Live data from Hacker News

LG monitors silently install software through Windows Update without consent

videocardz.com

71–80 of 671 posts

Re: LG monitors silently install software through Windows Update without consent

#71

And Razer, Logitech, nvidia and everyone else who has it's driver package accepted into WU. No, you can't have a "(o) just the driver" checkbox because... honestly there are a lot of reasons and the device manufacturers are the guys who demand that in the first place.

…Do these devices just not work on Linux or something?

Re: LG monitors silently install software through Windows Update without consent

#72

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

> This situation has.. no precedent as far as I can tell.. Microsoft has been allowing this sort of ludicrous behavior for decades at this point, it's not a new issue. What's new is how visible LG made their malware, compared to previous auto-installs that happen like this, where they try to make the thing not so in your face, as they know there will be a huge backlash. I don't know what Microsoft is thinking even al…

Maybe some decision makers do indeed have negative aspirations…

Re: LG monitors silently install software through Windows Update without consent

#73
post #59

Earlier quoted context omitted.

So because the US is the largest consumer market in the world, the TVs LG sell in the US has more ads in the UIs than TVs sold in Europe? Why would it be like that? If that theory is true, does that mean TVs sold in the European Union then have more ads than TVs sold in China, as the EU consumer market is larger than the China one?

> Why would it be like that? Ads aren't free - this isn't a "theory," it's basic economics. Cost can be political (you cause the entire EU government to outlaw the practice) or monetary. > If that theory is true, does that mean TVs sold in the European Union then have more ads than TVs sold in China Probably? The markets have little overlap, but again, this is a function of cost. Where people have more money to spend…

> Probably?

Spoiler: LG TVs sold in China also seem to have more ads than the LG TV we end up buying in Europe. Seemingly (https://news.ycombinator.com/item?id=48957229) with Samsung it's the same. Even though EU is a larger consumer market than China, so obviously your theory doesn't hold, it's something else than "Bigger consumer markets === more ads in UIs in TVs".

Re: LG monitors silently install software through Windows Update without consent

#74

[Laughs in Linux/BSD]

I don't know about the BSDs but in Linux the reason is that a volunteer (in principle it could be a paid employee, I guess maybe it is for RHEL etc?) decides what gets installed It is absolutely possible that when you plug in an LG display it installs and runs software on your Linux system†, just that rather than "Somebody at LG who earned a bonus" the decision maker was Sara in Portugal who fat fingered a change whe…

I have absolutely no clue what you are talking about. There is no mechanism in standard Linux distributions to automatically download software from a vendor when you plug a device (apart from firmware updates through fwupd, but those are curated).

So perhaps you could elaborate?

Re: LG monitors silently install software through Windows Update without consent

#75

Assuming they don't get a revenue cut, pushing back on Microsoft can in principle be effective here. Microsoft decides what happens here, and presumably today they just take it on trust that hardware makers know what software to install. New driver? Sure. McSpam installer? OK. Maybe they have a guideline saying "Don't ship unrelated garbage" but today it's not enforced because why would you do that? If the Microsoft…

Honestly yeah MS should get all the flack (which is mostly deserved) of this Manufacturer does whatever crap they want with "it works" and then MS gets the complaints A driver should only be that. A driver

> MS should get all the flack (which is mostly deserved) of this

I don't see why we can't blame both here? And I'm a big LG user, I'm writing this comment via a LG monitor, our main TV is LG, dishwasher and clotheswasher is also LG. But still, that Microsofts enables this behavior should rightly put them at the stake for this, and also LG should get flack too, just because something is possible doesn't mean you have to automatically go that route.

Re: LG monitors silently install software through Windows Update without consent

#76
post #62

Earlier quoted context omitted.

I don't feel like spending my money on some horrible corpo pulling out stuff like this, even if I've been using linux since 2006. Who can tell if they will do this to other OS in the future?

My understanding is that the monitor doesn't do anything by itself - it's just Windows detecting the device and automatically downloading and installing LG:s proprietary add-on software. The monitor itself isn't attacking the machine by exploiting vulnerabilities or spoofing user input or anything like that. So you won't have this problem if you're running Linux and other Free Software under your own control. The pro…

> My understanding is that the monitor doesn't do anything by itself

The understanding should also included that unless LG actually asked Microsoft to implement this autoinstalling malware, it wouldn't have been installed by itself.

I think parent commentator is making the argument that they don't want to financially support companies who engage in these sort of things, regardless if this particular scenario applies to their environment or not.

Re: LG monitors silently install software through Windows Update without consent

#77

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

USB devices can also do this now. I have a Razor microphone which is otherwise a great device and requires no software to function. At soon as you plug it in to windows it tries to install some Razor crapware.

It's not quite as bad because it's not silent and you can say no, but I'm pretty sure that's only because Razor decided not to be completely evil.

Re: LG monitors silently install software through Windows Update without consent

#78
post #13

Why do people even install 'drivers' for things like monitors. (Or usb devices running 'standard' protocols). The OS handles these just fine by itself.

the OS handles these now by installing the malware. Zero click.

Re: LG monitors silently install software through Windows Update without consent

#79
post #34

Earlier quoted context omitted.

> Americans are receiving more ads than in other parts of the world Ads aren't free, so yes, it would stand to reason that people in the largest consumer market in the world might garner more ad spend.

So because the US is the largest consumer market in the world, the TVs LG sell in the US has more ads in the UIs than TVs sold in Europe? Why would it be like that? If that theory is true, does that mean TVs sold in the European Union then have more ads than TVs sold in China, as the EU consumer market is larger than the China one?

Europe has strong GDPR regulations. As for China, I've heard that hardware margins are low, so the hardware itself is just bait, and they embed ads in the software inside. But this is just something I heard from another Korean programmer, so it's not really a serious claim

Re: LG monitors silently install software through Windows Update without consent

#80

They used to call this spyware/malware. Now it's a regular practice by eng. teams and managers inside these big corp. Well played guys :) Congrats with new type of tricks

I would be very surprised if some random manager of some low level engineering team made this decision. It seems more likely this was a marketing or partner relations department idea that was presented to high level leadership.

I don't understand why we expect some manager somewhere to stop stuff like this.

Post reply on HN