LENOVO and Superfish

Anne_Marie_2

I really would love to know how long this has been going on for, especially as I have recommended Lenovo laptops to quite a few people, and on this forum.
I do know that it wasn't as far back as 2011 when I bought mine, or at least, it isn't installed on the model that I have, which is still a really good laptop.

abibee

I read about this too. Such bad, bad business practice from them. I wonder how much sales it will affeect. It's all so bad.

Reaper

agrinnall wrote: »

I don't really think the How To you have linked to will be of much use to anyone given that it refers to IE 4 and 5, and surely there will be very few, if any, people who have either version these days.

You were right, I copied the link The Register provided without properly reading it. I have found a page with better removal instructions which I have linked to instead.

groovyf

Shades of the old Sony Rootkit scandal too.

End-users should be allowed to purchase laptops without all the bloat from all manufacturers.

Fightsback

Reaper wrote: »

So far it seems the only option is to:

1) Uninstall it
2) Locate and remove the Superfish root certificate.
[EDIT a better link!] Removal Instructions: http://support.lenovo.com/us/en/product_security/superfish_uninstall

I would be a lot happier reinstalling Windows as then I would know all the security issues, adware and other assorted bloatware were gone, but without an ISO that is not going to be possible.

Just when you thought it was safe to go out again, check this:

http://securelist.com/analysis/publications/58278/absolute-computrace-revisited/

Badly designed anti-theft software that resides in the BIOS which is vulnerable to compromise by bad actors.

groovyf

Lenovo issue removal instructions:
http://forums.lenovo.com/t5/Lenovo-P-Y-and-Z-series/Removal-Instructions-for-VisualDiscovery-Superfish-application/ta-p/2029206

agrinnall

Thanks groovyf, buried deep in the comments in that link is an update from Lenovo addressing issues that had been raised with a link to another page for removal of the certificate:

http://support.lenovo.com/us/en/product_security/superfish

agrinnall

I've followed the instructions groovyf posted and it seems to have got rid of Superfish and the certificate OK from my Yoga 2 Pro (bought in January but I guess it was shipped from Lenovo earlier than that so it hadn't been removed by them), although I hadn't ever noticed any intrusion from it anyway.

InvestInPoker

Lol absolutely disgusting from Lenovo.

Have to say I have a Lenovo laptop which, prior to reading this story, I was extremely happy with.

Will not be purchasing another one after this escapade, regardless of what they say and do now.

Happy_Stan

I'm out. Next!!! Jeez are there any scrupulous PC makers out there?