Duo Labs security researchers found a few sketchy certificates on a Dell Inspiron 14 laptop we purchased last week. The eDellRoot root certificate is shipped preinstalled with an associated private key, which is a critical mistake. An attacker could sniff a Dell users web browsing traffic and manipulate their traffic to deliver malware. We also found another certificate mishap on our Dell machine – an Atheros Authenticode signing certificate also shipped with the Bluetooth software. Official remediation instructions and a patch are now available from Dell.”]
Source: https://duo.com/decipher/dude-you-got-dell-d-publishing-your-privates