Remix.run Logo
s1ncere 4 hours ago

Stop hooking up your LG tv to any network

5kg 4 hours ago | parent | next [-]

Stop hooking up your LG: https://www.theverge.com/tech/967983/lg-monitors-mcafee-adwa...

ahartmetz 3 hours ago | parent [-]

Fine with Linux though :)

LG's behavior isn't fine, but their monitors don't install crapware on Linux.

TeMPOraL an hour ago | parent | next [-]

The monitors aren't installing anything. That headline was a lie.

It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs. That's why the problem affected older monitors too - it's the update side that suddenly started to ship malware.

delta_p_delta_x 34 minutes ago | parent | next [-]

> It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs

This is also a misrepresentation. Microsoft has provided LG with a certificate to sign its driver packages with, and allows LG to upload packages to Windows Update, which includes a feature to install sidecar applications. Now, the spirit of this feature is that any application is meant to provide genuine configuration functionality or some graphical front end to the driver's configuration knobs.

LG then abused that feature to provide adware. Now, there are millions of hardware vendors. One can't expect that every driver package submission from every vendor is thoroughly vetted every time, this is a matter of trust and respect.

Sometimes one actually wants the app that comes with the device, like AMD's and NVIDIA's configuration trays.

Even so, I fully expect that after this debacle MS will disable this stuff. There is precedent for this. Synaptics/ELAN/Alps touchpad tray applications largely disappeared after MS implemented precision touchpads somewhere in 2015, and suddenly Windows touchpads became as precise as those on Macs. Likewise with RGB peripherals. Even GPU driver applications have increasingly become less useful as the most important features—power control, adaptive sync, HDR, etc have moved into native Windows settings.

maccard 4 minutes ago | parent | next [-]

I agree with you on the precedent

> after MS implemented precision touchpads somewhere in 2015, and suddenly Windows touchpads became as precise as those on Macs.

There’s still a world of difference between a MacBook touchpad and a windows one. My work laptop (18 month old dell XPS) can’t hold a candle to my 6 year old MacBook’s trackpad.

> Likewise with RGB peripherals. Even GPU driver applications have increasingly become less useful as the most important features—power control, adaptive sync, HDR, etc have moved into native Windows settings.

The peripherals still need the addons though; I have ASUS armory crate, Corsair iCue and MSI center for my Motherboard, cooler and GPU respectively. They all suck.

denkmoon 8 minutes ago | parent | prev | next [-]

I can only imagine the meetings at microsoft HQ where they all sat around a table and crossed their fingers and hoped that vendors would act in the spirit of their design.

petesergeant 8 minutes ago | parent | prev [-]

> One can't expect that every driver package submission from every vendor is thoroughly vetted every time, this is a matter of trust and respect.

Apple seem to do a pretty decent job of just that

felooboolooomba 30 minutes ago | parent | prev [-]

> That headline was a lie.

Kinda agree but let's call it "misinformed" or something, instead of a lie.

drnick1 2 hours ago | parent | prev | next [-]

Another win for the Linux security model (software installed and updated manually from vetted repos only).

voidUpdate 4 minutes ago | parent | next [-]

sudo dkpg -i FileYouDownloadedFromAnywhere.deb

gblargg an hour ago | parent | prev | next [-]

Wait, you're saying a monitor can just advertise a URL over the video connection for its driver and then Windows will blindly install it, without user confirmation? I thought that LG had submitted these "drivers" (adware) to Microsoft and they approved it.

stkdump 42 minutes ago | parent | next [-]

I think the point is that:

1. Yes Windows must have "approved" the drivers

2. Windows Update runs automatically and not (usually) manually

3. Automatic update can't even be disabled, only manually postponed a bit

At least 2 and 3 are different on virtually every Linux distro. Also, I find it very unlikely that they would accept such behavior.

To give MS the benefit of the doubt here, now that this happened and has been reported on they might decide to enforce stricter rules on manufacturers in the future. But as a Windows user you don't have a choice in case you don't like how they decide and how their decisions might change again later.

dmos62 30 minutes ago | parent [-]

https://github.com/raphire/win11debloat

This has an option to disable downloading of auxiliary apps when a device is connected. Yes, it's a Windows Update thing.

> Prevent Windows from auto-installing device companion apps, like LG Monitor App, Alienware Command Center and more.

bayindirh an hour ago | parent | prev | next [-]

I believe you register your device with Microsoft so Windows can automatically obtain and install drivers for them when they are plugged in.

What LG sent in for installation is not a simple .inf or .sys/.dll file. They sent in a whole bag of software which does all the nasty things, and Microsoft doesn't vet or care about the software installed as the "driver" of the hardware.

ssl-3 an hour ago | parent | prev [-]

Eh? No.

It's just a device attached to a computer.

But in a Plug-and-Play world, its addition is noticed by the operating system -- as has been normal for decades.

Microsoft's Windows operating system sees this new hardware ID and then goes forth to install whatever-the-fuck software it associates with that identification, presumably as a service to the user. (Did Microsoft approve it? Dunno. I'm just over hear eating popcorn.)

delta_p_delta_x 38 minutes ago | parent | prev | next [-]

> Another win for the Linux security model

I swear, OSs have become sports teams.

Linux's 'security model’ has plenty of holes. The very fact the kernel and much of its user-mode is written in C almost guarantees that its security model is worthless. The Linux ecosystem operates on trust and respect that can and has been easily abused by bad actors to provide supply-chain pwnage.

There have been so many zero-click local privilege escalation CVEs I've lost track.

Arch Linux AUR malware: https://lists.archlinux.org/archives/list/aur-general@lists....

silver_silver 30 minutes ago | parent | next [-]

AUR is an effectively unmoderated user repo. It’s not Arch Linux’s core repository, nor is it enabled by default or indeed even possible to use without manual downloads from outside the package manager.

opan 30 minutes ago | parent | prev [-]

I think you can probably find a better example, even if less recent. The AUR is unofficial and not properly vetted in the same way as the actual Arch repos, Debian repos, etc.

krige an hour ago | parent | prev [-]

Surely you mean Linux security model (not relevant enough to be targeted by big tech)?

dns_snek an hour ago | parent [-]

It's not a weakness that they targeted and exploited, it's a feature that was purposefully implemented by Microsoft.

meta-level an hour ago | parent | prev [-]

yet?

I guess with more and more consumer devices running Linux based OSes (SteamOS, Android, Bazzite, Silverblue, ..) that becomes more and more interesting.

And unfortunately the "I'm safe on my non-windows-system" argument doesn't count for long, as the 99% muggle crowd justifies a shift to a world where our non-certified (=> 'insecure') systems are not supported by big companies anymore, as it's currently happening on Android.

Gigachad an hour ago | parent | next [-]

The LG scandal specifically relies on the fact windows will auto install OEM crapware as soon as you plug it in. No other OS does that.

rconti an hour ago | parent [-]

Huh? What does WebOS have to do with windows?

smackeyacky 19 minutes ago | parent [-]

LG monitors not TVs

ahartmetz an hour ago | parent | prev [-]

"Fortunately", agent Poettering is on the case, implementing remote attestation for Linux so we can all be secure. Barf.

michaelchisari 2 hours ago | parent | prev | next [-]

Never once had a problem with an LG because I've never given it internet access. A trustworthy set top box handles everything instead. Concerned that might not be an option in the future.

jmward01 an hour ago | parent | next [-]

That is my problem. What can you trust anymore? Is there an appliance out there that can do the basics and not be a malware gateway?

mapt an hour ago | parent [-]

Smart TVs replaced dumb TVs not out of consumer demand, but out of subsidy from commercial databrokers and streaming services. Despite adding $100 of hardware they were priced $100 cheaper.

lodovic an hour ago | parent [-]

I'm always wondering how hard it would be to just remove the hardware for spying. Just keep enough hardware to make it a dumb panel, remove the webos logic boards, wifi antenna, etc.

gblargg an hour ago | parent | prev [-]

LG now installs adware when you merely connect one of their monitors to a Windows PC.

mikepurvis 3 hours ago | parent | prev | next [-]

I'm mostly very happy with my LG C4 as a home theatre centerpiece, and I did have it online so that I could use the apps for YouTube and Jellyfin. However, the lack of support for modern 4k rips (HEVC+DTS) ended up being a dealbreaker and I finally ditched the built in software for a fire stick instead.

No transcoding, no weird codec issues, just the raw files direct streamed from the underpowered Unraid box, into the back of the AVR where the audio is handled correctly and the video is sent to the screen.

userbinator 2 hours ago | parent | prev | next [-]

13 years ago: https://news.ycombinator.com/item?id=6759426

CivBase 4 hours ago | parent | prev | next [-]

Stop buying LG TVs.

smcleod 3 hours ago | parent | next [-]

Unfortunately they make arguably the best OLEDs and webOS is pretty decent to use (especially compared to the terrible OS that Samsung and Sony run). I think the best thing people can do is update their firmware then disconnect it from the internet. Using an AppleTV or similar provides a better experience than any TVs built in apps anyway.

cosmic_cheese 2 hours ago | parent | next [-]

I don’t ever use their “smart” functionality (that’s what my Apple TV is for) but I’ve never had any issues with the Google TV (Android) build that Sony ships. It doesn’t nag me about being kept offline, is reasonably fast, and doesn’t even show its home screen unless I specifically summon it, so it checks my boxes.

mey 3 hours ago | parent | prev | next [-]

How important is "the best" OLED vs the second best or 100th best OLED? I am personally ok not buying the bleeding edge to not get malware onto my OS.

smcleod 5 minutes ago | parent | next [-]

If you care about home cinema it's important. There's a pretty big jump down. You can look up the specs and reviews of the C and G series from LG. Anecdotally quite a few times when people see my 7 year old LG C9 I've had them ask if it was some new expensive TV as they are so impressed with the picture.

notatoad 3 hours ago | parent | prev | next [-]

reasonably important, if you're never connecting your lg tv to any network, and just connecting it to an AppleTV or something and letting HDMI-CEC control it so you never even see their OS.

StumpChunkman 3 hours ago | parent | next [-]

Exactly this. And with an Apple TV 4K Ethernet, you've got a bonus Thread border router for smart home devices. I actually didn't even realize that initially, but was very pleased when I found IKEAs latest round of Matter over Thread devices paired nicely with it and my existing Home Assistant + Hue setup.

drnick1 2 hours ago | parent | prev [-]

I would suggest a mini-PC running Linux and Plasma Bigscreen instead of an AppleTV if you want something 100% private and user-controlled.

przmk 12 minutes ago | parent | next [-]

Unless you're using streaming services like Netflix, in which case you're stuck with 720p because of widevine.

N19PEDL2 an hour ago | parent | prev [-]

Do you recommend any specific distro for this?

theplumber 3 hours ago | parent | prev | next [-]

If you care about malware you do not plug it into the internet. I think windows computers are pretty mallwareish as well or at least spyware. People who buy Oled buy them because they care about PQ.

altairprime an hour ago | parent | prev | next [-]

2nd best, not. 100th, better to get a great LCD than a junk OLED?

3 hours ago | parent | prev | next [-]
[deleted]
globular-toast 2 hours ago | parent | prev | next [-]

Exactly. If you get the best today it'll be the second best tomorrow anyway. Absolute position is undetectable, you can only perceive change. Use that to your advantage and stay off the treadmill.

smcleod 4 minutes ago | parent [-]

7 years into my C9 and it never fails to impress.

Bud 2 hours ago | parent | prev [-]

[dead]

jedberg 3 hours ago | parent | prev | next [-]

I haven’t looked recently but last I checked Samsung made the best panels. Has that changed recently?

nvme0n1p1 3 hours ago | parent | next [-]

Samsung scored highest on https://www.rtings.com/ for my criteria, and I'm happy with the purchase. I didn't connect it to the network, of course. (I had to stop my handyman from connecting it and he seemed to think I was crazy for insisting.)

lostlogin an hour ago | parent | next [-]

I installed a Pihole and set an edge router to direct any port 53 traffic that wasn’t from the Pihole, to the Pihole.

That made a Samsung behave a little better. But giving it no network access is better.

ahartmetz 3 hours ago | parent | prev | next [-]

"I work in software. I have seen things you people wouldn't believe. Attack ships on fire off the shoulder of Orion. I watched C-beams glitter in the dark near the Tannhäuser Gate..."

MemoryHoleHQ 21 minutes ago | parent | prev [-]

[dead]

dodslaser 2 hours ago | parent | prev | next [-]

Samsung is good, except:

- No Dolby Vision support, only HDR10+ - Issues with judder/micro stutter - History of nerfing TVs via OTA updates - HDMI ports randomly failing - Bad HDMI-CEC implementation - Selling completely different panel generations under the exact same model names.

smcleod 3 hours ago | parent | prev | next [-]

Their panels are often over-saturated with that fake HDR like look, similar to their phones.

ahartmetz 3 hours ago | parent | next [-]

Most screens come with "showroom settings" out of the box. You need to configure them to something more neutral once and then it's fine.

smcleod 2 hours ago | parent [-]

I'm aware of that setting, but this is the Samsung baseline. The panels they export for OEMs / other manufacturers don't seem to have the same hyper saturation. Even just standing next to someone using a Samsung phone or tablet you can often spot it straight away we know you what to look for.

ahartmetz an hour ago | parent [-]

Even phones have screen settings these days (much less detailed than monitors). On my Motorola phone w/ OLED screen, I turned off "vibrant colors" or something like that. Maybe the people you saw didn't bother or liked it. Maybe there is something that can't be turned off, who knows. I only have semi-regular experience with an older (and non OLED) Samsung tablet which seems fine.

TeMPOraL 37 minutes ago | parent | prev | next [-]

Over saturated HDR is a good default in times when all TV shows only use various shades of pitch black.

PowerElectronix 2 hours ago | parent | prev [-]

That goes away if you set them in filmaker mode.

PowerElectronix 2 hours ago | parent | prev [-]

No, qd-oled is still best, LG is closing the gap with tandem oled but is still the second best panel tech.

pjmlp 2 hours ago | parent | prev [-]

Have to agree, WebOS is much better than Android TV OS, with ads on the dashboard.

Gigachad an hour ago | parent | next [-]

As long as you keep it off the internet. Otherwise it’s absolute loaded with adverts everywhere.

pjmlp 44 minutes ago | parent [-]

Not the 2020 version I have, it has a suggested shows row from the apps I have already installed, which makes sense.

Android TV even has ads for Disney and Apple, which I never installed.

Leonard_of_Q 2 hours ago | parent | prev [-]

You can replace the Android TV launcher with an alternative like Projectivy [1] to get rid of whatever nonsense the stock launcher tries to push. Add Flicky [2] to address F-Droid and you've got a nuisance-free Android TV.

[1] https://github.com/spocky/miproja1

[2] https://github.com/mlm-games/flicky

pjmlp 43 minutes ago | parent [-]

Thanks, however is kind of the problem, it shouldn't be a thing in first place.

matheusmoreira 3 hours ago | parent | prev | next [-]

Aren't they the only TVs that can be jailbroken?

bcraven 2 hours ago | parent [-]

I decided there wasn't much to do if I did:

https://www.webosbrew.org/rooting/

kaelwd 2 hours ago | parent | prev [-]

And buy what? Smasnug? Sony? They're all uniquely shit.

MiddleEndian 3 hours ago | parent | prev | next [-]

My LG DualUp monitors (with no internet access) recently triggered some LG Adware Bullshit to install on my Windows laptop. So I'd say stop using LG anything (or Windows anything since they're voluntarily in on the scam too lol). If you want the 2560x2880, maybe buy the knock-off INNOCN vertical monitors.

https://old.reddit.com/r/pcmasterrace/comments/1v1pkbs/lg_sp... ← examples of others who ran into the same shit

marssaxman an hour ago | parent [-]

I would probably have a DualUp by now if I could find one available anywhere: it's a very appealing form factor. I looked at the INNOCN site, but only see normal-looking monitors there; do you have a model name or any pointers I could search for?

3 hours ago | parent | prev [-]
[deleted]