AI News AI资讯 5h ago Updated 2h ago 更新于 2小时前 42

Microsoft responds to LG monitors installing McAfee ads on Windows 微软回应LG显示器在Windows上安装McAfee广告

LG is removing McAfee pop-up ads from the "LG Monitor App Installer" following public backlash and intervention by Microsoft. The app was automatically installed via Windows Update alongside monitor drivers, pushing ads for third-party software without explicit user consent. The incident highlights a broader industry issue where peripheral manufacturers use companion apps to install bloatware and collect extensive user data. Microsoft acknowledged the practice but noted that Universal Windows Pl LG通过Windows Update在用户不知情的情况下,向连接的电脑静默安装“LG Monitor App Installer”应用并推送McAfee等广告。 在Gamers Nexus曝光及用户投诉后,微软介入协调,LG同意禁用该应用中的McAfee弹窗广告。 该事件暴露了微软UWP设备应用自动安装机制的隐私与用户体验漏洞,允许外设软件在无需明确授权下获取系统资源权限。 此类“预装软件/广告软件”行为并非个例,Razer、Logitech、Asus等硬件厂商也曾因类似做法受到批评。

65
Hot 热度
60
Quality 质量
55
Impact 影响力

Analysis 深度分析

TL;DR

  • LG is removing McAfee pop-up ads from the "LG Monitor App Installer" following public backlash and intervention by Microsoft.
  • The app was automatically installed via Windows Update alongside monitor drivers, pushing ads for third-party software without explicit user consent.
  • The incident highlights a broader industry issue where peripheral manufacturers use companion apps to install bloatware and collect extensive user data.
  • Microsoft acknowledged the practice but noted that Universal Windows Platform (UWP) device apps can auto-install if users haven't opted out of recommended settings.
  • Privacy concerns remain significant, as the installed app reportedly grants access to system resources, geolocation, online activity, and user credentials.

Why It Matters

This incident serves as a critical case study in hardware-software integration ethics, demonstrating how peripheral vendors can leverage OS update mechanisms to distribute unwanted software. For AI practitioners and tech professionals, it underscores the importance of transparency in automated installations and the potential privacy risks associated with IoT devices gaining deep system access. It also illustrates the growing scrutiny on "bloatware" practices across the hardware industry, affecting consumer trust and brand reputation.

Technical Details

  • Distribution Mechanism: The "LG Monitor App Installer" was distributed through Windows Update, bundled with standard monitor driver updates, allowing it to bypass traditional installation prompts.
  • Automatic Installation Policy: Microsoft’s support documentation confirms that UWP device apps can automatically install upon connection if the user has not opted out of "Recommended Settings" during initial setup and is signed into the Microsoft Store.
  • Privileges and Data Collection: Once installed, the application requested permissions to use "all system resources," including the ability to collect geolocation, device data, online activity, contacts, user credentials, and transaction history.
  • Scope of Affected Hardware: Specific LG UltraGear models identified include the 34GX900A-B, 45GX950-B.AEU, 32GS95UE-B, 39GX950B, 27GP83B-B, 27GN800, and 27GN850-B.
  • Remediation: Following pressure from media outlets like Gamers Nexus and engagement from Microsoft executives, LG agreed to disable the specific McAfee ad component, though the underlying auto-installation capability remains a point of contention.

Industry Insight

  • Regulatory and Consumer Trust Risks: Hardware vendors must reconsider aggressive bloatware strategies; the negative publicity surrounding LG demonstrates that consumers are increasingly aware of and resistant to hidden software installations, especially on premium products.
  • OS Platform Responsibility: Operating system providers like Microsoft face increasing pressure to tighten default settings for automatic app installations, ensuring users have clear opt-out mechanisms rather than relying on obscure "recommended settings" configurations.
  • Privacy by Design: Peripheral manufacturers should adopt a "privacy by design" approach, limiting data collection to only what is strictly necessary for device functionality and ensuring explicit, informed consent for any additional software or services installed.

TL;DR

  • LG通过Windows Update在用户不知情的情况下,向连接的电脑静默安装“LG Monitor App Installer”应用并推送McAfee等广告。
  • 在Gamers Nexus曝光及用户投诉后,微软介入协调,LG同意禁用该应用中的McAfee弹窗广告。
  • 该事件暴露了微软UWP设备应用自动安装机制的隐私与用户体验漏洞,允许外设软件在无需明确授权下获取系统资源权限。
  • 此类“预装软件/广告软件”行为并非个例,Razer、Logitech、Asus等硬件厂商也曾因类似做法受到批评。

为什么值得看

这篇文章揭示了硬件厂商与操作系统平台之间在用户体验和隐私边界上的冲突,特别是Windows UWP自动安装机制被滥用的风险。对于AI及科技从业者而言,它提供了一个关于边缘计算设备(如智能显示器)数据收集合规性及用户信任管理的典型案例。

技术解析

  • 安装机制:LG Monitor App Installer利用Windows Update驱动更新通道进行分发,并通过Microsoft Store的Universal Windows Platform (UWP) 设备应用功能,在用户连接设备且未退出推荐设置时自动静默安装。
  • 权限与数据收集:一旦安装,该应用获得“所有系统资源”的使用权限,并可收集地理位置、设备数据、在线活动、联系人、用户凭据及交易信息等敏感数据。
  • 广告推送逻辑:应用每次启动均在屏幕右下角弹出通知,主要推广McAfee 30天免费试用,偶尔推广LG自家软件(如Switch, Calibration Studio等)。
  • 受影响范围:涉及多款LG UltraGear及高端显示器型号(如34GX900A-B, 45GX950-B.AEU等),且该行为已持续数年,近期因更新日志提及McAfee而引发大规模用户反弹。

行业启示

  • 平台责任与审核机制:微软允许UWP设备应用在无通知情况下自动安装,这种设计缺陷加剧了用户对隐私泄露的担忧。平台方需重新审视自动安装策略,平衡便利性、安全性与用户知情权。
  • 硬件智能化带来的隐私风险:随着显示器、键盘鼠标等外设日益智能化并接入PC生态,其附带软件的权限索取和数据收集行为成为新的隐私攻击面。厂商需在产品设计初期就确立透明的数据使用政策。
  • 品牌信任危机管理:高价硬件产品若捆绑未经同意的广告软件,将严重损害品牌形象和用户忠诚度。LG虽在压力下整改,但长期积累的负面口碑可能影响其高端市场地位,其他硬件厂商应引以为戒。

Disclaimer: The above content is generated by AI and is for reference only. 免责声明:以上内容由 AI 生成,仅供参考。

Security 安全 Product Launch 产品发布