Dell admits installing security hole on laptops, apologizes,offers fix

Page 1 of 3 123 LastLast

    Dell admits installing security hole on laptops, apologizes,offers fix


    Posted: 24 Nov 2015
    Dell acknowledges a root certificate it installed on its laptops was a bad idea and is pushing a patch to permanently remove it.

    In a blog post company spokesperson Laura Thomas says eDellRoot was installed as a support tool to make it faster and easier for customers to service the devices. But some of those customers discovered the certificate and recognized it as a serious security threat.

    “We have posted instructions to permanently remove the certificate from your system here,” Thomas writes. We will also push a software update starting on November 24 that will check for the certificate, and if detected remove it. Commercial customers who reimaged their systems without Dell Foundation Services are not affected by this issue. Additionally, the certificate will be removed from all Dell systems moving forward.”
    For those who don’t want to use the pushed patch, instructions for removing eDellRoot manually is a 17-step process that takes up 11 Word document pages, including screenshots. The patch - Click Here – can also be downloaded.
    Dell admits installing security hole on laptops, apologizes, offers fix | Network World

    Dell acknowledges security hole in new laptops | Reuters
    Borg 386's Avatar Posted By: Borg 386
    24 Nov 2015



  1. Posts : 3,724
    Windows 10x64 Build 1709
       #1

    Whats up with these manufacturer's anyway? Do they not have any software people/consultants to LOOK at what they are installing in the machines they are peddling to us?
      My Computer


  2. Posts : 7,781
    Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
    Thread Starter
       #2

    indianacarnie said:
    Whats up with these manufacturer's anyway? Do they not have any software people/consultants to LOOK at what they are installing in the machines they are peddling to us?
    It's because it's all one big data grab nowadays. Instead of considering security, they were considering $$$$$$

    How to remove Dell's 'Superfish 2.0' root certificate - permanently | ZDNet
      My Computer


  3. Posts : 7,781
    Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
    Thread Starter
       #3

    The fallout from a serious security mistake made by Dell is widening, as security experts find more issues of concern.

    Researchers with Duo Security have found a second weak digital certificate in a new Dell laptop and evidence of another problematic one circulating.

    The issue started after it was discovered Dell shipped devices with a self-signed root digital certificate, eDellRoot, which is used to encrypt data traffic. But it installed the root certificate with the private encryption key included, a critical error that left many security experts aghast.
    Dell PCs root certificate security error widens as researchers dig deeper | PCWorld
      My Computer


  4. Posts : 20,583
    Win-7-Pro64bit 7-H-Prem-64bit
       #4

    Yep never good to see happening,
    But if you don't make sure the manufacture sends a clean install disk with a purchase or accommodate buying one outright then you must of just fell off the moon

    Personally I would clean install on a new ssd and put the oem in a drawer incase hardware failure occurs within the warrantee period
      My Computer


  5. Posts : 2,409
    Windows 7 Professional 32-bit/Windows 8 64-bit/Win7 Pro64-bit
       #5

    Does this affect desktops too? I have a XPS 8700 I bought last year in May.
      My Computer


  6. Posts : 7,781
    Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
    Thread Starter
       #6

    Computer0304 said:
    Does this affect desktops too? I have a XPS 8700 I bought last year in May.
    I sure as hell wouldn't take any chances. It's easy enough to do a search for the problem file.

    Wouldn't surprise me one bit though if you found something. Keep in mind these are the things coming to light we know about. Heaven knows how much other insecure crap is on there that we DON'T know about.
      My Computer


  7. Posts : 20,583
    Win-7-Pro64bit 7-H-Prem-64bit
       #7

    Best cure is a clean install
    If you're out of warrantee there's little to be lost in doing one.
      My Computer


  8. Posts : 246
    Windows 7 Home Premium 64 bit SP1
       #8

    Borg 386 said:
    Wouldn't surprise me one bit though if you found something. Keep in mind these are the things coming to light we know about. Heaven knows how much other insecure crap is on there that we DON'T know about.
    I agree. I got really paranoid about all of the ASUS code that was on this PC when we bought it. I didn't like it "phoning home" to China all the time. I moved all of the ASUS folders to a separate USB drive and renamed all of the folders/files with an "OLD" suffix. Never had a "file not found" message afterwards, but at least the system stopped communicating with ASUS. After several years, I still have the code on the disconnected drive, but haven't seen the need to use any of it so far.
      My Computer


  9. Posts : 2,409
    Windows 7 Professional 32-bit/Windows 8 64-bit/Win7 Pro64-bit
       #9

    jamis said:
    Borg 386 said:
    Wouldn't surprise me one bit though if you found something. Keep in mind these are the things coming to light we know about. Heaven knows how much other insecure crap is on there that we DON'T know about.
    I agree. I got really paranoid about all of the ASUS code that was on this PC when we bought it. I didn't like it "phoning home" to China all the time. I moved all of the ASUS folders to a separate USB drive and renamed all of the folders/files with an "OLD" suffix. Never had a "file not found" message afterwards, but at least the system stopped communicating with ASUS. After several years, I still have the code on the disconnected drive, but haven't seen the need to use any of it so far.
    It's actually Taiwan, but I guess same thing. At least Dell is an American company.
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:44.
Find Us