4 ms·

arguably? That's orders of magnitude worse

• kentonv 12y ago
  Well, I dunno. In one case Superfish can see all your data and store it on their servers, in the other case _anyone on the internet_ can spoof any site (as soon as someone extracts the key). Either way is pretty bad. But proxying all traffic from all Lenovo laptop owners through a third-party server without someone immediately noticing a problem is just not feasible, so I think we can assume that's not what they're doing.
  • sliverstorm 12y ago
    Are you sure? Android Chrome proxies all non-HTTPS traffic through a third-party server, by default. So it isn't like the traffic volume is impossible.
    • kentonv 12y ago
      Yes but that's Google. I'd be surprised if Superfish had resources like that, or could generate that much traffic from their servers and not be noticed (by, say, Google). I could be wrong.
      • kevin_thibedeau 12y ago
        Superfish might have "benefactors" with deep pockets who want a scapegoat who won't squeal on them.
    • abraham 12y ago
      It's not by default, you have to enable it. https://support.google.com/chrome/answer/2392284 https://support.google.com/chrome/answer/2392284
    • rurounijones 12y ago
      Wow, really? I never knew that and some googling didn't find any decent sources. do you have one?
      • mahouse 12y ago
        https://developer.chrome.com/multidevice/data-compression https://developer.chrome.com/multidevice/data-compression
        • rurounijones 12y ago
          Many thanks, easy when you know the right keywords >.<