Live data from Hacker News

LG monitors silently install software through Windows Update without consent

videocardz.com

491–500 of 671 posts

Re: LG monitors silently install software through Windows Update without consent

#491

Earlier quoted context omitted.

Back in my Window days. I would start the driver installation and let it sit. Open the temp folder and copy content the install extracted to a new directory. Cancel the installation. Open Device Manager and install the drivers from there so non of the excessive bloat was installed. This worked greater with being an IT consultant. The client's machine to run smoother and drivers installed fast since they would buy mul…

To be fair Microsoft was always shitware. I don’t remember a time when using a Windows machine just worked, didn’t take up gigabytes of space, didn’t crash, and didn’t get messed up by simply using it requiring a yearly or semi-yearly reinstall.

I remember when Windows didn't take gigabytes of space because there wasn't gigabytes of space, and it was still shitware.

Re: LG monitors silently install software through Windows Update without consent

#493

Earlier quoted context omitted.

To be fair Microsoft was always shitware. I don’t remember a time when using a Windows machine just worked, didn’t take up gigabytes of space, didn’t crash, and didn’t get messed up by simply using it requiring a yearly or semi-yearly reinstall.

Windows 3.1? It was only 6 3.5” disks. To be fair, I had stretches of 2K, XP, 7 and 10 working acceptably.

These eras of Windows had their own dark patterns that were incredibly anti-consumer. No one's lives were improved because they installed the Ask Jeeves toolbar, but people were asked to install it millions and millions of times.

Re: LG monitors silently install software through Windows Update without consent

#494

Earlier quoted context omitted.

> How exactly would a new Linux user know this ? It's easy: whatever is preinstalled will be guaranteed to work reliably. Worked for me.

So sticking with Windows because that's what the computer probably shipped with ?

No, buying preinstalled Linux.

Re: LG monitors silently install software through Windows Update without consent

#495
post #109

A monitor cannot install software on your computer by the way. It's Windows installing this software automatically (for some reason), so the blame should be on Microsoft. Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem.

> A monitor cannot install software on your computer by the way. I think everyone in the HN crowd knows that. > the blame should be on Microsoft No, they blame should ALSO be on Microsoft, they are the enablers.

> I think everyone in the HN crowd knows that.

I actually did not. I know there is some degree of two-way communication over HDMI/DP, and was curious if this was how the software was installed. I think discussing the technical details is a great use of the HN comment section.

(Wifi enabled display device -> HDMI -> Device) would be an incredibly interesting attack vector.

Re: LG monitors silently install software through Windows Update without consent

#497
post #474

Earlier quoted context omitted.

> but aren't even using it to block these contraptions Even worse, this one is installed via Windows update. I have an LG monitor and noticed the stupid LG app all of the sudden, uninstalled it, and saw it pop up again as an update in Windows update. Microsoft is actively enabling this behavior.

I don't understand how this is legal. Isn't this malware? Isn't it illegal to install malware on someone's computer without their permission? Or is this very illegal, but nobody cares about that anymore?

you'd need to legally prove it's malware and they would definitely claim it's useful software tools that come with the hardware or something

Re: LG monitors silently install software through Windows Update without consent

#498

Earlier quoted context omitted.

The User-Mode Driver Framework is a thing. Most plug-in devices do not need (or have) a kernel-mode driver.

Yes, but unless all 3rd party drivers can run in userspace (which is not really feasible), Microsoft needs to give vendors the option to install a kernel driver, at which point a vendor can always decide to ship a kernel driver and bypass any restrictions. Imo, the only thing Microsoft can meaningfully do here from their side is threaten LG with pulling all their drivers if they keep doing this.

Drivers still need to pass certification & get signed. Microsoft does get to reject them.

I can't imagine the group doing this validation is sufficiently manned/funded; it's a cost centre, and the effects of cutting it don't show up for years.

Re: LG monitors silently install software through Windows Update without consent

#499
post #488
post #436

Earlier quoted context omitted.

Yeah, I was looking for this comment. Dell/Alienware have been doing this for YEARS. Part of the many reasons I moved from Window to Linux.

Is Linux certain to be safe from this sort of thing? I used to use lots of Dell monitors. Are there any brands that are known not to do anything like this? I'd like to reward them with my patronage.

I would like to know too. I purchased a OLED Alienware monitor back in 2022 when they first came out. Ive had a Linux/Windows dual-boot system but around 2023-24 I erased my Windows partition.

My uneducated guess is that it would be pretty difficult for something like this to autoinstall on linux without your permission. They can "recommend" you to install their app, but just plugging it and getting adware/malware, I hope it would be difficult.

Unlikely for any brand out there not to do this. Samsung will do it eventually if backlash isn't bad with this one with Alienware/Dell/LG. Maybe Benq, viewsonic, monoprice? I dont trust Asus not to do it either.

I have a LG TV and never connect it to Wifi. Never did I think just plugging in a HDMI cable would do this.

Re: LG monitors silently install software through Windows Update without consent

#500
post #198

Earlier quoted context omitted.

I wouldn't classify getting random malware as "nothing happening".

Because it spies on them and nags. But Windows itself already does that. LG could've done the same thing sans the mcafee popups and nobody would care, in fact Dell is probably doing that.

> But Windows itself already does that.

So once an person is victimized in this way, it becomes a free-for-all where future transgressions cease to matter?

Post reply on HN