If you purchased a new Lenovo notebook late last year you might have wondered why you were seeing strange ads every time you did a Google search. The answer is simple: Lenovo installed adware on your brand-new PC. Unfortunately, this isn't the first time we've seen a PC manufacturer preinstall questionable software on consumer laptops ... and it probably won't be the last.
Read the full content of this Article: http://www.notebookreview.com/feature/lenovo-apologizes-adware-need-know-bloatware-new-pc/
-
Jerry Jackson Administrator NBR Reviewer
-
The issue is a lot more serious than just "adware" or "bloatware." In the article you really gloss over the main issue at hand. This isn't your standard bloat that you want to trim from a new PC. This software makes all secure network connections open to third parties. This is a huge security hole and there is absolutely no excuse for them to willfully do such a thing. "Lenovo claims an internal investigation of Superfish did not find any evidence to substantiate that the adware poses a security risk to users" is demonstrably false. How do we know that Lenovo, their pals in the Chinese government, a rogue Lenovo employee, or any other hacker with knowledge of this software wasn't storing user names, passwords, or any other sensitive information that was input online? By trusting the same people who got caught red-handed installing it on new PCs? We don't. If anyone was affected by this, they should get rid of it immediately and change all of their passwords, although unfortunately other information such as SSNs, date of birth, or other permanent identification numbers could be compromised.
Also, I don't want to get banned by posting links on how to hack it, but after this became public, people have posted online JUST HOW FREAKING EASY it is to use this spyware to intercept any "secure" connection. It is really scary stuff. This goes WAY beyond any sort of run of the mill "bloatware."Last edited by a moderator: Feb 20, 2015 -
One important thing is that removing the Superfish software doesn't actually remove the certificate that is responsible for a part of the issue. Also, yeah any script kiddie will be able to use the vulnerability.
-
That is absolutely disturbing to hear such a big laptop maker use such disgusting practices.
Good thing I have never owned a Lenovo and now never will even though they say they "fixed" it. -
Yeah this is right up there with the Sony rootkit incident from many years ago. Not good at all.
Lenovo Apologizes for Adware: What you need to know about bloatware on your new PC
Discussion in 'Notebook News and Reviews' started by Jerry Jackson, Feb 19, 2015.