blackmonsters

They also spoofed security certificates for https sites the surfer went to!


https://www.ftc.gov/news-events/pres...s-preinstalled

Lenovo Inc., one of the world?s largest computer manufacturers, has agreed to settle charges by the Federal Trade Commission and 32 State Attorneys General that the company harmed consumers by pre-loading software on some laptops that compromised security protections in order to deliver ads to consumers.

In its complaint, the FTC charged that beginning in August 2014 Lenovo began selling consumer laptops in the United States that came with a preinstalled ?man-in-the-middle? software program called VisualDiscovery that interfered with how a user?s browser interacted with websites and created serious security vulnerabilities.

?Lenovo compromised consumers? privacy when it preloaded software that could access consumers? sensitive information without adequate notice or consent to its use,? said Acting FTC Chairman Maureen K. Ohlhausen. ?This conduct is even more serious because the software compromised online security protections that consumers rely on.?

VisualDiscovery software, developed by a company called Superfish, Inc., was installed on hundreds of thousands of Lenovo laptops. It delivered pop-up ads from the company?s retail partners whenever a user?s cursor hovered over a similar looking product on a website.

To deliver its ads, VisualDiscovery acted as a ?man-in-the-middle? between consumers? browsers and the websites they visited, even those websites that were encrypted. Without the consumer?s knowledge or consent, this ?man-in-the-middle? technique allowed VisualDiscovery to access all of a consumer?s sensitive personal information transmitted over the Internet, including login credentials, Social Security numbers, medical information, and financial and payment information. While VisualDiscovery collected and transmitted to Superfish?s servers more limited information, such as the websites the user browsed and the consumer?s IP address, Superfish had the ability to collect more information.

To facilitate its display of pop-up ads on encrypted websites (those that include https:// in the web address), the complaint also alleges that VisualDiscovery used an insecure method to replace digital certificates for those websites with its own VisualDiscovery-signed certificates. Digital certificates are used to signal to a user?s browser that the encrypted websites visited by a consumer are authentic and not imposters. VisualDiscovery, however, did not adequately verify that the websites? digital certificates were valid before replacing them, and used the same, easy-to-crack password on all affected laptops rather than using unique passwords for each laptop.

__________________
Camsoda pays :
Become a Cam Model or Sign up as a Webmaster

CurrentlySober

__________________

2 Kings 18:27

Bladewire

Bastards! And VisualDiscovery replacing with its own certificates WTF?

__________________

Paul Markham

That fine is way too low. Hit the fuckers so they don't dare do it again.

__________________



Blowout deal. 880 videos, 2,400 image sets, plus many RAW videos. $500.
PM me for a deal. Skype Paulmarkham70

SantaClause

Is it the case with super fish malware?

TrafficRush

Spot reserved..grabbing some snacks

__________________

MrBottomTooth

They should be making monetary payments to customers, not just the FTC.

__________________
Get Paid Per Email Like The WEGCASH Days!!!!

JFK

Got popcorn ?

__________________

Sig Spot Available –contact JFK @ FUBARWebmasters.com
FUBAR Webmasters - The FUBAR Times - FUBAR Webmasters Mobile - FUBARTV.XXX
For promo opps contact jfk at fubarwebmasters dot com

Nitzer Ebb

The only laptop going bust on me was Lenovo. I have 12 year old Dell in working condition, yet Lenovo motherboard died after year and a half of light usage.

__________________

Lewis11

Such a huge fine

RyuLion

Oh wow....

__________________

Promote Clubdom.com (since 1997) - Adult Biz Consultant