Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Dell ships PCs with easily cloneable root certificates

Share and discuss recent and important events about malware, privacy, or security. User contributed news. Please do not copy and paste full news stories. Please do quote the essential paragraph of the story. Provide a link to the source.

Dell ships PCs with easily cloneable root certificates

Unread postby capnkrunch » November 24th, 2015, 4:12 am

In a move eerily similar to the Superfish debacle that visited Lenovo in February, Dell is shipping computers that come preinstalled with a digital certificate that makes it easy for attackers to cryptographically impersonate Google, Bank of America, and any other HTTPS-protected website.

Source: Ars Technica
User avatar
capnkrunch
MRU Master
MRU Master
 
Posts: 793
Joined: March 20th, 2015, 6:41 pm
Location: Chicago
Advertisement
Register to Remove

Re: Dell ships PCs with easily cloneable root certificates

Unread postby Gary R » November 24th, 2015, 5:11 am

Stupidity is universal it would seem. :roll:

Edit: Dell are aware of the situation ... http://en.community.dell.com/dell-blogs ... ertificate ... and have now issued directions for how to remove the relevant certificate ... https://dellupdater.dell.com/Downloads/ ... tions.docx
User avatar
Gary R
Administrator
Administrator
 
Posts: 25888
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire

Re: Dell ships PCs with easily cloneable root certificates

Unread postby Gary R » November 25th, 2015, 12:03 pm

Seems another certificate problem has been found on Dell computers ... http://www.bbc.co.uk/news/technology-34920197

"To paraphrase Oscar Wilde, to have one self-signing certificate installed could be a mistake; to have two looks like carelessness."

"The fact that there appears to be a second self-signing certificate does make you wonder what else might be lurking on the machine."
User avatar
Gary R
Administrator
Administrator
 
Posts: 25888
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire


Return to Security News



Who is online

Users browsing this forum: No registered users and 5 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware