Lenovo security fault called reckless

Lenovo pre-installed malware on millions of computers that broke https security for months – and then initially denied the problem. This vulnerability means systems used to log in to financial, work, online sales and other sites were compromised.

Installing Superfish is one of the most irresponsible mistakes an established tech company has ever made. Reckless, careless, and appalling don’t even come close to covering it.

via Lenovo Superfish scandal: Why it’s one of the worst consumer computing screw-ups ever.

  • If you are using a Lenovo computer purchased last year, you need check for the presence of Superfish by going to this page and reading the result.
  • Lenovo’s manual spyware removal instructions.
  • As of this morning, Microsoft has updated Windows Defender to remove the Superfish digital certificate that causes the security failure in Lenovo computers. Update Windows Defender and scan your system.
  • CHANGE  YOUR PASSWORDS at secure web sites. You need to especially change your passwords at critical information web sites such as your financial accounts, health care records accounts, and online purchasing accounts as your account information had the potential of being compromised.

Lenovo puts malware on own systems that breaks HTTPS security

Read for the details: Lenovo Is Breaking HTTPS Security on its Recent Laptops | Electronic Frontier Foundation.

This is a very serious security vulnerability and Lenovo still has no fix to ensure that https is secure.

This is of interest to photographers and video shooters as the Lenovo Y50 notebook provides a 4K display screen, making it a popular choice among the photography and video community.

Leaked FAA Document hints at limited drone regulations

Leaked FAA Document Provides Glimpse Into Drone Regulations – Forbes.

Some restrictions, and operators would need to pass an FAA written exam only, to obtain unmanned aerial systems certification and to operate UAS craft pursuant to a new Part 107 of the FAA regulations. The written test would be based on the content of the Airman’s Information Manual (AIM) plus additional content regarding UAS.  Currently certified pilots of manned aircraft would also need to take the UAS certification exam, but it is expected this would require minimal study due to their knowledge of aviation.  UAS operators would also need to pass a security threat assessment by the TSA (required of all pilots already). Once that is done, the UAS pilot would receive a unmanned pilot’s certificate with UAS endorsement. For commercial use, an UAS craft would also require an FAA registration number ($5 fee).

The exam could be given by a designated pilot examiner, a certificated flight instructor, or others designated by the FAA. Examination would be required every 2 years.

Total estimated costs for the initial certification are estimated by the FAA at about $300 including exam fees and TSA threat assessment.

 

Guide to 3D and Drones

Coldstreams 3D and Drones