3 ms·
Forum link where Lenovo employees confirm the issue: https://forums.lenovo.com/t5/Security-Malware/Potentially-Unwanted-Program-Superfish-VisualDiscovery/m-p/1
by Mithaldu 12y ago
Forum link where Lenovo employees confirm the issue:
https://forums.lenovo.com/t5/Security-Malware/Potentially-Unwanted-Program-Superfish-VisualDiscovery/m-p/1860408/ https://forums.lenovo.com/t5/Security-Malware/Potentially-Un...
And here's the money quote about the malware:
"Superfish Inc aka VisualDiscovery aka Similarproducts application will hijack ALL your secure webconnections (SSL/TLS) by using self signed root certificate authority, making it look legitimate to the browser"
- 0x0 12y agoThat's pretty amazing. Does their SSL MITM proxy even validate the certs they are rewriting, or are all these Lenovos completely open to MITM? (And the certs are marked "all purposes", does that include native and java code signing too?)