Live data from Hacker News

LG monitors silently install software through Windows Update without consent

videocardz.com

191–200 of 671 posts

Re: LG monitors silently install software through Windows Update without consent

#191
post #109

A monitor cannot install software on your computer by the way. It's Windows installing this software automatically (for some reason), so the blame should be on Microsoft. Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem.

The blame should be on Microsoft and LG, both.

Re: LG monitors silently install software through Windows Update without consent

#192

Earlier quoted context omitted.

[flagged]

that's funny; because my root cause analysis didn't show the user as the person making the decision to show themselves ads? did yours, or was the victim blaming intentional?

The word “victim” is honestly pretty funny in this context. Nothing really happened to anyone.

Re: LG monitors silently install software through Windows Update without consent

#193
post #121

Earlier quoted context omitted.

If you have been reading the news about Windows 11 then I will enlighten you -- they view the Windows 11 consumer business as a cost center that must be mitigated. As such, all manner of monetization has been approved and it will continued to be approved without regard for user experience. This article obviates that this is not an LG problem, it is a Microsoft problem. Also, don't fool yourself if you think this won'…

Just look at Microsoft’s revenue breakdown that they publish. Windows revenue is alarmingly small. I don’t think it’s a loss leader but Microsoft gets almost nothing from OEM Windows licenses and basically nobody buys it retail. This is not coming to the Linux world. The moment this sort of thing happens, distros get forked.

Aren’t ms completely dependent on consumer windows for mindshare?

I doubt anyone would bother getting into programming with ms tech unless they just happened to run it on their desktop.

Re: LG monitors silently install software through Windows Update without consent

#194

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

A few years ago, plugging in a Razer USB mouse made Windows download and run a installer from which the current user could start PowerShell with administrator privileges. Razer first tried to downplay the issue, but fixed it later. [1] The USB protocol does not have any authentication, just a VendorID/ProductID pair: 2×16 bits that Windows uses for looking up the driver package to install. Programming a MCU to use an…

not a usb programmer, but are you saying i can buy any old usb chip and program it with any vendors ID and spoof windows into giving me admin? if so, gj micrcosoft.

Re: LG monitors silently install software through Windows Update without consent

#195
post #136
post #36

Earlier quoted context omitted.

I can only conclude that Windows is basically malware now... Thank $deity I haven't used any form of Windows for 10+ years anymore.

You're missing out on 37 different unrelated things being named copilot.

81, not 37: https://teybannerman.com/strategy/2026/03/31/how-many-micros...

Re: LG monitors silently install software through Windows Update without consent

#196

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

Logitech pulls (pulled?) the same shit when you connect one of their pheriferals to your PC.

Re: LG monitors silently install software through Windows Update without consent

#197

Earlier quoted context omitted.

> This situation has.. no precedent as far as I can tell.. Microsoft has been allowing this sort of ludicrous behavior for decades at this point, it's not a new issue. What's new is how visible LG made their malware, compared to previous auto-installs that happen like this, where they try to make the thing not so in your face, as they know there will be a huge backlash. I don't know what Microsoft is thinking even al…

>I don't know what Microsoft is thinking even allowing and enabling this sort of thing This has been a feature since Windows 7, and it worked great since it would pull all necessary drivers after installation without you going hunting on the internet like in the Windows XP days. Just that no HW manufacturer thought to push spyware in their driver repos at that point to improve some team's KPIs.

Auto-run when inserting a CD worked great, until people realized you could do bad stuff with it. User action must be required to run or install new software.

Re: LG monitors silently install software through Windows Update without consent

#198
post #192

Earlier quoted context omitted.

that's funny; because my root cause analysis didn't show the user as the person making the decision to show themselves ads? did yours, or was the victim blaming intentional?

The word “victim” is honestly pretty funny in this context. Nothing really happened to anyone.

I wouldn't classify getting random malware as "nothing happening".

Re: LG monitors silently install software through Windows Update without consent

#199
post #183
post #172

Earlier quoted context omitted.

> why Microsoft allows any 'driver utility' to have internet access Firmware updates for devices are not a thing in your world?

It seems like windows update should handle distributing the verified new firmware file if it is also distributing the driver utility to avoid any issues like this post talks about.

That would be a good idea actually, but I'm not sure how viable that is within the current Windows Update instrumentation. Allowing local binaries to fetch random URLs through the Windows Update API is no different from them using the HTTP Service unless there's some kind of whitelisting/validation happening there. The alternative would be that Microsoft uses their own Windows Update cdn to host random firmware files that they're not able to verify themselves. Both cases sound like maintenance overhead for Microsoft without benefit to them.

Re: LG monitors silently install software through Windows Update without consent

#200
post #193

Earlier quoted context omitted.

Just look at Microsoft’s revenue breakdown that they publish. Windows revenue is alarmingly small. I don’t think it’s a loss leader but Microsoft gets almost nothing from OEM Windows licenses and basically nobody buys it retail. This is not coming to the Linux world. The moment this sort of thing happens, distros get forked.

Aren’t ms completely dependent on consumer windows for mindshare? I doubt anyone would bother getting into programming with ms tech unless they just happened to run it on their desktop.

MS owns Typescript and NPM and Azure and LinkedIn. I know you meant programming on Windows, but even if Windows disappears, many of us will owe our job to Microsoft.
Post reply on HN