Live data from Hacker News

Class action lawsuit filed against Lenovo over Superfish

unitedstatescourts.org

31–40 of 239 posts

Re: Class action lawsuit filed against Lenovo over Superfish

#32
post #8
post #7

"Notably, Lenovo did not preinstall the Superfish program on any of its computer models that were marketed to businesses or more sophisticated computer users." That's a particularly damning accusation.

Not necessarily. Many of the higher end and business models come without spyware of any kind, not just this particular piece of software.

Yes, when a major company orders 3000+ laptops, they say exactly what they want on them, and that's what they get.

Re: Class action lawsuit filed against Lenovo over Superfish

#34
post #6

Just bought a Lenovo laptop over the weekend for my wife. Sounds to me like it's no longer being installed on the laptops, but will check it to make sure Superfish isn't there.

I'd format it with a fresh version of whatever OS came on it just to be safe. I actually have always done this when buying pre-built computers just to get rid of all the junk that comes from the manufacturer.

It's challenging due to multitude of vendor/model specific device drivers that are also required to computer to operate (mouse, network, wifi, usb, etc...).

Plus you need to have a separate OS license as well to make it work.

Re: Class action lawsuit filed against Lenovo over Superfish

#35

Suprise that no market their computers as "crapware free".

I don't buy Apple computers but isn't that a main selling point with osx?

It is one of the selling points. It has been over 5 years since Apple has sold a computer with any third party software on it.

Re: Class action lawsuit filed against Lenovo over Superfish

#36
post #21

Earlier quoted context omitted.

This is true, but one still wonders why government officials haven't pursued a criminal case.

Because it's such a minor issue.

Hacking several million computers is minor? What qualifies as major, then?

The Morris worm infected 2-3 orders of magnitude fewer computers...

http://en.wikipedia.org/wiki/Morris_worm

Re: Class action lawsuit filed against Lenovo over Superfish

#38
"Additionally, the large security hole created by the Superfish program can easily be breached, because the security key for the single self-signed root certificate used by the Superfish program has been broken and published on the internet. It took one computer security researcher less than 15 seconds on-line to obtain the security key for the Superfish root certificate."

It's interesting that they are sticking to the original narrative when the situation was actually far worse as I originally disclosed here on HN & which was later written about by Filippo Valsorda on his blog.

Original discovery: https://news.ycombinator.com/item?id=9078536

Filippo's blog post: https://blog.filippo.io/komodia-superfish-ssl-validation-is-...

Re: Class action lawsuit filed against Lenovo over Superfish

#39
post #8

Earlier quoted context omitted.

Not necessarily. Many of the higher end and business models come without spyware of any kind, not just this particular piece of software.

Yes, when a major company orders 3000+ laptops, they say exactly what they want on them, and that's what they get.

Couple of things here. Large companies most likely reimage the devices with enterprise license. For example, we order based on hardware configuration. Our company uses HP for everything, so we purchase the business class equipment with 3 year warranty on everything. Also, we don't use the version of Windows that comes with the devices, we reimage all our systems with our own using System Center Configuration Manager.
Post reply on HN