The software that users install on their machines must be properly scrutinized and evaluated, not only for the utility but also for its origin and the security guarantees they offer.
When this software comes from a reputed manufacturer users normally tend to neglect, understandable and normal way, the issues of security.
A recent discovery has shown that LG has available an application, normally used with their monitors, which puts a Windows exposed to serious security problem.
This discovery was made by the investigator Christopher Bachner, which detected a behavior strange in the application Split Screen accompanying ultra wide monitors from LG.
What was detected by the investigator was a profound change in the Windows security settings, which makes this operating system and its users exposed the possible problems and without the most basic protections.
Specifically this application disables the protection mechanism of the Windows UAC. At the same time give admin rights to any user who is created in the system.
This whole process is done without any knowledge of the user when installing the application and want innocently improve the entire user experience, avoiding being to ask the user to approve changes that the application needs.
In making this change, and that is applied to all Windows, are removed the most basic Windows protection and security mechanisms.
Any application that runs will have permissions to make changes to the system without any warning given to the user.
Christopher Bachner documented on video the application installation process and what changes are made in the process, showing clearly the new security hole that opens.
The only way to resolve this security issue is the same application removal and reactivate the UAC in Windows. Only in this way the user and Windows are actually immune to any future security problem.
The LG has already taken this problem and is currently realize the impact and looking for a way to resolve.
When looking for a simple way to improve the use of your application, LG ended up creating a huge security hole and exposing Windows users to potential problems
<-.! 123293079 321-- >
-> ->
<-
<-
Filed in category:
->
No comments:
Post a Comment