3 ms·

Not only did I have to remove the certificate from my root authority in the control panel, I also had to remove it from my list of certificates in Firefox. This

Not only did I have to remove the certificate from my root authority in the control panel, I also had to remove it from my list of certificates in Firefox. This was after uninstalling Superfish. Once I did all of these things, and cleared my history and cache and all that, the website that folks have been linking said that it didn't detect Superfish (sorry, I'm typing this from a phone). So my explanation wasn't very technical, but I feel as though the part of the process where you also remove the certificate from Firefox had been left out, and I wanted to share it in case it helps out another person. This news took me by surprise, as I just received a brand new Lenovo Yoga 2 for work last week, and it had this vulnerability.

jrsmitchell 12y ago
You're right. Further discussion in that bug and on twitter [1] confirm that Firefox is affected after a restart. The author of this didn't restart. So any removal instructions which don't include clearing out Firefox's certificates are incomplete. This includes Lenovo's published instructions. [1] - https://twitter.com/FiloSottile/status/568600661534875648 https://twitter.com/FiloSottile/status/568600661534875648
Luyt 12y ago
the website that folks have been linking said that it didn't detect Superfish (sorry, I'm typing this from a phone) The website you're referring to, is https://canibesuperphished.com/ https://canibesuperphished.com/
- arthurfm 12y ago
  Another useful website is: https://filippo.io/Badfish/ https://filippo.io/Badfish/
  - jedanbik 12y ago
    This is the one I was thinking about and implicitly referring to. Thanks for posting.
agapos 12y ago
Here is a bit of article on Foxes and Fishes: http://arstechnica.com/security/2015/02/how-to-remove-the-superfish-malware-what-lenovo-doesnt-tell-you/ http://arstechnica.com/security/2015/02/how-to-remove-the-su...

jrsmitchell 12y ago

You're right. Further discussion in that bug and on twitter [1] confirm that Firefox is affected after a restart. The author of this didn't restart. So any removal instructions which don't include clearing out Firefox's certificates are incomplete. This includes Lenovo's published instructions. [1] - https://twitter.com/FiloSottile/status/568600661534875648 https://twitter.com/FiloSottile/status/568600661534875648

Luyt 12y ago

the website that folks have been linking said that it didn't detect Superfish (sorry, I'm typing this from a phone) The website you're referring to, is https://canibesuperphished.com/ https://canibesuperphished.com/

arthurfm 12y ago
Another useful website is: https://filippo.io/Badfish/ https://filippo.io/Badfish/
- jedanbik 12y ago
  This is the one I was thinking about and implicitly referring to. Thanks for posting.

agapos 12y ago

Here is a bit of article on Foxes and Fishes: http://arstechnica.com/security/2015/02/how-to-remove-the-superfish-malware-what-lenovo-doesnt-tell-you/ http://arstechnica.com/security/2015/02/how-to-remove-the-su...