The Superfish certificate has been cracked, exposing Lenovo users to attack

Lenovo's Superfish bug just went from bad to worse, as researchers have turned up an easy way to take advantage of the security flaws opened up by the pre-installed software. Present on Lenovo laptops sold before January of 2015, the bug has come under fire for breaking fundamental web security protocols, routing all encryption through a single password-protected certificate authority owned by the company that makes Superfish. Anyone with the password that unlocks that certificate authority would be able to completely bypass the computer's web encryption.

Continue reading…



Continue reading...