Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Submission + - Lenovo Accused of Pushing Self-signed MITM Proxy (zdnet.com) 2

jones_supa writes: More OEM crapware coming at you. Chinese hardware manufacturer Lenovo has come under fire for allegedly shipping consumer Windows laptops with software that hijacks secure website connections, as well as inserting ads into search results. The software is called "Superfish" and it installs its own self-signed root certificate authority. Superfish comes with Lenovo consumer products only, and is a technology that helps users "find and discover products visually". The technology instantly analyzes images on the web and presents identical and similar product offers. Google's Chris Palmer has been analyzing the issue on a Yoga 2 laptop. He has confirmed with one other affected user that the certificates used share the same key, which leaves any impacted Lenovo user vulnerable to an attack from anyone able to extract the certificate's private key, with the user left without any warning or notice of such an attack. Superfish can be uninstalled, but it reportedly leaves the root certificate authority behind. On a new laptop, the software can be disabled simply by not accepting the Terms of User and Privacy Policy on initial setup.

Comment Re:Let me get this straight (Score 3, Informative) 158

Well, it goes many ways to Sunday, but long story short this has potential uses. Just imagine if an extra on Stupid Franchise That Needs To Die VII could get it yanked if "I didn't expect a certain character to make any appearances" could be a valid argument. (Though I joke, misrepresentation of contract is legally dishonest but should have been a tort with the production team, not a DMCA claim with hosts. She should have taken it one rung up the ladder, so to speak - Google is "too late" in that process.)

This exactly. Its not that the actress doesn't have rights here, it's that the court affirmed the wrong rights. If the filmmaker materially misrepresented the film or the role in writing, that should be a fairly straightforward lawsuit.

Comment Re:Stop giving her attention (Score 4, Insightful) 105

I think a technical debunking of her claims of being hacked is ideal Slashdot material.

We don't have enough information yet. to properly analyse those claims. What I've seen written so far has been sensationalised and technically incoherent. That's reason enough to dismiss it, but not reason enough to consider it proven false.

Comment Re:Wake up America ... (Score 1) 95

Automation is fundamentally incompatible with capitalism, or at least a version of capitalism where people are expected to "earn" their income by working.

Automation is fundamentally incompatible with some magic fairy version of capitalism where no jobs are eliminated but everyone has a better standard of living. But for those of us living in the real world, there's no incompatibility. Automation improves efficiency and so reduces cost. Yes, it shifts jobs, and yes, that causes social problems, and no, I don't have a solution for that, and nor does anyone else. But writing nonsense about it doesn't change what is real.

Slashdot Top Deals

FORTRAN is not a flower but a weed -- it is hardy, occasionally blooms, and grows in every computer. -- A.J. Perlis

Working...