Lenovo System Update Vulnerability

[UMPC2024]

Just came across this article, but not sure how much it applies.
http://www.theverge.com/2015/5/6/855788 ... -in-lenovo
I personally stopped using Lenovo System update to do anything on my ThinkPads.
Thoughts?

[600X]

I've never liked system update, it only caused problems. So I haven't been using it anyway. I've told people not to use it, but they didn't listen. This is what they get.

[Puppy]

It is not a remote attack, after all: https://support.lenovo.com/us/en/produc ... _privilege

Lenovo System Update validates all system update files as they are downloaded from the Lenovo servers. However, if the local system contains malware, it is possible that the downloaded updates could be altered before installation creating a race condition. The latest Lenovo System Update release eliminates this possibility.

It is rather embarrassing issue revealing there is no good QA and code review in Lenovo software department.