posted in Technology

Your LG TV Might Be Spying on Your Entire Network While You Think It's Turned Off

cross-posted from: lemmy.world/post/51634640

A new Gamers Nexus investigation found a retail LG TV actively scanning the local network for phones, laptops, smartwatches and other connected devices, while also capturing microphone audio when the screen appeared to be in standby. The investigation found voice data being stored locally even after the TV was disconnected from the network, with the queued data uploaded once connectivity returned. Researchers also uncovered webOS vulnerabilities that could potentially turn the television into a remotely controlled surveillance device. The really unsettling part isn’t just the advertising angle. It’s the fact that a consumer television can sit inside your trusted network, enumerate other devices, access a microphone, store collected data locally and communicate with external infrastructure. Put that same device in a corporate office, hospital, hotel or conference room and the security implications become considerably more serious. I went through the investigation in detail, including the network scanning, microphone behavior, ACR, webOS attack surface, offline data collection and practical mitigations

thecybersecguru.com/news/lg-smart-tv-spying-investigation/

Replying to @⁨woelkchen@lemmy.world⁩

I’m not sure if LG connects to it, but it’s an open standard and like LoRa, has a decent range, so there doesn’t seem to be anything stopping them from adding it to their TVs.

Plus from the article:

It also picks up the SSIDs and signal strengths of neighboring Wi-Fi networks visible to its wireless radio, building a rough map of the surrounding area, and includes location data tied to those network identifiers in what it collects.

This is active scanning, not passive listening: the television initiates the queries, processes the responses, and packages the results into structured data. The researchers confirmed the behavior happens out of the box, with no extra configuration needed, and found no setting that disables the LAN sweep on its own, separate from other smart features.

It doesn’t mention connecting automatically to unsecured networks, but it sounds like one OTA update away from that capability (The sidewalk network works this way, which is why I mentioned it). LG is already lying about the transcriptions taking place, so there’s no reason to trust them, which I think the point of this thread was.