• zerofk@lemm.ee
      link
      fedilink
      English
      arrow-up
      4
      ·
      59 minutes ago

      There is nothing wrong with your device. Do not attempt to adjust the picture. We control the horizontal. We control the vertical.

  • Shimitar@feddit.it
    link
    fedilink
    English
    arrow-up
    19
    ·
    5 hours ago

    Somebody should create a windows executable to be placed in the WPBT that silently install Linux on first windows boot…

  • MonkderVierte@lemmy.ml
    link
    fedilink
    English
    arrow-up
    112
    ·
    edit-2
    13 hours ago

    It is a part of the ASUS Armoury Crate software that is pre-installed on some ASUS PCs.

    Always flash new OS if you buy a computer.

    • interdimensionalmeme@lemmy.ml
      link
      fedilink
      English
      arrow-up
      59
      ·
      9 hours ago

      That’s in the bios, it’s a pcie device that windows allows to inject root level code into your environement, you have to turn it off and hope nothing ever spoofs that pcie id because that’s a permanent hardware rootkit into your pc like EFI

      • Etienne_Dahu@jlai.lu
        link
        fedilink
        English
        arrow-up
        28
        ·
        7 hours ago

        That’s in the bios, it’s a pcie device that windows allows to inject root level code into your environement

        What. The. Fuck. Are they the only one to install their crap so deep?

          • Sylvartas@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            9
            ·
            2 hours ago

            ROG is Asus.

            Also I don’t think I’ve ever had this issue with my previous, nor my current rog boards. I never use their drivers CD so maybe that helps

          • Netrunner@programming.dev
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 hour ago

            Msi tomahawk has it too.

            Gotta go in the bios and make sure your motherboard isn’t “helping” with drivers.

            • Saleh@feddit.org
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 hours ago

              I dont know the exact model, but i think it is marketed B2B specifically. It advertises its “wolf security” on boot, which according to HP “offers hardware-enforced security layers, from motherboard to cloud, to prevent and contain malware, phishing, ransomware, and remote access attacks. It also provides solutions for patching, privileged access, remote management, incident recovery, and print security.”

              So it is something that allows HP access on the BIOS level.

              • Appoxo@lemmy.dbzer0.com
                link
                fedilink
                English
                arrow-up
                1
                ·
                2 hours ago

                If it’s b2b it sounds like elite or pro model.
                But this wolf thingie is something about securing something.
                We usually remove it and it doesnt appear new installations.

    • Link@rentadrunk.org
      link
      fedilink
      English
      arrow-up
      109
      ·
      edit-2
      13 hours ago

      That won’t get rid of it unless you also manually go into the BIOS and disable the install ASUS Armoury Crate setting as explained in the article.

      If you don’t do this it will automatically reinstall even on a fresh install of Windows. Some of these bloatware programs will even install without an internet connection! This absolutely ludicrously stupid feature is called WPBT and is used by lots of manufacturers. Luckily it doesn’t work on Linux (at least for now…).

      • MonkderVierte@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        2 hours ago

        Depends on your skills and what you want. I’m currently configuring a setup on Void, to learn about login, Wayland & Flatpak. Is that up your alley?

      • pool_spray_098@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 hours ago

        This cracks me up that everyone has a different distro to recommend… But I’ve tried many and OpenSUSE Tumbleweed was the standout that I’ve decided to stick with indefinitely.

      • chunkystyles@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        5
        ·
        7 hours ago

        Universal Blue is my go-to. Their OSs feel like the future. They are so easy to use and low maintenance. The upgrades happen in the background and apply automatically when you restart your computer.

        There are three flavors: Bazzite for gaming Bluefin and Aurora for basic workstations and developers

        I went with Aurora for myself because I like the developer focused stuff. But I also do a lot of gaming. Even though it’s not gaming focused, it’s still great for gaming.

        My wife uses it on her laptop, too. She doesn’t give a shit what her OS is as long as it works and she can use the browser.

      • WorseDoughnut 🍩@lemdro.id
        link
        fedilink
        English
        arrow-up
        6
        ·
        10 hours ago

        EndeavourOS

        Even for beginners it’s got a fantastic starting layout and default packages, but it’s still basically “just Arch Linux” where it counts so you get the best of both worlds.

        • ObsidianZed@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          8 hours ago

          +1 for EndeavourOS here. For 90% of what I do, it was a virtually seamless transition. Only hang up is a few games, VR, etc.

        • Telodzrum@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          9 hours ago

          Garuda is probably a better option if the focus is gaming. It’s the same idea, just with a focus on gaming hardware and software ready to go, out of the gate.

        • Wiz@midwest.social
          link
          fedilink
          English
          arrow-up
          1
          ·
          8 hours ago

          Hi there. I just installed Kubuntu on a spare machine, but I ran into a problem with the snaps. How would one “de-snap” it? Can you point me in the right direction?

          • mitrosus@discuss.tchncs.de
            link
            fedilink
            English
            arrow-up
            4
            ·
            edit-2
            8 hours ago
            • Remove Snap packages
            snap remove <package-name>
            

            (To check snap PKG installed, run

            snap list
            

            )

            • Uninstall Snapd
            sudo apt purge snapd
            
            • Remove leftover files
            sudo rm -rf /var/cache/snapd/
            

            and/snap`.

            • Optionally install Flatpak if you want an alternative.
            sudo apt install flatpak
            

            . Don’t forget to visit flathub.

  • CaptDust@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    276
    ·
    15 hours ago

    When you turn on your PC and notice that there’s a huge Christmas banner on your desktop, do not panic – your device is not compromised.

    Hah, well a vendor just pushed unapproved executable to the device and ran it without consent. Under any definition or other context it’s definitely compromised.

    • stoy@lemmy.zip
      link
      fedilink
      English
      arrow-up
      78
      ·
      14 hours ago

      This is why I boycott Logitech, they started pushing the Logitech Download Assistant through Windows Update as soon as you connect a Logitech mouse/keyboard.

      It autoruns not only when it is first installed but on every startup.

      It is rather annoying to try and uninstall it, I don’t get why there has been so little backlash against this…

      Microsoft permitting this is devaluing Windows Update, the driver (.inf) should be installed automatically, any executable file that WU wants to download and run on your computer should just bring up a small Windows notification saying something like this:

      The device you just installed requests to download and run the following program from Windows Update:

      Logitech Download Assistant

      Will you approve or reject this request? Approve/Reject

      It is just terrible that this is permitted

      • DefederateLemmyMl@feddit.nl
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 hours ago

        This is why I boycott Logitech

        You should boycott Microsoft instead. As you say, they’re the ones permitting it.

        • stoy@lemmy.zip
          link
          fedilink
          English
          arrow-up
          1
          ·
          50 minutes ago

          I would if I could, but I work with Windows and if I migrate to Linux at home, my skills in Windows would dimminish

      • mat@linux.community
        link
        fedilink
        English
        arrow-up
        18
        ·
        13 hours ago

        I never knew about this (using Linux) but when I plugged my mouse onto a friend’s laptop and suddenly a big banner animated onscreen, my heart sank lol. No idea how this works but it was pretty unexpected.

        • BeardedGingerWonder@feddit.uk
          link
          fedilink
          English
          arrow-up
          5
          ·
          2 hours ago

          I try not to be too Linux fanboish these days, but what in the ever loving fuck is that about? Windows sounds like it’s reverted to 90s/early 2000s novelty crap and browser toolbars.

      • A7thStone@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        9 hours ago

        I had windows update try to brick the BIOS on my Lenovo workstation recently. I can’t believe Microsoft and manufacturers do this kind of shit. Luckily my workstation had dual BIOS so I could recover it. Between that and the fact that lenovo manufacturer locks their processors I would have waited until I could afford a supermicro had I known.

        • Appoxo@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 hours ago

          That shits on Lenovo because I never had an issue with Microsoft updating the UEFI of HP machines of our clients.

      • circuitfarmer@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        6
        ·
        12 hours ago

        It sucks because I’ve always liked Logitech hardware. Though I suppose you don’t need to run the software suite (or if you’re on Linux it isn’t an option anyway).

      • Midnight Wolf@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        10 hours ago

        Cannot confirm, I have a g903, paired mouse pad, and their brio webcam. I only have the G Hub, which I installed manually. Maybe they stopped this behavior?

    • u/lukmly013 💾 (lemmy.sdf.org)@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      28
      ·
      13 hours ago

      Welp, seems ASUS motherboards also push this by default: https://www.techpowerup.com/248827/asus-z390-motherboards-automatically-push-software-into-your-windows-installation

      During testing for our Intel Core i9-9900K review we found out that new ASUS Z390 motherboards automatically install software and drivers to your Windows 10 System, without the need for network access, and without any user knowledge or confirmation. This process happens in complete network-isolation (i.e. the machine has no Internet or LAN access).

      • skaffi@infosec.pub
        link
        fedilink
        English
        arrow-up
        7
        ·
        12 hours ago

        Holy shit. I got Logitech peripherals, and an ASUS motherboard. I’m glad I’m on Linux. I still have Windows installed, and booted into it around 2 weeks ago, after it having lied dormant for four months. I didn’t notice anything being installed, but maybe I had to reboot first.

        Quite possibly, my peripherals and motherboard are all too old to have this anti-feature. Do you know if there is a list of which of their hardware this is the case for?

        Damnit, I always preferred Logitech mice. I guess I might have bought my last one.

          • JordanZ@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            7 hours ago

            If it’s anything like my SteelSeries mouse…just plugging it into the computer prompts to install their desktop software the first time(oddly enough with auto play disabled). Even if you decline that it still installs the ‘software component’ in windows and forever adds it to the windows update for the machine (or at least I’ve not figured out how to make it kill it, just hide it).

      • Midnight Wolf@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        10 hours ago

        Similarly (above), I can’t confirm this either, on two different Asus boards, still in support/updates. I’m assuming this requires their software to be installed, which there’s no point to, so I didn’t bother… Maybe it’s part of their armory crate system, which can (should) be disabled in the bios…

        • u/lukmly013 💾 (lemmy.sdf.org)@lemmy.sdf.org
          link
          fedilink
          English
          arrow-up
          24
          ·
          edit-2
          13 hours ago

          The ASUS UEFI firmware exposes an ACPI table to Windows 10, called “WPBT” or “Windows Platform Binary Table”. WPBT is used in the pre-built OEM industry, and is referred to as “the Vendor’s Rootkit.” Put simply, it is a script that makes Windows copy data from the BIOS to the System32 folder on the machine and execute it during Windows startup - every single time the system is booted.

          So, sounds like a Windows-specific vulnerability feature.

          • Grabthar@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            7 hours ago

            Make a read only file/folder with the same name and the script should fail. But that is horseshit.

    • viking@infosec.pub
      link
      fedilink
      English
      arrow-up
      7
      ·
      3 hours ago

      It also automatically reinstalls itself through a BIOS feature. That’s advanced level malware.

      • FuCensorship@lemmy.today
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 hours ago

        Right? I thought I read that wrong!

        To disable future crap like this you gotta do it in the FUCKING BIOS? Wtf Asus…

      • conciselyverbose@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        60
        ·
        15 hours ago

        The title is pushing the narrative that “real companies” doing hostile bullshit isn’t “real malware”.

        When companies ship malware, it should be called malware.

        • LainTrain@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          9
          ·
          edit-2
          13 hours ago

          Most malware is corporate shitware.

          Compared to the wealth of pop-ups, ads and tracker cookies ubiquitous in every website that are burning down forests so they can run black box algorithms to optimize dark patterns for extracting as much revenue as possible while working the sweatshop poor to the bone - worming their way into everything without the condom of extensions - a cryptostealer disguised as ChatGPT_NFT_money_explosion.exe made by some teenager in albania feels… benign.

      • floofloof@lemmy.caOP
        link
        fedilink
        English
        arrow-up
        25
        ·
        edit-2
        15 hours ago

        From the article:

        Even worse, the malware-looking Christmas wreath is linked to a process called “Christmas.exe.”

        So the process was actually called that. It popped up on my machine this morning and I immediately started scanning the whole system for malware and searching to see if anyone else had this problem.

  • FireWire400@lemmy.world
    link
    fedilink
    English
    arrow-up
    129
    ·
    edit-2
    14 hours ago

    Who green lit this? I really hope that person gets fired immediately.

    The lack of any visual link to ASUS isn’t even the biggest problem for me; it’s that ASUS rolls out a program that (presumably) puts itself in autostart by default and just pops up without prompt at all.

    Edit: There’s a fucking setting in the BIOS to auto-install ASUS’ bullshit software? And it’s enabled by default… jesus fucking christ

    • equivocal@lemm.ee
      link
      fedilink
      English
      arrow-up
      41
      ·
      edit-2
      15 hours ago

      Most computers firmware can store a Windows executable. Microsoft pushed for an addition to the ACPI tables called WPBT. That stores a Windows exectuable in the firmware. It is of course totally used for the intended purpose…

      • drspod@lemmy.ml
        link
        fedilink
        English
        arrow-up
        37
        ·
        15 hours ago

        I’m always dismayed but not surprised by how many people don’t know about Windows Platform Binary Table, which has existed since Windows 8. It’s not exactly the type of feature that Microsoft or the board vendors would want to publicize, seeing as it gives them persistent rootkit capabilities on the same level as UEFI rootkits.

        Most normal people’s model of Windows security is “if something goes wrong then I wipe the disk and reinstall Windows,” and WPBT completely breaks that model, and has been doing so for 12 years.

        Thankfully there are ways to disable it:

        https://github.com/Jamesits/dropWPBT

  • tabular@lemmy.world
    link
    fedilink
    English
    arrow-up
    20
    ·
    13 hours ago

    An unsolicited Christmas card through a letterbox would have at least been less worrying.

  • schizo@forum.uncomfortable.business
    link
    fedilink
    English
    arrow-up
    60
    ·
    17 hours ago

    I’d love to know if this was just some guy who went ‘let’s ship it to all our customers!’ or if this was a C-level 300 hours of meetings type of thing which concluded that spreading christmas malware cheer was the right move.

  • tabular@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    ·
    13 hours ago

    I find it difficult to choose a motherboard because they all look shady. aSUS should be criticized for creating a bad app and installing it without consent but I feel like this could have been any other motherboard manufacture.

  • Buffalox@lemmy.world
    link
    fedilink
    English
    arrow-up
    44
    ·
    edit-2
    16 hours ago

    Why don’t every vendor with an installed app make a similar banner?
    It would be so festive, and I bet people would love it, to have 20 or 30 such occurrences every time you need to use your computer during holidays.
    It would of course be optimal if each has an animation and a tune, that need to finish before you can escape.
    Weird that only Asus had this brilliant idea? It’s so awesome when you are not in control of what happens on your computer.
    /s

    If you want to take back control, Linux is your best option.

  • LutefiskPizza@fedia.io
    link
    fedilink
    arrow-up
    14
    ·
    14 hours ago

    Haha, how fortuitous for me that my new SDD arrived over the weekend and I used the opportunity to install Linux on my Asus laptop.