cross-posted from: https://lemmy.world/post/51634640

A new Gamers Nexus investigation found a retail LG TV actively scanning the local network for phones, laptops, smartwatches and other connected devices, while also capturing microphone audio when the screen appeared to be in standby. The investigation found voice data being stored locally even after the TV was disconnected from the network, with the queued data uploaded once connectivity returned. Researchers also uncovered webOS vulnerabilities that could potentially turn the television into a remotely controlled surveillance device. The really unsettling part isn’t just the advertising angle. It’s the fact that a consumer television can sit inside your trusted network, enumerate other devices, access a microphone, store collected data locally and communicate with external infrastructure. Put that same device in a corporate office, hospital, hotel or conference room and the security implications become considerably more serious. I went through the investigation in detail, including the network scanning, microphone behavior, ACR, webOS attack surface, offline data collection and practical mitigations

  • Zephorah@discuss.online
    link
    fedilink
    English
    arrow-up
    37
    ·
    1 day ago

    I was at my parent’s house, trying to add some items to the smart TV. They started listening to these awful AI interpersonal dramas read by AI, on YouTube.

    My thought was to add some podcasts and their Audible account, for more selections. Maybe they’ll still only listen to that, even so. You can’t add much to a smart tv. No podcasts. No podcast app. A pretty spartan selection of apps. Even something as large and mainstream as Audible. No go. Libby? Yeah, right.

    I don’t get it. What’s the point? Just buy a monitor, jack it into a PC for media, and have everything you want minus this telemetry.

      • Zephorah@discuss.online
        link
        fedilink
        English
        arrow-up
        2
        ·
        17 hours ago

        We’re fully Linux now, various distros per machine, so I no longer pay much attention to windows news.

      • UnLocoPoco@lemmy.worldOP
        link
        fedilink
        English
        arrow-up
        6
        ·
        23 hours ago

        Ah doesn’t matter. Dont use windows. Use a pi and something like LibreELEC or even you can run debloated android on it with the TV interface and a remote. Just get a BT remote or an IR receiver plug into the usb port. Either of them are pretty cheap

    • otacon239@lemmy.world
      link
      fedilink
      English
      arrow-up
      16
      ·
      1 day ago

      My TV has no Internet connection, but does connect to my gaming desktop. I agree with you. There’s no reason TVs should not just be dumb displays. I do also have the Apple TV, but it never ever shows ads and is a one-time purchase. The day it starts showing me ads is the day it meets the bin.

      • phutatorius@lemmy.zip
        link
        fedilink
        English
        arrow-up
        20
        ·
        1 day ago

        There’s no reason TVs should not just be dumb displays.

        At least, no reason that benefits the consumer. There are strong monetary incentives to spy on customers and sell the data that’s collected.

        • Zephorah@discuss.online
          link
          fedilink
          English
          arrow-up
          1
          ·
          17 hours ago

          Once again I’m reminded of Season 1 of Black Mirror. Second episode? Worker drone is “home”, “relaxing” in his sleep cubby and the walls are a barrage of ads. Occasionally he taps to pay credits to shut one down as the rest continue, as casual as anyone scrolling in boredom.

          Or a shut down golden retriever in those old, now illegal learned helplessness experiments.

    • woelkchen@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      19 hours ago

      jack it into a PC for media

      Even a proprietary streaming stick like FireTV would be an improvement because it only collects telemetry from the stick itself and not devices connected to other HDMI ports.