News for hackers. Stuff that matters.

A comment on Browser Vulnerability to Superfish: A Fact-Finding Trip to Best Buy [pdf]. Parent comment

Re:Browser Vulnerability to Superfish: A Fact-Finding Trip t... by userbinator on Friday February 20, 2015 @12:40AM (#9079123)
One way would be to bypass the proxy if it's detected as a Superfish proxy by its certificate, but somehow I feel like this isn't a problem the browser vendors should be doing extra workarounds for (and giving precedence to "if we don't like your proxy we'll ignore it" isn't a great idea either.)
[ Parent | on HN ]
Re:Browser Vulnerability to Superfish: A Fact-Finding Trip t... by maxerickson on Friday February 20, 2015 @09:19AM (#9080475)
It doesn't appear to be implemented as a user visible proxy, it modifies the network stack. From:

https://twitter.com/matthew_d_green/status/56843703790644428...

Probably not a proxy; probably low-level socket interception in Windows.

So there isn't much the browsers can do to help the user.

At least the technical side of Lenovo's response is all the way to "We are writing a program to remove the certificates", which is probably the thing that is going to impact the most people.

[ Parent | on HN ]