this post was submitted on 27 Sep 2024
128 points (98.5% liked)

privacy

3059 readers
4 users here now

Big tech and governments are monitoring and recording your eating activities. c/Privacy provides tips and tricks to protect your privacy against global surveillance.

Partners:

founded 2 years ago
MODERATORS
 

There was another thread with a paywalled article, but here's the actual study that found that smart TVs use "automatic content recognition" to build an ad profile for you based on what's on your screen... including HDMI content streamed from a laptop, game console, etc. Yikes.

At a high level, ACR works by periodically capturing the content displayed on a TV’s screen and matching it against a content library to detect the content being viewed on the TV. It is essentially a Shazam-like technology for audio/video content on the smart TV [38]. ACR is implemented by all major smart TV manufacturers, including Samsung [9] and LG [55 ].

Our findings indicate that (1) ACR operates even when it is used as a “dumb” display via HDMI; (2) opt-out mecha- nisms stop ACR traffic; (3) ACR works differently in the UK as com- pared to the US.

So it seems like you're opted-in by default, but you can stop ACR traffic by simply configuring six different options on Samsung, or eleven different options on LG.

Oh, and this doesn't seem to happen when you're using native streaming apps like Netflix or Disney+, because hey, they wouldn't want to infringe on those companies' rights by spying on them, right?

top 31 comments
sorted by: hot top controversial new old
[–] [email protected] 37 points 2 months ago (1 children)

Table 1 describes the settings that you need to configure on LG and Samsung TVs to stop ACR behavior.

[–] [email protected] 17 points 2 months ago* (last edited 2 months ago) (1 children)

Those shouldn't exist at all, and if they have to, the settings should be expressly asked about as part of the initial setup, not buried in a menu that nobody goes to unless they're specifically looking for the options.

[–] [email protected] 12 points 2 months ago

Or scattered across many menus in this case

[–] [email protected] 24 points 2 months ago (1 children)

This why I go out of my way to manually block all traffic from my televisions to my router.

[–] P1nkman 16 points 2 months ago (4 children)

I just don't connect it to the network.

[–] [email protected] 12 points 2 months ago (1 children)

It’s what most of us do, sure. This is more on the off-chance there’s a software update is required for fixing a design problem with a product. (Had to with an older smart television) So theres a lot of people who already have theirs connected but don’t realize it’s even an easy option, router-side.

[–] [email protected] 2 points 2 months ago

not sure about others, but my samsung can update from an usb drive.

[–] [email protected] 7 points 2 months ago (1 children)

What happens when there's an open Wi-Fi connection close enough for the smart TV to connect to?

[–] P1nkman 2 points 2 months ago (1 children)

No idea. My closest neighbour is 250 m/820 feet away, so not something I need to think about.

[–] tomkatt 9 points 2 months ago (1 children)

You’d be surprised. I have one neighbor across the street and my next closest is a quarter mile up the road. I still see multiple Wi-Fi signals to connect to, 2.4GHz wifi can travel way farther than you might think.

Best to let it have an IP but block WAN access so it can’t leave the home network. This also keeps the TV from complaining about not being connected.

[–] [email protected] 4 points 2 months ago (1 children)

There's probably lots of situations in anything but rural environments where open Wi-Fi networks are either already available, or highly likely to be. Dorms, apartments, anything like that becomes a mess.

[–] tomkatt 5 points 2 months ago (1 children)

Yeah. I’m in the rurals and at any given time can see between 5 and a dozen networks. Years back when I was apartment living, there was a ridiculous number of networks in range, couldn’t even give you a count.

If you’re curious and have an android phone or tablet, check out WifiAnalyzer. It gives a graphical view of nearby Wi-Fi networks, channels they’re on, signal strength, and so on.

[–] [email protected] 0 points 2 months ago (1 children)

Your not that rural if your seeing that many wifi networks.

[–] tomkatt 1 points 2 months ago* (last edited 2 months ago)

Okay. I live in a town with a population barely over 2000 people, the paved road ends at my house and continues on as dirt roads, I'm surrounded by miles of empty lots of wild growth with a few houses interspersed here and there, and I have one direct neighbor across the street with the next two closest neighbors being a quarter mile up the road.

I guess I don't understand your definition of rural then. Or you don't understand just how far wifi signals can travel when there are no obstructions, or that people can have multiple network SSIDs in their home (hell, I have three, one for 2.4 GHz, one for 5 GHz, and then a separate 5 GHz for a work network). Rural doesn't mean tech illiterate.


Edit - and to be clear, most of the signals I see are probably too weak to be usable due to attenuation, but I can pick them up all the same via Wifi Analyzer. How many networks I see is dependent on the device used. Currently my mini-PC only sees my networks, then a Roku somewhere (probably neighbors across the street) and another single network at low strength, but it varies.

I used to easily see dozens or more networks in the city if sniffing for them. Your PC's wifi won't list all of them, just the strongest signals and there will still be many because city life is saturated that way.

[–] [email protected] 2 points 2 months ago (1 children)

I just block at firewall since I need lan access to control the tv with automation.

[–] P1nkman 1 points 2 months ago

Control the tv with automations? Now in curious; what automations would you set up on a tv?

[–] [email protected] 1 points 2 months ago (1 children)
[–] P1nkman 2 points 2 months ago (1 children)

Get a Google TV. Sure, they father days, but at least you don't connect the TV online, which also sends screenshots of what you're watching to the producer...

[–] [email protected] 1 points 2 months ago

I have a Google TV.

[–] [email protected] 20 points 2 months ago (1 children)

Time for a lawsuit.

Since the presence of a TV in your house is a commercial benefit for the companies who make them, AND you do not actually have control over them, it is clear that the 'sales contract' was fraudulent and part of a bad-faith act on the manufacturers' part.

So I say a class-action lawsuit is in order: Each person who bought (say) an LG TV gets back 100% of their purchase price, plus some reimbursement for being spied on - probably a per-month amount. Then LG has to pay a punitive fee on top of their payouts to customers.

I know that everyone is screaming "that will never work!" and "They'll go bankrupt!" I don't care - SOMETHING has to change to remind these evil fuckers that they need our business, or the abuse will just ramp up.

Bankrupt them all. Tear down the entire industry. Tear down the entire economy and start again from scratch if that's what it takes.

If they can't be reined in legally, then it will happen illegally - and probably violently.

[–] [email protected] 2 points 2 months ago

Yeah I feel that way sometimes too. They won't even go bankrupt, they'll just have to settle for less line go up.

[–] [email protected] 9 points 2 months ago

Shit like this is why my smart tv has never been given internet access.

The software on my Samsung is so fucked that if I physically switch HDMI connections between inputs, it puts up a screen saying "switching source" despite my new source already being visible on the screen for 3-5 seconds before the tv claims to switch it. One of these days it will piss me off enough to softmod it, but right now I'm too stubborn to spend a day reading how and taking the time to do it.

[–] TommySoda 7 points 2 months ago

That's why my TV doesn't have internet access. I just bought a cheap laptop and plugged it in. It's probably cheaper and runs software better than the cheap ass hardware they put into TVs.

[–] [email protected] 4 points 2 months ago (3 children)

Lot of people saying they don't give internet access to their TVs.

Fine, but that doesn't work for cord-cutters who opted out of cable to go with streaming. And if you keep your TV away from internet but have a cable box, it will be doing all the tracking in this paper (and worse) then sending it to the cable provider.

So short of sticking with DVD/Bluray (unconnected) or over-the-air broadcast TV, there's no way to stop from getting tracked.

The paper also lists domains where the data is being sent. You could always try blocking the destination addresses at the router level.

[–] [email protected] 7 points 2 months ago

how about cutting the cord, making the tv dumb and just your own foss software? like some hdmi stick or tv box with kodi etc...

better than just blocking some domains for an overall scammy device.

[–] [email protected] 3 points 2 months ago

AFAICT, keeping the TV offline (i.e. not connected to any wifi) and plugging in a laptop/Chromecast/etc. via HDMI would eliminate both sides of the problem. You can still use streaming services on the laptop, but the TV would be unable to phone home.

There's always the yar har option as well, which is also effectively implemented with a laptop.

[–] [email protected] 1 points 2 months ago

And the domains would require maintenance. When new ones are added or changed or whatever.

This should be illegal, though. One can dream.

[–] [email protected] 2 points 2 months ago (1 children)

I find this difficult to read. What would have been useful is a per country/state and manufacturer overview that shows where I have to worry about what with whom. Nevertheless this is very alarming and a good reminder to never connect your TV to the internet.

[–] [email protected] 2 points 2 months ago (1 children)

Yeah, someone should definitely do that. I think this is written from the perspective of a security researcher communicating with others in the security world about a discovery they made, so it's a) dense to read, and b) not thorough as a consumer guide.

Hopefully someone follows up with a resource like you describe.

[–] [email protected] 2 points 2 months ago

Yeah fair enough we’re not really the target audience and the main message came through anyway.

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago)