Geeks2U Promise
We guarantee you'll love our fast, friendly service - or we'll refund your money.  
133,572 Happy Customers & Counting
Need tech support?
1300 769 448
Extended hours, 7 days a week
Home  /  geekspeak  /  Lenovo’s Ad Software could leave your PC exposed

Lenovo’s Ad Software could leave your PC exposed

We’re all highly aware of the issues around malware when they come from dodgy applications, emails or, increasingly, compromised web sites. It’s never been more important to have anti-virus software installed on your computer to ward away nasties, not just for your own protection, but also the protection of others, because a big part of the malware scene is in creating malicious applications or scripts that don’t only compromise systems, but spread as far and wide as possible. That’s malware in a nutshell.

What you don’t expect, or shouldn’t have reasonable cause to expect, is that software that your hardware manufacturer preinstalls on your laptops should act exactly like malware does. Sure, preinstalled software can sometimes be a bit of a pain if you don’t really want it on your new PC, but it’s typically easy to get rid of, and in many cases the size of installed hard drives mean that you could ignore it and never really miss the space.

In the case of an application that Lenovo installed on a number of its consumer laptops, however, ignoring it was the very last thing that you should do. The “Superfish” application that Lenovo included was intended to serve advertising material into your browser when you performed searches on Google, Amazon and other sites. That’s pretty rude in and of itself, but the story doesn’t quite end there. Superfish, you see, not only serves up ads, but does so by a contextual analysis of data presented to it, even if that data is on an encrypted website. So, for example, if you’re signed into Amazon making purchases, all that data should be encrypted. Except that Superfish sniffs it out so that it can serve ads. Again, rude and intrusive, but again it doesn’t end there.

The way that Superfish is able to do what it does relates to the automatic installation of a self-signed root certificate onto the Windows PCs that it’s installed upon. That’s what Lenovo did when it installed it, and while Superfish has stated on the record that its activities are entirely transparent, it’s since emerged that the presence of this self-signed root certificate presents a significant vulnerability to any PC it’s installed on. Not directly from Superfish itself, but because anyone connected to the same Wi-Fi network could rather easily read all the traffic coming from a Lenovo PC with that self-signed root certification onboard. Not just regular web traffic, but any encrypted traffic at all, whether it’s your login passwords for social media sites or your bank account details.

That’s a huge gaping security hole that should simply never have been there in the first place.

If you’re concerned and own a Lenovo laptop, there’s a test here that should detect the existence (or lack thereof) of Superfish’s dodgy certificates on your system.

Matters got so bad that the US Computer Emergency Readiness Team put out an alert regarding SuperFish, Lenovo issued a Superfish Removal tool, although at the same time, Microsoft itself has updated its Windows Security software to detect and eliminate the Superfish software and the dodgy root certificate.

That should hopefully see the problem fixed, but if you do own or use a Lenovo laptop, it would be extremely wise to check if it’s actually secure. You really don’t want to find out the hard way.


Recent News

Social media can be a huge force for change, and in these times where many of us are bouncing in and out of lockdowns, also a vital lifeline for communication on everything from important matters to the wildly trivial. We’re all allowed our personal obsessions, after all. However, many of us don’t think about the

Microsoft recently released its first public-facing beta version of the Windows 11 operating system that it will ship later this year. You’ve got to be signed up to its Windows Insider program to get it – and be willing to accept a little risk in terms of unstable operating systems – but then this is

Telstra recently announced that its 5G coverage for its mobile phone network covers around 75% of the Australian population. It’s also announced the “longest” (as in range) 5G phone call in the world, spanning some 113km in Gippsland. Meanwhile, rival telco Optus has claimed that it’s hit 300mbps upstream on trials of its emerging mmWave

Microsoft recently announced its next generation of the Windows operating system, Windows 11. If you’re thinking that seems odd given it did announce some years back that Windows 10 would be the “final” version of Windows, you’re not alone. For many years now, Microsoft’s simply provided Windows 10 updates rather than “new” versions of Windows,

Coronavirus (COVID-19) Update

Learn about the precautions we are taking and our new contactless pick-up and remote service options. Read More
Get help setting up your home office or homework area today. Learn More