Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LG to ban residential proxies from smart TV apps

krebsonsecurity.com

Post reply on HN
Print view View original

291–300 of 549 posts

Re: LG to ban residential proxies from smart TV apps

#291

Post by JKCalhoun »

cynicalsecurity wrote: post #213
mastazi wrote: post #198

I am afraid that my dumb TV, which I've been holding onto for many years, might be on its last leg. I remember seeing privacy guides for smart TVs over the years, does anyone know a place with up to date info? Most 55inch monitors are now "smart" sadly, so are most "digital signage" products. So there is no longer a way to get a true dumb panel at least over 50 inch EDIT I am in Australia, there might be products tha…

You can easily turn dumb mode on any smart TV.

I helped a friend's mom set up a new TV she bought and was unable to get the TV to "come online" without 1) giving it network access and 2) setting up an account. Only then would the TV give access to the inputs.

Re: LG to ban residential proxies from smart TV apps

#292

Post by ethbr1 »

account42 wrote: post #277
Cthulhu_ wrote: post #236

Earlier quoted context omitted.

It's all above board though, as you, the user, agreed to the terms & conditions for installing said app. This won't change unless governments create and enforce laws.

Terms and conditions are not the get out of consumer protections free card that you think it is.

They are, unless governments actually crack down.

A lack of enforcement actions has caused situations like this.

Why would LG do better when it's cheaper to not?

Re: LG to ban residential proxies from smart TV apps

#293

Post by account42 »

redeeman wrote: post #275
mDyJzDPmBdG wrote: post #257

Earlier quoted context omitted.

Let's be real, in most cases it is: curl -s script.random-guy.net | sh It is such glaring security hole that there was an old submission about filling such install script with `sleep` commands and detecting it on server side, to send different versions for downloading (and reviewing) and for actual direct execution.

the method you describe is clearly only done by people that are irresponsible and most probably stupid. and no, this is not how most software is installed

I agree

https://rustup.rs/

Re: LG to ban residential proxies from smart TV apps

#294

Post by benj111 »

ChocolateGod wrote: post #243
drnick1 wrote: post #117

Earlier quoted context omitted.

Another win for the Linux security model (software installed and updated manually from vetted repos only).

> software installed and updated manually from vetted repos only So something most desktop Linux users don't do.

Are you disputing that the repos are vetted or that users use them???

Re: LG to ban residential proxies from smart TV apps

#295

Post by ethbr1 »

quotemstr wrote: post #286
ozlikethewizard wrote: post #267

Earlier quoted context omitted.

The difference is the user. Your average smart TV user doesn't know what a residential proxy is, hell who's installing/playing the games but children? Consumer regulation to protect consumers from a knowledge disparity that leads to uninformed consent isn't a bad thing imo.

[flagged]

[dead]

Re: LG to ban residential proxies from smart TV apps

#296

Post by account42 »

manarth wrote: post #197
s1ncere wrote: post #30

Stop hooking up your LG tv to any network

Want to stream Netflix? Disney+? Hulu? You need to hook something up to a network, and another device would have similar risks. Setting up a sandboxed VPC or auditing traffic is beyond the means of the average TV owner.

> Want to stream Netflix? Disney+? Hulu?

No thanks, I prefer owning my media in a way that corporations can't just take it away whenever they feel like and where I can use (open source) players of my choosing.

Re: LG to ban residential proxies from smart TV apps

#297

Post by account42 »

tosti wrote: post #279
smcleod wrote: post #43

Earlier quoted context omitted.

Unfortunately they make arguably the best OLEDs and webOS is pretty decent to use (especially compared to the terrible OS that Samsung and Sony run). I think the best thing people can do is update their firmware then disconnect it from the internet. Using an AppleTV or similar provides a better experience than any TVs built in apps anyway.

3 out of 4 OLED screens in my household suffer from burned pixels. It's the early 90s all over again with OLED.

How old are these and how often / how long are they turned on? My OLED TV is over two years old now without any issues even though it gets frequent usage.

Re: LG to ban residential proxies from smart TV apps

#298

Post by rincebrain »

account42 wrote: post #284
delta_p_delta_x wrote: post #160

Earlier quoted context omitted.

> It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs This is also a misrepresentation. Microsoft has provided LG with a certificate to sign its driver packages with, and allows LG to upload packages to Windows Update, which includes a feature to install sidecar applications. Now, the spirit of this feature is that any application is meant to provide genuine configuration functionality…

> One can't expect that every driver package submission from every vendor is thoroughly vetted every time Why not? Microsoft isn't a struggling startup. They can afford to do just that.

Because at scale, that doesn't work, I think, even money no object, because it's a task that requires a lot of domain knowledge, but also is monotonous and offers little in the way of satisfaction or looking good on your resume, so the candidates you're trying to hire aren't very junior, and also are not going to like the work.

Re: LG to ban residential proxies from smart TV apps

#299

Post by benj111 »

silver_silver wrote: post #166
delta_p_delta_x wrote: post #158

Earlier quoted context omitted.

> Another win for the Linux security model I swear, OSs have become sports teams. Linux's 'security model’ has plenty of holes. The very fact the kernel and much of its user-mode is written in C almost guarantees that its security model is worthless. The Linux ecosystem operates on trust and respect that can and has been easily abused by bad actors to provide supply-chain pwnage. There have been so many zero-click lo…

AUR is an effectively unmoderated user repo. It’s not Arch Linux’s core repository, nor is it enabled by default or indeed even possible to use without manual downloads from outside the package manager.

There's still a security there though.

You have confidence you are actually downloading the same foo as everyone else. And if there were an issue there would be pushback. Not so if you get some random exe from warez.com

Yes it isn't perfect, it's still a lot better than windows land.

Re: LG to ban residential proxies from smart TV apps

#300

Post by throw0101a »

mapt wrote: post #123
jmward01 wrote: post #122

Earlier quoted context omitted.

That is my problem. What can you trust anymore? Is there an appliance out there that can do the basics and not be a malware gateway?

Smart TVs replaced dumb TVs not out of consumer demand, but out of subsidy from commercial databrokers and streaming services. Despite adding $100 of hardware they were priced $100 cheaper.

> Smart TVs replaced dumb TVs not out of consumer demand […]

The consumer demand was/is for cheaper, and data mining is how OEMs got there. The general public got what they want, and OEMs got to keep their margins: "win-win".

It's the same thing with (US?) airlines: people wanted cheaper, and that's what was offered and they chose.

Post reply on HN