MESSAGE
DATE | 2015-03-01 |
FROM | Ruben Safir
|
SUBJECT | Re: [NYLXS - HANGOUT] Lenovo Superfish
|
On 03/01/2015 06:23 PM, prmarino1-at-gmail.com wrote: > Ah the dangers of free as in beer applications. > Get ready every one once all of these are discovered we are going to be hearing about and possibly dealing wit?h a mess that will make heartbleed seem like a pleasant memory. > > ?Smiles :) :) :) every one you will need them while your carrying a sledge hammer around the office to handle those pesky desktops lol. > > No but seriously this one will be bad and every one should be checking their smartphones too. I did and all my devices are clean
I bet I know what this guy at Komodia was trying to do. He was trying to make something of a parental control for the Orthodox Jewish community. That doesn't mean that he suggested taking an unvetted version of his software and embedding it into what is flat out MALWARE with Superfish. It is a sick prospect that is the rule rather than the exception, that individual ownership and privacy mean nothing to the providers of digital software in todays computing environment. The fact that this software would intercept all httpd communications through tcp/ip and rewrite it never even occurs to them as being a violent violation of individual ownership and privacy of the computer. And if it wasn't for this small minor detail of the certificate swapping, all would be just Fine and Dandy.
https://www.youtube.com/watch?feature=player_detailpage&v=hHhYLJMi7CE#t=258
The mindset here, of the acceptance of manipulation and control of the end user HAS TO END.
Ruben
> ..... > > Conclusions > > First, don't make intercepting proxies. They are impossible to write > correctly, and by their very nature lower the security of the whole > Internet. > > Second, the Komodia one is a particularly bad one, and they should feel > bad. > > Third, Komodia should be punished for jeopardizing the users, like > probably all the companies that didn't do due diligence here. > > More rants on Twitter . > > > >
|
|