{"id":8573,"date":"2015-11-24T12:08:23","date_gmt":"2015-11-24T18:08:23","guid":{"rendered":"http:\/\/la-uno.com\/blog\/?p=8573"},"modified":"2015-11-24T12:08:23","modified_gmt":"2015-11-24T18:08:23","slug":"dell-tambien-tiene-su-propio-superfish","status":"publish","type":"post","link":"https:\/\/la-uno.com\/blog\/2015\/11\/24\/dell-tambien-tiene-su-propio-superfish\/","title":{"rendered":"Dell tambien tiene su propio Superfish"},"content":{"rendered":"<p><a href=\"http:\/\/la-uno.com\/blog\/wp-content\/uploads\/2015\/11\/url.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-8576 alignright\" src=\"http:\/\/la-uno.com\/blog\/wp-content\/uploads\/2015\/11\/url.jpg\" alt=\"url\" width=\"295\" height=\"171\" \/><\/a><\/p>\n<p>Hace unos meses se di\u00f3 la noticia que Lenovo hab\u00eda estado vendiendo equipos con un rootkit, el llamado <a href=\"http:\/\/la-uno.com\/blog\/2015\/02\/20\/pcs-de-lenovo-incluyen-adware-que-permite-ataques-man-in-the-middle\/\">SuperFish<\/a>, donde b\u00e1sicamente el rootkit puede firmar certificados y hacerlos pasar por v\u00e1lidos, esto permite los ataques &#8220;Man in the Middle&#8221;. Pensando un poco mal, esto b\u00e1sicamente le permite a Lenovo interceptar el tr\u00e1fico web de tu computadora y nadie se dar\u00eda cuenta, pues aunque usen un certificado inv\u00e1lido su rootkit lo avalar\u00eda y el navegador pensar\u00eda que es un certificado v\u00e1lido.<\/p>\n<p>Lo mismo se ha descubierto ahora en DELL, se ha descubierto un certificado llamado <em>eDellRoot<\/em>. Aunque en un principio se supone que es inofensivo este certificado\u00a0sirve para identificar tu equipo con el service tag para un soporte r\u00e1pido, sin embargo es un hoyo de seguridad y permite, asi como con SuperFish, los ataques man in the middle.<\/p>\n<p><a href=\"http:\/\/la-uno.com\/blog\/wp-content\/uploads\/2015\/11\/edellroot-mmc.jpeg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-8575 aligncenter\" src=\"http:\/\/la-uno.com\/blog\/wp-content\/uploads\/2015\/11\/edellroot-mmc.jpeg\" alt=\"edellroot-mmc\" width=\"600\" height=\"308\" srcset=\"https:\/\/la-uno.com\/blog\/wp-content\/uploads\/2015\/11\/edellroot-mmc.jpeg 600w, https:\/\/la-uno.com\/blog\/wp-content\/uploads\/2015\/11\/edellroot-mmc-300x154.jpeg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"http:\/\/en.community.dell.com\/dell-blogs\/direct2dell\/b\/direct2dell\/archive\/2015\/11\/23\/response-to-concerns-regarding-edellroot-certificate\" target=\"_blank\">Dell ya ha dado la cara<\/a> para aclarar por que est\u00e1 instalado el eDellRoot en los equipos DELL. <em>&#8220;The certificate is not malware or adware. Rather, it was intended to provide the system service tag to Dell online support allowing us to quickly identify the computer model&#8221;\u00a0<\/em>(&#8220;El certificado no es Malware o Adware. En lugar, su prop\u00f3sito es proveer el sistema de service tag al equipo de soporte de Dell para r\u00e1pidamente identificar el modelo de la computadora&#8221;.<\/p>\n<p>Si cuentas con un equipo DELL y deseas eliminar el eDellRoot, debes seguir las instrucciones que public\u00f3 DELL <a href=\"https:\/\/dellupdater.dell.com\/Downloads\/APP009\/eDellRootCertRemovalInstructions.docx\" target=\"_blank\">en este &#8220;Documento de Word&#8221;<\/a>, \u00bfes en serio DELL? Word?, en 2015 a\u00fan distribuyes tutoriales\u00a0en Word?.<\/p>\n<p>&nbsp;<\/p>\n<div class=\"pvc_clear\"><\/div>\n<p id=\"pvc_stats_8573\" class=\"pvc_stats all  \" data-element-id=\"8573\" style=\"\"><i class=\"pvc-stats-icon medium\" aria-hidden=\"true\"><svg aria-hidden=\"true\" focusable=\"false\" data-prefix=\"far\" data-icon=\"chart-bar\" role=\"img\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" class=\"svg-inline--fa fa-chart-bar fa-w-16 fa-2x\"><path fill=\"currentColor\" d=\"M396.8 352h22.4c6.4 0 12.8-6.4 12.8-12.8V108.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v230.4c0 6.4 6.4 12.8 12.8 12.8zm-192 0h22.4c6.4 0 12.8-6.4 12.8-12.8V140.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v198.4c0 6.4 6.4 12.8 12.8 12.8zm96 0h22.4c6.4 0 12.8-6.4 12.8-12.8V204.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v134.4c0 6.4 6.4 12.8 12.8 12.8zM496 400H48V80c0-8.84-7.16-16-16-16H16C7.16 64 0 71.16 0 80v336c0 17.67 14.33 32 32 32h464c8.84 0 16-7.16 16-16v-16c0-8.84-7.16-16-16-16zm-387.2-48h22.4c6.4 0 12.8-6.4 12.8-12.8v-70.4c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v70.4c0 6.4 6.4 12.8 12.8 12.8z\" class=\"\"><\/path><\/svg><\/i> <img loading=\"lazy\" decoding=\"async\" width=\"16\" height=\"16\" alt=\"Loading\" src=\"https:\/\/la-uno.com\/blog\/wp-content\/plugins\/page-views-count\/ajax-loader-2x.gif\" border=0 \/><\/p>\n<div class=\"pvc_clear\"><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Hace unos meses se di\u00f3 la noticia que Lenovo hab\u00eda estado vendiendo equipos con un rootkit, el llamado SuperFish, donde b\u00e1sicamente el rootkit puede firmar certificados y hacerlos pasar por v\u00e1lidos, esto permite los ataques &#8220;Man in the Middle&#8221;. Pensando un poco mal, esto b\u00e1sicamente le permite a Lenovo interceptar el tr\u00e1fico web de tu&hellip;<\/p>\n<div class=\"pvc_clear\"><\/div>\n<p id=\"pvc_stats_8573\" class=\"pvc_stats all  \" data-element-id=\"8573\" style=\"\"><i class=\"pvc-stats-icon medium\" aria-hidden=\"true\"><svg aria-hidden=\"true\" focusable=\"false\" data-prefix=\"far\" data-icon=\"chart-bar\" role=\"img\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\" class=\"svg-inline--fa fa-chart-bar fa-w-16 fa-2x\"><path fill=\"currentColor\" d=\"M396.8 352h22.4c6.4 0 12.8-6.4 12.8-12.8V108.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v230.4c0 6.4 6.4 12.8 12.8 12.8zm-192 0h22.4c6.4 0 12.8-6.4 12.8-12.8V140.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v198.4c0 6.4 6.4 12.8 12.8 12.8zm96 0h22.4c6.4 0 12.8-6.4 12.8-12.8V204.8c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v134.4c0 6.4 6.4 12.8 12.8 12.8zM496 400H48V80c0-8.84-7.16-16-16-16H16C7.16 64 0 71.16 0 80v336c0 17.67 14.33 32 32 32h464c8.84 0 16-7.16 16-16v-16c0-8.84-7.16-16-16-16zm-387.2-48h22.4c6.4 0 12.8-6.4 12.8-12.8v-70.4c0-6.4-6.4-12.8-12.8-12.8h-22.4c-6.4 0-12.8 6.4-12.8 12.8v70.4c0 6.4 6.4 12.8 12.8 12.8z\" class=\"\"><\/path><\/svg><\/i> <img loading=\"lazy\" decoding=\"async\" width=\"16\" height=\"16\" alt=\"Loading\" src=\"https:\/\/la-uno.com\/blog\/wp-content\/plugins\/page-views-count\/ajax-loader-2x.gif\" border=0 \/><\/p>\n<div class=\"pvc_clear\"><\/div>\n","protected":false},"author":1,"featured_media":8576,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[37,296],"tags":[],"class_list":["post-8573","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-seguridad","category-tecnologia"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/la-uno.com\/blog\/wp-content\/uploads\/2015\/11\/url.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p529Uq-2eh","jetpack-related-posts":[{"id":6141,"url":"https:\/\/la-uno.com\/blog\/2015\/02\/20\/pcs-de-lenovo-incluyen-adware-que-permite-ataques-man-in-the-middle\/","url_meta":{"origin":8573,"position":0},"title":"PCs de Lenovo incluyen adware que permite ataques &#8220;Man in the middle&#8221;","author":"marco","date":"February 20, 2015","format":false,"excerpt":"Lenovo est\u00e1 vendiendo computadoras que vienen con un adware pre-instalado que piratea la sesiones web encriptadas y que hace que los usuarios sean vulnerables a ataques \"Man in the middle\". La parte critica es que Lenovo distribuye sus equipos con este adware de la compa\u00f1\u00eda \"Superfish\". Este adware inyecta publicidad\u2026","rel":"","context":"In &quot;Seguridad&quot;","block_context":{"text":"Seguridad","link":"https:\/\/la-uno.com\/blog\/category\/seguridad\/"},"img":{"alt_text":"man-in-the-middle-640x316","src":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2015\/02\/man-in-the-middle-640x316.png?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2015\/02\/man-in-the-middle-640x316.png?resize=350%2C200 1x, https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2015\/02\/man-in-the-middle-640x316.png?resize=525%2C300 1.5x"},"classes":[]},{"id":5918,"url":"https:\/\/la-uno.com\/blog\/2014\/09\/05\/google-busca-acelerar-el-final-de-soporte-para-sha-1-autoridades-certificadoras-nerviosas\/","url_meta":{"origin":8573,"position":1},"title":"Google busca acelerar el final de soporte para SHA-1, autoridades certificadoras nerviosas","author":"marco","date":"September 5, 2014","format":false,"excerpt":"\u00a0 \u00a0 Google recientemente anunci\u00f3 que terminar\u00eda el soporte para SHA-1\u00a0en los certificados SSL\/TLS en Google Chrome, a lo que las autoridades certificadoras se est\u00e1n oponiendo. Google hizo el anuncio el pasado 20 de Agosto en la lista de correos relativa a seguridad, es una decisi\u00f3n que ya se sab\u00eda\u2026","rel":"","context":"In &quot;Certificados&quot;","block_context":{"text":"Certificados","link":"https:\/\/la-uno.com\/blog\/category\/certificados\/"},"img":{"alt_text":"ssl lock","src":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2014\/09\/ssl-image.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":6381,"url":"https:\/\/la-uno.com\/blog\/2015\/02\/20\/mi-lenovo-esta-infectado-como-saberlo-2\/","url_meta":{"origin":8573,"position":2},"title":"\u00bfMi Lenovo est\u00e1 infectado? Como saberlo.","author":"marco","date":"February 20, 2015","format":false,"excerpt":"Lenovo, de los mayores fabricantes de computadoras del mundo se ha visto envuelto en una pol\u00e9mica debido a que de fabrica se le complemento con un software no deseado, Superfish es un adware que muestra publicidad donde no queremos que aparezca, cambiando la configuraci\u00f3n de las paginas en el navegador,\u2026","rel":"","context":"In &quot;Certificados&quot;","block_context":{"text":"Certificados","link":"https:\/\/la-uno.com\/blog\/category\/certificados\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2015\/02\/ad.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2015\/02\/ad.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2015\/02\/ad.jpg?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":5620,"url":"https:\/\/la-uno.com\/blog\/2014\/10\/31\/las-grandes-empresas-ya-no-son-el-blanco-principal\/","url_meta":{"origin":8573,"position":3},"title":"Las grandes empresas ya no son el blanco principal","author":"marco","date":"October 31, 2014","format":false,"excerpt":"A como va a avanzando el tiempo y con la creaci\u00f3n de nuevas tecnolog\u00edas de la informaci\u00f3n nos damos cuenta que \u00a0lo que antes era com\u00fan est\u00e1 pasando a un segundo plano, lo vemos en la constante creciente comunidad social de Internet, hasta la despedida al soporte para sistemas operativos,\u2026","rel":"","context":"In &quot;Certificados&quot;","block_context":{"text":"Certificados","link":"https:\/\/la-uno.com\/blog\/category\/certificados\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2014\/10\/pass.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2014\/10\/pass.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2014\/10\/pass.jpg?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":5935,"url":"https:\/\/la-uno.com\/blog\/2014\/09\/10\/el-poder-de-los-servidores-dedicados\/","url_meta":{"origin":8573,"position":4},"title":"El poder de los servidores dedicados","author":"marco","date":"September 10, 2014","format":false,"excerpt":"La modalidad mas usada en paginas web es el alojamiento compartido lo que significa que no todos conocen el poder que da el disponer de un servidor dedicado, ya que a diferencia del alojamiento compartido los recursos que tiene el equipo no se reparten entre un numero indeterminado de usuarios,\u2026","rel":"","context":"In &quot;Internet&quot;","block_context":{"text":"Internet","link":"https:\/\/la-uno.com\/blog\/category\/internet\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2014\/09\/servidores.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2014\/09\/servidores.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2014\/09\/servidores.jpg?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":11149,"url":"https:\/\/la-uno.com\/blog\/2018\/05\/17\/chrome-da-un-empujon-mas-hacia-ssl\/","url_meta":{"origin":8573,"position":5},"title":"Chrome da un empuj\u00f3n mas hacia SSL","author":"marco","date":"May 17, 2018","format":false,"excerpt":"Si llevas mas de 1 mes navegando en internet te habr\u00e1s dado cuenta que hay sitios con \"un candidato\" o un sello verde, y otros no. Esto es porque unos usan HTTPS y otros HTTP. HTTPS es el mismo protocolo HTTP para transportar los datos desde el servidor a tu\u2026","rel":"","context":"In &quot;Internet&quot;","block_context":{"text":"Internet","link":"https:\/\/la-uno.com\/blog\/category\/internet\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2018\/05\/Screen_Shot_2018_02_08_at_12.01.48_PM.png.jpeg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2018\/05\/Screen_Shot_2018_02_08_at_12.01.48_PM.png.jpeg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2018\/05\/Screen_Shot_2018_02_08_at_12.01.48_PM.png.jpeg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/la-uno.com\/blog\/wp-content\/uploads\/2018\/05\/Screen_Shot_2018_02_08_at_12.01.48_PM.png.jpeg?resize=700%2C400&ssl=1 2x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/posts\/8573","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/comments?post=8573"}],"version-history":[{"count":2,"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/posts\/8573\/revisions"}],"predecessor-version":[{"id":8577,"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/posts\/8573\/revisions\/8577"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/media\/8576"}],"wp:attachment":[{"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/media?parent=8573"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/categories?post=8573"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/la-uno.com\/blog\/wp-json\/wp\/v2\/tags?post=8573"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}