Live data from Hacker News

Tracking systems of TV streaming devices

blog.acolyer.org

11–20 of 60 posts

Re: Tracking systems of TV streaming devices

#11
post #3

I knew this was the case but the reminder is just more motivation to revert back to purchasing optical media, ripping it, and using mpv on a computer. I don't want my entertainment to be tied up with advertising. I don't want my whole life to be subject to metrics.

Advertisement works because most people do not feel this way and are ok with metrics and adds as long as they get something back. Is that ok, or is there a rational argument why everyone should feel bad about being subject to metrics?

Advertising works because people have little choice in the matter. It's exploiting that people value "consumption with ads" more than "no consumption at all", and most are not skilled enough to remove the ads themselves.

(It's not like they wouldn't do it if they knew how; remember the popularity of VCRs? Their main use case was that on a recorded show, you could fast-forward through ads.)

People are not OK with metrics; most population has no understanding about the extent to which they're being surveilled or measured. There's also a growing feeling of helplessness, because the more the snooping is becoming known, the more apparent it seems that it's the same as with advertising - unless you're a tech-savvy person, you have no choice at all.

EDIT:

A big part of the problems are the constant lies of omission. I believe much fewer people would be willing to connect their TVs to the Internet if on the box, next to "you can watch Netflix from your couch", there would be text saying "we'll spy on you as much as we can, and this data might wind up at your insurance provider". Or an asterisk next to "Netflix" explaining that "the service will work until we get bored or they change their API, i.e. for about two to three years".

Re: Tracking systems of TV streaming devices

#12
post #10

Earlier quoted context omitted.

You can improve that stat. If you have a router that allows it, make a rule that allows port 53 out if it’s from the Pihole, and redirects it back to the Pihole if it isn’t. You’ll catch more of the sneaky crap that way.

dot/doh is here, pihole is becoming irelevant

Pihole may be irelevant soon, but not yet. I sit with about 10% blocked.

Re: Tracking systems of TV streaming devices

#13
post #4

money quotes > Running with a Pi-hole helps, but still misses about 27% of A ID leaks, and 45% of serial number leaks. and > Our measurements showed that tracking is prevalent on the OTT platforms we studied, with traffic to known trackers present on 69% of Roku channels and 89% of Amazon Fire TV channels… Our analysis of the available privacy countermeasures showed that they are ineffective at preventing tracking. t…

You can improve that stat. If you have a router that allows it, make a rule that allows port 53 out if it’s from the Pihole, and redirects it back to the Pihole if it isn’t. You’ll catch more of the sneaky crap that way.

I do this, any traffic to port 53 gets re-directed using IP masquerading to my local DNS server which uses the blocklists from https://github.com/StevenBlack/hosts.

By coincidence since I did that I need to do a hard reboot of my Mi Box android tv device everyday as when you turn it on from standby and open Youtube / Netflix it goes in to a frozen state.

Re: Tracking systems of TV streaming devices

#14
post #3

I knew this was the case but the reminder is just more motivation to revert back to purchasing optical media, ripping it, and using mpv on a computer. I don't want my entertainment to be tied up with advertising. I don't want my whole life to be subject to metrics.

Advertisement works because most people do not feel this way and are ok with metrics and adds as long as they get something back. Is that ok, or is there a rational argument why everyone should feel bad about being subject to metrics?

Everyone should feel ad about being subject to metrics, because anyone can be manipulated given the right knowledge about them.

Re: Tracking systems of TV streaming devices

#15
post #10

Earlier quoted context omitted.

You can improve that stat. If you have a router that allows it, make a rule that allows port 53 out if it’s from the Pihole, and redirects it back to the Pihole if it isn’t. You’ll catch more of the sneaky crap that way.

dot/doh is here, pihole is becoming irelevant

Quite, effectively your device VPNs to the internet on port 443 to a non descript IP. You can either block it completely or allow everything through.

The only hope is that device manufacturers are terrible, don’t implement certificate checks, and you can MITM everything by redirecting port 443 through a proxy.

Re: Tracking systems of TV streaming devices

#16
post #15
post #10

Earlier quoted context omitted.

dot/doh is here, pihole is becoming irelevant

Quite, effectively your device VPNs to the internet on port 443 to a non descript IP. You can either block it completely or allow everything through. The only hope is that device manufacturers are terrible, don’t implement certificate checks, and you can MITM everything by redirecting port 443 through a proxy.

The only choice is to block it.

Re: Tracking systems of TV streaming devices

#17
post #3

Earlier quoted context omitted.

Advertisement works because most people do not feel this way and are ok with metrics and adds as long as they get something back. Is that ok, or is there a rational argument why everyone should feel bad about being subject to metrics?

Ignorance and acceptance aren't the same thing. Many people would be and regularly become disturbed by the amount of tracking, but it is complex and difficult to understand on purpose. GPDR tried to make it obvious but missed the mark, making everybody accept cookies is just a blind annoyance. The rational argument against tracking is the enormous power it enables. Humans aren't aware enough of how easily they can be…

> GPDR tried to make it obvious but missed the mark, making everybody accept cookies is just a blind annoyance.

It's almost two years now, and while I don't think cookie warnings are GDPR's fault (it was earlier regulation, that was trying to give adtech industry a chance to self-regulate), I do have this feeling that it indeed missed the mark.

I currently feel the problem is enforcement. There's loads of sites that managed to implement a GDPR consent form in a way that defeats the spirit of the law, and often enough the letter as well. I was hoping that a hammer would be swiftly brought down on those cases, but that doesn't seem to be happening.

Re: Tracking systems of TV streaming devices

#18
post #16
post #15

Earlier quoted context omitted.

Quite, effectively your device VPNs to the internet on port 443 to a non descript IP. You can either block it completely or allow everything through. The only hope is that device manufacturers are terrible, don’t implement certificate checks, and you can MITM everything by redirecting port 443 through a proxy.

The only choice is to block it.

Which prevents you from using Netflix or YouTube etc.

Don’t connect your tv, but you need a device of some sort to use modern tv

Re: Tracking systems of TV streaming devices

#20
post #6

After reading this, I think if everyone setup a Tor node just for TV, that’s be great (harder to identify who is watching what).

Did you actually read it? It literally says identifiers were sent irrespective of tracking settings. Tor only masks IP and that was never the intent of the Tor network and using it that way is a is a complete waste of resources that doesn’t solve anything.

> Tor only masks IP and that was never the intent of the Tor network and using it that way is a is a complete waste of resources that doesn’t solve anything

More garbage traffic on Tor isn't necessarily a bad thing. It keeps others safe who actually do need it.

Post reply on HN