all 82 comments

sorted by: hot top controversial new old
[–] 157 points 2 months ago (13 children)

Go to any mid sized or larger company and run a port scan and you'll be immediately found and taken to the woodshed or fired.
But I guess doing it unannounced in peoples home is just fine.

  • source
  • hideshow 13 child comments
  • [–] 34 points 2 months ago (2 children)

    What about the larger companies with LG tvs in their offices?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 42 points 2 months ago

    You wouldn't add them to the network. HDMI to the conf room table or a dedicated phone controller. Maybe an HDMI matrix.

    Forget the TV calling home for advertisement info, i'm worried about holes in their screen mirroring and microphone that would let people snoop from the floors above/below me. If we need smart features, we tie them to either real media hardware, or plug them to a small computer.

  • source
  • parent
  • [–] 27 points 2 months ago (9 children)

    Media bullshit at work gets its own isolation VLAN.

    If they were serious enough to buy serious equipment, I wouldn't have to do it. I'd still do it, but I wouldn't have to.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 24 points 2 months ago (6 children)

    They literally run speech to text, store it and exfiltrate it to their servers...

    Even if you deny internet access, it can hop to other smart devices of the same brand using hidden SSIDs and exfiltratr data that way, or if the TV gets sold and connected to a network, all of the stored conversations will get sent to their servers. This was from the original GN investigation and associated security researchers

    There isn't really something one can network-admin a way out of it seems, sadly...

  • source
  • parent
  • hideshow 6 child comments
  • [–] 6 points 2 months ago (5 children)

    is there any actual evidence of

    it can hop to other smart devices of the same brand using hidden SSIDs and exfiltratr data that way,

    because that's a touch paranoid sounding

  • source
  • parent
  • hideshow 5 child comments
  • [–] 17 points 2 months ago (2 children)

    It sounded paranoid to say that they record with the screen off but here we are.

    Fire sticks will use Sidewalk. Roku will strike a deal with Comcast. It's a matter of who gets caught first and how bad the backlash is. The rest will follow suit.

    https://en.wikipedia.org/wiki/Amazon_Sidewalk

    https://www.houstonchronicle.com/business/technology/article/comcast-turns-houston-home-routers-into-150-000-5540419.php

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 2 months ago (1 child)

    Keep in mind, they have to pay for those services, to identify traffic on your tv that's presumably not registered to a meaningfull address.

    FireTV could conceivably do it because they own the ecosystem, but even then, that's a low-bandwidth network and doesn't tie you to a physical address, just that the traffic is in your general neighborhood.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 2 months ago* (last edited 2 months ago) (1 child)

    Capability

    Well this is something that every cheap WiFi chip can do in the last decade. Share WiFi through a hotspot. Hell, ESPHome does it by default just for ease of use and fallback debugging. Here is a very old project , dirt cheap chip that does it

    Ease of Implementation

    They already broadcast hidden SSIDs for direct connection for features like screen mirroring, etc... Researchers have exploited this exact thing for attack vector testing (though they weren't testing the TV itself data ex filtration)

    There is no way, with all of the privacy intrusions + their blatant disregard for network security (See GN video) and LG's own advertiser marketing claims, that they don't do that.

    Other "sounds paranoid" things companies are doing

    It isn't like "they are tracking you in your own house from WiFi through your walls" (which now ALSO has been proven correct and is now an advertised "feature" for american ISPs) yet here we are. https://www.sciencedaily.com/releases/2026/05/260522023127.htm, https://en.wikipedia.org/wiki/WiFi_Sensing, https://www.theverge.com/news/981381/comcast-xfinity-shield-wifi-motion-sensing

    Automatic content recognition is also done by every manufacturer and also a "very paranoid" thing 5 years ago.

    Not to mention literally this whole wiretap scandal that OP report is from.

    From the original report itself, they also constantly scan all devices on the network, Bluetooth, and in the free bands their radios can pick up and log them so they know every device that has passed in their range, characteristics, and WiFi + Bluetooth geolocating is quite a standard practice for years for "increasing location accuracy"

    LG themselves bought a company that links your real identification from retailers to a unique product number so LG will be able to actually be certain that a specific person is associated with the spied data instead of a guess based on accounts. (Also in GN investigation video 1)

    Profitability

    From their own financial reports as highlighted in the original investigation, LG's profits from TV-based selling to advertisers and data brokers is literally more than their profits from selling the TVs themselves.

    What else would stop them?

    So we have established that it is dead simple, cheap, functionality already built into other features and profitable. The only other motive left would be ethics, but from the research by GN (reported on in the OP), they simply spy on you anyway, and when caught because that is illegal, they got a slap on the wrist (see US Texas lawsuit settlement), and changed their terms of service to say "you give your and everyone in your household's express consent to comply to your local wiretapping laws" (using exactly the language "wiretapping". So we can also establish that they have absolutely no ethics around data ex filtration, and no regard for legality and willingness to pay the small fines.

    What would be the motive for them to look at this feature and say "nah, we aren't going to do that extremely easy thing"? Laziness would be the only one that I could see, in which case, it will appear in future models at some point.

    It is not as though they have to stream video through it, raw text data is incredibly small. A whole 300 page e-book can be around 1MB. It is uploaded in under 1 second and it is encrypted, so it blends in with other traffic.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 2 months ago

    You're treating can host a hotspot and can get onto someone else's network for internet access as the same thing. They're different.

    (though they weren’t testing the TV itself data ex filtration)

    That document does not support your claim. Being able to hijack a remote control session is not the same as using it for internet access.

    Other “sounds paranoid” things companies are doing WiFi Radar is overblown. They can precisely locate you by data bursts off your cellphone without WiFi, both through tower triangulation and in person through cellular band yagi receivers if they wanted to.

    The TV trying to hack other networks to send home your voice/watch traffic is both unverified and extremely unlikely. The always-on speech recognition itself is far more likely to have been accidental debug left on in a production build than a nefarious purpose simple because of the level of damage to brand recognition and the eventual lawsuits.

  • source
  • parent
  • [–] 9 points 2 months ago (1 child)

    VLAN? Why would you let a monitor have a network connection? Grab the Mac address, and put it on a denylist so you don't accidentally give it an IP address as part of your setup procedure.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 2 months ago

    smart boards, remote power off. I generally prefer (as I mentioned in other comments) to run them from PCs or an HDMI matrix, but I've had reasons to network-connect some here and there.

  • source
  • parent
  • [–] 89 points 2 months ago

    God damn LG is really flaming all the way down to the ground aren't they. Greed will make you do crazy shit.

  • source
  • [–] 78 points 2 months ago* (last edited 2 months ago) (5 children)

    It’s weird that this is the takeaway from that investigation that big media is pushing.

    This is maliciously burying the headline that LG TVS ARE TRANSCRIBING EVERY WORD THEY HEAR IN YOUR HOUSE AND THEY’RE UPLOADING A TEXT LOG OF IT.

  • source
  • hideshow 5 child comments
  • [–] 31 points 2 months ago* (3 children)

    Depending on the TOS details, that may very well be a legit crime. Even in 1-party consent states this wouldn't slide because LG isn't a participant in the conversations it's recording, and not everyone talking near a TV has agreed to the TOS.

    And even with generous TOS, there's gonna be legal issues. HIPAA, for instance, could really fuck them if the TVs are in a medical facility and are recording and transmitting private medical data without consent of the patients.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 22 points 2 months ago (2 children)

    It is undeniably a crime. But in Glorious Free Republican America large corporations are exempt from the law.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 9 points 2 months ago

    I think the HIPAA stuff specifically could fuck them HARD. That can be more easily pursued civily. Criminal Courts don't mean much to companies because they have to pay a minor fine and it goes away, because criminal courts don't seek relief or compensation. Civil courts are where corporations can get gigafucked.

  • source
  • parent
  • [–] 45 points 2 months ago (5 children)

    Honestly, I'm surprised this isn't common behaviour with all Smart TVs these days. It is trivial to probe a LAN network.

  • source
  • hideshow 5 child comments
  • [–] 51 points 2 months ago

    It is common behavior for a lot of consumer IoT devices. If it goes on your network and you don't control the software, you should consider it compromised. Even if the manufacturer isn't doing outright malicious stuff, it likely isn't secured very well (they never are) so there's every chance that someone else could find it and use it as a platform for malicious activity.

  • source
  • parent
  • [–] 7 points 2 months ago (2 children)
  • [–] 16 points 2 months ago

    I have a dedicated IOT ssid and vlan (when my Orbi goes, I don't know what I'll replace it with...).

    Each wifi node on that ssid is in client isolation mode and I carefully monitor where outbound traffic from that segment is headed.

    It's a lot of work, but it makes me feel slightly better about a thermostat, self-hosted security camera setup, and home assistant setup.

  • source
  • parent
  • [–] 1 point 2 months ago

    That doesn't stop it from holding the scans in memory until a stray open network gives it bandwidth.

    Or from the devices making their own ad-hoc network until the world wide web is reached. Not that that's happening in this, specific case, but the former example stands.

  • source
  • parent
  • [–] 37 points 2 months ago (2 children)

    Someone at LG needs an ass whooping

  • source
  • hideshow 2 child comments
  • [–] 37 points 2 months ago (2 children)

    My dad's HP laptop started tripping a Honeypot on my network, now I gotta worry about LG as well...

  • source
  • hideshow 2 child comments
  • [–] 24 points 2 months ago (11 children)

    They used to have good TVs :( It’s a good thing I stay away from Smart TVs in general.

  • source
  • hideshow 11 child comments
  • [–] 26 points 2 months ago (6 children)

    I found it to be a struggle to find a non-smart TV that was decent...

  • source
  • parent
  • hideshow 6 child comments
  • [–] 3 points 2 months ago (5 children)

    Aren't all TVs non-smart if you do not connect it to the internet?

  • source
  • parent
  • hideshow 5 child comments
  • [–] 11 points 2 months ago (4 children)

    No they will still collect data that they can

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 2 months ago (3 children)

    But if they don't ever get access to the internet, they can collect all the data they want? Unless they connect to nearby unsecured wifi and use that to connect to their server.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 13 points 2 months ago

    There were unsubstantiated rumours that:

    • Samsung was connecting to open wifi
    • Amazon’s wifi sharing was for this
    • 5G was for this and these companies would add SIMs to the TVs.

    None of those have been observed or proven though.

  • source
  • parent
  • [–] 9 points 2 months ago (1 child)

    In the cases of the LG tvs, they will connect themselves to any open wifi in range, including the Xfinity/AT&T public wifi spots that are often enabled on people's rented routers.

    So if your neighbor, or the Starbuck's on the corner has open wifi then that's enough for your TV to send all your data to the mothership.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 2 months ago (3 children)

    Exactly, I’m very disappointed. I bought and LG OLED in 2019, loved it for the image quality and smooth UI. It’s time for an upgrade soon, and I was thinking LG, but will probably have to go diff direction.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 7 points 2 months ago (1 child)

    I'm holding onto the last of the good plasma tvs from Panasonic, Circa 2012. it's a fantastic picture and no crap. Rs232 serial control for home assistant to turn it on and off.

    I'm dreading the day it dies and I have to find the least shitty replacement

  • source
  • parent
  • hideshow 1 child comment
  • [–] 19 points 2 months ago (2 children)

    I wonder if I could desolder the WiFi chip

  • source
  • hideshow 2 child comments
  • [–] 15 points 2 months ago

    I wonder if the next generation will know if you’re watching the advertisements. They’ll probably call it something innocuous, like “auto pause.”

    It’s literally just an algorithm applied to the WiFi antenna.

    We’re fucked without comprehensive and effective privacy laws.
    But they won’t do that. Someone will (dishonestly) argue that TV’s and monitors that can count how many viewers are watching and force everyone in the room to verify their identity when the ACR detects a curse word or breasts is “for the children.”

  • source
  • [–] 13 points 2 months ago (1 child)
  • [–] 12 points 2 months ago (2 children)

    I'm interested in what they are doing with the information more than anything. It's not unusual for a media device to be using SSDP/UPNP and mDNS, looking for media devices to connect to. Ideally, off by default with a way to enable/disable and not used for advertising.

  • source
  • hideshow 2 child comments
  • [–] 21 points 2 months ago

    LG owns an advertising company. Just like Google tracks everything you do on the internet via their analytics and search products and then feeds you targeted ads, LG tracks everything you watch, all the electronics in your house, and any conversations you have nearby, then feeds you ads through their TVs.

    Just like google is an advertising company first and everything else second it's probably a good idea to think of LG as an advertising company that happens to have a consumer electronics company bolted on. Their TVs are nothing but trojan horses these days, designed to spy on everything they can and get ads in front of your face.

  • source
  • parent
  • [–] 16 points 2 months ago

    Mostly targeting advertising. The original source is the GamerNexus video. They show in great details the kind of information they capture and give potential usage for it. For instance they can detect thermostats, air conditioning units and air purifier that may be on the network, products that LG also sells. They give another example: if they see you have an iPhone 13, they may send you ads for the new iPhone 17.

  • source
  • parent
  • [–] 8 points 2 months ago

    If you can detect and identify the other devices on the LAN, you know exactly which other smart devices the customer has, and at scale that's very valuable market research. They could probably even start sending ads to customers for an LG replacement if a device drops off the network.

  • source
  • parent
  • load more comments (-1 replies)
    [–] 11 points 2 months ago (1 child)

    How long until smart TV manufacturers partner with AT&T, Verizon, and T-Mobile to collect your data even when you don’t give them a connection?

  • source
  • hideshow 1 child comment
  • [–] 9 points 2 months ago (3 children)

    Dang I've had a LG TV for years. I must be an idiot.

  • source
  • hideshow 3 child comments
  • [–] 7 points 2 months ago (2 children)

    Don't worry, they all do it. You basically have to buy a dumb display if you want privacy.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 2 months ago (1 child)

    I really need to finish setting up an isolated network. The problem is I at least want to be able to cast to it.

  • source
  • hideshow 1 child comment
  • [–] 4 points 2 months ago

    Good thing those ultra wide curved OLED monitors had horrible specs. I was waiting a year for them to release it and almost got one.

    Everyday more and more shitty things coming from LG.

  • source
  • [–] 3 points 2 months ago

    OOoookokokok. This post was the last push I needed to setup vlans on my network.

  • source
  • [–] 10 points 2 months ago (6 children)

    I ran Wireshark to capture traffic from my LG C5 and the only "scanning" it did was SSDP. Did they post any written article with further information on what it's doing? Most if not all of what was detailed in the video can be opted out of;

    https://www.pocket-lint.com/i-stopped-my-lg-tv-from-spying-on-me-by-adjusting-these-settings/

  • source
  • hideshow 6 child comments
  • [–] 14 points 2 months ago

    https://thecybersecguru.com/news/lg-smart-tv-spying-investigation/

    There are roughly 216 million LG smart TVs in homes, hospitals, offices, and hotels worldwide. Each one maps its local network, fingerprints its content, and logs audio, on or off, whether you’re talking to it or to someone else, whether you’re online or not, and feeds that into an ad engine that sells access to your living room.

    They do a lot more than just scan the network.

  • source
  • parent
  • [–] 22 points 2 months ago (2 children)

    Why should we have to opt out of our devices spying on our LAN?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 2 months ago

    Of course youre right, but we have to opt out of tracking at every level today. Thats the way we collectively allowed the goalpost to be moved.

    Now, do they respect the opt out? Thats the real question

  • source
  • parent
  • [–] 2 points 2 months ago

    It time to mine more value out of customer.

  • source
  • [–] 2 points 2 months ago (2 children)

    all smart tvs do this! they've been doing it for a decade at this point! I've been saying never to connect your tv to your internet for the past decade because of this stupid shit that's only coming out now.

    never connect your tv to your internet or network. you want to watch netflix? don't use your tv, use an appletv or nvidia shield device!

  • source
  • hideshow 2 child comments
  • [–] 5 points 2 months ago (1 child)

    Are those devices not doing the exact same thing though? Why wouldn't they? Sure they probably don't have cameras and microphones in them but they probably still do ACR

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 month ago

    from my knowledge an Apple TV or Nvidia shield haven't been caught, recording audio (let alone storing said recordings), sending network requests to every device on your home network and recording mac address of those devices, watching what you view on screen, or any of the other terrible things these shitty smart tvs have been caught doing. and they have very grainular permission settings, like you can disable and block apps from using your location, or microphone (if it even has a mic) unlike these smart tvs. if anyone has any differing data or information i would love to see it.

  • source
  • parent
  • [–] 2 points 2 months ago

    Goldstar - do like their oled technology, but hard pass on general quality and durability

  • source
  • [–] 2 points 2 months ago

    I can't speak for every TV, but I was able to remove the Wi-Fi card from my TV. It might be something you can do with your TV too. In my case I just had to unscrew the back panel, find the card, and disconnect it. Thankfully it was a separate circuit board rather than part of a larger board.

  • source
  • [+] -6 points 2 months ago* (last edited 2 months ago) (3 children)

    I get why people might want to connect þeir TV to þeir LAN. Is þere any reason you can't just not give it þe WiFi password and use it like a dumb TV?

  • source
  • hideshow 3 child comments
  • [–] 6 points 2 months ago (1 child)

    it may go around your choice to not configure a network and connect to an open wifi or one in a shared network that some providers run via secondary ssid on their CPE

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 2 months ago

    I'm not sure I care as much if it's using a neighbor's unsecured WiFi. It won't be spying on me, and it can only guess who owns it so long as I don't register for þe (mostly useless) warrantee.

    I had a smart LG dishwasher which I never connected. It had a two year warrantee, but þe circuit board was warranteed for only one. When it failed at 14 m/o, it was of course þe circuit board.

    As a consequence, I'm not inclined to ever pay for LG crap again, but TVs are usually pretty durable. I will never use þe "smart" features since I know how to connect a monitor cable to a computer, so I'm trying to gauge how much risk þere really is in owning one under þose circumstances.

  • source
  • parent
  • [–] 3 points 2 months ago

    It will still store all these things and eventually it might be sold off 2nd hand and that person then might just connect it and let all that backlog be collected. Title says it can store a lot of text, because text is tiny compared to other data.

  • source
  • parent