > https://www.krackattacks.com/ > > Hopefully patches should be forth coming! > > Later, > Tim. > > > -- > I am leery of the allegiances of any politician who refers to their constituents as "consumers". > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

1 0

Major WPA2 Vulnerability
by Tim Keller 16 Oct '17

16 Oct '17

Hey Gang, If you haven't heard already, it appears someone has found a major flaw in WPA2! https://www.krackattacks.com/ Hopefully patches should be forth coming! Later, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Reminder: Meeting Oct 12th 2017 @7pm Topic: Ansible
by Tim Keller 11 Oct '17

11 Oct '17

Hey Everybody, We've got a meeting on Thursday! Location: WPI Student Center Mid Century Room (rm 331) I'm going to do a quick talk on "Ansible". Ansible is a tool that lets you script a complex set of tasks into a playbook that you can then run 1 machine or a million. Snacks and refreshments will be provided and then we'll head off for pizza at tech to continue the conversation. Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Re: [Wlug] 3d printing question.
by John Stoffel 09 Oct '17

09 Oct '17

I've heard good things about the monoprice one they have. I've been looking at getting a cheap (<$300) engraving machine to learn cad/cam and do some engraving for my scout troop. I figure it's more useful than an eggbot kit in alot of ways.

1 0

Re: [Wlug] 3d printing question.
by Tim Keller 09 Oct '17

09 Oct '17

The "Authorization" is actually from my wife. This is going to be a personal printer to go in my workshop. I'm not afraid of cryptic instructions (I work with Red Hat software!). However, I have a number of expensive hobbies... so I am a bit cost sensitive. Thanks, Tim. On Mon, Oct 9, 2017 at 12:27 PM, Gelman, Ian S <isgelman(a)wpi.edu> wrote: > Hi Tim, > > The Anet A8 and TEVO tarantula are i3 derivatives, what with the hardware > being open source. Each of these can be found on Amazon. The assembly > guides are pretty cryptic though, with lots of skipped steps and a lack of > images. > > However, If Ab Initio can afford the $600, I would seriously recommend > getting Josef Prusa's original version, which he sells on his website. > > https://shop.prusa3d.com/en/3d-printers/59-original-prusa- > i3-mk2-kit.html?gclid=EAIaIQobChMI4q3brfnj1gIVAQlpCh > 0hhgs4EAQYASABEgI18fD_BwE > > The manuals are amazing, with an active community of people making > revisions on Github. > > Monoprice also has a fork of the i3 which they sell as well. > > https://www.monoprice.com/product?p_id=13860&gclid= > EAIaIQobChMI4q3brfnj1gIVAQlpCh0hhgs4EAQYAiABEgJKQPD_BwE > > In terms of assembly time: the A8, the Tarantula, and the original i3 will > all take a couple days of (hopefully some poor intern's) time to assemble > and test. The Monoprice i3 ships semi-assembled, and you can get printing > within a couple hours. > > Hope that helped, > > Ian > > On Oct 9, 2017, at 11:54 AM, Tim Keller <turbofx(a)gmail.com> wrote: > > Hey Gang, > > I've been given clearance to buy a 3d printer, with the caveat of > controlling the cost. > > There are an infinite number of choices out there. > > A co-worker bought this one and had good luck with it: > https://www.walmart.com/ip/2017-Upgraded-Quality-High- > Precision-Reprap-Prusa-i3-DIY-3d-Printer-Kit-Anet-A8-3d- > Printer-3d-Drucker/919868952 > > I've also found this one which seems to be pretty good quality as well: > > https://www.3dprintersonlinestore.com/product/reprap/tarantula-3d- > printer-kit > > I'd honestly like to NOT give walmart money if at all possible. > > Any recommendations? > > Thanks, > Tim. > > > > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Re: [Wlug] 3d printing question.
by Gelman, Ian S 09 Oct '17

09 Oct '17

Hi Tim, The Anet A8 and TEVO tarantula are i3 derivatives, what with the hardware being open source. Each of these can be found on Amazon. The assembly guides are pretty cryptic though, with lots of skipped steps and a lack of images. However, If Ab Initio can afford the $600, I would seriously recommend getting Josef Prusa's original version, which he sells on his website. https://shop.prusa3d.com/en/3d-printers/59-original-prusa-i3-mk2-kit.html?g… The manuals are amazing, with an active community of people making revisions on Github. Monoprice also has a fork of the i3 which they sell as well. https://www.monoprice.com/product?p_id=13860&gclid=EAIaIQobChMI4q3brfnj1gIV… In terms of assembly time: the A8, the Tarantula, and the original i3 will all take a couple days of (hopefully some poor intern's) time to assemble and test. The Monoprice i3 ships semi-assembled, and you can get printing within a couple hours. Hope that helped, Ian On Oct 9, 2017, at 11:54 AM, Tim Keller <turbofx(a)gmail.com<mailto:turbofx@gmail.com>> wrote: Hey Gang, I've been given clearance to buy a 3d printer, with the caveat of controlling the cost. There are an infinite number of choices out there. A co-worker bought this one and had good luck with it: https://www.walmart.com/ip/2017-Upgraded-Quality-High-Precision-Reprap-Prus… I've also found this one which seems to be pretty good quality as well: https://www.3dprintersonlinestore.com/product/reprap/tarantula-3d-printer-k… I'd honestly like to NOT give walmart money if at all possible. Any recommendations? Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers". _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org<mailto:Wlug@mail.wlug.org> http://mail.wlug.org/mailman/listinfo/wlug

1 0

3d printing question.
by Tim Keller 09 Oct '17

09 Oct '17

Hey Gang, I've been given clearance to buy a 3d printer, with the caveat of controlling the cost. There are an infinite number of choices out there. A co-worker bought this one and had good luck with it: https://www.walmart.com/ip/2017-Upgraded-Quality-High-Precision-Reprap-Prus… I've also found this one which seems to be pretty good quality as well: https://www.3dprintersonlinestore.com/product/reprap/tarantula-3d-printer-k… I'd honestly like to NOT give walmart money if at all possible. Any recommendations? Thanks, Tim. -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Re: [Wlug] Lenovo Black Screen Issue
by Tim Keller 05 Oct '17

05 Oct '17

Also with the Lenovo's you can control the video output with the "FN" keys. Usually it's the F7 key. At least on my 430 it looks like a little projector. Tim. On Thu, Oct 5, 2017 at 9:26 AM, THE HAMMER <hammerron(a)hotmail.com> wrote: > Thank you to the people who replied with questions or suggestions. > > Here is some additional info: > > > The keyboard backlighting is what flashes briefly at start up attempt. > The screen shows no light what so ever. > > > Tried launching systems off of live usbs...no luck > Tried the Lenovo reset button.....no luck > > Tried running a different screen with an hdmi cable....it said no input > > > > > > ------------------------------ > *From:* wlug-bounces(a)mail.wlug.org <wlug-bounces(a)mail.wlug.org> on behalf > of John Stoffel <john(a)stoffel.org> > *Sent:* Wednesday, October 4, 2017 2:10 PM > *To:* Worcester Linux Users Group > *Subject:* Re: [Wlug] Lenovo Black Screen Issue > > > THE> ..hope this is not too off topic.. Have a friend with a Lenovo > THE> ideapad. The screen stays black and does not light up > THE> whatsoever. Would anyone have suggestions for best way to go > THE> with it? > > Try plugging the thing into a monitor while it's powered off, then > power it on and see if you get anything that way. It could be that > the display is fried. > > Does the disk spin up? Does it have windows on it? Can you put a USB > thumb drive on the system and try to boot from that (knoppix is really > good for this, or one of the system rescue linux images). > > THE> The sticker on it gives further info: Windows 8, intel core i5, > THE> and Ultrabook. > > Would need more, like the model number. > > THE> The power button lights up and stays on when you try to turn the > THE> unit on, as long as you keep the power cord plugged in. > THE> Apparently the battery holds no charge. The keyboard keys > THE> quickly flash once also when the start button is hit. > > which keys flash? > > THE> The case does show some dents, and they say it was dropped a few > times. > > LOL! > > THE> They've tried disconnecting the battery thing with no luck. > > External display is my first bet. Remove the hardware as well if > possible. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

1 0

Re: [Wlug] Lenovo Black Screen Issue
by John Stoffel 05 Oct '17

05 Oct '17

>>>>> "THE" == THE HAMMER <hammerron(a)hotmail.com> writes: THE> Thank you to the people who replied with questions or suggestions. THE> Here is some additional info: THE> The keyboard backlighting is what flashes briefly at start up attempt. The THE> screen shows no light what so ever. THE> Tried launching systems off of live usbs...no luck THE> Tried the Lenovo reset button.....no luck THE> Tried running a different screen with an hdmi cable....it said no input I suspect the unit is dead and might need to be opened up to look for problems like broken connections, burnt spots on the motherboard, etc. Maybe try taking it apart and then putting it back together. The drop(s) could have knocked something loose. Pull out the disk in the system might also help. Otherwise... send it to Lenovo for repair, or buy a new/used one to replace.

1 0

Re: [Wlug] Lenovo Black Screen Issue
by THE HAMMER 05 Oct '17

05 Oct '17

Thank you to the people who replied with questions or suggestions. Here is some additional info: The keyboard backlighting is what flashes briefly at start up attempt. The screen shows no light what so ever. Tried launching systems off of live usbs...no luck Tried the Lenovo reset button.....no luck Tried running a different screen with an hdmi cable....it said no input ________________________________ From: wlug-bounces(a)mail.wlug.org <wlug-bounces(a)mail.wlug.org> on behalf of John Stoffel <john(a)stoffel.org> Sent: Wednesday, October 4, 2017 2:10 PM To: Worcester Linux Users Group Subject: Re: [Wlug] Lenovo Black Screen Issue THE> ..hope this is not too off topic.. Have a friend with a Lenovo THE> ideapad. The screen stays black and does not light up THE> whatsoever. Would anyone have suggestions for best way to go THE> with it? Try plugging the thing into a monitor while it's powered off, then power it on and see if you get anything that way. It could be that the display is fried. Does the disk spin up? Does it have windows on it? Can you put a USB thumb drive on the system and try to boot from that (knoppix is really good for this, or one of the system rescue linux images). THE> The sticker on it gives further info: Windows 8, intel core i5, THE> and Ultrabook. Would need more, like the model number. THE> The power button lights up and stays on when you try to turn the THE> unit on, as long as you keep the power cord plugged in. THE> Apparently the battery holds no charge. The keyboard keys THE> quickly flash once also when the start button is hit. which keys flash? THE> The case does show some dents, and they say it was dropped a few times. LOL! THE> They've tried disconnecting the battery thing with no luck. External display is my first bet. Remove the hardware as well if possible. _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Re: [Wlug] Lenovo Black Screen Issue
by jebaill52 04 Oct '17

04 Oct '17

Power it down. Press the Novo button with a paper clip or something small. This will bring you to the Novo menu which has bios,boot,and recovery entries. Sent from my Verizon, Samsung Galaxy smartphone -------- Original message --------From: John Stoffel <john(a)stoffel.org> Date: 10/4/17 2:10 PM (GMT-05:00) To: Worcester Linux Users Group <wlug(a)mail.wlug.org> Subject: Re: [Wlug] Lenovo Black Screen Issue THE> ..hope this is not too off topic.. Have a friend with a Lenovo THE> ideapad. The screen stays black and does not light up THE> whatsoever. Would anyone have suggestions for best way to go THE> with it? Try plugging the thing into a monitor while it's powered off, then power it on and see if you get anything that way. It could be that the display is fried. Does the disk spin up? Does it have windows on it? Can you put a USB thumb drive on the system and try to boot from that (knoppix is really good for this, or one of the system rescue linux images). THE> The sticker on it gives further info: Windows 8, intel core i5, THE> and Ultrabook. Would need more, like the model number. THE> The power button lights up and stays on when you try to turn the THE> unit on, as long as you keep the power cord plugged in. THE> Apparently the battery holds no charge. The keyboard keys THE> quickly flash once also when the start button is hit. which keys flash? THE> The case does show some dents, and they say it was dropped a few times. LOL! THE> They've tried disconnecting the battery thing with no luck. External display is my first bet. Remove the hardware as well if possible. _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Re: [Wlug] Lenovo Black Screen Issue
by Michael C Voorhis 04 Oct '17

04 Oct '17

John Stoffel writes: > THE> The keyboard keys quickly flash once also when the start button > THE> is hit. > which keys flash? When a lenovo portable with a backlit keyboard is powered up, the keyboard backlight will light up once and fade out--a part of the POST I presume. Maybe this is what they're talking about. --MCV.

1 0

Re: [Wlug] Lenovo Black Screen Issue
by John Stoffel 04 Oct '17

04 Oct '17

THE> ..hope this is not too off topic.. Have a friend with a Lenovo THE> ideapad. The screen stays black and does not light up THE> whatsoever. Would anyone have suggestions for best way to go THE> with it? Try plugging the thing into a monitor while it's powered off, then power it on and see if you get anything that way. It could be that the display is fried. Does the disk spin up? Does it have windows on it? Can you put a USB thumb drive on the system and try to boot from that (knoppix is really good for this, or one of the system rescue linux images). THE> The sticker on it gives further info: Windows 8, intel core i5, THE> and Ultrabook. Would need more, like the model number. THE> The power button lights up and stays on when you try to turn the THE> unit on, as long as you keep the power cord plugged in. THE> Apparently the battery holds no charge. The keyboard keys THE> quickly flash once also when the start button is hit. which keys flash? THE> The case does show some dents, and they say it was dropped a few times. LOL! THE> They've tried disconnecting the battery thing with no luck. External display is my first bet. Remove the hardware as well if possible.

1 0

Lenovo Black Screen Issue
by THE HAMMER 04 Oct '17

04 Oct '17

..hope this is not too off topic.. Have a friend with a Lenovo ideapad. The screen stays black and does not light up whatsoever. Would anyone have suggestions for best way to go with it? More details: The sticker on it gives further info: Windows 8, intel core i5, and Ultrabook. The power button lights up and stays on when you try to turn the unit on, as long as you keep the power cord plugged in. Apparently the battery holds no charge. The keyboard keys quickly flash once also when the start button is hit. The case does show some dents, and they say it was dropped a few times. They've tried disconnecting the battery thing with no luck. Any suggestions?

1 0