cross-posted from: https://lemmy.world/post/51634640
A new Gamers Nexus investigation found a retail LG TV actively scanning the local network for phones, laptops, smartwatches and other connected devices, while also capturing microphone audio when the screen appeared to be in standby. The investigation found voice data being stored locally even after the TV was disconnected from the network, with the queued data uploaded once connectivity returned. Researchers also uncovered webOS vulnerabilities that could potentially turn the television into a remotely controlled surveillance device. The really unsettling part isn’t just the advertising angle. It’s the fact that a consumer television can sit inside your trusted network, enumerate other devices, access a microphone, store collected data locally and communicate with external infrastructure. Put that same device in a corporate office, hospital, hotel or conference room and the security implications become considerably more serious. I went through the investigation in detail, including the network scanning, microphone behavior, ACR, webOS attack surface, offline data collection and practical mitigations
That’s a wild claim and either I accidentally skipped a paragraph in the article or you should cite a source. Quick googling doesn’t show up anything of that sort for me.
It’s in the 2h long Gamersnexus video. The TVs aren’t connecting to open WiFi networks but connecting to other LG TVs within range. That forms some sort of mesh network that lets the TV access the internet. Apparently it’s not illegal wardriving because “they own the glass”.
Look for articles about amazons sidewalk network and devices that connect to it without any kind of authorization from users.
That shit has been around since the echo came out and it’s open to any manufacturer.
There’s are lots of articles but my phone is too slow to load them at the moment.
I looked for but didn’t find any about LG TVs, the actual topic here and what the wild claim was made about.
I’m not sure if LG connects to it, but it’s an open standard and like LoRa, has a decent range, so there doesn’t seem to be anything stopping them from adding it to their TVs.
Plus from the article:
It doesn’t mention connecting automatically to unsecured networks, but it sounds like one OTA update away from that capability (The sidewalk network works this way, which is why I mentioned it). LG is already lying about the transcriptions taking place, so there’s no reason to trust them, which I think the point of this thread was.
I’m looking for a source as well. The “apparently” I used was supposed to cover the whole comment, but I can see how it didn’t.
The video goes into detail, and could be staged, but comments seem to support the idea anyway.
Amazon devices are known to do this with other Amazon products to create a mesh.
It’s not outside the realm of possibility.