4 ms·
If HP was able to release a patch to remove keylogger is a very short amount of time, does that mean that they already know about the keylogger being in the pro
by yitchelle 9y ago
If HP was able to release a patch to remove keylogger is a very short amount of time, does that mean that they already know about the keylogger being in the production code and had a patch ready just in-case it was detected?
- rb2k_ 9y agoNo
- Namidairo 9y agoI don't see a disclosure timeline on there, so "quick" is a relative term. Perhaps they just recognised that it could explode into a Superfish sized PR problem and went to fire off some angry calls to Synaptics for not surrounding their debug prints with ifdef. I wonder if the old driver was WHQL-certified as well... (Although I'm under the impression that just needs to pass the SDV)
- yjftsjthsd-h 9y agoCould be, but if it really was extra debugging code then they might just have forgotten to remove a debug flag or add a prod flag, so they just had to flip a bit and recompile. Yes, that requires incompetence over malice, but firmware/drivers seems to have some really low quality stuff happening.