94
Microsoft responds to LG monitors installing McAfee ads on Windows (arstechnica.com)
submitted 2 months ago by to c/technology@lemmy.world
26 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.world/post/50166453

Most "Smart" TVs use Automatic Content Recognition (ACR), essentially taking snapshots every 10+ms of what you watch and hear, then forwarding & selling that data to companies for ads, etc. I now feel it's only a matter of time before this "feature" finds its way to our ever "smarter" PC monitors.

LG with the help of Windows is already installing adware when the right Device ID is detected.

☑️ To disable ACR on TV: https://www.zdnet.com/home-and-office/home-entertainment/how-to-disable-acr-tv/

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 months ago (2 children)

That would be a way to sneak it in. Some monitors already have embedded USB-C hubs and have an Ethernet port to forward Ethernet to the connected computer.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 months ago (1 child)

    Oof. I'm actually using the USB Hub on my LG Monitor like that (with my Laptop connected to the USB-C) and recently thought "it would have been practical if it had an Ethernet port" now I'm quite happy it doesn't. Thinking they could just be running a simple embedded Linux to show ads and forwarding the Ethernet connecting that would be sneaky ... (Tough I would wonder about an additional Device on my Network)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 2 months ago

    You wouldn’t even really question your new device on the network. Since the monitor must forward the packets from and to your PC it’s MAC address would show up in the network, but that’s expected. And good luck separating the traffic of your monitor from that of your PC if it originates from the very same MAC address as it’s basically the new network card of your PC connected via USB C. And since it could act like a bridge, it could strip out the responses to its own requests and not forward those to your PC so you don’t even see them there. On the other side it’s all TLS encrypted so nothing to see either. Heck, it could even only send its own requests when your PC is actively using the connection so that it’s less noticeable.

    You might do some DPI and check what IPs you connect to but good luck finding if it really is your monitor and not some random app on your PC. If it’s using DoH, you can’t even inspect its DNS traffic to get a clue what’s going on (SNI in the handshake might still offer some clue).

    Also all of the above enables tracking and spying on you covertly. Ads are quite obvious, so there’s nothing to hide there.

  • permalink
  • fedilink
  • source
  • parent