Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Lenovo pre-installs PCs with HTTPS hijacking adware

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    39 Posts 11 Posters 5.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kejianshi
      last edited by

      Yeahhhhhh….  Noooooo...

      If they are underhanded enough to install something like that on my computer, who else knows what else is lurking yet undiscovered.

      I'd burn the whole install.  Format/Wipe the drive, install OS from Base OEM distro.

      1 Reply Last reply Reply Quote 0
      • G
        grandrivers
        last edited by

        how do we know hardware is not already compromised too right from get free of charge ??

        pfsense plus 25.03 super micro A1SRM-2558F
        C2558 32gig ECC  60gig SSD

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          To me this speaks volumes to what Lenovo thinks about their customers.

          Not that all manufacturers don't hate us but need our $$ so we're a necessary evil, Lenovo got caught.

          RSA got caught too and nobody cares, so…

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • ?
            Guest
            last edited by

            I always wondered about the big blue split. Seemed mighty strange at the time. Maybe in 40 years we will get the truth…

            Anybody remember this:
            http://www.washingtonpost.com/wp-srv/politics/special/campfin/stories/circuit070898.htm

            1 Reply Last reply Reply Quote 0
            • K
              kejianshi
              last edited by

              I remember extremely clearly…

              1 Reply Last reply Reply Quote 0
              • H
                Harvy66
                last edited by

                Even Homeland Security is "urging" Lenovo customers to remove it

                http://yro.slashdot.org/story/15/02/20/2357234/homeland-security-urges-lenovo-customers-to-remove-superfish

                1 Reply Last reply Reply Quote 0
                • BBcan177B
                  BBcan177 Moderator
                  last edited by

                  The rabbit hole goes even deeper  :o :o

                  http://www.securityweek.com/superfish-ssl-interception-library-found-several-applications-researchers

                  "Experience is something you don't get until just after you need it."

                  Website: http://pfBlockerNG.com
                  Twitter: @BBcan177  #pfBlockerNG
                  Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                  1 Reply Last reply Reply Quote 0
                  • K
                    kejianshi
                    last edited by

                    Oh how wonderful…

                    1 Reply Last reply Reply Quote 0
                    • P
                      phil.davis
                      last edited by

                      And it would be good if this class action scared other companies into removing some of the pre-installed crapware from their distributions:
                      http://www.law360.com/articles/623675/lenovo-hit-with-class-suit-over-pcs-preloaded-spyware

                      Maybe it is time to get serious about jumping from the Windows ship?

                      As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                      If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                      1 Reply Last reply Reply Quote 0
                      • K
                        kejianshi
                        last edited by

                        I would have expected that you would already have jumped ship for the most part.

                        You seem like such a smart guy.

                        1 Reply Last reply Reply Quote 0
                        • M
                          mikeisfly
                          last edited by

                          @phil.davis:

                          Maybe it is time to get serious about jumping from the Windows ship?

                          Yeah because you can't do this in FreeBSD or Linux? Why would you blame Microsoft for a Lenovo issue? Seems like the Chinese have learned something from us, greed!

                          1 Reply Last reply Reply Quote 0
                          • K
                            kejianshi
                            last edited by

                            I think Microsoft is a known offender by now.  Too many complicated holes for it to be an accident.

                            1 Reply Last reply Reply Quote 0
                            • S
                              Supermule Banned
                              last edited by

                              So is Google, Linkedin, Facebook and all the other almost free shot on the interwebs….

                              Get off, live your life and give a fuck!

                              1 Reply Last reply Reply Quote 0
                              • M
                                mikeisfly
                                last edited by

                                The real problem is the CA trust model, when we live in a world where you can trust no one. But then you have to trust someone other wise you might as well live on a deserted Island.

                                1 Reply Last reply Reply Quote 0
                                • K
                                  kejianshi
                                  last edited by

                                  I can agree with that - It is an issue.

                                  1 Reply Last reply Reply Quote 0
                                  • D
                                    doktornotor Banned
                                    last edited by

                                    @mikeisfly:

                                    But then you have to trust someone other wise you might as well live on a deserted Island.

                                    I'd rather trust myself than funding the CAs bullshit business.

                                    1 Reply Last reply Reply Quote 0
                                    • K
                                      kejianshi
                                      last edited by

                                      Same here

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        doktornotor Banned
                                        last edited by

                                        Superfish replaced with McAfee.

                                        ;D ;D ;D ;D ;D

                                        P.S. How To Uninstall McAfee Antivirus - featuring John McAfee himself

                                        1 Reply Last reply Reply Quote 0
                                        • K
                                          kejianshi
                                          last edited by

                                          Which is worse…  McAfee or viruses....  Damn its a tough call...

                                          1 Reply Last reply Reply Quote 0
                                          • ?
                                            Guest
                                            last edited by

                                            I think this article has a good view of the problem.
                                            http://www.computerworld.com/article/2894233/web-browsers-are-also-to-blame-for-lenovos-superfish-fiasco.html

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.