Samsung computer users could be at risk of attacks because the Korean company's software uses bloatware to disable Windows Update.
The problem was discovered by independent security researcher Patrick Barker when he realized that the Windows Update feature, which automatically downloads patches and security fixes from Microsoft, had been disabled.
The culprit turned out to be a software called SWUpdate, which Samsung uses on its systems to manage updated versions of the hardware drivers it uses.
SWUpdate, in turn, runs an executable file called Disable_Windowsupdate.exe as part of its tasks. Guess what this does.
Initially, researchers expressed concern that the software might be malware, even though it appears to be signed by Samsung itself. A call to the company's technical support yielded the following response:
If you enable Windows updates, they will install default drivers for all the hardware on your computer, and so it may or may not work. For example, if there is a USB 3.0 port on your laptop, the ports may not work after installing the updates. So, to avoid this, the SW Update tool will block Windows updates.
The case highlights the chronic problem of bloatware that OEMs use and come pre-installed on computers.
The bloatware in question isn't as scandalous as Lenovo's Superfish, but it's still a serious issue.
It is difficult, however, to understand the company's logic in disabling Windows Update, considering it a good idea, given that Microsoft regularly uses it to push critical updates for all of its products.
The Korean company, of course, denied the accusations:
"It is not true that we lock down Windows updates on our computers. As part of our commitment to consumer satisfaction, we provide our users with the ability to choose if and when they want to update the Windows software on their products," Samsung said.
“We take the safety of our products very seriously and encourage any Samsung customer who has questions or concerns to contact us immediately at 1-800-SAMSUNG FREE.”
