Login

**Mystik** · (This post was last modified: 08-06-2015, 10:37 PM by Mystik.)

Ok so basically Lenovo has installed some cool bloatware to their pre-built PCs and laptops. These laptops and towers have been shipped October - December 2014. This piece of shit adware/malware breaks HTTPS connections and places and replaces all kinds of shitty adware to websites you visit. This however is not the main issue. The main issue is described in the following article @ Ars technica:

Quote:Lenovo is selling computers that come preinstalled with adware that hijacks encrypted Web sessions and may make users vulnerable to HTTPS man-in-the-middle attacks that are trivial for attackers to carry out, security researchers said.

The critical threat is present on Lenovo PCs that have adware from a company called Superfish installed. As unsavory as many people find software that injects ads into Web pages, there's something much more nefarious about the Superfish package. It installs a self-signed root HTTPS certificate that can intercept encrypted traffic for every website a user visits. When a user visits an HTTPS site, the site certificate is signed and controlled by Superfish and falsely represents itself as the official website certificate.

Even worse, the private encryption key accompanying the Superfish-signed Transport Layer Security certificate appears to be the same for every Lenovo machine. Attackers may be able to use the key to certify imposter HTTPS websites that masquerade as Bank of America, Google, or any other secure destination on the Internet. Under such a scenario, PCs that have the Superfish root certificate installed will fail to flag the sites as forgeries—a failure that completely undermines the reason HTTPS protections exist in the first place.

http://arstechnica.com/security/2015/02/...nnections/

TO FIND OUT IF YOU HAVE IT:
If you see an image below this line - you should look into removing the software and bad certificates.

[Image: yes.png]

Or visit: https://filippo.io/Badfish/

If you can see the above image, you should do as explained here:
https://forums.lenovo.com/t5/Lenovo-P-Y-...-p/2029206

PS. Joke of the month: Lenovo representative writes:

Quote:Visual Discovery / Superfish was previously included on some consumer notebook products shipped in a short window between October and December to help customers potentially discover interesting products while shopping. However, user feedback was not positive, and we responded quickly and decisively:

Later edit:

Lenovo apologizes, releases full list of "infected" machines, removal tool and instructions.
http://news.lenovo.com/article_display.c...le_id=1929
http://support.lenovo.com/us/en/product_..._uninstall