Live data from Hacker News

Lenovo Statement on Superfish

news.lenovo.com

251–260 of 312 posts

Re: Lenovo Statement on Superfish

#251

I've been a ThinkPad customer for ages, and have recommended them to others many times. I'm fuming mad over this. What's the best way to tell Lenovo they fucked up? I mean, I can vent over social media all day but will they even pay attention?

Stop buying their products. I was already considering moving away from Lenovo after the ruination of the -40 series. I was almost swayed back in by the -50s but this put the final nail in the coffin.

Re: Lenovo Statement on Superfish

#252

Earlier quoted context omitted.

Yes, is it really that hard to take 5 seconds out of your day and check snail mail? I get that people don't like it, but let's be real, it's not that big of an inconvenience.

Well, if this is opt-in mail, it's all cool. Where I live I, along with all my neighbours, have something like half a kilogram of spam mail weekly, all of it (except maybe first flyer from a newly-opened pizza place) goes straight to thrash. Scale this up to 1-million city or 30-million country and think of all this wasted paper, paint, electricity, fuel and labour.

They are obviously generating revenue, if they keep sending mail.

Re: Lenovo Statement on Superfish

#253

Earlier quoted context omitted.

Lenovo is a hardware vendor. I suspect most of the HN crowd reinstalls something on their machines. The non-HN crowd won't even know about all of this (see the public response to NSA spying on American citizens, almost zero).

All HN-crowd have friends, family and other folks who "don't know about that". And some of them bought those devices. But what the fucking fuck have people not understood about this issue? Someone might run open, free access points, sucking people in to connect and then they fucking MITM everything - inclusive that money transfer from your relative to you. How about that? Yes, you might be affected by this huge fuck…

I think anyone exposed to the issue's details will understand it very easily. My point is that they won't (be exposed).

The HN crowd is such an insignificant percentage of the overall population that I don't see how word of mouth will have any impact.

Re: Lenovo Statement on Superfish

#254
post #88

Earlier quoted context omitted.

So how exactly do you expect people to find out about your product if you don't advertise it? Even word of mouth requires a first sale, which generally requires... advertising.

There's advertising, and then there's advertising. Maybe a hundred years ago ads were about product discovery, they are not about that anymore. For most of the needs we have there are already products so you can just discover the product categories via well... interaction with other people. A new class of product gets often gets its spread organically, or at least via product-discovery-ads. So for example, you didn't…

And what about if I'm a camera enthusiast who just likes to shoot photos, but doesn't have time to read all the photography news sites.

Is that Canon ad on HBR relevant to me? Are Canon cameras subpar?

Re: Lenovo Statement on Superfish

#255
post #4

> We have thoroughly investigated this technology and do not find any evidence to substantiate security concerns. I try to be measured around here, as hard as I can. I can't formulate a polite way to respond to this claim. Lenovo, you are full of shit, and maliciously so. There is no excuse, nor forgiveness, for what you've done here.

Indeed. I have been buying IBM and then Lenovo Thinkpads for ages. I hate the thought that my next machine will be another brand. Lenovo: One customer lost. More to be lost.

Same here. I just ordered a Lenovo desktop 3 days ago for a family member. Seriously thinking about canceling the order now even though that machine should not be affected. I've been recommending Lenovo to lots of people, and I personally have a ThinkPad and a Yoga 2 Pro. I found the Superfish certificate on the Yoga this morning. This glib and dismissive statement is just adding insult to injury. As ambivalent as I am about lawsuits, I'm hoping Lenovo's management will get a class action right in its mendacious face.

Re: Lenovo Statement on Superfish

#256

Earlier quoted context omitted.

Why stop buying Thinkpads? Lenovo have acknowledged the issue and are now trying to resolve it. Everybody makes mistakes but how they fix those problems tells you a lot about the culture of the company. Lenovo also made a terrible mistake in removing the physical click buttons, but is now reintroducing them across their entire laptop range for 2015. What I see is a company willing to listen and admit their mistakes.…

I'd argue that so far, that's exactly the point, their response makes it worse. "We have thoroughly investigated this technology and do not find any evidence to substantiate security concerns" is a laughable statement to have issued. I can understand the legal reasons for not admitting to the security issues. But outright saying that they can't find anything to suggest they exist indicates a company I wouldn't want t…

I also had to laugh when Jobs started talking about "antenna gate". Instead of saying "We made a mistake here" he started saying "other phones have similar problems", etc. So his response wasn't good, but people still buy Apple and Apply is currently the largest company by market cap...

Re: Lenovo Statement on Superfish

#257
post #248
post #129

Earlier quoted context omitted.

If you re-installed your OS and didn't use the factory image (which always includes other bloatware), then you were not affected. Or if you installed another OS (Linux, BSD, etc) then you were not affected. I love my thinkpad... but I've always paved over the factory image the moment I got my new laptop. This is egregious beyond a doubt, but it does not affect me so I'm not worried about buying more of their laptops.

I've always been curious about how this work. If I buy a Win machine and want to keep Win (say to dual-boot), how do I do this? Buy a second OS disk? Torrent one and use my key? I get it if I'm wiping out and putting on Linux or something, but that always seems like I'm wasting something I've already bought.

You don't have to "waste" the windows license key you purchased... it allows you to do a fresh install and just use that key. You can use any windows ISO or disk to do the fresh install. In fact I think somewhere you can download the Windows 7, 8, and 8.1 ISO's directly from Microsoft.

Re: Lenovo Statement on Superfish

#258
post #62

Earlier quoted context omitted.

No company is immune to making ridiculous statements - Apple told people not to hold the iPhone 4 the 'wrong way', for example[1]. I can believe that management at Lenovo simply can't understand how serious this incident is - they're unlikely to have the technical knowledge needed to understand how severe the security problem is. I'm sure there are hundreds of Lenovo engineers tearing their hair out in frustration ri…

Apple telling users not to hold the phone the wrong way is different in kind and several leagues of degree from "we are enabling anyone, ever, to MitM your connection to any website." I believe you are raising this point in good faith, but it verges on disingenuous to compare them.

Quite right - they're not on the same level. However, both are certainly 'user-hostile'.

The thrust of my argument was that most large companies are bad at communicating about technical problems because of the way the message gets filtered through management, PR, lawyers etc. It's probably fair to say that Apple hasn't ever done anything this bad - but it's also disingenuous to hold them up as an unfailing bastion of niceness and competence.

Re: Lenovo Statement on Superfish

#259
post #4

> We have thoroughly investigated this technology and do not find any evidence to substantiate security concerns. I try to be measured around here, as hard as I can. I can't formulate a polite way to respond to this claim. Lenovo, you are full of shit, and maliciously so. There is no excuse, nor forgiveness, for what you've done here.

Speaking of Lenovo being full of shit, there's also this gem: > The relationship with Superfish is not financially significant; our goal was to enhance the experience for users. Right. You loaded adware onto users' computers, not for financial gain, but to enhance the experience for them.

Ads? No, this is extra, potentially relevant information! And at no extra cost!

Re: Lenovo Statement on Superfish

#260
post #4

> We have thoroughly investigated this technology and do not find any evidence to substantiate security concerns. I try to be measured around here, as hard as I can. I can't formulate a polite way to respond to this claim. Lenovo, you are full of shit, and maliciously so. There is no excuse, nor forgiveness, for what you've done here.

Speaking of Lenovo being full of shit, there's also this gem: > The relationship with Superfish is not financially significant; our goal was to enhance the experience for users. Right. You loaded adware onto users' computers, not for financial gain, but to enhance the experience for them.

There's also the difference between what they say:

  "We will not preload *this* software in the future."
and what they don't say:

  "We will not preload *such* software in the future."
(Emphasis added)
Post reply on HN