[cabfpub] Lenovo installation of malicious root.

[Robin Alden]

That archive.org link I gave is dead.

I’ve put a screen grab of the old page here:

https://app.ccloud.com/#share/1783 <https://app.ccloud.com/#share/1783&6ac37df3dbd2a650399cb25639157cbe017bc9b9> &6ac37df3dbd2a650399cb25639157cbe017bc9b9

for comparison with

https://blog.hboeck.de/archives/865-Adware-Privdog-worse-than-Superfish.html

 

Regards
Robin

 

 

From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On Behalf Of Robin Alden
Sent: 23 February 2015 23:22
To: 'Chris Palmer'; 'Ryan Sleevi'
Cc: public at cabforum.org
Subject: Re: [cabfpub] Lenovo installation of malicious root.

 

Hi Chris,

                PrivDog is not a Comodo Group product.  Comodo ships a version of PrivDog with Comodo Internet Security (CIS) and with Comodo browsers, but that is an earlier release which does not exhibit the identified behaviour.

 

The PrivDog versions being downloaded and evaluated by security researchers is a newer stand-alone version that has never been distributed by Comodo.

The issue is only present in PrivDog versions 3.0.96.0 and 3.0.97.0 and is apparently due to a bug in a third party library that PrivDog bought in.

 

The PrivDog team has released an advisory with more information, available here: http://privdog.com/advisory.html

 

I see that Hanno has updated his page somewhat, too, to remove the claim that it is Comodo distributing this flawed version of PrivDog.

https://blog.hboeck.de/archives/865-Adware-Privdog-worse-than-Superfish.html

c.f. http://web.archive.org/web/20150223010209/https://blog.hboeck.de/archives/865-Comodo-ships-Adware-Privdog-worse-than-Superfish.html <http://web.archive.org/web/20150223010209/https:/blog.hboeck.de/archives/865-Comodo-ships-Adware-Privdog-worse-than-Superfish.html> 

 

Regards

Robin Alden

Comodo CA Ltd.

 

 

From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On Behalf Of Chris Palmer
Sent: 23 February 2015 14:38
To: Ryan Sleevi
Cc: public at cabforum.org
Subject: Re: [cabfpub] Lenovo installation of malicious root.

 

Also, Comodo might want to tell us what is going on here:

http://news.softpedia.com/news/Comodo-s-PrivDog-Breaks-HTTPS-Security-Possibly-Worse-than-Superfish-473968.shtml

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20150224/1e02c29e/attachment-0003.html>