Do Not Use Lenovo Computers to Shop or Access Finance Sites

[Mike]

Lenovo has admitted compromising the security of its computers by installing adware on their computers.

Any one of these admitted flaws would make the computer unusable:

1. They have installed false certificates from Web pirate Superfish with root authority
2. They have compromised SSL, the protocol for secure Web connections
3. They have limited authentication to SHA1, an obsolete and weak form of message digest
4. They have enabled "Man-in-the-Middle" attacks to inject advertising even into "secure" communications
5. They have made the operating system, which is the basis for all security, insecure.
6. They have limited encryption to weak RSA 1024, which can be compromised

This adware is able to intercept HTTPS encrypted traffic making it possible for a hacker to gain your username/password to encrypted sites like your bank accounts, etc.

If you have a Lenovo computer it is worth checking out this blog post for more details about the adware as well as a fix: http://lifehacker.com/how-to-test-your-pc-for-the-new-superfish-security-vu-1686788663