Live data from Hacker News

LG to ban residential proxies from smart TV apps

krebsonsecurity.com

301–310 of 549 posts

Re: LG to ban residential proxies from smart TV apps

#301
post #123

Earlier quoted context omitted.

Smart TVs replaced dumb TVs not out of consumer demand, but out of subsidy from commercial databrokers and streaming services. Despite adding $100 of hardware they were priced $100 cheaper.

Is there still any specific brand known for dumb tv's that features the quality and 'non smart' options of the smart variants?

Many OEMs have "commercial" / "corporate" displays that may be applicable:

* https://www.samsung.com/us/business/displays/

Re: LG to ban residential proxies from smart TV apps

#302

Earlier quoted context omitted.

Hope you don't have any open WiFi networks nearby. IMO it's better to put it on one of your networks and isolate it from the internet and other devices.

If it connects to another network, it's somebody else's problem. Unless of course, it has a built in webcam or microphone.

Its your problem if it updates itself to show ads (and of course exfiltrate whatever it can see / hear).

Re: LG to ban residential proxies from smart TV apps

#303

Earlier quoted context omitted.

The monitors aren't installing anything. That headline was a lie. It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs. That's why the problem affected older monitors too - it's the update side that suddenly started to ship malware.

> It's Windows Update that's installing LG crapware upon seeing relevant hardware IDs This is also a misrepresentation. Microsoft has provided LG with a certificate to sign its driver packages with, and allows LG to upload packages to Windows Update, which includes a feature to install sidecar applications. Now, the spirit of this feature is that any application is meant to provide genuine configuration functionality…

If they aren't willing to vet, they should at least be keeping the update minimal. Ie no 'sidecar' apps.

Self signing a driver should mean just that, not a driver, and a load of other things we feel like foisting on the user.

Half the reason I moved to Linux is because I just wanted to print something without getting a load of advertising from a printer company.

Re: LG to ban residential proxies from smart TV apps

#304

Is there a (technical) difference between a residential proxy and bot network node?

Residential proxies operated by "legitimate" providers can only open TCP connections, which more or less rules out DDoS attacks, which seem to be the most common use of botnets. (And all tcp connections typically have to go through the proxy providers datacenter first to get through NAT, which effectively limits the total amount of traffic/connections you can make)

TCP only does NOT rule out DDoS, it just limits it to a subset of potentially less effective methods. All DDoS means is that you get a bunch of machines hammering a system.

Re: LG to ban residential proxies from smart TV apps

#305
post #40

None of my TVs are connected to the Internet. That said, I could really do with a better open source fullscreen UI, especially since I mainly just want a web browser that works good. I'm just using KDE Plasma with a custom daemon to control the TV power state over an HDMI CEC adapter plus an old K830 keyboard. I'm, frankly, a bit annoyed by this whole thing; I'd rather have USB adapter RF wireless because it is simpl…

Mind sharing what HDMI CEC adapter you use?

As for remote control - why would you want one for the monitor. For the PC I'm using an Air Mouse which is just a remote gyro-based mouse with keyboard buttons with a driverless USB dongle that acts like any other USB HID. I also have a miniature no-name wireless keyboard with a touchpad but rarely need to use it.

Re: LG to ban residential proxies from smart TV apps

#306
post #227

Earlier quoted context omitted.

I thought webOS was pretty decent initially. But LG never provided even a single major update to my TV in a decade, so that just about cancels any possible benefits from the faster code. I'm using Chromecast for several years now, bypassing and ignoring webOS completely. But the initial idea was nice, all those years ago.

Really? I've had many updates over the 7 years since my c9 was released, still getting them as recent as earlier this year I think.

Just to clarify - my LG TV is old (10 or maybe 11?), pre-OLED, and webOS on it was version 3.0. Maybe situation has improved with newer models, I don't know. The problem with TVs, is that they really work for a long time just fine and I see no reason to change it ahead of other more needed upgrades. It doesn't fall to the ground like phones, there is no degrading battery or degrading rubber/textile parts, TVs are really robust. So it would have been nice if the software for such long living hardware was also supported accordingly and that buyers would be informed about that in advance and that was my expectation for webOS/LG originally - since it is in C++, uses modern and maintained QT framework, snappy and LG is a bigcorpo, I expected it to keep up. But nope :( .

Re: LG to ban residential proxies from smart TV apps

#307
post #172

LG is on my blacklist. That means I won't buy LG products and in my job actively fight against buying products from them. And they put themselves onto that lost with their behavior.

It's a shame because from the experience of people around me their appliances are some of the best, I mean for washing machines, fridges, etc.

Re: LG to ban residential proxies from smart TV apps

#308

Sharing a slice of your internet in a privacy preserving way in exchange for something of value, seems fair, no?

We have this invention called money so that individuals don't need to wrangle complex swap trades and instead sell the things (usually their time) that they are OK with selling with informed consent and buy the things they want without having to give up things they don't want to or don't understand. If selling your internet connection was a reasonable thing to do there would be dedicated apps/boxes for that instead of this being packaged into random apps.

Re: LG to ban residential proxies from smart TV apps

#309
post #263

Earlier quoted context omitted.

20 years ago people would've called it a trojan horse. But then, by standards of two decades ago, every website that cannot legally avoid showing a GDPR popup would be classified as malware. As it should be today. Alas, standards have changed.

There were no cookie popups 20 years ago.

I beg to differ, there absolutely was cookie popups. We also had popup windows, popup ads, java applets that melted your cpu, and browsers with no grid. Oh, and we had Shockwave and Flash…

Re: LG to ban residential proxies from smart TV apps

#310

Sharing a slice of your internet in a privacy preserving way in exchange for something of value, seems fair, no?

Only if the app provides 1. prominently-displayed, informed consent, 2. an option to opt-out without losing app functionality, or 3. joining the botnet provides some kind of actual benefit to the user, besides just money to the developer.

There is really not good excuse to bundle this functionality with an unrelated app in the first place.
Post reply on HN