How to Prevent OEM Software and Hardware from Spying on You?

[Average_Joe (Joey)]

@Sprout3425

Interesting @ignoramous, my knowledge in computer science is very vague, but I have a decent idea of what you are trying to say.

Trusted computing base is indeed the relevant term.

I am especially concerned about third party OEMs that are running Windows (e.g., Lenovo, HP, Dell etc.) or any other OS. I would prefer that the OS and hardware are made by the same companies or at least, two or more respectable companies.

What can I do to eliminate the spying abilities of third party OEMs like Lenovo, as much as possible?

Coreboot looks awesome, will I be able to use them and wipe my entire computer either now or in the future? Or are they pushing for new standards, without the goal of developing a BIOS or UEFI (no idea what the diff is between these two)?

Wow, as someone who’s looking to build a new PC Tower this is very scary!!

Is it possible to buy safe OEM hardware components for a new PC?

If not, how can we check that the hardware components are not sending information back to someone on the Internet???

This Microsoft article talks about “a secured core PC” but it doesn’t give suggestions for where to buy such hardware components which is really annoying:

Windows 11 Secured-core PCs

I just hope I can find some safe hardware

[foolclown]

Hello, I’m sorry to resurrect this but I recently got a ThinkPad with Lenovo Commercial Vantage preinstalled on it. I set it up and saw that it installed some missing firmware, incl. a critical BIOS update specific to my device.

I’ve been trying to find info re: potential privacy issues with this. I do believe that a lot of this service is not just bloatware, as I can already see it has tools to manage my Windows system that native Windows does not have, as well as the ability to install firmware that optimizes security that I wouldn’t know how to easily get elsewhere.

My knowledge of computer science is minimal. All I’m concerned with is that I prefer that no identifying data that can be used for mass/dragnet surveillance (e.g. live location data, detailed network and web data and histories) is not shared with at least 3rd parties outside of Lenovo.

Obviously, it’s also preferable that Lenovo itself doesn’t collect and retain more data than it needs for providing basic security and functionality - but I’ve given up a say in this already by buying their product in the first place. And obviously, I have no illusions about Windows itself. I’m just trying to minimize the threats, so to speak.

I have read posts about the Israeli OEM but they seem to be upwards of 2 years old. I also read posts advising to disable the “wifi network security” feature as it does appear to be bloatware, but also about 1-2 years dated.

Does anyone have any updates on this and maybe some advice for a standard user who may just have a bit more understanding and ability to FAFO than an average user?