Live data from Hacker News

GamersNexus and LG: Or why rooting your TV is a bad idea

leaflet.pub

1–10 of 134 posts

Re: GamersNexus and LG: Or why rooting your TV is a bad idea

#2
> If he can demonstrate someone remotely jailbreaking your TV, or flipping on those settings without you knowing or doing anything to your TV, that would be a far more damning issue, in my view.

Do you actually want a channel with 2.66 million subscribers to show how to get remote access to TVs used by millions of people? :-P

Re: GamersNexus and LG: Or why rooting your TV is a bad idea

#3
> What am I meant to take away from this? If you look at other IoT devices, they’re going to show the same thing. But here it’s presented as bad. Why?

The influencer economy is a bit soaked these days. You need to crank up the stakes to keep the viewer's attention.

Re: GamersNexus and LG: Or why rooting your TV is a bad idea

#4
> If you root or jailbreak your devices, you've, by their very nature, broken their security.

> If he can demonstrate someone remotely jailbreaking your TV, or flipping on those settings without you knowing or doing anything to your TV, that would be a far more damning issue, in my view.

There are ways to remotely jailbreak LG webOS TVs without user interaction, using the same (or similar) vulnerabilities you use to root your own TV voluntarily.

The main reason tools like https://rootmy.tv are prefixed with disclaimers and require user interaction is because we're being courteous, not because they're technically necessary. (source: I own the rootmy.tv domain)

Re: GamersNexus and LG: Or why rooting your TV is a bad idea

#5

> If he can demonstrate someone remotely jailbreaking your TV, or flipping on those settings without you knowing or doing anything to your TV, that would be a far more damning issue, in my view. Do you actually want a channel with 2.66 million subscribers to show how to get remote access to TVs used by millions of people? :-P

I'm pretty sure they DID mention that they can remotely flip settings. So that's a thing for sure.

Re: GamersNexus and LG: Or why rooting your TV is a bad idea

#6
post #4

> If you root or jailbreak your devices, you've, by their very nature, broken their security. > If he can demonstrate someone remotely jailbreaking your TV, or flipping on those settings without you knowing or doing anything to your TV, that would be a far more damning issue, in my view. There are ways to remotely jailbreak LG webOS TVs without user interaction, using the same (or similar) vulnerabilities you use to…

Most of what I’m reading on rootmy.tv says the vulnerability it exploits has been fixed. So, if one were to keep software up to date on their TV, there is an improbably small chance it can actually be remotely jailbroken — am I reading this right?

Re: GamersNexus and LG: Or why rooting your TV is a bad idea

#7
post #6
post #4

> If you root or jailbreak your devices, you've, by their very nature, broken their security. > If he can demonstrate someone remotely jailbreaking your TV, or flipping on those settings without you knowing or doing anything to your TV, that would be a far more damning issue, in my view. There are ways to remotely jailbreak LG webOS TVs without user interaction, using the same (or similar) vulnerabilities you use to…

Most of what I’m reading on rootmy.tv says the vulnerability it exploits has been fixed. So, if one were to keep software up to date on their TV, there is an improbably small chance it can actually be remotely jailbroken — am I reading this right?

The specific vulnerabilities exploited by rootmy.tv have been patched, yes, but there are plenty more unpatched vulnerabilities remaining. There are also more up-to-date rooting tools beyond rootmy.tv.

The security posture of webOS is absolutely terrible, at least, it is in the way LG deploys it.

Re: GamersNexus and LG: Or why rooting your TV is a bad idea

#8
post #6
post #4

> If you root or jailbreak your devices, you've, by their very nature, broken their security. > If he can demonstrate someone remotely jailbreaking your TV, or flipping on those settings without you knowing or doing anything to your TV, that would be a far more damning issue, in my view. There are ways to remotely jailbreak LG webOS TVs without user interaction, using the same (or similar) vulnerabilities you use to…

Most of what I’m reading on rootmy.tv says the vulnerability it exploits has been fixed. So, if one were to keep software up to date on their TV, there is an improbably small chance it can actually be remotely jailbroken — am I reading this right?

I read the documentation and it appears that the only reason it doesn't still work is because development was "postponed for a few months" back in 2021. Presumably there is still the possibility of exploits on the latest versions, it's just nobody's bothered yet.

Re: GamersNexus and LG: Or why rooting your TV is a bad idea

#9

> If he can demonstrate someone remotely jailbreaking your TV, or flipping on those settings without you knowing or doing anything to your TV, that would be a far more damning issue, in my view. Do you actually want a channel with 2.66 million subscribers to show how to get remote access to TVs used by millions of people? :-P

That would be against Youtubes terms, the video would get pulled.

Re: GamersNexus and LG: Or why rooting your TV is a bad idea

#10

> If he can demonstrate someone remotely jailbreaking your TV, or flipping on those settings without you knowing or doing anything to your TV, that would be a far more damning issue, in my view. Do you actually want a channel with 2.66 million subscribers to show how to get remote access to TVs used by millions of people? :-P

demonstrate != explain?
Post reply on HN