Live data from Hacker News

LG monitors silently install software through Windows Update without consent

videocardz.com

351–360 of 671 posts

Re: LG monitors silently install software through Windows Update without consent

#351

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

Thanks - really got my attention. And, the video makes me sick.

I'm still looking at my 10 year-old LG monitor with suspicion, now, but I'm thinking (hoping) it's just too old...

Re: LG monitors silently install software through Windows Update without consent

#352
post #36

Earlier quoted context omitted.

I can only conclude that Windows is basically malware now... Thank $deity I haven't used any form of Windows for 10+ years anymore.

How it it a Windows issue that driver developers pack garbage with their drivers? If Linux supported loading 3rd party drivers (it mostly doesn't, and if Windows did that, the whole internet would be up in arms about Microsoft locking down their OS), it would have exactly the same issues. This is basically the same as downloading a program, running it and when it downloads garbage on your computer, complaining that W…

> How it it a Windows issue that driver developers pack garbage with their drivers?

Because windows update automatically installs the garbage when the device is connected.

Microsoft could control the content of the software it automatically installs, but they don't. That's the issue.

Re: LG monitors silently install software through Windows Update without consent

#353
post #236

Earlier quoted context omitted.

I don't think they are anymore. The vast majority of ordinary person computer/internet use has already moved to smartphones, tablets, smart TVs and other such devices. It seems nowadays many people don't even know the basics about how to use a desktop operating system.

I find this hard to believe considering how bad the UIs are on phones and TVs. Even google.com does not offer feature parity between their desktop and mobile websites. My phone still didn't come with a functional paint or notepad apps. Google docs is a horrible experience on phones (but at least it works now - a few years ago it was straight up unusable). And you're telling me that this is the only computing platform…

My phone still doesn't have a calculator app. The thought of trying to add one that isnt wolfram alpha is anxiety-producing.

Re: LG monitors silently install software through Windows Update without consent

#355

Earlier quoted context omitted.

I have absolutely no clue what you are talking about. There is no mechanism in standard Linux distributions to automatically download software from a vendor when you plug a device (apart from firmware updates through fwupd, but those are curated). So perhaps you could elaborate?

> no mechanism in standard Linux distributions Now, when I first ran Linux in the mid-1990s, this was true. "Plug-and-play" is just peaking over the horizon. Other systems have had it for years (the Amigans for example) but for the PC it's pretty new. But today a whole lot of mechanism is spun up when the kernel realises something new was added. A netlink socket talks to a udev daemon, in userspace and that daemon, b…

> Where the Adware comes from is of no consequence to the end user. "Um actually, the file came from Microsoft's servers" is irrelevant.

Wrong. If I have a business relationship with MS where I've agreed to accept adware, this is meaningful. If I've bought a monitor that never informs me that it is installing adware, especially adware on their servers that could change at any time, this is a problem. It is different when the mailman opens my mailbox than when the person who cuts my grass opens my mailbox.

> The problem isn't that your Windows PC can end up running software because a device was plugged in, that's actually convenient and a benefit to many people and that works in Linux.

It's also a problem that Linux has allowed itself to be invaded by a creepy octopus of a user-hating system with tons of mutual dependencies, trying to gradually replace everything on your OS.

The problem is that Windows is running things without your explicit approval. The problem with Windows and new Linux is that it even has the ability to do so. Security became protecting the system from the user, rather than protecting the user from the network and devices.

The idea that userspace can do anything in userspace is a bit of a red herring, though. The question is how the malware gets into userspace in the first place. In the case of Windows and systemd, the malware is integral to the OS itself.

> that's actually convenient and a benefit to many people

To reiterate, it is not in any way convenient or a benefit to anyone that software is installed silently and secretly by their monitor. The idea that having to approve arbitrary software installation is some great inconvenience doesn't pass the laugh test.

Re: LG monitors silently install software through Windows Update without consent

#357

Oh, come on! LG force fed people with ads on TVs. And now everybody acts surprised? Do. Not. Buy. LG. There are a lot of decent alternatives. Stop buying from the sick heads.

> Do. Not. Buy. LG. > There are a lot of decent alternatives. Can you name them? Dell and Samsung are the main competitors for displays as far as I'm aware, Dell tends to be hit-or-miss when it comes to monitor features and quality, Samsung's high end displays come preloaded with a whole OS. The monitor market is really in the toilet.

Samsung are as bad as LG for advertising in their TVs.

I'd happily buy and use a Dell monitor in my front room next time around. I don't use the speakers or tuner in my current TV so I'm not sure what I'd be missing out on.

Re: LG monitors silently install software through Windows Update without consent

#358
post #71

And Razer, Logitech, nvidia and everyone else who has it's driver package accepted into WU. No, you can't have a "(o) just the driver" checkbox because... honestly there are a lot of reasons and the device manufacturers are the guys who demand that in the first place.

…Do these devices just not work on Linux or something?

Depends on what you are calling 'working'.

Basic drivers prove a basic functionality.

Re: LG monitors silently install software through Windows Update without consent

#359

Earlier quoted context omitted.

Very helpful, thank you. But it does remind me of that Yzma quote in The Emperor's New Groove: "Why do we even have that lever?"

> Why do we even have that lever For plug-and-play devices with multiple configuration knobs. It is nice to be able to click through a printer wizard to configure how one wants to print their documents. Likewise with an audio interface: loopback settings, codec, sampling rate, gain and volume of channels, etc. Or consider a USB CNC mill; configuring things like milling revolution rate, setting which bit is installed,…

If there is a system where someone smashes through your wall to deliver you some food, and we ask "why do we even have this guy-smashes-through-wall system?", "So we can have dinner" does not answer that question.

Re: LG monitors silently install software through Windows Update without consent

#360

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

>This situation has.. no precedent as far as I can tell.. Printer, mouse, tablet and display tablet makers use this to insert their crapware since at least Windows Vista or Windows 7, I think. The last one I remember is plugging a Razer mouse just to watch it instantly pulling 1.5GB of bloated junk with "telemetry" exfiltrating the data from my gaming PC in realtime. At least it doesn't leave my mouse in a non-workin…

Microsoft could end up being a higher barrier but how much do we really want that?

To me, it seems like LG is the one to blame.

Post reply on HN