LG monitors silently install software through Windows Update without consent

Post by account42 » Mon, Jul 20, 2026, 9:14 AM UTC

userbinator wrote: post #545

mrob wrote: post #379

Earlier quoted context omitted.

You can also spoof a keyboard and simulate keystrokes to open terminals and run arbitrary commands. I don't know about Windows, but on Linux it's possible to block USB connections by default and filter them in userspace: https://usbguard.github.io/ This allows enforcing rules like "never add an additional keyboard". But the USB protocol has no support for strong device authentication, so there's no way to prevent a d…

You can also spoof a keyboard and simulate keystrokes to open terminals and run arbitrary commands This is what any decent barcode reader does, by the way; and before USB, they would be inline taps that pass through a regular PS/2 keyboard.

Post by account42 » Mon, Jul 20, 2026, 9:21 AM UTC

flaunf221 wrote: post #168

RetroTechie wrote: post #157

Earlier quoted context omitted.

> I can only conclude that Windows is basically malware now... Windows has worked like spyware since what, the late Windows 7 days or thereabout? End users should not regard this as inevitable. Or get caught up in the how-it-works-how-to-disable swamp. Instead, cut through to the essence. It's about respect: # Microsoft does not respect Windows users (or users of any of their offerings?). # LG does not respect people…

> why would you use such a sleazy company's product for daily driving Because alternatives are much worse or not available for scenarios people need. There, I've said the obvious.

Post by account42 » Mon, Jul 20, 2026, 9:33 AM UTC

phendrenad2 wrote: post #291

devttyeu wrote: post #20

This is so much worse that the title makes it out to be: 1. Your OS installs malware (technically manufacturers software) from a 3rd party vendor in background, zero user interaction 2. Happens as soon as you or anyone with physical access plug in a device into the HDMI port 3. That malware has internet and full system access, no sandboxing 4. It starts with every system boot 5. This software gets installed when you…

I'm tired of everything being classified as "malware". The word has no meaning anymore. Malware can mean "zero-day state-sponsored ransomware attack" or it can mean "software was automatically installed by a trusted consumer-beloved company because they forgot to make an opt-out window" (which is what I'm guessing happened here).

Post by account42 » Mon, Jul 20, 2026, 9:55 AM UTC

rsync wrote: post #377

felooboolooomba wrote: post #222

Earlier quoted context omitted.

> A monitor cannot install software on your computer by the way. I think everyone in the HN crowd knows that. > the blame should be on Microsoft No, they blame should ALSO be on Microsoft, they are the enablers.

“I think everyone in the HN crowd knows that.” I would think everyone in the HN crowd would be aware of HEAC, the hdmi Ethernet channel, etc. With full access to the hosts tcp/ip stack, we’d do well not to overlook the potential vectors for a monitor to install software on your computer… especially when the operating system is complicit.

Post by account42 » Mon, Jul 20, 2026, 10:06 AM UTC

nottorp wrote: post #215

BatteryMountain wrote: post #97

Earlier quoted context omitted.

I've successfully avoided these companies the last 5 years. Gaming as a whole is dead for me, I just play a couple of old games now & then. The culture is toast too, not just bad games or expensive hardware. So not really losing much sleep over any of this. I have linux on all my machines, so I really only play the one's that perform well on linux. Haven't played online multiplayer games since ~2013. Many of us are l…

> Gaming as a whole is dead for me There are millions of indies out there. Some are worth the time. It's a bit of a problem to figure out which though. > Haven't played online multiplayer games since ~2013 I don't think there are any non predatory online multiplayer games since 2013 :) And there are many online multiplayer games that would have been really good as single player.