<\/br><\/p>\n
A recently uncovered security vulnerability in new Dell PCs leaves users’ communications potentially open to interception or corruption.–PC Pitstop.<\/i><\/font><\/p>\n by Jim Hillier for Daves Computer Tips<\/p>\n Following close on the heels of the Lenovo \u201cSuperfish\u201d debacle comes news of yet another major manufacturer embroiled in similar security controversy, this time it\u2019s the US-based Dell.<\/p>\n As part of an enhanced support tool, Dell installed a self-signed root certificate (eDellRoot) and corresponding private key on its computers, apparently blissfully unaware that this exposes users\u2019 encrypted communications to potential spying. Even more surprising is that the company did this with full knowledge of Lenovo\u2019s very similar security blunder which came to light earlier this year.<\/p>\n In Lenovo\u2019s case the goal was ad injection whereas Dell asserts that it was only trying to streamline remote support. Regardless of intention, this silly blunder creates a gaping security hole for those affected.<\/p>\n At this stage it remains unclear as to exactly what models may be affected. However, Dell PC owners can check for the vulnerability here: https:\/\/edell.tlsfun.de\/<\/a><\/p>\n Article Continued Here<\/a><\/p>\n Dell’s Response<\/strong><\/p>\nHuge Security Hole Found in New Dell PCs<\/h4>\n