top 50 comments

sorted by: hot top controversial new old
[–] 164 points 3 weeks ago (13 children)

Go to any mid sized or larger company and run a port scan and you'll be immediately found and taken to the woodshed or fired.
But I guess doing it unannounced in peoples home is just fine.

  • source
  • hideshow 13 child comments
  • [–] 36 points 3 weeks ago (2 children)

    What about the larger companies with LG tvs in their offices?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 42 points 3 weeks ago

    You wouldn't add them to the network. HDMI to the conf room table or a dedicated phone controller. Maybe an HDMI matrix.

    Forget the TV calling home for advertisement info, i'm worried about holes in their screen mirroring and microphone that would let people snoop from the floors above/below me. If we need smart features, we tie them to either real media hardware, or plug them to a small computer.

  • source
  • parent
  • [–] 27 points 3 weeks ago (9 children)

    Media bullshit at work gets its own isolation VLAN.

    If they were serious enough to buy serious equipment, I wouldn't have to do it. I'd still do it, but I wouldn't have to.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 25 points 3 weeks ago (6 children)

    They literally run speech to text, store it and exfiltrate it to their servers...

    Even if you deny internet access, it can hop to other smart devices of the same brand using hidden SSIDs and exfiltratr data that way, or if the TV gets sold and connected to a network, all of the stored conversations will get sent to their servers. This was from the original GN investigation and associated security researchers

    There isn't really something one can network-admin a way out of it seems, sadly...

  • source
  • parent
  • hideshow 6 child comments
  • load more comments (6 replies)
  • [–] 91 points 3 weeks ago

    God damn LG is really flaming all the way down to the ground aren't they. Greed will make you do crazy shit.

  • source
  • [–] 81 points 3 weeks ago* (last edited 3 weeks ago) (5 children)

    It’s weird that this is the takeaway from that investigation that big media is pushing.

    This is maliciously burying the headline that LG TVS ARE TRANSCRIBING EVERY WORD THEY HEAR IN YOUR HOUSE AND THEY’RE UPLOADING A TEXT LOG OF IT.

  • source
  • hideshow 5 child comments
  • [–] 32 points 3 weeks ago* (3 children)

    Depending on the TOS details, that may very well be a legit crime. Even in 1-party consent states this wouldn't slide because LG isn't a participant in the conversations it's recording, and not everyone talking near a TV has agreed to the TOS.

    And even with generous TOS, there's gonna be legal issues. HIPAA, for instance, could really fuck them if the TVs are in a medical facility and are recording and transmitting private medical data without consent of the patients.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 22 points 3 weeks ago (2 children)

    It is undeniably a crime. But in Glorious Free Republican America large corporations are exempt from the law.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 9 points 3 weeks ago

    I think the HIPAA stuff specifically could fuck them HARD. That can be more easily pursued civily. Criminal Courts don't mean much to companies because they have to pay a minor fine and it goes away, because criminal courts don't seek relief or compensation. Civil courts are where corporations can get gigafucked.

  • source
  • parent
  • load more comments (1 reply)
  • [–] 47 points 3 weeks ago (5 children)

    Honestly, I'm surprised this isn't common behaviour with all Smart TVs these days. It is trivial to probe a LAN network.

  • source
  • hideshow 5 child comments
  • [–] 54 points 3 weeks ago

    It is common behavior for a lot of consumer IoT devices. If it goes on your network and you don't control the software, you should consider it compromised. Even if the manufacturer isn't doing outright malicious stuff, it likely isn't secured very well (they never are) so there's every chance that someone else could find it and use it as a platform for malicious activity.

  • source
  • parent
  • [–] 8 points 3 weeks ago (2 children)
  • [–] 16 points 3 weeks ago

    I have a dedicated IOT ssid and vlan (when my Orbi goes, I don't know what I'll replace it with...).

    Each wifi node on that ssid is in client isolation mode and I carefully monitor where outbound traffic from that segment is headed.

    It's a lot of work, but it makes me feel slightly better about a thermostat, self-hosted security camera setup, and home assistant setup.

  • source
  • parent
  • load more comments (1 reply)
  • [–] 37 points 3 weeks ago (2 children)

    My dad's HP laptop started tripping a Honeypot on my network, now I gotta worry about LG as well...

  • source
  • hideshow 2 child comments
  • [–] 37 points 3 weeks ago (2 children)

    Someone at LG needs an ass whooping

  • source
  • hideshow 2 child comments
  • [–] 27 points 3 weeks ago (11 children)

    They used to have good TVs :( It’s a good thing I stay away from Smart TVs in general.

  • source
  • hideshow 11 child comments
  • load more comments (4 replies)
    [–] 19 points 3 weeks ago (1 child)

    I wonder if I could desolder the WiFi chip

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 15 points 3 weeks ago

    I wonder if the next generation will know if you’re watching the advertisements. They’ll probably call it something innocuous, like “auto pause.”

    It’s literally just an algorithm applied to the WiFi antenna.

    We’re fucked without comprehensive and effective privacy laws.
    But they won’t do that. Someone will (dishonestly) argue that TV’s and monitors that can count how many viewers are watching and force everyone in the room to verify their identity when the ACR detects a curse word or breasts is “for the children.”

  • source
  • [–] 12 points 3 weeks ago (1 child)
  • [–] 12 points 3 weeks ago (4 children)

    I'm interested in what they are doing with the information more than anything. It's not unusual for a media device to be using SSDP/UPNP and mDNS, looking for media devices to connect to. Ideally, off by default with a way to enable/disable and not used for advertising.

  • source
  • hideshow 4 child comments
  • [–] 21 points 3 weeks ago

    LG owns an advertising company. Just like Google tracks everything you do on the internet via their analytics and search products and then feeds you targeted ads, LG tracks everything you watch, all the electronics in your house, and any conversations you have nearby, then feeds you ads through their TVs.

    Just like google is an advertising company first and everything else second it's probably a good idea to think of LG as an advertising company that happens to have a consumer electronics company bolted on. Their TVs are nothing but trojan horses these days, designed to spy on everything they can and get ads in front of your face.

  • source
  • parent
  • [–] 17 points 3 weeks ago

    Mostly targeting advertising. The original source is the GamerNexus video. They show in great details the kind of information they capture and give potential usage for it. For instance they can detect thermostats, air conditioning units and air purifier that may be on the network, products that LG also sells. They give another example: if they see you have an iPhone 13, they may send you ads for the new iPhone 17.

  • source
  • parent
  • [–] 8 points 3 weeks ago

    If you can detect and identify the other devices on the LAN, you know exactly which other smart devices the customer has, and at scale that's very valuable market research. They could probably even start sending ads to customers for an LG replacement if a device drops off the network.

  • source
  • parent
  • load more comments (1 reply)
    [–] 11 points 3 weeks ago (1 child)

    How long until smart TV manufacturers partner with AT&T, Verizon, and T-Mobile to collect your data even when you don’t give them a connection?

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 11 points 3 weeks ago (13 children)

    On that note, does anybody know a good set top box with DolbyVision support that doesn’t require Amazon or Google services?
    Because the only one that comes to my mind would be an AppleTV and I don’t want to believe that’s the least terrible option…

  • source
  • hideshow 13 child comments
  • load more comments (2 replies)
    [–] 10 points 3 weeks ago (6 children)

    I ran Wireshark to capture traffic from my LG C5 and the only "scanning" it did was SSDP. Did they post any written article with further information on what it's doing? Most if not all of what was detailed in the video can be opted out of;

    https://www.pocket-lint.com/i-stopped-my-lg-tv-from-spying-on-me-by-adjusting-these-settings/

  • source
  • hideshow 6 child comments
  • [–] 15 points 3 weeks ago

    https://thecybersecguru.com/news/lg-smart-tv-spying-investigation/

    There are roughly 216 million LG smart TVs in homes, hospitals, offices, and hotels worldwide. Each one maps its local network, fingerprints its content, and logs audio, on or off, whether you’re talking to it or to someone else, whether you’re online or not, and feeds that into an ad engine that sells access to your living room.

    They do a lot more than just scan the network.

  • source
  • parent
  • [–] 9 points 3 weeks ago (3 children)

    Dang I've had a LG TV for years. I must be an idiot.

  • source
  • hideshow 3 child comments
  • [–] 7 points 3 weeks ago (1 child)

    I really need to finish setting up an isolated network. The problem is I at least want to be able to cast to it.

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    load more comments
    view more: next ›