Live data from Hacker News

216M Spy TVs – The LG Smart TV Problem [video]

youtube.com

631–640 of 1001 posts

Re: 216M Spy TVs – The LG Smart TV Problem [video]

#632

Earlier quoted context omitted.

I have a similar reaction from folks when I don't trust services/devices. Most telling moment was when I refused to upload my license to LinkedIn because I lost 2FA (token on phone, phone destroyed). Microsoft assured me they would "delete the license as soon as it was verified". I've written too many software systems for too many companies, and I do not believe them . Of course, they'd outsourced to AU10TIX, which d…

When are the victims going to start getting significantly compensated for these breaches? They will keep happening as long as the consequences are just the cost of doing business.

It will be when enough people elect enough politicians who take action against this weaponized incompetence and strip-mining of the peoples' assets.

Or, if that does not happen, when enough people rise up in revolution and take the compensation for themselves.

Or, never.

If enough people vote enough or revolt enough, they cannot be stopped. But the incentives for too few people rising up are too costly. They work hard to keep the equilibrium in that balance.

Re: 216M Spy TVs – The LG Smart TV Problem [video]

#634

Earlier quoted context omitted.

But it's never connected to the internet, not even for software updates. If the TV isn't connected to the internet there's no reason to update it, assuming the TV works as expected. It's a trade off I guess. I use Home Assistant to control TVs, so kinda need the access.

Have you noticed that on many home routers there is now a default open, sometimes password protective network named AT&T or Cox Wi-Fi? That’s the backhaul. The TV will join that automatically without asking you because they have an agreement with the network provider. This is how tons of devices phone home now. You don’t ever need to add a device on your network for it to have internet. If there’s a partner Wi-Fi net…

They tried that in Denmark a decade ago (or more). Enabled a "public wifi" on all home routers to provide wifi coverage for that company's customers everywhere.

They gave every assurance that it would be secure, completely separate from the users own network, and the bandwidth consumed would be added on top of whatever the user had a contract for.

It took a couple of days after launch before somebody managed to gain access to someone's private network from the public network and they shut it down again and never opened it again.

Anyway, I may be spoiled from living in Denmark, but I'm using my own router, which is an option when ordering, so I'm fairly certain nobody is sharing additional wifi hotspots.

And it's not just me. The majority of people I know use some kind of 3rd party router with their ISP. Granted, some of them just use whatever the ISP sends them, but even then I haven't ever seen any additional wifi networks, and the ISP prints the router admin password on the box itself, so you can poke around if you like (though the ISP has a backdoor, which is also why 3rd party routers are a thing).

Re: 216M Spy TVs – The LG Smart TV Problem [video]

#635

I'm surprised this hasn't run afoul of all-party wiretap laws. Even if you could waive your own rights via ToS other people in the house may not have agreed. Theoretically I could see LG or even the TV's owner being culpable. I'd love to see that case hit the media. Average citizen jailed over wiretap violations because they let their TV record a guest.

The TV's license agreement attempts to shift the burden onto the TV's owner. Taken at face value, it's the owner who is guilty of recording people without their consent.

Re: 216M Spy TVs – The LG Smart TV Problem [video]

#636

My TVs are on the IoT network so that I can control them from Home Assistant, but they're blocked from accessing the internet. DNS lookups are redirected or blocked (53 redirected to my local DNS resolver, 853 blocked), and DoH is blocked as best effort though it's hard to block HTTP DNS traffic, which again is why the devices are blocked in the firewall. All streaming is done via AppleTV, which is a platform I trust…

Blocking DNS doesn't do much if the device isn't resolving hostnames and just pushes data to a bunch of preconfigured IPs tho...

Re: 216M Spy TVs – The LG Smart TV Problem [video]

#637

Here are LG's contract terms for appliances.[1] They are awful. Not only can they listen in. You have a contractual requirement to tell everyone in range of an appliance that they may be eavesdropped upon. CONSENT REQUIREMENT: You acknowledge and agree that it is your sole responsibility to obtain all necessary consents from any third parties whose voices may be captured by the Product and to notify household members…

It just reads as legal boilerplate. How else can voice recognition listen for a wake word without being able to process everything it hears.

Re: 216M Spy TVs – The LG Smart TV Problem [video]

#638
post #535

I've bought an LG Smart TV 5 years ago, read t&c where I was supposed to grant them any data they wanted, decided to disagree and kept all network functions disabled. I was ridiculed by my friends for that. At some point, I thought - maybe I'm really crazy to do so? Who am I, a caveman, a luddite? Oh well, I'm not. Not a bad tv though, many HDMI ports!

Just thinking, if this is an issue, how you can dare to buy a modern car with embedded SIM card and GPS? :)

I yanked the OCU (telematics) out of my VW Mk7, and coded out the expectation of its existence from about four other devices with Ross-Tech's VCDS! I also coded out the Bluetooth on my infotainment unit, for good measure. :^)

Re: 216M Spy TVs – The LG Smart TV Problem [video]

#639
post #557

Earlier quoted context omitted.

> my conclusion after dealing with them for many years is they will lie, cheat, and steal to get whatever they want Honestly, it's not even that extreme in most cases. I think it's usually not malice, it's incompetence. That's why I don't trust big companies with my data. Nothing to do with some CEO's evil plans, but more to do with the hundreds/thousands of mid-level "not my job" or "doing my best" workers who are a…

Pardon my French but bull-fucking-shit! A CEO _should_ take responsibility for what their subordinates do. It's preposterous to simple throw up our arms and say "oh well, some employees were sloppy so we lost some 100 million user IDs and other sensitive information that we promised not to store but we lied. Oopsie, silly me, pardon my wee incompetence tee-hee". No no no NO NO! At some level, and certainly at the lev…

Uhh. I think you misread my comment pretty badly here. I am not making excuses for anyone.

I am saying that it's less likely to be some evil machination that led to the misuse of my data and more likely to be negligence or incompetence.

Both are inexcusable, but one is more common/likely than the other.

You can certainly link them together and yes leaders should be held responsible no matter what, but from my perspective as the user who had his data leaked, it doesn't really matter how/why it happened, does it?

Re: 216M Spy TVs – The LG Smart TV Problem [video]

#640
post #87

Earlier quoted context omitted.

And then your neighbor spins up an unprotected network or something like xfinity which they could have a deal with and it connects there and phones home anyways.

I hear this a lot “TVs will just connect to a nearby unprotected WiFi network!” But I ve never seen any evidence of it. It appears to just be speculation, unless you have an actual source?

Because they don't. It's too much guesswork, and honestly pretty complicated. From the user perspective the TV would appear to go offline every now and then, so also somewhat easily detected.

It's much easier to just throw a $10 5G modem in there, pay the $2/year subscription fee for service, and extract data that way. Assuming a 5-10 year relevant lifespan of the TV, they'd throw $20-$30 on top of the sales price for the modem and 10 years of service.

The 5G modem could run completely independent of the wifi network, be a completely different circuit, and you'd never know it was there.

Post reply on HN