Reading the source blog post rather than boingboing, it looks like this code is supposed to just report back to Lenovo on the user’s use of the Lenovo specific code on the machine in question.

Unfortunately, Lenovo has seriously blotted their copybook in this area & the onus is on them to demonstrate trustworthiness. It’s notable that prior to the Superfish debacle, they didn’t even bother to notify the end-user if the blog post is to be believed.