Unoffical empeg BBS

Quick Links: Empeg FAQ | RioCar.Org | Hijack | BigDisk Builder | jEmplode | emphatic
Repairs: Repairs

Topic Options
#304758 - 04/12/2007 13:29 TV reporters want to test computer fixit shops
DWallach
carpal tunnel

Registered: 30/04/2000
Posts: 3810
I got a call from a local TV reporter looking to do some kind of sting operation against local computer repair shops. The broad idea is to bring them computers in some (known) state of failure and see whether they actually fix them or whether they scam you.

The obvious idea I had was to leverage my wife's slowly-dying laptop hard drive (now replaced with a shiny new one that works great) and see whether they waste lots of time on other things or whether they zero in on, say, the massive pile of disk errors in the event log. Of course, that disk is only going to get worse as each repair shop pokes at it.

Any other ideas for undercover computer repair shop tests?

Top
#304759 - 04/12/2007 13:43 Re: TV reporters want to test computer fixit shops [Re: DWallach]
tman
carpal tunnel

Registered: 24/12/2001
Posts: 5528
Bad IDE cable
Corrupt Windows install

Top
#304760 - 04/12/2007 13:44 Re: TV reporters want to test computer fixit shops [Re: DWallach]
jmwking
old hand

Registered: 27/02/2003
Posts: 770
Loc: Washington, DC metro
The simplest problem I've stumped potential IT hires with is a static IP address in the wrong subnet.

-jk

Top
#304761 - 04/12/2007 13:50 Re: TV reporters want to test computer fixit shops [Re: DWallach]
robricc
carpal tunnel

Registered: 30/10/2000
Posts: 4931
Loc: New Jersey, USA
This was already done with Geek Squad-type services in Canada. I think their test was a little unfair for this type of home service and the hired "experts" were anything but. It's an interesting video though.

Link
_________________________
-Rob Riccardelli
80GB 16MB MK2 090000736

Top
#304762 - 04/12/2007 14:02 Re: TV reporters want to test computer fixit shops [Re: DWallach]
wfaulk
carpal tunnel

Registered: 25/12/2000
Posts: 16706
Loc: Raleigh, NC US
PC World does this every few years or so. They've used a faulty IDE cable, and, uh, I can't find any of the other articles.

There several schools of thought on this sort of thing, IMO. If they're trying to determine who's simply cheating you, do something simple and obvious, like disconnecting the hard drive cable. Even an incompetent shop would find that within several minutes of work. If they're trying to determine who's competent, do something relatively easy to fix, but hard to find, like damaging a cable. More data can be extracted from this based on what they charge you for, like if they replace a bunch of stuff before they find the real problem, do they charge you for those replacements?

You might also want to include a second problem that you don't report, like some seldom-used cable that gets unplugged, like the CD-ROM-to-audio-card cable in the PC World thing, though that one is less relevant these days. Maybe a floppy drive or memory card reader or front-panel USB cable.

That said, what are good difficult-to-diagnose, but easy-to-fix things? Bad hard drive cable. Underpowered power supply? Bad internal power cable? (Hm, that one could be dangerous.) Bad CPU fan? Bad CD-ROM drive. Heck, even a bad mouse or keyboard.

Of course, there are also software issues. Spyware. Virus. Corrupted drivers.

And BIOS things. Bad memory timing settings.

I feel like I should be able to come up with more stuff than this.
_________________________
Bitt Faulk

Top
#304763 - 05/12/2007 00:05 Re: TV reporters want to test computer fixit shops [Re: robricc]
g_attrill
old hand

Registered: 14/04/2002
Posts: 1172
Loc: Hants, UK
The description of the screen recorder setup they used is interesting too. Just be very careful in how you name the files and services, or use a rootkit to hide it (although presumably some virus scanners might pick up on this).

Top
#304764 - 05/12/2007 14:39 Re: TV reporters want to test computer fixit shops [Re: DWallach]
lectric
pooh-bah

Registered: 20/01/2002
Posts: 2085
Loc: New Orleans, LA
I say edit the boot.ini and see if they simply replace your HDD. Or screw with file associations. Or ridiculously over clock the PC. Unplug the fan on the video card. Those lockups can get pretty random, but it could very easily permanently damage th card. Set the doubleclick speed to waay too fast and claim that the mouse is broken. For a high end test, install a nasty group policy.

Top
#304765 - 05/12/2007 18:08 Re: TV reporters want to test computer fixit shops [Re: robricc]
wfaulk
carpal tunnel

Registered: 25/12/2000
Posts: 16706
Loc: Raleigh, NC US
Is reinstalling Windows on top of itself really a viable solution?
_________________________
Bitt Faulk

Top
#304766 - 05/12/2007 18:40 Re: TV reporters want to test computer fixit shops [Re: lectric]
DWallach
carpal tunnel

Registered: 30/04/2000
Posts: 3810
I suppose I could deliberately expose the machine to some awful viruses or botnet clients or something and see if they can clean up the mess.

Top
#304767 - 05/12/2007 23:42 Re: TV reporters want to test computer fixit shops [Re: DWallach]
FireFox31
pooh-bah

Registered: 19/09/2002
Posts: 2494
Loc: East Coast, USA
Yes, a software problem. Nearly all the home user complaints I hear are "my 1 year old computer is SOOOO slow!". And I often see computer shops offering to "speed up your system" and do virus removal.

Install three different strengths of spyware. One that starts in the startup registry key (easy to find), one that is latched onto IE and has a cleverly named executable, and one that exists only as a DLL and latches on to WINLOGON.EXE (rootkit style).

See if they get all three. See what they do to find them, how long it takes, what tools they use. Of course, software monitoring tools to gather these data may be found. Maybe a hardware key logger somehow inside the case?

Hm, does anyone make a hardware screen logger?! Somehow fork off the video card into a buffer, maybe 1 frame per second (CCTV style)? Wouldn't be convenient for badguys to install on target machines, but good for parents, libraries, etc with good physical security for monitoring purposes. Hm........


And Dan, how did the reporters know to ask you, if I may be so curious?

Maybe contract the Storm worm and tell them that your router lights are constantly blinking and your Internet is slow (since your machine is blasting out spam).


Edited by FireFox31 (05/12/2007 23:46)
_________________________
-
FireFox31
110gig MKIIa (30+80), Eutronix lights, 32 meg stacked RAM, Filener orange gel lens, Greenlights Lit Buttons green set

Top
#304768 - 05/12/2007 23:55 Re: TV reporters want to test computer fixit shops [Re: DWallach]
pca
old hand

Registered: 20/07/1999
Posts: 1102
Loc: UK
Replace the BIOS setting battery with a flat one. That causes all SORTS of problems, many of which are difficult to track down as they can masquerade as software issues.

Set the pagefile size as small as it will go (2MB? or 0?) and complain that the machine runs really slowly. Make sure it only has 256MB of ram for maximum pain.

Rename explorer.exe to something else?

pca
_________________________
Experience is what you get just after it would have helped...

Top
#304769 - 06/12/2007 08:10 Re: TV reporters want to test computer fixit shops [Re: FireFox31]
andy
carpal tunnel

Registered: 10/06/1999
Posts: 5914
Loc: Wivenhoe, Essex, UK
Quote:

And Dan, how did the reporters know to ask you, if I may be so curious?



http://www.cs.rice.edu/~dwallach/

"I'm an associate professor in the systems group at Rice University's Department of Computer Science, I manage Rice's computer security lab"
_________________________
Remind me to change my signature to something more interesting someday

Top
#307062 - 08/02/2008 20:43 Re: TV reporters want to test computer fixit shops [Re: andy]
DWallach
carpal tunnel

Registered: 30/04/2000
Posts: 3810
Dredging up an old thread:

They initially brought me a laptop to dork with, except it turned out that the laptop was super-customized to run some kind of video editing system. It had a custom funky-colored keyboard. It was configured to run on their internal network. It had an station property tag glued to it. Clearly, no good.

Finally, the TV people came back, this time with a 2000-vintage P4 desktop (733MHz). The tech at the station had pretty much wiped the machine clean, setting up an easy cover story. ("I got this as a hand-me-down from work, but it's not working right. Can you fix it?") Conveniently, the motherboard battery was already dead, providing a nice easy test. The TV people wanted something easy to replicate (read: low-impact), so they'd already concluded that they didn't want to monkey around with viruses and worms or anything like that. Instead, they just wanted to wiggle out the hard drive's IDE cable.

This particular box, since it was at some point meant to be a fancy corporate desktop, has some nice BIOS features. It actually complains about the battery and the lack of an IDE drive before it will let the thing boot. Sounds to me like it's practically a gimme for the fixit shops, but it should work.

Top
#307134 - 10/02/2008 19:27 Re: TV reporters want to test computer fixit shops [Re: DWallach]
FireFox31
pooh-bah

Registered: 19/09/2002
Posts: 2494
Loc: East Coast, USA
Maybe the BIOS has "display full screen image at boot" which may cover any battery/disk messages during POST. And disconnect the PC speaker so it can't beep about them?

And for good measure, just to stump these guys, flip the power supply switch to 230 V. If that's not there, just flip the switch to off. Haha, should get them.
_________________________
-
FireFox31
110gig MKIIa (30+80), Eutronix lights, 32 meg stacked RAM, Filener orange gel lens, Greenlights Lit Buttons green set

Top
#313816 - 09/09/2008 12:41 Re: TV reporters want to test computer fixit shops [Re: FireFox31]
DWallach
carpal tunnel

Registered: 30/04/2000
Posts: 3810
Well, they ran the story last night. Here's a written transcript. Bitt might find it amusing that they mistranscribed me in an amusing way: I said "haphazard", they wrote "half-hazard". Also, the part where they have me completing the sentence, describing myself as a "geek, nerd, something like that," I'm modestly confident that I wasn't actually using those words to describe myself. Ahh, quotes out of context.

The punchline was that, given a poorly seated IDE cable, two of the five tested firms wanted to charge $280 to reinstall Windows. The rest seemed to eventually figure it out. Either nobody noticed the bad motherboard battery, or they edited that out of the broadcast.

Top