时间:2025-08-02 09:17:26 来源:网络整理编辑:焦點
Lenovo has settled with the Federal Trade Commission (FTC) and 32 states over charges related to mal
Lenovo has settled with the Federal Trade Commission (FTC) and 32 states over charges related to malicious Superfish adware that came pre-installed on laptops from Aug. 2014 to Feb. 2015 — but the company still won't admit it did anything wrong.
The Chinese computer maker was found to be shipping computers with Superfish adware, a program called VisualDiscovery, back in Feb. 2015. The company was hit with consumer backlash and the Department of Homeland Security even advised users to delete the software after the initial discovery of the security breach, but this settlement is the first concrete consequence for putting the personal information of users in danger.
Lenovo agreed to pay a fine of $3.5 million and will implement a comprehensive security program for "most consumer software" preloaded on its computers for the next 20 years, which will be subject to audit. Lenovo will also be required to get consumers’ affirmative consent before pre-installing software like this on its computers going forward.
The major concern for the researchers who discovered the security flaws back in 2015 was that the program broke HTTPS connections, exposing users to potentially malicious websites and attacks by hackers when they visited otherwise secure sites online. The FTC also claims that the adware was able to access users' personal data, but none of that data was ever sent to Superfish.
Lenovo isn't totally owning up to the charges, however. The company "disagrees with allegations contained in these complaints," according to a statement — even though Lenovo CTO Peter Hortensius admitted to Mashabletwo years ago that the adware created a security vulnerability for users.
The company insists that there have been no incidents where anyone actually took advantage of the vulnerabilities, and that its response to beef up its security and limit the amount of bloatware it preloads onto PCs afterwards was sufficient.
By settling, Lenovo gets to close the the controversy with little more than a slap on the wrist. The Superfish adware saga might not have led to anyone's data being stolen — but it did expose what computer makers can get away with when they put your data at risk.
TopicsCybersecurityLenovo
Felix the cat just raised £5000 for charity because she's the hero we all need2025-08-02 09:15
Polite guy wins $1 million in lottery store after letting someone cut in front2025-08-02 09:09
Amazon launches its music streaming service2025-08-02 08:59
When Kim Kardashian returns to social media, it will be very different2025-08-02 08:54
Richard Branson 'thought he was going to die' in bike accident2025-08-02 08:51
Bisquick's tone2025-08-02 08:33
Polite guy wins $1 million in lottery store after letting someone cut in front2025-08-02 07:40
Pierce Brosnan leaves India shaken and stirred by starring in 'pan masala' advertisement2025-08-02 07:26
Felix the cat just raised £5000 for charity because she's the hero we all need2025-08-02 07:14
Mindy Kaling and 'The Mindy Project' cast chat Season 5 premiere and what's next2025-08-02 06:45
Donald Trump's tangled web of Russian influence2025-08-02 09:16
Hong Kong student activist Joshua Wong detained at Bangkok airport2025-08-02 09:13
Google becoming a hardware manufacturer isn't a threat — yet2025-08-02 08:54
Trump makes you just want to binge on cat GIFs, Clinton says2025-08-02 08:49
17 questions you can answer if you're a good communicator2025-08-02 07:58
Bisquick's tone2025-08-02 07:20
LeBron James just endorsed Hillary Clinton for president2025-08-02 07:12
When Kim Kardashian returns to social media, it will be very different2025-08-02 07:10
Aly Raisman catches Simone Biles napping on a plane like a champion2025-08-02 07:05
Trump's possible 182025-08-02 06:50