this post was submitted on 24 Dec 2024
762 points (99.1% liked)

Technology

60115 readers
2475 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] CaptDust@sh.itjust.works 376 points 2 days ago (2 children)

When you turn on your PC and notice that there’s a huge Christmas banner on your desktop, do not panic – your device is not compromised.

Hah, well a vendor just pushed unapproved executable to the device and ran it without consent. Under any definition or other context it's definitely compromised.

[–] stoy@lemmy.zip 110 points 2 days ago (7 children)

This is why I boycott Logitech, they started pushing the Logitech Download Assistant through Windows Update as soon as you connect a Logitech mouse/keyboard.

It autoruns not only when it is first installed but on every startup.

It is rather annoying to try and uninstall it, I don't get why there has been so little backlash against this....

Microsoft permitting this is devaluing Windows Update, the driver (.inf) should be installed automatically, any executable file that WU wants to download and run on your computer should just bring up a small Windows notification saying something like this:

The device you just installed requests to download and run the following program from Windows Update:

Logitech Download Assistant

Will you approve or reject this request? Approve/Reject

It is just terrible that this is permitted

[–] xavier666@lemm.ee 4 points 1 day ago

It's almost as if the PC doesn't belong to you anymore

[–] mat@linux.community 25 points 2 days ago (1 children)

I never knew about this (using Linux) but when I plugged my mouse onto a friend's laptop and suddenly a big banner animated onscreen, my heart sank lol. No idea how this works but it was pretty unexpected.

[–] BeardedGingerWonder@feddit.uk 11 points 2 days ago

I try not to be too Linux fanboish these days, but what in the ever loving fuck is that about? Windows sounds like it's reverted to 90s/early 2000s novelty crap and browser toolbars.

[–] pufferfisherpowder@lemmy.world 15 points 2 days ago

I get this request sometimes on my work machine. Guess what? I don't even have the rights to install it. Insanity

[–] SpaceCadet@feddit.nl 7 points 2 days ago (2 children)

This is why I boycott Logitech

You should boycott Microsoft instead. As you say, they're the ones permitting it.

[–] nutsack@lemmy.world -3 points 1 day ago

im guessing you use arch btw

[–] stoy@lemmy.zip 2 points 2 days ago (2 children)

I would if I could, but I work with Windows and if I migrate to Linux at home, my skills in Windows would dimminish

[–] lightnsfw@reddthat.com 3 points 2 days ago (1 children)

Wouldn't your skills be kept sharp by using it at work?

[–] stoy@lemmy.zip 4 points 2 days ago

It doesn't work like that for me I am afraid.

[–] circuitfarmer@lemmy.sdf.org 8 points 2 days ago

It sucks because I've always liked Logitech hardware. Though I suppose you don't need to run the software suite (or if you're on Linux it isn't an option anyway).

[–] wreckedcarzz@lemmy.world 3 points 2 days ago (1 children)

Cannot confirm, I have a g903, paired mouse pad, and their brio webcam. I only have the G Hub, which I installed manually. Maybe they stopped this behavior?

[–] stoy@lemmy.zip 2 points 2 days ago (1 children)
[–] wreckedcarzz@lemmy.world 2 points 2 days ago

Yeah, I have neither the mentioned files in sys32 or the entry in dev mgr. This might be discontinued?

[–] A7thStone@lemmy.world 2 points 2 days ago (1 children)

I had windows update try to brick the BIOS on my Lenovo workstation recently. I can't believe Microsoft and manufacturers do this kind of shit. Luckily my workstation had dual BIOS so I could recover it. Between that and the fact that lenovo manufacturer locks their processors I would have waited until I could afford a supermicro had I known.

[–] Appoxo@lemmy.dbzer0.com 2 points 2 days ago (1 children)

That shits on Lenovo because I never had an issue with Microsoft updating the UEFI of HP machines of our clients.

[–] A7thStone@lemmy.world 2 points 2 days ago (2 children)

https://www.tomshardware.com/laptops/hp-bricks-probook-laptops-with-bad-bios-many-users-face-black-screen-after-windows-includes-firmware-in-automatic-updates

I'm not trying to protect lenovo. I think they are a shit company now, and I should have some my research better before buying my computer, but they aren't the only ones doing this. Anyone who's done BIOS updates knows that shouldn't be done automatically, but manufacturers and Microsoft seem to think it's a good idea to push it through automatic updates.

Especially when there's a chance that the bios update resets the tpm and if the user has enabled bitlocker (automatically done in background without user consent on windows 11 if using a Microsoft account) then they need to type the decryption key to boot again.

Happened twice on my laptop

[–] Appoxo@lemmy.dbzer0.com 1 points 1 day ago

Never said HP are saints either. Just my anectode of it not happening (yet).

[–] user224@lemmy.sdf.org 42 points 2 days ago (4 children)

Welp, seems ASUS motherboards also push this by default: https://www.techpowerup.com/248827/asus-z390-motherboards-automatically-push-software-into-your-windows-installation

During testing for our Intel Core i9-9900K review we found out that new ASUS Z390 motherboards automatically install software and drivers to your Windows 10 System, without the need for network access, and without any user knowledge or confirmation. This process happens in complete network-isolation (i.e. the machine has no Internet or LAN access).

[–] xavier666@lemm.ee 2 points 1 day ago

This is how cheats are installed on LAN competitions

[–] skaffi@infosec.pub 6 points 2 days ago (1 children)

Holy shit. I got Logitech peripherals, and an ASUS motherboard. I'm glad I'm on Linux. I still have Windows installed, and booted into it around 2 weeks ago, after it having lied dormant for four months. I didn't notice anything being installed, but maybe I had to reboot first.

Quite possibly, my peripherals and motherboard are all too old to have this anti-feature. Do you know if there is a list of which of their hardware this is the case for?

Damnit, I always preferred Logitech mice. I guess I might have bought my last one.

[–] zipzoopaboop@lemmynsfw.com 3 points 2 days ago (1 children)

What's Logitech have to do with it

[–] dubyakay@lemmy.ca 6 points 2 days ago (1 children)
[–] user224@lemmy.sdf.org 29 points 2 days ago* (last edited 2 days ago) (1 children)

The ASUS UEFI firmware exposes an ACPI table to Windows 10, called "WPBT" or "Windows Platform Binary Table". WPBT is used in the pre-built OEM industry, and is referred to as "the Vendor's Rootkit." Put simply, it is a script that makes Windows copy data from the BIOS to the System32 folder on the machine and execute it during Windows startup - every single time the system is booted.

So, sounds like a Windows-specific ~~vulnerability~~ feature.

[–] Grabthar@lemmy.world 2 points 2 days ago

Make a read only file/folder with the same name and the script should fail. But that is horseshit.

[–] wreckedcarzz@lemmy.world 3 points 2 days ago

Similarly (above), I can't confirm this either, on two different Asus boards, still in support/updates. I'm assuming this requires their software to be installed, which there's no point to, so I didn't bother... Maybe it's part of their armory crate system, which can (should) be disabled in the bios...