Live data from Hacker News

LG to ban residential proxies from smart TV apps

krebsonsecurity.com

251–260 of 549 posts

Re: LG to ban residential proxies from smart TV apps

#251
post #43
post #35

Earlier quoted context omitted.

Stop buying LG TVs.

Unfortunately they make arguably the best OLEDs and webOS is pretty decent to use (especially compared to the terrible OS that Samsung and Sony run). I think the best thing people can do is update their firmware then disconnect it from the internet. Using an AppleTV or similar provides a better experience than any TVs built in apps anyway.

I have mine attached to the internet, but it does take a good 30 minutes plus Googling to find out all the places that you have to turn stuff off.

Re: LG to ban residential proxies from smart TV apps

#252
post #102

Earlier quoted context omitted.

Have to agree, WebOS is much better than Android TV OS, with ads on the dashboard.

As long as you keep it off the internet. Otherwise it’s absolute loaded with adverts everywhere.

I have a 2026 LG, attached to the internet - absolutely no ads. You need to tweak the settings

Re: LG to ban residential proxies from smart TV apps

#253
post #227
post #43

Earlier quoted context omitted.

Unfortunately they make arguably the best OLEDs and webOS is pretty decent to use (especially compared to the terrible OS that Samsung and Sony run). I think the best thing people can do is update their firmware then disconnect it from the internet. Using an AppleTV or similar provides a better experience than any TVs built in apps anyway.

I thought webOS was pretty decent initially. But LG never provided even a single major update to my TV in a decade, so that just about cancels any possible benefits from the faster code. I'm using Chromecast for several years now, bypassing and ignoring webOS completely. But the initial idea was nice, all those years ago.

Really? I've had many updates over the 7 years since my c9 was released, still getting them as recent as earlier this year I think.

Re: LG to ban residential proxies from smart TV apps

#254
post #130

Earlier quoted context omitted.

Another win for the Linux security model (software installed and updated manually from vetted repos only).

Surely you mean Linux security model (not relevant enough to be targeted by big tech)?

Famously, the Linux kernel does not have a stable ABI for drivers. As a result, by far the majority of drivers are in-tree, maintained by the kernel folks as part of the kernel.

The Linux approach has the downside of not having the drivers if a vendor has not been working with the kernel community before launch (or for those who haven't upgraded to a kernel that has the driver, e.g. a LTS release).

On the other hand, the driver is maintained by kernel developers, not created by the hardware developer who is not getting paid after they sell the device. This helps avoid abandoned / vulnerable drivers, or having the hardware dev search for... alternative revenue streams, as in this case.

Re: LG to ban residential proxies from smart TV apps

#255

42% of the apps on LG's platform have these quasi-malware SDKs in them? Seems kinda bad, whether it's due to negligence or just pure incompetence? You'd think there might be legal consequences for a corporation that lets their app store turn into a malware delivery system?

> You'd think there might be legal consequences I own an airgapped LG TV. Does anyone actually want to go class action/mass arb?

Airgapped is harder than you might think. If your TV finds an open network (neigbours?) it will use that one. And it is only a matter of time before they have cellular capabilities too.

Re: LG to ban residential proxies from smart TV apps

#256
post #130

Earlier quoted context omitted.

Surely you mean Linux security model (not relevant enough to be targeted by big tech)?

It's not a weakness that they targeted and exploited, it's a feature that was purposefully implemented by Microsoft.

If you're trying to say that Microsoft implemented a method of delivering specifically malware executables to every PC, I've got a bridge to sell to you.

Let's not diminish LG's part in all this.

Re: LG to ban residential proxies from smart TV apps

#257

Earlier quoted context omitted.

Another win for the Linux security model (software installed and updated manually from vetted repos only).

sudo dkpg -i FileYouDownloadedFromAnywhere.deb

Let's be real, in most cases it is:

    curl -s script.random-guy.net | sh
It is such glaring security hole that there was an old submission about filling such install script with `sleep` commands and detecting it on server side, to send different versions for downloading (and reviewing) and for actual direct execution.

Re: LG to ban residential proxies from smart TV apps

#258
post #153

Earlier quoted context omitted.

Eh? No. It's just a device attached to a computer. But in a Plug-and-Play world, its addition is noticed by the operating system -- as has been normal for decades. Microsoft's Windows operating system sees this new hardware ID and then goes forth to install whatever-the-fuck software it associates with that identification, presumably as a service to the user. (Did Microsoft approve it? Dunno. I'm just over hear eatin…

> Eh? No. That's what I thought. It is vetted software, just like on Linux. Microsoft just doesn't care if it shows ads.

That's an excellent and terrific point. In this way, the dichotomy between Windows and Linux can be as if they're just two sides of the same "vetted" coin.

Re: LG to ban residential proxies from smart TV apps

#259
post #53

Earlier quoted context omitted.

I haven’t looked recently but last I checked Samsung made the best panels. Has that changed recently?

Samsung is good, except: - No Dolby Vision support, only HDR10+ - Issues with judder/micro stutter - History of nerfing TVs via OTA updates - HDMI ports randomly failing - Bad HDMI-CEC implementation - Selling completely different panel generations under the exact same model names.

Also: Samsung thinks "your" TV is perfect place for them to display their ads.

Re: LG to ban residential proxies from smart TV apps

#260
post #30

Stop hooking up your LG tv to any network

I'm mostly very happy with my LG C4 as a home theatre centerpiece, and I did have it online so that I could use the apps for YouTube and Jellyfin. However, the lack of support for modern 4k rips (HEVC+DTS) ended up being a dealbreaker and I finally ditched the built in software for a fire stick instead. No transcoding, no weird codec issues, just the raw files direct streamed from the underpowered Unraid box, into th…

There is always android VLC app to decode anything, you just need enough power in chipset to handle that. Not perfect, had some quirks unseen on desktop VLC but generally fine.

But yeah external stick is much safer solution, then even tvs like TLC are a great brand.

Post reply on HN