Lenovo Investigating Superfish Bug

By Edward Cardenas

SOUTHFIELD (CBS Detroit) - Computer manufacturer Lenovo is investigating a reported bug in the Superfish image-to-image search software on some notebooks.

The software was included in notebooks shipped between September and December, but due to customer feedback, Lenovo disabled server-side interactions on all Lenovo products.

But according to a blog post, researchers found and published a password that could open the computer up to an attack. This is a claim Lenovo disputes in a post on its website.

"We have thoroughly investigated this technology and do not find any evidence to substantiate security concerns," the company stated. "We will continue to review what we do and how we do it in order to ensure we put our user needs, experience and priorities first."

Lenovo added that Superfish technology does not profile nor monitor user behavior, doesn't record user information and it doesn't know who the user is.

Additionally, every session is independent.

But according to a post on The Verge, the bug could allow someone with the proper software to anyone to spy on a Lenovo user who is on a public network.

An online test has been created to determine if a computer may be at risk.

According to The Verge, researchers are continuing to investigate the bug.