posted in Technology

UnLocoPoco@UnLocoPoco@lemmy.world

Your LG TV Might Be Spying on Your Entire Network While You Think It's Turned Off

cross-posted from: lemmy.world/post/51634640

A new Gamers Nexus investigation found a retail LG TV actively scanning the local network for phones, laptops, smartwatches and other connected devices, while also capturing microphone audio when the screen appeared to be in standby. The investigation found voice data being stored locally even after the TV was disconnected from the network, with the queued data uploaded once connectivity returned. Researchers also uncovered webOS vulnerabilities that could potentially turn the television into a remotely controlled surveillance device. The really unsettling part isn’t just the advertising angle. It’s the fact that a consumer television can sit inside your trusted network, enumerate other devices, access a microphone, store collected data locally and communicate with external infrastructure. Put that same device in a corporate office, hospital, hotel or conference room and the security implications become considerably more serious. I went through the investigation in detail, including the network scanning, microphone behavior, ACR, webOS attack surface, offline data collection and practical mitigations

thecybersecguru.com/news/lg-smart-tv-spying-investigation/
cecilkorik@cecilkorik@piefed.ca

Replying to an earlier post

I don’t have any specific evidence on hand, but I do know a lot about the technology and companies involved from working in adjacent fields (cloud architecture) and it is absolutely plausible that they can and do. If they are not doing it already (and I believe it is highly doubtful that at least some devices do not already do this) then it is certainly on their roadmap. Many consumer IoT/media devices have invisible, hidden wireless networks built in and have for years. If it’s advertised, it may boast some sort of “quick connect”, “auto configuration” or other convenience feature, it may be genuinely required for low-latency/quality-of-service (for example on most modern TV services which supply the channels by IPTV behind the scenes), but it’s always on, it’s always listening, and it’s only a friendly partnership agreement away from being used for whatever “legitimate” purposes a company may dream of.

Tech surveillance is extremely out of hand and has gone so far beyond anything would consider reasonable, I understand that you would instinctively reject it as too extreme to be believable. But in the industry it’s completely normalized and they don’t even give it a second thought, it’s just business as usual.

en