Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LG monitors silently install software through Windows Update without consent

videocardz.com

Post reply on HN
Print view View original

541–550 of 671 posts

Re: LG monitors silently install software through Windows Update without consent

#541

Post by owlbite »

throwa356262 wrote: post #35
embedding-shape wrote: post #19

Earlier quoted context omitted.

I'm wondering if we in Europe gets vastly different experience compared to Americans or elsewhere in the world. People complain about LG having ads everywhere in the monitors, displays and what not, but none of our LG products (bought and used in Spain) have any ads anywhere. I'm sitting here with a LG monitor and our main TV is a LG OLED TV, neither of them have ads anywhere, although I haven't booted Windows in a c…

In general, yes. But in case of LG TVs, they record your activities in EU too. You can opt out, but the settings has a very non-descriptive name ("live plus") and resets by itself when you are not looking. https://www.consumerreports.org/electronics/privacy/how-to-t...

At least with LG TVs you can just not give them the internet and nothing of value is lost (at least assuming you have an Apple TV or other trusted smart tv capability). Much more difficult to not give the windows PC internet and have it be useful (at least mine is only used for gaming).

Re: LG monitors silently install software through Windows Update without consent

#543

Post by ydj »

I used to think LG monitors were a good option for high quality 4k high refresh rate monitors. But having owned one of their expensive gamery offerings, it is basically worse in every way compared to an older acer. Worse DP1.4 stability (needs really nice cables to be stable), slow/broken ddc implementation, weird tearing with hdmi output from a Mac.

And I also had an older lg 4k monitor that bricked itself after a power outage, which is apparently a known eeprom issue.

Now this. No more LG for me.

Re: LG monitors silently install software through Windows Update without consent

#544

Post by MatejKafka »

dwattttt wrote: post #498
MatejKafka wrote: post #327

Earlier quoted context omitted.

Yes, but unless all 3rd party drivers can run in userspace (which is not really feasible), Microsoft needs to give vendors the option to install a kernel driver, at which point a vendor can always decide to ship a kernel driver and bypass any restrictions. Imo, the only thing Microsoft can meaningfully do here from their side is threaten LG with pulling all their drivers if they keep doing this.

Drivers still need to pass certification & get signed. Microsoft does get to reject them. I can't imagine the group doing this validation is sufficiently manned/funded; it's a cost centre, and the effects of cutting it don't show up for years.

I expect that process to be mostly automated, I wouldn't expect the MS folks at the testing lab to do much (if any) manual testing, especially for a new version of a previously approved driver.

I'm not surprised that the driver got approved, especially if the previous versions already had some user UI and this update "just" added the ads. What I would hope now is for MS to either pull the updated driver or ask LG to roll the change back themselves, possibly under the thread of pulling their drivers altogether (iirc they done that with other companies in the past).

Re: LG monitors silently install software through Windows Update without consent

#545

Post by userbinator »

mrob wrote: post #379
globalnode wrote: post #194

Earlier quoted context omitted.

not a usb programmer, but are you saying i can buy any old usb chip and program it with any vendors ID and spoof windows into giving me admin? if so, gj micrcosoft.

You can also spoof a keyboard and simulate keystrokes to open terminals and run arbitrary commands. I don't know about Windows, but on Linux it's possible to block USB connections by default and filter them in userspace: https://usbguard.github.io/ This allows enforcing rules like "never add an additional keyboard". But the USB protocol has no support for strong device authentication, so there's no way to prevent a d…

You can also spoof a keyboard and simulate keystrokes to open terminals and run arbitrary commands

This is what any decent barcode reader does, by the way; and before USB, they would be inline taps that pass through a regular PS/2 keyboard.

Re: LG monitors silently install software through Windows Update without consent

#546

Post by userbinator »

rbanffy wrote: post #63

At this point, such shenanigans are to be expected when using Windows. I guess my next machine will have a VGA port ;-) And no Windows.

VGA still has EDID which this is based on, so this situation could've happened in that era if companies were less hostile.

But this is definitely something Windows does.

Re: LG monitors silently install software through Windows Update without consent

#547

Post by Gigachad »

londons_explore wrote: post #378
orbital-decay wrote: post #128

Earlier quoted context omitted.

>This situation has.. no precedent as far as I can tell.. Printer, mouse, tablet and display tablet makers use this to insert their crapware since at least Windows Vista or Windows 7, I think. The last one I remember is plugging a Razer mouse just to watch it instantly pulling 1.5GB of bloated junk with "telemetry" exfiltrating the data from my gaming PC in realtime. At least it doesn't leave my mouse in a non-workin…

Microsoft could easily make a rulebook for drivers, and say any company which violates the rulebook can only send open source drivers, or even ban them from driver distribution entirely which would quickly kill a consumer hardware brand.

Microsoft does not care about the quality of Windows. Half the malware comes from them. Windows is just a platform they can sell online services and AI products through.

Re: LG monitors silently install software through Windows Update without consent

#548

Post by Gigachad »

aeon_ai wrote: post #329
dimgl wrote: post #288

Earlier quoted context omitted.

What do you recommend instead? In my opinion the Razer mice are always superior for FPS.

Logitech have always made great gaming mice in my experience, at a reasonable price

Most logitech mice have rubberized outsides which turn to goo after about a year.

Re: LG monitors silently install software through Windows Update without consent

#549

Post by Gigachad »

whateverboat wrote: post #533
devttyeu wrote: post #20

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

How can HDMI affect the host computer?

Because Windows is cooperating and installing the malware on behalf of the OEM.

This kind of exploit could not be done on MacOS or Linux.

Re: LG monitors silently install software through Windows Update without consent

#550

Post by userbinator »

On the surface, identifying and automatically installing drivers and software for the devices you add is not a bad idea. It's how plug-and-play works.

The problem is with companies that want you to run their horrible piece of bloatware, and that incentive increased even more with the advent of "telemetry" (spyware).

Those complaining about "consent" don't realise that this stuff has definitely always been passed through the legal department, and was likely in the Windows EULA (which amounted to giving Microsoft full control over your machine the last time I looked, several years ago.)

As always, "the road to hell is paved with good intentions."

Post reply on HN