Results 1 to 8 of 8

Thread: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections - Ars T.

  1. #1
    Join Date
    Apr 2011
    Location
    Cinnamon land
    Beans
    422
    Distro
    Kubuntu 22.04 Jammy Jellyfish

    Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections - Ars T.

    Lenovo is selling computers that come preinstalled with adware that hijacks encrypted Web sessions and may make users vulnerable to HTTPS man-in-the-middle attacks that are trivial for attackers to carry out, security researchers said.
    (...)


    http://arstechnica.com/security/2015...nts=1&start=80

    The comments section is in uproar.
    check out KDE Neon
    Dell Inspiron 5625, AMD Ryzen 7 5825U


  2. #2
    Join Date
    Jun 2010
    Location
    London, England
    Beans
    Hidden!
    Distro
    Ubuntu Development Release

    Re: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections - Ars

    This is how the BBC published the news

    http://www.bbc.co.uk/news/technology-31533028

    If that is the same superfish as this superfish than this matter could be much, much worse.

    http://www.home.superfish.com/#!partners/c1qiz

    People may be installing apps using this technology.

    Regards.
    It is a machine. It is more stupid than we are. It will not stop us from doing stupid things.
    Ubuntu user #33,200. Linux user #530,530


  3. #3
    Join Date
    Nov 2007
    Location
    Hurricane haven NC
    Beans
    Hidden!
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections - Ars

    I'd love to know why they think it's perfectly ok to do this sort of thing. it reminds me of Sony's rootkit.
    A friendly & helpful Linux community who has started a large cursor theme project. If you are sick of tiny cursors, go here and get one.
    http://linuxinternationals.org/forum...orum.php?f=166

  4. #4
    Join Date
    Apr 2011
    Location
    Cinnamon land
    Beans
    422
    Distro
    Kubuntu 22.04 Jammy Jellyfish

    Re: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections - Ars

    More Ars coverage, it looks like this is a potentially massive story with lots of companies involved... including Comodo

    http://arstechnica.com/security/2015...s-get-simpler/
    check out KDE Neon
    Dell Inspiron 5625, AMD Ryzen 7 5825U


  5. #5
    Join Date
    Feb 2011
    Location
    Minnesota, United States
    Beans
    62
    Distro
    Ubuntu 16.04 Xenial Xerus

    Re: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections - Ars

    I just read on Facebook - all over the place that there is a law-suit over it now to Lenovo... not totally surprised. I mean, you take money and don't have it vetted out? Kinda funky if you ask me...
    That's the kind of society I want to build. I want a guarantee -- with physics and mathematics, not with laws -- that we can give ourselves real privacy of personal communications. - John Gilmore

  6. #6
    Join Date
    Aug 2014
    Beans
    Hidden!
    Distro
    Ubuntu 16.04 Xenial Xerus

    Re: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections - Ars

    Quote Originally Posted by Hexxus View Post
    I just read on Facebook - all over the place that there is a law-suit over it now to Lenovo... not totally surprised. I mean, you take money and don't have it vetted out? Kinda funky if you ask me...
    Not surprising.... US lawyers don't miss an opportunity for a class action.
    Last edited by CantankRus; February 24th, 2015 at 03:03 AM.

  7. #7
    Join Date
    Nov 2007
    Location
    Hurricane haven NC
    Beans
    Hidden!
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections - Ars

    It never ceases to amaze me what big companies think they can get away with.
    A friendly & helpful Linux community who has started a large cursor theme project. If you are sick of tiny cursors, go here and get one.
    http://linuxinternationals.org/forum...orum.php?f=166

  8. #8
    Join Date
    Nov 2009
    Beans
    Hidden!
    Distro
    Kubuntu 20.04 Focal Fossa

    Re: Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections - Ars

    Quote Originally Posted by blackbird34 View Post
    More Ars coverage, it looks like this is a potentially massive story with lots of companies involved... including Comodo
    Comodo issue seems to have been limited to a certain version, and it was already patched in the same day. as per their comment it was an error in a library or something. anyway not something they intended to happen is what they say.

    hmm... the thing is why do they add some many things for example to their firewall.... you now have virus scanner, virtual desktop, firewall... and many other things in Comodo firewall.
    Read the easy to understand, lots of pics Ubuntu manual.
    Do i need antivirus/firewall in linux?
    Full disk backup (newer kernel -> suitable for newer PC): Clonezilla
    User friendly full disk backup: Rescuezilla

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •