I would simply disable windows update. It always seemed insane to me that the solution to preventing RCE was to open an RCE channel to basically every provider that has installed a driver or an application on your machine.
Each auto-update is by definition remote code execution.
I've disabled Windows updates since 2017. Occasionally, I'll hit a feature I have to update for, like Windows Mixed Reality, and then pull that specific feature update. I think back in 2021 I had to update to the 2019 version of Windows 10 for that. I used uupdump to download what I needed and install it offline.
All the fiascos lately about Microsoft completely bricking and destroying systems with terrible updates just reinforce my original decision.
Note that I'm not at all hostile to updates in general. I'll update my Mac as soon as one's available, even to unstable betas, because it automatically reopens my apps and doesn't lose a bunch of state like Windows does. I'll also update my iPhone and iPad. It's really just Microsoft that I don't trust and never have.
When I got a new PC desktop, I decided to give Windows 11 a chance, and it's not bad. I hated for a while that the UI feels like just a ripoff of ChromeOS, but eventually I got used to it. I only update the minimum amount necessary when anti-cheats decide my old files are no longer trusted (looking at you, ARC Raiders).
50% is a bit much. People do expect their hardware to just work. That means installing drivers and the like. And the act here is so egregious that I can't imagine being an LG engineer and living with the shame of being so incredibly despicable.
I'm disappointed with Microsoft, I'm incensed at LG.
I don't know that Microsoft is without significant blame here. They provided a mechanism for LG to do this without the necessary checks. They could just as easily make part of the WHQL process and related agreements state pretty clearly that such behaviour is forbidden and will result in anything from financial penalties to driver decertification.
If anything, as shitty as LG's behaviour is, Microsoft gave them the tools to eke out a little more money at the expense of the consumer, and a company like LG is not likely to leave that money on the table out of the goodness of their hearts. As the scorpion told the frog - "It's my character".
What part of "software needed to control a peripheral" could POSSIBLY be defined as: "software that shows you ads, and/or uploads private data to vendor without even asking for consent"?
Or they could bundle a basic driver or police the driver they're curating while allowing people to download and install drivers directly from the vendor website with no policing, no signature checks, etc.
Distributing malware is negligent or malicious, yes. Not stopping users from seeking out their own malware is neither. Nothing stops you from running malware on Linux. The curated repos are simply good enough that there's not much reason to go looking elsewhere.
Well yeah, when you spend a significant segment of your corporate life being both negligent and an evil monopolist, people tend to assume the worst. Don't like it? Behave better.
It's getting really hard to find a solid, reputable brand of screen manufacturers that don't pull this kind of crap. I swore off Samsung screens after their popup ads in phones and TVs. LG was my next choice but this is deterring me even further.
I would totally prefer to buy something without spyware. But so far I have not found a good alternative to my 42" C-series OLED. You do have to carefully configure it to not phone home, but besides that (and some minor problems with peak brightness), it's great. If there was a non-spyware replacement, I'd buy it.
I decided I would never buy an LG monitor after mine broke and I had it shipped back three times for diag and repair. Each time it broke again soon after. They finally agreed to RMA it, but that didn’t mean a new replacement, it meant a refund, and not even for the whole price I had paid. Unfortunately the price had gone up a few hundred dollars since then, so I couldn’t even buy a replacement. This basically means they sold me a junk monitor I had to deal with for a year and then tried to get me to give them an extra $300 to roll the dice that the next one would work properly. I bought a BENQ instead, and it’s been solid.
That sucks. I've used an LG UltraFine 5K with my Mac Studio for years and still consider it one of my favorite tech purchases ever, so I feel lucky I've never needed their support services.
Keen to hear other recommendations. My DELL screen is working quite nicely but has weird burn in problems when connected through a Thunderbolt dock. What other brands (apart from the insanely priced Apple screens) still make high quality, reputable screens?
I have had good success with my dell montiors over the years. Only problem is they are not created equal, they sell to every level, entry/cheap office/gamers/high end docks/color calibrated/etc. I have stuck to the ultrasharps (and paid for it) but have been happy. Check out https://www.rtings.com/
Choosing wisely doesn't prevent any given manufacturer from adding crap like this in the future. They might not push out adware today, but nothing seems to stop them from doing so in the future.
That's what makes the LG controversy uncomfortable to me: the McAfee ads were pushed out years after some owners purchased their monitors.
Best thing I've done - monitor wise - is buy a 2019 iMac 5k and convert it to work as an external display. Such a beautiful display. Only downside is once you go 5k it's very hard to go back to any lower resolution. I ended up converting a (much cheaper) 2015 iMac 5k for use in the office.
I think there's a software route you can go, but I went the hardware route. Essentially requires opening up the iMac, gutting out all the internals, and replacing it with a display driver board (from AliExpress, eBay, etc).
The display driver board has various inputs like HDMI, Thunderbolt, USB-C etc so it ends up acting like any other external monitor. It has a remote you control the brightness/contrast etc settings.
I have an LG monitor... and while running Linux, will definitely not be buying another... this is ridiculous. I've been weary of "smart" TVs for a long while, WTF do you need a microphone on a TV?!?
If I buy a TV and it doesn't work without connecting to the internet, I'm simply going to return it. Changing this after the fact should mean a class action lawsuit. It's ridiculous, and MS should absolutely restrict this kind of crap... They (Microsoft) auto-load the software for Logitec mice and cameras as well, but at least they (Logitech) aren't injecting ad/spyware.
I have the same dual 32" LG setup at home and the dayjob, and have never had any issues or any requirements to install anything for them to work. That said, they're QHD, not 4k or 5k, and probably 6 years old. I'm not a gamer or a high-fidelity consumer, needing the displays to be dumb and reliable at rendering text and the web.
This is at the driver level, just like when you plugin new webcam, keyboard, gpu, etc. Windows will automatically install a default driver for that device. Now, instead of a driver, Windows will happily install some random craps that the hardware asks it to without needing any input from the users. Totally BS from Microsoft.
I was about to comment in wonder that people deliberately download and install hardware-related craplets deliberately, which is something my parents would do. (Creative Labs used to be very bad about this.) Then I realized there's now a (MS-approved!) mechanism by which devices can just ask Windows "Hey, mind installing this silently for me?".
I would simply disable windows update. It always seemed insane to me that the solution to preventing RCE was to open an RCE channel to basically every provider that has installed a driver or an application on your machine.
Each auto-update is by definition remote code execution.
Just stay on Windows 10 and it will be disabled for you!
I've disabled Windows updates since 2017. Occasionally, I'll hit a feature I have to update for, like Windows Mixed Reality, and then pull that specific feature update. I think back in 2021 I had to update to the 2019 version of Windows 10 for that. I used uupdump to download what I needed and install it offline.
All the fiascos lately about Microsoft completely bricking and destroying systems with terrible updates just reinforce my original decision.
Note that I'm not at all hostile to updates in general. I'll update my Mac as soon as one's available, even to unstable betas, because it automatically reopens my apps and doesn't lose a bunch of state like Windows does. I'll also update my iPhone and iPad. It's really just Microsoft that I don't trust and never have.
When I got a new PC desktop, I decided to give Windows 11 a chance, and it's not bad. I hated for a while that the UI feels like just a ripoff of ChromeOS, but eventually I got used to it. I only update the minimum amount necessary when anti-cheats decide my old files are no longer trusted (looking at you, ARC Raiders).
LG monitor works perfectly fine on my mac studio. Feels like Microsoft should be doing business differently.
Whilst it's preaching to the choir, I would attribute 50% of the blame to Microsoft. Loading any old thing and running it is not very responsible.
I'd argue closer 75%. Vendor abuse of this is hardly restricted to monitors, even if this is one of the more egregious cases.
50% is a bit much. People do expect their hardware to just work. That means installing drivers and the like. And the act here is so egregious that I can't imagine being an LG engineer and living with the shame of being so incredibly despicable.
I'm disappointed with Microsoft, I'm incensed at LG.
I don't know that Microsoft is without significant blame here. They provided a mechanism for LG to do this without the necessary checks. They could just as easily make part of the WHQL process and related agreements state pretty clearly that such behaviour is forbidden and will result in anything from financial penalties to driver decertification.
If anything, as shitty as LG's behaviour is, Microsoft gave them the tools to eke out a little more money at the expense of the consumer, and a company like LG is not likely to leave that money on the table out of the goodness of their hearts. As the scorpion told the frog - "It's my character".
What part of "software needed to control a peripheral" could POSSIBLY be defined as: "software that shows you ads, and/or uploads private data to vendor without even asking for consent"?
It’s as if nothing was learned from AutoRun CDs and the like.
Microsoft doesn't police IHVs -> Geeks: "MS is negligent!"
Microsoft does police IHVs -> Geeks: "MS is an evil monopolist!"
Or they could bundle a basic driver or police the driver they're curating while allowing people to download and install drivers directly from the vendor website with no policing, no signature checks, etc.
Distributing malware is negligent or malicious, yes. Not stopping users from seeking out their own malware is neither. Nothing stops you from running malware on Linux. The curated repos are simply good enough that there's not much reason to go looking elsewhere.
Poor Microsoft, what have they possibly done to deserve such lack of faith??
Well yeah, when you spend a significant segment of your corporate life being both negligent and an evil monopolist, people tend to assume the worst. Don't like it? Behave better.
It's getting really hard to find a solid, reputable brand of screen manufacturers that don't pull this kind of crap. I swore off Samsung screens after their popup ads in phones and TVs. LG was my next choice but this is deterring me even further.
What about DELL? The Dell UltraSharp lineup seems to be pretty solid. I am planning to get one once my LG Monitor dies.
Honestly I was more thinking about TVs than monitors but I often forget Dell makes good monitors.
I really appreciate that the Dell monitors don't have the stupid proprietary charging bricks. And fairly decent features.
Have to say, I've never been disappointed by a Dell monitor.
What about BenQ?
I am very happy with my BenQ monitors, they are great value and high quality.
I would totally prefer to buy something without spyware. But so far I have not found a good alternative to my 42" C-series OLED. You do have to carefully configure it to not phone home, but besides that (and some minor problems with peak brightness), it's great. If there was a non-spyware replacement, I'd buy it.
I decided I would never buy an LG monitor after mine broke and I had it shipped back three times for diag and repair. Each time it broke again soon after. They finally agreed to RMA it, but that didn’t mean a new replacement, it meant a refund, and not even for the whole price I had paid. Unfortunately the price had gone up a few hundred dollars since then, so I couldn’t even buy a replacement. This basically means they sold me a junk monitor I had to deal with for a year and then tried to get me to give them an extra $300 to roll the dice that the next one would work properly. I bought a BENQ instead, and it’s been solid.
That sucks. I've used an LG UltraFine 5K with my Mac Studio for years and still consider it one of my favorite tech purchases ever, so I feel lucky I've never needed their support services.
> I decided I would never buy an LG monitor after mine broke ...
Sheesh it's bad luck.
I've got an ultra-wide 38" LG monitor since 2017. Nearly 10 years and that thing is used daily and still running strong.
Keen to hear other recommendations. My DELL screen is working quite nicely but has weird burn in problems when connected through a Thunderbolt dock. What other brands (apart from the insanely priced Apple screens) still make high quality, reputable screens?
I have had good success with my dell montiors over the years. Only problem is they are not created equal, they sell to every level, entry/cheap office/gamers/high end docks/color calibrated/etc. I have stuck to the ultrasharps (and paid for it) but have been happy. Check out https://www.rtings.com/
99% of owners don't have an issue, you're some sort of power user terrorist.
Choosing wisely doesn't prevent any given manufacturer from adding crap like this in the future. They might not push out adware today, but nothing seems to stop them from doing so in the future.
That's what makes the LG controversy uncomfortable to me: the McAfee ads were pushed out years after some owners purchased their monitors.
Best thing I've done - monitor wise - is buy a 2019 iMac 5k and convert it to work as an external display. Such a beautiful display. Only downside is once you go 5k it's very hard to go back to any lower resolution. I ended up converting a (much cheaper) 2015 iMac 5k for use in the office.
how did you convert them? Was it a software or hardware thing?
I think there's a software route you can go, but I went the hardware route. Essentially requires opening up the iMac, gutting out all the internals, and replacing it with a display driver board (from AliExpress, eBay, etc).
The display driver board has various inputs like HDMI, Thunderbolt, USB-C etc so it ends up acting like any other external monitor. It has a remote you control the brightness/contrast etc settings.
I've got my Mac and PS5 hooked up to it. Love it!
So: Dell, BenQ, Asus (ProArt/ROG)?
* https://www.nytimes.com/wirecutter/reviews/best-monitors/
I have an LG monitor... and while running Linux, will definitely not be buying another... this is ridiculous. I've been weary of "smart" TVs for a long while, WTF do you need a microphone on a TV?!?
If I buy a TV and it doesn't work without connecting to the internet, I'm simply going to return it. Changing this after the fact should mean a class action lawsuit. It's ridiculous, and MS should absolutely restrict this kind of crap... They (Microsoft) auto-load the software for Logitec mice and cameras as well, but at least they (Logitech) aren't injecting ad/spyware.
Discussions:
LG monitors silently install software through Windows Update without consent
https://news.ycombinator.com/item?id=48956688
Update: Microsoft responds to LG monitors installing McAfee ads on Windows
https://arstechnica.com/gadgets/2026/07/microsoft-responds-t... (https://news.ycombinator.com/item?id=49028024)
Why analog monitors is better. Harder to install spyware. So called by the industry "Smart devices" are dumb for privacy reasons.
I have the same dual 32" LG setup at home and the dayjob, and have never had any issues or any requirements to install anything for them to work. That said, they're QHD, not 4k or 5k, and probably 6 years old. I'm not a gamer or a high-fidelity consumer, needing the displays to be dumb and reliable at rendering text and the web.
This is at the driver level, just like when you plugin new webcam, keyboard, gpu, etc. Windows will automatically install a default driver for that device. Now, instead of a driver, Windows will happily install some random craps that the hardware asks it to without needing any input from the users. Totally BS from Microsoft.
I was about to comment in wonder that people deliberately download and install hardware-related craplets deliberately, which is something my parents would do. (Creative Labs used to be very bad about this.) Then I realized there's now a (MS-approved!) mechanism by which devices can just ask Windows "Hey, mind installing this silently for me?".
Ghastly.
"Smart" = "Ads"
maybe elaborate a little here next time
The intention is that you read the article.