It’s not just LG. Every TV company is spying on you

https://www.theverge.com/tech/997682/every-tv-company-is-spying

Crossposted from https://infosec.pub/post/52518361

The TV world has been a pot of controversy thanks to a two-hour-and-15-minute video from Gamers Nexus claiming LG TVs are nefariously spying on everything you do. They can record and store audio even when they seem to be off, track everything you watch, and could even be hacked remotely and turned into covert surveillance […]

686 points · 159 comments · view on lemmy.world

159 Comments

FlexibleToast@lemmy.world · 124 pts · 3d (5 replies)

Anytime a company gets caught spying, it's pretty safe to assume they all do it but that company was just the first to get caught.

LodeMike@lemmy.today · 38 pts · 3d (1 reply)

Gamers Nexus said that they assume other brands are just as bad but they only wanted to spend the funds for the one company

Eldritch@piefed.world · 39 pts · 3d

Not wanted, had. They would love to do more. And in fact part of the fundraising around this is for that. GN and gamer jesus's only recently turned to heavy investigative journalism. But they don't have a sugar daddy to fund them or dedicated viewing area to sell advertising to. Their situation with alphabet and YouTube is very adversarial as well.

DarrinBrunner@lemmy.world · 6 pts · 2d (1 reply)

A bit beyond that, though, if pressed, they'll say they NEED to do it to remain competitive. That's their reasoning behind every evil thing they do. On the rare occasion they call for some law to restrict the industry, it's because their company is having trouble competing.

They'll do anything to profit that isn't explicitly against the law in whatever country they operate in. But they will also do things against the law if the penalty isn't high enough to stop them. They will take into account the social penalty, but if the profit is high, and they run a virtual monopoly, then the social costs are almost always outweighed.

They take everything into consideration but have zero empathy or morals, so that never enters the equation. Profit is all that matters.

GraniteM@lemmy.world · 4 pts · 1d

they NEED to do it to remain competitive

That might literally be true.

Imagine there are two factories. One spends $100 a week disposing of toxic waste. The other one saves that $100 a week by dumping their toxic waste into the local river. Absent of a robust regulatory state that can prevent and punish that kind of behavior, even if the first factory wants to be responsible environmental stewards, they might literally go bankrupt trying to compete with the evil factory.

You can apply this to anything that can be regulated. Companies might not have a choice between doing the evil thing or not; it might literally be a matter of "Well, everyone is doing it, and if I don't, then I'll be driven out of business anyway."

A functional government gets out in front of this phenomenon, makes doing evil shit illegal, and levies fines and punishments against companies that do evil/illegal shit such that doing the evil shit is no longer profitable.

But instead we've got... [gestures broadly at our current nightmare reality].

FlashMobOfOne@lemmy.world · 2 pts · 3d

100%

Until there is real regulation (which in this case, may actually happen) that is what you should be assuming.

CubitOom@infosec.pub · 59 pts · 3d (18 replies)

How to tell if something is possibly spying on you:

  1. Can it connect to the internet?
  2. Is the firmware/software controlled by a corporation?
  3. Does it have sensors capable of surveillance, like a microphone or camera?
AHemlocksLie@lemmy.zip · 28 pts · 3d (17 replies)

I'm concerned you may not even need to connect it to the internet. It may be enough for a neighbor to leave their WiFi unsecured. The TV may very well watch for one and use it to upload.

Grandwolf319@sh.itjust.works · 16 pts · 3d (6 replies)

It can be even worse than that. It can use other TVs in the neighborhood that are connected to the internet and just proxy it through them. It’s called a mesh network.

hansolo@lemmy.today · 6 pts · 3d (5 replies)

Is there evidence of that? Or is this also like saying an unconnected TV might be slipped the WiFi password by a connected dishwasher through a series of ultrasonic beeps? Sure, not impossible, but also not likely in every home.

notfromhere@lemmy.ml · 4 pts · 2d

Amazon Sidewalk is already delivering that exact capability.

Grandwolf319@sh.itjust.works · 1 pts · 3d (3 replies)

I recall seeing an article about it a while ago but I couldn’t find anything via a google search so I guess take it with a big grain of salt.

hansolo@lemmy.today · 11 pts · 3d

Right. So, I'm a privacy advocate, and there's a looooooot of conspiracy theory stuff like this out there. Yes, there are real versions of this, but companies are also notoriously cheap. There's a point of diminishing returns on how many components they're going to slap on a board in hopes of netting data on 1000 more users. Something that costs 2 cents more per board will go into millions of devices and cost hundreds of thousands over a production run... To net $30,000 of data? Experiments usually fizzle based on that math. They're very often glad to have the fools that connect the TV themselves, which is an increasing proportion of consumers, I think about 65%+ of them last I checked. They're already eating well without getting overly silly and crazy about how these things work.

yestalgia@lemmy.world · 2 pts · 2d (1 reply)

Bro you're researching privacy with Google wyd

Grandwolf319@sh.itjust.works · 2 pts · 2d

I used google as the generic search term. I personally use no aI DuckDuckGo

fyzzlefry@retrolemmy.com · 6 pts · 2d (3 replies)

So what i'm hearing is I should spin up an open ssid and black hole the traffic

AHemlocksLie@lemmy.zip · 4 pts · 2d

I mean it won't hurt. I don't think there's any evidence they do it, though, and if they did, they'd probably try every network they could until they found a way out.

0x0@lemmy.zip · 2 pts · 1d (1 reply)

Put a drill to the wifi chip – it's the only way to be sure.™

harmbugler@piefed.social · 2 pts · 16h

Please someone work out how to install Linux on these things

frongt@lemmy.zip · 3 pts · 3d (1 reply)

May be. I'm still waiting for someone to show me a case of that happening, because I've been unable to find one.

AHemlocksLie@lemmy.zip · 1 pts · 2d

I've never seen proof it happens, so it might not, but I sure as shit wouldn't suggest it to them if they haven't thought of it yet.

CubitOom@infosec.pub · 2 pts · 3d

True, updated above.

rbos@lemmy.ca · 2 pts · 3d

Cellular modems are getting cheaper. Maybe in a few years they're looking for Meshtastic nodes.

psx_crab@lemmy.zip · 1 pts · 3d (1 reply)

Wdym by unsecured? No password?

AHemlocksLie@lemmy.zip · 1 pts · 2d

Yeah, fully broadcast SSID with no password, blatantly obvious to any who look and free to access for any who try.

cannedtuna@lemmy.world · 55 pts · 3d (3 replies)

Solid article. Definitely recommend the read.

Here’s the video by Gamers Nexus the article is talking about. It’s 2 hours and 15 minutes long.

CubitOom@infosec.pub · 18 pts · 3d (1 reply)

Oh shit I accidentally clicked accept on the terms for voice and I'm incredibly inebriated.

Eldritch@piefed.world · 8 pts · 3d

Wendell was having a blast for sure. 🤣

ChunkMcHorkle@lemmy.world · 6 pts · 3d

Well worth watching the whole thing.

aesthelete@lemmy.world · 54 pts · 3d (15 replies)

This is why I thought the "talk to your TV remote" things were all garbage...Involving a fucking microphone and a speech to text algorithm and potentially cloud bullshit just to fucking change a channel? Change the volume level? STUPID. It's much worse than just pressing a fucking button and having the volume / channel change immediately, as well as a needless sacrifice of what little remains of your privacy.

I don't get it with smart switches / smart fans and shit either. Like a light switch already works completely fine guys. I don't know why we need to be able to talk to this shit.

fluffykittycat@slrpnk.net · 20 pts · 3d (2 replies)

Typing on a TV remote is a miserable experience but we've already solved that problem just put a damn keyboard on the remote already

adjectivenoun@lemmy.world · 8 pts · 2d
  1. Build a cheap PC or buy an NVidia Shield to be your media center. (I actually use a SteamLink to my desktop PC.)

  2. Never tell your TV your Wi-Fi password.

  3. Use a wireless keyboard with touch-pad as your remote.

(4. Pirate stuff over a VPN.)

aesthelete@lemmy.world · 3 pts · 3d

100%

Serinus@lemmy.world · 14 pts · 3d (6 replies)

Personally I have a smart litter box triggering an exhaust fan for 10 minutes every time it cycles.

My A/C turns off if you leave the patio door open for a couple minutes.

I have a light upstairs that I turn red when I'm in an important meeting, like an On Air button.

The foyer light turns on when you open the front door at night.

There are useful things to be done, and most of my info doesn't leave the house.

aesthelete@lemmy.world · 10 pts · 3d (4 replies)

None of these use cases require modern "smart" things.

Serinus@lemmy.world · 4 pts · 3d (3 replies)

Sure, you can tie a string to one end, and, uh...

aesthelete@lemmy.world · 9 pts · 2d (2 replies)

Sensors, timers, and other tons of non-ip networked solutions exist. I have lights that automatically turn on with bulb sensors and it does not require that they be IP networked with each other. Your red light could be wirelessly triggered on a lamp in another room if you wanted without IP networked devices. Many of the "dumb", working solutions for these problems are cheaper and less complicated than using their networked equivalents.

I have motion sensing, magnetically attached wireless lights that turn on when I go down the stairs. I even have things that can use a single light switch to trigger multiple lamps without rewiring that required zero IP networking.

There are wireless light switches that have no battery because the switch sends a signal using the power from the force exerted on it. There are many types of automation that do not require IP networks.

oxideseven@lemmy.ca · 2 pts · 2d (1 reply)

Link to these devices? Sounds neat

aesthelete@lemmy.world · 2 pts · 2d

Main one (which is a little pricey) is the switcheroo. Comes with a lifetime warranty: https://www.switcheroo.com/

I was thinking of the RunLessWire ones with the switch with no battery required, but it looks like they got sold to Philips. Nowadays it looks like several brands make a similar item: https://www.amazon.com/Self-Powered-Required-Wireless-Receiver-Lighting/dp/B0BRPKLL1Y

These are the stair lights I have: https://www.amazon.com/dp/B09DZ4SQNZ.

There are a whole lot of wireless outlet / light switch kits at low prices if you're looking to have a lamp somewhere a distance from the switch source.

frongt@lemmy.zip · 4 pts · 3d

I like to be able to turn the fan/AC/heat on and off without getting out of bed, or when I'm on my way home.

Right now they're all just on isolated smart plugs, but if I was to set up more then I'd use homeassistant or something.

Serinus@lemmy.world · 7 pts · 3d (1 reply)

Matter over Thread with Home Assistant is the smarthome tech I'd recommend.

With that setup it all stays local. You can even block everything from the internet, unless you want to do an update.

It will work with Google/Apple/Alexa, but of course as soon as you do that... well, that's the point of running Home Assistant instead.

Taleya@aussie.zone · 2 pts · 3d

Zigbee for me, but on the apple front you can integrate homekit and control what's exposed. As far as apple is concerned there's just a webhook "basement light" that has an on or off command i can say

Zedd_Prophecy@lemmy.world · 1 pts · 2d (1 reply)

There are smart switches and fans and other switchable devices that are controlled through schedule and manual BT switches and ir sensors - rather than voice. I can use voice to control things but I prefer the lights to match my day without my interactions being necessary.

aesthelete@lemmy.world · 3 pts · 2d

Some applications make more sense to me than others. I haven't fully dipped into the bluetooth controlled stuff, but I have used other various wireless solutions for things. Funny enough, I've been thinking about adding a wireless power switch to my TV so that I know it isn't snooping on me when it's off. Can't snoop on me if you don't have any power.

Bluegrass_Addict@lemmy.ca · -3 pts · 3d

people are stupid and lazy. that's it. they want the easiest way to do anything because their 'time is valuable' apparently... like cooking... people use Uber for some dumb ass reason, then wonder why they are always broke. but ya know... they saved 30 minutes which was wasted doing fuckall but doom scrolling shitty websites

Wildmimic@anarchist.nexus · 50 pts · 2d (11 replies)

This article is utter bullshit normalizing this invasion of privacy by entertainment hardware vendors. "Everyone is doing it" is not a valid defense, it only shows that no one should be doing it and that the laws are too lax and not protecting people as they should.

minorkeys@sh.itjust.works · 8 pts · 2d (4 replies)

Consumers normalized this decades ago when they started buying all this stuff despite the warnings. People have been selling our collective freedom for what amounts to toys.

Wildmimic@anarchist.nexus · 5 pts · 2d (3 replies)

To be fair, decades ago the hardware hasn't been doing these things, and people have been far more optimistic in general regarding the behavior of companies. Maybe it was bad that people (including me) kept warning our surroundings about the possible consequences - It for sure caused some type of warning fatigue and made us look paranoid. Saying "We told ya so" might be satisfying, but not very productive.

Louis Rossmann keeps saying that we are moving rapidly from a high-trust to a low-trust-society. If companies can change contracts, behavior and features regarding products arbitrarily with no recourse for the clients (except fucking forced arbitration ofc), there is no reason for costumers to believe that their issues and complaints are heard. The more trust deteriorates, the more often these things happen, there might be people applying violence instead of lawsuits. It is in the best interest of companies to don't fuck over their clients too long; If the laws do not protect people, people might decide that these laws do not bind them either.

minorkeys@sh.itjust.works · 5 pts · 2d (2 replies)

The hardware has been collecting private data since atleast the internet got popular. I've lived through half a dozen momentary concerns over some data collection in yet another device, articles are written and people moan then they buy the product and give up a little more privacy. Its been an incremental increase up until we have microphones and cameras in our homes. Even those warranted a slight public disturbance before people quickly relented and bought them. The "I don't care if they know..." people helping fascism make it no longer a choice.

Given some of the decisions of the administration I'm concerned about what I can and can't trust. I'm supposed to believe Hegseth about war and RFK about health, the antivaxer? Not companies get less red tape, less safety and health standards and I gotta be concerned about which company do and don't make safe products. Its insane.

Wildmimic@anarchist.nexus · 4 pts · 1d (1 reply)

Ok, i was thinking more about the 80s and 90s when i said decades. And even at the turn of the century data collection still was limited to mostly diagnostic data and "always online" devices and software only really started getting traction later - i can remember the uproar when Simcity needed a permanent internet connection or when the xbox one required the same. But after that things went downhill real fast.

I would not trust any member of the current US admin further than i could throw them. They are fascists or opportunists who have no qualms working with fascists, and they are largely incompetent in their jobs too with very questionable world views (looking primarily at Trump, Hegseth, RFK and Patel here, but the rest of the bunch isn't much better). But they are only a symptom of the rot that has taken root in the US at least since the 60s.

The signs were there with Nixon getting off the hook and Reagans Contra affair having no repercussions for him. But there was no push to change anything substantially. I personally blame the civic religion the US has adopted; if you say state and religion are to be separate, but at the same time make the country itself a religion, changing anything basic becomes akin to blasphemy (or "communism" it this specific case.

And the people having no issue with bending the rules of course have no issue bending them when it comes to the relationship between companies and their costumers. The regulatory capture is insane in the US, and forced arbitration should be illegal in a country that believes in the rule of law. Contract law also should not allow one-sided changing of contracts regarding removal of features, privacy and cost structure - slapping a subscription fee on something that already has been sold without subscription should not be a thing at all, unless they also allow costumers to return the product for the full price they paid, and the privacy policy should be fixed in its essence (changing some minor wording is fine).

If you can't be sure that whatever you buy today will work the same way in a few weeks or that it won't just start selling your data because contracts can change whenever, then you also can't trust e-commerce at all, which is an essential way of doing business today - being able to buy something online and transferring money to an unknown party does not work in a low-trust society. The companies behaving that way are sawing on the branch they are sitting on because they don't give a shit about rules.

minorkeys@sh.itjust.works · 2 pts · 1d

And we're staring down the barrel of a low trust society because the GOP is reshaping the economy in their image and they are the least trustworthy people in politics. Every corrupt thing they do undermines that trust, every institution they corrupt undermines that trust, every like they tell and regulation they repeal, every law they refuse to enforce, everything they do is low- trust. The longer they are in power, the worse it will get.

expletivedeleted@lemmy.zip · -8 pts · 2d (5 replies)

Entertainment hardware vendors? Dude, it is just a monitor. I don't agree with their practices, but I also don't understand why someone would connect a TV to the internet.

But hey: some people want to play Doom on their fridge. shrug

Funkt4st1c@lemmy.world · 10 pts · 2d (2 replies)

Can you guarantee that a tv isnt constantly, without consent, searching for an unsecured wireless network to connect to? Or has a secret cellular chip? Or, even if it doesnt right now, that it wont in the future?

This is why we need laws, to protect people who shrug

Wildmimic@anarchist.nexus · 2 pts · 2d

Dont even need a cell phone. LoRa is a thing and works perfectly fine in both remote areas and not so remote ones.

expletivedeleted@lemmy.zip · 1 pts · 2d

Oh bro, fuck yes we need the laws. We are certainly on the same team! Absolutely no question.

Shit, man, I will be your brother in arms on this topic!

Wildmimic@anarchist.nexus · 5 pts · 2d

This "monitor" reports home on what you watch, how long you watch, what other devices are in your home, and integrates an ad service called "Alphonso" (a 100% daugter of LG), using this information to bombard you with ads on your mobile devices and selling this info to data brokers, which in the US also means that it lands in the hands of the government. I don't know much about your standards regarding privacy, but i'd say what i watch on my tv in my living room is nobody's fucking business.

Bluescluestoothpaste@sh.itjust.works · 2 pts · 1d

It's not just a monitor that's the point. They just stopped making "just monitors" bigger than like 40". All TVs now available to consumers are spy devices with a big screen.

Grandwolf319@sh.itjust.works · 28 pts · 3d

Need to put them in a faraday cage.

In fact, maybe your entire house should be a faraday cage

DonutsRMeh@lemmy.world · 27 pts · 3d (16 replies)

My Samsung tv literally phones home and Netflix 24/7 even when it is off. My “Sniffet” app screams with nothing but Samsung and Netflix garbage URLs. So does my pi-hole. It’s insane how any of this is actually even legal.

nymnympseudonym@piefed.social · 34 pts · 3d (2 replies)

FYI the default blocklist included with PiHole does not block smart TVs. Strongly recommend Perflyst SmartTV List:

https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/SmartTV.txt

DonutsRMeh@lemmy.world · 10 pts · 3d

I don’t use the default one from pihole, I had to dig around to find the ones that actually did block all the ads and other garbage. But I’ll definitely dig into the link you have provided. Much appreciated, fellow great human being <3

W98BSoD@lemmy.dbzer0.com · 8 pts · 3d

Make sure to also use the extra RegEx list at https://perflyst.github.io/PiHoleBlocklist/regex.list, which helps remove regional LG ad domains among other things.

——-

But hasn’t been updated since 2023. Oof.

Malica@lemmy.zip · 4 pts · 3d (8 replies)

Can they be rooted? I'm honestly about to throw them out.

DonutsRMeh@lemmy.world · 5 pts · 3d (7 replies)

I know LG TVs can rooted, but I don’t know about Samsung. It actually won’t matter anymore until the government legislates something to make this shit illegal. All of this actually go against the 4th amendment in the US. I that LG has been talking about putting a little modem in their displays that gets its internet from the whole neighborhood’s routers after some deals with AT&T (I think). So then disconnecting the tv from your home network won’t matter.

frongt@lemmy.zip · 9 pts · 3d (2 replies)

The fourth amendment only binds the government, not private individuals or companies.

DonutsRMeh@lemmy.world · 1 pts · 2d (1 reply)

True, but how many of these companies don’t actually give that data to the government?

Bluescluestoothpaste@sh.itjust.works · 1 pts · 1d

Well that's the loophole in the Fourth Amendment, as long as anyone gives the data willingly the government is off the hook, even if the person who gave it stole it illegally. As long as the govt didn't force someone to without due process, they're in the clear.

Serinus@lemmy.world · 5 pts · 3d (1 reply)

Doesn't the fourth amendment apply to the government, much like the first?

DonutsRMeh@lemmy.world · 1 pts · 2d

It does, but all these companies are willing to hand out data to the government easily.

Malica@lemmy.zip · 3 pts · 3d (1 reply)

I was thinking of taking the Wi-Fi board out entirely

DonutsRMeh@lemmy.world · 1 pts · 3d

That won’t matter in the future. You’ll need to think of taking the future modem they’ll put there.

Zedd_Prophecy@lemmy.world · 3 pts · 2d (3 replies)

See the same on my pi-hole. Chromecast is especially evil.

adjectivenoun@lemmy.world · 2 pts · 2d (2 replies)

They can get around your Pi Hole with DNS over HTTPS these days. I don't have one. Do you find yours still works well?

Zedd_Prophecy@lemmy.world · 3 pts · 2d (1 reply)

I've censored so much traffic that it has issues with certain things. If there wasn't a price crisis I had planned to build my own Android TV box with an old Intel NUC or such but not at these prices. I've not looked into anything about DNS over https. I am behind a VPN at the router though not sure if that helps.

adjectivenoun@lemmy.world · 1 pts · 2d

I appreciate the info! A TV box really doesn't require much in the way of hardware. Have you considered picking up an old laptop? I personally use a SteamLink to stream from my desktop. (Pretty rare that I want to watch TV and game at the same time.)

flop_leash_973@lemmy.world · 24 pts · 2d

I once tried to connect my Galaxy phone to my Samsung TV that is not connected to the local network. And the phone not only connected via bluetooth to share the video I was trying to project, it also silently passed my wifi credentials from the phone to the TV and connected itself to the internet.

Got rid of the Samsung phone soon after, and I won’t buy another Samsung TV either when this one dies.

Thorry@feddit.org · 21 pts · 3d (1 reply)

For people thinking about opening up their remotes and removing the microphone. You're free to do so as you please, but also note there has been zero evidence of any remotes doing any sort of recording unless the button is pressed.

Now this isn't to say the recording isn't forwarded to the mother ship once you do press that button, but the main concern has been the mic inside the TV. The remote has pretty limited batteries, if it were to record all the time it would run flat in a matter of hours. So if your remote does a year or so on the batteries, it's not recording anything unless you press the button to do so.

Zedd_Prophecy@lemmy.world · 2 pts · 2d

Yeah. I think that is overkill. They leave the voice tied to a button so they don't have to filter out background for a command. This is just cost driven and so far cost of manufacture still drives companies ... Not data gained through background monitoring. Your data is valuable but not THAT valuable yet

FudgyMcTubbs@lemmy.world · 20 pts · 2d (2 replies)

Oh the irony

dropdrip@lemmy.ml · 8 pts · 2d (1 reply)

What the fuck is with all this new jargon: pixels instead of tracking-pixels? Pixel technology! You mean loading of a image with a resolution of 1x1. What technology?

onion_trial@europe.pub · 5 pts · 2d

Just the next small step in obfuscating spyware: Removing a descriptive term to let it sound less harmful

nuko147@lemmy.world · 18 pts · 2d (7 replies)

Samsung Privacy. Download or Delete your data and opt out for all Samsung apps and Services.

My request is processing for the last 6 hours....

dropdrip@lemmy.ml · 16 pts · 2d (1 reply)

These 'options' fundamentally don't work. Even if they were in good-faith one of their partners will still collect and transmit data you've generated. The whole industry is built on a no-consent model: it's software; people can't see or hear what software is doing; keep it in the background. Any attempt to revoke consent in a no-consent industry is futile. What's not futile is taking control of your computers and not running their proprietary spyware software in the first place.

nuko147@lemmy.world · 3 pts · 2d

Yeah, this is more like a damage control or a lesson for the future for me.

joat_mon@lemmy.world · 4 pts · 2d (2 replies)

Want to delete my data... log in to my account to do it... phone number required before allowing me access to delete my data 😑

nuko147@lemmy.world · 3 pts · 1d (1 reply)

I guess it goes the slow way too by sending them an email with your info and that you dont have any number or email access, requesting them to delete everything.

In EU they are obliged to respond and do it (don't know the timeframe), or you can sue.

joat_mon@lemmy.world · 2 pts · 1d

I was actually able to use one of the temporary phone number services to get past it in the end and started the request.

morriscox@lemmy.world · 3 pts · 2d (1 reply)

It prompts you to accept all cookies, with no options. Ironic.

nuko147@lemmy.world · 1 pts · 2d

My browser get rid these popups in almost every site, so I cant confirm.

chode_tode@lemmy.world · 13 pts · 2d (4 replies)

Sigh... it never ends.

minorkeys@sh.itjust.works · 3 pts · 2d

Not until we end it, together.

heartSagan5@lemmy.zip · 3 pts · 2d (2 replies)

All people had to do was say no to "smart tvs" But "Android pretty" I'm not innocent because I have a Bluray player with apps, but it does require an Ethernet cord so that's helpful.

Wolf314159@startrek.website · 3 pts · 1d (1 reply)

Oh that's all? Really? Have you tried to buy a "Not Smart" TV lately? Not exactly any options that are branded as TVs. I tried. I would have had to sacrifice quality and pay more for the privilege to buy a device intended to be used to display mostly static images as a menu board not be great at playing movies and high FPS video games. As a consumer, I was never really get a choice or a vote in this smart TV switchover decision.

captainlezbian@lemmy.world · 1 pts · 1d

Yeah I looked for dumb tvs, but my options were all either smart or expensive and designed for non TV uses, so I just prioritized one that doesn't need to connect to internet

GreenKnight23@lemmy.world · 11 pts · 3d

It’s not just LG. Every TV company is spying on you

there, I fixed it.

darthsundhaft@piefed.social · 11 pts · 3d (1 reply)

Duh... it's pretty much like how the news only covered that one auto maker about how they track your activity but the reality is, they're all doing it.

If it has a mic or GPS, you better believe they'll have a way to track you. Don't matter if Android or iPhone, Kia, Niisan, whatever. Tech bros and the state are all in cahoots.

adjectivenoun@lemmy.world · 4 pts · 2d

My car is pretty old, so this may not work for everyone, but I can pull the fuse that powers the modem, then program the carnet or whatever VW calls it so it doesn't expect to find a modem. All you need is an ELM327 dongle and one of the apps. (Car Scanner Pro is like $8 and a single payment.)

Tollana1234567@lemmy.today · 9 pts · 3d (19 replies)

the big mistake is buying a smart tv in the firs tplace.

mst@discuss.tchncs.de · 9 pts · 2d (16 replies)

It's hard to find dumb TV. But you can just use a smart TV without connecting it to the internet.

Deaderik@lemmy.world · 14 pts · 2d (15 replies)

That's a bit of a misconception, TV's have other potential paths to try and get themselves connected. Say connecting itself to an unsecured network or uploading through a data stream over HDMI. Or you sell the TV and the next person connects it to the internet (TV's can store a lot of data too).

The only real ways to cripple a Smart TV is to either destroy the ability to spy (disconnect mics etc.) or properly contain it in a firewall.

adjectivenoun@lemmy.world · 3 pts · 2d (2 replies)

Is there any evidence this happens? Why would manufactures go to the trouble of making a nefarious hacker TV when 99.9% of buyers are just going to type in their wifi credentials when prompted?

Sixseven@sh.itjust.works · 8 pts · 2d (1 reply)

You should watch the gamers nexus video. The LG TVs they tested automatically look for open wifi networks to connect to and once connected to a network scan for all devices on the same network and send that back to the mothership.

SaharaMaleikuhm@feddit.org · 3 pts · 2d

Glad mine is maybe 10 years old at this point.

chiliedogg@lemmy.world · 1 pts · 2d (4 replies)

Also - lots of ISP-provided routers have secondary unsecured networks as part of a network for customer devices that you may not even realize are coming from your own router.

LazyOldPervert@lemmus.org · 1 pts · 2d (3 replies)

How can I find out more about these?

chiliedogg@lemmy.world · 1 pts · 1d (2 replies)

I know my Time Warner/Spectrum router used to have one back in the day as part of their "nationwide wifi" or whatever it was called.

I bought my own modem and router years ago. Last year I bought a new TPLink router when I wanted to upgrade my wifi and I put custom firmware (OpenWrt) on it to make sure I was in comtrol.

LazyOldPervert@lemmus.org · 1 pts · 20h (1 reply)

Does it work well with the new firmware??

chiliedogg@lemmy.world · 1 pts · 17h

Works fine for me.

hansolo@lemmy.today · -3 pts · 2d (6 replies)

This is sort of a solvable problem is the thing. If you just check there's no open networks in/near your home, and do a factory reset when you sell it, you're covering both of the hypotheticals you mentioned.

If the TV can't talk to anyone, it can't talk to anyone. It's too expensive to insert complements into millions of units for edge cases when so many people connect their TVs anyway.

noxypaws@pawb.social · 14 pts · 2d (5 replies)

you're assuming a factory reset wipes rhe stores surveillance data. which I'm pretty sure the GN video touched on. you CANNOT assume this.

hansolo@lemmy.today · -1 pts · 2d (4 replies)

Sure, but you're selling a TV to someone else. What better way to obfuscate your own data then letting someone else have their "Bob Jones TV" connected to Bob_JonesWifi, and wow, we got 3 years of data? It's not exactly going to catch you.

noxypaws@pawb.social · 3 pts · 2d (3 replies)

I don't want a backlog of transcripts of my private conversations I've had inside my home get uploaded once the next owner connects it to their wifi.

hansolo@lemmy.today · -2 pts · 2d

But the TV will think it's their conversations, that Bob Jones. It has no way to know it moved houses. It will attribute it all to someone else.

Also, just get power strip with an off switch and cut power to the TV when not in use. No power, no data collection.

Once again, a solvable problem if you just think it through.

bravemonkey@lemmy.ca · 6 pts · 2d (1 reply)

Why do these types of comments keep getting upvoted when they’re fundamentally virtue signalling with nothing of substance?

If people shouldn’t buy a smart tv, are you suggesting no tv at all? Or a business display that’s not as good for gaming and other media?

Or do you actually have a suggestion for a non-smart tv made with current technology?

Bluescluestoothpaste@sh.itjust.works · 0 pts · 1d

are you suggesting no tv at all? Or a business display that’s not as good for gaming and other media?

I mean yeah you have to if you don't want strangers spying in your house. idk im autistic but all i can say it's an easy choice for me to just not have a tv at all.

SpookyBogMonster@lemmy.ml · 8 pts · 2d (2 replies)

Not my dumb tv from 2009, that's still kicking

cannedtuna@lemmy.world · 7 pts · 2d

Not my projector “flat” screen TV!

Kyunw@lemmy.world · 1 pts · 2d

here i am still using tv from 1990 XD

FlashMobOfOne@lemmy.world · 8 pts · 3d (3 replies)

Yup.

Texas (and oddly, Ken Paxton) are currently suing five TV manufacturers for this. If anyone's interested I made a video about it on my channel.

onlinepersona@programming.dev · 7 pts · 3d (2 replies)
FlashMobOfOne@lemmy.world · 12 pts · 3d (1 reply)

A month ago I applied to four different servers and got no response, and the counterpart to my Mastodon instance has registrations closed.

I've tried, but if you know a good one that is actually taking new creators, feel free to let me know and I'll give it another go. I'm definitely not averse to bridging my content.

onlinepersona@programming.dev · 2 pts · 3d

The ones I shared are active and accept new users. Have you tried one of them?

If you want, I can request the account for you and then share the details with you.

nilloc@discuss.tchncs.de · 8 pts · 3d (6 replies)

Not if you still have a 1080p dumb TV from 10-12 years ago (I forget exactly its so old).

Zedd_Prophecy@lemmy.world · 2 pts · 2d

Or a cheap Chinese projector and a Linux laptop.

Shindo66@lemmy.world · 0 pts · 3d (4 replies)

Back in the day, that would be hooked up to a cable box. Those allllll had microphones in them. (They may have even had cameras and thats why they always wanted to use line of sight remotes so they wouldnt be blocked behind something)

Zedd_Prophecy@lemmy.world · 3 pts · 2d

There weren't cameras. Source old tech from the day.

psx_crab@lemmy.zip · 1 pts · 3d (1 reply)

So come back to this day, you basically hook it up to a linux pc

nilloc@discuss.tchncs.de · 1 pts · 1d

Yup, old Mac in my case but same outcome. Also a retro pi.

Kernal64@sh.itjust.works · 1 pts · 2d

A very common myth. Cable boxes, at least from my local cable company didn't have microphones or cameras. I've taken apart a number of them and found the absolute cheapest, bottom shelf, minimal viable components in them, which is why they broke all the time, but never once found a microphone or camera.

Sauvandu60@lemmy.ml · 7 pts · 2d (3 replies)

This is why when i'm done watching TV, i would pull out the power plug from the electric socket.

Professorozone@lemmy.world · 5 pts · 2d (1 reply)

Just put it on a power strip and turn that off. Just a little easier, I think. You're welcome.

heartSagan5@lemmy.zip · 3 pts · 2d

It'll also save money on the electric bill because of the vampiric light in the power strip.

0x0@lemmy.zip · 1 pts · 1d

If it's online while on it's... an improvement I guess.

FreddiesLantern@leminal.space · 6 pts · 2d (4 replies)

Are there any hosts file/ublock type of lists that prevent this data from going out? I'd gladly throw that onto any device I can.

Nugscree@lemmy.world · 7 pts · 1d (3 replies)

I can share the pihole domains I have for my samsung tv (although it's no longer connected to the internet now)

  • ocfconnect-shard-eu[0-9]{2}-euwest1.samsungiotcloud.com (regex deny)
  • ads.samsungads.com (exact deny)
  • samsungacr.com (exact deny)
  • samsungotn.net (exact deny)
  • log-config.samsungacr.com (exact deny)
  • gpm.samsungqbe.com (exact deny)
  • config.samsungads.com (exact deny)

It stopped any ads coming through and also prevent (some) data going back to them, mind you this also breaks installing new apps on the tv, so disable, install app from their store, enable again.

Hope this helps

btsax@reddthat.com · 4 pts · 1d (2 replies)

Better than nothing, but if the TV doesn't use DNS or connects to other networks or unsecured networks on its own, you're still hosed

Nugscree@lemmy.world · 2 pts · 1d (1 reply)

These work for at least the 7 series, there were no more ads in the menu's.

btsax@reddthat.com · 1 pts · 1d

That's a separate issue than the spyware though, the data collection on you could be going out a different route

eleitl@lemmy.zip · 5 pts · 1d

Guess why I don't own a smart TV.

SnarkoPolo@lemmy.world · 5 pts · 3d

And you can bet that in the US at least, they will happily provide everything to law enforcement, even if not asked.

HugeNerd@lemmy.ca · 2 pts · 2d

Just play this on a loop

https://youtu.be/KcY1OiICrUs

inclementimmigrant@lemmy.world · 2 pts · 1d

Well glad that I still have my good old dumb 1080p LCD and my HTPC.

jsstr@infosec.exchange · 1 pts · 3d (7 replies)

@cannedtuna anyone have a non-paywalled link?

GenXLiberal@lemmy.world · 4 pts · 3d
cannedtuna@lemmy.world · 2 pts · 3d

It’s not just LG. Every TV company is spying on you

Not every smart TV is as easily hackable as Gamers Nexus says LG’s are, but they’re all tracking what you watch unless you opt out.

The TV world has been a pot of controversy thanks to a two-hour-and-15-minute video from Gamers Nexus claiming LG TVs are nefariously spying on everything you do. They can record and store audio even when they seem to be off, track everything you watch, and could even be hacked remotely and turned into covert surveillance devices. LG TV owners, and tech enthusiasts in general, are furious, and a hurried response from LG has done little to calm the situation.

Some of the claims in the video may be based on speculation and assumptions, but many of the core concerns are real and pervasive. While LG was the focus of the video, every TV company is tracking what you do, collecting that data, and sharing it with its partners. And we agree to it — even if we don’t realize it.

TV prices have come down significantly over the years, to the point where some companies are selling them at a loss. But they make up that shortfall selling user behavior data they collect from the OS. It’s why Walmart bought Vizio in 2024.

There’s a lot going on in the Gamers Nexus video, but we’ll start with the part pretty much everyone making TVs is doing: tracking what you watch, when you watch, where you watch, and how you watch to sell you things about it all. Automatic content recognition (ACR) systems are built into just about every modern TV and can identify the content playing through built-in streaming apps and over the TV’s ports by grabbing snippets of audio or video, converting them into digital fingerprints, and sending them to a database for identification. It’s what allows a TV to make content recommendations, as well as feed you ads based on your viewing habits. It’s also one way companies like Nielsen can track viewership across platforms and services.

In order for TVs to capture this information, you need to agree to it. One of Gamers Nexus’ complaints in the video is that this consent is often buried in confusing and lengthy agreements that you need to accept in order to use the TV, and that companies often use dark patterns or deceptive designs to get users to agree to things without realizing they didn’t have to. For example, the Gamers Nexus video showed an LG TV displaying six different user agreements, including one consenting to ACR, and automatically putting the cursor on “Select All” when only two agreements are required to continue.

As a TV reviewer, I have to deal with end-user license agreements (EULA) and privacy policies on every product I review. And while it might be a losing battle because of the sheer number of TVs and other smart devices that come through my apartment, I take steps to try and protect my privacy. I have a burner Gmail account that is used solely for signing into apps and the TV’s operating system. Initially, I only accept the legally required documents for the TV to work properly so I can run my picture quality tests — both Calman and test discs. I never agree to automatic content recognition, which is referred to by names including Enhanced Viewing, Smart TV Experience, and Samba Interactive TV.

I also dig through all of the menus, partly to become familiar with all the settings available, but also to make sure any ad or data tracking is toggled off. When I need to test voice control, I’ll then accept the voice recognition agreements before testing functionality. And since this is usually the last thing I do in my test process, this is followed by a factory reset before sending the TV back to the manufacturer. If you’re worried about privacy, don’t use voice control. Or if you do, only use the one on a separate streaming box from a brand you trust.

I recommend the same for everyone with a smart TV. Have a dedicated email for logging in to TVs (and, if possible, your streaming apps) that isn’t connected to your personal email. When setting up the TV, only agree to whatever’s necessary for the TV to run if you want to use its OS. And after setup, go through all the menu options to make sure any ad tracking is off, and read the menu prompts closely, as the wording is sometimes confusing (probably intentionally so). Consumer Reports has a great, although slightly older guide to limiting data collection from the different TV manufacturers.

To take it a step further, turn off Wi-Fi and unplug the Ethernet cable from the TV and essentially use it as a dumb TV (the Vizio Mini LED Quantum I reviewed is the best at this). Then, plug in your third-party streaming device of choice. I use an Apple TV 4K. Not because I don’t think Apple harvests any data, but because it doesn’t use ACR and I trust its security protocols more than I do any of the TV manufacturers or Google.

Apple does still offer content recommendation based on what you watch, download, browse, and subscribe to in the Apple TV app. This can be turned off in settings by going to Apps -> TV -> Use Play History -> Off. For third-party apps, such as Netflix or Disney Plus, Apple gives users the option to “Ask App Not to Track,” which blocks the app’s developer from accessing the system advertising identifier. Keep in mind that every streaming service does track your usage within its own app and tie it to your login; many streaming boxes do too.

A good chunk of the Gamers Nexus video focused on broader security concerns and what appear to be much more egregious privacy violations from LG. That includes recording video and audio from the room even when the TV appeared to be off, sending information about the local network to LG’s servers, and logging background audio captured when using the TV’s mic for voice search and voice control. Gamers Nexus and Level1Techs were even able to exploit security vulnerabilities to take control of the TV, which is how they discovered the above.

None of that is good, obviously. But it is worth noting that the scariest part — recording video (from a webcam they attached) and audio when the TV appeared off — seems to have been possible only because Level1Techs rooted the TV using an exploit that they said requires network access. If you have access to a computer, which is what a smart TV is, and you can root it, you can make it do pretty much whatever you want. If the TV is indeed rootable with only network access, that is a legitimate security problem; it still requires an attacker to get into your private network, but gives them a vulnerable endpoint if they do.

With that root access, Gamers Nexus also discovered that when an LG TV’s mic was activated for voice search, it kept recording for 10 to 15 seconds after it last detected speech. It could also detect the “hi LG” wake word and other speech from farther away than you would expect — after Gamers Nexus enabled the far-field microphone and cranked up the mic sensitivity. Taken in combination, that means that as long as anyone within the (long) earshot of the microphones kept talking after the mic was activated, the TV would capture their conversation too and treat it as part of the voice search. That’s not ideal, but Gamers Nexus and Level1Techs did go out of their way to increase the mic’s pickup range and used the optional voice search wake word, both of which are easy to avoid doing.

Alongside their pretty damning testing, there’s also a lot of “it might” and “we think” and outright speculation in the video, not to mention long-distance conclusion jumping. For example: Gamers Nexus’ Steve Burke says that unplugging your TV’s ethernet cable might not be enough to stop it transmitting data to LG, because it could auto-connect to open neighborhood Wi-Fi broadcasts from Comcast or AT&T customers in order to upload that data. There’s no evidence in the Gamers Nexus video that LG TVs actually attempt to do this — these hotspots require user accounts, for one thing — and Burke doesn’t say that they do, or even could, but the implication is clear. This type of rampant speculation undermines the legitimate vulnerabilities Gamers Nexus highlights.

There’s really no way to completely protect yourself from your TV, streaming device, or streaming services gathering your data, at least right now. There’s so much money being made at the expense of consumers and the data collection is so integrated into how these companies work that the change and regulation needs to come from government policymakers. “We need a comprehensive federal privacy law that covers this sort of data collection and misuse,” said Thorin Klosowski, senior security and privacy activist at the Electronic Frontier Foundation (EFF). “Specifically one that requires opt-in consent, with no deceptive design tricks to get that consent, and a data minimization requirement, which would limit the companies to only using data for what’s needed to provide the service.”

The fact that we, as users of tech products, need to actively protect ourselves from the companies that sell us things is bad. But it’s the unfortunate current reality of living in a tech-filled world and taking advantage of the benefits current technology affords. Beyond disconnecting completely and living in a cabin in the woods with a dumb TV and a collection of Blu-rays, the best we can do is limit as much shared information as possible. If it’s possible to keep it private, we should.

Saltarello@lemmy.world · 2 pts · 3d (1 reply)

Paywalled: Potentially geolocation but you could try opening in browser. If viewing through Lemmy app such as Voyager, ⋮ menu >Open in browser then depending on your browser/plugins/location, it's gone

cannedtuna@lemmy.world · 1 pts · 3d (2 replies)

Are you sure it’s paywalled? I was able to read the whole article without issue

Gainaxe@lemmy.world · 2 pts · 3d (1 reply)

paywalled for me as well.

Shindo66@lemmy.world · 0 pts · 3d (1 reply)

I strongly believe all those cable boxes back in the day all had microphones in them. It may not have even been nefarious. If nothing else, its really valuable to advertisers to know who's watching what when. How much more can you sell advertising on YOUR provided cable channels when you can give concrete data to buyers who's watching and when they watch and what they might be doing while they watch. I would go as far as they may have even had cameras in them, thats why they always used line of sight for the remotes, to make sure the camera behind the tinted plastic would be pointed out to the middle of the room.

At this point, I just give up. Take my cookies. Take all my data. You know everything. Sell me stupid shit. I know, I was talking about re doing the living room floor with my family. Now its all flooring ads. You know I have strong anti establishment ideals. Now line me up against the wall with the others.

rumba@lemmy.zip · 5 pts · 3d

We needed AI models before the microphones could be useful. Storing off voice audio and transcribing it was only useful when the State wanted to know what you're up to. Only now that a model can reduce it to text and add it to your dossier, does it truly become useful intel.

InvalidName2@lemmy.zip · -8 pts · 3d (4 replies)

They can't really spy on me b/c I don't have it connected to the internet and I'm 99.999% sure that whatever they might discover by spying on me isn't worth the price of a cellular network card and ongoing costs associated with that.

Taleya@aussie.zone · 12 pts · 3d (2 replies)

Yeah nah mate they worked that one out years ago. Shit scans for adhoc/unsecured, or uses a low level local mesh until they hit one that does have internet

nwtreeoctopus@sh.itjust.works · 6 pts · 3d

After turning off the wifi setting on my 2022ish Samsung TV, no attempts to connect to wifi. I don't have a password, but it doesn't appear to have connected to my wifi.

I also live in the woods and there's no neighbor wifi or anything.

That said, before I turned wifi off, the TV was CONSTANTLY sending data to the mothership.

adjectivenoun@lemmy.world · 1 pts · 2d

I believe that's possible but I just don't think it's worth it when 99.9% of normies are going to type in their wifi credentials. You have a source of this actually being implemented?

cannedtuna@lemmy.world · 7 pts · 3d

That’s sort of the “I’ve got nothing to hide” argument. They want your data for a reason. It’s valuable to them. It’s like, why have blinds or curtains on your windows if you don’t have something to hide?