Tuesday, February 24, 2015

Lenovo is processed by spy software included on their PCs – Digital Look

It did not take long for Lenovo suffered the first court case on charges of distributing spy Superfish software on their laptops. The action comes from the American Jessica Bennett, who claims to have been affected by the pre-installed program on your laptop Yoga 2.

She says she noticed ads from spam type with scantily clad women, which raised their suspicion on a spyware infection. However, she found that it was the Superfish, the program used by Lenovo, according to the indictment.

Now the company will have to answer a process for fraudulent business practices, and jeopardize the safety and user privacy for financial gain.

Publicly, Lenovo recanted and promised to remove the program on compromised computers but denied many of the charges. “We investigated this technology widely and could not find any evidence to support the security concerns. The software does not draw profiles or monitor user behavior. It does not record user information and do not know who the user is,” said a spokesman company.

Security experts, however, claim that adware could monitor users and convert search terms in ad online shops. The program would also be able to approve their own security certificate, collecting personal data and leaving the user vulnerable to potential attacks.

In a statement the director of software developer Adi Pinhas, defended the software: “The Superfish is completely transparent in our software does and in no time consumers were vulnerable.”

What is the Superfish
? problem is used to collect information to display customized advertising to the owners of computers. The point is that the Superfish is able to install a proxy that can produce false SSL certificates whenever you have to go through a secure connection.

The SSL certificate is used by banks, shopping and social networking to prove their sites comes secure connections. As the Superfish produces these seals, the program can penetrate secure sites to collect information from them and still inject advertising there.

An example of this ability has been shown by Kenn White security expert who, on Twitter, posted a picture showing a certificate issued to the Bank of America by Superfish, and this guarantee should come from a company specializing in security.

LikeTweet

No comments:

Post a Comment