I’ve been twitchy about Lenova since they got caught selling computers with a rootkit that reinstalled crap-ware that users had uninstalled. A user would uninstall useless software from their computer, and when they rebooted, the rootkit would kick in and reinstall the bloatware.

The “rootkit"-style covert installer, dubbed the Lenovo Service Engine (LSE), works by installing an additional program that updates drivers, firmware, and other pre-installed apps. The engine also “sends non-personally identifiable system data to Lenovo servers,” according to the company. The engine, which resides in the computer’s BIOS, replaces a core Windows system file with its own, allowing files to be downloaded once the device is connected to the internet.

But that service engine also put users at risk.

In a July 31 security bulletin, the company warned the engine could be exploited by hackers to install malware. The company issued a security update that removed the engine’s functionality, but users must install the patch manually.

They had previously been caught selling computers with adware installed on them.

Earlier this year, the computer maker was forced to admit it had installed Superfish adware over a three-month period on new machines sold through retail channels. The adware had the capability to intercept and hijack internet traffic flowing over secure connections, including online stores, banks, among others.

Users were told they should “not use their laptop for any kind of secure transactions until they are able to confirm [the adware] has been removed,” security researcher Marc Rogers told ZDNet at the time.

It was thought as many as 16 million consumers and bring-your-own-device users were affected by the preinstalled adware.

When it comes to PC OEMs I’ve observed that right now Dell has really good driver support. They’ve got increasingly good utilities for keeping drivers up to date and they’ve been doing a good job of loading drivers and their utilities into Microsoft’s relevant repositories where it makes sense, and that driver support tends to actually last multiple years. I can often pull down a new UEFI update for a 5 year old Dell PC, which is not something I can say of most hardware manufacturers.

So at the threat model of an enterprise org, I’d prefer Dell for that reason alone. Lenovo and HP have tried to implement some of that, HP seems to have given up after building the bare minimum and Lenovo has their typical wonky software that will become good after a few years if they keep investing developer time into it, but knowing Lenovo there’s about a 60% chance some new executive will come in and change direction, and the software will be made increasingly unusable then later discontinued due to lack of use

However for my personal computers, there’s a high chance it won’t even be running Windows so I just buy based on hardware & price alone