bammie schreef op 20 februari 2015 22:16:
Even off-topic voor de Bammers die een Lenovo laptop gebruiken.
Lenovo Laptops Shipped with Adware and Persistent Vulnerability (February 19, 2015)
Lenovo has been shipping laptops loaded with Superfish, adware designed to steal Internet traffic. Superfish is designed to "help users find and discover products visually." It also injects ads into web pages. Superfish hijacks encrypted web sessions, and could easily be misused to conduct man-in-the-middle attacks. Lenovo has stopped including Superfish on its new machines.
-http://arstechnica.com/security/2015/02/lenovo-pcs-ship-with-man-in-the-middle-a
dware-that-breaks-https-connections/
-http://www.forbes.com/sites/thomasbrewster/2015/02/19/superfish-need-to-know/
-http://www.zdnet.com/article/lenovo-accused-of-pushing-superfish-self-signed-mit
m-proxy/
-http://www.bbc.com/news/technology-31533028
-http://www.theregister.co.uk/2015/02/19/superfish_lenovo_spyware/
-http://news.lenovo.com/article_display.cfm?article_id=1929
[Editor's Note (Ullrich): "Adware" is putting it lightly. This may be better described as an "encryption backdoor". The problem is that even while Lenovo claims to have stopped using this system, the rogue certificate authority will remain trusted and with the private key recovered, anybody using an affected Lenovo laptop is now at risk of man-in-the-middle attacks. ]