By Jeremy Hsu on September 24, 2024
Popular smart TV models made by Samsung and LG can take multiple snapshots of what you are watching every second – even when they are being used as external displays for your laptop or video game console.
Smart TV manufacturers use these frequent screenshots, as well as audio recordings, in their automatic content recognition systems, which track viewing habits in order to target people with specific advertising. But researchers showed this tracking by some of the world’s most popular smart TV brands – Samsung TVs can take screenshots every 500 milliseconds and LG TVs every 10 milliseconds – can occur when people least expect it.
“When a user connects their laptop via HDMI just to browse stuff on their laptop on a bigger screen by using the TV as a ‘dumb’ display, they are unsuspecting of their activity being screenshotted,” says Yash Vekaria at the University of California, Davis. Samsung and LG did not respond to a request for comment.
Vekaria and his colleagues connected smart TVs from Samsung and LG to their own computer server. Their server, which was equipped with software for analysing network traffic, acted as a middleman to see what visual snapshots or audio data the TVs were uploading.
They found the smart TVs did not appear to upload any screenshots or audio data when streaming from Netflix or other third-party apps, mirroring YouTube content streamed on a separate phone or laptop or when sitting idle. But the smart TVs did upload snapshots when showing broadcasts from the TV antenna or content from an HDMI-connected device.
The researchers also discovered country-specific differences when users streamed the free ad-supported TV channel provided by Samsung or LG platforms. Such user activities were uploaded when the TV was operating in the US but not in the UK.
By recording user activity even when it’s coming from connected laptops, smart TVs might capture sensitive data, says Vekaria. For example, it might record if people are browsing for baby products or other personal items.
Customers can opt out of such tracking for Samsung and LG TVs. But the process requires customers to either enable or disable between six and 11 different options in the TV settings.
“This is the sort of privacy-intrusive technology that should require people to opt into sharing their data with clear language explaining exactly what they’re agreeing to, not baked into initial setup agreements that people tend to speed through,” says Thorin Klosowski at the Electronic Frontier Foundation, a digital privacy non-profit based in California.
i genuinely do not understand how TVs are so corrupt and greedy. You just display pixels, that’s it! The entire purpose is to convert 1s and 0s to pretty color
If you have a smart device, someone is doing this with it. Best options to reduce their ability to access your devices: smart TV’s - don’t connect them to the internet unless you’re updating the firmware. Use a streaming stick for streaming services, and then your privacy violations are minimized to the streaming stick that doesn’t have a mic, or camera. Some controllers do have a mic, it’s only a problem with who is making the tech. Other smart devices like fridge, microwave, oven, washer, etc, just never connect them to the internet, they likely will work fine their entire life without a network connection. Personal smart devices such as smart phones, remove google, and apple. Neither can truly be trusted, however apple does have a track record of keeping their snooping to themselves for what that’s worth. For robots, they will likely need a network connection, I recommend supporting home automation projects that will allow us to replace the OS on our robot vacuums, and food delivery devices with one that connects to a home based server that doesn’t need an internet connection. But never, ever, trust a smart device that is within hearing, seeing, or is touching you. It is a monitoring device, and it is being used that way by anyone with enough power.
mine would be getting only choppy static more than anything. where i live there is only sattelite available and it costs more than cable
Do not connect your Smart TVs to network people, seriously. Just a bad idea. Use a media center PC or some other device that allows you to stream content, and make sure the TV itself is just a big monitor, nothing more.
You hear that? It’s a whisper… It’s a multinational multibillion dollar class action lawsuit coming after Samsung and LG. WTF!
The question now is, even if I don’t connect the TV to Internet, what TV brand should I buy? Currently I have LG, but no way I’m supporting that even without Internet connection.
Jokes on them tho, they lack common understanding.
I watch a video about someone modding a shitbox and they think i can afford this new spyker sports car or any other 80k e car.
Obviously that shit is a swing and a miss. You want to give me advertising that suits me? Start by advertising stickers about cars because that’s something i could afford…not something i would buy tho.
Hmmm
“how to diy replace stolen catalytic converter”
“96 Ford esprit strange smell and noise in roof”
Youtube: buy this $90 grand all terrain thingy on credit!
I had to update my LG recently and it had to get approval for all sorts of weird shit. Oddly enough, it let me continue using just about everything even after I denied all the very invasive checkboxes. I guess even they can’t deny use of your own tv if you reject the agreement lol
For future reference, you can update LG TVs via USB so you can avoid connecting it to a network.
Okay. So how do we turn it off!? I’ve read nothing in my Samsung manuals about this “feature” and here no instructions for turning it off.
No Internet for the device
They have been known to connect automatically to nearby compatible devices or unsecured wifi.
Just don’t hook it up to your wifi. Don’t use any of its included apps. If you must stream get a separate device to do it.
It still can connect to untrusted wifi access point (without password protection). So also try to go to: Settings Menu -> General & Privacy -> Terms & Privacy -> And there is a whole list of privacy setting. Try to find the option to: Do not agree with all. Or you need to manually disallow each privacy option… Good luck!
Question, what separate device is best and most privacy focused? I just imagine getting a firestick, google Chromecast, etc would also give away data?
There are some open-source systems for media PCs.
Kodi seems to me to be popular, though I don’t use a media PC myself.
You’ll need to have the technical knowledge to install it yourself.
Again your media PC (or HTPC) is still connected to a smart TV. And the problem is with the TV recording HDMI data. In fact, if you read correctly, the Smart TV does no record data from the built-in apps like Netflix.
I have a Samsung smart TV that is not connected to any networks, and every few days it will display a ‘detecting device’ loading screen when switching to my input that fails after 30 seconds or until I cancel it (canceling does not seem to impact its functioning)
I have no evidence but I strongly suspect this to be related to attempting to record and send device data to a remote server.
I have noticed this too, I have to press the ‘back’ button on the remote to get the computer output.
This is the correct answer. I actually disabled LG’s version of it when I first heard about it. A few months later it had been reactivated in an update, so I just factory reset it and connected an old laptop.
You can’t trust anyone — corporation or government — to protect or respect your privacy. Ever. If it’s not open source and E2EE, assume that a criminal is going to view and process it for profit.
No it is not the correct answer! The correct answer is to put the CEOs who perpetrate this criminal shit in prison for millions of counts of hacking and stalking!
Merely shrugging and implementing a technological workaround is not an appropriate response to someone perpetrating a felony against you!
The downvotes are because your “solution” is not based in the reality that the rest of us live in.
There are no downvotes, so I’m not sure what point you think you’re making.
Okay… Though I agree the system is run by criminals, I’m gonna continue protecting my data as best I can, and recommending everyone do the same, while you live in a magical fantasy land where we don’t live in capitalist plutocracies and the rule of law applies to everyone, equally!
You can go to Settings Menu -> General & Privacy -> Terms & Privacy -> And there is a whole list of privacy setting you automatically agreed with (which you didn’t). However, you should find an option for: Do not agree with all. Or you need to manually disallow each privacy option… Good luck!
I love my Samsung because I never gave it the wifi credentials.
Dumb TV is better. My PS5 can do everything I want and I already give all my metrics to them just playing it
Hello 8th person I’ve had to explain this to: they still connect to stuff. Even if you disable WiFi on the Samsung TV they can mesh network with other TVs in your neighborhood or with your phone (Samsung is particularly pushy about wanting you to install and connect your phone).
Ok I’ll look into this. I have not witnessed any evidence of this behavior. What frequency would this be meshed on? Any 2.4GHz and 5Ghz I would have already seen.
Disable internet.
You’ll have to insulate your home from any outside unsecured wifi and compatible devices to stop some of them from networking.
Since it can also connect to untrusted wifi access point (eg. without password). You need to live in a Faraday cage …
Okay. So how do we turn it off!?
This is probably not the reply you want, but as someone who (in the past 40+ years) has never owned a TV, I simply can’t refrain from asking: Have you considered simply not owning a TV?
Movies and television shows can be an excellent form of entertainment and a great source of educational materials. And this is the golden age of television. Sorry you’ve been missing out on that
“I keep overcooking my steak, any advice?”
“I haven’t had meat in 40 years, have you considered simply going vegetarian?”
Edit: FYI the key to cooking a good steak is salt, butter, and to flip it every 30 secs, until you’ve reached your preferred level of doneness. If you’re really trying to impress, and don’t care about a heart attack, you can also baste with butter in between each flip.
Now, learning how much time it takes for each different type of cut and the variations within, that mostly comes with experience.
I got an LG because despite how it looks, you can just refuse to agree to a bunch of their privacy agreements and be fine. It’s not perfect, but it’s a hell of a lot better than it would be otherwise, and miles ahead of Samsung’s lack of options.
I have come to realize this and have declined all the T&Cs except for like 3 that you just have to accept to make it function.
Yep, same. Works fine for me, I never wanted the features that disables.
Use Pi-hole and block their domains
Do you know where I can source the domains?
Pihole will log DNS requests. The requests come.from the TV. So when it pops up, Block it.
https://blocklistproject.github.io/Lists/ the Smart TV list under their beta lists.
I use nextdns on my network and there’s a filter there for smart tvs. Samsung seems to want to call home the most.
They’re getting smart to that and are starting to hard code server IPs, circumventing any DNS you have in place.
Joke’s on them. Their telemetry server is in another
castleVLAN.TV: mamma mia!
If there are open wifi networks near your TV that you can’t lockdown, you’ll want to confirm it your make/model is known to automatically connect to those, and then take whatever mitigation steps are justified for your own use case.
For example, if you have multiple TVs, maybe you can swap models around based on their capabilities and location, or look up the schematic for the TV and see if it’s easy to block it’s internal antennas.
Or maybe that seems like too much of a hassle and you just say fuck it, and don’t worry about it. Which is always an option, because given how much data already gets sucked up by surveillance capitalism, my evening TV viewing habits have to be some of the lowest value data points, as I already block ads and avoid all ad supported services.
You know that part of the manual that tells you to connect the TV to the Internet?
Don’t do that.
That sadly doesn’t work well enough. They will connect to things on their own.
That’s some underhanded bs. I didn’t know they started doing that. Damn.
Its real tricky to get into and overwrite some of the SoC processors and ARM chipsets, but pretty earlyon the hacker crowd was turning Samsungs Smart TVs dumb.
They’ve acrually got some great resistance to screen burn.
Yeah. My Samsung claws my firewall like a squirrel trapped in a box. It intensifies on certain hours of the day. I’m quite sure it also tries to send what devices are connected and filenames are in attached memory sticks. Maybe also some media file checksums.
Do your firewall rules allow you to block your tv’s telemetry, while allowing you to still use the internet on it? If so, would you mind sharing how you did it?
You should look into PiHole, if you’re half-savvy with computers. They should be able to block all the destinations smart TVs are trying to connect to
Very easy to circumvent
Pi hole won’t help.
Sinkholes can be negated by manufacturers using static, hardcoded dns addresses. Be careful and check traffic regularly.
And they do. My Philips TV didn’t even ask for DNS until hardcoded IPs for Netflix et al. timed out. And when it did, it asked Google, not my router.
This is why you need to do DNS hijacking to handle hardcoded DNS requests.
And those can be blocked and even redirected at the router level. Though not as simple as spinning up a pihole.
Actually simpler, if you have an Asus router. Just remember to disable its telemetry stuff…
… Sending telemetry to Asus about the TV sending telemetry to LG? Wtf is this timeline?
We are on the “let’s see how back corporate greed can get” simulation server.
Blocking telemetry would not include blocking 8.8.8.8 though.
my tv can barely play Netflix I doubt it’s taking pictures every second lol
Do they do that in EU too?
These are criminal violations of the Computer Fraud and Abuse Act. Jail the motherfucking felon CEOs!
But the supreme court ruled to save the conviction for the election.
Worse than that, they
havegave free speech to corporations, and now that includes doing nearly anything involving communication or spending money.On politics itself no less.
I’ll believe corporations are people the moment Texas executes ones.
So LG and Samsung likely have tons of illegal (copyright) content on their servers then? Ownership is 9/10ths of the law so they say. That’s gotta be exabytes
Most likely yes… And other privacy sensitive information like banking details, passwords and more.
I’m happy to see this, my wife and I were about to buy a smart TV. Now I’ll just get the dumb variant.
Now I’ll just get the dumb variant.
These don’t really exist on a consumer level anymore. What you’re looking for is called a commercial display, which is what’s used in businesses and hospitals.
Luckily they exist in smaller sizes still. I’m just getting a small tv for occasional use.
No, they still exist.
Ah, I stand corrected.
For example, it might record if people are browsing for baby products or other personal items.
Don’t mind baby products and dildos or whatever.
They could see bank activity and even login credentials when someone is temporarily displaying their own passwords.
This basically ignores all security measures regarding everything. Sensitive communication, company secrets and so on.
That’s fucking seriously huge. What the fuck?!
