Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

blog.includesecurity.com

Post reply on HN
Print view View original

41–50 of 114 posts

Re: The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

#41

Post by kotaKat »

vsgherzi wrote: post #39
kotaKat wrote: post #37

Earlier quoted context omitted.

Look at how far TikTok can go if you try blocking DNS. The hardcoded IPs, self-DNS-resolution and cat-and-mouse game of blocking is quite... interesting.

Is there anywhere I could read more about this ?

https://github.com/M4jx/TikTokBlocklist

I think they may have scaled back from this, but they were running a 100% malware-style playbook to hit the Tiktok servers like it was some kinda sketchy C2 package. Lots of attempts of their own DoH (and DoT!) and normal DNS servers to try to get into the Tiktok network.

Re: The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

#42

Post by dylan604 »

graypegg wrote: post #31
cobbzilla wrote: post #3

I never connect any “smart” device to wifi. If it doesn’t work without connectivity, I don’t want it. I use my TVs as display devices. They have HDMI-in and that’s it.

I have a smart TV that's never spoken to the internet after exiting the factory, but it's a pretty tenuous state of affairs. I have this fear that someone staying over is going to see the "Services unavailable, press [menu] to troubleshoot" toast that shows up overtop the HDMI feed for a few seconds and think they're helping me by connecting it. 4-5 years worth of firmware updates all at once... half a decade of watc…

> I have this fear that someone staying over is going to

This happened to me. After they left, I tried a factory reset, but I don't have confidence there's not some code to remember previously saved wifi connections because my tinfoil hat is firmly in place. However, as you've said I only use the TV as an HDMI receiver. None of the TV's apps are used again. So I'm not sure how much they can detect from just the use of the HDMI port as the only thing being used. The games we play to get the subsidized pricing.

Re: The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

#43

Post by bakugo »

blakesterz wrote: post #24

Are there any defenses I can put in front of my websites that are good for stopping these things? The amount of traffic I see from residential proxies is just killing me. In particular defense against residential proxies.

Add a captcha or proof-of-work challenge in front of your website. Those are pretty much your only options.

Re: The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

#44

Post by boilerupnc »

everybodyknows wrote: post #32

FTA: > MDM, mobile EDR Anyone care to ELI5 these?

MDM: Mobile Device Management. Software that helps ops folks control a fleet of mobile devices like tablets, phones, etc…

Mobile EDR: Endpoint detection and response. This is cybersecurity software to monitor and deal with network activity happening in mobile devices like tablets, phones, etc…

Re: The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

#45

Post by metalman »

Having never owned a telivision because of how much I didn't like advertising when tv was the primary delivery method, the feeling of having avoided a life sentence of bieng lashed to the tube is wierd, I know that people might catch me looking all to intently into there eyes trying to see if they are realy in there.

Re: The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

#46

Post by BLKNSLVR »

xg15 wrote: post #5

> After config fetch, the SDK opens a persistent WebSocket to: wss://proxyjs.brdtnet.com:443 This hostname resolves to AWS Global Accelerator IPs There is some irony that both the scrapers and the websites being scraped are probably hosted on AWS, while playing an elaborate cat-and-mouse game pretending that they weren't.

Adding to DNS block list immediately.

Re: The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

#47

Post by jon-wood »

cobbzilla wrote: post #3

I never connect any “smart” device to wifi. If it doesn’t work without connectivity, I don’t want it. I use my TVs as display devices. They have HDMI-in and that’s it.

Frustratingly I do want some of the functionality that comes with connecting my TV to the network - specifically the ability to control things like turning it on and choosing which input its set to via an API it exposes. That's manageable by putting it on a VLAN which isn't allowed access to the outside world, but its also really annoying to me that I have to do that.

Re: The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

#48

Post by rdtsc »

> The TLS certificate is CN=*.luminatinet.com — the domain for Luminati Networks, Bright Data’s pre-2018 corporate name

Ah yes. The big privacy scraping company called themselves The Luminati. It’s like they are side-investing in tin foil hats or something.

Re: The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

#49

Post by archerx »

graypegg wrote: post #31
cobbzilla wrote: post #3

I never connect any “smart” device to wifi. If it doesn’t work without connectivity, I don’t want it. I use my TVs as display devices. They have HDMI-in and that’s it.

I have a smart TV that's never spoken to the internet after exiting the factory, but it's a pretty tenuous state of affairs. I have this fear that someone staying over is going to see the "Services unavailable, press [menu] to troubleshoot" toast that shows up overtop the HDMI feed for a few seconds and think they're helping me by connecting it. 4-5 years worth of firmware updates all at once... half a decade of watc…

Find the TV’s MAC address and block it on your router. My brother home network had this system where your MAC address had to be whitelisted on the router to communicate with the network, as the days go by I see how in hindsight how this might be for the best in the end.

Re: The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

#50

Post by ErroneousBosh »

woffoor wrote: post #22
ErroneousBosh wrote: post #16

So wait a second then, it connects out using a websocket to its bot C&C server, right? Which presumably passes it a URL to scrape and waits for it to return the data. What happens if I write my own tool that connects to that C&C server, waits for a URL to scrape, and returns gigabytes of freshly brewed hot horseshit?

Most scrapped websites have https, so you need to perform a MITM attack. Scrapers will probably notice that.

How would https affect it?

If they're making a request to my machine to go and curl a page, how do they even know whether or not it was https?

Post reply on HN