Superfish 2.0: Now Dell is Breaking HTTPS

[wr250]

dell install the superfish man in the middle attack, without superfish.
https://www.eff.org/deeplinks/2015/11/superfish-20-now-dell-breaking-https

[MV/Liberace!]

dell install the superfish man in the middle attack, without superfish.
https://www.eff.org/deeplinks/2015/11/superfish-20-now-dell-breaking-https

one of the world's most horribly run companies...

[cweb]

How did they think this was a good idea? Did they think they were never going to get caught?

What really pisses me off is that the Dell Twitter account said it "doesn't pose a threat."

Just like, you know, using a toaster in the bathtub.

[BellBoy]

one of the world's most horribly run companies...

Years ago, I had a Dell computer... once.

[SredniVashtar]

Years ago, I had a Dell computer... once.

I am actually typing on a Dell laptop right now. Perhaps that explains why I am such a bitter, twisted bastard!

[cweb]

Microsoft is also revoking trust from the stupid Dell certificate.
https://technet.microsoft.com/en-us/library/security/3119884.aspx

Windows PCs will no longer trust Dell's self-signed root certificate, amid concerns it can be used to conduct man-in-the-middle attacks on millions of computers.

Microsoft said in a security bulletin that it updated its certificate list to revoke its trusted status.

Of course, Microsoft is so perfect...