Lenovo has settled with the Federal Trade Commission (FTC) and 32 states over charges related to malicious Superfish adware that came pre-installed on laptops from Aug. 2014 to Feb. 2015 — but the company still won't admit it did anything wrong.
The Chinese computer maker was found to be shipping computers with Superfish adware, a program called VisualDiscovery, back in Feb. 2015. The company was hit with consumer backlash and the Department of Homeland Security even advised users to delete the software after the initial discovery of the security breach, but this settlement is the first concrete consequence for putting the personal information of users in danger.
Lenovo agreed to pay a fine of $3.5 million and will implement a comprehensive security program for "most consumer software" preloaded on its computers for the next 20 years, which will be subject to audit. Lenovo will also be required to get consumers’ affirmative consent before pre-installing software like this on its computers going forward.
The major concern for the researchers who discovered the security flaws back in 2015 was that the program broke HTTPS connections, exposing users to potentially malicious websites and attacks by hackers when they visited otherwise secure sites online. The FTC also claims that the adware was able to access users' personal data, but none of that data was ever sent to Superfish.
Lenovo isn't totally owning up to the charges, however. The company "disagrees with allegations contained in these complaints," according to a statement — even though Lenovo CTO Peter Hortensius admitted to Mashabletwo years ago that the adware created a security vulnerability for users.
The company insists that there have been no incidents where anyone actually took advantage of the vulnerabilities, and that its response to beef up its security and limit the amount of bloatware it preloads onto PCs afterwards was sufficient.
By settling, Lenovo gets to close the the controversy with little more than a slap on the wrist. The Superfish adware saga might not have led to anyone's data being stolen — but it did expose what computer makers can get away with when they put your data at risk.
TopicsCybersecurityLenovo
(责任编辑：知識)
The Weeknd teases new music in Instagram post
Google I/O 2021: Android 12, Google silicon, new Pixel Buds, and more
Apple knows AirTags can be abused and is trying to get ahead of it
The 13 crappiest robots, rankedNancy Pelosi warns colleagues after info hackedGive your kitchen sponge a rest on this adorable bed
Our kitchen sponges do a lot of work. Don't they deserve a good night's rest?"Sure," said design stu
...[详细]Is Apple planning a spring event to introduce new iPads and AirPods?
Apple might have a product announcement event in just a few days. But then again, it also might not.
...[详细]Apple will finally fix the iOS issue that blocked searches for 'Asian' as adult content
Do you have adult content blocked on your iPhone or iPad? If so, it's likely that your iOS device is
...[详细]Google I/O 2021: Android 12, Google silicon, new Pixel Buds, and more
Last year, the COVID-19 pandemic arrived at justthe right time to make Google cancel its annual I/O
...[详细]Katy Perry talks 'Rise,' her next batch of songs, and how to survive Twitter
Katy Perry recently surpassed 90 million followers on Twitter, making her the person with the most f
...[详细]Researcher claims to hack AirTag so it points to wrong website when scanned
That didn't take very long. A German researcher claims to have hacked Apple's new item tracker, the
...[详细]Bill and Melinda Gates are ending their 27
Bill and Melinda Gates announced on Twitter in identical statements Monday that they are ending thei
...[详细]'Godzilla vs. Kong' posts pandemic
I've got to wonder how Christopher Nolan feels about all of this.Might Godzilla vs. Konghave picked
...[详细]This chart shows just how high Simone Biles can jump
American gymnast Simone Biles has dominated the Rio Olympics with five medals (four of them gold) bu
...[详细]
Generally, to get a vaccine appointment, users have to navigate either a government health departmen
...[详细]Pokémon Go is so big that it has its own VR porn parody now
Crypto startup Dfinity takes on Ethereum with launch of Internet Computer
