posted in Technology

Your LG TV Might Be Spying on Your Entire Network While You Think It's Turned Off

cross-posted from: lemmy.world/post/51634640

A new Gamers Nexus investigation found a retail LG TV actively scanning the local network for phones, laptops, smartwatches and other connected devices, while also capturing microphone audio when the screen appeared to be in standby. The investigation found voice data being stored locally even after the TV was disconnected from the network, with the queued data uploaded once connectivity returned. Researchers also uncovered webOS vulnerabilities that could potentially turn the television into a remotely controlled surveillance device. The really unsettling part isn’t just the advertising angle. It’s the fact that a consumer television can sit inside your trusted network, enumerate other devices, access a microphone, store collected data locally and communicate with external infrastructure. Put that same device in a corporate office, hospital, hotel or conference room and the security implications become considerably more serious. I went through the investigation in detail, including the network scanning, microphone behavior, ACR, webOS attack surface, offline data collection and practical mitigations

thecybersecguru.com/news/lg-smart-tv-spying-investigation/

Replying to an earlier post

In a perfect world?

I’d love access to diagnostic data. Is the filter starting to clog? Is any part not working as intended? I’m a big fan of preventative maintenance, but also really bad at sticking to an arbitrary recurring schedule (e.g., clean the filter every 6 months). This could also be accomplished with Bluetooth and an offline-only app on the phone.

In the real world? Nobody provides this, and the privacy risks aren’t worth it.

I do have my dishwasher on a ZigBee power meter to 1) track energy use and 2) give me a good-enough estimate of time remaining by starting a 2h timer after it starts.