Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LG monitors silently install software through Windows Update without consent

videocardz.com

Post reply on HN
Print view View original

381–390 of 671 posts

Re: LG monitors silently install software through Windows Update without consent

#381

Post by drnick1 »

jdw64 wrote: post #52
embedding-shape wrote: post #43

Earlier quoted context omitted.

I don't see any details in any of the texts I came across, but in theory the implementation could be that Windows sees the ID of the monitor once connected through any sort of connection, then when matching ID is found it installs the malware. Rather than the installer is sent from the monitor to the computer. Would make updates a lot easier, and if they really want to spread this malware, can activate it for a lot m…

Most commercial solutions are Windows-based and use the Windows API. HDMI and DP also have two-way communication channels. This is something you learn when you do hardware coding.(Of course you already know this, but this is for the other people reading this comment.) Typically, the Windows update server downloads packages mapped to hardware IDs in the background. Since LG's business in Korea has been failing and the…

> In fact, the reason Linux is considered secure is simply because hardware vendors haven't standardized enough to build automatic deployment pipelines.

The Linux security model (sudo to install or update software) doesn't allow this. No reputable distribution would include a program that scans hardware identifiers and prompts the user for permission to install proprietary software from a third-party source. This is possible on Windows because of the "universal backdoor," aka Windows Update, with Microsoft's consent.

Re: LG monitors silently install software through Windows Update without consent

#382

Post by simoncion »

dimgl wrote: post #288
Chaosvex wrote: post #266

Earlier quoted context omitted.

Razer was always low quality garbage at premium prices. Gamer marketing for you.

What do you recommend instead? In my opinion the Razer mice are always superior for FPS.

If you can find an original Glorious [0] Model O, that's a nice piece of hardware. The new Model O looks like it only works with their new, totally garbage Glorious CORE v2 software.

If you never want to change the DPIs, lighting, or button assignments, & etc then you don't need the software... so if what the hardware does out of the box is fine for you, then you don't need to worry about how trash CORE v2 is.

CORE v1 is okay, but still notably worse than the Model O software. I don't know why they farmed out the development of CORE v2 to "the CEO's middle-school nephew who's 'good with computers'", but they did.

[0] ...they were originally called "Glorious PC Gaming Race" (in homage to the Reddit meme), but dropped that last bit from their company name a while back...

Re: LG monitors silently install software through Windows Update without consent

#384

Post by stavros »

Geezus_42 wrote: post #125
bcraven wrote: post #104

Earlier quoted context omitted.

This is one of those typical HN replies that adds absolutely nothing to the discussion.

Much like your own, and this one!

The GP comment adds social pressure so useless comments are less likely to be made.

Re: LG monitors silently install software through Windows Update without consent

#386

Post by solarkraft »

tbrake wrote: post #248
solarkraft wrote: post #202

Earlier quoted context omitted.

You’re acting like Microsoft aren’t pushing malware themselves.

That's just a parallel fact, no one's "acting" like anything? What were you actually trying to say?

I am saying that people here seem to be appealing to Microsoft as an authority that should be interested in stopping this, perhaps because they are morally superior or concerned about their reputation. They are not.

Re: LG monitors silently install software through Windows Update without consent

#387

Post by 999900000999 »

drnick1 wrote: post #372
999900000999 wrote: post #230

Earlier quoted context omitted.

Linux is great if you win the hardware support lottery. I've had several laptops where audio just doesn't work even on rolling releases. Or the screen freezing up constantly. This was all with relatively new hardware within the last year or so. My issue with the Linux community is if you bring this up it's all of a sudden the fault of everyone but Linux. The end user should of picked better hardware. The hardware OEM…

You don't have to win the hardware support lottery if you do a bit of research or buy a laptop made for it.

>or buy a laptop made for it.

Which is usually at least 2x as much if we're talking about buying a System 76 laptop.

Windows laptops go on sale very often.

Although I will admit I have an HP laptop I brought last December that worked out of the box with Ubuntu. Nvidia drivers and all.

Re: LG monitors silently install software through Windows Update without consent

#388

Post by drnick1 »

VorpalWay wrote: post #244
AlienRobot wrote: post #120

Earlier quoted context omitted.

Me on Windows 7: I don't want to use Linux, you have to keep configuring every single thing so it works. Me on Linux: I don't want to use Windows, you have to keep configuring every single thing so it doesn't show ads.

Linux usability has come a long way in recent years. I switched full time to Linux in 2006, but I can absolutely understand those who wouldn't back then. These days? Unless there is a specific piece of software that can't run on Linux (or under Wine), and there is no suitable replacement for it? Yeah I don't know why you would voluntarily stay on Windows (note voluntarily, if IT policy says you must that doesn't coun…

QEMU is also a good option for Windows software that won't run on Wine. Unless you explicitly pass through a peripheral, Windows won't see it and start downloading malware in the backgroud.

Re: LG monitors silently install software through Windows Update without consent

#389

Post by frollogaston »

felooboolooomba wrote: post #222
gkbrk wrote: post #109

A monitor cannot install software on your computer by the way. It's Windows installing this software automatically (for some reason), so the blame should be on Microsoft. Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem.

> A monitor cannot install software on your computer by the way. I think everyone in the HN crowd knows that. > the blame should be on Microsoft No, they blame should ALSO be on Microsoft, they are the enablers.

Ok, I don't use Windows and never will, so wasn't aware of this feature, and it would've been nice to have that context. Thought maaybe LG is exploiting a vuln in Windows via USB-C or over one of the niche HDMI features, but gathered it's not that.

Re: LG monitors silently install software through Windows Update without consent

#390

Post by [deleted] »

IgorPartola wrote: post #370
yndoendo wrote: post #265

Earlier quoted context omitted.

Back in my Window days. I would start the driver installation and let it sit. Open the temp folder and copy content the install extracted to a new directory. Cancel the installation. Open Device Manager and install the drivers from there so non of the excessive bloat was installed. This worked greater with being an IT consultant. The client's machine to run smoother and drivers installed fast since they would buy mul…

To be fair Microsoft was always shitware. I don’t remember a time when using a Windows machine just worked, didn’t take up gigabytes of space, didn’t crash, and didn’t get messed up by simply using it requiring a yearly or semi-yearly reinstall.

[deleted]
Post reply on HN