Yes ... Microsoft even changed the guidelines since Lenovo gave a good example how it shouldn't be done. Others can just piggy-back on the LSE and run malware

Yes ... Microsoft even changed the guidelines since Lenovo gave a good example how it shouldn't be done. Others can just piggy-back on the LSE and run malware undetected. some links i pulled up quick: http://bits.blogs.nytimes.com/2015/02/22/lenovo-and-superfish-penetrate-the-heart-of-a-computers-security/ http://bits.blogs.nytimes.com/2015/02/22/lenovo-and-superfis... http://www.theguardian.com/technology/2015/aug/14/lenovo-service-engine-pre-installed-security-superfish http://www.theguardian.com/technology/2015/aug/14/lenovo-ser... http://www.computerworld.com/article/2984889/windows-pcs/lenovo-collects-usage-data-on-thinkpad-thinkcentre-and-thinkstation-pcs.html http://www.computerworld.com/article/2984889/windows-pcs/len... Trust is earned not given, and they did a hell of a job to make sure it's lost. I don't have the time (why should i waste time with this in the first place) nor the patience to check every Lenovo product down to the bios. My first expierience was with a customers laptop about 3 month before Superfish hit the media. Remote location no inet access ... so removing all the malware by hand took about 6 hours and a mental breakdown since some pieces just came back again and again. I suspected a hidden system recovery partition that would reload some malware functions... don't ask how much time was wasted all in all. Edit: If you used a Lenovo PC and did any sensitive stuff like online banking, thanks to their MiM attack, they phished your logins and other data or you are willing to believe they put in all this work - compromitting https/hiding in Bios (maybe HDD Firmware, too) to just replace an ad here and there and suuuurely delete anything of ... real value.... that gets cought by accident/technical impossibility to filter.