Slashdot Mirror
Top Windows OEM Lenovo Urges Customers To Uninstall Accelerator Application (lenovo.com)
Two-Factor Authentication service Duo Security reported earlier that third-party updating tools found on Dell, HP, Lenovo, Acer, and Asus (the top five Windows OEMs) are vulnerable to man-in-the-middle attack. Hours later, Lenovo, the world's largest Windows OEM by shipment figure, has issued an advisory in which it urges users to uninstall Accelerator Application, which comes preinstalled on many of its laptops and desktops models. Fortune reports: Specifically, as Lenovo said in an advisory notice, the auto-update feature in its Accelerator Application software can be exploited by a "man-in-the-middle attack" -- someone could get in between the computer and the server pushing out the updated software, fooling the computer into installing a fake version of the update instead of the genuine article. Such attacks can allow anything from surreptitious malware installation to the insertion of surveillance capabilities, or even the hijacking of PCs.
The app so nice, they had to name it twice?
Or maybe it's an Application Application because of two-factor?
This planet has a problem, which is this: most of the people living on it are unhappy pretty much all of the time. Many solutions are suggested for this problem, but most of these are largely concerned with the movement of small green pieces of paper, which is odd because on the whole it isn't the small green pieces of paper that are unhappy.
Many are increasingly of the opinion that we've all made a big mistake in coming down from the trees in the first place. And some say that even the trees have been a bad move, and that no one should ever have left the oceans.
You know we're all in big trouble once the Department of recursivity department merges with the Department of redundancy department.