cross-posted from: https://lemmy.world/post/51634640

A new Gamers Nexus investigation found a retail LG TV actively scanning the local network for phones, laptops, smartwatches and other connected devices, while also capturing microphone audio when the screen appeared to be in standby. The investigation found voice data being stored locally even after the TV was disconnected from the network, with the queued data uploaded once connectivity returned. Researchers also uncovered webOS vulnerabilities that could potentially turn the television into a remotely controlled surveillance device. The really unsettling part isn’t just the advertising angle. It’s the fact that a consumer television can sit inside your trusted network, enumerate other devices, access a microphone, store collected data locally and communicate with external infrastructure. Put that same device in a corporate office, hospital, hotel or conference room and the security implications become considerably more serious. I went through the investigation in detail, including the network scanning, microphone behavior, ACR, webOS attack surface, offline data collection and practical mitigations

  • UnLocoPoco@lemmy.worldOP
    link
    fedilink
    English
    arrow-up
    24
    ·
    1 day ago

    This would’ve worked just a few years back but due to shitty “age verification” laws, even TV manufacturers willl force users to create an account the very least for the TV to even start up. They may also implement an always-online model and they’ll justify that it’s necessary to monitor users for “age verification purposes”. ATP better to get a good monitor and use it as TV cuz cable or satellite boxes are either way gonna be provided by the network companies so that’s there

    • woelkchen@lemmy.world
      link
      fedilink
      English
      arrow-up
      12
      ·
      1 day ago

      This would’ve worked just a few years back but due to shitty “age verification” laws, even TV manufacturers willl force users to create an account the very least for the TV to even start up.

      Surely only for “smart” features but without enabling any of that shit, you shouldn’t get any age verification prompt.

      • thejml@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 day ago

        I could see them doing it anyway as OTA broadcasts include rating data.

        That said, if it’s a family TV, you’re never going to put everyone on it, just the oldest one anyway.

          • emb@lemmy.world
            link
            fedilink
            English
            arrow-up
            12
            ·
            1 day ago

            I think their point is that by and large consumers are stupid and willing to put up with almost any garbage like that. What makes you think otherwise?

            • credo@lemmy.world
              link
              fedilink
              English
              arrow-up
              6
              ·
              1 day ago

              Where is the original citation showing you cannot use a tv disconnected, without setting up an account?

              This whole thread is nonsense.

          • ExLisper@lemmy.curiana.net
            link
            fedilink
            English
            arrow-up
            8
            ·
            edit-2
            1 day ago

            What emb said. When in the history of the universe did consumers reject a product like that? You do realize Alexa and Google speakers are still very popular and tons of people wear watches with GPS, sleep tracking, heart rate tracking and always turned on BT?