{"id":96,"date":"2015-03-01T01:56:47","date_gmt":"2015-03-01T01:56:47","guid":{"rendered":"https:\/\/carlosthomas.net\/blog\/?p=96"},"modified":"2015-03-01T01:56:47","modified_gmt":"2015-03-01T01:56:47","slug":"alert-superfish-on-lenovo","status":"publish","type":"post","link":"https:\/\/carlosthomas.net\/blog\/2015\/03\/alert-superfish-on-lenovo\/","title":{"rendered":"ALERT – Superfish On Lenovo"},"content":{"rendered":"

SOURCE: http:\/\/www.avg.com\/campaign-landing-pages\/ww-en\/lenovo-superfish<\/a><\/p>\n

Based on the information on that link you should remove this software immediately if you own a Lenovo PC.<\/p>\n

Something to note – Lenovo and IBM are not the same company. IBM sold their PC business to Lenovo some time ago.<\/a><\/p>\n

A copy of the information from the AVG website is below for your convenience.<\/p>\n

\n

 <\/p>\n

\n
\n
\n
\n
\n
\n
\n
\n
\n

How to remove Superfish
\nand its certificate from your Lenovo\u00ae<\/sup> PC<\/span><\/h1>\n<\/div>\n<\/div>\n
\n
\"Superfish<\/div>\n<\/div>\n<\/div>\n
<\/div>\n<\/div>\n<\/div>\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
<\/div>\n
\n
\n
<\/div>\n
\n
\n
\n

<\/span>What is Superfish?<\/span><\/h2>\n<\/div>\n<\/div>\n
\n
\n

Superfish is a piece of software that Lenovo has admitted to pre-installing<\/a> on many of its laptops to “enhance the\u00a0shopping experience” of its users. However, the U.S. Computer Emergency Readiness Team<\/a> calls Superfish\u00a0a “man-in-the-middle attack” because of how it “intercepts users’ web traffic to provide targeted advertisements.”<\/p>\n<\/div>\n<\/div>\n<\/div>\n

<\/div>\n<\/div>\n<\/div>\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
<\/div>\n
\n
\n
\n
\n
<\/div>\n
\n
\n
<\/div>\n
\n
\n
\n

<\/span>Why is Superfish so dangerous?<\/span><\/h2>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n
\n
\n
\n

Superfish snoops in on your web browsing and secretly slips ads into webpages. But the really dangerous part is that it’s pre-installed with root certificate authority, which allows it to impersonate any server’s security certificate.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

<\/div>\n
\n
\n
\n
\n

If this certificate is compromised by hackers, you could\u00a0be tricked into logging in to a fake website and giving\u00a0hackers your password. Because of Superfish, any of\u00a0your accounts\u2014including encrypted bank accounts\u2014could be easily compromised.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

<\/div>\n<\/div>\n<\/div>\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
<\/div>\n
\n
\n
\n
\n
<\/div>\n
\n
\n
<\/div>\n
\n
\n
\n

<\/span>Which computers are affected?<\/span><\/h2>\n

According to Lenovo, Superfish may have been pre-installed
\non the following models:<\/span><\/p>\n<\/div>\n<\/div>\n

\n
\n
\n
\n
\n
\n
\n
\"Lenovo<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

E Series:<\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n

G Series:<\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n

S Series:<\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n

U Series:<\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n

Y Series:<\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n

Z Series:<\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n

Edge Series:<\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n

Flex Series:<\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n

MIIX\u00a0Series:<\/strong><\/p>\n<\/div>\n<\/div>\n

\n
\n

YOGA\u00a0Series:<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n

E10-30<\/p>\n<\/div>\n<\/div>\n

\n
\n

G410, G510, G710, G40-70, G50-70, G40-30, G50-30, G40-45, G50-45, G40-80<\/p>\n<\/div>\n<\/div>\n

\n
\n

S310, S410, S40-70, S415, S415Touch, S435, S20-30, S20-30Touch<\/p>\n<\/div>\n<\/div>\n

\n
\n

U330P, U430P, U330Touch, U430Touch, U530Touch<\/p>\n<\/div>\n<\/div>\n

\n
\n

Y430P, Y40-70, Y50-70, Y40-80, Y70-70<\/p>\n<\/div>\n<\/div>\n

\n
\n

Z40-75, Z50-75, Z40-70, Z50-70, Z70-80<\/p>\n<\/div>\n<\/div>\n

\n
\n

Edge 15<\/p>\n<\/div>\n<\/div>\n

\n
\n

Flex2 14D, Flex2 15D, Flex2 14, Flex2 15, Flex2 Pro, Flex 10<\/p>\n<\/div>\n<\/div>\n

\n
\n

MIIX2-8, MIIX2-10, MIIX2-11, MIIX 3 1030<\/p>\n<\/div>\n<\/div>\n

\n
\n

YOGA2Pro-13, YOGA2-13, YOGA2-11, YOGA3 Pro<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n

Source: Lenovo<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

<\/div>\n<\/div>\n<\/div>\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
<\/div>\n
\n
\n
\n
\n
<\/div>\n
\n
\n
<\/div>\n
\n
\n
\"\"<\/div>\n<\/div>\n
\n
\n

<\/span>Will restoring from a backup help?<\/span><\/h2>\n

Superfish has been pre-installed by Lenovo. Therefore, restoring your computer to factory condition from either a backup partition or a backup DVD will not solve the problem if Superfish is also part of your backup. Superfish would only be reinstalled, too.<\/p>\n

So if you ever use a backup to restore your system, you may need to again remove Superfish and its root security certificate from your system.<\/p>\n

\n

 <\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

SOURCE: http:\/\/www.avg.com\/campaign-landing-pages\/ww-en\/lenovo-superfish Based on the information on that link you should remove this software immediately if you own a Lenovo PC. Something to note – Lenovo and IBM are not the same company. IBM sold their PC business to Lenovo some time ago. A copy of the information from the AVG website is below for … Continue reading ALERT – Superfish On Lenovo<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"pagelayer_contact_templates":[],"_pagelayer_content":"","_eb_attr":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1],"tags":[],"class_list":["post-96","post","type-post","status-publish","format-standard","hentry","category-info"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4XHmQ-1y","_links":{"self":[{"href":"https:\/\/carlosthomas.net\/blog\/wp-json\/wp\/v2\/posts\/96","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/carlosthomas.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/carlosthomas.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/carlosthomas.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/carlosthomas.net\/blog\/wp-json\/wp\/v2\/comments?post=96"}],"version-history":[{"count":3,"href":"https:\/\/carlosthomas.net\/blog\/wp-json\/wp\/v2\/posts\/96\/revisions"}],"predecessor-version":[{"id":99,"href":"https:\/\/carlosthomas.net\/blog\/wp-json\/wp\/v2\/posts\/96\/revisions\/99"}],"wp:attachment":[{"href":"https:\/\/carlosthomas.net\/blog\/wp-json\/wp\/v2\/media?parent=96"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/carlosthomas.net\/blog\/wp-json\/wp\/v2\/categories?post=96"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/carlosthomas.net\/blog\/wp-json\/wp\/v2\/tags?post=96"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}