@MarioNawfal: Researchers spent 500 hours and $70,000 and found LG TVs logging plain text transcripts in standby, mapping every devic…

Researchers spent 500 hours and $70,000 and found LG TVs logging plain text transcripts in standby, mapping every device in the house, and feeding it to LG’s ad arm

Unplug the internet and it saves the files until you plug back in.

LG says its TVs don’t record ambient conversations.

The evidence begs to differ.

216 million of these are sitting in living rooms.

Where are the regulators?

Writer: Daniel https://x.com/Braiinsforge/status/2097341871412384069/video/1…

LG TVs log plaintext transcripts and map devices even when off, per a $70,000 investigation.

Investigation Findings: Constant Surveillance

Security researchers conducted a 500-hour, $70,000 investigation into LG smart TVs. They discovered the TVs are capable of acting as surveillance devices due to built-in advertising functions. Key findings include:

• Constant Monitoring: Even when the screen appears off and the TV is disconnected from the internet, the built-in microphone and camera continue to record. The researchers successfully captured clear audio of conversations.
• Data Storage and Exfiltration: Data is stored locally and can be accessed later. In their test, after re-establishing a network connection, the researchers exfiltrated recordings made while the device was offline.
• Network Scanning: The TVs crawl the user’s entire network, discovering dozens of unrelated devices. This included the researchers’ smartwatches and smartphones. This capability aligns with LG’s advertising claim of knowing about 363 million addressable companion devices in the US, despite claiming only 216 million smart TVs sold globally.
• Deep Network Fingerprinting: Using tools like Wireshark, the team found the TVs collect extensive data natively, including:
  • IP address and geolocation
  • Names and signal strengths of all nearby Wi-Fi networks
  • Channel numbers of neighboring networks
  • Internal IP addresses and details of other devices on the local network (even if not connected to the TV).

The collected data was so invasive that it could not be fully shown in the video.

The Role of Automatic Content Recognition (ACR)

The core surveillance feature is Automatic Content Recognition (ACR). This technology captures screenshots and audio snippets from the TV, converting them into digital fingerprints to identify viewing habits. ACR functions even when the TV is used solely as a monitor.

In LG’s own words, ACR data allows them to know who is in the LG home, what devices they have, what content is consumed on the screen, and how to extend influence to mobile devices.

LG Ad Solutions and Data Monetization

The collected data is handled by LG Ad Solutions, a private company owned by LG. The company’s president, Sergey Mata, stated, “We own the screen… We have first-party ACR data… We understand all content that touches the screen.”

The investigation notes that LG Ad Solutions, led by Mata, sells this data to partners. The system is designed to create detailed profiles of households for targeted advertising, potentially generating more profit than hardware sales alone.

Vulnerabilities and Broader Risks

Beyond the intended ACR features, the researchers discovered additional vulnerabilities in the LG G5 TV model, which are currently under responsible disclosure.

• Remote Code Execution: A critical vulnerability allows attackers to manipulate TV behavior.
• Network Proxy and Lateral Movement: A compromised LG TV could be used as a proxy to tunnel network traffic, aiding in lateral movement across a network. The video draws a parallel to the “Fancy Bear” attacks on routers.
• Ubiquitous Threat: The surveillance risks extend beyond home use. LG displays are common in hospitals, doctor’s offices, hotel rooms, Airbnb rentals, corporate boardrooms, and university locker rooms, posing a threat to sensitive conversations in those settings.

The “Disconnect Ethernet” Fallacy

Researchers addressed a common misconception: simply unplugging the Ethernet cable may not be sufficient to stop surveillance. Smart TVs can automatically connect to open community Wi-Fi networks broadcast by internet service providers (like Xfinity or AT&T hotspots) in the local area.

Legal Hurdles and Advocacy

The investigation highlights legal barriers preventing users from mitigating these risks.

• Terms of Service: A 40,000+ word agreement governs the TV’s operation. The researchers found that LG later amended sections related to class-action lawsuits after their first video was published.
• DMCA Section 1201: The researchers argue that bypassing the digital locks on the TV to remove surveillance software could constitute a violation of the Digital Millennium Copyright Act, potentially making such protective actions illegal.

Consequently, the research team has been in Washington D.C. advocating for new consumer protection legislation, working with entities like the Louis Rossmann team.

Support and Further Investigation

The investigation was funded through a community fundraising campaign at store.gamersnexus.net. The campaign offers various support tiers with rewards such as:

• High-resolution Blu-ray copies of the investigation.
• USB drives containing digital copies.
• Exclusive behind-the-scenes content and Q&A sessions.
• New Cyberpunk Skeleton Foil T-shirt and Polygon Shard V2 T-shirt designs.

The team states that these funds are essential to cover the costs of hardware, production, and to pursue further investigations into other smart home brands.

Source: https://www.youtube.com/watch?v=6IFVTcM28KA