You must log in or register to comment.
- Kairos@lemmy.todayEnglish9 days
This is because as soon as a monitor is connected to a Windows computer, it automatically installs both the LG Monitor App Installer and McAfee Scam Detector without ever asking the user for permission.
Is this not a felony under U.S. law? Computer hacking has HUGE criminal liability.
- 9 days
Name something you do as a corporation to avoid any laws or accountability with the current administration
BRIBE THE DOJ
let’s see if that answer’s on the board…survey says…!
DING
9 daysLet me guess, proprietary drivers cause this and the open source or generic drivers lack “functionality”.
If it turns on, reaches its peek resolution and refresh rate that is good enough for me, I genuinely can care less for HDR or the nitty gritty features.
- deadcade@lemmy.deadca.deEnglish8 days
Monitors don’t need drivers. Your GPU needs drivers, and you might need color correction for your monitor.
Microslop decided that any device that is plugged in might need drivers. They allow device manufacturers to specify an arbitrary program to be downloaded and executed by Windows Update, any time a device they make is plugged in.
- Iusedtobeanalien@lemmy.worldEnglish7 days
And if that driver/software does evil or is so poorly written it meets driver verification but exposes vulnerabilities, how is that Microsoft’s fault
- deadcade@lemmy.deadca.deEnglish7 days
Microsoft is the company that approved the software to automatically download and run as admin when a specific device is plugged in. The OEM submitted malware and Microsoft approved it. Both are at fault for letting malware download and run on your device.
In the case of vulnerabilities, MS is fully aware of this happening frequently and has announced they want to do something about it, but hasn’t actually done anything about it.
- 9 days
Not only that but my old LG smart TV (47LM8600, I think manufactured in 2012) has literal suicide timers in its built in apps. Mine has never been connected to any network and yet it mysteriously informed me after approximately three years of ownership that all of its player apps such as Youtube, Hulu, Netflix, etc. would stop working because they were “no longer supported,” all of them within the time frame of the same couple of weeks. It knew this somehow, apparently via magic, or quantum fluctuations, or psychic brain waves. Without internet connectivity.
Obviously I don’t use any of those features so I didn’t give a rat’s ass and I still don’t. But I still find that deeply suspicious.
This is 100% also Microsoft fault and they are to be held accountable for this. With many drivers it can happen that one manufacturer goes rogue, but Microsoft needs to have a zero tolerance policy for this: do it once and your signature is permanently revoked for all your drivers
- floofloof@lemmy.caEnglish9 days
I’ve used an LG monitor for about 5 years, and never install the manufacturer’s software unless it looks genuinely useful. When I saw the Gamers Nexus video I went to check my installed apps, and sure enough there was LG’s monitor app, installed silently without my knowledge. I used Bulk Crap Uninstaller to get rid of it.
To prevent this kind of thing in future, run gpedit.msc and enable “Prevent automatic download of applications associated with device metadata” under Computer Configuration → Administrative Templates → System → Device Installation.
- 0x0@infosec.pubEnglish9 days
Or you could just change to an os that doesnt piss on its users constantly
- OS2Warp@lemmy.zipEnglish8 days
Great; what OS has the equivalent of Group Policy and Active Directory besides windows?
- 8 days
This is the one thing holding open source back, and the thing Linux users keep pissing on without understanding it.
The CTOs inept nephew can manage your fleet of windows machines and you get all the checkbox security you need for compliance (and some real security):
- Centrally managed
- Logs that are fairly hard to manipulate
- SecureBoot + Bitlocker
That same feature set on Linux will cost you a ton of money in skilled staff if you want to check the same compliance checkboxes. (As for real security, who cares, no one is doing that anyway)
Kind regards: someone who has managed Linux fleets.
- OS2Warp@lemmy.zipEnglish7 days
THANK YOU!
So many people just don’t get it; happy to see someone rational who does.
I WISH Linux had something like this, but it’s like NT 4.0; it doesn’t have it.
- 6 days
It’s getting there, slowly.
- Clevis can do network and TPM pinned disk decryption.
- With Linux UKIs you can do self signed secure boot, we still need the mechanisms for central signing. This would actually be better that windows, you control your own PKI and Microsoft can’t sign garbage your machines boot.
- Logs is a somewhat bogus argument - log falsification on Windows has been done too. But linux is rather unprotected in comparison.
But the biggest issue is the mentality of ”I own my computer”. Sure, you own your private machine, but your company owns the computer you use for work and the data on it and has an interest in protecting that data from you. That particular threat model is hard to communicate, as Linux users normally don’t think of themselves as a threat vector.
- OS2Warp@lemmy.zipEnglish5 days
Good to know they’re working on boot; what about something similar to AD and GPO?
- 3 days
I hope no one tries to push GPO-like stuff on Linux. I get where you are coming from, but for example Puppet will give you a lot more power and and flexibility. There is no registry. ”Everything is a file” is actually true, you just manage a bunch of config files instead.
As for AD, you have FreeIPA as the major contender. It works. You can also just join your Linux clients to your AD. Kerberos works just as expected.
(RedHat actually tried pushing management of Gnome via FreeIPA á la GPO. It sucks, because the desktop environment is just a tiny part of what you might want to manage, so suddenly you need to have both that bullshit and your normal configuration management tool.)
My wife and I bought a TV on the internet. What brand? I have no idea but it’s the type they have in waiting rooms and restaurants. Zero internet. Zero apps. You push the button and it turns on. It’s the best fucking purchase we’ve made in the last five years.
- sen@lemmy.zipEnglish8 days
I recently purchased a current year TCL, I don’t remember the model number but it’s the one right under their flagship.
It’s 75" and is the most beautiful tv I’ve owned. Fast, almost OLED levels of dimming, I’m in awe when watching the right content.
I’d pay an extra $500 for a version with no smart capabilities. Let me turn it on and boot into my android box, or console, or whatever.
- Taleya@aussie.zoneEnglish8 days
Got ours second hand from a buy nothing group. It has no apps. It doesn’t know what the internet is. It has D-SUB and RCA ports. It’s perfect
- pirat@lemmy.worldEnglish8 days
Look for “digital signage” displays - but beware that some of those are “smart TVs” too.
For the PC Monitor issue: To prevent this sort of behavior. Open Group Policy Editor Computer Configuration>Administrative Templates>System>Device Installation Prevent automatic downloads of applications associated with device metadata = Set to Enable.
To get rid of it once installed you have to remove it from the Windows Store since it’s an app, not an installed program. For me, this was not possible as there was no way presented to uninstall it in the app store. I had to do it from terminal with this command, which could vary a bit depending on the exact app version:
Remove-AppxPackage LGElectronics.LGMonitorApp_1.2606.1601.0_x86__cfnzzhwkr8z5w
- MIDItheKID@lemmy.worldEnglish7 days
You can search for it by the appx name and then use a pipe to remove the package. Then you don’t need to worry about specific version numbers:
Get-AppxPackage -Name ‘LGElectronics.LGMonitorApp’ | Remove-AppxPackage
What dongle or what have you do y’all use that’s privacy focused? I need to disconnect my LG TV and we have an old Chromecast but that’s Google…
I had an old laptop that I hooked in and configured it to boot into a fullscreen browser to our Emby server. Could just as easily have it boot into a browser with shortcuts to your streaming services.
We use one of these mini keyboard/touchpads to control it:
Lately, though, I just picked up a set of wireless HDMI adapters and just plug one of those into the closest laptop and play from there.
- madthumbs@lemmy.worldEnglish8 days
Gotta love the conspiracy theorist mindset that throws common sense out the window.
LG sells ~22–24 million TVs per year and ~25–35 million monitors per year
-Do we see a problem with that and ‘surveillance’ yet?
