Live data from Hacker News

LG monitors silently install software through Windows Update without consent

videocardz.com

501–510 of 671 posts

Re: LG monitors silently install software through Windows Update without consent

#501

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

> Your OS installs malware

Malware??

Re: LG monitors silently install software through Windows Update without consent

#502
post #250

Earlier quoted context omitted.

You have to add keys under: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions The keys I have right now are all REG_SZ (strings), and in order of "1" through "5", are: --- 1. SWC\VEN_DELL&DEV_AWCC 2. SWC\VID_DELL&PID_AWCC 3. SWC\Alienware_Command_Center 4. SWC\AWCC 5. SWC\VID001&PID0001&AWCCWINUI3APP --- Nothing short of this prevented "Alienware Command Center" (AWCC.exe) fro…

You only need (5) (see the AWCCWINUI3APP thing there?). There is also a group policy equivalent to this: Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions Prevent installation of devices that match any of these device IDs Set to Enabled Enable Also apply to matching devices that are already installed Add the following two IDs: MONITOR\DELA246 SWC\VID001&PID000…

Yuck.

And people say linux is too complicated for normal people because of terminal commands*

*which in reality no user is really forced to use, it just happens to be easier to share and copy/paste a set of commands than hundreds of clicks on a screen.

Re: LG monitors silently install software through Windows Update without consent

#503

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

> 1. Your OS installs malware ...

Your OS is malware.

We're talking about Windows here.

Re: LG monitors silently install software through Windows Update without consent

#504
post #109

A monitor cannot install software on your computer by the way. It's Windows installing this software automatically (for some reason), so the blame should be on Microsoft. Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem.

So how is this malware?

Re: LG monitors silently install software through Windows Update without consent

#505
post #109

A monitor cannot install software on your computer by the way. It's Windows installing this software automatically (for some reason), so the blame should be on Microsoft. Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem.

> Autorun of malware when you plugged in a USB drive was also a Windows issue, I'd classify this as the same security problem. Not really. AutoRun ran whatever was on the USB drive, with no oversight. This installs a driver from a company that's supposed to be reputable enough to get their driver signed by MS and pass validation. LG breached that trust here.

> that's supposed to be reputable enough to get their driver signed by MS and pass validation. LG breached that trust here.

I think you overestimated how reputable is enough.

Re: LG monitors silently install software through Windows Update without consent

#506

Earlier quoted context omitted.

Accessibility. All accessibility stacks sucks in some respect, but Linux's sucks most of all, and Wayland people in particular don't seem to be willing to compromise on security (which is required for accessibility to work).

Touch goes in there as well. I don't know how they add a new touch keyboard to KDE and have no access to arrow keys. Making it impossible to go up in the terminal. https://i.imgur.com/nOgLqHU.png

Oof, please report that as an issue (if it hasn't been done already). KDE uses https://bugs.kde.org

Re: LG monitors silently install software through Windows Update without consent

#507

Earlier quoted context omitted.

I find this hard to believe considering how bad the UIs are on phones and TVs. Even google.com does not offer feature parity between their desktop and mobile websites. My phone still didn't come with a functional paint or notepad apps. Google docs is a horrible experience on phones (but at least it works now - a few years ago it was straight up unusable). And you're telling me that this is the only computing platform…

My phone still doesn't have a calculator app. The thought of trying to add one that isnt wolfram alpha is anxiety-producing.

Calculator Note apps are much better anyway

Re: LG monitors silently install software through Windows Update without consent

#508
post #13

Why do people even install 'drivers' for things like monitors. (Or usb devices running 'standard' protocols). The OS handles these just fine by itself.

In this case, they aren't. I woke up the other day to a notification that my LG monitor driver was installed, with a little window on how to use the on-screen crap. Absolutely useless, since the buttons for the monitor are right there on the bottom of it, and probably easier to use than the software.

> Absolutely useless, since the buttons for the monitor are right there on the bottom of it

... and so out of arm's reach, right?

Re: LG monitors silently install software through Windows Update without consent

#509
post #474

Earlier quoted context omitted.

> but aren't even using it to block these contraptions Even worse, this one is installed via Windows update. I have an LG monitor and noticed the stupid LG app all of the sudden, uninstalled it, and saw it pop up again as an update in Windows update. Microsoft is actively enabling this behavior.

I don't understand how this is legal. Isn't this malware? Isn't it illegal to install malware on someone's computer without their permission? Or is this very illegal, but nobody cares about that anymore?

I guess it’s becoming harder for MS to define malware in a way that would catch this behavior but does not flag their own products as well.
Post reply on HN