时间:2025-04-03 10:46:26 来源:网络整理编辑:焦點
Lenovo has settled with the Federal Trade Commission (FTC) and 32 states over charges related to mal
Lenovo has settled with the Federal Trade Commission (FTC) and 32 states over charges related to malicious Superfish adware that came pre-installed on laptops from Aug. 2014 to Feb. 2015 — but the company still won't admit it did anything wrong.
The Chinese computer maker was found to be shipping computers with Superfish adware, a program called VisualDiscovery, back in Feb. 2015. The company was hit with consumer backlash and the Department of Homeland Security even advised users to delete the software after the initial discovery of the security breach, but this settlement is the first concrete consequence for putting the personal information of users in danger.
Lenovo agreed to pay a fine of $3.5 million and will implement a comprehensive security program for "most consumer software" preloaded on its computers for the next 20 years, which will be subject to audit. Lenovo will also be required to get consumers’ affirmative consent before pre-installing software like this on its computers going forward.
The major concern for the researchers who discovered the security flaws back in 2015 was that the program broke HTTPS connections, exposing users to potentially malicious websites and attacks by hackers when they visited otherwise secure sites online. The FTC also claims that the adware was able to access users' personal data, but none of that data was ever sent to Superfish.
Lenovo isn't totally owning up to the charges, however. The company "disagrees with allegations contained in these complaints," according to a statement — even though Lenovo CTO Peter Hortensius admitted to Mashabletwo years ago that the adware created a security vulnerability for users.
The company insists that there have been no incidents where anyone actually took advantage of the vulnerabilities, and that its response to beef up its security and limit the amount of bloatware it preloads onto PCs afterwards was sufficient.
By settling, Lenovo gets to close the the controversy with little more than a slap on the wrist. The Superfish adware saga might not have led to anyone's data being stolen — but it did expose what computer makers can get away with when they put your data at risk.
TopicsCybersecurityLenovo
Did our grandparents have the best beauty advice?2025-04-03 10:42
Here's all the merch you'll want from Justin Bieber's Purpose World Tour2025-04-03 10:35
Prince's family planning memorial service to remember him 'the right way'2025-04-03 10:33
Radiohead shares 'Daydreaming' video from new album coming Sunday2025-04-03 10:31
Fyvush Finkel, Emmy winner for 'Picket Fences,' dies at 932025-04-03 10:18
Seth MacFarlane heads to space 300 years from now in big TV comeback2025-04-03 09:40
Seth MacFarlane heads to space 300 years from now in big TV comeback2025-04-03 09:04
Radiohead shares 'Daydreaming' video from new album coming Sunday2025-04-03 08:52
Here's George Takei chilling in zero gravity for the 'Star Trek' anniversary2025-04-03 08:48
Chinese miners are nearly unrecognizable at the end of work2025-04-03 08:13
This coloring book is here for all your relationship goals2025-04-03 10:44
Instagram's new business profiles spotted in the wild2025-04-03 09:44
This is how stunning VR video from GoPro's Omni camera looks2025-04-03 09:16
Chinese miners are nearly unrecognizable at the end of work2025-04-03 09:11
MashReads Podcast: What makes a good summer read?2025-04-03 09:03
GoPro's drone delayed until the holidays2025-04-03 08:56
Girl doesn't need Beyoncé tour tickets to learn Bey's dance routine2025-04-03 08:50
You don't have to pay extra to get an Uber at Sydney Airport2025-04-03 08:32
This 'sh*tpost' bot makes terrible memes so you don't have to2025-04-03 08:21
GoPro's drone delayed until the holidays2025-04-03 08:16