Maple Grove Report

Maple Grove Report

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.


ThinkPads: Why do they have a cult following? What do they offer that your current laptop doesn’t? They’re more than mere specs; for some, they’re a passion. It’s a strange affinity to truly love a brand of laptop, but some swear by it—and I have five reasons.

ThinkPads are one of the most recognizable laptops out there. They’ve been around for decades and adored by many. In the Linux world, ThinkPads are renowned for their fantastic compatibility and are frequently recommended. Many Linux users vouch for them (including me). But there’s more to them than just hardware compatibility, and I’ll go over what makes this classic brand the perfect choice for fellow geeks.

Example of alias running on the Linux terminal.


5 hard truths about switching to Linux that Windows users need to hear

Before you format that drive, have a quick, honest chat with yourself.

Legendary serviceability

Cheap and easy-to-find parts flood the market

The Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition's box contents. Credit: Cianna Garrison / How-To Geek

If you’ve ever researched ThinkPads, you’ve probably come across droves of people praising their serviceability, and it’s all true. ThinkPad parts inundate online markets (like eBay) with options to fix anything you can think of. From screens to power modules, finding the part takes only minutes, all unambiguously labeled, cheap, and easy to install.

Repairability is one thing, but upgradability is another. It’s very common for ThinkPad users to mod their purchases—installing upgraded screens, extra hard disks, or additional RAM. Guides, ideas, and parts are easy to come by, so, unlike most other laptops, making an inexpensive ThinkPad purchase sometimes means bumping its offering to premium levels.

Unfortunately, their serviceability has taken somewhat of a hit in recent years. Some of the newer ThinkPads now solder RAM and Wi-Fi cards onto the board to save space and weight, which is a grave mistake if you ask me. However, every ThinkPad series has a different use case, and not all of them do that—the larger P-series models being one notable exception, and I’m sure there are more.

If modularity is a big concern, then weigh your options first. Lenovo provides detailed technical specification sheets—called PSREF (Product Specifications Reference)—for every model. Study these before a purchase.



















Quiz
8 Questions · Test Your Knowledge

Linux
Trivia Challenge

From a Finnish student’s side project to powering the world’s supercomputers — how well do you really know Linux?

HistoryCultureCommandsKernelFun Facts

In what year did Linus Torvalds announce the first version of the Linux kernel to the world?

Correct! Linus Torvalds posted his now-famous message to the comp.os.minix newsgroup on August 25, 1991, describing Linux as ‘just a hobby, won’t be big and professional.’ That turned out to be quite the understatement.

Not quite — Linus Torvalds made his famous announcement in 1991, when he was just 21 years old and a student at the University of Helsinki. He described it as a ‘hobby’ project, which is arguably the most successful hobby in computing history.

What is the name of the Linux mascot, and what kind of animal is it?

Correct! Tux the penguin became the official Linux mascot in 1996, designed by Larry Ewing. The name ‘Tux’ is often said to stand for Torvalds UniX, and the penguin was chosen after Linus mentioned he was once bitten by a penguin at a zoo.

The answer is Tux, a penguin! The mascot was chosen after Linus Torvalds mentioned being bitten by a fairy penguin at a zoo in Canberra, Australia. Designer Larry Ewing created the iconic image in 1996 using GIMP — fittingly, free software.

What type of kernel architecture does Linux use?

Correct! Linux uses a monolithic kernel, meaning the entire operating system runs in kernel space. This famously sparked a heated debate between Linus Torvalds and computer scientist Andrew Tanenbaum in 1992, who argued microkernels were the superior design.

Not quite — Linux uses a monolithic kernel, where the OS core runs as a single large process in kernel space. This was actually controversial, leading to a famous flame war between Linus Torvalds and professor Andrew Tanenbaum, who believed microkernels were the future.

What does the classic Linux command ‘sudo’ stand for?

Correct! ‘sudo’ stands for Superuser Do, and it allows permitted users to run commands with the security privileges of another user — typically the root superuser. It’s one of the most typed commands in Linux and has inspired countless memes about power and responsibility.

The answer is ‘Superuser Do’! While ‘switch user’ logic is involved, the name specifically refers to executing a command as the superuser (root). First developed in the 1980s, sudo is now a cornerstone of Linux security, letting admins grant elevated privileges without sharing the root password.

What percentage of the world’s top 500 supercomputers run Linux?

Correct! As of 2017, Linux achieved 100% domination of the TOP500 supercomputer list — and has maintained it ever since. From weather modeling to nuclear research to AI training, every single one of the world’s fastest supercomputers runs Linux.

Remarkably, the answer is 100%! Since November 2017, every single computer on the TOP500 supercomputers list has run Linux. It powers everything from climate simulations to particle physics research at CERN to AI model training at major tech companies.

Which operating system directly inspired Linus Torvalds to create Linux?

Correct! Torvalds was inspired by Minix, a small Unix-like OS created by Andrew Tanenbaum for educational purposes. Frustrated by Minix’s limitations and licensing restrictions, he set out to build his own kernel — and the rest is history.

The direct inspiration was Minix, a small educational Unix-like system created by professor Andrew Tanenbaum. Torvalds was using Minix on his new PC but found it too limited. His desire for a more capable, free system drove him to write Linux from scratch starting in 1991.

What does the ‘GNU’ in ‘GNU/Linux’ stand for?

Correct! GNU stands for ‘GNU’s Not Unix’ — a classic recursive acronym beloved by hackers. The GNU project was started by Richard Stallman in 1983 to create a completely free Unix-like operating system. Linux provided the missing kernel to complete the GNU system.

GNU stands for ‘GNU’s Not Unix’ — a recursive acronym, which is a playful trick where the abbreviation refers back to itself. Richard Stallman launched the GNU Project in 1983, years before Linux existed. When Torvalds released the Linux kernel, it completed the puzzle Stallman had started.

Which of the following runs on the Linux kernel?

Correct! Android is built on top of the Linux kernel, making Linux the most widely used OS on the planet when you count smartphones. Billions of Android devices worldwide are technically running Linux — Torvalds’ ‘hobby’ project ended up in nearly everyone’s pocket.

The answer is Android! Google built Android on top of a modified Linux kernel, which means billions of smartphones worldwide are running Linux under the hood. macOS and iOS use a Darwin/XNU kernel, and WSL runs Linux tools but translates syscalls rather than running the kernel natively.

Challenge Complete

Your Score

/ 8

Thanks for playing!

Exceptional build quality

Military-grade testing and an awesome keyboard

Lenovo ThinkPad X13 Gen 6 sitting on a table at MWC 2025. Credit: Justin Duino / How-To Geek

Many in the user base praise ThinkPads for their build quality. While some say it has decreased since the IBM days, it has a lasting reputation. In particular, people rave about their keyboard and layout. Personally, I’ve gone through a half-dozen of them, but the letters are usually fading off the keys when replaced, so perhaps I’ve gotten more value for money than I realize.

ThinkPads also undergo rigorous mil-spec testing (MIL-STD 810G) to evaluate them for resilience under extreme conditions.

Category

Test Type

Description

Kinetic Forces

Mechanical Shock

High acceleration, repeated shock (18 times).

Vibration

Tested while running and turned off.

Environment

Fungus

28 days with common fungus spores.

Fuel Vapor

Fuel vapor environments.

Sand and Dust

Different types of sand, for hours.

Shipboard Vibrations

4–33 Hz for 2 hours.

Weather

High Altitudes

15,000 ft.

Humidity

91–98% at 86–140°F [30–60°C].

Solar Radiation

7×24-hour cycles (simulated).

Extreme Temperatures

-13–140°F [-25–60°C], 3 cycles of 2 hours each.

Low Temperature

-13°F [-25°C] for 24 hours (-5.8°F [-21°C] while operating for 8 hours).

High Temperatures

145.4°F [63°C] for 24 hours (109.4°F [43°C] while operating for 8 hours).

If you look after your device, it will last many years. The workhorse models (e.g., T, P, or X series) have powerful processors in them, and unless you need cutting-edge hardware, they’ll last well into the future—mine is over 10 years old.

Value for money

A long-term cult following with plenty to offer

Lenovo ThinkPad T450s on a table. Credit: Bertel King / How-To Geek

Their cost-effectiveness is why I buy ThinkPads. They’ve long been a favorite for businesses, which frequently turn over hardware, dumping old devices in large quantities into public marketplaces.

You will find thousands of ThinkPads on eBay, all at enticing prices. Given the sheer volume of competition, it’s not uncommon to find a 2-3-year-old laptop for $300-$400. These devices are not slouches either; the P-series models go for raw power, with older models shipping a Quadro GPU and newer ones an Nvidia RTX.

You may pay extra for newer generations from the flagship line (X1 Carbon), but the iconic T series is the sweet spot—capable, light, and budget-friendly.

Series

Use case

E series

Small business. Budget.

L series

Enterprise; affordable. A step up from the E-series.

T series

Enterprise; mainstream. A workhorse for businesses.

P series

Workstation. A power-hungry T-series with dedicated GPU options.

X series

Mobile workhorse. A lighter T-series.

X1 series

Flagship (Intel).

Z series

AMD.

Yoga

360° swiveling screen.

Lenovo may have discontinued some of those listed, but you can still find them second-hand or refurbished, and often under $200.

2-3 year-old laptops for a mere few hundred bucks

For technical products, I always ensure first that they have a strong community. It’s a sign of good health, support, and sometimes even quality. Regular access to useful information is something people don’t value enough.

For other laptops, their communities may be sparse or too general, but the ThinkPad community has been strong for decades. There’s no shortage of help, inspiration, or guides, and so, if you decide to make a purchase, then know that you’re not only buying into a well-built, robust device but also the community.

The Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition

8/10

Operating System

Windows 11 Pro

CPU

Intel Core Ultra 7 258V Processor (8 Cores, 8 Threads, 12 MB Cache)

GPU

Intel Arc Xe2 GPU with >60 TOPS

RAM

32GB LPDDR5x 8533MT/s soldered, dual channel


Distinctive features

It’s not a ThinkPad if it doesn’t have that little red dot

The Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition laptop's leyboard. Credit: Cianna Garrison / How-To Geek

ThinkPads are immediately recognizable by the red dot in the middle of their keyboards (called TrackPoint). I’ve never understood why these exist, because I find them clunky. However, a significant portion of the user base stands behind them. I can’t tell if it’s a joke or not, but TrackPoints are a distinctive part of the ThinkPad brand.

The Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition laptop open on a desk.


Lenovo ThinkPad X1 Carbon Gen 13 Aura Edition Review: Focused On AI Features

This portable ThinkPad delivers powerful computing and a stand-out OLED display.


I’ve had my ThinkPad for over a decade now, and it’s still hanging in there, despite neglect. If I had maintained it properly—dusting regularly and re-attaching all screws after maintenance—it would last another decade.

There are few laptops that I would consider when purchasing a new device, perhaps an HP EliteBook is one, but I’m happy with ThinkPads. I know what I get from them.

Lenovo’s decision to make newer models less serviceable is concerning because a failing component (like a Wi-Fi card) will require a soldering iron (or a computer repair shop).

However, their solid construction, widespread availability, low cost, and Linux support are the primary reasons I’ll probably stick with ThinkPads for years to come.

If I recommend a laptop, it’s a ThinkPad.

Thinkpad logo, hinge and rear camera of the Lenovo ThinkPad X12 Gen 2 Detachable.


Lenovo ThinkPad X12 Gen 2 Detachable Review: Simple Yet Functional

This detachable “laptop” has got it together.



Source link


Phishing LNK files and GitHub C2 power new DPRK cyber attacks

Pierluigi Paganini
April 06, 2026

DPRK-linked hackers use GitHub C2s, starting attacks via phishing LNK files that drop a PDF and PowerShell script in South Korea.

North Korea-linked threat actors target South Korean organizations using GitHub as C2 servers. The attack chain starts with phishing emails carrying obfuscated LNK files that drop a decoy PDF and a PowerShell script to advance the intrusion.

“FortiGuard Labs recently detected a series of LNK files targeting users in South Korea. These attacks use a multi-stage scripting process and leverage GitHub as Command and Control (C2) infrastructure to evade detection.” reads the report published by FortiGuard Labs. “Although these LNK files can be traced back to 2024, earlier versions had less obfuscation and contained significant metadata, allowing us to track similar attacks spreading the XenoRAT malware.”

The attacker recently changed tactics, embedding decoding functions and encoded payloads directly in LNK files. Decoy PDF titles show a focus on targeting companies in South Korea to expand surveillance.

Attackers use LNK files with embedded scripts to launch PowerShell commands from GitHub. Early versions hid C2 data with simple obfuscation, while later ones added decoding functions and shared metadata like “Hangul Document.” In recent attacks, they removed metadata and used encoded payloads. The LNK drops a decoy PDF to distract victims while the malicious script runs silently.

“In the latest attacks, the threat actor has removed this identifying metadata, leaving only a decoding function within the arguments.” reads the report published by FortiGuard Labs. “This function p1 takes three parameters: location, length, and an XOR key. It first defines a path to drop the decoy PDF, then decodes both the PDF and a PowerShell script for the next stage of the attack.”

The PowerShell script runs checks to detect analysis tools and stops if it finds them, helping attackers to remain under the radar. It then decodes payloads, stores them in temporary folders, and creates persistence using a scheduled task that runs silently.

The script collects system details and sends them to GitHub using hidden repositories.

Attackers rely on multiple accounts, both active and dormant, to manage operations and avoid detection while continuing data exfiltration.

“Our investigation into this GitHub account, motoralis, reveals consistent activity dating back to 2025, which matches our threat-hunting results on earlier LNK file variants. Other activities involve multiple GitHub accounts in similar attacks, including God0808RAMAPigresy80entire73pandora0009, and brandonleeodd93-blip.” continued the report. “A broader analysis of the attacker’s infrastructure reveals a strategic use of both dormant and active accounts. While some accounts, like entire73, remain largely inactive for months, others, like brandonleeodd93-blip, were activated just weeks ago to provide immediate redundancy. The motoralis account functions as the primary operational hub, showing a surge in private repository contributions that closely align with the recent spike in LNK-based phishing lures. By conducting all activity within private repositories, the threat actor effectively conceals their malicious payloads and exfiltrated logs from public view while leveraging the high reputation of the GitHub domain to stay under the radar of corporate security filters.”

In the final stage, the script keeps a stable link with the C2 by regularly pulling commands from GitHub. It uses scheduled tasks to stay active and let attackers run actions remotely.

“We identified a “keep-alive” script used by the attacker to stay visible. This script specifically gathers network configuration details and uploads them to GitHub using the PUT method. The logs are stored at: hxxps://api[.]github[.]com/repos/motoralis/singled/contents/jjyun/network/<Date>_<Time>-<IP_Address>-Real.log.” continues the report. “This automated check-in allows the threat actor to monitor the victim’s network status in real-time, enabling further actions or more in-depth exploitation within the compromised environment.”

A keep-alive script collects network details and uploads logs to GitHub, allowing real-time monitoring and further exploitation of the compromised system.

This campaign relies on strong social engineering and multiple phishing lures. Instead of complex malware, the attacker uses built-in Windows tools and LolBins to stay stealthy and reduce detection.

They abuse GitHub as C2, hiding malicious traffic in normal encrypted connections. Since many networks trust GitHub, data exfiltration often goes unnoticed. This mix of legit tools and services makes detection difficult, so monitoring unusual scripting activity is key.

“This combination of legitimate tools and trusted web services creates a highly effective infection chain. To stay protected, users should stay alert against untrusted documents and monitor for unusual PowerShell or VBScript activity in their environments.” concludes the report.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, North Korea)







Source link

Recent Reviews