Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LG monitors silently install software through Windows Update without consent

videocardz.com

Post reply on HN
Print view View original

321–330 of 671 posts

Re: LG monitors silently install software through Windows Update without consent

#321

Post by scottydelta »

newsoftheday wrote: post #298
scottydelta wrote: post #262

Similarly after getting annoyed at my TV for showing ads and other privacy issues, I have started working on a smart TV version of the casting device my startup makes. I have been using it for both personal use and other work use-cases, here is a demo: https://www.youtube.com/watch?v=jObZzI2_pv0 Just like youtube, I can log in to my netflix, amazon prime and then use the touch screen to choose the movie to watch and…

We have a smart TV on the way. We do not plan to run the setup, it won't have Internet access. We plan to do what we've done for over a decade now, connect our Kubuntu laptop in the entertainment center to it and select it as the default input device. And occasionally watch OTA TV shows. So we will use it as ... a monitor and plain TV, that happens to have far better video and sound quality than our old TV.

that's the same conclusion I came to and the device I am developing is basically a Raspberry Pi with my own modified OS that has a casting canvas and it can show all kinds of content.

No third-party installs, ads and spywares!

Re: LG monitors silently install software through Windows Update without consent

#322

Post by kjs3 »

Chaosvex wrote: post #266
kjs3 wrote: post #259

Earlier quoted context omitted.

The last one I remember is plugging a Razer mouse Oh, yeah. Bought this overpriced but heavily hyped Razer mouse and it wouldn't even work right until it had an internet connection. A MOUSE. I'd never encountered something so blatantly customer hostile in my life. Never even looked at another Razer product, never will, and will tell anyone who will listen that Razer is a terrible company full of objectively terrible…

Razer was always low quality garbage at premium prices. Gamer marketing for you.

Gamer marketing for you.

Which I fell for. Fool me once and all that...

Re: LG monitors silently install software through Windows Update without consent

#324

Post by chuckadams »

solarkraft wrote: post #204
eastbound wrote: post #200

Earlier quoted context omitted.

MS owns Typescript and NPM and Azure and LinkedIn. I know you meant programming on Windows, but even if Windows disappears, many of us will owe our job to Microsoft.

They own Typescript? I wasn’t aware that they control the organization, but that ought to be easy enough to fork. NPM is a bigger one, but also not too huge. Azure is only used by people who already have Microsoft/Windows buy-in.

They created TypeScript, and maintain it now. It's not exactly a business for them, no one is buying "TypeScript Enterprise" subscriptions. It's all under the Apache License 2.0 and certainly big enough that if they started pulling anything untoward, it would see a fork. Sometimes Microsoft produces an unalloyed good, they're not a monolith.

Re: LG monitors silently install software through Windows Update without consent

#325

Post by LoganDark »

dimgl wrote: post #288
Chaosvex wrote: post #266

Earlier quoted context omitted.

Razer was always low quality garbage at premium prices. Gamer marketing for you.

What do you recommend instead? In my opinion the Razer mice are always superior for FPS.

I know hardly anything about FPS but the reason I like Razer mice is the hardware macros. Configuration profiles are saved to the device and macros are performed at the hardware level. Some actions work with the razer software but most of them don't have to.

Re: LG monitors silently install software through Windows Update without consent

#326

Post by kstrauser »

ihsw wrote: post #121
embedding-shape wrote: post #27

Earlier quoted context omitted.

> This situation has.. no precedent as far as I can tell.. Microsoft has been allowing this sort of ludicrous behavior for decades at this point, it's not a new issue. What's new is how visible LG made their malware, compared to previous auto-installs that happen like this, where they try to make the thing not so in your face, as they know there will be a huge backlash. I don't know what Microsoft is thinking even al…

If you have been reading the news about Windows 11 then I will enlighten you -- they view the Windows 11 consumer business as a cost center that must be mitigated. As such, all manner of monetization has been approved and it will continued to be approved without regard for user experience. This article obviates that this is not an LG problem, it is a Microsoft problem. Also, don't fool yourself if you think this won'…

It hasn’t come for the much larger Mac world yet.

I think literally the only driver I’ve installed for any accessory of any kind is the config utility for a Stream Deck. I certainly never install mouse (thank you Steermouse!) or printer drivers, let alone a monitor driver of all things.

Re: LG monitors silently install software through Windows Update without consent

#327

Post by MatejKafka »

masfuerte wrote: post #296
MatejKafka wrote: post #242

Earlier quoted context omitted.

How exactly do you propose to sandbox drivers running in kernel space? Do you even know how drivers work? (I'm guessing no, based on this comment)

The User-Mode Driver Framework is a thing. Most plug-in devices do not need (or have) a kernel-mode driver.

Yes, but unless all 3rd party drivers can run in userspace (which is not really feasible), Microsoft needs to give vendors the option to install a kernel driver, at which point a vendor can always decide to ship a kernel driver and bypass any restrictions.

Imo, the only thing Microsoft can meaningfully do here from their side is threaten LG with pulling all their drivers if they keep doing this.

Re: LG monitors silently install software through Windows Update without consent

#328

Post by stockmarketer »

devttyeu wrote: post #20

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

>This situation has.. no precedent as far as I can tell..

I want to believe you, but somehow I can't, I feel like our industry has already mastered the art of installing malware on customers' devices.

Re: LG monitors silently install software through Windows Update without consent

#329

Post by aeon_ai »

dimgl wrote: post #288
Chaosvex wrote: post #266

Earlier quoted context omitted.

Razer was always low quality garbage at premium prices. Gamer marketing for you.

What do you recommend instead? In my opinion the Razer mice are always superior for FPS.

Logitech have always made great gaming mice in my experience, at a reasonable price

Re: LG monitors silently install software through Windows Update without consent

#330

Post by MatejKafka »

milesvp wrote: post #310
MatejKafka wrote: post #242

Earlier quoted context omitted.

How exactly do you propose to sandbox drivers running in kernel space? Do you even know how drivers work? (I'm guessing no, based on this comment)

There are people working on this problem honestly. The general solution 10 years ago was a micro kernel. Today, I’m not sure. The linux model is starting to look dated, with similar problems elsewhere. Modern hardware design looks less and less like classic textbook design, with all kinds of random chips having direct memory access to memory the cpu uses on some shared bus. Where even things like on board blue tooth…

Agree with all of those points and there are some partial solutions (IOMMU, userspace drivers, virtualization,...), but we're still quite far from being able to safely connect untrusted hardware and load its driver without effectively giving it privileged access.
Post reply on HN