Live data from Hacker News

LG to ban residential proxies from smart TV apps

krebsonsecurity.com

511–520 of 549 posts

Re: LG to ban residential proxies from smart TV apps

#511

Earlier quoted context omitted.

The other user provided great context but if anyone thinks I'm exaggerating in any way shape or form read the user agreement in LG's own site: https://www.lg.com/uk/lge-terms/ > i. CONSENT REQUIREMENT: You acknowledge and agree that it is your sole responsibility to obtain all necessary consents from any third parties whose voices may be captured by the Product and to notify household members and guests that their vo…

So actually, this TV is for an AIR B&B I rent out. I guess technically I need to add their stupid EULA to my rental agreement.

Yes, or you're illegally spying on your tenants.

If you inform them as per the EULA, then you're still illegally spying on your tenants, but at least you gave a confession.

Basically if you have an LG TV you could go to jail.

Re: LG to ban residential proxies from smart TV apps

#512

Earlier quoted context omitted.

Ok but these proxies almost certainly reverse-tunnel. How do you prove a customer is hosting one? Unless you are doing GFW China-level traffic analysis against a blacklist, which again how do you prove?

> Ok but these proxies almost certainly reverse-tunnel. How do you prove a customer is hosting one? Why do you think that? These are proxies, so they're making huge numbers of outbound connections to websites on behalf of the people operating them. They are the "exit nodes" in this setup. You could probably just count the number of unique destination IPs they connect to each day. If the average residential user conne…

So your plan is for the government to shut off the internet of anyone who connects to 50000 different IP addresses in a day?

Re: LG to ban residential proxies from smart TV apps

#513

Earlier quoted context omitted.

> Airgapped is harder than you might think Probably. The LG TV I have doesn't have cellular, but does have a removeable Wifi/Bluetooth module [1]. You have to disconnect a ribbon, unscrew the module and then pop it out. [1] https://www.manualslib.com/manual/3140596/Lg-Oled83g3-Series...

Sometimes those "modules" are just the antenna, and the Wifi is quite capable of connecting with no antenna at all.

All radios (including those that do wifi stuff inside of televisions) need an antenna in order to perform wireless communications.

An antenna may be obvious and external (like one on the fender of a 1979 Ford Pinto), or built with very deliberate PCB traces (as with a Raspberry Pi), or incidental (some component of the device behaves as an antenna, even if unintentionally), or a combination of these things, or something else entirely.

But whatever its form: An antenna must be present or wireless RF communication simply can't occur.

Re: LG to ban residential proxies from smart TV apps

#514
post #59

Earlier quoted context omitted.

This is why I’m a bit conflicted about DoH and ODoH. Firefox and Chrome have defaulted to DoH for years if I’m not mistaken (although I’m in Europe so I believe my FF still uses regular DNS instead of DoH by default). This also means that DoH effectively sends all your queries to CloudFlare on FF. Chrome is slightly smarter and tries to map your DNS provider to a DoH implementation if known.

That's why I'm not a fan of DoH or certificate pinning. Those are tools of control.

DoH in your resolv.conf wouldn't be a problem. When the browser ignores system settings it's a problem.

Guess what though? resolv.conf doesn't have syntax to specify DoH.

Re: LG to ban residential proxies from smart TV apps

#515
post #330

Earlier quoted context omitted.

They hardcode DNS servers into the TV. You need a firewall in front of the pihole intercepting that traffic, I use OpenWrt.

Given how cheap screens are, I'm puzzled as to why keeping a smart-ass TV is worth this effort?

Because all TVs are like this. There are no big non-smart screens on the market.

Re: LG to ban residential proxies from smart TV apps

#517
post #172

LG is on my blacklist. That means I won't buy LG products and in my job actively fight against buying products from them. And they put themselves onto that lost with their behavior.

It's a shame because from the experience of people around me their appliances are some of the best, I mean for washing machines, fridges, etc.

Everyone I know recommends Miele.

Re: LG to ban residential proxies from smart TV apps

#518

An angle that's often not explored is that companies like BrightData that install spyware on your smart gadgets are based in Tel Aviv, Israel. It's not unreasonable to assume that these Israeli cybersecurity firms are also sending data to the Israeli military. While everyone is complaining about AI scrapers and bots, they aren't even looking at the main culprits.

Residential proxies aren't spyware. I mean, they could be both, but they'd be two separate things.

Re: LG to ban residential proxies from smart TV apps

#519

Earlier quoted context omitted.

I mean, some of us have legitimate business needs to get past cloudflares frankly somewhat bs gatekeeping business model, however

Sure, I do as well, I have my own VPN into my home office that lets me run traffic outbound through its default gateway while I'm somewhere else. But letting random third parties I don't know run traffic through my house is another thing entirely.

If it meant you got to run your traffic through other people's houses, would that be a good trade?

Re: LG to ban residential proxies from smart TV apps

#520
post #168

Earlier quoted context omitted.

To be clear, bot spam and social media manipulation are legitimate business needs for the business selling said services.

You can't have legitimate business needs if you're not a legitimate business in the first place. Ban them all.

Who decides which businesses are legitimate?
Post reply on HN