41 comments

[ 0.25 ms ] story [ 12.9 ms ] thread
I guess this is unavoidable on today’s internet, but…reading a story that decries the (admittedly really bad) data gathering techniques of an advertiser, from a site that itself is plastered with adverts…I don’t know the right word here, but it feels a bit shit.

Although I’m glad this is getting the visibility it deserves. I hope this hurts LG where it matters and sends a signal to other manufacturers, but I doubt it.

\#BanAdvertising, my friends. It sounds absurd until you think about it for a minute. If billboards and vice ads and this sort of monitoring should be banned, shouldn't it all?
Why would you ever connect a TV to the internet in the first place?
1. Onboarding tells you to

2. Convenience

3. Cheaper than buying an Apple TV et al

How do you know that not connecting it is sufficient to stop the spying?

There are a few large IoT-focused networks like Amazon Sidewalk where conceivably the smart TV could connect to them if you don't connect it to your home wifi. I believe many ISPs like Xfinity also runs shared public wifi from their routers - a tv could connect via your neighbor's ISP-provided router and you wouldn't have any idea.

because it is physically impossible for an offline device to transmit any data that it has on you?
A pretty silly thing to ask. I can control my LG OLED TV from the YouTube and YouTube Music apps on my phone, as well as other apps, but the way that works is the apps hand off the stream parameters to the TV, they don't actually proxy the stream to the TV, which would have all kinds of drawbacks. The TV also comes out of the box or within 1 click of having the apps of popular services like Prime Video, Netflix, Apple TV+, Hulu, HBO/Max, Peacock, etc etc all of them they're just lightweight javascript applications.
Ever heard of netflix, youtube, disney+, paramount, hulu, etc?
In my experience (I have a 2015 TV that's been EOL'ed by anyone doing apps for TVs) streaming services are increasingly not allowing chromecast, instead requiring you to log in on the TV.

I cancel those services... but I recognize that many people go the other way.

Because Firefox never released its Matchstick.
My TVs (Samsung) are the only devices on my network that are locked down and quarantined. But I wonder if there will come a day when TVs contain cellular or satellite modems so you can’t block the telemetry.
> a day when TVs contain cellular or satellite modems so you can’t block the telemetry

finally my startup of faraday-cage rooms will boom /j

Some brands have TVs share Wi-Fi with each other, so even if you don't connect it to Wi-Fi, your neighbour's TV will silently share with yours.
Which? All I've seen over the years is people repeating the same rumor.
This is an assumption that since Amazon Sidewalk exists, smart TVs must have something similar. There's no proof, and I think if it were happening without being documented it would be a huge scandal.
Reminder: you can connect it to your network, but block it from the internet at the router. That way you can still use Airplay/Chromecast.

I have an LG. Great OLED panel. It's never seen the internet.

No, you can't. They can just spoof their MAC address and be freed.
Ah yes. Using that OTA update it got via AM radio.
or from your neighbor's open WiFi?
why is it jumping through hoops to get online if it's already online?
Sceptre dumb TV bros still winning
Stuff like smart TVs always go in their own VLAN on my home network. Not because I don't trust the manufacturer, but I cannot be bothered to babysit some Android device on my LAN that I'll keep using years after end-of-support.
unless this VLAN doesn't allow internet access the issue persists. And if it doesn't, not connecting it would be the more logical choice.
Disconnecting it from the internet isn't enough, because it will store spying data forever until it gets a connection, and it will connect to any open WiFi. You have to disconnect it from the power, and then use a sledgehammer on the remains.
>and it will connect to any open WiFi

I've seen this claim made over and over again for various smart TVs, but so far I haven't seen any concrete evidence of this, only random speculation.

I have a Samsung fridge. It’s not a smart fridge, it doesn’t have a screen, bluetooth, or any way to connect to it.

I logged into my UniFi stack to monitor devices and it showed up. It had gotten the connection details from my wife’s phone, the other Samsung device and was transmitting data back to Google and Samsung.

If that happened would any of that data get tied back to you? If you haven't created any accounts or signed into anything.
Block it on your router.
Yeah, that's the only way to deal with this nonsense. Basically, block all devices that connect to your router from having outbound access and whitelist the ones you want to let through, with narrow firewall settings.
How is this legal? Can't we sue them or get the FTC against them? This seems like a ridiculous amount of spying, even if their TOS says so. That seems like exploiting complexity of TOS to let them spy on everyone.

I'm pretty sure that these TVs won't respect WIFI passwords and if you enter a wifi password in once, it will just remember it even when you clear it, and it will try to connect to the internet that way.

FTC? They might be doing it FOR the FTC.
It is a screen. You plug an HDMI cable into your source device and another into the TV. Job done.

Are there really that many people technical enough to know what an HDMI cable is without also knowing all TVs are subsidized by spyware with no security protections?

Why would anyone connect a screen to the internet in the first place?

Like, if suddenly computer monitors started asking for wifi credentials would everyone just compulsively punch them in just to see ads and give the manufacturers lots of data just because?

I must be fundamentally disconnected from how consumers think about technology.

> They also found where the microphone was software disabled via settings, it was STILL recording things but had the dB level so low that it looked like nothing but when amplified to +50dB later the conversations were actually still there.
Can someone confirm this part of it? I'm highly, highly dubious that these TVs are sending back random ambient conversation -- for one thing, it would be a truly monstrously-huge stream of data, no?

I certainly believe that it sends back data when you use voice commands, ofc (both for advertising and product improvement). But this would be the first real case of something that's been a 100% false conspiracy theory for over a decade, which feels... unlikely. Kinda like someone finding a Sasquatch.

I assumed from watching the video, the device is processing the audio locally and transmitting the results - text rather than audio.
I've got a 65" LG C3 OLED TV (from 2023) that I hacked with https://rootmy.tv shortly after I purchased it (and before LG updated the firmware to prevent the hack).

It seems pretty safe. When it's on, I can ssh into it. When it's off, it doesn't reply to ICMP pings, and doesn't appear to be using much power.

I guess the newer LG TVs have gone to shit.