Live data from Hacker News

Read this before you buy that TV streaming stick

krebsonsecurity.com

91–100 of 575 posts

Re: Read this before you buy that TV streaming stick

#91
post #19

So where can I get an actual privacy focused streaming box, even if the apps (Neflix etc) running on it are not?

I'm increasingly being convinced the only way to do that is you do a media pc nuc. The problem, of course, is you probably won't have the netflix app. It's painful to setup such a box to stream from various services.

I tried to look at setting up an stripped down privacy-focused Android based box for Netflix, but ran into issues. Seems like you need to be spied on to run Netflix.

Re: Read this before you buy that TV streaming stick

#92

> generic TV boxes that promise unlimited content streaming for a one-time fee I don't want to blame the purchasers of these things - who are some of the victims - but at the same time, it does seem like a Too Good To Be True situation.

OTOH - TV, radio, and YouTube are all unlimited and free. Why not streaming? There are lots of people alive who grew up during the days of broadcast TV and radio. I get why they might not understand the difference.

There are a ton of legitimately free IPTV streams. You can watch them through most media players like VLC without having to download anything shady.

https://github.com/iptv-org/iptv

Re: Read this before you buy that TV streaming stick

#95
post #63

Earlier quoted context omitted.

It'll be a marginal effect, but fake clicks impacts the ad buyer, which then impacts their financials and pricing. The only winner here is the scammers running the fake affiliate sites on which these sticks are "clicking". Or, am I missing some facet of this enterprise?

Another winner is the person who gets to watch cheap digital TV, without putting together a usable antenna and limiting their reception to the broadcast channels that are nearby. I mean: They just pay the money, plug the thing in, push some buttons, and: TV happens. Right?

Theres the question of whether or not the fraudulent advertisement clicking is using enough traffic to inconvenience or impose fees upon the user but otherwise I agree with you and am tempted to buy one just to fuck with advertisers.

Backdoors and spying are also a problem in theory except at this point you can't even trust "legitimate" companies on that front so it's a moot point.

Re: Read this before you buy that TV streaming stick

#96

I recently got an Apple TV 4K and have been really enjoying the ad free experience. Worth every penny. Our smart tv had turned into a Christmas tree of ads.

There are plenty of ads on Apple TV; huge banners right at the top of the UI, and ads that launch before you get to see the content of a show with no way to automatically disable them (you have to manually click through or just wait it out). It is infuriating (to me).

Re: Read this before you buy that TV streaming stick

#97
post #63

Earlier quoted context omitted.

It'll be a marginal effect, but fake clicks impacts the ad buyer, which then impacts their financials and pricing. The only winner here is the scammers running the fake affiliate sites on which these sticks are "clicking". Or, am I missing some facet of this enterprise?

Another winner is the person who gets to watch cheap digital TV, without putting together a usable antenna and limiting their reception to the broadcast channels that are nearby. I mean: They just pay the money, plug the thing in, push some buttons, and: TV happens. Right?

[deleted]

Re: Read this before you buy that TV streaming stick

#98
post #83
post #17

Generally, it's advisable to create a dedicated wifi network for all potentially hostile devices. This dedicated wifi network can just be connecting your devices to your guest wifi while you figure it out, and limiting the rate of speed as needed. That can be cameras, tv's, thermostats, tv sticks and anything else that might not only call home, but actively scope what you have in your home network when it's none of i…

I don't think this would make a big difference for the threat model described in the OP? They'd still be able to use your IP Address and potentially do nefarious things through your role as an unwitting proxy.

Using one device as a proxy is a few steps away from trying to exploit and infiltrate the other devices on your machine as well. An unwitting proxy is already crossing the line to putting a fox in the henhouse.

Limiting what outbound access devices can/can't have is an important skill to learn.

Re: Read this before you buy that TV streaming stick

#99

> generic TV boxes that promise unlimited content streaming for a one-time fee I don't want to blame the purchasers of these things - who are some of the victims - but at the same time, it does seem like a Too Good To Be True situation.

I know a few people who buy these, and they kind of know what they're doing. They just try and not think about it too hard.

It reminds me of the saying: "It Is Difficult to Get a Man to Understand Something When His Salary Depends Upon His Not Understanding It".

If these people thought about it for a few minutes, they would understand, but they choose not to, as ignoring it is too advantageous.

I admit I was tempted, as the price of all streaming services goes up, and services become more and more fragmented. During the same period where I have not had a raise.

Re: Read this before you buy that TV streaming stick

#100
post #63

Earlier quoted context omitted.

It'll be a marginal effect, but fake clicks impacts the ad buyer, which then impacts their financials and pricing. The only winner here is the scammers running the fake affiliate sites on which these sticks are "clicking". Or, am I missing some facet of this enterprise?

Another winner is the person who gets to watch cheap digital TV, without putting together a usable antenna and limiting their reception to the broadcast channels that are nearby. I mean: They just pay the money, plug the thing in, push some buttons, and: TV happens. Right?

You really don't want fraudulent clicks ("invalid traffic", per industry lingo) coming from your home network, because any publishers (apps and websites, per normal-people lingo) who use tools designed to block invalid traffic might start flagging legitimate traffic from your network.
Post reply on HN