Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LG to ban residential proxies from smart TV apps

krebsonsecurity.com

Post reply on HN
Print view View original

181–190 of 549 posts

Re: LG to ban residential proxies from smart TV apps

#181

Post by denkmoon »

delta_p_delta_x wrote: post #160
TeMPOraL wrote: post #152

Earlier quoted context omitted.

The monitors aren't installing anything. That headline was a lie. It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs. That's why the problem affected older monitors too - it's the update side that suddenly started to ship malware.

> It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs This is also a misrepresentation. Microsoft has provided LG with a certificate to sign its driver packages with, and allows LG to upload packages to Windows Update, which includes a feature to install sidecar applications. Now, the spirit of this feature is that any application is meant to provide genuine configuration functionality…

I can only imagine the meetings at microsoft HQ where they all sat around a table and crossed their fingers and hoped that vendors would act in the spirit of their design.

Re: LG to ban residential proxies from smart TV apps

#182

Post by smcleod »

mey wrote: post #54
smcleod wrote: post #43

Earlier quoted context omitted.

Unfortunately they make arguably the best OLEDs and webOS is pretty decent to use (especially compared to the terrible OS that Samsung and Sony run). I think the best thing people can do is update their firmware then disconnect it from the internet. Using an AppleTV or similar provides a better experience than any TVs built in apps anyway.

How important is "the best" OLED vs the second best or 100th best OLED? I am personally ok not buying the bleeding edge to not get malware onto my OS.

If you care about home cinema it's important. There's a pretty big jump down. You can look up the specs and reviews of the C and G series from LG. Anecdotally quite a few times when people see my 7 year old LG C9 I've had them ask if it was some new expensive TV as they are so impressed with the picture.

Re: LG to ban residential proxies from smart TV apps

#183

Post by voidUpdate »

drnick1 wrote: post #117
ahartmetz wrote: post #80

Earlier quoted context omitted.

Fine with Linux though :) LG's behavior isn't fine, but their monitors don't install crapware on Linux.

Another win for the Linux security model (software installed and updated manually from vetted repos only).

sudo dkpg -i FileYouDownloadedFromAnywhere.deb

Re: LG to ban residential proxies from smart TV apps

#184

Post by smcleod »

globular-toast wrote: post #103
mey wrote: post #54

Earlier quoted context omitted.

How important is "the best" OLED vs the second best or 100th best OLED? I am personally ok not buying the bleeding edge to not get malware onto my OS.

Exactly. If you get the best today it'll be the second best tomorrow anyway. Absolute position is undetectable, you can only perceive change. Use that to your advantage and stay off the treadmill.

7 years into my C9 and it never fails to impress.

Re: LG to ban residential proxies from smart TV apps

#185

Post by maccard »

delta_p_delta_x wrote: post #160
TeMPOraL wrote: post #152

Earlier quoted context omitted.

The monitors aren't installing anything. That headline was a lie. It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs. That's why the problem affected older monitors too - it's the update side that suddenly started to ship malware.

> It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs This is also a misrepresentation. Microsoft has provided LG with a certificate to sign its driver packages with, and allows LG to upload packages to Windows Update, which includes a feature to install sidecar applications. Now, the spirit of this feature is that any application is meant to provide genuine configuration functionality…

I agree with you on the precedent

> after MS implemented precision touchpads somewhere in 2015, and suddenly Windows touchpads became as precise as those on Macs.

There’s still a world of difference between a MacBook touchpad and a windows one. My work laptop (18 month old dell XPS) can’t hold a candle to my 6 year old MacBook’s trackpad.

> Likewise with RGB peripherals. Even GPU driver applications have increasingly become less useful as the most important features—power control, adaptive sync, HDR, etc have moved into native Windows settings.

The peripherals still need the addons though; I have ASUS armory crate, Corsair iCue and MSI center for my Motherboard, cooler and GPU respectively. They all suck.

Re: LG to ban residential proxies from smart TV apps

#186

Post by TeMPOraL »

ButlerianJihad wrote: post #139
Dylan16807 wrote: post #136

Earlier quoted context omitted.

> At the very least, consumer connections explicitly disallow "Commercial Use". And that's really bad! Far more than reselling, you should very much be able to run a website from home!

> And that's really bad! No, it’s fair, and probably federally regulated. You wanna run a business? Then get a business license, pay your business taxes, and sign up for a business Internet connection. That’s what they’re made for. Then run your servers to your heart’s content.

What if I don't want to run a business? I just want to run a website!

Re: LG to ban residential proxies from smart TV apps

#187

Post by JumpCrisscross »

12_throw_away wrote: post #67

42% of the apps on LG's platform have these quasi-malware SDKs in them? Seems kinda bad, whether it's due to negligence or just pure incompetence? You'd think there might be legal consequences for a corporation that lets their app store turn into a malware delivery system?

> You'd think there might be legal consequences

I own an airgapped LG TV. Does anyone actually want to go class action/mass arb?

Re: LG to ban residential proxies from smart TV apps

#188

Post by awllau »

What happens to the copies already installed?

Spur says these SDKs can keep running after the app is closed and only stop when the user deletes the app or opts out. LG says developers must remove them or have their apps suspended, but the article doesn’t say whether that disables existing installs. If it doesn’t, LG needs to tell affected users which apps to remove.

Does webOS have any way to kill an installed app remotely?

Re: LG to ban residential proxies from smart TV apps

#189

Post by delta_p_delta_x »

maccard wrote: post #185
delta_p_delta_x wrote: post #160

Earlier quoted context omitted.

> It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs This is also a misrepresentation. Microsoft has provided LG with a certificate to sign its driver packages with, and allows LG to upload packages to Windows Update, which includes a feature to install sidecar applications. Now, the spirit of this feature is that any application is meant to provide genuine configuration functionality…

I agree with you on the precedent > after MS implemented precision touchpads somewhere in 2015, and suddenly Windows touchpads became as precise as those on Macs. There’s still a world of difference between a MacBook touchpad and a windows one. My work laptop (18 month old dell XPS) can’t hold a candle to my 6 year old MacBook’s trackpad. > Likewise with RGB peripherals. Even GPU driver applications have increasingly…

> There’s still a world of difference between a MacBook touchpad and a windows one

Oddly I've found otherwise (Dell Precision notebook from 2021, and Surface Laptop). It might be macOS's animations and smoothing interfering here, but I've found that my Windows touchpads are much more responsive, especially when swiping between desktops.

> The peripherals still need the addons though

Ugh, this is annoying. Hardware vendors need to be banned from writing lousy, inefficient, unsafe software.

Re: LG to ban residential proxies from smart TV apps

#190

Post by 21asdffdsa12 »

delta_p_delta_x wrote: post #160
TeMPOraL wrote: post #152

Earlier quoted context omitted.

The monitors aren't installing anything. That headline was a lie. It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs. That's why the problem affected older monitors too - it's the update side that suddenly started to ship malware.

> It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs This is also a misrepresentation. Microsoft has provided LG with a certificate to sign its driver packages with, and allows LG to upload packages to Windows Update, which includes a feature to install sidecar applications. Now, the spirit of this feature is that any application is meant to provide genuine configuration functionality…

The commercial software landscape more and more reminds me of a civil war torn town. Everyone shooting at everyone, a dark forest through and through
Post reply on HN