The IT Nerd

For Lenovo, installing potentially dangerous adware on computers that they sell is pretty bad. But the problem is now really bad as security researcher Robert Graham has shown how one can leverage this adware to spy on users:

I extracted the certificate from the SuperFish adware and cracked the password (“komodia”) that encrypted it. I discuss how down below. The consequence is that I can intercept the encrypted communications of SuperFish’s victims (people with Lenovo laptops) while hanging out near them at a cafe wifi hotspot. Note: this is probably trafficking in illegal access devices under the proposed revisions to the CFAA, so get it now before they change the law.

I guess that any attempt by Lenovo to say that this adware isn’t really harmful has just gone up in smoke. This fiasco is starting to reach the point where someone needs to slap anyone and everyone behind this adware and the installation of it onto Lenovo computers silly. The Government, law enforcement, lawyers via a class action lawsuit, consumers via a boycott of Lenovo products. I don’t really care whom. It just has to happen as this is completely unacceptable.

This entry was posted on February 20, 2015 at 1:17 pm and is filed under Commentary with tags Lenovo, Security. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.