[Cryptography] Lenovo laptops with preloaded adware and an evil CA

[Ray Dillinger]

The current page of "Cybernetic Entomology" is about this whole
episode.

http://dillingers.com/blog/category/cybernetic-entomology/

Shameless Plug: Cybernetic Entomology is my own series of blog
posts.  As it develops it may become a book.

				Bear


On 02/20/2015 01:01 AM, Stephan Neuhaus wrote:
> On 2015-02-20 02:37, William Muriithi wrote:
>> Crazy
>>
>> Really, how can Lenovo fall for this?
> 
> I think the chain of events went somewhat like this:
> 
> They (a) thought they really, really needed a way to increase their
> revenue, therefore (b) outsourced the whole thing to another company
> (because building things in-house is costly, don't you know?), (c) had
> neither the time nor the inclination to do a proper audit, and therefore
> (d) probably didn't even know about the extent to which Superfish
> compromised their customers' laptops.
> 
> Fun,
> 
> Stephan
> _______________________________________________
> The cryptography mailing list
> cryptography at metzdowd.com
> http://www.metzdowd.com/mailman/listinfo/cryptography
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20150222/22effcfc/attachment.sig>