LG to ban residential proxies from smart TV apps

Post by tosti » Wed, Jul 22, 2026, 9:57 AM UTC

TeMPOraL wrote: post #238

delta_p_delta_x wrote: post #160

Earlier quoted context omitted.

> It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs This is also a misrepresentation. Microsoft has provided LG with a certificate to sign its driver packages with, and allows LG to upload packages to Windows Update, which includes a feature to install sidecar applications. Now, the spirit of this feature is that any application is meant to provide genuine configuration functionality…

My point is not to shift the blame to Microsoft; it's primarily LG that's at fault here. My point here is simply that it's not the monitor that is installing this . Neither the malware nor the URLs to malware exist on the device - they get fetched as part of normal OS-side auto-provisioning, which is the part that was compromised.

Post by tosti » Wed, Jul 22, 2026, 10:04 AM UTC

dmos62 wrote: post #164

stkdump wrote: post #157

Earlier quoted context omitted.

I think the point is that: 1. Yes Windows must have "approved" the drivers 2. Windows Update runs automatically and not (usually) manually 3. Automatic update can't even be disabled, only manually postponed a bit At least 2 and 3 are different on virtually every Linux distro. Also, I find it very unlikely that they would accept such behavior. To give MS the benefit of the doubt here, now that this happened and has be…

https://github.com/raphire/win11debloat This has an option to disable downloading of auxiliary apps when a device is connected. Yes, it's a Windows Update thing. > Prevent Windows from auto-installing device companion apps, like LG Monitor App, Alienware Command Center and more.

Post by redeeman » Wed, Jul 22, 2026, 10:13 AM UTC

mDyJzDPmBdG wrote: post #257

voidUpdate wrote: post #183

Earlier quoted context omitted.

sudo dkpg -i FileYouDownloadedFromAnywhere.deb

Let's be real, in most cases it is: curl -s script.random-guy.net | sh It is such glaring security hole that there was an old submission about filling such install script with `sleep` commands and detecting it on server side, to send different versions for downloading (and reviewing) and for actual direct execution.

Post by account42 » Wed, Jul 22, 2026, 10:16 AM UTC

Cthulhu_ wrote: post #236

12_throw_away wrote: post #67

42% of the apps on LG's platform have these quasi-malware SDKs in them? Seems kinda bad, whether it's due to negligence or just pure incompetence? You'd think there might be legal consequences for a corporation that lets their app store turn into a malware delivery system?

It's all above board though, as you, the user, agreed to the terms & conditions for installing said app. This won't change unless governments create and enforce laws.

Post by tosti » Wed, Jul 22, 2026, 10:18 AM UTC

smcleod wrote: post #43

CivBase wrote: post #35

Earlier quoted context omitted.

Stop buying LG TVs.

Unfortunately they make arguably the best OLEDs and webOS is pretty decent to use (especially compared to the terrible OS that Samsung and Sony run). I think the best thing people can do is update their firmware then disconnect it from the internet. Using an AppleTV or similar provides a better experience than any TVs built in apps anyway.