"Superfish" Redux: Dell shipping PCs with self-signed root certificate

[Alex Keller <axkeller () STANFORD EDU>]

Dell follows Lenova's folly of pre-installing a self-signed root certificate that could be leveraged to impersonate ANY 
https service (and apparently perform code signing as well): 
http://arstechnica.com/security/2015/11/dell-does-superfish-ships-pcs-with-self-signed-root-certificates/

Test your Dell:
https://edell.tlsfun.de

Instructions to disable:
https://isc.sans.edu/forums/diary/Superfish+20+Dell+Windows+Systems+PreInstalled+TLS+Root+CA/20411/

Best,
Alex

Alex Keller
Stanford | Engineering
Information Technology
axkeller () stanford edu<mailto:axkeller () stanford edu>
(650)736-6421