The Ars Technica story [1] has more detailed coverage.

[1] http://arstechnica.com/security/2015/02/lenovo-pcs-ship-with...