Monday, February 23, 2015

Think Superfish isn't a big deal?

Well, first off, remember that it compromises the whole IE/Firefox infrastructure
(and possibly code signing =8-0 ) of the whole machine  [perry]

Second, there are lots of Non-Lenovo (14) (+?) apps that use it and it's getting easier to break

Now it's breakable and exploitable over by a Raspberry PI (with instructions)

Oh there is a true virus that exploits it and Komodia, the company behind the MITM-by-local-internal-proxy is under DDOS attack.  Did we mention that the password is Komodia?  And that many commercial companies use products from Komodia?

And, while Lenovo has apologized, (they still have a business), and has updated auto and manual removal instructions

Of course Superfish says it's not so bad
 
Understandable, but no.

And a movie that shows how to remove Superfish.A from Chrome - from Jul 2014

No comments: