851
LG TVs and monitors said to surveil users and install bloatware without asking
(www.notebookcheck.net)
This is a most excellent place for technology news and articles.
I've used an LG monitor for about 5 years, and never install the manufacturer's software unless it looks genuinely useful. When I saw the Gamers Nexus video I went to check my installed apps, and sure enough there was LG's monitor app, installed silently without my knowledge. I used Bulk Crap Uninstaller to get rid of it.
To prevent this kind of thing in future, run gpedit.msc and enable “Prevent automatic download of applications associated with device metadata” under Computer Configuration → Administrative Templates → System → Device Installation.
I didn't watch the video, but maybe they said how this done.
If it installed silently, it must be getting pulled in via Windows update right? Where Microsoft just sees this a regular old driver for a device I would imagine?
I have an LG monitor, maybe about 5 years or older. But I don't have windows so I assume it knows nothing.
EDIT: Nevermind. I went and watched the section at the beginning, and yep that is exactly how it is done. Does windows not even vet what a vendor hands them as a driver? Perhaps they don't care, but this seems like an easily exploitable route.
I suspect the thoroughness of the vetting is inversely proportional to the size of the kickback to Microsoft.
Got me curious. Quick search and I found three windows drivers that had keyloggers hidden in them. Go figure it was HP!
HP Notebook Keyboard Drivers: Keylogging code was discovered in the SynTP.sys file, which was part of the Synaptics Touchpad driver shipped with certain HP notebook models.
HP Audio Drivers: Researchers found keylogging features within the Conexant HD Audio Driver (specifically version 1.0.0.46 and earlier) used in various HP laptops and other Windows systems.