May 11, 2017

HP says it has a fix for flaw that caused some PCs to log every keystroke

HP says it has a fix for a flaw that caused a number of its PC models to keep a log of each keystroke a customer was entering. The issue, caused by problematic code in an audio driver, affected PC models from 2015 and 2016.

A fix for 2016 models was released today via Windows Update, while a fix for 2015 models will be released tomorrow on both Windows Update and HP's Web site, HP Vice President Mike Nash told Axios.

Why it matters: Although HP never accessed the data and the logs weren't sent anywhere, just having them created a security threat. The fix not only deletes the key-logging code but also the files that stored keystrokes. (However, in theory customers using PC backup software might have copies elsewhere.)

Nash said that the code was debugging code that was inadvertently left in by Conexant, the company that made the audio driver, and should never have been included on shipping PCs. There was never an intent to have such software or collect any user data, he said.

"It was something that was there in development process and should have bene removed," Nash said.

Affected computers include various HP EliteBook, ProBook and Zbook models.

Security firm Modzero released an advisory on the issue earlier on Thursday, but had previously notified HP and Conexant and Nash said HP has been developing a fix before the advisory was released.

Go deeper

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Global: Total confirmed cases as of 11:30 p.m. ET: 1,347,803 — Total deaths: 74,807 — Total recoveries: 277,402Map.
  2. U.S.: Total confirmed cases as of 11:30 p.m. ET: 368,196 — Total deaths: 10,986 — Total recoveries: 19,828Map.
  3. Trump administration latest: President Trump's economic adviser Peter Navarro warned White House colleagues in late January the coronavirus could take over half a million American lives and cost close to $6 trillion, memos obtained by Axios show.
  4. 2020 update: Wisconsin Supreme Court blocks governor's attempt to delay in-person primary voting delayed until June.
  5. States latest: West Coast states send ventilators to New York and other states with more immediate need — Data suggest coronavirus curve may be flattening in New York, Gov. Andrew Cuomo said.
  6. World update: U.K. Prime Minister Boris Johnson moved to intensive care as coronavirus symptoms worsen.
  7. Stocks latest: The S&P 500 closed up 7% on Monday, while the Dow rose more than 1,500 points.
  8. What should I do? Pets, moving and personal health. Answers about the virus from Axios expertsWhat to know about social distancingQ&A: Minimizing your coronavirus risk.
  9. Other resources: CDC on how to avoid the virus, what to do if you get it.

Subscribe to Mike Allen's Axios AM to follow our coronavirus coverage each morning from your inbox.

Docs: Navarro memos warning mass death circulated West Wing in January

Image from a memo to President Trump

In late January, President Trump's economic adviser Peter Navarro warned his White House colleagues the novel coronavirus could take more than half a million American lives and cost close to $6 trillion, according to memos obtained by Axios.

  • By late February, Navarro was even more alarmed, and he warned his colleagues, in another memo, that up to two million Americans could die of the virus.

Driving the news: Navarro's grim estimates are set out in two memos — one dated Jan. 29 and addressed to the National Security Council, the other dated Feb. 23 and addressed to the president. The NSC circulated both memos around the White House and multiple agencies.

Go deeperArrow53 mins ago - Health

Wisconsin Supreme Court blocks governor from delaying state's primary

Tony Evers. Photo: Nuccio DiNuzzo/Getty Images

Wisconsin's Supreme Court on Monday blocked an executive order by Gov. Tony Evers (D) that attempted to delay in-person voting for the state's primary election — currently scheduled for Tuesday — until June 9.

Driving the news: Judges ruled 4-2 along ideological lines that Evers does not have the power as governor to unilaterally postpone the election, despite the fact that the state has a stay-at-home order in place due to the coronavirus pandemic.

Go deeperArrowUpdated 1 hour ago - Health