Superfish

Message boards : Number crunching : Superfish
Message board moderation

To post messages, you must log in.

AuthorMessage
chromespringer
Avatar

Send message
Joined: 3 Dec 05
Posts: 296
Credit: 55,183,482
RAC: 0
United States
Message 1644748 - Posted: 21 Feb 2015, 1:38:25 UTC

another good reason to build .. don't buy

https://www.yahoo.com/tech/s/superfish-infected-computer-150512749.html
ID: 1644748 · Report as offensive
Admiral Gloval
Avatar

Send message
Joined: 31 Mar 13
Posts: 20238
Credit: 5,308,449
RAC: 0
United States
Message 1644797 - Posted: 21 Feb 2015, 5:39:10 UTC - in response to Message 1644748.  

another good reason to build .. don't buy

https://www.yahoo.com/tech/s/superfish-infected-computer-150512749.html

Link is now clickable.
https://www.yahoo.com/tech/s/superfish-infected-computer-150512749.html

ID: 1644797 · Report as offensive
Profile JakeTheDog
Avatar

Send message
Joined: 3 Nov 13
Posts: 153
Credit: 2,585,912
RAC: 0
United States
Message 1644820 - Posted: 21 Feb 2015, 6:47:30 UTC

Didn't realize that Lenovo made desktops. Is there any way to build laptops? I've only built desktops, and my impression has been that the answer is no. If I ever get a laptop or help a friend with theirs, is there a way to know if there's manufacturer installed adware or privacy reducing bloatware? Are there brands that should be avoided? Any website that lists brands w/ adware, ect.
ID: 1644820 · Report as offensive
Cosmic_Ocean
Avatar

Send message
Joined: 23 Dec 00
Posts: 3027
Credit: 13,516,867
RAC: 13
United States
Message 1644836 - Posted: 21 Feb 2015, 8:33:24 UTC

Build-able laptops: technically yes, generally no. It can be done if you know what you're doing, but it ends up costing more than just buying one because you have to source replacement pieces/parts from one or more models and assemble them together.. and replacement parts cost an absurd amount in comparison to buying a whole laptop.

There was a kickstarter fund or something similar a few years back to try to make build-able laptops a real thing, but then tablets and smart phones became affordable, so that idea kind of went silently into the night.



Regarding what to look/scan for in a new (or factory-restored) laptop: I typically prefer to just wipe it and do a clean OS install myself, and THEN make a new "factory image" at that point, but that's me.

Most people are just fine with going to the installed programs list (appwiz.cpl) and just remove everything you don't want. It's not perfect, but it does fairly well. There's always Decrapifier which does that in a pretty automated manner. It's great for new machines or ones that have been going for a few years and collected a ton of bloatware from various things (such as.. you got a new printer and wanted the 3 MB worth of drivers so you can print things.. but you HAD to download the 800 MB software bundle and install 50 things that you will never ever use.. and so forth).
Linux laptop:
record uptime: 1511d 20h 19m (ended due to the power brick giving-up)
ID: 1644836 · Report as offensive
Profile Mr. Kevvy Crowdfunding Project Donor*Special Project $250 donor
Volunteer moderator
Volunteer tester
Avatar

Send message
Joined: 15 May 99
Posts: 3776
Credit: 1,114,826,392
RAC: 3,319
Canada
Message 1644943 - Posted: 21 Feb 2015, 15:34:43 UTC
Last modified: 21 Feb 2015, 15:46:28 UTC

For anyone with a Lenovo, they have posted an automated uninstaller to get rid of Superfish.

Of course, just in case you are justifiably dubious running it given that it was also developed by Lenovo, there are manual uninstall directions there too. :^)

U.S. Department of Homeland Security alert on Superfish. This is worth a read as you should also uninstall "Komodo redirector" if present.
ID: 1644943 · Report as offensive
Profile Jord
Volunteer tester
Avatar

Send message
Joined: 9 Jun 99
Posts: 15184
Credit: 4,362,181
RAC: 3
Netherlands
Message 1644974 - Posted: 21 Feb 2015, 16:55:22 UTC

Aside from Lenovo adding the uninstall instructions on their website, they'd also already disabled the servers that would send the adverts. I bought a Lenovo laptop for my mother in January and although I saw that app in the Add/Remove Programs listing, I noticed no extra commercial adverts coming in. So it's a bit of a storm in a teacup scenario.

It was long disabled before anyone found out about it and posted the first report about it.

If you want to feel secure, go online on your Xiaomi smartphone.
The first thing these phones do when you add a simcard and have loaded the battery, is secretly text carrier name, phone number, IMEI (the device identifier) plus numbers from address book and text messages back to Beijing, and continues to do this every month. Yet a lot of the people screaming murder about Lenovo happily use such a phone.
ID: 1644974 · Report as offensive
chromespringer
Avatar

Send message
Joined: 3 Dec 05
Posts: 296
Credit: 55,183,482
RAC: 0
United States
Message 1644987 - Posted: 21 Feb 2015, 17:24:51 UTC - in response to Message 1644974.  

my point exactly .. call me paranoid but Lenovo and Xiaomi might very well be just 2 of the teacups in the china cabinet
ID: 1644987 · Report as offensive
David S
Volunteer tester
Avatar

Send message
Joined: 4 Oct 99
Posts: 18352
Credit: 27,761,924
RAC: 12
United States
Message 1645847 - Posted: 24 Feb 2015, 4:03:06 UTC

Lenovo's security advisory says "This advisory only applies to Lenovo Notebook products.
(ThinkPad, ThinkCentre, Lenovo Desktop, ThinkStation, ThinkServer and System x products are not impacted.)"

Also, the previously linked removal instructions appear to only apply to Win 8/8.1.
David
Sitting on my butt while others boldly go,
Waiting for a message from a small furry creature from Alpha Centauri.

ID: 1645847 · Report as offensive
Profile Bernie Vine
Volunteer moderator
Volunteer tester
Avatar

Send message
Joined: 26 May 99
Posts: 9954
Credit: 103,452,613
RAC: 328
United Kingdom
Message 1645909 - Posted: 24 Feb 2015, 8:14:42 UTC - in response to Message 1645847.  

Lenovo's security advisory says "This advisory only applies to Lenovo Notebook products.
(ThinkPad, ThinkCentre, Lenovo Desktop, ThinkStation, ThinkServer and System x products are not impacted.)"

Also, the previously linked removal instructions appear to only apply to Win 8/8.1.

Well the original article did say Superfish was only installed for three months I believe from October to December last year so it is unlikely Lenovo were selling any Windows machines with anything other than Win8 on.
ID: 1645909 · Report as offensive
Profile Jord
Volunteer tester
Avatar

Send message
Joined: 9 Jun 99
Posts: 15184
Credit: 4,362,181
RAC: 3
Netherlands
Message 1646664 - Posted: 25 Feb 2015, 21:57:33 UTC

Lenovo.comhas been hacked. Not the website itself, but apparently malicious people have hijacked Lenovo's domain record, an attack that would have given them the power to redirect the lenovo.com url to a new server under their control.

You can go to http://www.lenovo.com, but as soon as you click any of the top links here, you're at the redirect again.
More at The Verge, or any other news outlet who sports this news.
ID: 1646664 · Report as offensive
David S
Volunteer tester
Avatar

Send message
Joined: 4 Oct 99
Posts: 18352
Credit: 27,761,924
RAC: 12
United States
Message 1646733 - Posted: 26 Feb 2015, 2:24:43 UTC - in response to Message 1646664.  

Lenovo.comhas been hacked. Not the website itself, but apparently malicious people have hijacked Lenovo's domain record, an attack that would have given them the power to redirect the lenovo.com url to a new server under their control.

You can go to http://www.lenovo.com, but as soon as you click any of the top links here, you're at the redirect again.
More at The Verge, or any other news outlet who sports this news.

THAT really inspires confidence. I'm glad I didn't download the uninstaller from "their" site.
David
Sitting on my butt while others boldly go,
Waiting for a message from a small furry creature from Alpha Centauri.

ID: 1646733 · Report as offensive

Message boards : Number crunching : Superfish


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.