News for hackers. Stuff that matters.

A comment on Lenovo to pay $7.3M for installing adware in laptops. Parent comment

Re:Lenovo to pay $7.3M for installing adware in laptops by 35345dfgd on Wednesday November 28, 2018 @11:31PM (#18558121)
No enterprise is using the base windows image that came from Lenovo with the superfish malware. They all build their own standard operating environment image that would not include the Lenovo bloatware. I would be surprised if Lenovo enterprises even realized they were shipping this way and have no reason to react negatively. Their competitors also live in glass houses and so cannot throw stones.
[ Parent | on HN ]
Re:Lenovo to pay $7.3M for installing adware in laptops by lamlam on Wednesday November 28, 2018 @11:44PM (#18558160)
So yes, in a normal case, one would expect to be safe because they are using their own built image. But Lenovo went much further than simply installing crapware, they added a firmware that updates files on startup in the OS to ensure that they had a way to install whatever they wanted onto your system [1].

[1] https://www.theregister.co.uk/2015/08/12/lenovo_firmware_nas...

[ Parent | on HN ]
Re:Lenovo to pay $7.3M for installing adware in laptops by lamlam on Wednesday November 28, 2018 @11:48PM (#18558178)
To add to this, while the Superfish issue only affected their consumer laptop lines (e.g. IdeaPad), the LSE issue was found on their enterprise lineup (e.g. ThinkPad).
[ Parent | on HN ]
Re:Lenovo to pay $7.3M for installing adware in laptops by 35345dfgd on Thursday November 29, 2018 @12:09AM (#18558254)
Wasn't aware of the LSE issue on enterprise models! This is a feature that would get enterprises angry if it messes with the OS by injecting bins full of vulnerabilities from BIOS. Gross!
[ Parent | on HN ]
Re:Lenovo to pay $7.3M for installing adware in laptops by zdy132 on Thursday November 29, 2018 @01:44AM (#18558537)
Only a quick read, but both the lenovo pressroom and the guardian stated the thinkpads were not affected.

pressroom: https://news.lenovo.com/pressroom/press-releases/lenovo-stat...

the guardian: https://www.theguardian.com/technology/2015/aug/14/lenovo-se...

[ Parent | on HN ]
Re:Lenovo to pay $7.3M for installing adware in laptops by Rjevski on Thursday November 29, 2018 @12:20AM (#18558282)
No enterprise would use the factory image, but a lot of small businesses would and they were put at risk as a result.

We can of course say they shouldn't have trusted it, but honestly, should it be normal to expect the manufacturer of the machine to be malicious?

Not to mention the other commenters pointed out that they used the firmware to reinstall the malware even on otherwise clean images, so even enterprises could've been at risk.

[ Parent | on HN ]
Re:Lenovo to pay $7.3M for installing adware in laptops by cbzoiav on Thursday November 29, 2018 @04:05AM (#18558971)
If you don't trust the manufacturer then the OS is the least of your worries.

You can't trust the hardware, microcode or firmware either.

[ Parent | on HN ]
Re:Lenovo to pay $7.3M for installing adware in laptops by larkeith on Wednesday November 28, 2018 @11:45PM (#18558167)
Lenovo is known to install rootkits in their devices [1], which an OS image will not prevent.

Do you have a citation for Lenovo's competitors installing comparably vulnerable malware?

[1] https://threatpost.com/lenovo-hit-with-criticism-over-second...

[ Parent | on HN ]
Re:Lenovo to pay $7.3M for installing adware in laptops by closeparen on Thursday November 29, 2018 @02:11AM (#18558623)
Lenovo is behaving as an attacker against its customers. That sophisticated customers had defenses for this particular attack is irrelevant. Imagine if iPhones started trying dictionary attacks against their peers on WiFi networks. Would you shrug it off and continue buying Apple products because you trust your password complexity rules?

It’s great that the countermeasures worked this time, but Lenovo is still your adversary. They deserve the same response as any other insider who tries to MITM your traffic: immediate termination, a thorough search for any remaining implants, and an FBI battering ram through their door.

[ Parent | on HN ]