Live data from Hacker News

LG monitors silently install software through Windows Update without consent

videocardz.com

121–130 of 671 posts

Re: LG monitors silently install software through Windows Update without consent

#121

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

> This situation has.. no precedent as far as I can tell.. Microsoft has been allowing this sort of ludicrous behavior for decades at this point, it's not a new issue. What's new is how visible LG made their malware, compared to previous auto-installs that happen like this, where they try to make the thing not so in your face, as they know there will be a huge backlash. I don't know what Microsoft is thinking even al…

If you have been reading the news about Windows 11 then I will enlighten you -- they view the Windows 11 consumer business as a cost center that must be mitigated.

As such, all manner of monetization has been approved and it will continued to be approved without regard for user experience.

This article obviates that this is not an LG problem, it is a Microsoft problem.

Also, don't fool yourself if you think this won't come to the Linux world.

Re: LG monitors silently install software through Windows Update without consent

#122

Workaround: gpedit.msc Computer Configuration > Administrative Templates > System > Device Installation Prevent automatic download of applications associated with device metadata Set to enabled OK On home editions sans gpedit.msc: sysdm.cpl Hardware tab Click Device Installation Settings Under 'Do you want to automatically download manufacturers' apps for your devices?', select 'No' Save Changes

Very helpful, thank you. But it does remind me of that Yzma quote in The Emperor's New Groove: "Why do we even have that lever?"

Re: LG monitors silently install software through Windows Update without consent

#123
post #13

Why do people even install 'drivers' for things like monitors. (Or usb devices running 'standard' protocols). The OS handles these just fine by itself.

The article is about people NOT installing it but getting it installed anyway :)

As to why people do install such software? It sometimes provides additional features, controls and settings. For example with touchpad you could set the sensitivity, hot corners, set the scroll behaviour the way you like it, etc.

With monitors you might get a better colour profile (P3 instead of just sRGB), I don't know. I don't use monitors like this.

Re: LG monitors silently install software through Windows Update without consent

#124
post #109

A monitor cannot install software on your computer by the way. It's Windows installing this software automatically (for some reason), so the blame should be on Microsoft. Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem.

[flagged]

You are describing 'the blame should be on Windows'.

The consequence of Windows having the blame is that one should not buy it.

Re: LG monitors silently install software through Windows Update without consent

#125
post #36

Earlier quoted context omitted.

I can only conclude that Windows is basically malware now... Thank $deity I haven't used any form of Windows for 10+ years anymore.

This is one of those typical HN replies that adds absolutely nothing to the discussion.

Much like your own, and this one!

Re: LG monitors silently install software through Windows Update without consent

#127

They used to call this spyware/malware. Now it's a regular practice by eng. teams and managers inside these big corp. Well played guys :) Congrats with new type of tricks

If it's not malware then what is it called today?

"Telemetry." "Personalized experiences."

Basically doublespeak.

Re: LG monitors silently install software through Windows Update without consent

#128

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

>This situation has.. no precedent as far as I can tell..

Printer, mouse, tablet and display tablet makers use this to insert their crapware since at least Windows Vista or Windows 7, I think. The last one I remember is plugging a Razer mouse just to watch it instantly pulling 1.5GB of bloated junk with "telemetry" exfiltrating the data from my gaming PC in realtime. At least it doesn't leave my mouse in a non-working state when I disconnect the internet, like it used to. Thanks, Razer!

Microsoft is to blame here, really. They have a mechanism to block any vendor (supposedly to avoid reputational risks to their brand due to buggy drivers, at least that was their excuse back in the day), but aren't even using it to block these contraptions. Entire businesses are built on this, e.g. Razer is probably more of a marketing/data company now rather than a hardware shop.

Re: LG monitors silently install software through Windows Update without consent

#129

McAfee should be classified as a virus

If a software package can't be uninstalled through the normal process and needs a separate uninstaller program, it is similar to malware. Many anti-virus suites and anti-cheat software require this. Take from that what you will.

Re: LG monitors silently install software through Windows Update without consent

#130

Workaround: gpedit.msc Computer Configuration > Administrative Templates > System > Device Installation Prevent automatic download of applications associated with device metadata Set to enabled OK On home editions sans gpedit.msc: sysdm.cpl Hardware tab Click Device Installation Settings Under 'Do you want to automatically download manufacturers' apps for your devices?', select 'No' Save Changes

Very helpful, thank you. But it does remind me of that Yzma quote in The Emperor's New Groove: "Why do we even have that lever?"

[dead]
Post reply on HN