Another reason to avoid Bloatware from Lenovo: ShareIt

[RealBlackStuff]

A number of severe security vulnerabilities have been patched in Lenovo products, one of which involving a hard-coded password which has been awarded the title of the third 'worst password' of all time.

And the Winner Sinner is: ShareIt.

One more reason to avoid Lenovo's Bloatware!
If you ask me,they should have named it: SHareIT.

http://www.zdnet.com/article/lenovo-use ... door-flaw/

[Puppy]

WOW ! These are not typical vulnerabilities, it is just complete ignorance of basic security principles regardless of the issues are currently fixed or not.

[Puppy]

There is no response from Lenovo yet, the horrible software is still available in downloads

Frustrating: Shape the future of File Sharing: SHAREit! https://forums.lenovo.com/t5/Change-The ... -p/2248095

[turomini]

wow, I can't believe these simple security matters were overlooked.
It really makes me wonder if the software went from beta testing to release too quickly. I would understand these issues in a beta test to get the software going, and then working on the security of it.

I do actually use SHAREit occasionally, its very convenient, and I will still use it, but not somewhere in public anymore. I do hope the company learns from this and improves from it, although a little late in this world.

[Puppy]

They renamed it to Connect2 https://connect2.lenovo.com/

[creshal]

When will they learn to just give up?

[TonyJZX]

Lenovo is at its heart, a chinese company.

They did Superfish and bios malware and a number of exploits on their cellular phones.

At least in this case, the system update util gives you to option to deny Reachit (Reach-[censored]?) and all the other nonsense apps.

[Puppy]

and a number of exploits on their cellular phones.

It is native feature of the Android crap because there are no regular security updates in contrast with Windows 10 Mobile devices. No wonder.

[brchan]

Just when you think Lenovo couldn't do any worse...

It's almost as if they did this on purpose. Something tells me there is no way this could have passed and went into production without some kind of ulterior motive.

[jwjensen356]

Is there a handy list of Lenovo bloatware so that we can selective uninstall what we may have on our computers?

[creshal]

Just wipe and reinstall from scratch. It's almost always the sanest option.