Crossposted from https://infosec.pub/post/52518361
The TV world has been a pot of controversy thanks to a two-hour-and-15-minute video from Gamers Nexus claiming LG TVs are nefariously spying on everything you do. They can record and store audio even when they seem to be off, track everything you watch, and could even be hacked remotely and turned into covert surveillance […]
It’s hard to find dumb TV. But you can just use a smart TV without connecting it to the internet.
That’s a bit of a misconception, TV’s have other potential paths to try and get themselves connected. Say connecting itself to an unsecured network or uploading through a data stream over HDMI. Or you sell the TV and the next person connects it to the internet (TV’s can store a lot of data too).
The only real ways to cripple a Smart TV is to either destroy the ability to spy (disconnect mics etc.) or properly contain it in a firewall.
Also - lots of ISP-provided routers have secondary unsecured networks as part of a network for customer devices that you may not even realize are coming from your own router.
How can I find out more about these?
Is there any evidence this happens? Why would manufactures go to the trouble of making a nefarious hacker TV when 99.9% of buyers are just going to type in their wifi credentials when prompted?
You should watch the gamers nexus video. The LG TVs they tested automatically look for open wifi networks to connect to and once connected to a network scan for all devices on the same network and send that back to the mothership.
Glad mine is maybe 10 years old at this point.
This is sort of a solvable problem is the thing. If you just check there’s no open networks in/near your home, and do a factory reset when you sell it, you’re covering both of the hypotheticals you mentioned.
If the TV can’t talk to anyone, it can’t talk to anyone. It’s too expensive to insert complements into millions of units for edge cases when so many people connect their TVs anyway.
you’re assuming a factory reset wipes rhe stores surveillance data. which I’m pretty sure the GN video touched on. you CANNOT assume this.
Sure, but you’re selling a TV to someone else. What better way to obfuscate your own data then letting someone else have their “Bob Jones TV” connected to Bob_JonesWifi, and wow, we got 3 years of data? It’s not exactly going to catch you.
I don’t want a backlog of transcripts of my private conversations I’ve had inside my home get uploaded once the next owner connects it to their wifi.
But the TV will think it’s their conversations, that Bob Jones. It has no way to know it moved houses. It will attribute it all to someone else.
Also, just get power strip with an off switch and cut power to the TV when not in use. No power, no data collection.
Once again, a solvable problem if you just think it through.
it knows nearby wifi SSIDs and their hardware addresses, which are trivially easy to use to narrow down a location to a rather precise area. I’m pretty sure the GN video covered that as well, and showed GPS coordinates or a street address being transmitted.
You’re right about the power strip tho.