Technology for Traveling
-
@scottalanmiller said:
@Dashrender said:
Now I'm really lost - so there are two versions of Superfish? 1) where it was implemented in the driver and no other software required, and 2) software that installed a network shim that had nothing to do with the driver?
How would you make a network shim that wasn't in a driver? The shim is part of the Lenovo drivers.
But it doesn't have to be. That's my point. Superfish for example was found on more than just Lenovo computers. Are you telling me that all of those vendors did exactly what Lenovo did and baked the shim into the NIC driver?
-
@scottalanmiller said:
We HAD to go to Windows 10 rather than Windows 8.1 to get away from the lack of non-shimmed drivers.
you did? Why? I thought you installed a third party NIC (USB) into the system to solve this problem? Why do you assume the Lenovo driver for Windows 10 doesn't have the shim in it, assuming going to Windows 10 allowed you to use the internal NIC with an MS provided driver.
-
@Dashrender said:
@scottalanmiller said:
We HAD to go to Windows 10 rather than Windows 8.1 to get away from the lack of non-shimmed drivers.
you did? Why? I thought you installed a third party NIC (USB) into the system to solve this problem? Why do you assume the Lenovo driver for Windows 10 doesn't have the shim in it, assuming going to Windows 10 allowed you to use the internal NIC with an MS provided driver.
That was to get working hardware. The Lenovo wireless hardware doesn't work. That's an unrelated issue.
There is no Lenovo Windows 10 driver. Going to Windows 10 allowed us to use Microsoft drivers that worked.
-
So one of the best discoveries of our new Amazon Fire TV.... all of the videos that we have uploaded to Amazon Cloud Drive as our backup mechanism suddenly appear on the Fire TV and we can just watch them as if they were another streaming service! So our own library that has been stored, thus far, on a NAS in the US just have to be uploaded to ACD and our Fire TV makes them available to us when we travel! Huge win!!
-
Is that unlimited storage too, like their picture storage?
-
@scottalanmiller said:
@Dashrender said:
@scottalanmiller said:
We HAD to go to Windows 10 rather than Windows 8.1 to get away from the lack of non-shimmed drivers.
you did? Why? I thought you installed a third party NIC (USB) into the system to solve this problem? Why do you assume the Lenovo driver for Windows 10 doesn't have the shim in it, assuming going to Windows 10 allowed you to use the internal NIC with an MS provided driver.
That was to get working hardware. The Lenovo wireless hardware doesn't work. That's an unrelated issue.
There is no Lenovo Windows 10 driver. Going to Windows 10 allowed us to use Microsoft drivers that worked.
You couldn't install the USB NIC into Windows 8.1?
I know the pain you dealt with - I purchased a replacement internal WIFI AC card and it's been golden ever since!
-
-
@Dashrender said:
You couldn't install the USB NIC into Windows 8.1?
I assume that replacing the hardware would have us to potentially bypassed it. But having a fully compromised system is never a good idea. It's like having a thief in a room and just saying "be sure not to use that room." Better to clean house rather than avoiding the room.
-
@scottalanmiller said:
@Dashrender said:
You couldn't install the USB NIC into Windows 8.1?
I assume that replacing the hardware would have us to potentially bypassed it. But having a fully compromised system is never a good idea. It's like having a thief in a room and just saying "be sure not to use that room." Better to clean house rather than avoiding the room.
But you could simply not install the Lenovo driver either, wouldn't solve your problem?
Are you still stuck using a USB wireless NIC?
-
Lenovo made the sole driver for the hardware.
-
@scottalanmiller said:
Lenovo made the sole driver for the hardware.
Yes, just don't install it... i.e. leave the hardware unused. therefore you have no thief to worry about - assuming you're stuck using a USB wireless card anyway... I'm assuming that's what you are doing in Windows 10.
-
@Dashrender said:
@scottalanmiller said:
Lenovo made the sole driver for the hardware.
Yes, just don't install it... i.e. leave the hardware unused. therefore you have no thief to worry about - assuming you're stuck using a USB wireless card anyway... I'm assuming that's what you are doing in Windows 10.
- We couldn't know that the hardware was flaky until we had the software working.
- Not leaving known malware on the system. No way, even today, how much malware Lenovo had installed or was attempting to get on there. Or how deep it goes. No way to be confident that that driver does not touch other things.
If this was any end user and they knew that they had been rooted, our answer every time is that they need to reinstall clean. This is no different, not a special case. Leaving a root kit and software from a known malicious entity on there would be completely unacceptable.
-
You're confusing the issue again.
I'm assuming you are starting with a clean/fresh install of WINDOWS 8.1 with no Lenovo Crap on it! so, you wipe it.. and because you aren't going to install the Lenovo drives, you have no network access.
So you install a USB wireless card and the associated drivers, again on your clean install Windows 8.1 machine.
What's wrong with this setup? -
@Dashrender said:
You're confusing the issue again.
I'm assuming you are starting with a clean/fresh install of WINDOWS 8.1 with no Lenovo Crap on it! so, you wipe it.. and because you aren't going to install the Lenovo drives, you have no network access.
So you install a USB wireless card and the associated drivers, again on your clean install Windows 8.1 machine.
What's wrong with this setup?If we knew all of the facts at the time that would be a slightly less good version of what happened. We are in the same boat but updated to Windows 10 now.
I have no idea where you are going with this. The troubleshooting was done, the issue identified. Later another issue was identified. Why go back to Windows 8.1? I see no logic there. We don't want old Windows just to have it be old.
-
Because I'm trying to understand - are the driver and the Superfish thing really one in the same?
I thought I heard that other vendors like Asus or Acer also included Superfish, but in digging around for a min or two I can't seem to find anything to corroborate that.
So I guess in the end what my point is - is finding out the Superfish only affected Lenovo and from what Scott is saying, it required both the shim'ed driver package and the software package on the machine, making these two components part of the same issue.
I had a complete misunderstanding of the problem before.
-
@Dashrender said:
Because I'm trying to understand - are the driver and the Superfish thing really one in the same?
No reason to suspect otherwise. Why would the question get asked? Superfish worked by being a shim. The network driver had a shim. Unless you suspect that they did the same thing twice on the same boxes and no one noticed that there were TWO shims.
-
@Dashrender said:
I thought I heard that other vendors like Asus or Acer also included Superfish, but in digging around for a min or two I can't seem to find anything to corroborate that.
Definitely not. It would be really big news if anyone else was ever caught doing something like this. It is a really big deal that Lenovo stands alone as the most evil computer vendor there has ever been. This isn't (yet) and industry issue. This is all about Lenovo.
-
@Dashrender said:
So I guess in the end what my point is - is finding out the Superfish only affected Lenovo and from what Scott is saying, it required both the shim'ed driver package and the software package on the machine, making these two components part of the same issue.
The driver IS the software package on the machine. And the machine would not be online without it. The only thing required was the network driver and you were shimmed. The belief is that that shim was Superfish, not a second shim. There is no reason, other than the fact that it is Lenovo, to suspect more than one shim.
-
@scottalanmiller said:
@Dashrender said:
Because I'm trying to understand - are the driver and the Superfish thing really one in the same?
No reason to suspect otherwise. Why would the question get asked? Superfish worked by being a shim. The network driver had a shim. Unless you suspect that they did the same thing twice on the same boxes and no one noticed that there were TWO shims.
Yes I assumed they were separate, and you had two shims.
-
@scottalanmiller said:
@Dashrender said:
So I guess in the end what my point is - is finding out the Superfish only affected Lenovo and from what Scott is saying, it required both the shim'ed driver package and the software package on the machine, making these two components part of the same issue.
The driver IS the software package on the machine. And the machine would not be online without it. The only thing required was the network driver and you were shimmed. The belief is that that shim was Superfish, not a second shim. There is no reason, other than the fact that it is Lenovo, to suspect more than one shim.
Then explain how the SSL cert got there? Are you saying the SSL cert was inserted into Windows through the WNIC driver?
