News for hackers. Stuff that matters.

A comment on Lenovo Statement on Superfish. Parent comment

Re:Lenovo Statement on Superfish by sjolsen on Thursday February 19, 2015 @07:19PM (#9078133)
In a company as big as Lenovo, I'd be kind of surprised if the person or persons who decide what bloatware to load onto the consumer image make any sort of hardware decisions.

There's also that this particular kind of compromise is basically inapplicable to hardware. What are they going to do, put a 3G radio in your laptop that broadcasts your "data" via the cell network to Belarus?

[ Parent | on HN ]
Re:Lenovo Statement on Superfish by waps on Thursday February 19, 2015 @09:48PM (#9078625)
This provides some details :

http://thehackernews.com/2015/02/hard-drive-firmware-hacking...

So no, they'll get a rootkit process running on your machine and (for instance) upload everything on your hard drive through your web browser.

Another thing they've done is to upload hacked drivers to cause other hardware connected to the infected machine to physically destroy itself.

[ Parent | on HN ]
Re:Lenovo Statement on Superfish by sjolsen on Friday February 20, 2015 @01:50PM (#9082098)
There's a big difference between Lenovo selling bloatware rights to an adware company and the NSA (or whoever) bugging some hard drives.

Is that spyware Windows-specific?

[ Parent | on HN ]