Lenovo's file-sharing app uses hardwired password '12345678' ... or no password at all

Lenovo ShareIT users, get patching: the PC maker's file-sharing app is pretty much unsecured. The software runs on Windows and Android devices, and creates a Wi-Fi hotspot allowing data to be exchanged – from phone to PC, PC to phone, etc. But the wireless network is pretty much unsecured on both platforms. In ShareIT for …

[Mark 85]

See Icon... That's about all that can be said.... sadly.

[Tony S]

Make that a double facepalm

[Roq D. Kasba]

Party like it's 1997

Because that's the last era any of this shit was acceptable

[macjules]

Re: Party like it's 1997

Umm, Tesco eventually were persuaded to stop storing plain text cookie data for such unimportant data as credit card details only in 2010. About the same time as they upgraded from NET1.1

[allthecoolshortnamesweretaken]

The fools!

Everybody who is really serious about security switched to '87654321' years ago!

[BongoJoe]

Re: The fools!

Can one actually have ROT-10 on digital passwords?

[caffeine addict]

Re: The fools!

ROT-10? Surely you mean ROT-5. Unless I'm missing a joke somewhere...

[Michael Wojcik]

Re: The fools!

Everybody who is really serious about security switched to '87654321' years ago!

Jenny uses "8675309".

[herman]

Re: The fools!

LOL - I wonder how many are old enough to get this joke.

[DropBear]

...in their defense - it IS called "ShareIT"...

[Anonymous Coward]

Or SHIT for short.

[Anonymous Coward]

I really am going to have to change my luggage password, this is getting ridiculous now.

[Halfmad]

I'll have to change both of mine, fortunately I wrote the codes "1234" and "5687" on the shackles so I didn't get locked out.

[Sir Runcible Spoon]

I had to buy some luggage with one of those TSA locks on it. Good job no-one else has a copy of the key

[macjules]

Just think how awful it might be if Homeland Security could check your bags with a universal baggage key whilst in transit via the USA...

[VinceH]

"I'll have to change both of mine, fortunately I wrote the codes "1234" and "5687" on the shackles so I didn't get locked out."

The mistake you made was writing the right code on the right shackle. What you should have done was write the code for each on the other shackle. That way, you'd be perfectly safe.

[Dan 55]

Or just uninstall it...

SMB/Bluetooth not good enough?

[Chloe Cresswell]

Re: Or just uninstall it...

Does anyone actually leave this shovelware one?

Shareit is one of the first things we uninstall on any lenovo machines.

[Anonymous Coward]

oh well

At least it wont take long to email the 6 people that use Lenovo bloatware.

[adam payne]

*reads article and just shakes head*

Rename app to Lenovo ShareIT & Everything Else.

[andy 103]

ShareIT?

F*ckIT

[Joe User]

Re: ShareIT?

More like "FuckwIT"....

[Old Handle]

Does this even count as a "vulnerability"? It doesn't sound like it was ever designed to be secure in the first place.

[Anonymous Cow Herder]

In other News

FBI get a court order forcing Lenovo make the OS more secure.

[Gis Bun]

Seems to me that there is non stop blunders by Lenovo. Have any of their stuff? Remove all but drivers. Even better, re-install the OS.