Content
@
0 reply
20 recasts
20 reactions
Pete Horne
@horneps
9 years ago this month I discovered the Lenovo superfish virus and worked with Nicole Perlroth at the New York Times to get the story out. AMA.
6 replies
3 recasts
39 reactions
Cameron Armstrong
@cameron
Was it worth it to go through the entire process of disclosing?
1 reply
0 recast
2 reactions
Pete Horne
@horneps
Hmmm. Good question. Would I do it again? Yes. Was it a satisfying experience? Absolutely f'ing not. It went all sorts of pear shaped. And no one cares.
1 reply
0 recast
1 reaction
Cameron Armstrong
@cameron
incredible lesson and sorry you had to get through that 🫡
1 reply
0 recast
0 reaction
Pete Horne
@horneps
I'm not feeling sorry for myself, although I did meet Mr Smith a few times and it was very banal. What drove me nuts was Lenovo carried the can and we couldn't get traction even tho I proved it was a CA based Israeli owned firm. Shutters came down.
1 reply
0 recast
0 reaction
Cameron Armstrong
@cameron
Did they just not believe you or what?
3 replies
0 recast
0 reaction
Pete Horne
@horneps
The simple story was Lenovo got duped to put a dumb product in their standard partner build. The real story was it was a USA domicile company and as part of it they were basically installing a root kit and capturing all socket traffic undetected.
0 reply
0 recast
0 reaction
Pete Horne
@horneps
No they believed me. I did a reverse hack on what was going on and had all the proof. The problem was I actually got the real story. But that wasn’t convenient. And so little fish get fried.
0 reply
0 recast
0 reaction
Pete Horne
@horneps
The reason the NYT gave was it probably had govt contracts and it was doing data gathering and so the shutters went down and they couldn't do anything with the story. The reason Mr Smith gave was we have govt contracts and you don't so you should prolly stop.
0 reply
0 recast
0 reaction
