ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Lenovo - if it's on your network, you ARE breached.

    IT Discussion
    lenovo security
    14
    93
    10.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender
      last edited by

      The OP should be updated with links to credible news stories talking about the listed issues.
      Not because the OP is wrong, but because to most, this is just a random tech website, where there is no proof that there is no ax to grind, etc. So linking to credible news sources (several would be better) helps ensure the reader of the validity of the claims here.

      T travisdh1T 3 Replies Last reply Reply Quote 3
      • EddieJenningsE
        EddieJennings
        last edited by

        Confirmed OP is a Dell fanboi 😛

        travisdh1T 1 Reply Last reply Reply Quote 1
        • dbeatoD
          dbeato
          last edited by

          I have not had Lenovo in my systems ever!!

          1 Reply Last reply Reply Quote 1
          • wirestyle22W
            wirestyle22
            last edited by

            Sigh. This is something I bring up anytime someone says 'Lenovo'. We buy nothing but Lenovo and I'm very close to having a seizure at work.

            scottalanmillerS 1 Reply Last reply Reply Quote 1
            • T
              Texkonc
              last edited by

              The saying, you get what you pay for.
              Network full of viruses!

              1 Reply Last reply Reply Quote 1
              • T
                Texkonc @Dashrender
                last edited by

                @dashrender said in Lenovo - if it's on your network, you ARE breached.:

                The OP should be updated with links to credible news stories talking about the listed issues.
                Not because the OP is wrong, but because to most, this is just a random tech website, where there is no proof that there is no ax to grind, etc. So linking to credible news sources (several would be better) helps ensure the reader of the validity of the claims here.

                Yup

                1 Reply Last reply Reply Quote 0
                • travisdh1T
                  travisdh1 @Dashrender
                  last edited by

                  @dashrender said in Lenovo - if it's on your network, you ARE breached.:

                  The OP should be updated with links to credible news stories talking about the listed issues.
                  Not because the OP is wrong, but because to most, this is just a random tech website, where there is no proof that there is no ax to grind, etc. So linking to credible news sources (several would be better) helps ensure the reader of the validity of the claims here.

                  I'd love to, but most of the claims I've made have originated right here, and been later confirmed by myself testing on an X220 which has since been given the Office Space treatment. I'd love some external confirmation!

                  1 Reply Last reply Reply Quote 0
                  • travisdh1T
                    travisdh1 @EddieJennings
                    last edited by

                    @eddiejennings said in Lenovo - if it's on your network, you ARE breached.:

                    Confirmed OP is a Dell fanboi 😛

                    HP, Dell, SuperMicro, Huaway, just about anything other than Lenovo, yes.

                    EddieJenningsE 1 Reply Last reply Reply Quote 0
                    • travisdh1T
                      travisdh1 @Dashrender
                      last edited by

                      @dashrender said in Lenovo - if it's on your network, you ARE breached.:

                      The OP should be updated with links to credible news stories talking about the listed issues.
                      Not because the OP is wrong, but because to most, this is just a random tech website, where there is no proof that there is no ax to grind, etc. So linking to credible news sources (several would be better) helps ensure the reader of the validity of the claims here.

                      I'll also note that this all came to light while a used X220 was being shipped to me, so yes, I have an axe to grind, but I've also personally seen this stuff happen.

                      1 Reply Last reply Reply Quote 0
                      • scottalanmillerS
                        scottalanmiller @wirestyle22
                        last edited by

                        @wirestyle22 said in Lenovo - if it's on your network, you ARE breached.:

                        Sigh. This is something I bring up anytime someone says 'Lenovo'. We buy nothing but Lenovo and I'm very close to having a seizure at work.

                        You are at a job where people should be in jail for that.

                        wirestyle22W 1 Reply Last reply Reply Quote 2
                        • dbeatoD
                          dbeato
                          last edited by

                          I have seen old articles on this:

                          https://www.cnet.com/how-to/lenovo-superfish-adware-uninstall-fix/

                          https://www.pcmag.com/article2/0,2817,2477277,00.asp

                          http://www.zdnet.com/article/lenovo-reportedly-blocking-linux-on-windows-10-signature-edition-pcs/

                          https://arstechnica.com/information-technology/2015/02/lenovo-pcs-ship-with-man-in-the-middle-adware-that-breaks-https-connections/

                          1 Reply Last reply Reply Quote 1
                          • wirestyle22W
                            wirestyle22 @scottalanmiller
                            last edited by

                            @scottalanmiller said in Lenovo - if it's on your network, you ARE breached.:

                            @wirestyle22 said in Lenovo - if it's on your network, you ARE breached.:

                            Sigh. This is something I bring up anytime someone says 'Lenovo'. We buy nothing but Lenovo and I'm very close to having a seizure at work.

                            You are at a job where people should be in jail for that.

                            Hopefully not for long

                            1 Reply Last reply Reply Quote 0
                            • black3dynamiteB
                              black3dynamite
                              last edited by

                              This is an issue when using Windows only?

                              travisdh1T scottalanmillerS 2 Replies Last reply Reply Quote 0
                              • travisdh1T
                                travisdh1 @black3dynamite
                                last edited by

                                @black3dynamite said in Lenovo - if it's on your network, you ARE breached.:

                                This is an issue when using Windows only?

                                No, everything.

                                Superfish is included with the wifi drivers to a point that the wireless chips will not work without it. As for the BIOS level access, well, that's as bad as it gets.

                                donaldlandruD 1 Reply Last reply Reply Quote 0
                                • donaldlandruD
                                  donaldlandru @travisdh1
                                  last edited by

                                  @travisdh1 said in Lenovo - if it's on your network, you ARE breached.:

                                  @black3dynamite said in Lenovo - if it's on your network, you ARE breached.:

                                  This is an issue when using Windows only?

                                  No, everything.

                                  Superfish is included with the wifi drivers to a point that the wireless chips will not work without it. As for the BIOS level access, well, that's as bad as it gets.

                                  I don't know what Wi-Fi chipset you have; however, we have the direct from Intel drivers so if SuperFish is included here I don't think that is a Lenovo issue.

                                  travisdh1T scottalanmillerS 3 Replies Last reply Reply Quote 0
                                  • EddieJenningsE
                                    EddieJennings @travisdh1
                                    last edited by

                                    @travisdh1 said in Lenovo - if it's on your network, you ARE breached.:

                                    @eddiejennings said in Lenovo - if it's on your network, you ARE breached.:

                                    Confirmed OP is a Dell fanboi 😛

                                    HP, Dell, SuperMicro, Huaway, just about anything other than Lenovo, yes.

                                    Ha!

                                    1 Reply Last reply Reply Quote 0
                                    • travisdh1T
                                      travisdh1 @donaldlandru
                                      last edited by

                                      @donaldlandru said in Lenovo - if it's on your network, you ARE breached.:

                                      @travisdh1 said in Lenovo - if it's on your network, you ARE breached.:

                                      @black3dynamite said in Lenovo - if it's on your network, you ARE breached.:

                                      This is an issue when using Windows only?

                                      No, everything.

                                      Superfish is included with the wifi drivers to a point that the wireless chips will not work without it. As for the BIOS level access, well, that's as bad as it gets.

                                      I don't know what Wi-Fi chipset you have; however, we have the direct from Intel drivers so if SuperFish is included here I don't think that is a Lenovo issue.

                                      That's great, you're entire network has already been pwnd tho, thanks to that absolutely assinine BIOS code.

                                      donaldlandruD 1 Reply Last reply Reply Quote 0
                                      • scottalanmillerS
                                        scottalanmiller @donaldlandru
                                        last edited by

                                        @donaldlandru said in Lenovo - if it's on your network, you ARE breached.:

                                        @travisdh1 said in Lenovo - if it's on your network, you ARE breached.:

                                        @black3dynamite said in Lenovo - if it's on your network, you ARE breached.:

                                        This is an issue when using Windows only?

                                        No, everything.

                                        Superfish is included with the wifi drivers to a point that the wireless chips will not work without it. As for the BIOS level access, well, that's as bad as it gets.

                                        I don't know what Wi-Fi chipset you have; however, we have the direct from Intel drivers so if SuperFish is included here I don't think that is a Lenovo issue.

                                        Lenovo had some of them set so that the UEFI would load malicious code regardless of where you got the drivers.

                                        1 Reply Last reply Reply Quote 1
                                        • scottalanmillerS
                                          scottalanmiller @black3dynamite
                                          last edited by

                                          @black3dynamite said in Lenovo - if it's on your network, you ARE breached.:

                                          This is an issue when using Windows only?

                                          Depends on the model. Some issues are Windows only. Some are not. Of course, this is only issues that have been caught. Since no one knows if all issues have been caught, you'll never know.

                                          1 Reply Last reply Reply Quote 0
                                          • scottalanmillerS
                                            scottalanmiller
                                            last edited by

                                            With Lenovo, it's like letting a highly skilled thief into your house. You know they are trying to steal from you. And you just hope that you have figured out all of their tricks. But that's naive. It's just inviting risk. It's like counting all the jewels as you let a thief wander around your house rather than just locking the front door in the first place.

                                            1 Reply Last reply Reply Quote 1
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 5
                                            • 1 / 5
                                            • First post
                                              Last post