Sunday, February 22, 2015

To dispose of hazardous “Superfish” – ITavisen.no

Now laws Lenovo to never use the product more.

Thursday, 19. February 2015 – 5:29 p.m.

In a press release published about 2:30 p.m. Norwegian time confirms Lenovo that they will never again use Superfish, but claims they have not found dangerous code.

Updated 19:40:

To dispose of the hazardous certificate destroys HTTPS connections:

1. Press Windows + r, enter “certmgr.msc.” And press enter.

2. Select “Trusted Root Certification Authorities” find “Certificates”.

3. Find any Superfish certificates, right click and delete them.

4. Please reboot and check if it is clean at this address.

Updated, 7:08 p.m.

To delete advertising part of Superfish. Unfortunately not deleted the dangerous certificate. We come back with more information.

More than troublesome advertising
company purchased software of the company with the same name to deliver advertising in søkeresulateter but security researchers have found that it also comes with a Windows security certificate which essentially disables the security of HTTPS connections. This is very serious.

Use this service to find out about Superfish installed .

Lenovo claims service has been disabled since January, but it’s just as easy to get rid of the software to be completely safe.

Lenovo computers with Superfish preinstalled sold in Norway From September to December 2014. Among other Lenovo Z50-70.

Therefore also Lenovo been very quick on the ball after the international press picked up the case.

Lenovo ought dog have been even much snappier, it was warned about Superfish already in September last year.



How Superfish. Superfish

This bodes Lenovo
So much serious is this event that we have chosen to translate the press release in its entirety:

“Superfish was previously included on some consumer notebooks that were sold in a short period between September and December help customers potentially find interesting products while they shopped, but feedback from users has been positive, and we have therefore reacted quickly and decisively:

* Superfish since January stopped all the functions of a server on all Lenovo products, so that the product is no longer active. This disables Superfish on all products in the market.

* Lenovo stopped prior software installation in January. We will not preloading this software in the future.

* We have thoroughly researched the technology, and have failed to find any evidence that underpins the security concerns, but we know that users reacted to this problem and we have therefore conducted measures to stop the shipment of products with this software.

We will continue to evaluate what we do and how we do it to ensure that we put our users needs, experiences and priorities first.

To be perfectly clear is Superfish technology based entirely on contextual / image analysis – the neither profiles or included on user behavior. It does not take up information and it does not know who you are.

Users are not tracked or targeted to. Each session is independent. Users are given a choice whether they want to use the product.

Relationship to Superfish is not economically significant; Our goal was to improve the experience for our customers. We acknowledge that the software does not meet this objective, and has acted quickly and decisively. “

In the last part refers Lenovo’s support forum where they assure that they will provide support to users who need it.

Source:
Lenovo

LikeTweet

No comments:

Post a Comment