A new Gamers Nexus investigation found a retail LG TV actively scanning the local network for phones, laptops, smartwatches and other connected devices, while also capturing microphone audio when the screen appeared to be in standby. The investigation found voice data being stored locally even after the TV was disconnected from the network, with the queued data uploaded once connectivity returned. Researchers also uncovered webOS vulnerabilities that could potentially turn the television into a remotely controlled surveillance device. The really unsettling part isn’t just the advertising angle. It’s the fact that a consumer television can sit inside your trusted network, enumerate other devices, access a microphone, store collected data locally and communicate with external infrastructure. Put that same device in a corporate office, hospital, hotel or conference room and the security implications become considerably more serious. I went through the investigation in detail, including the network scanning, microphone behavior, ACR, webOS attack surface, offline data collection and practical mitigations

  • UnLocoPoco@lemmy.worldOP
    link
    fedilink
    English
    arrow-up
    13
    arrow-down
    4
    ·
    2 days ago

    Unfortunately these days TVs are stubborn. They refuse to work without an account or so in many cases. Best is to put them on a different VLAN and allowing the bare minimum

    • LadyMeow@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      14
      ·
      2 days ago

      Idk both of mine are offline only. Never connected to my internet.

      I really wish we could go back to them just being panels, a few hookups and that’s it. No built in Netflix or whatever other garbage

      • UnLocoPoco@lemmy.worldOP
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        1
        ·
        2 days ago

        They won’t cuz customers are accustomed these days with all the bells and whistles that are bundled with modern TVs. Also, investors want “innovation”. This is kinda same as AIs getting integrated into toasters, washing machines etc. Mainstrram consumers don’t care about privacy. Heck most consumers use their default shitty ISP provided router and don’t even change the default username and password. This is thr harsh truth. Even now, most consumers choose convenience over privacy

        • PuddleOfKittens@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 day ago

          I don’t want a dumb TV, and I don’t want to choose between “convenience and privacy” - I want a TV with a slot for basically a RasPi cartridge I can slot in that runs my own goddamn OS as the smart TV. This isn’t rocket science. This shouldn’t require compromise. Imagine if in 1995 every desktop PC had Windows 95 hardwired into the motherboard as the only OS that could boot; it’s deranged.

          The real problem is that there’s no profit in any of the innovation we actually want, and that’s capitalism’s fault for being unable to deliver.

        • LadyMeow@lemmy.blahaj.zone
          link
          fedilink
          English
          arrow-up
          3
          ·
          2 days ago

          Yeah but even the mainstream experience isn’t that great? They take forever to boot up, are slow, insecure, stop being updated etc.

          I’m sure it won’t get better, it never does it seems, still, it would be nice.

    • OwOarchist@pawb.social
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 days ago

      They refuse to work without an account or so in many cases.

      Then they’re about to get returned to the store as defective, and I’ll go buy a different TV.

    • lIlIlIlIlIlIl@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      1
      ·
      2 days ago

      they refuse to work without an account

      That’s called “a bad purchase” or “a return,” you can’t just bring active spyware into your home

      • Abrinoxus@lemmy.today
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 day ago

        consumer power yey! to bad its easier just to cave in for most especially with how big and bulky modern tvs are. Not that i have one

      • OwOarchist@pawb.social
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 days ago

        Yep. If a new TV I buy doesn’t work without an account, I’m returning it to the store because it ‘doesn’t work’. No other possibility.